Data protection

Notes on data protection

1. We are responsible for your data. As a visitor to the www.weiskirchen-saarschleifenland.de website, you have the right to expect not only high-quality tourist information, but also high-quality handling of your personal data. We are responsible for processing your data, which we process in accordance with your wishes and the provisions of German and European data protection laws. We only process your personal data if a legal provision authorises it or if you have given your prior consent. We, that is to say Saarschleifenland Tourismus GmbH, Torstraße 45, 66663 Merzig (e-mail: tourismus@saarschleifenland.de) and our service providers, who process your data on our behalf for the purposes indicated below (hereinafter: ‘we’). Our service providers include IT service providers, file and Internet hosts, printers, mailing companies, payment service providers and web analytics providers. Our service providers are prohibited from processing your data for purposes other than the specific order. Our service providers that enable the display of the website and its functions also include Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109, USA, (‘Amazon’) and Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (‘Google’). Amazon and Google have submitted to the EU-US Privacy Shield, which, according to the European Commission, provides sufficient guarantees for an adequate level of data protection when processing data in the United States (certificate available at: https://www.privacyshield.gov/participant?id=a2zt0000000TOWQAA4 or https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI). It is very important to us that your data is processed transparently and legally. That is why the following information will enable you to know at any time what personal data is collected during your visit to our website and when using our services and offers, and how we process your data.

2. How secure is your data?

We take technical and organisational security measures to protect your personal data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons, and to ensure the protection of your rights and compliance with the applicable data protection provisions of the EU and the Federal Republic of Germany. The measures taken must guarantee the long-term confidentiality, integrity, availability and resilience of the systems and services related to the processing of your data and enable them to be restored quickly in the event of a physical or technical incident. This also includes the encryption of your data. All the information you enter online is encrypted using SSL technology (Secure Socket Layers SSL, RSA 1024 bits, RC4 -256 bits) as a minimum and is only then transmitted to our servers. Our data processing and security measures are constantly being improved in line with technological developments.

3. Our data protection officer. If you have any questions regarding data protection or data security, you can contact our data protection officer by email at p.klein@merzig-wadern.de or by post at Saarschleifenland Tourismus GmbH, Peter Klein, Torstraße 45, 66663 Merzig.

4. What personal data is processed? Personal data is any information relating to an identified or identifiable person. This includes, for example:

·         Address data: name, postal address, e-mail address

·         Telecommunications data: landline number, mobile phone number, email address

·         Booking and purchase data: service requested, booked or ordered, category,

·         Period or quantity, price, service provider, payment method, data relating to any travel companions

·         Financial data: bank details, credit card data, PayPal transaction data

5. What information is mandatory? If, during collection, certain data fields are designated as mandatory or mandatory and marked with an asterisk (*), the provision of this data is required by law or contract, or is necessary for the conclusion of the contract, the requested service or the stated purpose. The provision of this data is at your discretion. Failure to provide this data may result in the contract not being executed, the desired service not being provided or the stated objective not being achieved.

6. For what purposes is your data processed? a. Contact requests We process your data to respond to your contact requests (art. 6, para. 1 b, f of the GDPR), either directly, or through service providers, or by transmitting them to the service provider concerned (accommodation, leisure, etc.). The communication of addresses or telecommunication data is necessary to process your request and respond to it by the desired means of communication. We store the information from your contact request and, if applicable, that of the service provider concerned after responding to the request, generally for a further six months in case of additional questions, unless it must be kept for a longer period due to legal retention obligations (see for example the retention period for purchases, reservations and requests related to a contract below b.). Reservations, purchases When you make a reservation or purchase or other requests related to a contract, we initially process your personal data (contact details, telecommunications data, reservation and purchase data, and financial data if applicable) for the processing and fulfilment of the reservation, order or other request related to the contract, as well as, if applicable, for invoicing and payment processing (art. 6, para. 1 b of the GDPR). When you book or purchase third-party services, we will pass your data on to the relevant service provider, as stated in the offer, who will process the data for the same purposes. Insofar as data is marked as mandatory, it is required for the processing or fulfilment of the corresponding contract or for invoicing. Your data relevant for the booking, order or other enquiry related to the contract and the associated documents (e.g. business letters, invoices) are stored by us or by service providers in accordance with legal requirements after the conclusion of the contract, in accordance with legal provisions, for six years (Section 257(4) of the German Commercial Code, Article 6(1)(c) of the GDPR) or ten years (Section 147(3) of the German Fiscal Code, Article 6(1)(c) of the GDPR). Advertising Postal advertising and customer analyses We process your personal data from bookings and purchases (contact details, booking/purchase data) for the purpose of postal advertising containing tourist information and offers from the region; in order to be able to send you relevant information, we also carry out internal marketing and customer analyses (art. 6, para. 1, let. f of the GDPR). Electronic newsletter With your consent, we will send you our e-mail newsletter containing tourist information about the region (Section 7, paragraph 2, no. 3 of the German law against unfair competition, Section 6, paragraph 1, point a of the GDPR). Of course, you can revoke your consent at any time with future effect. To obtain your consent to our email newsletter, we use the so-called double opt-in procedure online to prevent our newsletter from being sent to the email addresses of people who have not requested it. To this end, we will send you a confirmation request by email, and we will only start sending our newsletter after you have confirmed your subscription. Your IP address is also recorded and stored for documentation purposes (art. 7, para. 1, art. 6, para. 1 c of the GDPR). Storage period for data for advertising purposes We store your data collected for advertising purposes for as long as the advertising purpose persists or until we receive a revocation of your consent or an objection to the processing of your data for advertising purposes (see point 7.d). Displaying content and functions on the web. We also process the data generated when using our website, of course to display the desired content and to execute the functions you have selected (art. 6, para. 1, b and f of the GDPR). e. Ensuring system security Each time a user accesses a page on our website, the data relating to this operation is temporarily stored and processed in a log file (art. 6, para. 1, f of the GDPR). This data includes:

• the category or type, name and URL of the file accessed, • the date and time of access, • the amount of data transferred, • notification of whether the access was successful, • the method/function of access requested by the requesting computer, • a description of the type of web browser used along with additional system information, • the IP address, • the website from which access is gained. The temporary storage of this server log data is necessary for the provision of the service for technical reasons and subsequently to ensure the security of the system. The data is anonymised after seven days at the latest by shortening the IP address, provided and to the extent that no anomalies suggest possible system errors, unauthorised access attempts or other hacker attacks and that longer storage is not necessary to clarify the situation, resolve technical problems and/or initiate legal proceedings, if applicable. The analysis of this data for other purposes is carried out anonymously for statistical purposes. f. Change of purpose If we were to change the purposes of the processing over time, we will inform you in advance by updating this privacy policy. g. Extension of retention periods The specified retention periods may be extended accordingly if, in individual cases, in particular if the data is processed for different purposes, there is a longer statutory or contractual retention period. 7. Right to object and to revoke at any time You have the right to object at any time to the processing of your data for reasons arising from your particular situation, if the legal requirements are met. If you wish to object to the processing of your data for advertising purposes or revoke a given consent, simply send a short message to tourismus@saarschleifenland.de or to Saarschleifenland Tourismus GmbH, Torstraße 45, 66663 Merzig. You can unsubscribe from the email newsletter by clicking on the unsubscribe link in the newsletter. Your data will then no longer be processed for advertising purposes. The legality of the processing carried out until the opposition or revocation remains unaffected. After you have objected to the processing of your personal data for advertising purposes or revoked your consent, we are obliged, in accordance with data protection legislation and the requirements of the German data protection supervisory authorities, to include the data necessary for this purpose (name, address, e-mail address) in our internal advertising blacklist and to store (block) them permanently - solely for this purpose - and to use them for comparison with our future advertising files (Art. 21(3), Art. 17(3)(b), Art. 6(1)(c), (f) GDPR). This makes it possible to permanently guarantee that your objection to advertising or the revocation of your consent is respected.

8. Cookies and tracking a. ‘Cookies’ are small files that are transmitted to your device (e.g. computer, smartphone) by your web browser or other programs. They are stored locally on your device and kept for later use. We also use cookies from our service providers on our website

- to enable the necessary technical functions, e.g. the booking process (Art. 6(1)(b)(f) GDPR) • to evaluate visits to our website (web tracking), so that we can optimally adapt our website to your needs and make it user-friendly (art. 6, para. 1 a GDPR) and • to recognise your consent or refusal to the installation of cookies (art. 6, para. 1 f GDPR). b. Refusal/deletion of cookies Without your consent (see d.), only technically necessary cookies are installed. You can configure your web browser to notify you when cookies are installed, or to refuse cookies in general or limit their installation. If you disable or limit the installation of cookies using your browser, you will no longer be able to use certain functions of our website. You can delete saved cookies at any time using your web browser, including automatically. The following links provide information about this option for the most commonly used browsers: • Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-deletemanage-cookies • Firefox: http://support. mozilla.org/fr/kb/cookies-informations-sites-enregistrent-preferences-utilisateurs-ordinateur• Google Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&answer=95647• Safari: https://support.apple.com/kb/ph21411?locale=de_DE• Opera: http://help. opera. com/Linux/12.10/de/cookies.html If you have not changed or do not change the settings, the cookies that enable and ensure the necessary technical functions remain on your device until the browser is closed, other cookies may remain on your device for longer (see c. below). c. Tracking with Google Analytics With your consent, which can be revoked at any time (see d. below), this website uses Google Analytics, a web analysis service provided by our service provider Google Inc., USA (art. 6, para. 1 a of the GDPR). Google uses cookies to enable analysis of your use of the website. The information obtained by the cookies is generally sent to a Google server in the United States and stored there. By activating IP anonymisation on our website, your IP address, which is sent by Google at the same time, is shortened beforehand and therefore anonymised in the Member States of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website and Internet use. Google cookies remain stored on your device for 90 days. You can prevent the collection of data generated by the cookie and related to your use of the website (including your truncated IP address) as well as the processing of this data by Google by refusing to give your consent (see d.) or by downloading and installing the browser add-on available at the following link: https://tools.google.com/dlpage/gaoptout.

Disable Google Analytics

d. Consent By clicking on the banner on our website, you agree (art. 6, para. 1 a of the GDPR) that we may use cookies and pseudonymous analysis techniques on our website, including by our service providers, in order to evaluate visits to our website, so that we can optimise our website to suit your needs and make it user-friendly. You may withdraw your consent at any time. In order to determine whether you have given your consent, a corresponding consent cookie is placed on your computer. You can revoke your consent by clicking here. Please note that you must not delete your cookies so that we can permanently take into account your revocation. 9. How can you exercise your data protection rights? If you have any questions regarding the processing of your personal data by us, we will of course be happy to provide you with information about the data concerning you (art. 15 of the GDPR). In addition, if the legal conditions are met, you have the right to rectification (art. 16 GDPR), erasure (art. 17 GDPR), restriction of processing (art. 18 GDPR) and the right to object (art. 21 GDPR). You also have the right to data portability (art. 20 GDPR). In all these cases, please contact our data protection officer at the communication addresses provided. Finally, you have the right to lodge a complaint with a competent data protection supervisory authority (Art. 77 GDPR, Section 19 BDSG). 10. Changes It is sometimes necessary to adapt the content of this privacy policy. We therefore reserve the right to modify it at any time. We will also publish the modified version of the privacy policy here. We therefore invite you to reread the privacy policy on your next visit. Version of 25 May 2018

Bitte aktivieren Sie Javascript, um die Liste aller deklarierten Cookies und ähnlicher Techniken zu sehen.