Data protection

Data protection information

in accordance with the EU General Data Protection Regulation (GDPR)

Economic Development Agency of the Nahe-Glan Association of Municipalities mbH (Wifög)

Data protection information in accordance with the EU General Data Protection Regulation (GDPR)

Status: March 2021

The following information provides you with an overview of the processing of your personal data by us and your rights under data protection law. Which data is processed in detail and how it is used depends largely on the services agreed or used in each case.

1. who is responsible for data processing and who can I contact

The responsible body is:

Economic Development Agency of the Nahe-Glan Association of Municipalities mbH (Wifög)

Management

Bahnhofstr. 4
55566 Bad Sobernheim

Tel.: 06751 81 1160
Fax: 06751 81 1050

E-mail: touristinfo(at)vg-nahe-glan(dot)de
www.ferienregion-nahe-glan.de

2. which sources and data we use

The use of our homepages is generally possible without providing personal data. For individual services, we process personal data that we receive from our customers as part of our business relationship. In addition, we process - to the extent necessary for the provision of our services - personal data that we have legitimately received from other third parties (e.g. Feratel) for the execution of orders, the fulfillment of contracts or on the basis of your consent.

The services we provide for which we collect personal data include

- Advice after contact requests
- Sending of brochures after prior request
- Sale of literature / maps after prior order
- Preparation of offers after booking request
- Booking processing of accommodation, arrangements, city tours and trolley tours, canoe tours, barefoot path tickets
- Creation of vouchers after prior order

Relevant personal data can be

Name, address, contact details (telephone, e-mail) and date of birth.

When using services from the categories listed below, further (personal) data may be collected, processed and stored in addition to the aforementioned data:

Notification of events for marketing by Wifög (description of the event, event location, date, time, duration, price, inclusive services, information telephone number, contact details of organizer)

Our range of services relates to our homepages www.ferienregion-nahe-glan.de

and is also provided at our office in Meisenheim, Untergasse 16, 55590 Meisenheim, telephone 06751/81-1173.

3. what we process your data for (purpose of processing) and on what legal basis

For technical reasons, the following data, which your Internet browser transmits to us or to our web provider, is recorded (so-called server log files):

- Browser type and version
- Operating system used
- Website from which you are visiting us (referrer URL)
- Website you are visiting
- Date and time of your access
- Your Internet Protocol (IP) address.

We process personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG):

a. For the performance of contractual obligations (Article 6(1)(b) GDPR)

The processing of personal data only takes place in the provision of services in the context of the execution of our contracts with our customers or for the implementation of pre-contractual measures that take place at your request.

The purposes of data processing are primarily based on the services (see point 2) and may include, among other things, advice, support and the execution of transactions.

b. In the context of the balancing of interests (Article 6(1)(f) GDPR)

Where necessary, we process data beyond the actual fulfillment of the contract and to protect our legitimate interests or those of third parties: Examples

Advertising or market and opinion research, unless you have objected to the use of your data

Assertion of legal claims and defense in legal disputes

Measures for business management and further development of services and products

c. Based on your consent (Article 6(1)(a) GDPR)

If you have given us your consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent. Any consent given can be withdrawn at any time. This also applies to the revocation of declarations of consent given to us before May 25, 2018. Please note that the revocation only takes effect for the future. Processing that took place before the withdrawal is not affected. You can request a status overview of the consents you have given us at any time.

d. Due to legal requirements (Article 6 paragraph 1 c GDPR)

As a destination management organization, we are also subject to legal obligations.

4. who receives my data

Within Wifög, access to your data is granted to those who need it to fulfill our contractual and legal obligations. Service providers and vicarious agents commissioned by us may also receive data for these purposes if they comply with our written instructions under data protection law. These are essentially companies from the categories listed below.

- Feratel for the operation of the Deskline 3.0 information and reservation system
- Cooperating accommodation providers in Deskline 3.0
- IT service provider for our central server, IT architecture and IT security
- IT service provider for the hosting of our websites
- Business and tax consultancy
- Legal advice in disputes

With regard to the transfer of data to recipients outside our offices, please note that we undertake to maintain confidentiality about all customer-related facts and evaluations of which we become aware. Other data recipients may be those bodies for which you have given your consent to the transfer of data.

5. if data is transferred to a third country

Data is not transferred to countries outside the EU.

6. how long my data will be stored

We process and store your personal data as long as it is necessary for the fulfillment of our contractual and legal obligations.
If the data is no longer required for the fulfillment of contractual or legal obligations, it is regularly deleted, unless its temporary further processing is necessary for the following purposes:
Fulfillment of retention periods under commercial and tax law

7 What data protection rights do I have?

Every customer has the right of access under Article 15 GDPR, the right to rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to object under Article 21 GDPR and the right to data portability under Article 20 GDPR. The restrictions under Sections 34 and 35 BDSG apply to the right of access and the right to erasure. In addition, there is a right of appeal to a data protection supervisory authority (Article 77 GDPR in conjunction with Section 19 BDSG).

You can withdraw your consent to the processing of personal data at any time. This also applies to the revocation of declarations of consent given to us before the EU General Data Protection Regulation came into force, i.e. before May 25, 2018. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected.

8. is there an obligation for me to provide data

As part of our business relationship, you must provide the personal data that is necessary for the establishment and execution of a business relationship or service and the fulfillment of the associated contractual obligations or that we are legally obliged to collect. Without this data, we will generally have to refuse to conclude or execute the order or will not be able to perform an existing contract and may have to terminate it.

9. to what extent there is automated decision-making (including profiling)

In principle, we do not use fully automated decision-making in accordance with Article 22 GDPR to establish and conduct the business relationship. Should we use this procedure, we will inform you of this separately if this is required by law.

10. does "profiling" take place

We process your data partially automatically with the aim of evaluating certain personal aspects (profiling). We use profiling, for example:
We use evaluation tools to provide you with targeted information and advice on products, offers and services. These enable needs-based communication and advertising, including communication and advertising, including market and opinion research.

11 Technical precautions

Taking into account the state of the art and the purposes of the processing, Wifög takes appropriate technical and organizational measures in accordance with Art. 25 GDPR, which are designed to effectively implement the data protection principles. To protect the security of your personal data during transmission, we use SSL encryption.

Information about your right to object in accordance with Article 21 GDPR

1. individual right of objection

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(e) GDPR and Article 6(1)(f) GDPR. This also applies to profiling based on this provision within the meaning of Article 4(4) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

2. right to object to the processing of data for advertising purposes

In individual cases, we process your personal data for the purpose of direct advertising. You have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. This also applies to profiling insofar as it is associated with such direct advertising.

If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

The objection can be made informally and should either be made by telephone on 06751 81 1163 or by e-mail to touristinfo(at)vg-nahe-glan(dot)de or alternatively in person at the Wifög offices (Tourist Information Bad Sobernheim and Tourist Information Meisenheim).

Third party content & links

Our partners (tourism stakeholders) hereby agree that the information they provide may be published on the internet and in Wifög's media. However, Wifög is under no obligation to publish this information. We cannot effectively prevent third parties from using the published data and expressly exclude any liability, in particular with regard to copyrights. By submitting your data, you guarantee that the transmitted texts and images are free of third-party rights and indemnify the operators of the website www.ferienregion-nahe-glan.de against any third-party claims.

When providing links, you warrant that no content relevant under criminal law is presented on linked sites or that no other third-party rights (in particular industrial property rights and competition regulations) are infringed. In particular, the dissemination of unconstitutional content is prohibited. You indemnify the operators of www.ferienregion-nahe-glan.de against any third-party claims in the event of a breach of the aforementioned provisions.

You agree that all data collected by you at www.ferienregion-nahe-glan.de will be stored and processed in accordance with the Federal Data Protection Act (BDSG), the Telecommunications Act (TKG), the Teleservices Data Protection Act (TDSG) and the Telecommunications Data Protection Ordinance, insofar as this is necessary for the execution of the contractual relationship. In addition, the data will be treated confidentially and in accordance with the statutory provisions. You have the right to request information about your stored data at any time. This regulation is subject to the law of the Federal Republic of Germany. Download the Telemedia Act (2007).

Integration of third-party services and content

It may happen that third-party content, such as videos from YouTube, maps from Google Maps, RSS feeds or graphics from other websites are integrated into this online offering. This always presupposes that the providers of this content (hereinafter referred to as "third-party providers") are aware of the user's IP address. This is because without the IP address, they would not be able to send the content to the respective user's browser. The IP address is therefore required to display this content. We endeavor to only use content whose respective providers only use the IP address to deliver the content. However, we have no influence on whether the third-party providers store the IP address, e.g. for statistical purposes. Insofar as we are aware of this, we will inform users accordingly.

Google Maps Plugin

We use a plugin of the internet service Google Maps on our website. The operator of Google Maps is Google Inc, based in the USA, CA 94043, 1600 Amphitheatre Parkway, Mountain View. When you use Google Maps on our website, information about the use of this website and your IP address is transmitted to a Google server in the USA and also stored on this server. We have no knowledge of the exact content of the data transmitted, nor of its use by Google. In this context, the company denies the connection of the data with information from other Google services and the collection of personal data. However, Google may transmit the information to third parties. If you deactivate Javascript in your browser, you will prevent Google Maps from running. However, you will then also not be able to use the map display on our website. By using our website, you consent to the described collection and processing of information by Google Inc. You can find out more about the data protection provisions and terms of use for Google Maps here: www.google.com/intl/de_de/help/terms_maps.html.

Facebook plugin

You will find plugins from the social network Facebook on our website. Its provider is Facebook Inc. based in the USA, California 94025, 1 Hacker Way, Menlo Park. The Facebook logo or the "Like" button on our site identifies the Facebook plugins for you. Please also see the overview of Facebook plugins at https://developers.facebook.com/docs/plugins/ . When you visit our website, we establish a direct connection to the Facebook server via the plugin. You are then connected to it via your browser. This provides Facebook with the information that you have visited our website with your IP address. By clicking on the Facebook "Like button", you link content from our website to your profile on Facebook. For Facebook, the visit to our site can be assigned to your user account. We have no knowledge of the nature of the content that is transmitted to Facebook and how Facebook uses it. You can find more information on data collection and data use in the Facebook privacy policy, which you can find at https://www.facebook.com/policy.php. You can prevent your visit to our site from being associated with your Facebook profile by simply logging out of your Facebook account beforehand.

Instagram plugin

Functions of the Instagram service may be integrated into our online offering. These functions are offered by Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA. This may include, for example, content such as images, videos or texts and buttons with which users can express their liking of the content and subscribe to the author and our posts. It is also possible to redistribute such data in other social networks. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram. You can prevent your visit to our site from being associated with your Instagram profile by simply logging out of your Instagram account beforehand. You can find more information on this in Instagram's privacy policy: http://instagram.com/about/legal/privacy/

Use of cookies

Some of the Internet pages use so-called cookies. These are used to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit.

Cookies

Cookies are small files that make it possible to store specific, device-related information on the user's access device (PC, smartphone, etc.). On the one hand, they serve the user-friendliness of websites and thus the users (e.g. storage of login data). On the other hand, they are used to collect statistical data on website usage and to analyze it for the purpose of improving the offer. Users can influence the use of cookies. Most browsers have an option to restrict or completely prevent the storage of cookies. However, it should be noted that the use and in particular the ease of use are restricted without cookies.

You can manage many online advertising cookies from companies via the US site https://youradchoices.com/ or the EU site https://www.youronlinechoices.com/uk/your-ad-choices.

Google Analytics

This website uses Google Analytics, a web analysis service of Google Inc ("Google"). Google Analytics uses so-called "cookies", text files which are stored on the user's computer and which enable the use of the website to be analyzed. The information generated by the cookie about the use of this website by the user is usually transmitted to a Google server in the USA and stored there.

However, if IP anonymization is activated on this website, the IP address of Google users within member states of the European Union or in other signatory states to the Agreement on the European Economic Area will be shortened beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. IP anonymization is active on this website. On behalf of the operator of this website, Google will use this information to evaluate the use of the website by users, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. Users may refuse the use of cookies by selecting the appropriate settings on their browser, however please note that if you do this you may not be able to use the full functionality of this website. Users can also prevent Google from collecting the data generated by the cookie and relating to their use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

As an alternative to the browser add-on or within browsers on mobile devices, click on this link: Deactivate Google Analytics to prevent Google Analytics from collecting data within this website in the future. An opt-out cookie will be stored on your device. If you delete your cookies, you must click this link again.

Google Adwords

The data controller has integrated Google AdWords on this website. Google AdWords is an Internet advertising service that allows advertisers to place ads both in Google's search engine results and in the Google advertising network. Google AdWords allows an advertiser to specify certain keywords in advance, which are used to display an ad in Google's search engine results only when the user uses the search engine to retrieve a keyword-relevant search result. In the Google advertising network, the ads are distributed on relevant websites using an automatic algorithm and taking into account the previously defined keywords.

The operating company of the Google AdWords services is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The purpose of Google AdWords is to advertise our website by displaying interest-relevant advertising on the websites of third-party companies and in the search engine results of the Google search engine and by displaying third-party advertising on our website.

If a data subject reaches our website via a Google ad, a so-called conversion cookie is stored on the data subject's IT system by Google. What cookies are has already been explained above. A conversion cookie loses its validity after thirty days and is not used to identify the data subject. If the cookie has not yet expired, the conversion cookie is used to track whether certain sub-pages, such as the shopping cart from an online store system, have been accessed on our website. The conversion cookie enables both us and Google to track whether a data subject who has reached our website via an AdWords ad has generated sales, i.e. completed or canceled a purchase.

The data and information collected through the use of the conversion cookie is used by Google to compile visit statistics for our website. These visit statistics are in turn used by us to determine the total number of users who were referred to us via AdWords ads, i.e. to determine the success or failure of the respective AdWords ad and to optimize our AdWords ads for the future. Neither our company nor other Google AdWords advertisers receive information from Google that could be used to identify the data subject.

The conversion cookie is used to store personal information, such as the websites visited by the data subject. Each time our website is visited, personal data, including the IP address of the Internet connection used by the data subject, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical process to third parties.

The data subject may, as stated above, prevent the setting of cookies through our website at any time by means of a corresponding adjustment of the web browser used and thus permanently deny the setting of cookies. Such a setting of the Internet browser used would also prevent Google from placing a conversion cookie on the data subject's IT system. In addition, a cookie already set by Google AdWords can be deleted at any time via the Internet browser or other software programs.

Furthermore, the data subject has the option of objecting to interest-based advertising by Google. To do this, the data subject must call up the link www.google.de/settings/ads from each of the Internet browsers they use and make the desired settings there.

Further information and the applicable data protection provisions of Google may be retrieved under https://policies.google.com/privacy?hl=de&gl=de.

Youtube

The data controller has integrated YouTube components on this website. YouTube is an Internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment on them, also free of charge. YouTube allows the publication of all types of videos, which is why complete film and television programs as well as music videos, trailers or videos made by users themselves can be accessed via the Internet portal.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Each time one of the individual pages of this website is accessed, which is operated by the controller and on which a YouTube component (YouTube video) has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information about YouTube can be found at https://www.youtube.com/intl/de/about/. During the course of this technical procedure, YouTube and Google gain knowledge of what specific sub-page of our website was visited by the data subject.

If the data subject is logged in to YouTube at the same time, YouTube recognizes which specific subpage of our website the data subject is visiting when a subpage containing a YouTube video is accessed. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.

YouTube and Google always receive information via the YouTube component that the data subject has visited our website if the data subject is logged in to YouTube at the same time as accessing our website; this takes place regardless of whether the data subject clicks on a YouTube video or not. If the data subject does not want this information to be transmitted to YouTube and Google, they can prevent the transmission by logging out of their YouTube account before accessing our website.

The data protection provisions published by YouTube, which can be accessed at https://policies.google.com/privacy?hl=de&gl=de, provide information about the collection, processing and use of personal data by YouTube and Google.

Changes to our privacy policy

We reserve the right to amend this privacy policy from time to time so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

Questions for the data protection officer

If you have any questions about data protection, please send us an e-mail or contact our data protection officer directly:

Veldenzer, Andreas

Phone: 06751/81-2700

E-mail: andreas.veldenzer@vg-nahe-glan.de