1.1 Personal data
The subject of data protection is personal data (hereinafter referred to as data). Personal data include all information relating to an identified or identifiable natural person. These data include, for example, the name, address, occupation, e-mail address, health status, income, marital status, genetic features, telephone number and if applicable also user data such as an IP address.
1.2 Controller and data protection officer
The controller is the entity responsible for processing your personal data in the context of your use of this website, www.romantic-germany.info (hereinafter referred to as website) is the Rheinland-Pfalz Tourismus GmbH (hereinafter referred to as the operator or controller). The contact information is provided in the imprint.
The controller has commissioned an external data protection officer:
MORGENSTERN consecom GmbH
Große Himmelsgasse 1
Phone: +49 (0) 6232 - 100119 44
2. Scope and purpose of the data processing, legal basis and provision of data, Period of retention
2.1 Accessing and use of the website
Each time the website is accessed; user data is transmitted via your web browser and stored in log files (server log files). This access data contains the following information:
- Date and time of access
- Name of the accessed website
- IP address
- Referrer URL (URL of origin, from which you arrived at the website)
- Volume of data transmitted
- Information about your browser
The legal admissibility of this data processing is based on Art. 6 (1) b) GDPR (contract).
Provision of your data is necessary to invoke the operator's website. Failure to provide data means that the website can no longer be invoked and the operator's services cannot be utilised.
The log files are analysed by the operator in anonymised form in order to continuing to improve the website and make it more user-friendly, to detect and rectify errors more quickly and to control server capacities. For example, the operator is able to determine the preferred times of access to the website and therefor provide appropriate amounts of data volume.
The legal admissibility of this data processing may also be based on Art. 6 (1) f) GDPR (legitimate interests). The legitimate interest of the controller involves the provision of a website to convey information and offer services as well as the improvement of the websites performance.
The provision of data is neither required by law nor required for the performance of a contract. Failure to provide the data will result in you being unable to enter the operator’s website.
Your IP address is deleted or anonymised upon termination of use. Anonymisation means the IP address is altered so that it cannot or can only with a disproportionate investment of time, cost and labour be attributed to a particular or identified or identifiable natural person.
2.2 Contact forms and single-click e-mailing
This website contains a contact form if you wish to contact the operator. This form requires that you provide the following information:
In addition, you may voluntarily choose to provide the following information:
- Salutation, Last name, First name
- Postal code & Address
In the navigation bar, you have the option to contact the operator by clicking the respective field. This message automatically uses the e-mail address that is linked to the e-mail client you use. If you do not wish your e-mail address to be invoked in this way, you can change the settings in your e-mail program. The operator processes your data to communicate with you and to respond to your request.
The legal admissibility of this data processing is based on Art. 6 (1) b) GDPR (contract).
Provision of data is conducted on your request. Failure to provide the data means that you are unable to send a message to the operator.
Personal data processed during communication are deleted upon expiry of the statutory retention periods if the controller has no legitimate interest in further retention. In any event, data are continued to be stored only if they are truly necessary for the corresponding purpose. Personal data are anonymised as far as possible.
If you have consented or if a legal provision applies, the controller may process your data for advertising purposes. The Controller may use your data for advertising purposes. The admissibility of such processing is based on Art. 6 (1) f) GDPR (legitimate interests).
The provision of the data is neither required by law nor by contract. Failure to provide the data means that the Controller cannot send you any advertising.
In the case of direct advertising to customers, § 7 para. 3 UWG applies, according to which unreasonable harassment in advertising using electronic mail is not to be assumed in the cases mentioned therein. You care able to object to the use at any time without incurring any costs other than the transmission costs according to the basic tariffs.
If you no longer wish to receive any recommendations or any advertising messages, you can object to this at any time. A message in text form to the Controller is sufficient for this. In addition, an unsubscribe link is included in each e-mail.
The provision of the data is necessary for the conclusion of a contract. Non-provision has the consequence that no contractual relationship can be established.
The personal data processed for advertising purposes will be deleted unless the Controller has a legitimate interest in further storage. In any case, only those data will continue to be stored which are actually absolutely necessary to achieve the corresponding purpose.
- Recognition of the user's computer when they visit the website
- Tracking the user's browsing activity on the website
- Improving the user experience of the website
- Analysis of the website use by the operator
- Operating this website
- Preventing fraud and improving the security of the website
- Customising this website taking into consideration the needs of the user
Cookies do not damage your computer in any way. They do not contain viruses and also do not allow the operator to spy on you. There are two types of cookies. Temporary cookies are automatically deleted when closing your browser (session cookies). In contrast, permanent cookies have a maximum lifetime of up to 20 days. This type of cookie allows your computer to be recognised when you visit the website on a re-entry. The cookies allow the operator to track your use behaviour for the purposes listed above and to an appropriate extent. Cookies also allow you to optimally surf the operator's website. These data are collected by the operator only in anonymised form.
The legal admissibility of this data processing is based on Art. 6 (1) f) GDPR (legitimate interests). The legitimate interests of the controller involve the provision of a website that contains no errors and the opportunity to offer visitors the best user experience. Provision of your data is not prescribed by law. It is possible to visit the website without cookies. If you do not want the operator to recognise your computer, you can prevent the storage of cookies on your hard drives by selecting the option "do not accept cookies" on your browser settings. To find out specifically how to do this, please read the instructions provided by your browser manufacturer. If you choose to accept no cookies, this may limit the functionality of the website.
Temporary cookies are automatically deleted when you close your browser (session cookies). In contrast, permanent cookies have a maximum lifetime of up to 20 days. These types of cookies allow your computer to be recognised on your next visit on the controller’s website.
2.5 Google Analytics
The data about the use of the website are generally transmitted to a Google server in the US and stored there. If IP- anonymisation is activated on the website, your IP address within Member States of the European Union or other Signatory States to the Agreement on the European Economic Area will be abbreviated in advance. Only in exceptional cases the full IP address will be transmitted to a Google server in the US and abbreviated there. The operator also points out that Google Analytics uses the extension code "anonymizelp" to ensure that IP addresses are collected in anonymous form (known as IP masking). Google is certified under the EU-US Privacy Shield: https://policies.google.com/privacy/frameworks?gl=de
Google uses this information to analyse the use of the website, compile reports about website activity for the operator and offer additional serves relating to the use of the website and the internet. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. This use takes place in anonymous or pseudonymous form.
You can find out more about Google Analytics on the Google website at https://policies.google.com/privacy?hl=en
The legal admissibility of this data processing is based on Art. (1) a) GDPR (consent). Provision of your data is not prescribed by law.
Personal data collected in the context of the use of tracking tools are deleted if the controller has no legitimate interest in further retention. In any event, data are continued to be stored only if they are truly necessary for the corresponding purpose. Personal data are anonymised as far as possible.
The Google service reCAPTCHA is integrated for forms on the website, which is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This service is used to contribute to the security of the website and differentiate between a natural person and a machine when entering data. Therefore, various personal data such as the IP address is collected and transferred to Google in Ireland. If applicable, data may also be transferred to the USA. In cases of data transfer to the USA, Google is certified under the EU-US Privacy Shield. You can find more information directly at Google https://policies.google.com/privacy/frameworks?gl=de
The legal admissibility of this processing is based on Art. 6 (1) f) GDPR (legitimate interests). The use of data for the security of the website constitutes a legitimate interest of the operator within the meaning of Art. 6 (1) f) GDPR.
The provision of the data is neither prescribed by law nor required for the performance of a contract. Failure to provide the data will result in you being unable to use the corresponding forms.
The operator uses YouTube videos to provide videos on various topics related to the websites services. The legal admissibility of this processing is based on Article 6 (1) (f) of the GDPR (legitimate interests). The use of data for the purposes of making videos available for illustration constitutes a legitimate interest of the operator within the meaning of Article 6 (1) (f) of the GDPR.
The provision of the data is neither required by law nor required for the performance of a contract. Failure to provide the data will result in you being unable to use the feature.
2.8 Reservations and bookings
You may book various accommodations and package deals using this website. Booking requires you to provide the following information:
- Person master data (last name, first name)
- Address details (address, residence)
- Contact details (phone, e-mail)
- Travel data (arrival, departure, number of travellers)
Your data is used to process your reservation and are forwarded to the accommodation facility.
The legal admissibility of this data processing is based on Art. 6 (1) b) GDPR (contract). Failure to provide the data means that you cannot book a reservation.
Personal data processed for the purpose of booking reservations and the performance of a contract are deleted upon expiry of the statutory retention periods (in particular HGB (German commercial code) and AO (German tax code)) if the controller has no legitimate interest in further retention. In any event, data are continued to be stored only if they are truly necessary for the corresponding purpose. Personal data are anonymised as much as possible.
2.9 Outdooractive tracking pixels
On the website, contents of the website www.tourenplaner-rheinland-pfalz.de are transmitted via an interface to the service provider Outdooractive GmbH & Co. KG (hereinafter referred to as Outdooractive). Outdooractive provides electronic databases which you can use as an electronic information portal in the digital tourism area, including, for example, maps and route planners.
Outdooractive is responsible for processing the following data in order to provide you with the databases:
- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Data volume transferred respectively
- Website from which the request was made
- Location of the user
- Operating system and its interface
- Language and version of the browser software
The data is technically necessary to display the electronic databases and to ensure stability and security. The legal admissibility of this processing is based on Art. 6 (1) f) GDPR (legitimate interests). The provision of a travel database is in the economic interest of the controller. The provision of the data is voluntary, but necessary in order to use the functions offered.
The operator has neither influence on the collected data and data processing procedures nor is the operator aware of the full scope of data collection, the purposes of processing and the storage periods. Furthermore, the operator has no information about the deletion of the collected data by Outdooractive.
Outdooractive stores the data collected concerning you as user profiles and uses them for its own purposes of market research and/or the needs-based design of electronic databases. You have the right to object to the creation of such user profiles, whereas you must contact Outdooractive to exercise this right.
2.10 Social plug-ins
The operator uses social plug-ins from various social networks (e.g. Facebook). You can use these plug-ins for example to share content or to recommend a product. Plug-ins are deactivated by default and therefore transmit no data to the respective social platform. You may activate each plug-in by clicking on the appropriate button (known as the Shariff solution).
If you have activated a plug-in, your browser will form a direct connection to the server of the respective social platform as soon as you access the operator's website. The content of the plug-in is transmitted by from the social platform directly to your browser and integrated by it into the operator`s website.
Integration of the plug-in means that the social network receives the information that you have accessed the respective page of the operator. If you are logged in to the social network, the network can associate your visit to your account. If you interact with the plug-ins, the corresponding information is transmitted by your browser directly to the social network and stored there.
If you do not want the social network to collect data about you via the operator's website, you must log out of this network prior to visiting the operator`s website or deactivate the social plug-ins.
Even if you do not have an account with the social network, websites with active social plug-ins can send data to these networks. When a plug-in is active, each visit of the website places a cookie with a unique identifier. Because your browser sends this these cookies without being asked, each time there is a connection with a network server, in principle the network can generate a profile about which websites the user associated with the identifier has visited. This means that it is also entirely possible that this identifier is also attributed to a person who subsequently registers for an account with that social network.
The legal admissibility of this data processing is based on Art. 6 (1) a) GDPR (consent).
2.11 Deskline brochure request
You have the option to order brochures of the controller via http://web4.deskline.net/rlpinfo/en/brochure/list Therefore, you shall provide the following data:
- Person master data
- Address details
You may provide additional data voluntarily.
The legal admissibility of this data processing is based on Art. 6 (1) b) GDPR (contract). The provision of your data is necessary to complete the order process. Failure to provide the data means that you cannot place an order.
The data will be stored until the purpose no longer applies and there is no retention obligation.
3 Rights of the data subject
You have the right of access (Art. 15 GDPR), right to rectification (Art. 16 GDPR), right to erasure (Art. 17 GDPR), right to restriction of processing (Art. 18 GDPR) and the right to data portability (Art. 20 GDPR).
At any time, you have the right to object, on grounds relating to your particular situation, to the processing of the personal data concerning you, which is based on Art. 6 (1) e) or f), including profiling based on those provisions. The controller shall no longer process your personal data unless the controller demonstrates compelling legitimate grounds for the processing that override your interests, rights and freedoms or if processing is used for the establishment, exercise or defence of legal claims.
Where your personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
Please use the contact address provided in the imprint for your message.
4 Revocation of consent
If you have provided consent to the processing of your personal data and revoke this consent, processing that has already taken place until the date of your revocation remains unaffected.
5 Right of appeal
You have the right to lodge an appeal with the competent supervisory authority at any time.
Data obtained as a result of the access and use of this website and information provided as part of a contact you made are transmitted to the operator's server and stored there. Also, your data may be forwarded to the following categories of recipients:
- Internal departments that are involved in processing your personal data (e.g. marketing department, customer service, reservations department)
- Data processing services (e.g. data centres, IT service providers, providers of tracking tools, software providers)
- Contractual partners of the operator (e.g. shipping providers, hotels, event organisers)
7 Links to third party sites
Visiting this website may display content that is linked with the website of a third party. The operator has no access to the cookies or other functionalities that are used by third-party websites and cannot control them. Such third-party sites are not subject to the data privacy conditions of the operator.