Data Privacy Statement

Welcome to our website. The protection of your data is very important to us. This is why we want to let you know which data from your visit will be used, and for which purposes. If you have any other questions about how we handle your personal data, please feel free to contact our Data Protection Officer (see the end of the Data Privacy Policy for contact details).

Under the General Data Protection Regulation (GDPR), the entity responsible for the use of your data in the context of this website is: 

Hamburg Tourisms GmbH
Wexstraße 7
20355 Hamburg, Germany

[Translate to Französisch:] I. General information about data processing

[Translate to Französisch:]

1. What is personal data?

The term ‘personal data’ is defined in the General Data Protection Regulation (hereinafter: ‘GDPR’). According to this regulation, personal data includes all information that refers to an identified or identifiable natural person. This includes, for example, your given name, your address, phone number or date of birth. Information about your use of this website may also constitute personal data if the information could identify you as a person. 

2. Extent of the processing of personal data

We only process our users’ personal data to the extent that it is necessary to provide a functional website, its content and our services. The processing of our users’ personal data is only done with the consent of the user or if so permitted by law. 

3. Legal basis for the processing of personal data

Where we obtain the consent of the data subject for the processing of personal data, Art. 6, Para. 1(a) GDPR serves as the legal basis.

When processing personal data in order to fulfil a contract to which the data subject is a party, Art. 6, Para. 1(b) GDPR serves as the legal basis. This also applies to processing that is required in order to perform pre-contractual measures.

If it is necessary to process personal data in order to fulfil a legal obligation to which our company is subject, Art. 6, Para. 1(c) GDPR serves as the legal basis.

In cases where it is necessary to process personal data in order to protect the vital interests of the data subject or another natural person, Art. 6, Para. 1(d) GDPR serves as the legal basis.

If data processing is necessary in order to protect a legitimate interest of our company or of a third party and if this interest is not superseded by the interests or fundamental rights and freedoms of the data subject, Art. 6, Para. 1(f) GDPR serves as the legal basis. 

4. Deletion of data and duration of storage

The personal data of the data subject is deleted or blocked as soon as the purpose for its storage ceases to apply. Data may be stored for longer than this period if so stipulated by European or national law in provisions of European Union, laws or other regulations to which the data controller is subject. Data is also blocked or deleted if a deadline specified by one of the above conventions expires, unless it is necessary to continue to save the data in order to conclude or fulfil a contract.

      [Translate to Französisch:] II. Provision of the website and creation of log files

      [Translate to Französisch:]

      1. Description and extent of data processing

       When you visit our website, the following data is logged: 

      • Browser and version
      • Operating system used
      • Referrer URL (website previously visited), as well as pages visited on our website
      • IP address
      • Date and time of server request
      • Internet service provider

      The data is also saved in the log files on our system. This data is not stored with any other personal data from the data subject.

      2. Legal basis for data processing

      The legal basis for saving data and log files is Art. 6, Para. 1(f) GDPR.

      3. Purpose of the data processing

      The temporary storage of the IP address by the system is necessary in order to supply the website to the user’s computer. To do this, the user’s IP address needs to be saved for the duration of the session. Data is saved in log files in order to ensure the proper functioning of the website. It also helps us to optimise the website and ensure the security of our IT systems. The data is not analysed for marketing purposes in this context. These purposes also represent our legitimate interest in data processing in accordance with Art. 6, Para. 1(f) GDPR.

      4. Duration of data storage

      The data we save is deleted as soon as it is no longer required in order to fulfil the purpose for which it was originally collected. This is the case after seven days at the latest. It may be the case that data is stored for longer than this. In such cases, the user’s IP address is deleted or modified so that they can no longer be assigned to the calling client.

      5. Opt-out and requests for deletion

      The collection of the data listed is essential in order to be able to operate the website. As a result, there is no opt-out option available to the user.

      [Translate to Französisch:] III. Use of cookies

      [Translate to Französisch:]

      1. Description and extent of data processing

      Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. If a user accesses a website, a cookie may be saved on the user’s operating system. This cookie contains a unique character string that enables the clear identification of the browser if the website is accessed again at a later time. 

      We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser also be identifiable after visiting another page. 

      The following data is saved and transmitted in cookies, for example:

      1. Language settings
      2. Items in a shopping basket
      3. Log-in details

      We also use cookies on our website in order to analyse the user’s browsing habits. 

      As such, the following data may be transmitted, for example:

      1. Search terms entered
      2. Frequency of page impressions
      3. Use of website functions

      The user data generated in this way is pseudonymised using technical precautions. As a result, it is no longer possible to assign the data to the user. The data is not stored together with any other personal data relating to the user.

      2. Legal basis for data processing

      The legal basis for processing personal data with regard to the use of cookies is Art. 6, Para. 1(f) GDPR.

      3. Purpose of the data processing

      The purpose of using essential cookies is to make the website easier to use. We could not offer some of the functions of our website without the use of cookies. To provide these functions, it is necessary that the browser can be identified even after visiting a different page.

      We require cookies for the following functions, for example:

      1. Shopping basket
      2. Adoption of language settings
      3. Remembering search terms

      The user data collected by essential cookies are not used to create user profiles.

      The use of analysis cookies serves to improve the quality of our website and its content. Analysis cookies provide us with information about how the website is used, which enables us to continually optimise our service. These purposes also represent our legitimate interest in the processing of personal data in accordance with Art. 6, Para. 1(f) GDPR.

      4. Duration of data storage, opt-out and requests for deletion

      Cookies are saved on the user’s computer and are transmitted from there to our site. As a result, you as the user have full control over the use of cookies. You can deactivate or limit the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved may be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, this may mean that you will not be able to use all of the functions of the website.

      [Translate to Französisch:] IV. Newsletter

      [Translate to Französisch:]

      1. Description and extent of data processing

      You have the option of signing up to receive various free newsletters via our website. These newsletters can inform you about our company activities, the latest information regarding our services, special offers, promotions, events and competitions. The content of each newsletter is briefly described when you sign up.

      You will only receive our newsletters if you provide your express consent and then confirm your consent. We use what is known as the double opt-in process for signing up to our newsletters. This means that, after you sign up, an email will be sent to the address provided where we ask for you to confirm that you want to receive the newsletter. If you do not confirm your registration, your information will be deleted automatically after three days.

      The only mandatory information we require to send you the newsletter is your email address. The following data is also collected when you sign up:

      • IP address of the recipient’s computer 
      • Date and time of registration 

      Once you have confirmed your consent, we will save your email address for the purpose of sending the newsletter until you withdraw your consent. We will also save the IP address used at the time of registration, the time of registration and the confirmation for up to three years after registration (period of limitation). The aim of doing this is to be able to prove your registration in case of doubt and to be able to clarify any misuse of your personal data if necessary.

      The provision of additional data is done so on a voluntary basis: This data is used in order to be able to address you personally.

      As a loyal customer, you will regularly receive product recommendations from us via email. You will receive these product recommendations regardless of whether or not you have subscribed to our newsletter. To send you these recommendations, we will use the email address provided in the context of a purchase. In this case, we will only send via the newsletter direct advertising for our own, similar goods or services.

      The data processed in the context of sending the newsletter is only used in order to send the newsletter and is not shared with third parties. 

      2. Newsletter tracking

      Please be aware that we analyse your user behaviour when we dispatch the newsletter. In order to complete this analysis, the emails sent contain what are known as web beacons or tracking pixels, which are saved on our website. To conduct the analysis, we link the data listed and web beacons with your email address and an individual ID. The links contained in the newsletter also feature this ID.

      The data is processed in pseudonymous form, i.e. the IDs are not linked to any of your other personal data, preventing them from being directly linked to a specific individual. The legal basis for this data processing is our legitimate interest in measuring the scope and success of this service, Art. 6, Para. 1(f) GDPR.

      You may withdraw your consent to this tracking at any time by unsubscribing from our newsletter (see item 5 Opt-out and requests for deletion).

      This kind of tracking is also not permitted if you have deactivated the display of images as standard in your email program. In such cases, you will not be able to view the newsletter in full and may not be able to use all of its functions. If you choose to display the images manually, tracking occurs as described above.

      The tracking information is saved for as long as you are subscribed to the newsletter. Once you have unsubscribed, the data is anonymised and is used solely for statistical purposes.

      The data saved by us in order to provide the newsletter is saved until you choose to unsubscribe from the newsletter and deleted once you have been unsubscribed. Data saved for other purposes remain unaffected.

      3. Legal basis for data processing

      Art. 6, Para. 1(a) GDPR serves as the legal basis for processing data following subscription to the newsletter with the user’s consent.
      The legal basis for sending out the newsletter following the purchase of goods or services is Section 7, Para. 3 of the Unfair Competition Law (UWG).

      4. Purpose of the data processing

      The user’s email address is requested in order to supply the newsletter. The collection of any other personal data as part of the subscription process serves to prevent the misuse of the services and email address.

      5. Duration of data storage

      The data is deleted as soon as it is no longer required in order to fulfil the purpose for which it was originally collected. The user’s email address is therefore only saved for as long as the subscription to the newsletter is active. 

      The other personal data collected during the subscription process is generally deleted after a period of seven days.

      6. Opt-out and requests for deletion 

      You may withdraw your consent to receive the newsletter and to unsubscribe from the newsletter at any time. Inform us of your opt-out by clicking on the unsubscribe link in each newsletter email or email us at info@hamburg-tourismus.de.

      You may opt-out of receiving future product recommendations at any time without stating any reason by emailing info@hamburg-tourismus.de.

      [Translate to Französisch:] V. Mailings via post

      [Translate to Französisch:]

      1. Description and extent of data processing

      Our existing customers are regularly informed of product recommendations by post.

      1. Legal basis for data processing

      The legal basis is our legitimate interest arising from Art. 6, Para. 1(f) GDPR. The implementation of direct marketing measures is mentioned explicitly in recital 47. This also corresponds to our customers’ expectations because such measures have been in place for years.

      2. Purpose of the data processing

      The purpose is to provide our customers with new offers of our own goods and/or services that are similar to those they have already purchased from us.

      3. Opt-out and requests for deletion

      You always have the right to opt out of receiving advertising by post (Art. 21, Para 2 GDPR)

      [Translate to Französisch:] VI. Registration/ordering goods/tickets/services/product reviews

      [Translate to Französisch:]

      If you are making bookings on our site, for example to purchase tickets, vouchers or goods, book holidays or hotels or request other services, we will in principle only collect the data necessary in order to provide the service requested and that you yourself enter into the input field, such as your name and other contact details. In cases where payment is necessary, this may also include bank and/or credit card details. For payments, your data is usually transferred and processed by the payment provider you use in order to process the payment for your order. Payment providers generally also process your data for other purposes, such as to prevent misuse and in order to carry out identity and credit checks. For more information about data processing by your payment provider, please read their data privacy policy. 

      Personal data may also be shared with affiliated third parties, such as courier services, travel operators, ticket operators and/or hotels, if this is necessary in order to provide you with the service requested. 

      If a technical error occurs during the booking process that leads to the cancellation of the booking, an email is automatically sent to our IT support team with your booking details. This only happens, however, if the customer has already consented to it during booking or when concluding the contract.

      The legal basis for this is Art. 6, Para. 1 (b, f) GDPR. The purpose of the data processing is to be able to clarify technical errors within the system. You also have the option of requesting a call-back from our service centre. The legal basis for data processing in this case is Art. 6, Para. 1(a) GDPR. We will only use your data to deal with your request.

      1. Hotel reviews

      After booking, you also have the option of leaving a review for your hotel after your stay. To do this, we will process your email address and your review if you have provided us with your express consent to do so.

      The legal basis for data processing is Art. 6, Para. 1(a) GDPR. You may withdraw your consent at any time by contacting our Data Protection Officer (see below for contact details). In this case, we will delete your data. Otherwise, we will save your data for as long as it is required to fulfil the purpose of reviewing the hotel selected. This generally extends beyond the period of time in which we cooperate with the hotel you have chosen.

      2. Ship tours

      If you want to tour a ship (e.g. an MSC cruise ship), the German Federal Police require the shipping companies to register accurate data for visitors on board in advance (International Ship and Port Facility Security Code, ISPS). As a result, in addition to your full name and contact details, such as a phone number and address, we will also need your date and place of birth, and information from your passport or ID card. This data will be forwarded to the shipping companies.

      3. Legal basis for data processing

      The registration and subsequent data processing by us serves to fulfil a contract to which you are a party, or to carry out pre-contractual measures. The legal basis for the data processing is Art. 6, Para. 1(b) GDPR.

      The use of your data for a call-back due to a technical error with the booking is done in reference to Art. 6, Para. 1(a, b) GDPR.

      The legal basis for data processing with regard to ship tours is Art. 6, Para. 1(b) GDPR.

      4. Purpose of the data processing

      The collection, subsequent processing and potential sharing of your data is necessary in order to fulfil the contracts to which you are a party, or as required in order to carry out pre-contractual measures. Your registration may also be necessary in order for us to provide certain content and services on our website.

      We do not share your personal data with third parties unless we are obligated to do so by law, the sharing of data is necessary in order to implement the contractual relationship, or you have given your express consent for your data to be shared.

      External service providers and affiliates, such as online payment providers or a courier commissioned for the delivery of goods, will only receive your data to the extent that it is necessary in order to process your order. In such cases, the extent of the data shared is kept to the minimum necessary. Where our service providers process your personal data on our behalf, we ensure, in accordance with the commissioned data processing guidelines described in Art. 28 GDPR, that these service providers comply with the requirements of the data protection laws in the same way. Please read the data privacy policies from the relevant service providers.

      It is important to us that your data is processed within the EU/EEA. It may, however, be the case that we use service providers that process data outside of the EU/EEA. In such cases, prior to the transmission of your personal data, we ensure that your data is protected by the recipient with appropriate measures that are of a similar standard to those in place within the EU. This may be achieved via EU standard contracts or Binding Corporate Rules, or special agreements such as the EU Privacy Shield, whose regulations may be adopted by the company.

      5. Duration of data storage

      The data we handle is deleted as soon as it is no longer required in order to fulfil the purpose for which it was originally collected.

      This is the case for data collected during registration when the registration on our website is repealed or amended. 

      This is the case for data collected during the registration process in order to fulfil a contract or carry out pre-contractual measures if the data is no longer required in order to fulfil the contract. It may still be necessary to save personal data for the contractual partner beyond the conclusion of the contract in order to comply with contractual or legal obligations.

      For other third parties responsible for executing the contract, such as hotels, travel operators or payment service providers, there may be other data storage periods in place, or mandated by law. Please read the data privacy policies of the relevant third parties.

      6. Opt-out and requests for deletion

      You have the option to cancel your registration and/or have any personal data corrected by us at any time.  

      Ask the data controller and our data protection officer about how to delete your registration.

      If the data is required in order to execute a contract or carry out pre-contractual measures, it is only possible to delete the data beforehand if there are no contractual or legal requirements to the contrary.

      [Translate to Französisch:] VII. Google Analytics

      [Translate to Französisch:]

      This website uses Google Analytics, a Web analysis service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; ‘Google’). Its use includes the operating mode ‘Universal Analytics’. This does make it possible to assign data, sessions and interactions between several devices to a pseudonymous user ID and thus to analyse the activities of a user across different devices.  We have currently deactivated tracking across multiple devices.

      Google Analytics uses ‘cookies’, which are text files that are stored on your computer to help analyse your use of the website. The information generated by the cookie concerning your use of this website will normally be transmitted to a Google server in the USA and saved there. We have activated the anonymisation of IP addresses on our website. As a result, your IP address is shortened by Google within the European Union’s member states or in other states that are party to the contract outside of the European Economic Area before being transmitted to the USA. Only in exceptional circumstances will your entire IP address be transmitted to Google in the USA and shortened there.

      The IP address of your browser used by Google Analytics will not appear in conjunction with any other data from Google. Sessions and campaigns are terminated after a specific period of time. Sessions are terminated after 30 minutes of inactivity as standard, and campaigns after six months. The time limit for campaigns is a maximum of two years. More information about the terms of use and data protection can be found at: https://www.google.com/analytics/terms/de.html or at https://policies.google.com/?hl=de.

      The personal data is transmitted to the USA under the EU-US Privacy Shield on the basis of the adequacy agreement by the EU Commission. You can access the certificate here: 

      https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI

      1. Legal basis for data processing

      The legal basis for processing the user’s personal data is Art. 6, Para. 1(f) GDPR.

      2. Purpose of the data processing

      Google will use this information on our behalf to evaluate your use of the website, to produce reports on website activities, and to provide other services related to the use of the website and of the Internet. Such purposes also represent our legitimate interests.

      3. Duration of data storage 

      The data transmitted by us and linked with cookies or user identifiers (e.g. user IDs) is deleted automatically after 14 months. The deletion of data that have reached their maximum storage period is done automatically once a month.

      For more information about the duration of data storage, please visit https://www.google.com/analytics/terms/de.html and/or https://policies.google.com/?hl=de

      4. Opt-out and requests for deletion 

      You can prevent cookies being saved on your computer by adjusting your browser settings; however, we would like to point out that this may mean that you will not be able to use all the functions of this website. Furthermore, you can prevent the collection of data generated by the cookie and relating to your usage of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser add-on available under https://tools.google.com/dlpage/gaoptout?hl=de.

      Opt-out cookies prevent your data from being captured when you next visit this website. In order to prevent your data from being collected by Universal Analytics across several devices, you need to implement the opt-out on all of the systems you use. If you click here, the opt-out cookie will be saved on your computer: Deactivate Google Analytics (https://www.hamburg-tourism.de/?trcontrol=3).

      For more information on the Terms and Conditions of Use for Google Analytics and on Google’s Data Privacy Policy, please visit www.google.com/analytics/terms/de.html and/or https://policies.google.com/?hl=de.

      5. Use of the online marketing tool Adform

      5.1 Description and extent of data processing

      This website uses the online marketing tool Adform from Adform Germany GmbH, Großer Burstah 50–52, 20457 Hamburg, for the purposes of ad serving, conversion tracking and real-time advertising.

      We use Adform cookies in order to display adverts with relevance to the user, in order to improve the performance of campaigns or in order to avoid that a user sees the same adverts more than once. Furthermore, we can also record what are known as conversions, which relate to ad impressions, by using Adform cookie IDs. This is the case, for example, when a user sees an Adform advert and later visits our website using the same browser and buys something. 
      Adform third-party ad serving generates anonymous and pseudonymous data as follows: Every time the advert is viewed, the Adform ad server checks whether cookies are accepted from the user’s calling browser and whether this browser already has an Adform cookie, i.e. is familiar. If the browser is new and accepts cookies, a new Adform cookie is saved.

      In order to be able to display the advertising on the user’s browser, the full IP address of the user is transmitted to the ad server in the ad request and stored until the advertising is fully displayed (for several fractions of a second). Immediately after the advertising is displayed, the IP address, which is saved for any later verification processes (such as fraud, or ad fraud), is abbreviated to nine digits by removing the final three (known as the last octet). This masked IP address can no longer be traced to an individual user and is seen as anonymous.

      For each advertiser, the ad server also logs: 

      • which advertising was displayed,
      • from which medium the ad request came (URL)
      • any clicks on the advertising and the click rate (ratio to views in %)
      • duration for which the advertising remained visible
      • technical parameters of the browser (Chrome, Safari; installed plug-ins)
      • technical parameters of the end device (e.g. operating system, screen resolution)

      In each case, this is pseudonymous data, i.e. each user (or, more precisely, each Internet browser) is represented by its cookie ID. This cookie ID cannot be linked to the name or address of any natural person.

      For Adform conversion tracking, pseudonymous data is created as follows: In the Adform system, each cookie from third-party ad serving (A1) supplies various data about how the advertising is displayed (advertising, medium, click rate, visibility, etc.) 

      Via conversion tracking, this data is counted, supplemented with bookings or the number of page views. Another three variables are also transmitted with the cookie: the product name, value and post code.

      In each case, this is pseudonymous data, i.e. each user (or, more precisely, each Internet browser) is represented by its cookie ID. This cookie ID cannot be linked to the name or address of any natural person.

      For more information about Adform services, please visit https://site.adform.com/privacy-policy-opt-out/.

      5.2. Legal basis for data processing

      The legal basis for this is Art. 6, Para. 1(f) GDPR.

      5.3. Purpose of the data processing

      We use Adform cookies in order to display adverts with relevance to the user, in order to improve the performance of campaigns or in order to avoid that a user sees the same adverts more than once.

      5.4. Duration of data storage

      90 days

      5.5. Opt-out and requests for deletion

      You can opt out of this tracking process in various ways by adjusting your browser settings (blocking third-party cookies in particular means that you will not receive any advertising from third parties) or by deactivating cookies from Adform via your browser at https://site.adform.com/privacy-center/platform-privacy/opt-out/.

      5.6. travel audience

      The provider is travel audience GmbH, Elsenstraße 106, 12435 Berlin. The provider uses cookies to process pseudonymised data (unique user ID, user agent, IP) in order to determine whether users have accessed this website as a result of the provider's advertising measures. The data is also used anonymously to improve the product. The cookie will expire after 30 days.

      The provider's general handling of the collected data as well as an opt-out link can be found here : https://travelaudience.com/product-privacy-policy/

      [Translate to Französisch:] VIII. Google Ads (formerly Google AdWords), remarketing and conversion tracking

      [Translate to Französisch:]

      1. Description and extent of data processing

      We use the service Google Ads. Google Ads is an online advertising program offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’).

      Google Ads enables us to combine our ads with specific search terms. These ads may be superimposed when entering searches on websites in the Google advertising network (https://support.google.com/adwords/answer/1752334?hl=de). In addition, we also use Ads-Remarketing-Listen (https://support.google.com/adwords/answer/2701222?hl=de) for search ads. This enables us to adapt search ad campaigns for users who have already visited our website before. These services enable us to combine our ads with specific search terms or to show ads to previous visitors to our site in order to advertise services that the user viewed on the website, for example. By clicking on an ad or visiting our website, a cookie is saved on the user’s computer by Google. This information is used in order to address the user specifically if he/she enters a search query in the future. To do this, what is known as a ‘double-click’ cookie is sent to the browser if a user visits a page with double-click ads. For more information about double-click cookie technology, see: (https://support.google.com/dfp_premium/answer/2839090?hl=de). You can also find more information in Google’s information on website statistics (https://services.google.com/sitestats/de.html) and in its data privacy policy (https://policies.google.com/privacy?gl=de).

      With the aid of this technology, Google and us as a customer are informed that a user has clicked on an ad and was referred to our website in order to contact us via the contact form. The information acquired in doing so is used solely for a statistical analysis to optimise advertising. We do not receive any information that could be used to identify users personally. The statistics supplied to us by Google include the total number of users to click on one of our ads and whether these users were referred to one of the pages on our website featuring a conversion tag. Using these statistics, we can trace which search terms most often led to our ads being clicked on and which ads led to contacts via our contact form.

      2. Legal basis for data processing

      The legal basis for processing personal data with regard to the use of cookies is Art. 6, Para. 1(f) GDPR. It is our legitimate interest to display you advertising that is of interest to you, to make our website more appealing to you and to achieve a fair calculation of advertising expenses.

      With the user’s consent, Art. 6, Para. 1(a) GDPR serves as the legal basis for processing personal data with the use of cookies for analytical purposes.

      3. Purpose of the data processing

      We display Google Ads and use Google conversion tracking in this context in order to draw attention to our latest projects and developments, planned activities and services. Within the Google advertising network, our adverts are distributed among topic-relevant search results and websites based on the keywords defined by us.

      4. Duration of data storage

      The saved cookies expire after 90 days. For more information about the duration of storage, please ask the provider or visit https://www.google.de/intl/de/policies/privacy/.

      5. Opt-out and requests for deletion 

      Cookies are saved on the user’s computer and are transmitted from there. As a result, users have full control over the use of cookies. If you do not want your visit to our site to be used for statistical purposes, you can opt out of this by blocking the necessary cookies required for this technology via your browser settings, for example. You also have the ability to opt out of types of Google ads or deactivating targeted advertising on Google via the ad settings (https://adssettings.google.com/authenticated?hl=de). Alternatively, you can deactivate third-party cookies by visiting the Network advertising initiative deactivation tool (http://www.networkadvertising.org/choices/). We and Google still receive statistical information regarding how many users visited this site, and when. If you do not want to be included in these statistics, you may opt out with the aid of additional programs for your browser (e.g. with the Ghostery add-on (http://www.ghostery.com/)).

      6. Google Optimize

      Our website also uses Google Optimize. Google Optimize analyses the use of different variants of our website and helps us to improve its user-friendliness based on the behaviour of visitors to our site. Google Optimize is a stand-alone tool that analyses the data from Google Analytics.

      7. Google Tag Manager

      Google Tag Manager is another product from Google that enables us to manage website tags via an interface. Tags are small bits of code on our website that enable us, among other things, to measure traffic and user behaviour, to record the effectiveness of online advertising and social media, to use remarketing and targeted advertising and to test and optimise our website.

      The Tag Manager itself is a cookie-free domain and does not record any personal data. The tool acts as a trigger for other tags that may record data under some circumstances. Google Tag Manager does not access this data. If a deactivation has occurred at the domain or cookie level, this applies to all tracking tags implemented with Google Tag Manager. If you do not want to receive any targeted advertising, you can deactivate the use of cookies by Google for these purposes by visiting www.google.com/settings/ads/plugin.

      [Translate to Französisch:] IX. Bing Ads conversion tracking

      [Translate to Französisch:]

      1. Description and extent of data processing

      In order to advertise our services, we use Bing Ads (a service offered by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). The adverts are superimposed after search requests via the Yahoo!/Bing network in the search engines Bing, Yahoo! and MSN. This also gives us the opportunity to combine our ads with specific search terms so that we are present on all of the major search engines.

      Bing Ads also uses cookies in order to analyse user behaviour. By clicking on an ad or visiting our website, a cookie is saved on the user’s computer by Bing Ads. This information is used in order to address the user specifically if he/she enters a search query in the future. For more information, see the Microsoft Data Privacy Policy (https://privacy.microsoft.com/de-de/privacystatement) and the Guidelines on Data Security and Data Privacy Policy (https://advertise.bingads.microsoft.com/de-de/ressourcen/richtlinien/richtlinien-zur-datensicherheit-und-datnschutzerklaerung).

      Through Bing Ads, we also use Bing Ads conversion tracking in order to display targeted advertising. To do this, it is necessary to analyse user behaviour. In doing so, we only receive information from Bing that a user has clicked on an ad and has been redirected to our website. The information acquired in doing so is used solely for a statistical analysis to optimise advertising. We are not able to identify the user based on the data collected. The statistics provided to us by Bing include the total number of users to click on one of our ads. We also receive information about whether these users were redirected to a page on our website featuring a conversion tag. Using these statistics, we can trace which search terms most often led to our ads being clicked on and which ads led to contacts by the user via our contact form.

      2. Legal basis for data processing

      The legal basis for the processing of your data is Art. 6, Para. 1(f) GDPR. We use Bing Ads conversion tracking to display targeted advertising, to make our website more appealing to you and to achieve a fair calculation of advertising expenses.

      The personal data is transmitted to the USA under the EU-US Privacy Shield on the basis of the adequacy agreement by the EU Commission. You can access the certificate here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI

      3. Purpose of the data processing

      We use Bing Ads to draw attention to our latest projects and development, planned activities and services. Within the Bing advertising network, our adverts are distributed among topic-relevant search results and websites based on the keywords defined by us. The aim of Bing Ads conversion tracking is to display targeted advertising, to make our website more appealing to you and to achieve a more cost-effective calculation of our advertising expenses.

      4. Duration of data storage

      For information about the duration of data storage, please see https://privacy.microsoft.com/de-de/privacystatement.

      5. Opt-out and requests for deletion

      If you do not consent to your data being processed as described, you may block the cookies required for this technology via your browser settings, for example. In such cases, your visit will not influence user statistics. You also have the option of deactivating targeted advertising on Bing via the ad settings (https://account.microsoft.com/privacy/ad-settings/signedout). You can deactivate third-party cookies by visiting the Network advertising initiative deactivation tool (http://www.networkadvertising.org/choices/). We and Bing still receive statistical information regarding how many users visited this site, and when. If you do not want to be included in these statistics, you may opt out with the aid of additional programs for your browser (e.g. with the Ghostery add-on (http://www.ghostery.com/)).

      [Translate to Französisch:] X. Criteo

      [Translate to Französisch:]

      This website uses technologies provided by Criteo, based at 32 Rue Blanche, 75009 Paris, France.

      Criteo enables us to obtain information about the browsing habits of our website users in anonymous or pseudonymous form for advertising and marketing purposes. The service collects data on browsing habits via cookies and/or advertising IDs, which record the following:

      • Events relating to your activity on our website (such as number of pages viewed, products viewed on the website, searches you have carried out on this website)
      • Information about your end device (type of device, operating system, version)
      • Imprecise information about your location and from your abbreviated IP address in order to be able to advertise only those products actually available in your country, region or city
      • Events relating to advertising by Criteo, such as the number of ads displayed

      Data collected in this way is used to create a pseudonymous user profile.

      For more information about the extent of data collected and the duration of its storage, please see the Criteo Data Privacy Policy: https://www.criteo.com/de/privacy/. There, you can also block data collection for Criteo dynamic retargeting and Criteo sponsored products.

      You can also deactivate Criteo services via the links below. These platforms allow registered members to deactivate targeted advertising in their current browser.

      In the USA:
      Network Advertising Initiative Platform for the Opt-Out (https://www.networkadvertising.org/managing/opt_out.asp)
      DAA Opt-Out Platform (https://www.aboutads.info/choices/)

      In Europe:
      In order to deactivate services provided by Criteo in your Facebook account, please adjust your Facebook settings: Facebook settings (https://www.facebook.com/settings/?tab=ads).

      [Translate to Französisch:] XI. Job applications

      [Translate to Französisch:]

      1. Description and extent of data processing

      You can apply to work for our company electronically. We will of course only use your information to process your application and will not share it with third parties. Please make sure you only send applications in via our online application page. We only request the necessary data for applications. This information is marked in the input field as mandatory. Mandatory information includes your name and contact details, as well as the position of interest and your CV, references and qualifications. You may also provide other information, such as your salary expectations. This information is provided on a voluntary basis.

      2. Legal basis for data processing

      The legal basis for data processing is Art. 6, Para. 1(b) GDPR and Section 26, Para.1 German Federal Data Protection Act (BDSG). In the case of voluntary information regarding salary expectations or other information, as well as your consent to the longer storage of your application, Art. 6, Para. 1(a) GDPR serves as the legal basis.

      3. Purpose of the data processing

      We only use your data in order to process your application or, if you have consented, to inform you of future vacancies.

      4. Duration of data storage

      Once the application process is complete, we will delete your data after six months at the latest, unless you have given your express consent to us storing the data for longer. In such cases, we will delete your data after one year or if you revoke your consent to its storage.

      5. Opt-out and requests for deletion

      You may revoke your consent to the storage of your data at any time and to request that your data be deleted.

      [Translate to Französisch:] XII. Surveys and competitions

      [Translate to Französisch:]

      1. Description and extent of data processing

      If you participate in surveys or competitions, we collect the data required in order to be able to implement the competition or survey. In general, these are an individual competition post (e.g. a comment or photo), as well as a name and contact details. In the case of a competition, it may be necessary that we share your data with third parties involved in the competition in order to issue a prize. Such third parties may include couriers, travel operators or hotels. Data processing and data sharing may vary depending on the competition and is therefore described in detail in the Terms and Conditions for each competition. Participation in the competition and the associated data collection is, of course, voluntary. In the case of surveys, we will generally anonymise your personal data so that this information cannot identify you as a person, unless you have given your express consent for us to process your personal data.

      2. Legal basis for data processing

      The legal basis for the processing of your data is your consent in accordance with Art. 6, Para. 1(a) GDPR.

      3. Purpose of the data processing

      We only process your data in order to be able to implement the competition and/or survey. 

      4. Duration of data storage

      Your data will be deleted after the end of the competition, provided no further storage of the information is required due to a newsletter subscription, for example. We will delete your data once the competition is complete, the prizes have been issued and after any statutory warranty period. In the cases of surveys, your data is generally anonymised.

      5. Opt-out and requests for deletion

      You may revoke your consent to have your data processed or may file an objection to your data being processed at any time. If the data is required in order to execute a contract or carry out pre-contractual measures, it is only possible to delete the data beforehand if there are no contractual or legal requirements to the contrary.

      [Translate to Französisch:] XIII. Contact form and email contact

      [Translate to Französisch:]

      1. Description and extent of data processing

      There is a contact form on our website that can be used to contact us electronically. If a user decides to use this form, the data from the input field are sent to us and saved. 

      If you contact us via email or a contact form, the data you share with us (email address, name and phone number) is saved in order to answer your questions and deal with your enquiry.

      When the message is sent, the following data is also saved:

      1. User IP address
      2. Date and time of registration

      Alternatively, you can contact us via the email address provided. In this case, the user’s personal data transmitted with the email is saved. If you provide us with data regarding communication channels (such as email address, phone number), we will only use this information to answer your enquiry.

      This information will not be shared with third parties in this context. The data will only be used in order to process the enquiry.

      2. Legal basis for data processing 

      The legal basis for processing data shared when you make contact with us is Art. 6, Para. 1(f) GDPR. If we request information via the contact form that is not essential to our contacting you, such entries are always marked as optional. This information serves to clarify your request and improve the way we handle your enquiry. This information is provided on a solely voluntary basis and with your consent as per Art. 6, Para.1(a) GDPR.

      If the purpose of the email contact is to conclude a contract, the additional legal basis for processing the data is Art. 6, Para. 1(b) GDPR.

      3. Purpose of the data processing

      The processing of personal data from the input field is used solely to process the contact request. In the case of email contact, this also represents a necessary legitimate interest in the data processing.

      The other personal data processed while sending the message serve to prevent the misuse of the contact form and to ensure the security of our IT systems.

      4. Duration of data storage

      The data is deleted as soon as it is no longer required in order to fulfil the purpose for which it was originally collected. For the personal data from the input fields on the contact form and the data sent via email, this is the case once the conversation with the user has ended. The conversation is deemed ended if the circumstances imply that the subject of the enquiry has been conclusively clarified. 

      The other personal data collected while sending the message is deleted after a period of seven days at the latest.

      5. Opt-out and requests for deletion

      The user may revoke his or her consent to the processing of personal data at any time. If users contact us via email, they may revoke consent to the storage of their personal data at any time. In such cases, the conversation cannot be continued.

      All personal data saved during a contact request is deleted in such cases.

      [Translate to Französisch:] XIV. Use of reCaptcha

      [Translate to Französisch:]

      We use reCaptcha v2 on our websites. reCaptcha is a service provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and serves to prevent the misuse of automatic entries in online forms and thus serves to protect the host’s technical systems. We use it for this purpose and it therefore represents our legitimate interest under Art. 6, Para. 1(f) GDPR.

      If you visit one of our pages that features reCaptcha, a connection is established with Google’s servers. A reCaptcha cookie is saved. Your IP address is transmitted to Google.

      reCaptcha also records the following data via a method known as fingerprinting:

      • Browser plug-ins used
      • Cookies placed by Google in the past six months
      • Number of mouse clicks and touches on this screen
      • CSS information for the page visited
      • JavaScript elements
      • Date
      • Browser language

      Where personal data is transmitted to Google in the USA, this is done under the EU-US Privacy Shield on the basis of the adequacy agreement by the EU Commission. You can access the certificate here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI.

      You can prevent fingerprinting and cookies being saved on your computer by adjusting the technical settings in your browser; however, we would like to point out that this may mean that you will not be able to use all the functions of this website.

      You can find the Google Data Privacy Policy and Terms and Conditions of Use here: https://www.google.com/policies/privacy/ and here: https://policies.google.com/terms.

      [Translate to Französisch:] XV. Google Translate

      [Translate to Französisch:]

      We use an API from the translation service Google Translate on this site. This service is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

      In order to use Google Translate, it is necessary to save your IP address. This information is generally transmitted to a Google server in the USA and saved there. The providers of this website do not have any influence over the data transmission.

      For more information on how user data is handled, please see the Google Data Privacy Policy: https://www.google.de/intl/de/policies/privacy/.

      Google Translate is offered in the interests of providing better accessibility to our online services for international users. This represents a legitimate interest under Art. 6, Para. 1(f) GDPR.

      [Translate to Französisch:] XVI. Use of Toursprung maps

      [Translate to Französisch:]

      We use an API from Leaflets on our site to integrate maps from the OpenStreetMap Foundation (https://wiki.osmfoundation.org/wiki/Main_Page). As an alternative to Google Maps, OpenStreetMap is an open-source JavaScript library that enables us to integrate interactive maps on our website. In order to display the maps correctly, it is necessary from a technical point of view to send requests to the server server.arcgisonline.com. These requests mean that it is fundamentally possible that information about your use of this website (including your IP address and location data) is sent to other servers and saved there. The legal basis for the use of OpenStreetMap is Art. 6, Para. 1(f) GDPR.

      To our knowledge, the user data is used by OpenStreetMap solely to display the map functions and to save the settings selected. For more information about OpenStreetMap and the length of time for which data is saved, please ask the provider or visit https://www.openstreetmap.de/faq.html or  https://wiki.osmfoundation.org/wiki/Privacy_Policy . For more information on the Leaflets API, please visit https://www.leafletjs.com.

      [Translate to Französisch:] XVII. Customer reviews of POIs

      [Translate to Französisch:]

      Visitors to our website are able to leave reviews on its subpages. At the request of the site visitor, we publish the review on our website once our editorial team has received the email.

      The legal basis for data processing is Art. 6, Para. 1(a) GDPR. Once the review has been approved by the editorial team, it will be visible to all visitors of our site. We would like to inform you that you may revoke your consent at any time. In such cases, the review, including the data provided in conjunction with the review, will be deleted, except in cases where we are legally obliged to store your data for longer. 

      [Translate to Französisch:] XVIII. Two-click solution for the integration of social media plug-ins

      [Translate to Französisch:]

      The website does not integrate any social media plug-ins directly into the site. This means it is impossible for third parties to form profiles.

      In order for us still to be able to share our services on Facebook and Twitter, for example, we use what is known as the two-click solution.

      Only if you decide to share content via the relevant interface and click on it is the data transmitted to the operator of the relevant social media channel. 

      We recommend that you read the Data Privacy Policy of the social media channel in question before using it so that you are informed of the purpose and extent of the data collected and its subsequent processing and use, as well as of your rights in this regard and the settings you can adopt to protect your privacy.

      You can find them here:

      [Translate to Französisch:] XIX. Two-click solution for the integration of YouTube

      [Translate to Französisch:]

      It is our aim to provide you with information via a wide range of media. As a result, we integrate videos from YouTube (YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA). YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

      YouTube is an online video-sharing platform that makes it possible for people to publish videos for free and for other users to watch, rate and comment on videos, also for free. YouTube permits the publication of all types of videos, which is why entire films and TV shows can be viewed on the site, along with music videos, trailers and videos made by users themselves.

      In order to view our videos, users need to click on the preview image. Only once the information box is clicked away or the user logs in can the video be viewed. 

      The integration of YouTube videos also takes place in an expanded data privacy mode, or uses the no-cookie solution. This means that only when a video is played are YouTube cookies and pixel tags placed in order to tailor advertising and search results.

      When a YouTube video is played, the following data is sent to Google as the operator of YouTube:

      • IP address
      • The specific address of the site accessed
      • The browser ID transmitted
      • System date and time of page visit
      • Existing cookies permitting the clear identification of your browser

      As the operator of YouTube, Google has sole responsibility for processing this data. More information is available at: policies.google.com/privacy.

      We would like to inform you that Google may receive other information about cookies previously saved on your computer. We have no influence over how Google may use this information.

      You can find the YouTube Data Privacy Policy here: https://policies.google.com/privacy?hl=de&gl=de

      [Translate to Französisch:] XX. Facebook conversion tracking pixel

      [Translate to Französisch:]

      In order to provide targeted online advertising, we use the Custom Audiences service from Facebook, Inc. (1601 S. California Avenue, Palo Alto, CA 94304, USA). For this purpose, we specify target groups of users on the basis of certain characteristics in the Facebook ad manager. These target groups will then receive the relevant ads within the Facebook network. The users are selected by Facebook using their profile information and other data provided through the use of Facebook. If a user clicks on an advert and is redirected to our website, Facebook will receive the information that the user clicked on the advertising banner via the Facebook pixel integrated on our website.

      In general, a non-reversible and non-personal checksum (hash value) is generated from your user data that is transmitted to Facebook for analysis and marketing purposes. In doing so, a Facebook cookie is placed on your computer. This records information about your activity on our website (e.g. browsing habits, subpages visited, etc.) In order to manage the display of advertising on a geographical basis, your IP address is also saved and used.

      We do not use Facebook Custom Audiences via the client list and the ‘extended comparison’ function.

      For more information concerning the purpose and extent of data collection, further processing and use of the data by Facebook as well as your optional settings to protect your privacy, please refer to Facebook’s Data Privacy Policy. You can adjust the settings with regard to which advertising is displayed to you on Facebook by clicking on the link, or in your Facebook account settings.

      The transmission of data to the USA is permitted under Art. 45 GDPR because Facebook is Privacy Shield-certified and thus deemed to offer an appropriate level of data protection according to Implementing Directive 2016/1250 of the EU Commission (https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016D1250&from=DE). The certificate can be viewed at: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active  .

      You can opt out of data being recorded by the Facebook pixel by clicking on the following link: https://www.facebook.com/ads/settings. It will set an opt-out cookie (persistent HTML5 storage object) that prevents your data from being captured when you next visit this website. Alternatively, you can prevent data from being collected by visiting: https://www.facebook.com/ads/settings

      You can prevent any cookies from being saved by selecting the relevant setting in your browser software. However, we would like to point out that this may mean that you will not be able to use all the functions of this website. Other options for deactivating third-party cookies can be found at www.networkadvertising.org/managing/opt_out.asp or on the Digital Advertising Alliance Opt-Out platform at http://optout.aboutads.info/?c=2&lang=en.

      [Translate to Französisch:] XXI. Facebook fan page

      [Translate to Französisch:]

      1. General information

      Social media have become an integral part of the Internet and of modern communication. In order to stay in contact with our customers and potential customers, we have also set up our own fan page on Facebook. Facebook is a service provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, and is certified under the EU/US Privacy Shield. With Implementing Directive (EU) 2016/1250 of the EU Commission dated 12 July 2016, the level of protection provided under the EU/US Privacy Shield is deemed of an equal standard to the level of protection within the European Union.

      We hereby emphasise that Facebook saves and uses its user data (such as IP address, preferences and personal interests, browsing habits on Facebook, any personal information saved on Facebook) for commercial purposes.

      The processing and subsequent use of this data is outside of our control because Facebook alone governs the data processing. The extent to which what data is saved, where and for how long, the extent to which the data is linked and analysed, and with whom the data is shared, is currently unknown to us. We also have no insight or influence with regard to deletion dates, i.e. whether and how accurately deletion dates are observed.

      For information from Facebook itself regarding which information is collected, please see the Facebook Data Privacy Policy, which can be viewed here.

      If you are a member of Facebook and have logged in to your account, Facebook can attribute your visit to our site to your user account. If you would like to prevent Facebook from linking your visit to our fan page with the data saved about you in your Facebook account, you must:

      • Log out of Facebook before each visit to our fan page
      • Delete existing cookies on your device
      • Close your browser and reopen it

      In this way, Facebook states, all information by which Facebook could identify you has been deleted.

      2. Extent of data collection and storage

      You do not need to be signed up to Facebook in order to view the content of our Facebook fan page. However, Facebook collects, stores and uses data for each visit to our site.

      When you call up our fan page, your browser established a connection with a Facebook server. In doing so, data may be transmitted to countries outside of the European Union. In any case, your IP address will be transmitted and cookies are saved on your device, whether you are signed up to Facebook or not. If you are a member of Facebook and have logged in to your account, Facebook can attribute your visit to our site to your user account.

      Some of the cookies saved are session cookies, which are deleted when the browser is closed, and permanent cookies, which remain on the device until they expire or until they are deleted by the user. A cookie is a tiny text file that enables a website to recognise a browser. Cookies are saved on the computer when it accesses a website and are called up and read the next time the server is accessed.  Via your browser settings, you can decide whether you want to allow cookies, and which ones you want to permit, block or delete. You can find instructions for various browsers here: Internet Explorer, Firefox, Google Chrome, Google Chrome mobile, Microsoft Edge, Safari, Safari mobile. Alternatively, you can install ad blockers, such as Ghostery.

      According to Facebook, the cookies it employs are used for authentication, security, website and product integrity, advertising and measurement, website functions and services, performance and analysis and research. For details of the cookies used by Facebook (e.g. name of the cookies, functional duration, content recorded and purpose), please see: https://www.facebook.com/policies/cookies/, by following the relevant links.

      For settings relating to which adverts you see on Facebook, or that you no longer want to see, please see https://www.facebook.com/about/basics/advertising and http://www.youronlinechoices.com and make the relevant adjustments.

      Under the above link, you can manage your preferences regarding usage-based online advertising. If you object to receiving usage-based online advertising from a specific advertiser with the aid of the preference manager, this only applies to collection of specific commercial data via the web browser currently in use. Preference management is cookie-based. Deleting all browser cookies also leads to the removal of all preferences set up with the preference manager.

      • User communication: User interactions (posts, likes, etc.): Art. 6, Para. 1(f) GDPR 
      • Targeted advertising:
        • Facebook cookies: Art. 6, Para. 1(f) GDPR 
        • Demographic data (e.g. based on age, place of residence, language  or gender): Art. 6, Para. 1(f) GDPR 
        • Statistical data on user interactions in aggregated form, i.e. without direct personal references for us (e.g. Page activities, page impressions, page previews, likes, recommendations, posts, videos, page subscriptions, including origin, time of day): Art. 6, Para. 1(f) GDPR 

      Automatic decision making and profiling as described in Art. 22 GDPR does not take place.

      We only save personal data for as long as is necessary to fulfil the purpose for which the data was collected. Within a business relationship with you, we save your personal data for as long as the business relationship exists. This includes the run-up to and implementation of the contract, as well as the regular statute of limitations. We also save the data as mandated if we are subject to statutory data storage requirements. Such requirements may arise from the German Commercial Code (HGB) or German Fiscal Code (AO).

      If you have consented to a processing step, the data associated with the consent given shall be stored until the consent is revoked or, at the latest, for the duration of the processing step and according to the post-processing statute of limitations.

      3. Facebook Insights

      We use the Facebook Insights function for the purposes of statistical analysis. In this context, we receive anonymised data about the users of our Facebook fan page. It is therefore not possible for us to link this data to you. For more information, please see Facebook’s cookie policy.

      4. Sharing and using personal data

      Recipients or categories of recipients:

      Facebook

      If you interact with Facebook, Facebook of course has access to your data. It is specifically possible that Facebook Inc., 1601 Willow Road, Menlo Park, California 94025, USA, has access to your data. Facebook is based in an insecure third country, where the level of data protection is lower. Facebook is subject to the EU/US Privacy Shield, which requires it to implement an appropriate – by European standards – level of data security.

      Existing EU/US Privacy Shield certificates may be viewed at https://www.privacyshield.gov/list. With Implementing Directive (EU) 2016/1250 of the EU Commission dated 12 July 2016, the level of protection provided under the EU/US Privacy Shield is deemed of an equal standard to the level of protection within the European Union.

      5. Legal basis

      If data processing is necessary in order to protect a legitimate interest of our company or of a third party and if this interest is not superseded by the interests or fundamental rights and freedoms of the data subject, Art. 6, Para. 1(f) GDPR serves as the legal basis. We understand our legitimate interest in data processing as the presentation of our company, its products and services for your information and, specifically, as the provision of modern communication options for you.

      6. Your rights

      If the legal criteria are fulfilled, you have the following rights:

      • Access to information: Art. 15 GDPR
      • Rectification: Art. 16 GDPR
      • Deletion: Art. 17 GDPR
      • Blocking/restricting processing: Art. 18 GDPR
      • Objection: Art. 21 GDPR
      • Data portability: Art. 20 GDPR
      • Right to lodge a complaint with a supervisory authority: Art. 77 GDPR
      • Right to withdraw consent with future effect: Art. 7, Para. 3 GDPR

      According to Art. 21 GDPR, you have the right to object at any time to the processing of personal data relating to you where the processing is done in accordance with Art. 6, Para. 1(e, f) GDPR for reasons resulting from your particular situation; this also applies to any profiling based on these provisions. If personal data is processed in order to offer direct advertising, you also have the right to object at any time to the processing of personal data relating to you for the purposes of such advertising; this also applies to any profiling, provided that it is connected with this kind of direct advertising.

      7. Contact details for the data controller and Data Protection Officer; shared responsibility under Art. 26 GDPR

      Hamburg Tourisms GmbH
      Wexstraße 7
      20355 Hamburg

      and 

      Facebook Ireland, Ltd.
      4 Grand Canal Square, Grand Canal Harbour,
      D2 Dublin
      Ireland

      In the view of the European Court of Justice (ECJ), we share the responsibility for the processing of your personal data with Facebook. The decision of the ECJ dated 05/06/2018 can be found here.

      As a result of our shared responsibility, we hereby inform you under Art. 26 GDPR of the key details of our existing agreement with Facebook governing our shared responsibility:https://www.facebook.com/legal/terms/page_controller_addendum

      If you have any other questions regarding data privacy, please contact us. If you have any questions about the collection, processing or use of your personal data, or if you wish to request information, correct, block or delete data or revoke any consent you may have granted, please contact Ms Rammo (see below for contact details). Exercising your rights as above is free of charge.

      8. For more information

      For more information about the safe use of social networks, please see the website of the German Federal Office for Information Security at: https://www.bsi-fuer-buerger.de/BSIFB/DE/DigitaleGesellschaft/SozialeNetze/sozialeNetze_node.html

      [Translate to Französisch:] XXII. Own channels on third-party websites

      [Translate to Französisch:]

      We operate our own channels on third-party websites. By doing so, we aim to inform their active users and interested parties of our services and offer them the opportunity of direct communication.

      We would like to inform you that, as a result, user data may be processed outside of the European Union. This may be associated with risks for the user because it may be more difficult for the user to assert his or her rights, for example. With regard to US companies certified under the Privacy Shield, we would like to inform you that they are obliged to maintain the EU’s data security standards.

      Furthermore, user data is usually processed for the purposes of market research and advertising. This enables the creation of website user profiles based on user browsing habits, for example. These user profiles may then be used in order to display targeted advertising within and outside of the platforms that correspond with the user’s presumed interests. For this purpose, cookies are generally saved on the user’s computer and store the user’s behaviour and interests. Furthermore, the user profiles may also feature data saved independently of the devices used by the user (particularly if the user is a member of the platform and is logged in at the time).

      The legal basis for processing of personal data is Art. 6, Para. 1(f) GDPR. If the user is asked by the platform’s operator to consent to the data processing as described above, the legal basis for the data processing is Art. 6, Para. 1(a), Art. 7 GDPR.

      For more information about the processing of personal data collected and your options for objecting to it, please see the website operator’s Data Privacy Policy.

      1. YouTube , LLC 901 Cherry Ave., 94066 San Bruno, CA, USA, a Google Inc. company, Amphitheatre Parkway, Mountain View, CA 94043, USA; website: www.youtube.com; Google Data Privacy Policy:  https://www.google.de/intl/de/policies/privacy/
      2. Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA; Data Privacy Policy: https://twitter.com/de/privacy, (settings) https://twitter.com/personalization; Privacy Shield (maintaining data privacy for data processed in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active.
      3. Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA; website: https://www.instagram.com; Data Privacy Policy http://instagram.com/about/legal/privacy.

      [Translate to Französisch:] XXIII. Data security

      [Translate to Französisch:]

      We have taken technical and organisational security measures to protect your data that has been processed by us from accidental or deliberate manipulation, loss and destruction, as well as from access by unauthorised parties. We continually improve our security measures based on technological developments.

      [Translate to Französisch:] XXIV. Rights of the data subject

      [Translate to Französisch:]

      If your personal data is processed, you are the data subject within the understanding of GDPR and you have the following rights vis-à-vis the data controller.  

      We would be happy to provide you with information about whether we process your personal data, to what extent and for what purposes (Art. 15 GDPR). Furthermore, where the legal criteria apply, you also have the right to rectification (Art. 16 GDPR), to the restriction of processing (Art. 18 GDPR), to deletion (Art. 17 GDPR) and to data portability (Art. 20, GDPR).

      Where the legal criteria apply, you also have the right to object to data processing (Art. 21 GDPR).

      If you wish to exercise the rights as above, please email KRammo@intersoft-consulting.de or write to our company address. Exercising your rights as above is free of charge.

      Without prejudice to these rights or the option to exercise any other administrative or judicial remedy, you have the right at any time to assert your right to appeal to a supervisory authority, particularly in the Member State where you are resident, where you work or where the presumed infringement occurred, if you are of the opinion that your personal data was processed in contravention of data protection regulations (Art. 77 GDPR).

      The relevant supervisory authority for our company is: the Hamburg Representative for Data Protection and Freedom of Information.

      [Translate to Französisch:] XXV. Changes to the privacy policy

      [Translate to Französisch:]

      This data privacy policy will be adapted over the course of the development of the Internet and our services. We will publish any amendments on this page in good time. In order to remain up to date regarding the latest status of the provisions regarding our data use, please visit this site regularly.

      [Translate to Französisch:] XXVI. Contact details for Data Protection Officer

      [Translate to Französisch:]

      Ms Katrin Rammo
      intersoft consulting services AG
      Beim Strohhause 17
      20097 Hamburg, Germany

      Phone: +49 (0)40 790 235 235
      Email: KRammo@intersoft-consulting.de

      Langues

      Google translator pour d'autres langues

      Veuillez noter qu'il s'agit d'une traduction automatique.
      Pour une meilleure information, vous pouvez toujours passer à la version allemande ou anglaise.

      We process your data in accordance with the provisions of our Data Privacy Statement.

      S'abonner à la newsletter Vous aimez Hambourg ? Nous aussi.

      Avec notre newsletter mensuelle, nous vous informons des offres actuelles et des événements passionnants. Gratuitement, bien sûr.

      © Powell83 – stock.adobe.com
      Ajouter à la liste des favoris
      Ajouter aux favoris