GENERAL INFORMATION

Please note: This is an english translation; only the German version of our data privacy policy is the legally binding version (pls. refer to Datenschutz).

Koblenz appreciates your visit to our website as well as your interest in our offers, products and services. The protection of your personal data (hereinafter: "data") is of utmost importance to us and we want you to feel comfortable and secure when visiting and using our websites. Compliance with the statutory data protection provisions is a matter of course for us.

In principle, it is possible to use our website without providing any of your data. In the following, we explain whether and which information is collected and used on our website during your visit.

This data privacy policy applies to the website www.romanticum.de.

The controller for data processing in line with Art. 4 No. 7 GDPR (EU General Data Protection Regulation) is

Stadt Koblenz Amt 65 / ZGM
Willi-Hörter-Platz 1
Koblenz, Germany
56068

Represented by the manager:

Koblenz-Touristik GmbH
Bahnhofplatz 7
Koblenz, Germany
56068

reachable via tel.: +49 (0)261-30388-0, fax: +49 (0)261-30388-11, email: info@koblenz-touristik.de

Koblenz-Touristik has effectively appointed a data protection officer at

3rd Mind Business Consulting GmbH
Langer Weg 60
Eschborn, Germany
65760

For questions regarding data protection, you can reach Mr. Frank Giebel at: DSB-Service@3rd-mind.de

Please note that if you contact us by standard email, the confidentiality of the information transmitted cannot be guaranteed; this is due to the (technical) nature of email transmission. Therefore, we recommend that you send confidential information by post-letter.

This is any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person (human being) is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or by one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Basically, this refers to all direct or indirect information that leads to your identity. This includes, for example, details such as name, address, telephone number, email address, bank account details and credit/debit card details as well as fingerprints, photographs, etc.

If you provide us with your data, our use of said data is regularly founded on the contract or pre-contractual negotiations concluded with you on the basis of Art. 6 (1) lit. b GDPR or on your voluntary consent in accordance with Art. 6 (1) lit. a GDPR, e.g. for processing your enquiries, using our web forms or similar.

Furthermore, as a public body, we can process your data based on Art. 6 (1) lit. e GDPR in conjunction with § 3 LDSG RP (Rhineland-Palatinate State Data Protection Act) if this is necessary to fulfill a task in the public interest or in the exercise of official authority delegated to us.

Web forms:

If we use web forms, your consent is required for the transmission and processing of the information provided therein. The consent text is available to you directly under the respective form.

Your enquiry is then transmitted to our systems and stored for the purpose of executing a contract or a request for information until the process is completed and/or for the duration of the business relationship. Longer storage only takes place if there are legal obligations to retain data (e.g. from tax law).

Your data entered by yourself are typically:

• Your first and last name(for identification, reservation, registration, etc.)
• Your postal address(for sending requested information via post)
• Your email address(for electronic contact/reservation/registration or sending of information)
• Your desired booking period; if necessary with information on the number of persons, programme wishes etc. (for coordination and preparation of offers)
• Your enquiry itself (free text)

The special processing purposes, possibilities of revocation/objection as well as additional conditions (including, but not limited to participation requirements) are further specified in the texts below the respective forms, if applicable. Please note these instructions before submitting your data through the respective forms.

Automatically collected data when visiting our websites:

In log files ("server log files"), via search engines and/or forms, data is automatically collected when you use our websites, which your web browser/provider automatically transmits to our provider. When you visit our websites, our web servers temporarily store the following data by default:

• the web pages you visit on our site as well as the date, time and duration of your visit
• the type of browser you use, its version and the operating system you use
• the search engine used, if any
• the names of any files downloaded
• the (anonymised) IP address at the time of access
• the type of device used
• the website from which you visit us ("referrer URL").

Insofar as we evaluate this technical data, this is done anonymously and to ensure the website's smooth connection setup, to ensure comfortable use of our website, for evaluating and improving system security and stability as well as other administrative purposes based on Art. 6 (1) lit. e GDPR in conjunction with § 3 LDSG RP. This data is not merged with other data sources. However, we reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use.

Email newsletter:

If we offer a newsletter service on our website and you register for this, we require your email address for delivery. You can provide further information on a voluntary basis. By submitting the data you entered in the newsletter registration form, you agree that we may process this data exclusively for the purpose of sending our newsletter to your specified email address and documenting your consent to this. As a matter of principle, the data will not be passed on to third parties. The processing is founded on Art. 6 (1) lit. a GDPR. You will first receive an automated email containing a link that you must click to activate receipt of the newsletter. In this way, we prevent misuse of your email address and can ensure that you have actually registered yourself. We will not send you any newsletters unless you complete this so-called "double opt-in procedure".

You can withdraw your consent at any time with effect for the future: either via the unsubscribe link in the newsletter or by using the unsubscribe form.

Competitions:

Insofar as we offer online competitions via our website, Participants' data can be processed on the basis of voluntary participation in accordance with Art. 6 (1) lit. a GDPR for the duration of the competition and the sending of the prizes. Upon conclusion of the competitions, the data of the winner/s will be stored in accordance with tax regulations and the data of the non-winners will be deleted.

Other purposes:

Data processing may also be necessary on the basis of Art. 6 (1) lit. e GDPR in conjunction with § 3 LDSG RP to establish, assert or defend legal claims in connection with the above-mentioned procedures.

We host our websites exclusively in data centres in Germany or the EU.

Your data will not be passed on, sold or otherwise transferred to third parties unless this would be necessary for the purpose of processing a contract or providing a service, or unless you have expressly consented to this.

Furthermore, data is processed on our behalf on the basis of Art. 28 GDPR (order processing), e.g. for external services for the operation of our IT infrastructure.

In addition, data processing and its transmission to state institutions and authorities entitled to receive information only takes place within the framework of the relevant laws or if we are obligated to do so by a judicial ruling (cf. Art. 6 (1) lit. c GDPR in conjunction with § 3 LDSG RP).

Automated decision-making/profiling or scoring in the sense of Art. 22 GDPR does not take place.

The retention period of your data depends on the processing purposes (see above) or the statutory retention/limitation and deletion periods. As a rule, they are stored for the duration of the business relationship with us. Longer (access-protected) storage only takes place in accordance with the relevant statutory retention obligations (e.g. for accounting and tax purposes) or for the exercise/defence of legal claims.

As far as your data is no longer required for the aforementioned purposes, including legal retention obligations, it will be deleted within the legal periods.

For technical reasons, data may be duplicated in backup files and mirrors. Such copies will also be deleted with a time delay for technical reasons.

A cookie is a small data package in the form of a text file that is transferred from your device to your browser when you visit a website and is then stored on your computer. Cookies do not regularly cause any damage to your computer, nor do they contain viruses or personal data. Cookies are primarily used to ensure basic technical functions of the website, e.g. navigation or shopping basket and booking functions, as well as to save user information during or after a visit to a website. This includes, for example, language settings for multilingual websites, login status or the point up to which a video was viewed so that it can be played at the same point on the next visit. Furthermore, related technologies with the same function may be included, which, for example, store pseudonymised user details in so-called "user IDs".

Some cookies, especially those from third parties, transfer their content and other information about visitors to the respective locations, among other things, to third countries, which is why your consent is required for this.

This website uses the following cookies:

• Mandatory or "essential" cookies are absolutely necessary for the proper technical operation of a website or for reasons of information security. These cannot be "deselected" to ensure the functionality of this website (e.g. for storing your cookie preferences, booking functions, etc.).

• Statistics and third-party cookies: Your consent via our Cookie Consent Box (CCB) is required for the use of Google Analytics and Google Analytics Audiences, as data must be regularly transferred to the USA.

• Marketing Cookies: Your consent via our CCB is required for the use of Google Ads remarketing & conversion tracking, as data must be regularly transferred to the USA.

• Cookies for external media: Your consent is required for the integration and display of YouTube videos, for example, because this would regularly require data to be transferred to third countries. Content from video and social media platforms is blocked by default. You give your consent either via a manual "double-click" solution or via our CCB.

Legal basis for setting cookies

In principle, we do not process any personal data with the help of cookies, unless this would be necessary for a function of this website for the fulfilment of a contract with you, e.g. for bookings (cf. Art. 6 (1) lit. b or 49 (1) lit. b GDPR) or on the basis of your consent (cf. Art. 6 (1) lit. a or 49 (1) lit. a GDPR). In other cases, we process purely technical data without reference to persons on the basis of Art. 6 (1) lit. e GDPR in conjunction with § 3 LDSG RP. These are for the purposes of a properly functioning website, an economic and secure operation of the website and the optimisation of our online offer.

Effective consent of and withdrawal of consent to cookies

Before a cookie is set on the legal basis of consent, we ask you for your consent directly at the location of this function by active click or via our "cookie consent box" (CCB). You can withdraw this consent at any time with effect for the future by closing the browser or via our CCB. If this consent is not given, only those cookies that are technically absolutely necessary will be set, the use of which is based on our interest and the interest of users in the expected security and functionality of our website.

Basic settings via your browser

Regardless of the respective legal basis for setting cookies (see above) and the technology used (cookie banner, cookie box), you can define the management of cookies fundamentally via the browser you use; these then apply regularly to all websites in that your browser

• informs you about the setting of cookies,

• allows cookies only in individual cases, excludes cookies for specific cases or in general, or

• automatically deletes cookies from your computer when you close your browser.

To implement this, please follow the instructions in your browser manual.

Cookie block of online services (typically not secure)

You can also declare an objection to the use of cookies for online marketing purposes by third-party services, in cases of "tracking" via http://optout.aboutads.info (in English) and www.youronlinechoices.com (also in German) online.

Cookie management via our Cookie Consent Box (CCB)

You can give your consent (activation of cookies) and withdraw your given consent (de-activation of cookies) elegantly via our "cookie consent box", which automatically appears on your screen when you first visit our website. You can access the "cookie consent box" at any time by clicking on the corresponding (moving) symbol on the side. Deactivation (withdrawal) is just as simple as activation (consent): by setting or deselecting the corresponding tick. Exceptions are, as already mentioned, the technically necessary ("essential") cookies for the proper and secure functioning of our website (see above).

Please note that the deactivation of cookies may lead to the restriction of certain functions of our website.

This website uses the web analytics service "Google Analytics", provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), on the basis of commissioned processing (cf. Art. 28 ff. DS-GVO). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The legal basis for the use of Google Analytics is your consent via our "Cookie Consent Box" (see above) on the basis of Art. 49 (1) lit. a GDPR. This data transfer to a third country is legitimised by a contractual agreement with Google (EU SCC - EU Standard Contract Clauses or "Standard Data Protection Clauses") n. Art. 46 (2) lit. c GDPR.

We also use Google Analytics to display the ads placed within Google's advertising services and those of its partners only to users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited), which we transmit to Google (so-called "remarketing" or "Google Analytics audiences"). With the help of the audiences, we want to ensure that our advertisements correspond to the potential interest of the users and do not have a harassing effect.

The information generated by the cookie about your use of this website (e.g. browser type and version, operating system used, referrer URL (the page you visited previously), host name of the accessing computer or router (IP address), date and time of the server request) will be transmitted to and stored by Google on a regular basis on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

IP anonymisation is active on this website, i.e. the Google tracking codes of this website use the function "_anonymizeIp()", thus IP addresses are only processed in abbreviated form in order to exclude direct personal reference. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.

You may refuse the use of cookies by selecting the appropriate settings on your browser, or by denying or revoking your consent to their activation in our cookie consent box (see above); however, please note that if you do this you may not be able to use the full functionality of this website.You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the Browser Plugin available here. In doing so, an "opt-out cookie" is placed on your system with reference to your browser and our website in order to activate the aforementioned function. Please note that if you change your system and/or browser or delete this cookie, you will need to set the opt-out cookie again in the aforementioned manner.

This website also uses the "Adwords" or "Ads Conversion" offer from Google (see above) to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. In this way, we pursue the interest of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs. The legal basis for the use of Google Analytics is your consent via our "cookie consent box" (see above) on the basis of Art. 49 (1) lit. a GDPR.

These advertising materials are delivered by Google via so-called "ad servers". For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as display of the ads or clicks by users, can be measured. If you access our website via a Google ad, Google Adwords will store a cookie on your PC. These cookies usually lose their validity after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie.

These cookies enable Google to recognise your internet browser. If a user visits certain pages of an Adwords customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognise that the user has clicked on the ad and been redirected to that page. A different cookie is assigned to each Adwords customer. Cookies can therefore not be tracked via the websites of Adwords customers. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. These evaluations enable us to recognise which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising tools; in particular, we cannot identify users on the basis of this information.

Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of AdWords Conversion, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is still possible for the provider to obtain and store your IP address.

You can prevent the storage of cookies by adjusting your browser software accordingly or by refusing or revoking your consent to activation in our cookie consent box (see above).

Furthermore, you can make a deactivation of the interest-based ads of the providers that are part of the self-regulation campaign "About Ads" (see http://www.aboutads.info/choices), whereby this setting is deleted when you delete your cookies or by permanent deactivation in your browsers via the link http://www.google.com/settings/ads/plugin.

Please consult the manual of the browser you are using for this. As a precaution, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.

Further information on data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org.

This website uses the product "Google Maps" by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") to show you our locations as conveniently as possible so that you can find us / our events quickly and easily. The legal basis for the use of Google Maps is your consent (typically by clicking on the banner above to activate it or via our cookie consent box) based on Art. 49 (1) lit. a GDPR as well as on a joint responsibility agreement according to Art. 26 GDPR, which can be read here:

https://privacy.google.com/intl/de/businesses/mapscontrollerterms). It is technically possible that Google could identify at least individual users on the basis of the data received. It would be possible that personal data and personality profiles of users of the website could be processed by Google for other purposes over which we do not and cannot have influence. This and the fact that data is transferred to the USA is problematic for data protection reasons.

For these reasons, we ask you for your consent in accordance with Art. 6 (1) lit. a GDPR directly on the respective page, which you can effectively give by clicking on the button in a banner. In this case, a temporary cookie (Session-C.) is set, which is deleted after closing the browser, thus revoking your consent.

The terms of use of Google Maps can be found under “Terms of Google Maps".

You also have the option of deactivating the Google Maps service and thus preventing the transfer of data to Google: To do this, deactivate JavaScript in your browser. Please refer to the instructions of your browser manufacturer to find out how this works in detail. However, we would like to point out that in this case you will not be able to use the map display.

By using this website and not deactivating the JavaScript function, you expressly declare, in awareness of the data protection issues, that you agree to the processing of the data collected about you by Google in the manner and for the purpose described above.

The Google Tag Manager is used on this website. The Google Tag Manager is a solution from Google (see above) that allows companies to manage website tags via an interface. The Google Tag Manager tool (which implements the tags) does not use cookies (so-called cookieless domain) and does not collect any personal data. While tags that collect data can in principle be triggered during use, the Google Tag Manager itself does not access them. If a deactivation has been made at the domain or cookie level (see "cookie consent box" above), this remains in place for all tags that are implemented with Google Tag Manager.

On this website, Tag Manager is only required for Google Analytics (see above) and only if you agree to the use of Google Analytics. If you do not agree to the use of Google Analytics, Tag Manager does not load anything and remains "Inactive" as a result.

Further information on data protection can be found on the following Google web pages:

Privacy Policy: https://policies.google.com/privacy?hl=de&gl=de,

FAQ Google Tag Manager: https://www.google.com/intl/de/tagmanager/faq.html

Google Tag Manager Terms of Use: https://www.google.com/intl/de/tagmanager/use-policy.html

We integrate videos from YouTube (belonging to Google, see above) into our online offer via corresponding plug-ins on the basis of your consent in accordance with Art. 49 (1) lit. a GDPR, which are regularly stored on www.youtube.com and can or will be played directly from our website. These are primarily integrated in "extended data protection mode", i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in the following paragraph be transferred. We have no influence on this data transmission.

You give your consent by using the so-called "double-click" solution, i.e. as long as you do not click on a YouTube video marked accordingly, it will neither be played nor will data be transmitted to the YouTube servers. Only when you explicitly click on the video (again) does the streaming service start. A connection is then established to the YouTube servers in the USA and YouTube receives the information that you have accessed this corresponding sub-page of our website. This takes place regardless of whether YouTube provides a user account via which you are logged in or whether no user account exists. If you are logged in to YouTube / Google, your data will be directly assigned to your account. If you do not want your data to be associated with your YouTube profile, you must log out of your account before activating the video. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or designing its website in line with requirements. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and to exercise this right you must contact YouTube or Google.

For more information on the purpose and scope of data collection and processing by YouTube, please refer to their privacy policy. There you will also find further information on your rights and setting options for the protection of your privacy under the current link www.google.de/intl/de/policies/privacy.

This website uses the "Adobe Typekit Web Fonts" tool from Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland (hereinafter: "Adobe") on the basis of Art. 6 (1) lit. f e GDPR in conjunction with § 3 LDSG RP to ensure a uniform display across all devices and improved loading times. When you call up a page, your browser loads the required web fonts from our web server into your browser cache in order to display texts and fonts without errors. Due to Adobe's licensing terms, the following information is transferred to Adobe in the process to identify our Adobe font account: the font(s) provided, our account ID with Adobe, the application requesting the fonts, the server providing the fonts and the host name of our website on which the fonts are loaded.

The process does not involve transferring your IP address to Adobe in the US. Adobe further states that it does not store cookies when loading the fonts, nor does it collect a browser version.

If your browser does not support web fonts or you have disabled their use in your browser, a default font from your computer will be used.

For more information on Adobe Typekit Web Fonts, please visit https://typekit.com and read Adobe's privacy policy: https://www.adobe.com/de/privacy.html.

As a matter of principle, persons under the age of 18 should only transmit their personal data on the Internet with the consent of their parents or legal guardians. We neither request such information from children and young people, nor do we collect it, and we certainly do not pass it on to third parties.

We have taken technical and organisational security measures to protect your data from data-loss, destruction, manipulation and unauthorised access and in particular to maintain confidentiality, availability and (data) integrity, e.g. by storing it in data centres only in Germany or the EU. All employees and all persons involved in data processing (including those of commissioned service providers) have been obligated by us to maintain confidentiality, to comply with data protection regulations and to handle personal data with care.

To protect security during transmission, we encrypt your data with Secure Socket Layer (SSL) or the newer standard TLS (Transport Layer Security) where possible.

You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and a lock symbol is displayed in the address line of the browser.

Our security measures are continuously adapted in line with technological developments.

As a data subject, authorised or otherwise entitled person, you have the possibility to assert the following rights against us at any time in writing or by e-mail, provided that there are no contractual or legal provisions to the contrary or the processing is necessary for other reasons.

To do so, please use the contact options at the beginning of this document.

Right to access: You can obtain information about your personal data stored by us at any time. Please only submit requests for information in writing (letter) or in text form (email). For data protection reasons and due to the lack of qualified identification possibilities, no information will be provided by telephone.

Right to rectification: If we process personal data directly from you and you discover incorrect information or a need to update it, you are welcome to inform us of this for correction purposes.  In the case of significant changes, please enclose appropriate supporting documents with your application (e.g. in the case of name changes due to marriage or similar).

Right to erasure: You have the right to request the erasure of your personal data from us at any time. Please note that we are legally obligated to retain certain data in accordance with statutory retention obligations. We will then inform you of these data categories.

Right to restriction: You can request to restrict the processing of your personal data at any time.

Right to data portability (data export): As you do not usually provide us with personal data via our websites, we cannot offer you a classic data export function for this purpose. In any case, we will examine your request in accordance with the legal provisions and technical feasibility and contact you immediately regarding implementation.

Right of objection/withdrawal: You can object to the processing of your personal data by us at any time or revoke any consent you have given with effect for the future.

Right to complain to the supervisory authorities: You have the right to lodge a complaint with your competent state data protection supervisory authority if you believe that our processing of personal data concerning you violates the GDPR (General Data Protection Regulation). You can find the address on the website of the Federal Commissioner for Data Protection and Freedom of Information in Berlin (BfDI).

The following supervisory authority is responsible for Koblenz-Touristik GmbH:

The State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate
Hintere Bleiche 34
Mainz, Germany
55116

If you use links to external websites that are offered as part of our website, our data protection information does not extend to these external websites.

At the time the link was set up, we were able to satisfy ourselves as to the correctness of the linked website(s) in terms of content and security, and we check this regularly. However, we have no influence on the further compliance with data protection and security regulations of other providers or changes in content.

If you click on links to external websites displayed on our website, these external websites may collect user data if you click on these links or otherwise follow the instructions of these external websites, in particular if you are logged in to other platforms or similar. We have no control over the data that is collected voluntarily or involuntarily via advertisements or third-party websites. Therefore, please also inform yourself on the websites of the other providers about the data protection declarations provided there for your safety.

If you become aware of an "unsafe" link originating from our applications, please inform us immediately so that we can investigate the matter. Thank you.

If the legal situation or technical developments make it necessary, we reserve the right to change our security and data protection measures accordingly. In such cases, we will also adapt this document.

Please therefore note the current version at the beginning of this document.

If you require further information that is not provided by this data privacy policy or if you require further information on a specific point, please contact our data protection officer directly at DSB-Service@3rd-mind.de.