Source: https://www.sh-tourismus.de/en/privacy-policy
Timestamp: 2019-04-22 16:11:36+00:00

Document:
The Tourismus-Agentur Schleswig-Holstein GmbH, Wall 55, 24103 Kiel, is the controller responsible for data processing on this website as defined in the European General Data Protection Regulation (GDPR). We respect your personal rights. We understand the importance of the personal information we receive from you as a user of this website. We respect the privacy of your personal data and will collect, store or process all data obtained exclusively in accordance with the relevant data protection regulations within the scope of our business purpose.
Personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.
If and to the extent that we obtain your consent for the processing of personal data, Article 6 (1) sentence 1 (a) of the European Data Protection Ordinance (GDPR) serves as the legal basis.
The processing of personal data required for the fulfilment of a contract with you is based on Article 6 .(1) clause 1 (b) GDPR. This also applies to processing operations that are necessary for carrying out pre-contractual measures.
Where the processing of personal data is required for the compliance with a legal obligation to which our company is subject, Article 6 (1) clause 1 (c) GDPR serves as the legal basis for the data processing.
If the processing is required to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not override this legitimate interest, Art. 6 (1) clause 1 (f) GDPR serves as the legal basis for the data processing. As a rule, the legitimate interest of our company lies in the performance of our business activities.
The personal data is erased or blocked as soon as the purpose of the storage ceases to apply. The data can also be stored where this has been provided for by the European or national legislature in EU regulations, laws or other provisions. The data can also be blocked or deleted when a storage period prescribed by the aforementioned standards expires, unless there is a requirement for the continued storage of the data to conclude or perform a contract.
In principle, we do not collect or use any personal data when you visit our website. This only happens if it is necessary to provide a functional website as well as our content and services. The collection and use of personal data of our users takes place routinely only after their consent. This does not apply in cases where prior consent cannot be obtained for factual reasons and where processing of the data is permitted by law.
Every time you visit our website, the user's access data required for use and billing purposes are stored on our server in a log file which your browser automatically transmits to us.
Those data cannot be associated with individual persons. We do not merge those data with other data sources.
After the user logs on to our website, so-called "cookies" are stored on the user's computer.
A cookie is a small text file in a designated directory on your computer. This file is used to identify the user's computer for the duration of the session. Cookies cannot generate any manipulations at the respective end device of the user and can be deleted manually at any time, most easily in the browser.
We collect and use your personal data to the extent necessary to enable you to use the services we provide.
If pseudonyms are used, we may create user profiles for the purposes of advertising, market research and a user-friendly design of our Internet service.
You are entitled to object to this use of your data at any time. We are not permitted to combine the user profiles with data about the bearer of the pseudonym.
If you send us your enquiries by filling out the contact form, your details from the form or e-mail address provided will be stored solely for processing the respective enquiry and to enable us to address any follow-up questions. We will not pass on this data to third parties without your consent.
Our website uses Google Analytics, a web analysis service of Google Inc. "("Google"), 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.
Google Analytics uses so-called "cookies", text files that are stored on your computer and facilitate analysis of your use of the website. The information generated by the cookie regarding your use of this website is, as a rule, transmitted to and stored on a Google server in the USA. However, if the IP anonymisation is activated on this website, your IP address is first abbreviated by Google in the member states of the European Union or in other member states of the EEA (European Economic Area) Agreement. Your full IP address will be transmitted to a Google server in the USA and truncated there only in exceptional cases. Google will use this information on behalf of this website’s operator to evaluate your use of this website, to create reports about the website activities, and to provide additional services connected with the website and Internet use to the website operator. The IP address transmitted from your browser as part of Google Analytics is not associated with any other data held by Google. You can prevent cookie storage by selecting the appropriate settings in your browser; however, we would like to point out that in such cases you might not be able to use all of the functionality of this website. In addition, you may prevent the transmission of the data created by the cookie related to your use of this website (including your IP address) to Google, and the processing of this data by Google, by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de. An opt-out cookie is set that will prevent your data being registered when you visit this website in future.
We instruct you that the code "anonymizeIp" has been added to Google Analytics on our website to guarantee anonymised registration of IP addresses (so-called IP masking). We use Google Analytics exclusively to evaluate data from double-click cookies and also AdWords for statistical purposes. If you do not want this, you can disable it using the Ads Preferences Manager (http://www.google.com/ settings/ads/onweb/?hl=de).
Our website uses the functions of Twitter Inc. 795 Folsom St., Suite 600, San Francisco, CA 94107, USA.
By using Twitter and the "Re-Tweet" function, the websites that you visit will be linked to your Twitter account and made public to other users. Data is also transmitted to Twitter in this way.
Please note that as the provider of this website we have no knowledge of the contents of the data transmitted nor of its use by Twitter.
For more information on this, please see Twitter's Privacy Statement at http://twitter.com/privacy.
This website uses the plugin feature of the YouTube platform of Google Inc. "("Google"), San Bruno/California, USA.
Every time you visit our website, a connection to YouTube's servers is established. The YouTube server will be informed of your visit to our website. To our knowledge, personal data will not be stored. However, if you are logged into your YouTube account, you would allow YouTube to associate your browser history directly with your personal profile.
For more information on this, please see Twitter's Privacy Statement at https://www.youtube.de/t/privacy.
Our website uses plugins from the social network Facebook, Facebook Inc, 1 Hacker Way, Menlo Park, California 94025, USA.
You can recognise the Facebook plugins by the Facebook logo on our website. For an overview of Facebook plug-ins, please see here: http://developers.facebook.com/docs/plugins/.
When you visit our website that contains a social plugin, your browser establishes a direct connection to the Facebook servers. This enables Facebook to receive information that you have visited our website from your IP address. If you are logged onto your Facebook account when you click on the Facebook "Like button", you can link the contents of our website to your Facebook profile. This allows Facebook to associate visits to our website with your user account.
Please note that as the provider of this website we have no knowledge of the content of the data transmitted nor of their use by Facebook. If you do not wish Facebook to be able to associate your visit to our website to your Facebook user account, please log out of your Facebook user account.
For more information on this, please see Facebook's Privacy Statement at http://de-de.facebook.com/policy.php.
We use the so-called double opt-in process to register you for our newsletter. This means that after your registration we will send you an e-mail to the specified e-mail address in which we will ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses you use and the dates of registration and confirmation. The purpose of the process is to prove your registration and, if necessary, to detect any possible misuse of your personal data.
Your e-mail address is the only mandatory information for sending the newsletter. The disclosure of further, separately marked data is voluntary and shall be used to address you in person. After your confirmation we save your e-mail address only for the purpose of sending you the newsletter. The legal basis is Art. 6 Para. 1 p. 1 lit. a GDPR.
• the existence of automated decision-making, including profiling, in accordance with Art. 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.
Furthermore, you have the right to request information on whether your personal data is transferred to a third country or to an international organisation. In this context, you can request to be informed about the appropriate safeguards in accordance with Art. 46 GDPR in connection with the transfer.
You have the right to correct and/or complete your personal data if your processed data is incorrect or incomplete. If this is the case we will make the correction immediately.
• you have objected to the processing in accordance with Art. 21(1) GDPR and it has not yet been determined whether our legitimate grounds override your grounds.
Have you requested that the processing of your personal data be restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State. You will be informed by us before the restriction is lifted.
• Your personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
• You withdraw any existing consent on which the processing was based according to Art. 6 (1) clause 1 (a) or Art. 9 (2) (a) GDPR, and there is no other legal ground for the processing.
• You file an objection against the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate reasons for the processing.
• In accordance with Art. 21 (2) GDPR, you file an objection against the processing by means of direct marketing.
• Your personal data must be erased for compliance with a legal obligation in accordance with EU law or the law of a Member State to which we are subject.
• Your personal data has been collected in relation to the offer of information society services referred to in Art. 8 (1) GDPR.
If we have published your personal data and are obligated to erase it in accordance with Art. 17 (1) GDPR, we shall take appropriate measures - considering the available technology and the implementation costs - to inform the controller(s) responsible for data processing that you have requested the erasure by such controllers of any links to, or copy or replication of such personal data.
• or the establishment, exercise or defence of legal claims.
If you have exercised the right to rectification, erasure or restriction of processing against us, we are obligated to notify all recipients to whom your personal data has been disclosed, of the rectification or erasure of the data or restriction of processing, unless this proves impossible or involves disproportionate effort.
You have the right to be informed about the recipients.
In addition, you have the right to request the transfer of your personal data directly from us to another controller, insofar as this is technically feasible. This should not impair other people's freedoms or rights.
We currently do not assume that the data which are subject to the right to data transferability will be processed within the scope of our website offer.
We shall no longer process your personal data unless we can demonstrate compelling legitimate grounds worthy of protection for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
If your personal data are processed for the purpose of direct marketing, you have the right to object at any time to the processing of the personal data concerning you for such purposes; this also applies to any related profiling.
You are entitled to revoke your declaration of consent under data protection law at any time. Revoking your consent will not affect the legality of any processing that took place before the revocation.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. We do not carry out such processing.
You are entitled to appeal to a supervisory authority, without prejudice to any other rights of appeal, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes the GDPR.
To protect your personal data, we have taken technical and organisational measures to ensure that your data is protected against accidental or intentional loss, destruction or tampering as well as access by unauthorised persons. Our protective measures are reviewed at regular intervals and adapted to technical progress if necessary.
Should you have any further queries regarding the processing of your personal data, please contact our company's Data Protection Officer: compolicy GmbH, An den Eichen 15, 24248 Mönkeberg, Germany.

References: Art. 6
 Art. 6
 Art. 22
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 17