We take data protection seriously. This privacy policy explains how we process your data and what rights you have under data protection law. Valid from 23 April 2021.
1. Data processing controller and contact details
Contact details of our data protection officer:
Rechtsanwälte Ehspanner PartG
Matthias Ehspanner, Attorney
Data protection officer: Erfurt Tourismus und Marketing GmbH
Benediktsplatz 1
99084 Erfurt
Germany
datenschutz[AT]erfurt-tourismus[DOT]de
Controller as defined in data protection law
Erfurt Tourismus und Marketing GmbH
Benediktsplatz 1
99084 Erfurt
Germany
Tel: +49 (0)361 664 0200
Fax: +49 (0)361 664 0290
management[AT]erfurt-tourismus[DOT]de
If you have any questions regarding the collection, processing or use of your personal data, or for information, correction, blocking or erasure of data or for the withdrawal of consents given, please contact our data protection officer.
You can contact our data protection officer by email at datenschutz@erfurt-tourismus.de or by writing to our postal address and marking the envelope for the attention of ‘Datenschutzbeauftragter’.
2. Information on the collection of personal data
Legal basis and purposes of collection
We use personal data in accordance with the provisions of the General Data Protection Regulation (GDPR), the German Data Protection Act (BDSG) and other applicable data protection provisions (details below). What specific data is used and how it is used is determined primarily by the services requested or agreed. Further details and additional information concerning the purposes of data processing can be found in the relevant contract documents, forms, declaration of consent and/or other information provided to you (e.g. in connection with the use of our website or in our terms and conditions). In addition, this privacy statement may be updated from time to time. Please visit our website www.petersberg-erfurt.de/datenschutz for information.
Collection of personal data when you visit www.petersberg-erfurt.de
(1) If you only use the website for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data which is necessary for technical purposes, both to enable you to view our website and to guarantee stability and security (legal basis is Art. 6 (1) sentence 1 (f) GDPR):
- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Quantity of data downloaded
- Website from which the request originates
- Browser
- Operating system and its interface
- Language and version of the browser software.
Storage period of this data:
The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case for the data used to provide the website when the respective session has ended.
Provision prescribed or required:
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services and services may not be available or may be restricted. For this reason, an objection is excluded.
Purposes for the fulfilment of legal requirements (Art. 6 para. 1 c DSGVO) or in the public interest (Art. 6 para. 1 e DSGVO)
Like anyone who participates in business, we are subject to a variety of legal obligations. Primarily these are legal requirements (e.g. commercial and tax laws, but also regulatory or other official requirements where applicable). The purposes of processing may include identity and age verification, fraud and money laundering prevention, the prevention, combating and investigation of terrorist financing and crimes endangering assets, comparisons with European and international anti-terrorist lists, the fulfilment of control and reporting obligations under tax law as well as the archiving of data for data protection and data security purposes as well as audits by tax and other authorities. In addition, the disclosure of personal data may become necessary in the context of official/court measures for the purposes of gathering evidence, criminal prosecution or the enforcement of civil law claims.
We will not pass on your data to third parties beyond this. We obtain a certificate of proper data processing from service providers we commission to ensure the same security standards. In other cases, the recipients may only use the data for the purposes for which it was transmitted to them.
3. Your rights
(1) You can assert your data protection rights against us in certain circumstances.
Right of access
Under Art. 15 GDPR, you have the right to obtain information from us about the data we hold about you (where applicable subject to the limitations set out in section 34 BDSG).
Right to rectification or erasure
In accordance with Art. 16 GDPR, we will, on request, rectify the personal data that we hold about you if this is inaccurate or incorrect. If you wish, we will erase your data in accordance with the principles of Art. 17 GDPR unless other statutory provisions (e.g. statutory record retention requirements or the restrictions of section 35 BDSG) or an overriding interest on our part (e.g. to defend our rights and claims) prevent this.
Right to restriction of processing
Subject to the provisions of Art. 18 GDPR, you can demand that we restrict the processing of your data.
Right to object to processing
Under Art. 21 GDPR, you can also object to the processing of your data, in which case we have to stop processing your data. However, this right to object only applies where there are very special circumstances relating to your personal situation, and the rights of our company may override your right of objection.
Information about your right to object (Art. 21 GDPR)
You have the right, at any time, to object to the processing of your data which is carried out on the basis of Art. 6 (1) (f) GDPR (data processing on the basis of a balancing of interests) or Art. 6 (1) (e) GDPR (data processing in the public interest), if there are reasons for doing so relating to your particular situation. This also applies to profiling based on this provision within the meaning of Art. 4 no. 4 GDPR.
If you file an objection, we will no longer process your personal data unless we can prove there are compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing is necessary for the assertion, exercise or defence of legal claims.
You also have the right to revoke your consent to the processing of personal data at any time with effect for the future (see clause 2.3).
Right to data portability
You have the right to receive your data on the conditions set out in Art. 20 GDPR in a structured, commonly used and machine-readable format or to transmit it to a third party.
(2) You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data by us (Art. 77 GDPR). However, we recommend that you always address any complaint to our data protection officer in the first instance.
Your requests concerning the exercise of your rights should, if possible, be sent in writing to the above address or directly to our data protection officer.
4. Liability for content
Every effort is made to ensure that the content of this website is accurate. However, we are unable to guarantee that the information provided is complete, accurate and up to date. Pursuant to section 7 (1) of the German Telemedia Act (TMG), as an online provider we are responsible for our own content under the generally applicable laws. However, as an online provider we are under no obligation to monitor third-party information that is saved or provided to us, or to actively look for circumstances that indicate unlawful activity (sections 8–10 TMG). This does not affect our obligation under the generally applicable laws to remove or block access to information. However, any liability to that effect is accepted only from the point at which specific breaches of law become known. If we become aware of any such breaches of law, we will remove this content immediately.
5. Liability for links
In its judgment of 12 May 1998, the Hamburg regional court ruled that the provision of a link can establish responsibility for the content of the site to which the link is provided. According to the court, this can only be avoided by dissociating oneself explicitly from such content. Our website contains links to other websites. In respect of all of these links, we would like to explicitly state that we have no influence whatsoever on the design or the content of any of the linked websites. We therefore explicitly dissociate ourselves from the entire content on all pages to which links are provided on this website. This statement extends to all links provided on our website. The providers or operators of the linked sites are exclusively responsible for their content. We cannot reasonably be expected to review the content of linked websites on an ongoing basis without any indication of a breach of law. If we become aware of any such breaches of law, we will remove the link immediately.
6. Copyright
The content and works produced by the site operator on these pages are subject to German copyright law. Replication, editing, distribution and reuse of any kind beyond the scope of copyright law require the written consent of the party that wrote or produced the contribution. Downloads and copies of this page are permitted only for personal, non-commercial use. Where the content on these pages was not created by the site operator, the copyright of third parties has been respected. Third-party content is identified as such. Please notify us should you identify a breach of copyright. If we become aware of any such breaches of law, we will remove this content immediately.
Our privacy policy as well as information on data protection regarding our data processing activities according to Articles 13, 14 and 21 GDPR may be amended from time to time. All changes will be published on this page.