©
Post Tower Bonn, © Foto Oliver Franke, Tourismus NRW e.V.

Data protection


exclusion of liability (disclaimer)

June 2018

The content of these pages was created with great care. Nevertheless, Tourismus NRW e.V. can assume no responsibility for the accuracy, completeness or currency of their content.

Data protection:

This data protection information applies to data processing by:
Controller: Tourismus NRW e.V. (managing director with authorisation to represent: Olaf Offers; Executive Director: Dr. Heike Döll-König) [below: Tourismus NRW e.V.], Völklinger Str. 4, D-40219 Düsseldorf, Germany, e-mail: info@nrw-tourismus.de, phone: +49 211 91320-500 Fax: +49 0211 91320-555

Data protection officer:
AUREX GmbH, Thomas Bilinder
datenschutz@aurex.de

It is generally possible to use our website without providing personal information. Insofar as any personal data (e.g. name, address or email address) is collected on our website, this always takes place on a voluntary basis. These data will not be disclosed to third parties without your express consent.

Please note that data transmission over the internet (e.g. communication by email) may have security vulnerabilities. Complete protection of data against unauthorised access by third parties is not possible.

Third-party use of contact information published as part of the disclaimer requirement in order to send unauthorised advertisements and informational material is hereby explicitly prohibited. The site administrators explicitly reserve the right to take legal action in the case of unsolicited sending of promotional information, for example, spam email.

The rights of users and data subjects:

With regard to the data processing to be described in more detail below, users and data subjects have the right

  • to confirmation of whether data concerning them is being processed, information about the data being processed, further information about the nature of the data processing, and copies of the data (cf. also Art. 15 GDPR);
  • to correct or complete incorrect or incomplete data (cf. also Art. 16 GDPR);
  • to the immediate deletion of data concerning them (cf. also Art. 17 DSGVO), or, alternatively, if further processing is necessary as stipulated in Art. 17 Para. 3 GDPR, to restrict said processing per Art. 18 GDPR;
  • to receive copies of the data concerning them and/or provided by them and to have the same transmitted to other providers/controllers (cf. also Art. 20 GDPR);
  • to file complaints with the supervisory authority if they believe that data concerning them is being processed by the controller in breach of data protection provisions (see also Art. 77 GDPR).

In addition, the controller is obliged to inform all recipients to whom it discloses data of any such corrections, deletions, or restrictions placed on processing the same per Art. 16, 17 Para. 1, 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Nevertheless, users have a right to information about these recipients.

Likewise, under Art. 21 GDPR, users and data subjects have the right to object to the controller's future processing of their data pursuant to Art. 6 Para. 1 lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.

Information about the data processing
Your data processed when using our website will be deleted or blocked as soon as the purpose for its storage ceases to apply, provided the deletion of the same is not in breach of any statutory storage obligations or unless otherwise stipulated below.

Server data
For technical reasons, the following data sent by your internet browser to us or to our server provider will be collected, especially to ensure a secure and stable website: These server log files record the type and version of your browser, operating system, the website from which you came (referrer URL), the webpages on our site visited, the date and time of your visit, as well as the IP address from which you visited our site.

The data thus collected will be temporarily stored, but not in association with any other of your data.

The basis for this storage is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the improvement, stability, functionality, and security of our website.

The data will be deleted within no more than seven days, unless continued storage is required for evidentiary purposes. In which case, all or part of the data will be excluded from deletion until the investigation of the relevant incident is finally resolved.

Cookies:

We uses cookies to record the preferences of visitors, and therefore to be able to optimize the design of its web site. Cookies are small files which are stored on your hard drive. They ease navigation, and increase the user-friendliness of a web site. Cookies also help us to identify the most popular sections of our web site. This enables us to provide content that is more accurately suited to your needs, and in so doing improve our service. Cookies can be used to determine whether there has been any contact between ourselves and your computer in the past. Only the cookie on your computer is identified.

Of course, you can also visit our web site without cookies. Most browsers automatically accept cookies. You can prevent cookies from being stored on your hard drive by setting your browser to not accept cookies. The exact instructions for this can be found in the manual for your browser. You can delete cookies already on your hard drive at any time. However, if you choose not to accept cookies, this may result in a reduced availability of the services provided by our web site.

Session cookies
We use cookies on our website. Cookies are small text files or other storage technologies stored on your computer by your browser. These cookies process certain specific information about you, such as your browser, location data, or IP address.  

This processing makes our website more user-friendly, efficient, and secure, allowing us, for example, to display our website in different languages or to offer a shopping cart function.

The legal basis for such processing is Art. 6 Para. 1 lit. b) GDPR, insofar as these cookies are used to collect data to initiate or process contractual relationships.

If the processing does not serve to initiate or process a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6 Para. 1 lit. f) GDPR.

When you close your browser, these session cookies are deleted.

Disabling cookies
You can refuse the use of cookies by changing the settings on your browser. Likewise, you can use the browser to delete cookies that have already been stored. However, the steps and measures required vary, depending on the browser you use. If you have any questions, please use the help function or consult the documentation for your browser or contact its maker for support. Browser settings cannot prevent so-called flash cookies from being set. Instead, you will need to change the setting of your Flash player. The steps and measures required for this also depend on the Flash player you are using. If you have any questions, please use the help function or consult the documentation for your Flash player or contact its maker for support.

If you prevent or restrict the installation of cookies, not all of the functions on our site may be fully usable.

Privacy policy for use of the Facebook plugin (“Share” button):

Our website uses the plug-in of the Facebook social network. The Facebook plugin is identifiable through the Facebook logo or the “Share” button on our page.

Facebook.com is a service provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. In the EU, this service is also operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, hereinafter both referred to as "Facebook."

Through certification according to the EU-US Privacy Shield
https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

Facebook guarantees that it will follow the EU's data protection regulations when processing data in the United States.

The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in improving the quality of our website.

Further information about the possible plug-ins and their respective functions is available from Facebook at
https://developers.facebook.com/docs/plugins/

If the plug-in is stored on one of the pages you visit on our website, your browser will download an icon for the plug-in from Facebook's servers in the USA. For technical reasons, it is necessary for Facebook to process your IP address. In addition, the date and time of your visit to our website will also be recorded.

If you are logged in to Facebook while visiting one of our plugged-in websites, the information collected by the plug-in from your specific visit will be recognized by Facebook. The information collected may then be assigned to your personal account at Facebook. If, for example, you use the Facebook Like button, this information will be stored in your Facebook account and published on the Facebook platform. If you want to prevent this, you must either log out of Facebook before visiting our website or use an add-on for your browser to prevent the Facebook plug-in from loading.

Further information about the collection and use of data as well as your rights and protection options in Facebook's privacy policy found at
https://www.facebook.com/policy.php

If you would prefer Facebook not to assign your visit to our pages to your Facebook account, please log out of your Facebook account.

Privacy policy for the use of Google Analytics:

We use Google Analytics on our website. This is a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 (hereinafter: Google).

Through certification according to the EU-US Privacy Shield
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google guarantees that it will follow the EU's data protection regulations when processing data in the United States.

The Google Analytics service is used to analyze how our website is used. The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, optimization, and economic operation of our site.

Cookies & Data Protection
Google Analytics uses “cookies”, which are text files stored on your computer, to help analyse how you use the site. The information generated by cookies about your use of this website is normally transferred to a Google server in the United States and stored there. However, if IP anonymisation is activated on this website, your IP address will first be truncated by Google within the Member States of the European Union or in other signatory states party to the Agreement on the European Economic Area.

Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage for the website operator. Google will not associate the IP address transferred by your browser as part of Google Analytics with any other data held by Google.

Browser Plugin
You can prevent the use of cookies by selecting the appropriate settings on your browser; however, please note that if you do this you may not be able to access all the full functionality of this website. You can also prevent the data generated by the cookie about your use of the website (including your IP address) from being sent to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

Disable Google Analytics
You can refuse the use of Google Analytics by clicking on the following link. An opt-out cookie will be set on the computer, which prevents the future collection of your data when visiting this website:
Disable Google Analytics

Anonymize-IP
Further information concerning the terms and conditions of use and data privacy can be found at http://www.google.com/analytics/terms/gb.html or at https://www.google.de/intl/en_uk/policies/. Please note that on this website, Google Analytics code is supplemented by “anonymizeIp” to ensure an anonymized collection of IP addresses (so called IP-masking).

Google-Maps

Our website uses Google Maps to display our location and to provide directions. This is a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 (hereinafter: Google).

Through certification according to the EU-US Privacy Shield
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google guarantees that it will follow the EU's data protection regulations when processing data in the United States.

To enable the display of certain fonts on our website, a connection to the Google server in the USA is established whenever our website is accessed.

If you access the Google Maps components integrated into our website, Google will store a cookie on your device via your browser. Your user settings and data are processed to display our location and create a route description. We cannot prevent Google from using servers in the USA.

The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in optimizing the functionality of our website.

By connecting to Google in this way, Google can determine from which website your request has been sent and to which IP address the directions are transmitted.

If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your browser. Further details can be found in the section about cookies above.

In addition, the use of Google Maps and the information obtained via Google Maps is governed by the Google Terms of Use https://policies.google.com/terms?gl=DE&hl=en and the Terms and Conditions for Google Maps https://www.google.com/intl/de_de/help/terms_maps.html.

Google also offers further information at
https://adssettings.google.com/authenticated
https://policies.google.com/privacy

Google reCAPTCHA

Our website uses Google reCAPTCHA to check and prevent automated servers ("bots") from accessing and interacting with our website. This is a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 (hereinafter: Google).

Through certification according to the EU-US Privacy Shield
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google guarantees that it will follow the EU's data protection regulations when processing data in the United States.

This service allows Google to determine from which website your request has been sent and from which IP address the reCAPTCHA input box has been used. In addition to your IP address, Google may collect other information necessary to provide and guarantee this service.   

The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the security of our website and in the prevention of unwanted, automated access in the form of spam or similar.

Google offers detailed information at
https://policies.google.com/privacy

concerning the general handling of your user data.

Google+ plug-in

We use the plug-in of the Google+ social network on our website. Google+ is an online service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 (hereinafter: Google).

Through certification according to the EU-US Privacy Shield
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google guarantees that it will follow the EU's data protection regulations when processing data in the United States.

The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in improving the quality of our website.

Further information about the possible plug-ins and their respective functions is available from Google at
https://developers.google.com/+/web/ 

If the plug-in is stored on one of the pages you visit on our website, your browser will download an icon for the plug-in from Google's servers in the USA. For technical reasons, it is necessary for Google to process your IP address. In addition, the date and time of your visit to our website will also be recorded.

If you are logged in to Google while visiting one of our plugged-in websites, the information collected by the plug-in from your specific visit will be recognized by Google. The information collected may then be assigned to your personal account at Google. If, for example, you use the +1 button, this information will be stored in your Google Account and may be published on the Google platform. To prevent this, you must either log out of Google before visiting our site or make the appropriate settings in your Google account.

Further information about the collection and use of data as well as your rights and protection options in Google's privacy policy found at
https://policies.google.com/privacy

Privacy policy for the use of Twitter:

Twitter functions are embedded in our website. These functions are provided by Twitter, Inc. (1355 Market St, Suite 900, San Francisco, CA 94103, USA, "Twitter").

Through certification according to the EU-US Privacy Shield
https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active

Twitter guarantees that it will follow the EU's data protection regulations when processing data in the United States.

The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in improving the quality of our website.

Through the use of Twitter and the “re-tweet” function, the web pages you visit will be linked to your Twitter account and made known to other users. This data is also transmitted to Twitter. For technical reasons, it is necessary for Twitter to process your IP address. In addition, the date and time of your visit to our website will also be recorded.

Please note that, as the operator of this site, we have no knowledge of the content of the data transmitted to Twitter or how Twitter uses these data.

If you are logged in to Twitter while visiting one of our plugged-in websites, the information collected by the plug-in from your specific visit will be recognized by Twitter. The information collected may then be assigned to your personal account at Twitter. If, for example, you use the Twitter Tweet button, this information will be stored in your Twitter account and may be published on the Twitter platform. To prevent this, you must either log out of Twitter before visiting our site or make the appropriate settings in your Twitter account.

Further information about the collection and use of data as well as your rights and protection options in Twitter's privacy policy found at
https://twitter.com/privacy

To modify your privacy preferences on Twitter, go to your account settings at http://twitter.com/account/settings

The use of Instagram:

We promote the service Instagram on our website. Instagram is a service of Instagram Inc. By means of the integrated "Insta" button on our page, Instagram receives the information that you have accessed the corresponding page of our website. If you are logged into Instagram, Instagram may assign the visit to our site to your Instagram account and link the data by this means. The data transmitted by clicking the "Insta" button is stored by Instagram. You can find more information regarding the purpose and scope of data collection, its processing and use, as well as your related rights and settings options for protecting your privacy in the Instagram data protection notice under https://help.instagram.com/155833707900388.

To prevent your visit to our site from being accessed by your Instagram account, you must log out of your Instagram account before visiting our site. 

YouTube

We use YouTube on our website. This is a video portal operated by YouTube LLC, 901 Cherry Ave, 94066 San Bruno, CA, USA, hereinafter referred to as "YouTube".

YouTube is a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as "Google".

Through certification according to the EU-US Privacy Shield
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google and its subsidiary YouTube guarantee that they will follow the EU's data protection regulations when processing data in the United States.

We use YouTube in its advanced privacy mode to show you videos. The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in improving the quality of our website. According to YouTube, the advanced privacy mode means that the data specified below will only be transmitted to the YouTube server if you actually start a video.

Without this mode, a connection to the YouTube server in the USA will be established as soon as you access any of our webpages on which a YouTube video is embedded.

This connection is required in order to be able to display the respective video on our website within your browser. YouTube will record and process at a minimum your IP address, the date and time the video was displayed, as well as the website you visited. In addition, a connection to the DoubleClick advertising network of Google is established.

If you are logged in to YouTube when you access our site, YouTube will assign the connection information to your YouTube account. To prevent this, you must either log out of YouTube before visiting our site or make the appropriate settings in your YouTube account.

For the purpose of functionality and analysis of usage behavior, YouTube permanently stores cookies on your device via your browser. If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your browser. Further details can be found in the section about cookies above.

Further information about the collection and use of data as well as your rights and protection options in Google's privacy policy found at
https://policies.google.com/privacy

Collection and storage of personal data:

Contact form:

For queries of all types, we offer you the option of making contact with us via a form provided on the website. Here, you are required to enter a valid e-mail address, so that we know from whom the enquiry has come and are able to respond to it. Further information is provided on a voluntary basis.

Data processing for the purpose of making contact with us is conducted in accordance with Article 6, Section 1, p. 1, lit. a GDPR on the basis of your voluntarily granted consent.

The personal data collected by us for the use of the contact form is automatically deleted after the enquiry submitted by you has been dealt with.

Flyer order form:

On our website, you have the option of ordering brochures/flyers free of charge via an order form. Here, you must enter a valid e-mail address (for any return queries) and a valid postal address in order for us to be able to dispatch these flyers. Data processing for the purpose of making contact with us is conducted in accordance with Article 6, Section 1, p. 1, lit. b GDPR. Tourismus NRW stores the data for the one-off dispatch of the brochures and magazines, and forwards this data to the dispatch service provider, so that they can complete the dispatch on behalf of Tourismus NRW e.V. As soon as the order has been sent, the data is deleted.

Contest:

I agree that my e-mail address may be stored for the competition until the winner has been decided. If I win, I agree to being informed of the fact by Tourismus NRW e.V. by e-mail. I have read and agree to the data protection declaration. Multiple entries will automatically lead to exclusion of the participant from the competition.

Offer database:

The respective provider is responsible for the accuracy and completeness of pricing, travel times and offers from third parties that are shown on Tourismus NRW e.V.’s website, including the travel offers in the offer database. Tourismus NRW e.V. acts neither as a travel agency nor a tour operator; instead it offers its partners and tourism service providers the use of its internet portal solely as a platform for presenting their offers. Information can therefore not be guaranteed.

Please note that, when we act as an intermediary for a package deal, the provider’s terms and conditions (T&Cs) apply. These are usually sent to you by the information and booking office or by the provider prior to concluding the travel agreement. The provider is a tour operator within the meaning of Art. 651 of the German Civil Code (Bürgerliches Gesetzbuch [BGB]) and must comply with the provisions contained therein.

Legal validity of this disclaimer:

This disclaimer is to be regarded as part of the website from which you were referred. If and insofar as sections or individual formulations of this text are not, or are no longer or do not completely correspond to the prevailing legal norms, the content and validity of the remainder of this document shall remain unaffected.

Source for parts of this page: eRecht24.de

Model Data Protection Statement for Anwaltskanzlei Weiß & Partner