Source: https://www.boppard-tourismus.de/17-3-Privacy.html
Timestamp: 2019-04-21 20:14:03+00:00

Document:
The subject of data protection is personal data (hereinafter referred to as data). Personal data include all information relating to an identified or identifiable natural person. These data include, for example, the name, address, occupation, e-mail address, health status, income, marital status, genetic features, telephone number and if applicable also user data such as an IP address.
The legal admissibility of this data processing is based on Art. 6 (1) b) GDPR, according to which processing is lawful when it is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
Provision of your data is necessary to invoke the operator's website. Failure to provide data means that the website can no longer be invoked and the operator's services cannot be utilised.
The log files are analysed by the operator in anonymised form in order to continuing to improve the website and make it more user-friendly, to detect and rectify errors more quickly and to control server capacities. For example, the operator is able to determine the preferred times of access to the website and therefor provide appropriate amounts of data volume.
The legal admissibility of this data processing may also be based on Art. 6 (1) f) GDPR, according to which processing is lawful when it is necessary to safeguard the legitimate interests of the controller or a third party, so long as these interests are not overridden by the fundamental rights or freedoms of the data subject, which require the protection of personal data. The legitimate interest of the controller involves the provision of a website to convey information and offer services as well as the improvement of the websites performance.
The provision of data is neither required by law nor required for the performance of a contract. Failure to provide the data will result in you being unable to enter the operator’s website.
In the navigation bar, you have the option to contact the operator by clicking the respective field. This message automatically uses the e-mail address that is linked to the e-mail client you use. If you do not wish your e-mail address to be invoked in this way, you can change the settings in your e-mail program. The operator processes your data to communicate with you and to respond to your request.
The legal admissibility of this data processing is based on Art. 6 (1) b) GDPR, according to which processing is lawful when it is necessary for the performance of a contract to which the data subject is party or to take steps at the request of the data subject prior to entering into a contract.
Provision of data is conducted on your request.
Failure to provide the data means that you are unable to send a message to the operator.
Your data is used to process your reservation and are forwarded to the accommodation facility.
The legal admissibility of this data processing is based on Art. 6 (1) b) GDPR, according to which processing is lawful when it is necessary to perform a contract to which the data subject is party or to take steps at the request of the data subject prior to entering into a contract. Provision of your data is necessary for the performance of a contract.
The lawfulness of this processing shall also comply with Art. 6 (1) lit. f of the GDPR, according to which processing shall be lawful if it is necessary to safeguard the legitimate interests of the controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject that require protection of personal data. The provision of a booking system for various organisers and third-party providers shall constitute legitimate interest. Failure to provide the data means that you cannot book a reservation.
Cookies do not damage your computer in any way. They do not contain viruses and also do not allow the operator to spy on you. There are two types of cookies. Temporary cookies are automatically deleted when closing your browser (session cookies). In contrast, permanent cookies have a maximum lifetime of up to 20 days. This type of cookie allows your computer to be recognised when you visit the website on a re-entry. The cookies allow the operator to track your use behaviour for the purposes listed above and to an appropriate extent. Cookies also allow you to optimally surf the operator's website. These data are collected by the operator only in anonymised form.
The legal admissibility of this data processing is based on Art. 6 (1) b) GDPR, according to which processing is lawful when it is necessary to perform a contract to which the data subject is party or to take steps at the request of the data subject prior to entering into a contract. The legal admissibility of this data processing may also be based on Art. 6 (1) f) GDPR, according to which processing is lawful when it is necessary to safeguard the legitimate interests of the controller or a third party, so long as these interests are not overridden by the fundamental rights or freedoms of the data subject, which require the protection of personal data. The legitimate interests of the controller involve the provision of a website that contains no errors and the opportunity to offer visitors the best user experience. Provision of your data is not prescribed by law. It is possible to visit the website without cookies. If you do not want the operator to recognise your computer, you can prevent the storage of cookies on your hard drives by selecting the option "do not accept cookies" on your browser settings. To find out specifically how to do this, please read the instructions provided by your browser manufacturer. If you choose to accept no cookies, this may limit the functionality of the website.
The data about the use of the website are generally transmitted to a Google server in the US and stored there. If IP- anonymisation is activated on the website, your IP address within Member States of the European Union or other Signatory States to the Agreement on the European Economic Area will be abbreviated in advance. Only in exceptional cases the full IP address will be transmitted to a Google server in the US and abbreviated there.
Google uses this information to analyse the use of the website, compile reports about website activity for the operator and offer additional serves relating to the use of the website and the internet. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. This use takes place in anonymous or pseudonymous form.
Google Analytics uses the Double Click DART cookie. You can deactivate the DART cookies by downloading and installing the plug-in available at https://www.google.com/settings/ads/plugin?hl=deexterner Link.
The legal admissibility of this data processing is based on Art. (1) a) GDPR, according to which processing is lawful when the data subject has provided consent to the processing of their personal data for one or more purposes. Provision of your data is not prescribed by law.
This website reproduces the contents of the website www.tourenplaner-rheinland-pfalz.deexterner Link. A tracking pixel is linked to this content; this pixel collects and processes data about access to this content. The operator of the website, Outdooractive GmbH & Co. KG, uses information collected in this way to determine access to this content (e.g. pop-ups, page views, actions, downloads). The results are provided to the operator to analyse. This allows the operator to determine the preferred contents of the www.tourenplaner-rheinland-pfalz.deexterner Link website. The tracking pixel does not collect or process any personal data.
The legal admissibility of this data processing is based on Art. 6 (1) a) GDPR, according to which processing is lawful when the data subject has provided consent to the processing of their personal data for one or more purposes. Provision of your data is not prescribed by law.
The operator uses social plug-ins from various social networks (e.g. Facebook). You can use these plug-ins for example to share content or to recommend a product. Plug-ins are deactivated by default and therefore transmit no data to the respective social platform, if you did not activate the service. You may activate each plug-in by clicking on the appropriate button (known as the 2-click solution). Of course, plug-ins may be deactivated again with a click.
If you have activated a plug-in, your browser will form a direct connection to the server of the respective social platform as soon as you access the operator's website. The content of the plug-in is transmitted by from the social platform directly to your browser and integrated by it into the operator`s website.
Integration of the plug-in means that the social network receives the information that you have accessed the respective page of the operator. If you are logged in to the social network, the network can associate your visit to your account. If you interact with the plug-ins, the corresponding information is transmitted by your browser directly to the social network and stored there.
If you do not want the social network to collect data about you via the operator's website, you must log out of this network prior to visiting the operator`s website or deactivate the social plug-ins.
Even if you do not have an account with the social network, websites with active social plug-ins can send data to these networks. When a plug-in is active, each visit of the website places a cookie with a unique identifier. Because your browser sends this these cookies without being asked, each time there is a connection with a network server, in principle the network can generate a profile about which websites the user associated with the identifier has visited. This means that it is also entirely possible that this identifier is also attributed to a person who subsequently registers for an account with that social network.
The legal admissibility of this data processing is based on Art. 6 (1) a) GDPR, according to which processing is lawful when the data subject has provided consent to the processing of their personal data for one or more purposes. Provision of your data is not prescribed by law nor required for the performance of a contract. Failure to provide the data will result in you being unable to use the social plugin.
The operator uses YouTube videos to provide videos on various topics related to the websites services. The legal admissibility of this processing is based on Article 6 (1) (f) of the GDPR, according to which processing is lawful if it is necessary to safeguard the legitimate interests of the controller or a third party and if not the interests or fundamental rights and freedoms of the persons concerned Persons who require the protection of personal data. The use of data for the purposes of making videos available for illustration constitutes a legitimate interest of the operator within the meaning of Article 6 (1) (f) of the GDPR.
The provision of the data is neither required by law nor required for the performance of a contract. Failure to provide the data will result in you being unable to use the feature.
Your IP address is deleted or anonymised upon termination of use. Anonymisation means the IP address is altered so that it cannot or can only with a disproportionate investment of time, cost and labour be attributed to a particular or identified or identifiable natural person.
Personal data processed during communication are deleted upon expiry of the statutory retention periods if the controller has no legitimate interest in further retention. In any event, data are continued to be stored only if they are truly necessary for the corresponding purpose. Personal data are anonymised as far as possible.
Personal data processed for the purpose of booking reservations and the performance of a contract are deleted upon expiry of the statutory retention periods (in particular HGB (German commercial code) and AO (German tax code)) if the controller has no legitimate interest in further retention. In any event, data are continued to be stored only if they are truly necessary for the corresponding purpose. Personal data are anonymised as much as possible.
Temporary cookies are automatically deleted when you close your browser (session cookies). In contrast, permanent cookies have a maximum lifetime of up to 20 days. These types of cookies allow your computer to be recognised on your next visit on the controller’s website.
Personal data collected in the context of the use of tracking tools are deleted if the controller has no legitimate interest in further retention. In any event, data are continued to be stored only if they are truly necessary for the corresponding purpose. Personal data are anonymised as far as possible.
Personal data processed in the context of the use of Outdooractive tracking tools are deleted if the controller has no legitimate interest in further retention. In any event, data are continued to be stored only if they are truly necessary for the corresponding purpose. Personal data are anonymised as far as possible.
Upon request, the operator shall provide information as to whether your data is being processed. The operator endeavours to respond quickly to those requests.
You have the right to request from the controller without undue delay the rectification of inaccurate personal data concerning you.
You have the right to demand the erasure of personal data concerning you without undue delay from the controller and the controller has the obligation to erase personal data without undue delay where one of the grounds listed in Art. 17 (1) a)-f) applies.
You have the right to obtain from the controller restriction of processing where one of the conditions listed in Art. 18 (1) a)-d) applies.
At any time, you have the right to object, on grounds relating to your particular situation, to the processing of the personal data concerning you, which is based on Art. 6 (1) e) or f), including profiling based on those provisions. The controller shall no longer process your personal data unless the controller demonstrates compelling legitimate grounds for the processing that override your interests, rights and freedoms or if processing is used for the establishment, exercise or defence of legal claims.
Where your personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
Where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Art. 89 (externer Link1) GDPR, you have the right to object to processing of your personal data on grounds relating to your particular situation, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
Please use the contact address provided in the imprint for your message.
You have the right to obtain and reuse the personal data transmitted to the controller for your own purposes across different services. Therefor you have the right to receive the personal data that you have provided to a controller, in a structured, commonly used and machine-readable format and you have the right to transmit these data to another controller without hindrance from the controller to which the personal data have been provided, so long as the processing is based on consent pursuant to Art. 6 (1) a) GDPR, Art. 9 (2) a) GDPR or on a contract pursuant to Art. 6 (1) b) GDPR and if the processing is carried out by automated means.
If you have provided consent to the processing of your personal data and revoke this consent, processing that has already taken place until the date of your revocation remains unaffected.
You have the right to lodge an appeal with the competent supervisory authority at any time.
Visiting this website may display content that is linked with the website of a third party. The operator has no access to the cookies or other functionalities that are used by third-party websites and cannot control them. Such third-party sites are not subject to the data privacy conditions of the operator.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 17
 Art. 18
 Art. 6
 Art. 89
 Art. 6
 Art. 9
 Art. 6