Search & book accommodation
1. Data protection at a glance
1.1 General information
The information below is an overview of what happens to your person-related data when you visit our website. Person-related data comprise all data that identify you personally.You find more detailed information in the Privacy Statement below.
1.2 Recording data on our website
1.2.1 Who is responsible for collecting data on this website?
The data on this website is processed by the website operator. You find his contact details in the Imprint on this website.
1.2.2 How do we record your data?
Firstly, data is collected because you tell us. Such data is, for example, data that you enter in the contact form.
Further data is automatically collected by our IT-systems when you visit the website. This mostly concerns technical data (e.g. internet browser, operating system or time when website is called up). Data is automatically collected as soon as you enter our website.
1.2.3 What do we use your data for?
Part of the collected data is used to guarantee that the website works faultlessly. Other data can be used to analyse your behaviour of use.
1.2.4 What are your rights regarding your data?
You are entitled any time to request free of charge information about origin, recipient and purpose of your saved person-related data. You are also entitled to request that your data is corrected, blocked or deleted. You can contact us under the address mentioned in the Imprint, if you have further questions concerning the data protection. Furthermore, you have the right to contact the relevant regulatory authority if you want to make a complaint.
1.3 Analysing tools and third party provider tools
When visiting our website your surfing behaviour can be statistically assessed. This is mostly done by using cookies and so-called analysing programmes. Your surfing behaviour is analysed anonymously as a rule; this behaviour cannot be traced back to you. You can contradict this analysis or prevent it by not using certain tools. You find more detailed information in the Privacy Statement below.
You can contradict this analysis. We will inform you about your possibilities of how to contradict in this Privacy Statement.
2. General information and mandatory information
2.1 Data protection
The operators of these sites take the protection of your personal data very seriously. We treat your person-related data confidentially and comply with the legal data protection regulations as well as this Privacy Statement.
When you use this website different person-related data is raised. Person-related data refers to data with which you can be identified personally. This Privacy Statement explains which data is collected and what we use it for. It also explains how and to what purpose this is done.
May we point out that a data transfer in the internet (e.g.when communicating by e-mail) can have safety gaps. It is not possible to protect data completely from third party accessing them.
2.2 Information about the responsibility of processing this website
The agency below is responsible for processing data on this website:
Westerwald Touristik-Service GbR
Telephone: 0049 (0) 26 02 / 30 01 - 0
Managing Director: Maja Büttner
Data Protection Officer: Andreas Weidenfeller, Tel.: 0049 (0) 2602 124-215, E-mail: firstname.lastname@example.org
The natural or legal person is solely responsible, and decides on their own or together with others about the purpose and means of processing person-related data (e.g. names, e-mail addresses or similar).
2.3 Revoking your agreement to process your data
A lot of data processing can only be handled once you have agreed to it explicitly. You can revoke an agreement once given at any time. All it requires is an informal e-mail message sent to us. The legality of the data processed up to the date of the revocation remains unaffected by the revocation.
2.4 Your right to complain to the relevant regulatory authority
In case of a violation against the data protection, the person concerned has the right to file a complaint with the relevant regulatory authority. The regulatory authority for legal questions on data protection is the data protection officer of the federal state in which our company is located. The following list shows all data protection officers as well as their contact details: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
2.5 SSL- respectively TLS-coding
For safety reasons and in order to protect the transfer of confidential contents such as orders or enquiries that you send to us as site operators, this website use an SSL-respectively a TLS-coding. You recognise a coded connection when the address line of the brower changes from “http://” to “https://” and also by the padlock symbol in your brower line.
Once the SSL- or TLS-coding is activated, the data you transfer to us cannot be read by any third party.
2.6 Information, blocking, deleting
Within the scope of the applicable legal regulations, you are entitled at any time to obtain information on your saved person-related data, their origin and recipient free of charge, as well as on the purpose of data processing and, if necessary, you also have the right to have these dates corrected, blocked or deleted. You can always turn to us under the address mentioned in the Imprint, should you have further questions on the subject of person-related data.
2.7 Contradicting advertising mails
Using contact data - contained in the Imprint that is published obligatorily - to send out explicitly unrequested adverts and information material is herewith contradicted. The sites’ operators expressly reserve the right to take legal actions in case advertising information, probably via spam e-mails, is sent unasked.
3. Data collection on our website
The internet sites partly use so-called cookies. Cookies do not damage your computer or contain any viruses. Cookies serve to make our offer more user-friendly, more effective and more secure. Cookies are small text data files that are deposited on your computer and saved by your browser.
Most of the cookies used by us are so-called “Session-Cookies”. They are automatically deleted as soon as your visit ends. Other cookies remain saved on your end device until you delete them. These cookies enable us to recognise your browser when you visit us next time.
You can set your browser such that you are informed about the setting of cookies and only allow cookies in an individual case, exclude the acceptance of cookies in certain cases or in general as well as activate the automatic deleting process of cookies when closing down the browser. The functioning of this website may, however, be restricted should cookies be deactivated.
Cookies that are required to carry out electronic communication processes or to make certain function, requested by you, available (e.g. shopping basket function), are saved based on Art. 6 Para. 1 lit. f DSGVO [Data protection basic regulation]. The website operator has a legitimate interest to save cookies to optimise his services and make these available to function without problems technically. In as far as other cookies (e.g. cookies to analyse your surfing behaviour) are saved, then this is explained separately in this Privacy Statement.
3.2 Server-Log-Data files
The provider of the websites collects and saves information automatically in so-called server-log-data files that your browser transfers to us automatically. These include:
- Browser type and browser version
- Used operating system
- Referrer URL
- Host name of accessing computer
- Time of server enquiry
This data will not be combined with other data sources.
Art. 6 Para. 1 lit. f DSGVO is the basis for data processing, permitting the processing of data to fulfil a contract or pre-contractual measures.
3.3 Contact form
Once you send us an enquiry via the contact form, your details from this enquiry - including the contact data contained therein - are saved by us for the purpose of processing your enquiry and in case of further questions. We do not pass this data on to others without your consent.
It therefore follows that the processing of data entered into the contact form is exclusively done with your consent (Art. 6 Para. 1 lit. a DSGVO). You are free to revoke your consent at any time. It is sufficient to send us an informal message by e-mail. The legality of the data processed up to the date of the revocation remains unaffected by the revocation.
The data entered into the contact form by you remains with us until you request them to be deleted, revoke your consent for a storage or the purpose for saving the data is cancelled (e.g. once the processing of your enquiry is completed). Mandatory legal regulations – in particular concerning discarding periods – remain unaffected.
You can book accommodation on this website. For this purpose you need to enter the following data:
- Family name
- Street and House No.
- Post code, Town
- E-mail address
- Telephone number
Your data is used to process your booking and passed on to the accommodation accordingly.
3.4.1 Legal grounds
Art. 6 DSGVO (6) 1b:
"Processing is necessary for the performance of a contract to which the data subject is party or in order to take eat the request of the data subject prior to entering into a contract."
3.4.2 Period of storage
The person-related data required for the purpose of processing bookings and fulfilling contracts are deleted once the legal retention period has ended in as far as the responsible party does not have a legitimate interest in continuing to keep the data. In any case, only such data is kept that is absolutely necessary for achieving the relevant purpose.
3.5 Non-binding booking requests
You can send a non-biding booking request to the operator by using a special contact form containing the following information:
- Family name
- E-mail address
- Street, House No.
- Post code, Town
Your data is used to process the booking request and to prepare an offer.
3.5.1 Legal grounds
Art. 6 DSGVO (6) 1b:
" Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract."
3.5.2 Period of storage
The person-related data required for the purpose of processing bookings and fulfilling contracts is deleted once the legal retention period has ended in as far as the responsible party does not have a legitimate interest in continuing to keep the data. In any case, only such data is kept that is absolutely necessary for achieving the relevant purpose.
3.6 Bookings via landlord website
3.6.1 Regulations regarding cookies
Checks, whether the browser supports cookies.
Period: up to the end of a session
Improves the usage behaviour. Search data and shopping basket are saved.
Period: 8 hours
Implementing Google Analytics
Period: 2 years
Implementing Google Analytics
Period: 10 minutes
Implementing Google Analytics
Period: 24 hours
3.6.6 Usage of Google Analytics
The data processing is carried out by feratel media technologies AG, Maria-Theresien-Straße 8, 6020 Innsbruck, FN 72841w County Court Innsbruck. feratel media technologies AG uses Google Analytics, a Google web analysing service of Google Inc. („Google“). Google Analytics uses so-called „cookies”, data files that are saved on your computer enabling an analysis of the website usage. The information generated by a cookie when using this website is transferred and saved onto a Google server in the U.S. as a rule. This website activates the IP-anonymisation such that the IP-address of Google users within the member states of the European Union or member states of the European Economic Area are abbreviated. The complete IP-address is only transferred to a Google server in the U.S. as an exception and abbreviated there and then. Google will use this information on behalf of the operator of this website to evaluate the usage of this website by users, to compile reports on the website activities and to carry out further services for the website operator in connection with using website and internet. The IP-address transferred from your browser within the scope of Google Analytics is not combined with other Google data. You can prevent cookies from being stored by setting your browser software accordingly. The user is, however, informed that in such a case not all functions of this website may be used to their full extent. The user can prevent the recording of data generated by the cookie relating to your using the website (including your IP-address) to Google as well as the processing of such data by Google by downloading and installing the browser plugin available under the following address: http://tools.google.com/dlpage/gaoptout?hl=de
3.7 Ordering a brochure
The website offers you the possibility to order various brochures. To this end you have to enter the following data:
- Family name
- Street, House No.
- Post code, Town
- E-mail address
This information is used to prepare the despatch of the ordered brochure to you.
3.7.1 Legal grounds
Art. 6 DSGVO (6) 1b:
”Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract."
3.7.2 Period of storage
The person-related data for the purpose of sending out brochures is deleted in as far as the responsible party does not have a legitimate interest in continuing to keep the data. In any case, only such data is kept that is absolutely necessary for achieving the relevant purpose.
4. Analysing tools and advertising
4.1 Google Analytics
This website uses functions made available by the web analysing service of Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, U.S.
Google Analytics uses so-called "cookies". They are text data files that are saved on your computer to enable an analysis of the way you are using the website. The information generated by the cookies on how you use this website is usually transferred and saved to a Google server in the U.S.
Google-Analytics cookies are saved based on Art. 6 Para. 1 lit. f DSGVO. The website operator has a legitimate interest in the analysis of usage behaviour in order to optimise its web offer as well as its advertising.
4.1.1 IP Anonymisation
We have activated the function of IP-anonymisation on this website. This ascertains that your IP-address is abbreviated by Google within the member states of the European Union or other member states of the European Economic Area prior to being transferred to the U.S. The complete IP-address is only transferred to a Google server in the U.S. as an exception and abbreviated there and then. Google will use this information on behalf of the operator of this website to evaluate the usage of this website by users, to compile reports on the website activities and to carry out further services for the website operator in connection with using website and internet. The IP-address transferred from your browser within the scope of Google Analytics is not combined with other Google data.
4.1.2 Browser Plugin
You can prevent cookies from being stored by setting your browser software accordingly. The user is, however, informed that in such a case not all functions of this website may be used to their full extent. The user can prevent the recording of data generated by the cookies relating to your using the website (including your IP-address) to Google as well as the processing of such data by Google by downloading and installing the browser plugin available under the following address: https://tools.google.com/dlpage/gaoptout?hl=de.
4.1.3 Contradicting the data recording
You can prevent that your data is recorded by Google Analytics by clicking on the following link. An ”Opt-Out-Cookie” is set that prevents your data being recorded during future visits to this website:
You will find further information on how user data is handled by Google Analytics in the Google Privacy statement: https://support.google.com/analytics/answer/6004245?hl=de.
4.1.4 Processing order data
We have signed an agreement on the processing of order data with Google and fully implement the strict guidelines of the German data protection authorities when using Google Analytics.
4.1.5 Period of storage
Person-related data is automatically deleted after 24 months.
5.1 Newsletter data
If you want to receive the newsletter offered on the website, we require your e-mail address as well as information that permits us to check that you are the owner of the quoted e-mail address and that you agree to receive the newsletter. Further data is not raised or is only raised on a voluntary basis.We use this data only to send the requested information and will not pass them on to third parties.
The data entered in the application form for the newsletter is processed exclusively based on your approval (Art. 6 Para. 1 lit. a DSGVO). You are fully entitled to revoke the once given consent to save your data, e-mail address as well as this data being used to despatch the newsletter, for example via the link „Austragen” [Remove] in the newsletter. The legality of data processing steps already taken remain unaffected by the revocation.
The data deposited with us with reference to receiving the newsletter, is stored with us until you cancel the newsletter, whereupon the data is subsequently deleted. Data that is saved for other purposes (e.g.e-mail address in the membership section) remains unaffected.
This website uses CleverElements to despatch newsletters. The provider is CleverElements GmbH, Prinzessinnenstr. 19-20, 10969 Berlin (Germany).
CleverElements is a service with which – amongst others – the despatch of newsletters is organised and analysed. The details entered by you for the purpose of receiving a newsletter are saved to servers of CleverElements in Germany.
If you do not wish to be analysed by CleverElements you must cancel the newsletter. A link for this purpose is available in every newsletter.
5.2.1 Data analysis by CleverElements
With the assistance of CleverElements we are able to analyse newsletter campaigns. In this way we can – amongst others – see whether a newsletter was opened and what kind of links were clicked on and also, which links were selected particularly often.
CleverElements also allows to group newsletter recipients into different categories of recipients (e.g. place of living). This enables us to adapt the newsletters more adequately to the relevant target groups.
Use the following link to learn more about the functions of CleverElements: https://cleverelements.com/product.
5.2.2 Legal grounds
Data processing is carried out based on your consent (Art. 6 Para. 1 lit. a DSGVO). You can revoke this consent at any time. The legality of already carried out data process stages remains unaffected by the revocation.
5.2.3 Period of storage
The data deposited with us with reference to receiving the newsletter, is stored with us until you cancel the newsletter whereupon the data is subsequently deleted from our servers as well as from those of CleverElements. Data that is saved for other purposes (e.g.e-mail address in the membership section) remains unaffected.
5.2.4 Signing an agreement on the processing of order data
We have signed an agreement with CleverElements committing CleverElements to protect our customers’ data and not to pass these on to third parties.
For further information on the data protection regulations of CleverElements please go to: https://cleverelements.com/imprint.
6. Plugins and tools
The person responsible for processing on this website has integrated components of Facebook. Facebook is a social network.
A social network is a meeting platform on the internet, an online community that allows users as a rule to communicate with each other and to interact within a virtual space. A social network can be used as a platform to exchange opinions and experiences or enables the internet community to make personal or company-related information available.
Facebook offers social network users – amongst others – to set up private profiles, upload photos and to establish links via friendship requests.
Facebook’s operating company is the Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, U.S. Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland is responsible for processing person-related data for those persons living outside of the U.S. or Canada.
Each call-up of individual sites of this website that is operated by the person responsible for processing and on which a Facebook component is integrated (Facebook plugin), the internet browser on the information-technological system of the relevant person is automatically asked by the relevant Facebook component to download a description of the relevant Facebook component. You can call up a general overview of all Facebook plugins under https://developers.facebook.com/docs/plugins/?locale=de_DE .Within the scope of this technical procedure Facebook becomes aware which specific sub-page of our website is visited by the person concerned.
In as far as the person concerned is logged-in on Facebook at the same time, Facebook recognises this with every call-up of our website by this person concerned and also which specific sub-age of our website was called up by this person during the overall stay on our website. This information is collected by the Facebook components and allocated by Facebook to the relevant Facebook account of the person concerned. If the person concerned activates one of the Facebook buttons integrated on our website, for example the ”like” button or this person writes a comment, Facebook assigns this information to the personal Facebook user account of the person concerned and safes this person-related data.
Facebook always receives information about the fact that the person concerned is visiting our websit via the Facebook components, provided this person is logged in on Facebook at the same time as visiting our website and this takes place irrespective of whether or not this person clicks the Facebook component. In case the person concerned does not want such a transfer of information to Facebook, this transfer can be prevented such that this person logs out of his/her Facebook account before visiting our website.
The data guideline published by Facebook can be called up under https://de-de.facebook.com/about/privacy/. It explains the collecting, processing and using of person-related data by Facebook. The platform also explains what setting is available on Facebook to protect the privacy of the person concerned. In addition various applications are available that enable to suppress the data transfer to Facebook. The person concerned can use such applications to stop a data trasfer to Facebook.
The person responsible for processing has integrated components of the Instagram service on this website. Instagram is a service which is an audio-visual platform that enables users to share photos and videos and also allows that such data is distributed in other social networks.
The Instagram operating company is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, U.S.
By calling up an individual page on this website that is operated by the person responsible for processing and on which an Instagram component is installed (Insta-button), the browser is automatically initiated on the information-technological system of the person concerned by means of the relevant Instagram component to download a presentation of the same. Within the scope of this technical procedure Instagram is made aware which specific sub-page of our websitethe person concerned is visiting.
In as far as the person concerned is logged in on Instagram at the same time, Instagram knows with every call-up of our website by this person and during the overall period of staying on our website, which specific sub-page this person is visiting. The Instagram components collect this information and assign it to the relevant Instagram account of this person. Once the person concerned activates one of the Instagram buttons installed on our website, the thus transferred data and information is assigned to this person’s Instagram user account and saved and processed there.
Instagram always receives information via the Instagram components once this person is visiting our website, provided this person visiting our website is logged in on Instagram at the same time. This happens irrespective of whether or not this person clicks on the Instagram button. If this person does not want this information transferred to Instagram, he/she can stop the transfer by logging out of Instagram prior to calling up our website.
Please find further information and the applicable Instagram data protection regulations under https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/
Our website uses plugins of YouTube operated by Google. The operator of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, U.S.
When you visit one of our sites where a YouTube plugin is installed, a connection to YouTube servers is established. During this process the YouTube server is informed which of our sites you are visiting.
As long as your are logged into your YouTube account you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent his by logging out of your YouTube account.
Using YouTube improves the presentation of our online offers positively. This is a legitimate interest in terms of Art. 6 Para. 1 lit. f DSGVO.
Please find more information on how to handle user data in the YouTube privacy statement under: https://www.google.de/intl/de/policies/privacy.
6.4 Google Web Fonts
In order to achieve a uniform appearance of our website we use so-called web fonts made available by Google. When a website is called up your browser uploads the required web fonts into your browser cache to display texts and fonts correctly.
For this purpose your browser must connect to the Google servers. By this action Google is made aware that our website is called up via your IP-address. Using Google web fonts improves the presentation of our online offers positively. This is a legitimate interest in terms of Art. 6 Para. 1 lit. f DSGVO.
In case your browser does not support web fonts, your computer will use a standard font.
Please find further information on the Google web fonts under https://developers.google.com/fonts/faq and also in the Google privacy statement: https://www.google.com/policies/privacy/.
6.5 Google Adwords
The person responsible for this website has installed Google AdWords. Google AdWords is a service to support internet advertising allowing those doing adverts to set up advertisements in the search engine results of Google as well as in the Google advertising network. Google AdWords allows those preparing an advert to determine certain key words with which results of the search engines are only then displayed if the user of the search engine calls up a key word relevant to the search. The Google advertising network shows the adverts by means of an automatic algorithm and by observing the key words set beforehand allocated to those websites relevant to the subject.
The Google AdWords service provider is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, U.S.
The purpose of Google AdWords is to place adverts on our website by fading-in adverts of interest from third parties and in the search engines of Google and also fading-in external adverts on our website.
If a person gets to our website through a Google advert, a so-called conversion cookie is placed on the information-technological system of this person. The function of cookies is explained further up in this text. A conversion cookie becomes invalid after 30 days and does not support an identification of the person concerned. Provided the cookie has not yet become invalid, information is obtained of whether certain sub-pages of our website have been called up – for example the shopping basket of an online shop system - via this conversion cookie. The conversion cookie tells us as well as Google, whether the person concerned that got to our website through an AdWord advertisement, has generated or aborted a sale.
The data and information collected by using conversion cookies are used by Google to prepare visitor statistics for our website. In turn we use these visitor statistics to establish the overall number of users that transferred to our website via AdWords advertisements that is to establish success or failure of the specific AdWords advertisement and to optimise our AdWords advertisements in future. Neither our company nor other Google AdWords advertising customers receive information from Google with which the person concerned could be identified.
The conversion cookies save person-related data, for example those internet sites visited by this person. Accordingly, person-related data including the IP-address of this person’s internet connection is transmitted to Google in the United States following every visit of our website. This person-related information is saved by Google in the United States. Under certain circumstances, Google may pass this data collected via this technical procedure to third parties.
The person concerned can prevent the placing of cookies via our website any time, as described above, by setting the internet browser accordingly and thus contradicting the placing of cookies permanently. Such a setting on the internet browser in use would also stop Google to place a conversion cookie on the information-technological system of this person. In addition, a cookie placed by Google AdWords can be deleted any time via the internet browser or other software programmes.
Also, this person has the possibility to contradict advertisements of his/her interest by Google. To this end this person has to call up this link https://www.google.de/settings/ads from each and every internet browser used by him/her and rearrange the settings.
Please find further information and the applicable Google privacy statement under https://www.google.de/intl/de/policies/privacy/ .
6.6 Google Maps
This website uses the services of Google Maps via an API. The service provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, U.S.
In order to use the functions of Google Maps, your IP address must be saved. This information is transmitted and saved to a Google server in the U.S. as a rule. The provider of this website has no influence on this data transfer.
Using Google Maps is set up to display our online offers more appealingly and also to facilitate finding our locations mentioned on the website. This is a legitimate interest in terms of Art. 6 Para. 1 lit. f DSGVO.
Please find more information in how user data is used in the Google privacy statement under: https://www.google.de/intl/de/policies/privacy/.
7. Rights of the person concerned
7.1 Right to receive confirmation
Each person has the right as granted by the European Legislator to request a confirmation from those responsible for processing data whether the relevant person-related data is processed. If a person wants to claim this right of confirmation he/she can approach one of the employees responsible for the processing any time.
7.2 Right to obtain information
Each person affected by the processing of person-related data has the right granted by the European Legislator to obtain information any time free of charge from those responsible for the processing about person-related data saved of the person concerned and also request a copy of this information. In addition, the European Legislator has furthermore granted the person concerned the right to obtain the following information:
- Purpose of use
- Categories of person-related data to be processed;
- Recipients or categories of recipients to whom person-related data is disclosed or will be disclosed, especially recipients in third countries or international organisations;
- If possible, the planned period during which the person-related data is saved or in case this is not possible, the criteria for fixing this period;
- The existing right of correction or deletion of the relevant person-related data or restriction to process these data by those responsible or the right to object to this processing
- The existing right to complain to a supervisory authority;
- In case the person-related data is not collected from the person concerned: all available information about the origin of the data;
- The existence of an automated decision-finder including profiling in compliance with Article 22 Para.1 and 4 DS-GVO and — at least in such cases – meaningful information on the logic involved as well as the implications and envisaged effects of such a processing on the person concerned.
Furthermore, the person concerned has a right to be informed whether person-related data has been transmitted to a third country or an international organisation. In as far as this is the case the person concerned is entitled to receive information on suitable guarantees in connection with this transmission.
If a person wants to claim this right of confirmation he/she can approach one of the employees responsible for the processing any time.
7.3 Right to request amendments
Each person affected by the processing of person-related data has the right granted by the European Legislator to request that incorrect person-related data is amended at once. Furthermore, the person concerned is entitled to request that incomplete person-related data is completed – even by means of a supplementary statement – by considering the purpose of processing.
If a person wants to claim this right of amendment he/she can approach one of the employees responsible for the processing any time.
7.4 Right to have data deleted (Right to be forgotten)
Each person affected by the processing of person-related data has the right granted by the Euopean Legislator to request from the person responsible that the relevant person-related data is deleted at once provided one of the following reasons applies and a processing is not required:
- Person-related data was collected for those purposes or processed in any other way for which they are no longer required.
- The person concerned revokes his/her consent to have their data processed in compliance with Art. 6 Para. 1 Letter a DS-GVO or Art. 9 Para. 2 Letter a DS-GVO and another legal basis for the processing is not available.
- The person concerned files an objection according to Art. 21 Para. 1 DS-GVO against the processing and there are no overriding legitimate interests for processing or the person concerned files an objection against the processing in compliance with Art. 21 Para. 2 DS-GVO.
- Person-related data was processed unlawfully.
- The deletion of person-related data is necessary to fulfil a legal commitment according to the legislation of the EU or the law of a memberstate which the person concerned is subjected to.
- Person-related data was collected with reference to services offered by the information company according to Art. 8 Para. 1 DS-GVO.
In as far as one of the above reasons applies and a person concerned requests that person-related data – saved with the Westerwald Touristik-Service GbR - is to be deleted, this person can approach one of the employees responsible for processing. The employee of Westerwald Touristik-Service GbR will then arrange that the request for deletion is complied with immediately.
In case person-related data has been made public by Westerwald Touristik-Service GbR our company, as the responsible party, is obliged in compliance with Art. 17 Para. 1 DS-GVO to delete person-related data. In this way Westerwald Touristik-Service GbR implements suitable measures by considering the technologies available and costs for implementation, also by taking technical aspects into consideration to inform others responsible for data processing who processed person-related data made public that this person concerned has requested from these persons responsible for processing data that all links to the person-related data of this person concerned, or copies or reproductions thereof are deleted provided a processing is not required. The employee of Westerwald Touristik-Service GbR will initiate necessary steps in an individual case.
7.5 Right to restrict the processing
Each person affected by the processing of person-related data has the right granted by the Euopean Legislator to request that the processing of data is restricted at once if one of the following prerequisites applies:
- The person concerned disputes the person-related data to be correct for a period that a person responsible takes to check the correctness of the person-related data.
- The processing is unlawful, the person concerned refuses that the person-related data is deleted and requests instead that the person-related data is only used restrictedly.
- The person responsible for processing does no longer need the person-related data for the purpose of processing, the person concerned requires these, however, to assert, exercise or defend legal claims.
- The person concerned has filed an objection against the processing according to Art. 21 Para. 1 DS-GVO and it has not yet been established whether the legitimate reasons of the person responsible outweigh those of the person concerned.
In as far as one of the above mentioned prerequisites is given and a person concerned requests that person-related data saved at Westerwald Touristik-Service GbR is restricted, he/she can approach one of the employees responsible for processing. The employee of Westerwald Touristik-Service GbR will subsequently initiate that the processing of data is restricted.
7.6 Right of having data transferred
Each person affected by the processing of person-related data has the right granted by the European Legislator to obtain person-related data referring to the person concerned in a structured, standard and machine-readable format made available by a person responsible for the processing. This person is also entitled to transfer this data to another person without being restricted by those persons who are responsible for making the person-related data available initially, in as far as the processing is based on the consent in compliance with Art. 6 Para. 1 Letter a DS-GVO or Art. 9 Para. 2 Letter a DS-GVO or on an agreement in compliance with Art. 6 Para. 1 Letter b DS-GVO and the processing is carried out by an automated procedure, provided the processing is not required to carry out a certain task which is of public interest or exercises public authority that was transferred to the person responsible.
In addition, while exercising his/her right for data to be transferred, the person concerned is, according to Art. 20 Para. 1 DS-GVO entitled to obtain the right that person-related data is directly transferred from one person responsible to another person responsible in as far as this is technically possible and provided the rights and freedom of others is not infringed in this way.
In order to assert the right of data to be transferred the person concerned can always contact an employee of Westerwald Touristik-Service GbR.
7.7 Right to object
Each person affected by the processing of person-related data has the right granted by the European Legislator – for reasons resulting from his/her special situation – to contradict any time the processing of person-related data that is carried out in compliance with Art. 6 Para. 1 Letter e or f DS-GVO. This also applies to the profiling based on these regulations.
In case of an objection, the Westerwald Touristik-Service GbR will no longer process these person-related data, unless we can give evidence of compelling and legitimate grounds for the processing that outweigh the interests, rights and freedom of the person concerned or the processing serves to assert, exercise or defend legal claims.
In case Westerwald Touristik-Service GbR uses person-related data to promote direct advertising, the person concerned has the right to object to the processing of his/her person-related data for the purpose of such advertising any time. This also applies to the profiling as long as it is connected to such a direct advertising. If the person concerned objects the processing for the purpose of direct advertising towards Westerwald Touristik-Service GbR, Westerwald Touristik-Service GbR will no longer process the person-related data for this particular purpose.
In addition, the person concerned has the right for reasons that arise from his/her special situation to object to the relevant processing of person-related data that is carried out by Westerwald Touristik-Service GbR in respect of scientific or historical research purposes or for statistical purposes in compliance with Art. 89 Para. 1 DS-GVO, unless such a processing is done to fulfil a task of public interest.
In order to exercise the right to object, the person concerned can contact directly any of our employees at Westerwald Touristik-Service GbR or any other employee. In connection with using the services of the information company and irrespective of the EU 2002/58/EC Directive, the person concerned is free to exercise his/her right to object by means of an automated procedure where technical specifications are used.
7.8 Automated decisions in an individual case including profiling
Any person affected by the processing of person-related data has the right granted by the European Legislator not to be exclusively subjected to a decision based on an automated processing – including profiling - that affects him/her legally or compromises him/her considerably, in as far as the decision (1) is not required for signing or fulfilling a contract between the person concerned and those responsible or (2) is permitted based on legal EU-regulations or on those of a member state which the person concerned is subjected to, and these legal regulations contain appropriate measures to preserve the rights and freedom as well as the legitimate interests of the person concerned or (3) is done with the explicit consent of the person concerned.
In case the decision (1) is necessary for signing or fulfilling a contract between the person concerned and the person responsible or (2) it is made with the explicit consent of the person concerned, Westerwald Touristik-Service GbR will take appropriate measures to protect the rights and freedom as well as the legitimate interests of the person concerned by including at least the right to procure the right by a person responsible to intervene and explain their own point of view and the right to contest the decision.
In case the person concerned wants to assert his/her right regarding automated decisions, he/she can contact one of the employees involved in the processing any time.
7.9 Right to recall a data protection consent
Each person affected by person-related data has the right granted by the European Legislator to recall the consent for processing person-related data any time.
In case the person concerned wants to assert his/her right to recall, he/she can contact one of the persons responsible for processing any time under: email@example.com
7.10 Right to complain
Persons concerned have the possibility to contact the state representative for data protection and freedom of information [Landesbeauftragten für den Datenschutz und die Informationsfreiheit] Postfach 30 40, 55020 Mainz, if they are of the opinion that the processing of their personal data infringes the General Data Protection Regulation (Datenschutzgrundverordnung).
This privacy statement was partly prepared by the privacy statement generators eRecht24 GmbH & Co. KG, DGD Deutsche Gesellschaft für Datenschutz GmbH und Anwaltskanzlei Weiß & Partner.
Issued: June 25, 2018