Data protection

under EU Data Protection Regulation (DSGVO)

North Eifel Tourism GmbH

Data protection under EU Data Protection Regulation (DSGVO)

Stand: May 2018

With the following information we give you an overview of the processing of your personal data by us and your rights under the data protection law. Which data are processed and used in detail in what way depends largely on the particular agreed or utilized services.

1. Who is responsible for data processing and to who should I contact

Responsible party is:

North Eifel Tourismus GmbH

Managing directors

Bahnhofstr. 13

53925 Kall

Phone: 02441. 99457-0

Fax: 02441. 99457-29

E-Mail: info(at)nordeifel-tourismus(dot)de

www.nordeifel-tourismus.de

2. What sources and data we use

The use of our websites is possible in principle, without an indication of personal information data. For individual services we process personal information that we receive in our business relationship with our customers. We also work with - as far as for the provision of our services is necessary - personal data that we have received from other third parties (e.g.  Feratel company), with permission to execute orders, the fulfillment of contracts, or under a license granted by your consent.

Among the services we provide, for which we collect personal information include:

  1. Advise  on contact queries
  2. Sending  brochure material on request in advance
  3. Sales of literature / maps by order in advance
  4. Offers for booking requests
  5. Booking process of accommodation, package deals and trekking campsites
  6. Issuing  guest passes for participating overnight accommodation or for a reservation of multi-day package deals
  7. Drawing up gift vouchers by order in advance
  8. Sending  newsletters after previous registration, consent and confirmation (double opt-in procedure)
  9. Registration for the press sector
  10. Appointments for the Tourist Advisor  Days

Relevant information about you may be:

Name, address, contact details (phone, email) and date of birth. 

When using services from the categories listed below, in addition to the above data, further (personal) data can be additionally processed and saved: 

Notification of events for marketing by the North Eifel Tourismus GmbH (description of the event, location, date, time, duration, price, included services, info-phone number, contact organizer) 

Rental of pedelecs / trekking bicycles at the Gemünd National Park Gate (name of the overnight accommodation business, national identity card number) 

Booking bus tickets for the North Eifel archeology tour 

(Asking about hard of hearing/deaf guests in order to use the amplifier in the accompanying bus tour, names of passengers concerned) 

Our range of services related to our homepages www.nordeifel-tourismus.de. www.erlebnis-region.de, www.radundwanderbahnhoefe-eifel.de, www.eifel-hoehen-route.de, www.die-wasserburgen-route.de, www.roemerkanal-wanderweg.de, www.tourismuswerkstatt-eifel.de, www.nordeifel-mordeifel.de, www.gaestecard.nordeifeltourismus.de

and is also related  to  our office in Kall and the Gemünd National Park Gate, Kurhausstr. 6, 53937 Schleiden, Tel.: 02444.2011,  E-Mail: nationalparktor(at)nordeifel-tourismus(dot)de

3. Why we process your data (purpose of the processing) and on what legal basis

For technical reasons including the following data  transmitted by your Internet browser to us at our web-provider, (so-called server log files) will be saved:

  • Browser type and version 
  • Operating system used
  • Website through which you access us (referrer URL) 
  • Web page you access 
  • date and time of your access
  • Your Internet Protocol (IP) address.

We process personal data in accordance with the provisions of the EU Data Protection Regulation (DSGVO) and the Federal Data Protection Act (DSGVO):

a. To meet contractual obligations (Article 6, paragraph 1 b DSGVO)

The processing of personal data is carried out only in providing services in the framework of the implementation of our contracts with our customers or to conduct pre-contractual measures that take place on their request,.

The purpose of the data processing is based primarily on services (see point 2) and may include, among others, advice, support and execution of transactions. 

b. As part of the consideration of interests (Article 6, paragraph 1 f DSGVO)

Where necessary, we process data on the actual fulfilling of the contract and in order for us protect the legitimate interests of third parties: Examples

  • For advertising or marketing research,  as far as you have not objected to the use of your data
  • Assert a legal claim and defense in legal disputes
  • Measures for business management and further development of services and products

c. Because of your consent (Article 6, paragraph 1 a DSGVO)

As far as we have been granted consent to the processing of personal data for specific purposes, the legality of processing is given on the basis of consent. Given consent can always be retracted. This also applies for the retraction of consent forms that we have been granted before May 25 2018. Please note that the retraction becomes effective only for the future. Processing that occurred before the retraction is not affected. You are entitled to a status overview of the consent given by you at any time from us on request

d. Due to legal requirements (Article 6, paragraph 1 c DSGVO)

In addition, we are subject to a Destination Management Organization legal obligations.

4. Who receives my data

Within the Nordeifel Tourismus GmbH those companies which obtain access to your data, must fulfill our contractual and legal obligations. In addition, service providers and agents commissioned by us  are allowed to receive data for a specific data if they adhere to  our written data protection directives . These are essential companies listed in the following categories.

  • Company Feratel for the operation of the information and reservation system Deskline 3.0
  • Cooperating accommodation establishments in Deskline 3.0
  • IT service provider for our central server, computer architecture and EDV protection
  • IT service providers for hosting our homepages
  • Economic and Tax accountancy
  • Legal advice in disputes
  • Mobility service for authorized collection of guest pass
  • Landschaftsverband Rheinland (LVR) and commissioned mobility services for the implementation of bus services for the North Eifel Archeology Tour

With regard to the transfer of data to recipients outside of our office it  is important to note that we are committed to secrecy concerning any customer-related facts and evaluations of which we gain access to.

Further data receivers may be those positions for which you have given their consent for data transmission.

5. When data is sent to a non EU member country

The transmission of data to countries outside the EU will not take place.

6. How long is my data saved

We process and save your personal data, as long as it is necessary for the fulfillment of our contractual and legal obligations. 

If the data is no longer necessary for the fulfillment of contractual or legal obligations, it is deleted regularly, unless temporary processing of it is necessary for the following purposes:

  • Fulfillment of tax and commercial law retention periods 

7. Which privacy rights I have

Every customer has the right to information under Article 15 DSGVO, the right to correct under Article 16 DSGVO, the right to delete Article 17 DSGVO, the right to limitation of processing in accordance with Article 18 DSGVO, a right of appeal under Article 21 DSGVO and the right to data transfer under Article 20 DSGVO. By right of access and the deletion of the legal restrictions this is according to §§ 34 and 35 BDSG. Moreover, there is a right of complaint to a data protection Authority (Rule 77 DSGVO i. V. m § 19 Act).

A given consent for the processing of personal data can be retracted at any time by contacting us. This also applies for the retraction of consent forms that we have been granted prior to the application of the EU Data Protection Regulation, before 25 May 2018. Please note that the retraction becomes effective only for the future. Processing that occurred before the retraction are not affected.

8. Am I obliged to provide information

As part of our business relationship, you must provide the personal information required for the establishment and implementation of a business relationship or service and the fulfillment of contractual obligations related to the above, as required from us by law. Without such data, we must usually refuse to enter into, or implement the contract unable to implement an existing contract, making it necessary to terminate the contract.

9. To what extent there is an automated decisive factor (including profiling)

In support and implementation of the business relationship, we generally do not use fully automated decisive factor in accordance with Article 22 DSGVO. If we use this method, you will be informed separately concerning, if it is prescribed by law.

10. Does "profiling" take place

We process your data partially automated with the aim of certain personal aspects for evaluation (profiling). We use profiling, for example:

  • We use evaluation services to inform you about products, offers, services and advice, according to your personal needs. This enables demand-oriented communication and marketing communication, including communication and advertising; including market and opinion research.

11. Technical measures

In consideration of the technological position and the purposes of processing, under Article 25 DSGVO the Nordeifel Tourismus GmbH  takes appropriate technical and organizational measures that are designed to implement the data protection principles effectively. To ensure security of your personal information is protected during transmission we use SSL encryption.

Information about your right to appeal under Article 21 DSGVO

1. Individual case-related right to appeal

You have the right, for reasons arising from their specific situation, any time to appeal against the processing of personal information concerning you, by virtue of Article 6, paragraph 1 e DSGVO and Article 6, paragraph 1 DSGVO done. This also applies to a system based on this provision profiling within reason concerning Article 4, paragraph 4 DSGVO. 

Should you make an appeal we will no longer process your personal data, unless we can prove compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the establishment, exercise or in defense of legal claims. 

2. Right to appeal against the processing of data for advertising purposes 

In some cases, we process your personal data, to take part in direct advertising.  You have the right, at any time, to appeal against the process of using this particular personal data for the purposes of such advertising. This also applies to profiling, insofar as it relates to direct advertising. 

Should you appeal against the processing for direct marketing purposes, we will no longer process your personal data for these purposes. 

The appeal can be informal  and should be  made by either calling 02441 99457-0 or by e-mail to datenschutz(at)nordeifel-tourismus(dot)de, or alternatively in person at the office of the North Eifel Tourismus GmbH or the Gemünd National Park Gate. 

Third Party Content & Links

Our partners (tourism operators) hereby agree that the information they provide is allowed to be published on the Internet and in the media the North Eifel Tourismus GmbH. However, there is no obligation to publish on the part of the Nordeifel Tourismus GmbH. We cannot effectively prevent the use of the published data by third parties, and exclude liability explicitly, especially with regard to copyright. By submitting your data, you agree that the texts and images provided are free of rights from any third party claims and provide the operators of the web pages www.nordeifel-tourismus.de from any third party claims. 

When specifying links you warrant that the linked sites present no criminally relevant content or  that other third party rights (especially business  property rights and competition rules) are violated. It is especially prohibited to spread unconstitutional content. This makes the operators of www.nordeifel-tourismus.de free from all claims of third parties in violation of the above provisions. 

You hereby agree that all data downloaded on www.nordeifel-tourismus.de ,in accordance to the Federal Data Protection Act (BDSG), the Telecommunications Act (TKG), the Teleservices Data Protection Act (TDSG) and the Telecommunications Data Protection Regulation can be stored and further processed  to the extent that is necessary for the implementation of the contract. 

In addition, the data will be treated confidentially and in accordance with the statutory provisions. At any time you have the right to request information about your stored data. This provision is subject to the laws of the Federal Republic of Germany. Download the Telemedia Act (2007). 

 

Integration of services and third-party content and

It can happen that within this online offer third-party content  for example YouTube videos, maps from Google Maps, RSS feeds or images from other websites can be integrated. This is always the assumption that the content providers (hereinafter referred to as "third-party") are aware of the IP address of the user. Without the IP address, they cannot send the content to the browser of each user.  With this he IP address is required to view this content. We attempt only to use such content whose respective providers only use the IP address to deliver the content. However, we have no control over this, if the third-party saves the IP address, for example, for statistical purposes. The extent of our knowledge, we inform the users about this.

Google Maps Plugin

We use a plugin of the Internet service Google Maps on our website. The operators of Google Maps are Google Inc., based in the US, CA 94043, 1600 Amphitheater Parkway, Mountain View. By using Google Maps on our website, information is transmitted about the use of this website, and your IP address to a Google server in the US is also stored on this server. We are not aware of the exact content of the data, nor their use by Google. In this context the company denies the connection of the data with information from other Google services, and the collection of personal data. However, Google can provide the information to third parties. If you disable Javascript in your browser, you prevent the use of Google Maps. You can then no longer use the map display on our website. By using our Website you consent to the described saving and processing of information by Google Inc .. For more information on the privacy policy and terms of use for Google Maps can be found here: https://www.google.com/intl/de_de/help /terms_maps.html.

Facebook Plugin

You can find plugins of the social network Facebook on our website on our website. The provider is the Facebook Inc. It is based in the US, California 94025, 1 Hacker Way, Menlo Park. The Facebook logo or the "Like Button" ("Like" button) on our site characterize the Facebook plugin which is  recognisable for you. Please also not the overview of the Facebook plugin on developers.facebook.com/docs/plugins/.  When you visit our website, we provide direct connection via the Plugin to the Facebook servers. You are then connected via your browser to them. With this Facebook  is connected to the information  that you have visited our site with your IP address. By clicking on the Facebook "Like" button on our site you are linking to your profile on Facebook. For Facebook the visit to our site is assigned to your user account. We have no knowledge as to which type of content that is transmitted to Facebook and how Facebook uses this. To find out more information on the collection and use of data in the Facebook privacy statement go to de-de.facebook.com/policy.php. You can prevent the assignment of your visit on our site to  your Facebook profile by simply logging out of your Facebook account beforehand.  

 

 

 

Instagram Plugin

Within our online offer, functions of the Instagram service may be integrated. These functions are offered by Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA. These may include content such as images, videos, text and buttons that allow users to express their interest in the content and to subscribe to the author and our articles. Furthermore, a further distribution of such data in other social networks is possible. If you are logged in to your Instagram account, you can link the content of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to our sites with your account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Instagram. You can prevent your visit to our site from being associated with your Instagram profile by simply logging out of your Instagram account beforehand. For more information, please refer to Instagram's privacy policy: http://instagram.com/about/legal/privacy/

 

Use of cookies

The websites partly make use of so-called cookies. These make our offersmore user-friendly , more effective and safer. Cookies are small text files that are downloaded on your computer and which your browser saves. Most of the cookies we use are so-called "session cookies". They are automatically deleted after your visit. Cookies on your computer do no harm and do not contain viruses.

Cookies

Cookies are small files that enable specific device related information to be saved on the user device (PC, smartphone, etc.). On the one side they serve the user-friendliness of websites and with this the users (e.g. storage of log data). On the other side they serve to save statistical data of the website use and to analyze them in order to improve the offers. Users can influence the use of cookies influence. Most browsers have an option of restricting or preventing the saving of cookies. However, it should be noted that the use and in particular the convenient use is restricted without cookies.

You can find many online ad cookies from companies on the American sites. http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/uk/your-ad-choices/. 

Google Analytics

This offer uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so called "Cookies", text files that are saved on the user's computer and allow the analysis of your use of the website by them. The information generated by the cookie about use of the website by users are usually transmitted to a Google server in the USA and saved there.

In the case of activation of IP anonymization on this website, the IP address of users of Google will be reduced within Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and reduced there. The IP-anonymization is active on this website. On behalf of the operator of this website Google will use this information to evaluate the use of the site by users,  to compile reports on website activity and furthermore to provide the website operator with reports on website and internet usage related services. 

As part of Google Analytics your IP address will not be merged with other Google data. Users can prevent the use of cookies by adjusting their browser software; this offer informs the users that they will not be able to use all features of this website to their full extent. Users can also prevent Google and the processing of these data by Google, generated also by the cookie and related to your use of the website (incl. Your IP address), by downloading and installing the following link browser plugin: http://tools.google.com/dlpage/gaoptout?hl=de.

As an alternative to the browser add-on or within browsers on mobile devices, click on this link: deactivate Google Analytics, to avoid detection by Google Analytics on this website in the future. Here an opt-out cookie is saved on your device. To delete your cookies, you must click this link again.

Google Adwords

The data controller has integrated Google AdWords on this website. Google AdWords is a service for Internet advertising that allows advertisers to access both displays in the search engine results of Google and the Google Network. Google AdWords allows an advertiser to set pre-determined keywords by which an advert will only be displayed in the search engine results of Google, when the user requests the search engine to show keyword-relevant search results. In the Google Network the ads using an automatic algorithm, and in accordance with predetermined keywords,  topics relevant on websites are distributed.

Operator of the services of Google AdWords is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA. Google AdWords

The purpose of Google AdWords is the application of our internet site through the display of interest relevant advertising on the websites of third party companies and in the search engine results of Google search engine and display of third-party advertising on our website.

Should a person be affected through a Google ad on our website, the affected person is saved on the information technology system by a so-called Google conversion cookie. What cookies are, has already been explained above. A conversion cookie loses its value after thirty days and is not used to identify the person concerned. Unless the cookie has not expired, the conversion cookie can track whether certain bases, such as the shopping trolley of an online shop system can be viewed on our website. Through the conversion cookie we cannot only verify that an affected person has passed through an AdWords ad onto our website, generating sales, but has also completed the buying process or  canceled it.

The data and information collected through the use of the conversion cookie used by Google to create visiting statistics for our website. These visiting statistics are in turn used by us to determine the total number of users that have been mediated by AdWords ads to us, to determine the success or failure of each AdWords ad and to optimize our AdWords ads for the future , Neither our company nor other advertisers from Google AdWords receive information from Google through  the person could be identified.

Through the conversion cookie personal information, for example the visit by the person concerned,  is saved on the web pages. Each time you visit our website, therefore, personal data, including the IP address of the Internet connection used by the data subject, is transferred to Google in the United States of America. This personal data is saved by Google in the United States of America. Google may share this personal data via the technical personal data process in certain circumstances with third parties.

The affected person prevent the use of cookies through our website, as shown above, at any time, by means of a corresponding adjustment of the Internet browser used and thus permanently oppose the use of cookies. These settings of the Internet browser used would also prevent Google to set a conversion cookie on the information technology system of the person concerned. In addition, a cookie already set by Google AdWords can be deleted at any time via the Internet browser or other software programs.

Furthermore, the person concerned has the possibility to appeal against interest-based ads by Google. For this the affected person has to contact everyone using the internet browser to use the link www.google.de/settings/ads and change the settings.

More information and the applicable data protection regulations of Google can be found on https://www.google.de/intl/de/policies/privacy/. 

Youtube

The  controller responsible for data has integrated components on this website YouTube. YouTube is a video sharing Web site that makes it possible for video publishers to upload all kinds of video clips free and also for other users to view, rate and comment free of charge. YouTube allows publication of all kinds of videos, which is why both complete films and television programmes, as well as music videos, trailers or self-made videos from users are available on the Internet portal.

Operator of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043 to 1351, United States.

Each time someone goes on one of the individual pages of this web, which is operated through the controller responsible for data processing, and on which a YouTube component (YouTube video) is integrated, the Internet browser of the information technology system of the person concerned,  automatically prompts downloading a presentation of YouTube component of YouTube through the respective YouTube Component . You can find more information on YouTube on https://www.youtube.com/yt/about/de/. As part of this technical process YouTube and Google have access to knowledge concerning which definite sub-site of our website is visited by the person concerned.

If the person is logged in at the same time on YouTube, YouTube recognizes the visit of a sub-site of our website that contains a YouTube video by the person concerned.  This information is saved by YouTube and Google and is associated with the particular YouTube account owner. 

YouTube and Google receive information through the YouTube component always when the person concerned visits our website, if the person is logged at the same time on YouTube as their visit; This takes place regardless of whether the person clicks on a YouTube video or not. If such transmission of this information to YouTube and Google by the data subject is not wanted, this can be prevented  by the person concerned by logging out of their YouTube account before using our website.

Published by YouTube privacy policy under https://www.google.de/intl/de/policies/privacy/ are available, provide information on the saving, processing and use of personal data by YouTube and Google.