ONLINE PRIVACY STATEMENT
The protection of your data is extremely important to us! This online Privacy Statement informs you about which data we collect and how we use it.
We exclusively process the data that is collected and stored about the use of this website according to the statutory provisions and with due adherence to the data protection regulations, in particular the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). Where third parties are commissioned with the provision and fulfilment of services, they are contractually obliged to comply with our data protection standards as a matter of course as well.
Below you will find information about the collection of personal data when using our website. In particular, we will instruct you in the manner, scope and purpose of processing your personal data when visiting our website.
SECTION 1 CONTROLLER
The controller according to Art. 4 paragraph 7 GDPR is Tourismuszentrale Rostock & Warnemünde, Büro Hanse Sail, Warnowufer 65, 18057 Rostock, tel. +49 (0)381 381 29 97, email firstname.lastname@example.org You can contact our Data Protection Officer at email@example.com
SECTION 2 COLLECTION OF PERSONAL DATA WHEN USING OUR WEBSITE
(1) Personal data means all data that relates to you, e.g. name, postal address, date of birth, email addresses, user behaviour.
(2) When you make contact with us by email or using the contact form, we store the data you disclose (your email address, possibly your name and telephone number) in order to answer your enquiry. We erase the data collected in this way when the purpose of its storage no longer applies or restrict the processing of your data where we are subject to statutory retention periods.
(3) We use SSL encryption for data transfer via the Internet when you access pages and files on www.hansetag-rostock.com and in doing so are requested to provide personal data. This prevents unauthorised access by third parties. Your personal data will not be transferred or used for purposes other than those stated herein.
SECTION 3 YOUR RIGHTS
(1) You have the following rights in regard to your personal data: • right to information; • right to rectification or erasure; • right to restriction of processing; • right to object to processing; • right to data portability.
(2) Right to object to data processing You have the right under certain circumstances to object – party or completely – to the processing of your personal data, unless we can demonstrate compelling legitimate grounds that override your interests, or the continued processing is necessary for the establishment, exercise or defence of legal claims.
(3) Right to withdraw consent to data processing Where processing of your personal data takes place based on your express, prior consent, you are entitled to withdraw this consent – partly or completely – at any time, effective for the future. This does not affect the processing of your data that is carried out according to other statutory provisions.
(4) Right to data portability Where we process your personal data based on your express, prior consent or for the performance of a contract with you, you have the right under certain circumstances to receive the data or to have the data transferred by us to another controller in a structured and machine-readable format.
(5) Kindly address all requests for information, erasure and rectification, as well as all requests for confirmation and data portability and objections to data processing to: firstname.lastname@example.org
SECTION 4 COLLECTION OF PERSONAL DATA WHEN VISITING OUR WEBSITE
(1) Where you visit our website for informational purposes only, so when you do not log on, register or otherwise disclose information to us during your use of our website, we will only collect the data that your browser transmits to our server. If you wish only to view our website, we collect the following data that is technically necessary to display our website and to guarantee its stability and security (the legal grounds are set out in Art. 6 paragraph 1 sentence 1 point (f) GDPR):
• date and time of the request • time zone difference to Greenwich Mean Time (GMT) • content of the request (specific page) • access status/HTTP status code • data volume transmitted in each case • referrer website • browser • operating system and its interface • browser language and software.
(2) In addition to the data mentioned above, cookies are placed on your computer when you use our website. Cookies are small text files that are stored on your hard drive depending on the browser you use and which send certain information to the site that places the cookie (in this case us). Cookies are unable to execute programs or place viruses on your computer. Their purpose is to improve the ease-of-use and efficiency of our website.
(3) You can adjust your browser settings in a variety of ways, for instance to reject third-party cookies or to disable cookies entirely. Kindly take note that if you do so, you may not be able to use the full functionality of this website.
SECTION 5 OTHER FUNCTIONS AND SERVICES ON OUR WEBSITE
(1) Besides the purely informational use of our website, we also provide a variety of services that may be of interest to you. In these cases you will usually be required to provide personal data that we use for the provision of the individual services and that is subject to the principles of data processing set out above. All information that you may disclose voluntarily is marked suitably as such.
(2) We use external service providers to process your data in some cases. We have selected and commissioned them carefully; they are required to adhere to our instructions and are audited regularly. In particular, they have entered into a contractual undertaking to adhere to our data protection standards.
(3) Where our service providers or partners are located in a state outside of the European Economic Area (EAR), we will inform you of the consequences in the description of services.
SECTION 6 COLLECTION OF PERSONAL DATA FOR THE CLAIMING OF SERVICES VIA ONLINE FORMS, FOR RECIPIENTS OF EMAIL SERVICES AND OTHER FUNCTIONS
(1) We collect personal data in the following processes, for example: • to claim services using online forms • for recipients of email services
(2) Online forms For some of our online services, we require personal data to be able to provide these services (contacting us, call-back service, online information, applications, notifications). Where you wish to make use of these services, we collect, store and process only the data that is necessary for the provision of these services. This data will only be used for the specified purpose. The specific data we collect for the provision of individual services is as indicated in the respective input screens. All other data is voluntary and is marked as such. Data processing takes place according to the statutory provisions as set out in Art. 6 paragraph 1 point (a) (consent) of the GDPR. Processing is lawful where you have provided consent to processing. You may withdraw your consent at any time.
(3) Recipients of email services Where we receive an email from you (e.g. using the contact form), we will assume that we are entitled to answer by email also. A different form of communication (e.g. postal correspondence) would otherwise be necessary. For reasons of data protection, we respond by post to enquiries containing personal data. Where you send us an email, your email address will be stored for correspondence purposes only.
(4) Newsletter data If you would like to order the newsletter offered on the website, we require your email address and information enabling us to verify that you own the email address given and have agreed to receive the newsletter. No other data will be collected. We use this data for the sole purpose of sending the requested information and shall not pass it to third parties.
You may withdraw your consent at any time for the storage of your data, your email address and the usage thereof to send the newsletter, for example by using the unsubscribe link in the newsletter. The data is stored by the provider CleverReach®.
SECTION 7 OBJECTION OR WITHDRAWAL OF CONSENT FOR DATA PROCESSING
(1) Where you have consented to the processing of your data, you may withdraw your consent at any time. Your withdrawal of consent is without prejudice to the lawfulness of data processing conducted after your expression of consent.
(2) Where processing of your personal data takes place according to a balancing of interests, you have the right to object to this processing. This is the case in particular where processing is not necessary for the performance of a contract with you, as indicated by us in the description of functions. When exercising the right to object, we request that you inform us of the reasons why our right to the processing of your personal data should no longer apply. Where your objection is legitimate, we will review the circumstances and will either refrain from processing, adapt processing or inform you of our compelling legitimate interests for the continuation of processing.
(3) Naturally, you may object at any time to the processing of your personal data for marketing and data analysis purposes. To exercise your right to object to the use of your personal data for marketing purposes, kindly contact us at: email@example.com
SECTION 8 STATISTICAL ANALYSIS USING GOOGLE ANALYTICS
This website uses functions of the web analysis service Google Analytics. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and facilitate analysis of your use of the website. The information generated by the cookie about your usage of this website is usually sent to one of Google’s servers in the USA and stored there. However, if IP anonymity is enabled for this website, anywhere within the member states of the European Union or in other countries that are parties to the Agreement on the European Economic Area, your IP address will first be abbreviated by Google. Your full IP address will be transmitted to a Google server in the USA and truncated there only in exceptional cases. Google will use this information on behalf of this website’s operator to evaluate your use of this website, to create reports about the website activities, and to provide additional services connected with the website and Internet use to the website operator. The IP address transmitted from your browser as part of Google Analytics is not associated with any other data held by Google. You can prevent the Cookie storage by an appropriate setting in your browser software; however, we would like to point out that in this case you might not be able to use all functionalities of this website. In addition, you may prevent the transmission of the data created by the cookie related to your use of this website (including your IP address) to Google, and the processing of this data by Google, by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de
SECTION 9 STANDARD PERIODS FOR THE ERASURE AND BLOCKING OF PERSONAL DATA
Your personal data will only be stored for the period that is necessary for us to fulfil the purpose of its storage or as required or intended for compliance with legal obligations. If the storage purpose is not applicable, the personal data are routinely blocked or erased in accordance with statutory provisions.
SECTION 10 EXISTENCE OF AUTOMATED DECISION-MAKING
Profiling describes the compilation of personality, behavioural or activity profiles through the collection and analysis of data to provide a schematic, algorithm-based, overall impression of an individual personality. As a responsible entity under public law, we do not use automated decision-making or profiling.
SECTION 11 DATA SECURITY
We maintain up-to-date technical and organisational measures to guarantee security of processing, in particular to protect your personal data from the risks associated with data transfer and access by unauthorised third parties. These measures are kept state-of-the-art and are adapted to suit the necessary protection of the personal data and the risks to your rights and freedoms.
SECTION 12 AMENDMENT OF THIS PRIVACY STATEMENT
We will review this Privacy Statement on a regular basis and amend it where necessary to protect your personal data. You are advised to read the Privacy Statement from time to time in order to obtain current information on how we protect your data and continuously improve the content of our website. Where we make significant changes to the collection, use and/or transfer of the personal data provided by you, we will notify you suitably in an unambiguous statement at a prominent position on our website. You agree to the provisions of this Privacy Statement by continuing to use this website.