Source: https://blog.koelntourismus.de/en/legal-notice/
Timestamp: 2020-05-31 00:44:22
Document Index: 603924043

Matched Legal Cases: ['Art. 15', 'Art. 16', 'Art. 17', 'Art. 18', 'Art. 21', 'Art. 20', 'Art. 77', 'Art. 22', 'Art. 6', 'Art. 6', 'Art. 28']

Legal notice | ‪#‎visitkoeln blog
Privacy Information of the Cologne Tourist Board
(including the information content required by law)
datenschutz@koelntourismus.de
We process personal data in compliance with the provisions of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) as well as other applicable data protection regulations (details below). Which data are processed in detail and the manner of their use is based authoritatively on the respective services applied for or agreed. Further details or extensions of the purposes of the data processing can be seen from the respective contract documentation, forms, from a declaration of consent and/or other information provided to you (e.g. within the scope of use of our website or in our terms and conditions of business). This data protection information may also be updated from time to time, as can be seen from our archive-website blog.koelntourismus.de/en/legal-notice/.
of advertising or market and opinion research, if you have not objected to the use of your data
of obtaining credit information as well as the exchange of data with credit agencies, insofar as this goes beyond our economic risk,
of checking and optimising requirements-analysis procedures,
of further development of products and services as well as of existing systems and processes,
of disclosing personal data within the scope of due diligence measures in negotiations concerning the sale of a company,
of comparing European and international anti-terror lists, insofar as this goes beyond the statutory obligations,
of enriching our data, among other things through the use or research of publicly accessible data,
of statistical evaluations or market analysis,
of benchmarking,
of asserting legal claims and defence in legal disputes that cannot be assigned directly to the contractual relationship,
of restricted storage of the data, if erasure is not possible due to the particular form of storage, or is possible only at disproportionately high expense,
of developing scoring systems or automated decision-making processes,
of preventing and clarifying criminal offences, insofar as not exclusively for the fulfilment of statutory requirements,
of building and system safety (e.g. through access controls and video surveillance) insofar as this goes beyond the general duties of care,
of internal and external investigations, security checks,
of possible listening in on or recording of telephone conversations for quality-control and training purposes,
of obtaining and maintaining certifications of a private-law or official nature,
of ensuring and exercising domestic authority through corresponding measures, as well as through video surveillance, for the purpose of protecting our customers and employees as well as for securing evidence related to criminal offences and their prevention.
data on persons (name, date of birth, place of birth, nationality, marital status, profession/industry and comparable data)
contact data (address, email address, telephone number and comparable data)
information on your financial position (credit-rating data including scoring, i.e. data for the purpose of assessing the economic risk)
data on your use of the tele-media offered by us (e.g. time of call-up of our websites, apps or newsletters, our sites/links clicked on, or entries and comparable data)
video and photo data
in connection with processing of the contract,
for purposes of fulfilment of statutory requirements, under which we are obliged to provide information, to report or to forward data, or if the forwarding of the data is in the public interest (see Number 2.4),
if external service providers process data on our behalf as order data processors or assumers of functions (e.g. external computing centres, support/maintenance of EDP/IT applications, archiving, voucher processing, call-centre services, compliance services, controlling, data screening for anti-money-laundering purposes, data validation or plausibility checking, data destruction, purchasing/procurement, customer administration, letter shops, marketing, media technology, research, risk controlling, settlement, telephony, website management, auditing services, banks, printers or data disposal companies, courier services, logistics),
on the basis of our justified interest or of the justified interest of the third party within the scope of the purposes stated under Number 2.2 (e.g. to authorities, credit agencies, debt collection, lawyers, courts, expert assessors, and group companies, bodies and control instances),
if you have issued us with your consent to the forwarding to third parties.
For example, you have the right to receive information from us concerning your data stored by us pursuant to the rulings of Art. 15 GDPR (possibly with restrictions pursuant to Section 34 BDSG).
Upon request by you, we shall rectify the data stored on you pursuant to Art. 16 GDPR if these are inaccurate or incorrect.
If you wish, we shall erase your data in accordance with the principles of Art. 17 GDPR, provided no other statutory rulings (e.g. statutory retention periods or the restrictions pursuant to Section 35 BDSG), or a predominant interest of us (e.g. for defending our rights and entitlements), stand in the way of this.
Taking account of the preconditions of Art. 18 GDPR, you can ask us to restrict the processing of your data.
You can also file a complaint against the processing of your data pursuant to Art. 21 GDPR, on the basis of which we are obliged to end the processing of your data. Nevertheless, this right of objection applies only given the presence of very special circumstances concerning your personal situation. In this respect, rights of our organisation may stand in the way of your right of objection.
Subject to the preconditions of Art. 20 GDPR, you also have the right to receive your data – or to forward them to a third party – in a structured, commonly-used and machine-readable format.
You also have the right to revoke consent – already issued – to the processing of personal data by us at any time with effect for the future (see Number 2.3).
In addition, you have a right to complain to a data protection supervisory authority (Art. 77 GDPR). However, we recommend that complaints always be addressed initially to our Data Protection Officer.
e do not use purely automated decision-making procedures as per Article 22 GDPR. If we nevertheless use such a procedure in individual cases in future, we shall inform you of this separately, insofar as this is prescribed by the law.
10. Supplementary privacy information
10.1 Data protection information from KölnTourismus GmbH (Cologne Tourist Board) regarding the use of guestoo
We use the cloud solution guestoo (www.guestoo.de) either separately or as part of our online services in order to handle the guest management of events that we organize ourselves, including those which we organize in cooperation with third parties (partners). For the management of the events, we transfer the personal data of the guests planned by us — and in the case of joint events, those planned by partners — to guestoo. The other processes (e.g. the dispatch of invitations, registrations, cancellations, correspondence in the run-up to the event and admission checks) are also managed through guestoo. For these purposes, we mainly enter and collect the following personal data:
The institution’s address data
The name and institution of any accompanying persons
Pursuant to Article 6 (1) f GDPR (balancing of interests), we and guestoo store this data and process it through guestoo solely in the context of the respective event. Insofar as additional people are registered for an event (e.g. accompanying persons), the data processing takes place on the basis of Article 6 (1) b GDPR.
Insofar as we carry out individual events in cooperation with partners and that we are solely responsible for the event organization within this context, we will subsequently transfer the respective final guest list including the collected data and the participation status to the respective partner. This information is transferred on the basis of the respective partner’s overriding legitimate interest pursuant to Article 6 (1) f GDPR.
We process and store your data within guestoo for the period required to organize the respective event (including the corresponding preparation and follow-up phases). This does not affect any legal obligations to retain data. We will delete your data in guestoo within one year after an event has ended, insofar as you have not been invited to another event. You have the right to object to this, of course.
KölnTourismus GmbH (Cologne Tourist Board) has concluded a data processing agreement with the operator of guestoo (code piraten UG, Managing Director: Stefan Wirtz, Am Ruhmbach 44, 45149 Essen, Germany). KölnTourismus GmbH monitors the processing of your personal data in accordance with the requirements of the GDPR.
You can obtain further information about the use of your data on this website in guestoo’s privacy policy (www.guestoo.de/datenschutzerklaerung).
10.2 Privacy policy for online meetings, conference calls, and webinars using “Zoom”
In the following, we would like to provide you with information about the processing of personal data in connection with the use of Zoom.
We use the tool Zoom to conduct conference calls, online meetings, video conferences and/or webinars (subsequently referred to hereinafter as “online meetings”). Zoom is a service provided by Zoom Video Communications, Inc., which is based in the USA.
The Cologne Tourist Board is responsible for the data processing that is done in direct connection with the performance of online meetings
Note: Insofar as you call up the website of Zoom, the provider of Zoom is responsible for the data processing. However, you do not need to call up the website in order to use Zoom. You only need to do so to download the software for the use of Zoom.
You can also use Zoom if you directly enter the respective meeting ID and any additional access data for the meeting into the Zoom app.
If you cannot use the Zoom app or do not wish to do so, you can use the basic functions via a browser version, which you can also find on the Zoom website.
A variety of types of data are processed whenever you use Zoom. The scope of the data processed also depends on the data you produce before or during your participation in an online meeting.
The following personal data are processed: Information about the user: First name, surname, telephone number (optional), e-mail address, password (if the single sign-on option is not used), a profile picture (optional),
Meeting metadata: Topic, description (optional), IP addresses of the participants, device/hardware information
When recording meetings (optional): MP4 file of all video, audio and presentation recordings, M4A file of all audio recordings, text file of the online meeting chat.
When dialling in by phone: The telephone numbers of the outgoing and incoming calls, the name of the country, the starting and finishing time. Where appropriate, additional connection data such as the IP address of the device in question may also be stored.
Text, audio and video data: During an online meeting, if appropriate you can use the chat, question and survey functions. The texts you enter will be processed insofar as they are to be displayed in the online meeting and, if necessary to log them. To enable the display of video and the replay of audio, the data from microphone and video camera (if applicable) of your terminal will be processed accordingly for the duration of the meeting. You can turn off/mute the camera and the microphone at any time via the Zoom applications.
In order to take part in an online meeting or enter the “meeting room”, you will have to give your name at the very least.
We use Zoom in order to conduct online meetings. Whenever we want to record online meetings, we will transparently notify you of this fact in advance and, if necessary, ask for your approval. The Zoom app also shows you if a meeting is being recorded.
We will also record chat content if this is necessary in order to document the results of an online meeting. However, this is generally not done.
In order to record and follow-up webinars, we can also process the questions posed by webinar participants.
If you are registered as a user of Zoom, reports about online meetings (meeting metadata, dial-in data, the questions and answers during webinars, surveys during webinars) can be stored at Zoom for up to one month.
We do not use automated decision-making in the sense of Art. 22 of the GDPR.
If personal data of the employees of the Cologne Tourist Board are processed, the legal basis of the data processing is Section 26 BDSG (German Data Protection Act). If personal data associated with the use of Zoom are not needed for the performance of the employment relationship or its termination but be essential for the use of Zoom, the legal basis for the data processing is Art. 6 (1) (f) of GDPR. In such cases, our interest is that online meetings are effectively carried out.
Apart from that, the legal basis for data processing in connection with the performance of online meetings is Art. 6 (1) (b) GDPR if the meetings are conducted within the context of contractual relationships.
If no contractual relationship exists, the legal basis is Article 6 (1) (f) GDPR. In such cases, our interest is also that online meetings are effectively carried out.
Recipient/transfer of data
Personal data that is processed in connection with a person’s participation in online meetings are in principle not forwarded to third parties insofar as they are not specifically intended for such a transfer. Please note: As is the case with face-to-face meetings, the content from online meetings is often specifically intended to be forwarded in order to communicate information to customers, interested individuals, or third parties.
Other recipients: The provider of Zoom necessarily learns of the aforementioned data insofar as this is specified in our data processing contract with Zoom.
Zoom is a service offered by a provider based in the USA. As a result, personal data is also processed in a non-EU country. However, we have concluded a data processing contract with the provider of Zoom that fulfils the requirements of Art. 28 GDPR.
An appropriate level of data protection is guaranteed by the Privacy Shield certification of Zoom Video Communications, Inc., and the signing of the standard contractual clauses of the EU.
Data protection information last amended 12.05.2020
We use cookies to make our webpages as user-friendly as possible. Cookies are small files that are stored on a visitor’s hard disk. They enable information to be held for a certain amount of time and the visitor’s computer to be identified. To a certain extent, this is also done with tracking pixels, which aren’t stored on the visitor’s hard disk, but can help to identify the visitor’s computer in the same way a cookie can. Hereinafter we use the term “cookie” to refer not only to cookies in the strict technical sense, but also to tracking pixels and similar technical methods.
We use cookies to create statistics and to incorporate external media. Among other things, cookies save you from having to enter data multiple times, make it easier for you to transfer specific content, and help us to identify especially popular areas of our online presentation. As a result, we can, for example, adapt the content of our webpages precisely to the user’s needs.
Insofar as individual cookies implemented by us also process personal data, the processing takes place pursuant to Article 6 (1) (b) GDPR for the implementation of a contract (e.g. registration), pursuant to Article 6 (1) (a) GDPR if you have given your permission (e.g. by clicking on a cookie banner to express your approval that the data be used for statistical purposes) or pursuant to Article 6 (1) (f) GDPR for the purposes of our legitimate interest in the best-possible functioning of the website (e.g. placement of the cookies in connection with a cookie banner to store any selections you may have made) and of a customer-friendly and effective structuring of your visit to the page.
If you wish, you can also deactivate the use of cookies in general by means of your browser settings at any time. Please click on the Help feature in your browser window to find out how you can change these settings. However, we would like to make you aware that changing these settings may prevent you from using some parts of our website.
If you are visiting our website for the first time, information will appear on your landing page regarding data protection and what settings you can make with regard to cookies. If you continue to use the webpages and do not object to the use of cookies, this approval is stored in your browser so that we do not have to display this information again on every page. If this data is not stored in your browser (e.g. you have deleted it in your browser history), this information will be displayed when you visit our webpages again.
With the judgement of May 12, 1998, the Regional Court of Hamburg decided that by providing a link, one may be held responsible for the contents of the linked page. This can – according to the court – only be prevented by expressly distancing oneself from these contents. We have placed links to other sites on the Internet on our pages. The following applies to all these links: We would like to expressly emphasise that we have no influence on the design and content of the linked pages. Therefore we dissociate ourselves from all contents of all linked pages on this homepage and do not adopt their contents. This declaration applies to all links on our homepage. The respective provider or operator of the pages is always responsible for the contents of the linked pages. A permanent control of the contents of the linked pages is not reasonable without concrete evidence of a violation of the law. If we become aware of any infringements, we will remove such links immediately.