Privacy | TI Boppard

1. General

1.1 Personal data (Art. 4 No. 1 GDPR)

The subject of data protection is personal data (hereinafter referred to as data). Personal data include all information relating to an identified or identifiable natural person. These data include, for example, the name, address, occupation, e-mail address, health status, income, marital status, genetic features, telephone number and if applicable also user data such as an IP address.

1.2 Controller (Art. 4 No. 7 GDPR)

The controller is the entity responsible for processing your personal data in the context of your use of this website, www.boppard-tourismus.de
(hereinafter referred to as website) is the Tourist Information Boppard / City of Boppard (hereinafter referred to as the operator or controller). The contact information is:

Tourist Information Boppard / Stadt Boppard,

Marktplatz 17,
D-56154 Boppard,

eMail: tourist@boppard.de
Phone: +49 6742 3888
Fax: +49 6742 81402

1.3 Data protection officer

The controller has commissioned an external data protection officer. The data protection officer can be reached by email to Edgar Scherer (edgar.scherer@boppard.de)

1.4 Opportunity to object

If you wish to object to the processing of your data by the operator in accordance with the provisions of this privacy policy in general or for individual measures, you may do so using the contact information provided in the imprint. Please note that in the event of such an objection, the use of this website and the request for services offered by it may in some circumstances be limited or even completely restricted.

2. Scope and purpose of the data processing, legal basis and provision of data

2.1 Accessing and use of the website

Each time the website is accessed; user data is transmitted via your web browser and stored in log files (server log files). This access data contains the following information:

Date and time of access

Name of the accessed website

IP address

Referrer URL (URL of origin, from which you arrived at the website)

Volume of data transmitted

Information about your browser

The legal admissibility of this data processing is based on Art. 6 (1) b) GDPR, according to which processing is lawful when it is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

Provision of your data is necessary to invoke the operator's website. Failure to provide data means that the website can no longer be invoked and the operator's services cannot be utilised.

The log files are analysed by the operator in anonymised form in order to continuing to improve the website and make it more user-friendly, to detect and rectify errors more quickly and to control server capacities. For example, the operator is able to determine the preferred times of access to the website and therefor provide appropriate amounts of data volume.

The legal admissibility of this data processing may also be based on Art. 6 (1) f) GDPR, according to which processing is lawful when it is necessary to safeguard the legitimate interests of the controller or a third party, so long as these interests are not overridden by the fundamental rights or freedoms of the data subject, which require the protection of personal data. The legitimate interest of the controller involves the provision of a website to convey information and offer services as well as the improvement of the websites performance.

The provision of data is neither required by law nor required for the performance of a contract. Failure to provide the data will result in you being unable to enter the operator’s website.

2.2 Contact forms and single-click e-mailing

This website contains a contact form if you wish to contact the operator. This form requires that you provide the following information:

Salutation

Last name

First name

Postal code

Address

E-Mail address

Message

In addition, you may voluntarily choose to provide the following information:

Telephone number

In the navigation bar, you have the option to contact the operator by clicking the respective field. This message automatically uses the e-mail address that is linked to the e-mail client you use. If you do not wish your e-mail address to be invoked in this way, you can change the settings in your e-mail program. The operator processes your data to communicate with you and to respond to your request.

The legal admissibility of this data processing is based on Art. 6 (1) b) GDPR, according to which processing is lawful when it is necessary for the performance of a contract to which the data subject is party or to take steps at the request of the data subject prior to entering into a contract.

Provision of data is conducted on your request.

Failure to provide the data means that you are unable to send a message to the operator.

2.3 Reservations and bookings

You may book various accommodations using this website. Booking requires you to provide the following information:

First name

Last name

Street name

Postcode

City

Telephone number

E-Mail address

Your data is used to process your reservation and are forwarded to the accommodation facility.

The lawfulness of this processing shall also comply with Art. 6 (1) lit. f of the GDPR, according to which processing shall be lawful if it is necessary to safeguard the legitimate interests of the controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject that require protection of personal data. The provision of a booking system for various organisers and third-party providers shall constitute legitimate interest. Failure to provide the data means that you cannot book a reservation.

2.4 Use of cookies

The operator uses cookies to collect and store data. Cookies are small data packets that typically consist of letters and numbers and that are stored on a browser when you visit certain websites. Cookies allow the website to recognise your browser as you re-enter the operator`s website, to track your surfing through various sections of a website and to identify on a re-entry. Cookies contain no data that identify you personally. However, the information about you stored by the operator may be attributed to the data obtained by and stored in the cookies.

Information that the operator obtains through the use of cookies may be used for the following purposes:

Recognition of the user's computer when they visit the website

Tracking the user's browsing activity on the website

Improving the user experience of the website

Analysis of the website use by the operator

Operating this website

Preventing fraud and improving the security of the website

Customising this website taking into consideration the needs of the user

Cookies do not damage your computer in any way. They do not contain viruses and also do not allow the operator to spy on you. There are two types of cookies. Temporary cookies are automatically deleted when closing your browser (session cookies). In contrast, permanent cookies have a maximum lifetime of up to 20 days. This type of cookie allows your computer to be recognised when you visit the website on a re-entry. The cookies allow the operator to track your use behaviour for the purposes listed above and to an appropriate extent. Cookies also allow you to optimally surf the operator's website. These data are collected by the operator only in anonymised form.

The legal admissibility of this data processing is based on Art. 6 (1) b) GDPR, according to which processing is lawful when it is necessary to perform a contract to which the data subject is party or to take steps at the request of the data subject prior to entering into a contract. The legal admissibility of this data processing may also be based on Art. 6 (1) f) GDPR, according to which processing is lawful when it is necessary to safeguard the legitimate interests of the controller or a third party, so long as these interests are not overridden by the fundamental rights or freedoms of the data subject, which require the protection of personal data. The legitimate interests of the controller involve the provision of a website that contains no errors and the opportunity to offer visitors the best user experience. Provision of your data is not prescribed by law. It is possible to visit the website without cookies. If you do not want the operator to recognise your computer, you can prevent the storage of cookies on your hard drives by selecting the option "do not accept cookies" on your browser settings. To find out specifically how to do this, please read the instructions provided by your browser manufacturer. If you choose to accept no cookies, this may limit the functionality of the website.

2.5 Google Analytics

The operator uses the web analysis service Google Analytics. This service uses cookies as described above to collect information about your operating system, browser, IP address, the previously accessed website and the date and time of your visit to the operator's website.

The data about the use of the website are generally transmitted to a Google server in the US and stored there. If IP- anonymisation is activated on the website, your IP address within Member States of the European Union or other Signatory States to the Agreement on the European Economic Area will be abbreviated in advance. Only in exceptional cases the full IP address will be transmitted to a Google server in the US and abbreviated there.

Google uses this information to analyse the use of the website, compile reports about website activity for the operator and offer additional serves relating to the use of the website and the internet. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. This use takes place in anonymous or pseudonymous form.

Google will not associate your IP address transmitted by your browser with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser software. However please note that if you do this you may not be able to use the full functionality of this website. The operator also points out that Google Analytics uses the extension code "anonymizelp" to ensure that IP addresses are collected in anonymous form (known as IP masking).

You can prevent data processing by Google Analytics by downloading and installing the plug-in available at https://tools.google.com/dlpage/gaoptout?hl=deexterner Link

Google Analytics uses the Double Click DART cookie. You can deactivate the DART cookies by downloading and installing the plug-in available at https://www.google.com/settings/ads/plugin?hl=deexterner Link.

You can find out more about Google Analytics on the Google website at http://www.google.com/intl/de/privacypolicy.html#informationexterner Link

The legal admissibility of this data processing is based on Art. (1) a) GDPR, according to which processing is lawful when the data subject has provided consent to the processing of their personal data for one or more purposes. Provision of your data is not prescribed by law.

2.6 Outdooractive tracking pixels

This website reproduces the contents of the website www.tourenplaner-rheinland-pfalz.deexterner Link. A tracking pixel is linked to this content; this pixel collects and processes data about access to this content. The operator of the website, Outdooractive GmbH & Co. KG, uses information collected in this way to determine access to this content (e.g. pop-ups, page views, actions, downloads). The results are provided to the operator to analyse. This allows the operator to determine the preferred contents of the www.tourenplaner-rheinland-pfalz.deexterner Link website. The tracking pixel does not collect or process any personal data.

2.7 Social plug-ins

The operator uses social plug-ins from various social networks (e.g. Facebook). You can use these plug-ins for example to share content or to recommend a product. Plug-ins are deactivated by default and therefore transmit no data to the respective social platform, if you did not activate the service. You may activate each plug-in by clicking on the appropriate button (known as the 2-click solution). Of course, plug-ins may be deactivated again with a click.

If you have activated a plug-in, your browser will form a direct connection to the server of the respective social platform as soon as you access the operator's website. The content of the plug-in is transmitted by from the social platform directly to your browser and integrated by it into the operator`s website.

Integration of the plug-in means that the social network receives the information that you have accessed the respective page of the operator. If you are logged in to the social network, the network can associate your visit to your account. If you interact with the plug-ins, the corresponding information is transmitted by your browser directly to the social network and stored there.

For more information about the purpose and scope of data collection and the further processing and use of the data by a social network and your rights in this regard as well as privacy options of the respective social network, please read the respective privacy policy for the respective social network.

If you do not want the social network to collect data about you via the operator's website, you must log out of this network prior to visiting the operator`s website or deactivate the social plug-ins.

Even if you do not have an account with the social network, websites with active social plug-ins can send data to these networks. When a plug-in is active, each visit of the website places a cookie with a unique identifier. Because your browser sends this these cookies without being asked, each time there is a connection with a network server, in principle the network can generate a profile about which websites the user associated with the identifier has visited. This means that it is also entirely possible that this identifier is also attributed to a person who subsequently registers for an account with that social network.

The operator uses the following plug-ins:

Facebook (offered by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304 USA)

Facebook's data privacy policy can be viewed here: https://www.facebook.com/about/privacy/your-info#public-infoexterner Link

Google+ My Business (offered by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA)

Google's data privacy policy can be viewed here:

https://www.google.de/intl/de/policies/privacy/externer Link

The legal admissibility of this data processing is based on Art. 6 (1) a) GDPR, according to which processing is lawful when the data subject has provided consent to the processing of their personal data for one or more purposes. Provision of your data is not prescribed by law nor required for the performance of a contract. Failure to provide the data will result in you being unable to use the social plugin.

2.8 YouTube

The controller embedded YouTube videos on the website. This service is operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. On the website, this service is used in the extended privacy mode. This means that website usage information (such as the date and time of the call, IP address, etc.) will be sent to Google servers in the US and stored, if you choose to play the YouTube video on the operator’s website. The data will be used by Google for the purposes of advertising, market research and / or tailor-made website design. The data can also be linked to your user Google user account, if you are logged in while visiting the operator’s website. If you do not wish so, you must log out before use. Google's terms of use and privacy policy apply.

The operator uses YouTube videos to provide videos on various topics related to the websites services. The legal admissibility of this processing is based on Article 6 (1) (f) of the GDPR, according to which processing is lawful if it is necessary to safeguard the legitimate interests of the controller or a third party and if not the interests or fundamental rights and freedoms of the persons concerned Persons who require the protection of personal data. The use of data for the purposes of making videos available for illustration constitutes a legitimate interest of the operator within the meaning of Article 6 (1) (f) of the GDPR.

The admissibility of Google's processing is based on Article 6 (1) (a) of the GDPR, according to which processing is permitted if you have given your consent to the processing of the personal data concerning you for one or more specific purposes. The processing of the data takes place for the purposes stated in the privacy policy and terms of use. The consent can be given at the usage of YouTube.

The provision of the data is neither required by law nor required for the performance of a contract. Failure to provide the data will result in you being unable to use the feature.

3. Period of retention

3.1 Access of the website

Your IP address is deleted or anonymised upon termination of use. Anonymisation means the IP address is altered so that it cannot or can only with a disproportionate investment of time, cost and labour be attributed to a particular or identified or identifiable natural person.

3.2 Contact forms and single-click e-mailing

Personal data processed during communication are deleted upon expiry of the statutory retention periods if the controller has no legitimate interest in further retention. In any event, data are continued to be stored only if they are truly necessary for the corresponding purpose. Personal data are anonymised as far as possible.

3.3 Reservations

Personal data processed for the purpose of booking reservations and the performance of a contract are deleted upon expiry of the statutory retention periods (in particular HGB (German commercial code) and AO (German tax code)) if the controller has no legitimate interest in further retention. In any event, data are continued to be stored only if they are truly necessary for the corresponding purpose. Personal data are anonymised as much as possible.

3.4 Use of cookies

Temporary cookies are automatically deleted when you close your browser (session cookies). In contrast, permanent cookies have a maximum lifetime of up to 20 days. These types of cookies allow your computer to be recognised on your next visit on the controller’s website.

3.5 Google Analytics

Personal data collected in the context of the use of tracking tools are deleted if the controller has no legitimate interest in further retention. In any event, data are continued to be stored only if they are truly necessary for the corresponding purpose. Personal data are anonymised as far as possible.

3.6 Outdooractive tracking pixels

Personal data processed in the context of the use of Outdooractive tracking tools are deleted if the controller has no legitimate interest in further retention. In any event, data are continued to be stored only if they are truly necessary for the corresponding purpose. Personal data are anonymised as far as possible.

3.7 Social plug-ins

Data are stored by the respective social networks. You can find further details in the data privacy statements and terms of use for the respective provider.

3.8 YouTube

The operator does not store personal data in the context of the use of YouTube. The personal data collected on YouTube will be deleted unless the operator has a legitimate interest in the further storage. In any case, only those data will be stored that is necessary for achieving the corresponding purpose. As far as possible, the personal data will be anonymised. The data is stored by Google according to its own privacy policy. For more information, see the Google Privacy Policy and Terms of Use.

4. Right to information, rectification, erasure, restriction, objection and data portability

4.1 Right of access (Art. 15 GDPR)

Upon request, the operator shall provide information as to whether your data is being processed. The operator endeavours to respond quickly to those requests.

4.2 Right to rectification (Art. 16 GDPR)

You have the right to request from the controller without undue delay the rectification of inaccurate personal data concerning you.

4.3 Right to erasure (Art. 17 GDPR)

You have the right to demand the erasure of personal data concerning you without undue delay from the controller and the controller has the obligation to erase personal data without undue delay where one of the grounds listed in Art. 17 (1) a)-f) applies.

4.4 Right to restriction of processing (Art. 18 GDPR)

You have the right to obtain from the controller restriction of processing where one of the conditions listed in Art. 18 (1) a)-d) applies.

4.5 Right to object (Art. 21 GDPR)

At any time, you have the right to object, on grounds relating to your particular situation, to the processing of the personal data concerning you, which is based on Art. 6 (1) e) or f), including profiling based on those provisions. The controller shall no longer process your personal data unless the controller demonstrates compelling legitimate grounds for the processing that override your interests, rights and freedoms or if processing is used for the establishment, exercise or defence of legal claims.

Where your personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.

Where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Art. 89 (externer Link1) GDPR, you have the right to object to processing of your personal data on grounds relating to your particular situation, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

Please use the contact address provided in the imprint for your message.

4.6 Right to data portability (Art. 20 GDPR)

You have the right to obtain and reuse the personal data transmitted to the controller for your own purposes across different services. Therefor you have the right to receive the personal data that you have provided to a controller, in a structured, commonly used and machine-readable format and you have the right to transmit these data to another controller without hindrance from the controller to which the personal data have been provided, so long as the processing is based on consent pursuant to Art. 6 (1) a) GDPR, Art. 9 (2) a) GDPR or on a contract pursuant to Art. 6 (1) b) GDPR and if the processing is carried out by automated means.

5. Revocation of consent

If you have provided consent to the processing of your personal data and revoke this consent, processing that has already taken place until the date of your revocation remains unaffected.

6. Right of appeal

You have the right to lodge an appeal with the competent supervisory authority at any time.

7. Recipients

Data obtained as a result of the access and use of this website and information provided as part of a contact you made are transmitted to the operator's server and stored there. Also, your data may be forwarded to the following categories of recipients:

Internal departments that are involved in processing your personal data (e.g. marketing department, customer service, reservations department)

Data processing services (e.g. data centres, IT service providers, providers of tracking tools, software providers)

Contractual partners of the operator (e.g. shipping providers, hotels, event organisers)

8. Links to third party sites

Visiting this website may display content that is linked with the website of a third party. The operator has no access to the cookies or other functionalities that are used by third-party websites and cannot control them. Such third-party sites are not subject to the data privacy conditions of the operator.