Information about the collection of personal data and contact details

We are pleased that you are visiting our website www.citytourcard.com and thank you for your interest. In the following we will inform you about the handling of your personal data when you use our website. Personal data are all data that allow you to be personally identified.

The controller within the meaning of the General Data Protection Regulation (GDPR) responsible for data processing on this website is:

Berlin Tourismus & Kongress GmbH

Am Karlsbad 11

D-10785 Berlin

Tel: +49 (0)30 25 00 23 33  Fax: +49 (0)30 25 00 24 24

 Email: info@visitBerlin.de

The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

The controller has appointed a data protection officer for this website, who can be contacted as follows:

DA.S Beratung

Mr. Wolfgang Mengel

Beerentalweg 76

D-21077 Hamburg

Tel:        +49 (0)40 761 01 907
Fax:       +49 (0)40 761 01 908

Email: datenschutz@visitberlin.de

This website uses SSL and/or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible). You can recognise an encrypted connection by the character string "https://" and the lock symbol in your browser bar.

Data collection when you visit our website

When you use our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you call up our website, we collect the following data that are technically necessary for us to display the website to you:

- our website which was visited

- date and time of access

- volume of data sent, in byte

- source/link from which you accessed the page

- browser used

- operating system used

- IP address used (in some cases: made anonymous)

Processing is carried out in accordance with Art. 6 (1) letter f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files at a later date if there are any concrete indications of illegal use.

Cookies

In order to make visits to our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies (cookies from third parties) to recognise your browser on your next visit (persistent cookies). If cookies are set, they collect and process specific user information such as browser and location data as well as IP address values to varying degrees. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. In some cases, cookies are used to simplify the ordering process by saving settings (e.g. remembering the contents of a virtual shopping basket for a later visit to the website). If personal data are also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 (1) letter b GDPR either for the execution of the contract or in accordance with Art. 6 (1) letter f GDPR in order to safeguard our legitimate interest in the website's best possible functionality and a customer-friendly and effective design of the visit to the site.

We may work with advertising partners to help us make our website more interesting for you. To this end, cookies from partner companies (third-party cookies) will also be stored on your hard disk in this case when you visit our website. When we cooperate with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the extent of the information collected in each case in the following paragraphs.

Please note that you can set your browser in such a way that you are informed about the setting of cookies and can decide individually about their acceptance, or exclude the acceptance of cookies in certain cases or in general. Each browser is different in the way it manages the cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You will find such information for the respective browsers under the following links:

Internet Explorer:

https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies

 

Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

Chrome: https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=en

Safari: https://support.apple.com/kb/ph21411?locale=en_US

Opera: http://help.opera.com/Windows/11.50/en/cookies.html

Please note that the functionality of our website may be restricted if cookies are not accepted.

Contacting us

When you contact us (e.g. via contact form or email), personal data are collected. Which data are collected when using a contact form can be seen on the respective form. These data are stored and used exclusively for the purpose of responding to your request and establishing contact, and for the ensuing technical administration. The legal basis for the processing of the data is our justified interest in responding to your enquiry pursuant to Art. 6 (1) letter f GDPR. If the purpose of your contacting us is to conclude a contract, then an additional legal basis for the processing is Art. 6 (1) letter b GDPR. Your data will be deleted after final processing of your enquiry; this is the case if it can be inferred from the circumstances that the facts in question have been conclusively clarified and if there are no legal retention obligations to the contrary.

Processing of data when a customer account is set up and for contract processing

According to Art. 6 (1) letter b GDPR, personal data will also be collected and processed when you provide it to us for the execution of a contract or when opening a customer account. Which data will be collected can be seen on the respective submission forms. It is possible to delete your customer account at any time; this can be done by notifying the controller at the above address. We will store and use the data provided by you to process the contract. After complete processing of the contract or deletion of your customer account, your data will be blocked, with due regard to the relevant retention periods under tax and commercial law, and deleted after expiry of these periods, unless you have expressly consented to further use of your data or unless we have reserved the right to further use of data as permitted by law, about which we will inform you accordingly below.

Use of your data for direct advertising

Subscription to our email newsletter

If you subscribe to our email newsletter, we will send you regular information about our offers. The only mandatory information we need to send you the newsletter is your email address. Any other data you provide is voluntary and will be used to address you personally. For the dispatch of the newsletter, we use the so-called double opt-in procedure. This means that we will not send you an email newsletter unless you have expressly confirmed to us that you agree to the sending of the newsletter. We will send you a confirmation email asking you to confirm that you wish to receive newsletters in the future by clicking on the relevant link.

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 (1) letter a GDPR. When you subscribe to the newsletter, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of subscription in order to be able to trace any possible misuse of your email address at a later date. The data collected by us when you subscribe to the newsletter will only be used for advertising purposes in the newsletter.

You can unsubscribe from the newsletter any time via the link provided in the newsletter or by notifying the responsible person named above. After unsubscribing, your email address will immediately be deleted from our newsletter mailing list, unless you have expressly consented to further use of your data or we have reserved the right to use data beyond this, as permitted by law, and about which we inform you in this declaration.

Sending the email newsletter to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers by email for goods or services similar to those already purchased. Pursuant to Section 7 (3) of the Act against Unfair Competition (UWG), we need not obtain your specific consent for this. The data processing is thus carried out solely on the basis of our legitimate interest in personalised direct advertising in accordance with Art. 6 (1) letter f GDPR. If you objected to the use of your email address for this purpose at the outset, we will not send you any emails. You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future.

Newsletter tracking

Our newsletters contain so-called tracking pixels. A tracking pixel is a miniature graphic embedded in emails which are sent in HTML format to allow log files to be recorded and analysed. This allows a statistical evaluation of the success or failure of online marketing campaigns. 

We only carry out anonymous link-tracking (count-tracking). The hereby collected usage data, e.g. opening and click reactions, serve statistical purposes and are not passed on to third parties or used for purposes other than those mentioned here. No data are collected that can be attributed to the recipient. All the recipients of a newsletter are only evaluated together.

Advertising by letter mail

Based on our legitimate interest in personalised direct advertising, we reserve the right to store your first and last name, your postal address and – if we have received these additional details from you within the framework of our contractual relationship – your title, academic degree, year of birth and professional, industrial or business name in accordance with Art. 6 (1) letter f GDPR and to use this information to send you interesting offers and information on our products by letter post. You can object to the storage and use of your data for this purpose at any time by notifying the controller to this effect.

Data processing for order handling

To process your order, we work together with the following service provider(s), who support us wholly or partially in the execution of concluded contracts. Certain personal data are forwarded to these service providers in line with the following information.

The personal data collected by us will be passed on to the transport company commissioned with the delivery, or our dispatch and logistics service provider, as part of contract fulfilment, insofar as this is necessary for the delivery of the goods.

We will pass on your payment data to the authorised credit institution as part of payment processing, if this is necessary for payment purposes. If payment service providers are used, we will explicitly inform you of this below. The legal basis for the forwarding of the data is in this case Art. 6 (1) letter b GDPR.

We work with external transport partners to fulfil our contractual obligations towards our customers. We will pass your name and delivery address on to a transport partner selected by us exclusively for the purpose of the delivery of the goods in accordance with Art. 6 (1) letter b GDPR.

Passing on of personal data to shipping service providers

DHL

Where the goods are delivered by the shipping service provider DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, D-53113 Bonn), we will – in accordance with Art. 6 (1) letter a GDPR – pass on your email address to DHL prior to delivery of the goods for the purpose of agreeing a delivery date or of notification of delivery, provided you have given your express consent during the ordering process. Otherwise we will only pass on the recipient's name and delivery address to DHL for the purpose of delivery in accordance with Art. 6 (1) letter b GDPR. The data will only be passed on if this is necessary for the delivery of the goods. In this case, a prior agreement of the delivery date with DHL or notice of delivery will not be possible. Consent can be revoked at any time with effect for the future either by contacting the above-mentioned controller or the shipping service provider DHL.

Wolanski GmbH, Am Stichkanal 24
D-14167 Berlin-Lichterfelde

In individual cases we also supply our customers via our shipping and logistics service provider Wolanski.  Personal data will only be passed on to the extent necessary for the delivery of goods.

Use of payment service providers

Datatrans

If you opt for credit card payment through the payment service provider ConCardis, the payment will be handled by the payment service provider Datatrans AG, Kreuzbühlstrasse 26, CH-8008 Zurich (Switzerland), to whom we will pass on your information provided during the order process together with the information about your order in accordance with Art. 6 (1) letter b GDPR. Your data will be passed on for the sole purpose of payment handling with the payment service provider Datatrans and only to the extent that this is necessary.

ConCardis

If you opt for credit card payment through the payment service provider ConCardis, the payment will be handled by the payment service provider ConCardis GmbH, Helfmann-Park 7, D-65760 Eschborn, to whom we will pass on your information provided during the order process together with the information about your order in accordance with Art. 6 (1) letter b GDPR. Your data will be passed on for the sole purpose of payment handling with the payment service provider ConCardis and only to the extent that this is necessary.

PayPal

In the event of payment via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – "purchase on account" or "payment by instalments" via PayPal, we will forward your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxemburg (hereinafter "PayPal"), as part of payment handling. The data will be forwarded in accordance with Art. 6 (1) letter b GDPR and only insofar as this is necessary for payment processing. For the payment methods of credit card via PayPal, direct debit via PayPal or – if offered – "purchase on account" or "payment by instalments" via PayPal, PayPal reserves the right to conduct a credit check. To this end, your payment data will, if necessary, be forwarded to credit agencies in accordance with Art. 6 (1) letter f GDPR on the basis of PayPal's legitimate interest in ascertaining your solvency. PayPal will use the result of the credit assessment in relation to the statistical probability of non-payment in order to decide about providing the respective payment method. The credit report may include probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. The score values are calculated using address data, among others, but not only. For further information relating to data protection, for example on the credit agencies used, please refer to PayPal's privacy statement:

https://www.paypal.com/us/webapps/mpp/ua/privacy-full

You can object to this processing of your data at any time by notifying PayPal. PayPal may, however, still be entitled to process your personal data if this is necessary for payment processing under the contract.

Transfer of personal data to debt collection agencies

However you may want to read the following documents:

IHD Kreditschutzverein e.V., Augustinusstraße 11 B, D-50226 Frechen

The data protection information of the IHD can be found here: Link.

 

We conduct online surveys through our partner SurveyMonkey, based in San Mateo, California, USA. SurveyMonkey's Privacy Policy and Security Policy are valid at https://en.surveymonkey.com/mp/legal/privacy-policy/ and https://en.surveymonkey.com/mp/legal/security/. The survey results will not be published by us. They are solely for internal analysis to improve our services.

Review reminders

Review reminder from Trusted Shops. If you have given us your express consent to this during or after your order in accordance with Art. 6 (1) letter a GDPR, we will forward your email address to the review platform Trusted Shops GmbH, Subbelrather Str. 15c, D-50823 Cologne (www.trustedshops.de), so that they can send you a review reminder by email. You can withdraw your consent at any time by notifying the data processing controller or the review platform.

Google (Universal) Analytics

 Google Analytics

This website uses Google Analytics, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses so-called "cookies", text files which are saved on your computer and allow an analysis of your use of the website. The information generated by the cookie about your use of this website (including the shortened IP address) is generally transmitted to a Google server in the USA and stored there. This website exclusively uses Google Analytics with the extension "_anonymizeIp()", which ensures anonymisation of the IP address by shortening it and thus prevents it from being directly linked to a particular individual. Due to this extension, your IP address will first be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. In these exceptional cases, processing is carried out in accordance with Art. 6 (1) letter f GDPR on the basis of our legitimate interest in a statistical analysis of user behaviour for purposes of optimisation and marketing. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website and Internet use. The IP address transmitted by your browser in connection with Google Analytics will not be combined with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser; however, please note that if you do this you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link:

https://tools.google.com/dlpage/gaoptout?hl=

As an alternative to the browser plug-in or with browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent future data collection by Google Analytics from this website (this opt-out cookie only works with this browser and only for this domain; if you delete your cookies in this browser, you must click on this link again): <a onclick="alert('Google Analytics wurde deaktiviert');"href="javascript:gaOptout()">Google Analytics deaktivieren</a> Google LLC, based in the USA, is certified for the US-European data protection agreement "Privacy Shield", which guarantees adherence to the data protection standards applicable in the EU. More information on how Google Analytics handles user data can be found in Google's privacy statement:

https://support.google.com/analytics/answer/6004245?hl=

- Google Universal Analytics

This website uses Google Analytics, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses so-called "cookies", text files which are saved on your computer and allow an analysis of your use of the website. The information generated by the cookie about your use of this website (including the shortened IP address) is generally transmitted to a Google server in the USA and stored there.

This website exclusively uses Google Analytics with the extension "_anonymizeIp()", which ensures anonymisation of the IP address by shortening it and thus prevents it from being directly linked to a particular individual. Due to this extension, your IP address will first be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. In these exceptional cases, processing is carried out in accordance with Art. 6 (1) letter f GDPR on the basis of our legitimate interest in a statistical analysis of user behaviour for purposes of optimisation and marketing. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website and Internet use. The IP address transmitted by your browser in connection with Google Analytics will not be combined with other Google data.

You may refuse the use of cookies by selecting the appropriate settings on your browser; however, please note that if you do this you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link:

https://tools.google.com/dlpage/gaoptout?hl=

As an alternative to the browser plug-in or with browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent future data collection by Google Analytics from this website (this opt-out cookie only works with this browser and only for this domain; if you delete your cookies in this browser, you must click on this link again): <a onclick="alert('Google Analytics wurde deaktiviert');"href="javascript:gaOptout()">Google Analytics deaktivieren</a> Google LLC, based in the USA, is certified for the US-European data protection agreement "Privacy Shield", which guarantees adherence to the data protection standards applicable in the EU.

The present website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under "My data", "Personal data".

More information on how Google Analytics handles user data can be found in

Google's privacy statement:

https://support.google.com/analytics/answer/6004245?hl=

Retargeting/remarketing/recommendation advertising

Google AdWords Remarketing

Our website uses the functions of Google AdWords Remarketing, which we use to advertise this website in Google search results, as well as on third-party websites. This is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). To this end, Google places a cookie in the browser of your end device, which automatically uses a pseudonymous cookie ID and the pages you visit to enable interest-based advertising. Processing is carried out on the basis of our legitimate interest in the optimal marketing of our website in accordance with Art. 6 (1) letter f GDPR. Any additional data processing will only take place if you have agreed with Google that your Google Internet and app browsing history will be linked to your Google account and information from your Google account will be used to personalise ads that you view on the web. If, in this case, you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. To this end, Google will temporarily link your personal data with Google Analytics data in order to form target groups. You can permanently disable the setting of cookies for advertising preferences by downloading and installing the browser plug-in available through the following link: https://www.google.com/settings/ads/onweb/. Alternatively, you can obtain information about the setting of cookies from the Digital Advertising Alliance at the Internet address www.aboutads.info and make the desired adjustments. Finally, you can set your browser in such a way that you are informed about the setting of cookies and can decide individually about their acceptance, or exclude the acceptance of cookies in certain cases or in general. Please note that the functionality of our website may be restricted if cookies are not accepted. Google LLC, based in the USA, is certified for the US-European data protection agreement "Privacy Shield", which guarantees adherence to the data protection standards applicable in the EU. For more information and the data protection regulations regarding advertising and Google, please click here:

http://www.google.com/policies/technologies/ads/

Facebook Retargeting Pixel

On the basis of our legitimate interests in the analysis, optimisation and economic operation of our online offer and for these purposes, we use the so-called "Facebook pixel" of the social network Facebook, which is operated by Facebook Inc. 1 Hacke Way, Menlo Park, CA 94025, USA or if you are a resident of the EU, Facebook Ireland Ltd., 4 Grand Canal Square Harbour, Dublin 2, Ireland ("Facebook").

 

 

Opt-Out/Opt-In

If you do not agree to our evaluation of your usage data, you can opt out of this. The tracking is switched off by placing an "opt-out cookie" in your system. Should you ever delete all your cookies, please note that the opt-out cookie will also be lost and may have to be renewed.

We currently use Google Analytics, DoubleClick, nugg.ad and etracker cookies to optimise the delivery of advertising material.

To opt out of Google Analytics, please click here.To switch off the DoubleClick cookie, please click here. This opt-out works, e.g., for our advertising on TripAdvisor and Google ads. To switch of the nugg.ad cookie, please click here. To switch off the etracker cookie, please click here.

Social Plugins

Use of Facebook, Google+, Twitter and Instagram Plugins 

We use so-called social plugins ("plugins") from the social networks Facebook and Google+ and the microblogging services Twitter and Instagram on our website. These services are provided by the following companies: Facebook Inc., Google Inc., Twitter Inc. and Instagram LLC ("providers").  

Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). An overview of Facebook plugins and their appearance can be found here:

https://developers.facebook.com/docs/plugins

Google+ is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). An overview of Google plugins and their appearance can be found

here: https://developers.google.com/+/web/

Twitter is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA ("Twitter").  An overview of Twitter buttons and their appearance can be found here:

https://about.twitter.com/en_us/company/brand-resources.html

Instagram is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram").  An overview of Instagram buttons and their appearance can be found here:

http://blog.instagram.com/post/36222022872/introducing-instagram-badges

When you access a page of our website that contains such a plugin, your browser establishes a direct connection to Facebook's, Google's, Twitter's or Instagram's servers.  The relevant provider will transmit the content of the plugin directly to your browser and integrate it into the page.  Through this integration, the providers will receive the information that your browser has called up the corresponding page of our website, even if you do not have a profile or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a server of the relevant provider in the USA and stored there. 

If you are logged in to one of the services, the providers can directly map your visit to our website to your profile on Facebook, Google+, Twitter or Instagram.  If you interact with the plugins, e.g. by pressing the "Like", "+1", "Twitter" or "Instagram" button, this information will also be transmitted directly to a server belonging to the providers and stored there. The information will also be published on the social network, on your Twitter or Instagram account, and shown to your contacts.

The purpose and extent of the data collection and the further processing and use of the data by the providers as well as your rights in this regard and the setting options for the protection of your privacy can be found in the privacy policies of the providers.  

Facebook's privacy policy: http://www.facebook.com/policy.php

Google's privacy policy: http://www.google.com/intl/de/+/policy/+1button.html

Twitter's privacy policy: https://twitter.com/privacy

Instagram's privacy policy: https://help.instagram.com/155833707900388/

If you do not wish Google, Facebook, Twitter or Instagram to map the data collected via our

website directly to your profile held with the respective service, you need to log out of the service before visiting our website. You can also completely prevent the loading of the plugins with add-ons for your browser, e.g. using the "NoScript" script blocker (http://noscript.net/).  

Use of Pinterest Social Plugins

We use so-called social plugins ("plugins") from the social network Pinterest on our website, which is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA ("Pinterest").  The plugins appear, e.g. as buttons with the "Pin it" icon against a white or red background.  An overview of Pinterest plugins and their appearance can be found here:

https://developers.pinterest.com/docs/getting-started/introduction/ 

When you access a page of our website that contains such a plugin, your browser establishes a direct connection to Pinterest's servers. Pinterest transmits the content of the plugin directly to your browser and integrates it into the page.  Through this integration, Pinterest will receive the information that your browser has called up the corresponding page of our website, even if you do not have a profile with Pinterest or are not currently logged in to Pinterest. This information (including your IP address) is transmitted directly from your browser to a Pinterest server in the USA and stored there.  If you are logged in to Pinterest, Pinterest can directly map your visit to our website to your Pinterest account.  If you interact with the plugins, e.g. by pressing the "Pin it" button, this information will also be transmitted directly to a Pinterest server and stored there.  The information will also be published on Pinterest and shown to your contacts.  

The purpose and extent of the data collection and the further processing and use of the data by Pinterest as well as your rights in this regard and the setting options for the protection of your privacy can be found in the privacy policy supplied by Pinterest:

https://policy.pinterest.com/en/privacy-policy

 If you do not wish Pinterest to map the data collected via our website directly to your Pinterest account, you need to log out of Pinterest before visiting our website.  You can also completely prevent the loading of Pinterest plugins with add-ons for your browser, e.g. using the "NoScript" script blocker (http://noscript.net/).

If you do not wish Facebook, Twitter, Google, YouTube or Pinterest to map the data collected via our website directly to your profile on the respective social network, you need to log out of the network before visiting our website.

Rights of the data subject

The current data protection law grants you comprehensive data subject rights (rights of access and intervention) as regards the processing of your personal data vis-à-vis the controller, about which we inform you below:

- Right of access pursuant to Art. 15 GDPR:

In particular, you have a right to information about your personal data processed by us, the purposes of the processing, the categories of the personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the envisaged storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing or objection to the processing, of a right to complain to a supervisory authority, about the source of your data, if these were not collected from you by us, the existence of automated decision-making including profiling and, if required, meaningful information about the logic involved and the extent to which you are concerned and the envisaged consequences of such processing, as well as your right to be informed of any safeguards which exist pursuant to Art. 46 GDPR in the event of the transfer of your data to third countries;

- Right to rectification pursuant to Art. 16 GDPR:

You have a right to immediate rectification of any inaccurate data concerning you and/or completion of any incomplete data concerning you stored by us;

- Right to erasure pursuant to Art. 17 GDPR:

You have the right to demand the erasure of your personal data if the requirements of Art. 17 (1) GDPR are met. This right does not, however, exist especially if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;

- Right to restriction of processing pursuant to Art. 18 GDPR:

You have the right to demand the restriction of the processing of your personal data for as long as the contested accuracy of your data is being verified, or if the processing is unlawful and you oppose the erasure of your data and instead request the restriction of their use, or if we are no longer in need of this data for the purposes of the processing but you require your data for the establishment, exercise or defence of legal claims, or if you have filed an objection on grounds relating to your particular situation, for as long as it is not yet clear whether our legitimate reasons prevail;

- Right to information pursuant to Art. 19 GDPR:

If you have exercised your right to have the data controller rectify or erase your personal data or restrict the processing, he shall be obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed of these recipients;

- Right to data portability pursuant to Art. 20 GDPR:

You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to demand their transfer to another controller, where technically feasible;

- Right of withdrawal of consent pursuant to Art. 7 (3) GDPR:

You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event of withdrawal we will delete the relevant data without delay, unless further processing can take place on a legal basis which allows processing without consent. The withdrawal of consent shall not affect the lawfulness of the processing carried out on the basis of the consent up to the withdrawal;

- Right to complain pursuant to Art. 77 GDPR:

If you believe that the processing of personal data concerning you infringes the GDPR, you have the right to complain to a supervisory authority, in particular in the member state where you reside or work or the place where the alleged infringement occurred, without prejudice to any other administrative or judicial remedy;

Contact details of the supervisory authority in Berlin: Berlin Representative for Data Protection and Freedom of Information, Ms. Maja Smoltczyk, Friedrichstr. 219, D-10969 Berlin. Tel.: +49 (0)30 13889-0 Fax: +49 (0)30 2155050  Email: mailbox@datenschutz-berlin.de

RIGHT OF OBJECTION

If, in the course of balancing interests, we should process your personal data on the basis of our overriding legitimate interest, you will have the right to object at any time to this processing with future effect on grounds relating to your particular situation. If you exercise your right of objection, we will stop processing the data concerned. However, we reserve the right to continue processing if we can prove that there are compelling reasons worthy of protection for the processing, which override your interests, fundamental rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims. If we process your personal data for direct advertising purposes, you will have the right to object at any time to the processing of personal data concerning you for such advertising purposes. You may raise the objection as described above. If you exercise your right of objection, we will stop processing the relevant data for direct advertising purposes.

 

 

Duration of storage of personal data

The duration of the storage of personal data is determined by the respective statutory retention period (e.g. commercial and fiscal retention periods). The retention period for accounting documents is 10 years and for other business documents within the framework of contract processing 6 years. For more details on the storage period, please refer to the specific data protection information at the beginning of the booking process. After expiry of this period, the relevant data will routinely be deleted, provided that they are no longer necessary for the fulfilment or initiation of the contract and/or there is no longer any legitimate interest on our part in further storage.

Copyright © 2018, IT-Recht-Kanzlei · Alter Messeplatz 2 · 80339 Munich

Tel: +49 (0)89 130 1433-0· Fax: +49 (0)89 130 1433-60