DATA PRIVACY STATEMENT
Last revised: March 2021
Koblenz-Touristik GmbH, Bahnhofplatz 7, 56068 Koblenz (hereinafter: "Koblenz-Touristik"), appreciates your visit to our website and your interest in our products and services. The protection of your personal data (hereinafter: "data") during your entire stay is an important concern for us and we want you to feel safe when visiting our website. Compliance with the statutory provisions on data protection is a matter of course for us.
In principle, it is possible to use our website without providing personal data. Below we explain whether and what information we collect on our websites during your visit and whether and how this is used.
This data privacy statement applies to the website operated by Koblenz-Touristik.
Koblenz-Touristik has effectively appointed a data protection officer at
3rd Mind Business Consulting GmbH
Langer Weg 60
If you have any questions regarding data protection, you can reach Mr Frank Giebel at: DSB-Service@3rd-mind.de
Please note that if you contact us by standard e-mail, the confidentiality of the information transmitted cannot be guaranteed, this is due to the (technical) nature of e-mail transmission. We therefore recommend that you send confidential information by letter post.
This is any information relating to an identified or identifiable natural person (hereinafter: "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
This basically means all direct or indirect information that leads to your identity. This includes, for example, details such as name, address, telephone number, e-mail address, account details, credit/debit card details, but also fingerprints, photos etc.
- PROCESSING PURPOSES AND LEGAL BASES
If you provide us with your data, the use by us is regularly based on the contract concluded with you or pre-contractual negotiations on the basis of Art. 6 (1) lit. b GDPR or on your voluntary consent in accordance with Art. 6 (1) lit. a GDPR, for example for processing your enquiries, using our web forms or similar.
When using web forms (e.g. for contact enquiries, registrations/bookings etc.), your consent is required for the transmission and processing of the information provided therein. The consent text is available for you directly under the respective form. Your enquiry is then transmitted to our systems in encrypted form and stored for the purpose of executing a contract or a request for information until the process is completed and/or for the duration of the business relationship. Longer storage takes place only if there is a legal obligation to retain data (e.g. from tax law).
The data you enter there yourself typically include:
- Your first and last name (for identification, reservation, registration etc.)
- Your postal address (for postal delivery of requested information material)
- Your e-mail address (for electronic contact/electronic reservation/registration)
- Your desired booking period, if necessary with information on the number of persons, number of children, programme wishes etc. (for coordination, reservation, safety equipment and preparation of offers)
- Your telephone number (for urgent coordination)
- Your request itself (free text)
The specific processing purposes, possibilities of revocation/objection as well as further (also participation) conditions are further specified in the texts below the respective forms, if applicable. Please note these instructions before submitting your data from the respective forms.
Automatically collected data when visiting our websites includes:
In log files ("server log files"), via search engines and/or forms, data are automatically collected when you use our websites, which your web browser/provider automatically transmits to our provider. When you visit our websites, our web servers temporarily store the following data by default:
- the web pages you visit on our site as well as the date, time and duration of your visit
- the type of browser you use, its version and the operating system you use
- the search engine used, if any
- the names of any files downloaded
- the (anonymised) IP address at the time of access
- the type of device used
- the website from which you visit us ("referrer URL").
Insofar as we evaluate this technical data, this is done anonymously and to protect our legitimate interests pursuant to Art. 6 (1) lit. f GDPR. These legitimate interests follow the purposes of ensuring a smooth connection of the website, ensuring a comfortable use of our websites, evaluating and improving the system security and stability as well as for further administrative purposes.
These data are not merged with other data sources. However, we reserve the right to check these data retrospectively if we become aware of concrete indications of illegal use.
If we offer a newsletter service on our website and you register for this, we require your e-mail address for delivery. You can provide further information on a voluntary basis. By sending the data you entered in the newsletter registration form, you agree that we may process these data exclusively for sending our newsletter to your e-mail address and documenting your consent to this. As a matter of principle, your data will not be passed on to third parties. The processing is based on Art. 6 (1) lit. a GDPR. After entering your e-mail address and sending it, you will first receive an automated e-mail containing a link that you are requested to click in order to receive the newsletter. In this way, we prevent misuse of your e-mail address and can ensure that you have actually registered yourself. We will not send any newsletter(s) to you without completing this so-called "double opt-in procedure".
You can withdraw your consent at any time: either via the same page as for registration (then click on "Unsubscribe") or by sending an informal declaration to the e-mail addresses listed under points 2, 3.
Competitions and online functions:
If we offer online competitions via our website, data from participants may be processed on the basis of voluntary participation in accordance with Art. 6 (1) lit. a GDPR for the duration of the competition and the sending of the prizes. After the end of the competitions, the data of the winners will be stored in accordance with the requirements of tax law, and the data of the non-winners will be deleted.
Data processing on the basis of Art. 6 para. 1 lit. f GDPR may also be necessary to the extent that our legitimate interest or that of a third party follows to establish, assert or defend legal claims in connection with the above-mentioned procedures.
We host our websites exclusively in data centres in Germany and the EU.
Your data will not be passed on, sold or otherwise transferred to third parties unless this would be necessary and permissible for the purpose of processing a contract or performing a service or you have expressly consented to this.
Furthermore, data are processed on our behalf on the basis of contracts in accordance with Art. 28 GDPR (order processing), e.g. for external services for the operation of our IT infrastructure.
In addition, data are processed and transmitted to state institutions and authorities entitled to receive information only within the framework of the relevant laws or if we have been obliged to do so by a court decision (see Art. 6 (1) lit. c GDPR).
Automated decision making/profiling or scoring does not take place.
The storage period of your data depends on the processing purposes (see Section 5) or the statutory retention/limitation and deletion periods. As a rule, they are stored for the duration of the business relationship with us. Longer (access-protected) storage takes place only in accordance with the relevant statutory retention obligations (e.g. for accounting and tax purposes) or for the exercise/defence of legal claims.
As far as your data are no longer required for the aforementioned purposes, including legal retention obligations, they will be deleted within the legal deadlines. Please note that whenever data are deleted, they are initially only blocked and then only finally deleted with a time delay in order to prevent accidental deletion or possible intentional damage.
For technical reasons, data may be duplicated in backup files and mirrors. Such copies may also be deleted only after a time delay due to technical reasons.
A cookie is a small data package in the form of a text file that is transmitted from your device to your browser when you visit a website and is stored by the browser on your computer. Cookies do not regularly cause any damage to your computer, nor do they contain viruses or personal data. Cookies are primarily used to ensure basic technical functions of the website, e.g. navigation or shopping basket and booking functions, as well as to store user information during or after a visit to a website. This includes, for example, language settings for multilingual websites, login status or the point up to which a video was viewed so that it can be played at the same point on the next visit. Furthermore, related technologies with the same function can be included, which, for example, store pseudonymised user data in so-called "user IDs".
The following different types of cookies are regularly used:
- Mandatory or "essential" cookies are absolutely necessary for the proper technical operation of a website (e.g. to save logins or other user entries, to make certain functions technically possible or for reasons of information security).
- Session or temporary cookies are deleted from your computer at the latest when you leave the website or when you have closed your browser.
- Permanent cookies remain on your computer even after you close your browser. This allows, for example, a login status to be determined or preferred content to be displayed directly as soon as you visit the website again. Your usage interests can also be used for range measurement or marketing purposes.
- First-party cookies are set by us.
- Third-party cookies are used by (advertising) third parties who are represented with their own content on the page you visit. These can be, for example, external web analytics companies that record and analyse access to our website (e.g. from Google Analytics, see above).
- Statistical, marketing and personalisation cookies are mostly used in the area of reach measurement, but also when user interests or behaviour are to be analysed (e.g. which content is viewed, the use of certain functions) through profiling. Such profiles are used, for example, to show users similar content when they visit the site again. This is also called "tracking" of potential user interests (e.g. for Google AdWords, see above).
Categories of persons and data when processing cookie data
Visitors to our website and their usage data (e.g. website(s) visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
In principle, we do not process any personal data with the help of cookies, unless it is necessary for the performance of the contract with you (e.g. booking of stays) (cf. Art. 6 (1) lit. b or 49 (1) lit. b GDPR) or on the basis of your consent (cf. Art. 6 (1) lit. a or 49 (1) lit. a GDPR). In other cases, we process data on the basis of our legitimate interests. Art. 6 (1) lit. f GDPR. These follow the purposes of a properly functioning website, an economic operation of the same and the optimisation of our online offer.
Effective giving and revoking of consent to cookies
Before setting cookies based on the legal basis of consent, we ask you via our "cookie consent box" for a declaration of consent that can be revoked at any time with effect for the future. If this is not available, only those cookies will be set that are technically absolutely necessary and whose use is based on our interest and the interest of the users in the expected functionality of our website.
Basic settings via your browser
Irrespective of the respective legal basis for setting cookies (see above) and the technology used (cookie banner, cookie box), you can fundamentally define the management of cookies via the browser you are using; these then regularly apply to all websites by having your browser
- inform you in principle about the setting of cookies,ie grundsätzlich über das Setzen von Cookies informiert,
- allow cookies only in individual cases, excludes cookies for certain cases or generally, or
- automatically delete cookies from your computer when you close your browser.
To implement this, please follow the instructions in your browser manual.
Cookie block from online services (not secure)
Cookie management via our cookie consent box
You can give your consent (activation of cookies) or withdraw your consent (de-activation of cookies) in an elegant way via our "cookie box", which automatically appears on your screen when you first visit our website and can be called up again via the footer. Deactivation is just as simple as activation (consent): by setting or deselecting the corresponding check mark. Exceptions include, as already mentioned, the technically necessary cookies for the proper functioning of our website (see above).
Please note that the deactivation of cookies may lead to the restriction of certain functions of our website.
This website uses the web analytics service "Google Analytics", provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), on the basis of commissioned processing (cf. Art. 28 ff. GDPR). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The legal basis for the use of Google Analytics is your consent via our "Cookie Consent Box", which regularly appears when you first visit our website, see "Cookies" below) on the basis of Art. 49 (1) lit. a GDPR. This data transfer to a third country is legitimised by a contractual agreement with Google (EU SCC - EU Standard Contract Clauses or "Standard Data Protection Clauses") n. Art. 46 (2) lit. c GDPR."
We also use Google Analytics to display the ads placed within Google's advertising services and those of its partners only to users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited), which we transmit to Google (so-called "remarketing" or "Google Analytics audiences"). With the help of the audiences, we want to ensure that our ads correspond to the potential interest of the users and do not have a harassing effect.
The information generated by the cookie about your use of this website (e.g. browser type and version, operating system used, referrer URL (the page you visited previously), host name of the accessing computer or router (IP address), date and time of the server request) will be transmitted to and stored by Google on a regular basis on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
IP anonymisation is active on this website, i.e. the Google tracking codes on this website use the "_anonymizeIp()" function, which means that IP addresses are processed only in abbreviated form in order to exclude direct personal references. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.
In addition, you can prevent the collection of the data generated by the cookie and related to your use of the website (incl. your IP address) to Google as well as the processing of these data by Google by downloading and installing the browser plugin available here. In doing so, an "opt-out cookie" is placed on your system with reference to your browser and our website in order to activate the aforementioned function. Please note that if you change your system and/or browser, as well as if you delete this cookie, you must set the opt-out cookie again in the aforementioned manner.
This website also uses the "Adwords" or "Ads Conversion" offer from Google (see above) to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. In this way, we pursue the interest of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.
These advertisements are delivered by Google via so-called "ad servers". For this purpose, we use ad server cookies, which can be used to measure certain parameters for measuring success, such as the display of ads or clicks by users. If you access our website via a Google ad, Google Adwords will store a cookie on your PC. These cookies usually lose their validity after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie.
These cookies enable Google to recognise your internet browser. If a user visits certain pages of the website of an Adwords customer and the cookie stored on his computer has not yet expired, Google and the customer can recognise that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Adwords customer. Cookies can therefore not be tracked via the websites of Adwords customers. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. These evaluations enable us to recognise which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media; in particular, we cannot identify the users on the basis of this information.
Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: through the integration of AdWords Conversion, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will obtain and store your IP address.
You can prevent participation in this procedure in several ways:
- by setting your browser software accordingly; in particular, suppressing third-party cookies will result in you not receiving third-party ads,
- by disabling cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com", https://www.google.de/settings/ads, which setting will be deleted when you delete your cookies,
- by deactivating the interest-based ads of the providers that are part of the self-regulation campaign "About Ads" via the link http://www.aboutads.info/choices, whereby this setting is deleted when you delete your cookies,
- by permanently deactivating them in your browsers at the link http://www.google.com/settings/ads/plugin.
Please consult the manual of the browser you are using, in particular whether it supports the aforementioned functions a, b and d. As a precaution, we would like to point out that in this case you may not be able to use all functions of this offer to their full extent.
The legal basis for the processing of your data is Art. 49 (1) lit. a GDPR.
You can find more information about data protection at Google here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org.
This website uses the "Google Maps" product from Google (see above) to show you our locations as conveniently as possible so that you can find us/our events quickly and easily. The legal basis for the use of Google Maps is your consent via our "Cookie Consent Box", which regularly appears when you first call up our website, see "Cookies" above) on the basis of Art. 49 (1) lit. a GDPR as well as on an agreement on joint responsibility according to Art. 26 GDPR, which can be read here: https://privacy.google.com/intl/de/businesses/mapscontrollerterms). It is technically possible that Google could identify at least individual users on the basis of the data received. It would be possible that personal data and personality profiles of users of the website could be processed by Google for other purposes over which we have and can have no influence. This and the fact that data are transmitted to the USA is problematic for data protection reasons.
On this website, the Tag Manager is required only for Google Analytics (see above) and only if you agree to the use of Google Analytics. If you do not agree to the use of Google Analytics, the Tag Manager does not load anything and remains "Inactive" in the result.
Further information on data protection can be found on the following Google web pages: Data privacy statement: https://policies.google.com/privacy?hl=de&gl=de,
FAQ Google Tag Manager: https://www.google.com/intl/de/tagmanager/faq.html
We integrate videos from YouTube (belonging to Google, see above) into our online offer via corresponding plug-ins on the basis of your consent according to Art. 49 (1) lit. a GDPR, which are regularly stored on www.youtube.com
and can or will be played directly from our website. These are primarily integrated in "extended data protection mode", i.e. no data about you as a user are transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in the following paragraph be transmitted. We have no influence on this data transmission itself.
You give your consent by using the so-called "double-click" solution, i.e. as long as you do not click on a YouTube video marked accordingly, it will neither be played nor will data be transmitted to the YouTube servers. Only when you explicitly click on the video (again) does the streaming service start. A connection is then established to the YouTube servers in the USA and YouTube receives the information that you have accessed this corresponding sub-page of our website. This occurs regardless of whether YouTube provides a user account via which you are logged in or whether no user account exists. If you are logged in to YouTube/Google, your data will be directly assigned to your account. If you do not want your data to be associated with your YouTube profile, you must log out of your account before activating the video. YouTube stores your data as usage profiles and uses them, for example, for its own purposes of advertising, market research and/or designing its website according to needs. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right you must contact YouTube or Google.
In order to conveniently display the events planned around the Romanticum directly to you, we use a function of the "destination.pages" tool from hubermedia GmbH, Gaberlplatz 5, 93462 Lam, which integrates our event calendar on our website with the help of a so-called iFrame.
As a matter of principle, persons under the age of 18 should transmit their personal data on the Internet only with the consent of their parents or legal guardians. We neither demand such information from children and young people, nor do we collect it, and we certainly do not pass it on to third parties.
We have taken technical and organisational measures to protect your data from loss, destruction, manipulation and unauthorised access and, in particular, to maintain confidentiality, availability and (data) integrity, for example by storing it in data centres only in Germany or the EU. All employees and all persons involved in data processing (including those of commissioned service providers) have been obligated by us to maintain confidentiality, to comply with data protection regulations and to handle personal data with care.
To protect security during transmission, we encrypt your data with Secure Socket Layer (SSL) where possible to prevent misuse by third parties.
Our security measures are continuously adapted in line with technological developments.
Please note that if you contact us by standard e-mail, the confidentiality of the information transmitted cannot be guaranteed due to the (technical) nature of e-mail transmission. We therefore recommend that you send confidential information by letter post.
As a data subject, authorised or otherwise entitled person, you have the opportunity to assert the following rights against us at any time in writing, by fax or by e-mail, provided that there are no contractual or legal provisions to the contrary or the processing is necessary for other reasons.
For this purpose, please use the contact options given under Item 3 "Data protection officer".
Right to information: You can obtain information about your personal data stored by us at any time. Please submit requests for information only in writing (e-mail, letter, fax). For data protection reasons and due to the lack of qualified identification possibilities, no information will be provided by telephone.
Right to rectification: If we process personal data directly from you and you discover incorrect information or a need to update it, you are welcome to inform us of this for correction purposes. In the case of significant changes, please enclose appropriate supporting documents with your application (e.g. in the case of name changes due to marriage: a copy of the marriage certificate or similar).
Right to erasure: You have the right to request that we erase your personal data at any time. Please note that we are legally obliged to retain certain data in accordance with the statutory retention obligations. We will then inform you of these data categories.
Right to restriction: You can request to restrict the processing of your personal data at any time.
Right to data portability (data export): As you do not usually provide us with personal data via our websites, we cannot offer you a classic data export function for this purpose. In any case, we will examine your request in accordance with the legal provisions and technical feasibility and contact you immediately regarding implementation.
Right of objection/revocation: You can object to the processing of your personal data by us at any time or revoke a given consent to this with effect for the future.
Right to lodge a complaint with the supervisory authorities: You have the right to lodge a complaint with your competent state data protection supervisory authority if you believe that our processing of personal data concerning you violates the GDPR. You can find the address on the Internet on the page of the Federal Commissioner for Data Protection and Freedom of Information in Berlin.
The following supervisory authority is responsible for Koblenz-Touristik:
The State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate
Hintere Bleiche 34
If you use links to external websites that are offered within the framework of our website, this data protection declaration does not extend to these external websites.
At the time of linking, we have satisfied ourselves of the compliance of the linked website(s) with regard to content and security and check this regularly. However, we have no influence on the further compliance with data protection and security regulations of other providers or changes in content.
Links to external websites displayed on our websites may collect user data when you click on them or otherwise follow their instructions. We have no control over the data that are collected voluntarily or involuntarily via advertisements or third-party websites. Therefore, for your safety, please also inform yourself about the data protection declarations provided on the websites of the other providers.
If you become aware of an "unsafe" link originating from our website, please inform us immediately so that we can investigate the matter. Thank you.
Insofar as this becomes necessary due to the legal situation and technical developments, we reserve the right to change our security and data protection measures accordingly. In these cases, we will also adapt our data privacy statement.
Therefore, please note the current version at the beginning of this declaration.
If you would like further information on the protection of your data that this data protection declaration cannot provide, or if you require further information on a specific point, please contact our data protection officer directly at DSB-Service@3rd-mind.de.