Data Protection Policy

1. Data protection at a glance

General notes

The following notices provide a simple overview to explain what happens with your personal data when you visit our website. Personal data are defined as any data which could be used to identify you personally. For detailed information on the topic of data protection, please refer to our Data Protection Policy described below.

Data recording on our website

Who is the responsible party for the recording of data on this website?

The website operator processes the data collected on this website. For the website operator���s contact details, please refer to the Legal Notice on this website.

How do we record your data?

Some of your data are collected by you providing them to us. Such data may, for instance, be information you enter into our contact form.

Other data are collected automatically by our IT systems during visits to our website. These data are primarily technical (e.g. Internet browser, operating system or time the site was accessed) These data are collected automatically as soon as you enter our website.

What do we use your data for?

Some of these data are collected to ensure that the provision of our website functions properly. Other data can be used for the analysis of your user behaviour.

What rights do you have concerning your data?

At all times and at no charge, you have the right to request information about your stored personal data, its origin, recipients and purpose. Furthermore, you have the right to request rectification, blocking or erasure of these data. If you have any questions regarding this subject or data protection, please do not hesitate to contact us at any time under the address stated under Legal Notice. Furthermore, you have a right to file a complaint with the competent supervisory authority.

Analytical and third-party tools

During your visit to our website, statistical analyses may be made of your surfing behaviour. This is mainly achieved using cookies and analysis programs. In general, the analysis of your surfing behaviour is anonymous, i.e. your surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. For detailed information, please refer to our Data Protection Policy below.

You can object to this analysis. Our Data Protection Policy informs you about your objection options.

2. General notices and mandatory information

Data Protection

The operators of these websites take the protection of your personal data very seriously. We treat your personal data confidentially in compliance with the statutory data protection regulations and this Data Protection Policy.

When you use this website, various kinds of personal data are collected. Personal data are defined as data that could be used to identify you personally. This Data Protection Policy explains which data we collect and what we use them for. It also explains how and for what purpose we do this.

Please note that data transmitted via the Internet (e. g. via e-mail communication) may be affected by gaps in security. It is not possible to seamlessly protect all data against third-party access.

Notice regarding the controller

The controller for processing data on this website is:

Naheland-Touristik GmbH
Managing Director: Katja Hilt
Bahnhofstrasse 37
D-55606 Kirn/Nahe

Phone: +49 (0)6752 13 76 10
E-mail: info@naheland.net

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g. names, e-mail addresses or similar contents).

 

Data Protection Officer:

If you have any questions about Data Protection, please write us an e-mail or contact our Data Protection Officer directly:

Kettern, Ivana

Phone: +49 (0)6752 - 13 76 14

E-mail: ivana.kettern@naheland.net

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You may revoke your consent at any time. An informal notification to us by e-mail with this request is sufficient. The lawfulness of data processing before revocation shall remain unaffected by the revocation.

Right to lodge a complaint with the competent supervisory authority

In the case of infringements of data protection laws, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority regarding data protection laws is the State Data Protection Officer of the federal state in which our company has its registered office. A list of Data Protection Officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to data portability

You have the right to have the data we process based on your consent or fulfilment of a contract automatically transmitted to you or a third party in a commonly used, machine-readable format. If you demand that the data be transmitted directly from one controller to another, this will only be done where technically feasible.

SSL or TLS encryption

This site uses SSL and/or TLS encryption for security purposes and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator. You can recognise an encrypted connection in your browser���s address line when it changes from, “http://” to “https://” and the lock icon is displayed in your browser���s address bar.

If SSL or TLS encryption is activated, third parties cannot read the data you transfer to us.

Encrypted payment transactions on this website

If you enter into a contract that requires you to send us your payment information (e.g. account number for direct debits), we will require this data to process your payment.

The payment transactions via the standard means of payment (Visa/Master Card, direct debit) are only made via encrypted SSL or TLS connections. You can recognise an encrypted connection in your browser���s address line when it changes from "http://" to "https://" and the lock icon is displayed in your browser���s address bar.

In encrypted communication, any payment details you submit to us cannot be read by third parties.

Information, blocking, erasure of data

Within the scope of the applicable statutory regulations, you have the right to obtain information about your stored personal data, its origin and receivers and the purpose of data processing at all times and free of charge, and, as appropriate, a right to rectification, blocking or erasure of these data. If you have any questions on this or other topics concerning personal data, you can contact us at any time at the address stated in the Legal Notice.

Objection to e-mail marketing

The use of contact data published within the framework of the German legal notices regulations for sending unsolicited advertising and informational materials is hereby prohibited. The operators of these sites expressly reserve the right to take legal action in the case of transmission of unsolicited advertising material, such as spam e-mails etc.

3. Data collection on our website

.

Cookies

Some websites use cookies. Cookies do not damage your computer in any way and do not contain viruses. Cookies serve to make our offering more user-friendly, effective and secure. Cookies are small text files that are stored on your computer by your browser.

Most of the cookies we use are called “Session-Cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies make it possible for us to recognise your browser the next time you visit our site.

You can configure your browser to notify you when cookies are set and only allow cookies in individual cases, exclude the acceptance of cookies for specific cases or in general, and activate the automatic deletion of cookies when the browser is closed. Deactivating cookies may restrict the functionality of this website.

Cookies necessary to carry out the electronic communication process or to provide certain functions desired by you (e.g. shopping cart function) are stored pursuant to Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in storing cookies to ensure the technically error-free and optimised provision of its services. Where other cookies are stored (e.g. to analyse your surfing behaviour), they will be addressed separately in this Data Protection Policy.

Server log files

The site provider automatically collects and stores information that your browser automatically transmits to us in server log files. These include:

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of accessing computer,
• Time of server request,
• IP-Address

These data will not be combined with data from other sources.

Data processing is based on Art. 6 (1) lit. f of the GDPR, according to which data processing is lawful when it is necessary for the performance of a contract or to take steps before entering into a contract.

Processing of data (customer and contract data)

We collect, process, and use personal data only insofar as it is necessary to establish or modify legal relationships with us (master data).

This is done based on Art. 6 (1) lit. b of the GDPR, according to which data processing is lawful when necessary for the performance of a contract or to take steps before entering into a contract. We collect, process and use your personal data when accessing our website (usage data) only to the extent required to access our service or bill you for the same.

Collected customer data shall be deleted after completion of the order or termination of the business relationship. Legal retention periods remain unaffected.

Data transmitted when entering into a contract with online shops, retailers, and mail order

We transmit personally identifiable data to third parties only to the extent required to fulfil the terms of your contract, for example, to companies entrusted to deliver goods to your location or financial institution entrusted to process your payments. Your data will not be transmitted for any other purpose unless you have given your express permission to do so. Your data will not be disclosed to third parties for advertising purposes without your express consent.

Data processing is based on Art. 6 (1) lit. b of the GDPR, according to which data processing is lawful when necessary for the performance of a contract or to take steps before entering into a contract.

Data transfer upon closing of contracts for services and digital content

We share personal data with third parties only if necessary to handle the contract, for instance, with the financial institution tasked with processing payments. Your data will not be transmitted for any other purpose unless you have given your express permission to do so. Your data will not be disclosed to third parties for advertising purposes without your express consent. Data processing is based on Art. 6 (1) lit. b of the GDPR, according to which data processing is lawful when necessary for the performance of a contract or to take steps before entering into a contract.

Booking

You can book different types of accommodation on the website. For this purpose, you must provide the following data:

• Title
• First name
• Last name
• Street, House number
• Post code, City
• Country
• E-mail

Your data will be used to process the booking enquiry and to create an offer.

Legal basis

Art. 6 GDPR (6) 1b:
"Processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures carried out at the data subject's request".

Duration of storage

The personal data processed for processing bookings and handling contracts will be deleted after the expiry of the statutory retention obligations unless the controller has a legitimate interest in continued retention. In any case, only those data will continue to be stored that are actually required to achieve the corresponding purpose.

Non-binding booking enquiry

You can send a non-binding booking enquiry to the operator via a special contact form. For this purpose, you must provide the following data:

• First name
• Last name
• E-mail

Your data will be used to process the booking enquiry and to create an offer.

Legal basis

Art. 6 GDPR (6) 1b:
"Processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures carried out at the data subject's request".

Duration of storage

The personal data processed for the purpose of processing a non-binding booking request will be deleted unless the controller has a legitimate interest in their continued retention. In any case, only those data will continue to be stored that are actually required to achieve the corresponding purpose.

Brochure ordering

You can order various brochures on the website. To do this, you must enter the following data:

• Title
• First name
• Last name
• Street, House number
• Post code, City
• Country
• E-mail

Your data will be used for sending the brochure you ordered.

Legal basis

Art. 6 GDPR (6) 1b:
"Processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures carried out at the data subject's request".

Duration of storage

Personal data processed for the purpose of sending brochures shall be deleted unless the data controller has a legitimate interest in their continued retention. In any case, only those data will continue to be stored that are actually required to achieve the corresponding purpose.

4. Analysis tools and advertising

Google Analytics

This website uses features of the Google Analytics Web Analysis Service. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called "Cookies". These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a server of Google in the United States and stored there.

Google Analytics cookies are stored based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour to optimise both its web offering and its advertising.

IP Anonymisation

We have activated the IP anonymisation function on this website. This means that your Google will shorten your IP address within member states of the European Union or other states party to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser within the scope of Google Analytics is not combined with other Google data.

Browser Plugin

You may refuse the use of cookies by selecting the appropriate settings on your browser; however, please note that you may not be able to use the full functionality of this website if you do this. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objecting to the collection of data

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this site: Disable Google Analytics. For more information about how Google Analytics handles user data, see Google���s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Order data processing

We have concluded an order data processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic characteristics in Google Analytics

This website uses the "demographic characteristics" function of Google Analytics. This allows reports to be created containing information on the site visitor���s age, gender and interests. This data comes from interest-based advertising from Google as well as from visitor data from third-party providers. These data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section ”Objection to data collection”.

5. Newsletter

Newsletter data

If you would like to receive the newsletter offered on the website, we need an e-mail address from you and information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Further data is not collected or is only collected on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.

The data entered in the newsletter registration form is processed exclusively on the basis of your consent (Art. 6 (1) lit. a GDPR). You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time, for example, via the "Unsubscribe" link in the newsletter. The lawfulness of the data processing operations that have already taken place remains unaffected by the revocation.

We will save the data you have stored with us to subscribe to the newsletter until you unsubscribe from the newsletter and will be deleted after you unsubscribe from the newsletter. This does not affect data stored for other purposes (e.g. e-mail addresses for the members' area).

Newsletter2Go

This website uses Newsletter2Go to send newsletters. The provider of this service is Newsletter2Go GmbH, Nürnberger Straße 8, 10787 Berlin, Germany.

Newsletter2Go is a service that organises and analyses the distribution of newsletters. The data you provide to subscribe to our newsletter will be stored on Newsletter2Go servers in Germany.

If you do not want your newsletter usage to be analysed by Newsletter2Go, you will have to unsubscribe from the newsletter. For this purpose, we provide a link in every newsletter we send. You can also unsubscribe from the newsletter directly on the website.

Data analysis by Newsletter2Go

We use Newsletter2Go to analyse our newsletter campaigns. This allows us to determine if a newsletter message has been opened and which links you click on. We can thus find out how often various links are clicked.

In addition, we can see if certain actions take place after clicking on said links (conversion rate). We can thus determine whether clicking a link in a newsletter has led to a purchase, for example.

Newsletter2Go also allows us to classify newsletter recipients into different categories (clustering). Newsletter recipients can be subdivided according to age, gender or place of residence, for example. This allows us to adapt the newsletters to the respective target groups.

For detailed information on the functions of Newsletter2Go, see the following link: https://www.newsletter2go.de/features/newsletter-software/.

Legal basis

The data processing is based on your consent (Art. 6 (1) lit. a GDPR). You may revoke your consent at any time. The lawfulness of the data processing operations that have already taken place remains unaffected by the revocation.

Duration of storage

We will store the data you provide to receive the newsletter until you unsubscribe from the newsletter and will be deleted from our servers and the servers of Newsletter2Go after you unsubscribe from the newsletter. This does not affect data stored for other purposes (e.g. e-mail addresses for the members' area).

For more information, see the privacy policy of Newsletter2Go at: https://www.newsletter2go.de/features/datenschutz-2/.

Conclusion of a contract for order data processing

We have concluded a contract with Newsletter2Go in which we oblige Newsletter2Go to protect the data of our customers and not to pass it on to third parties. This contract can be viewed at the following link: https://www.newsletter2go.de/docs/datenschutz/ADV_Muster_Newsletter2Go_GmbH_latest_Form.pdf?x48278.

6. Plugins and Tools

YouTube

Our website uses plugins from YouTube, which Google operates. The pages operator is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

If you visit one of our pages featuring a YouTube plugin, a connection to the YouTube servers is established. Here the YouTube server is informed about which of our pages you have visited.

If you are logged into your YouTube account, you allow YouTube to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used in the interest of providing an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR.

You can find further information on the handling of user data in YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy.

Google Web Fonts

Our site uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.

For this purpose, the browser you use must connect to the Google servers. This gives Google knowledge that our website was accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR.

If your browser does not support web fonts, a standard font from your computer will be used.

You can find more information on Google Web Fonts at: https://developers.google.com/fonts/faq and in Google���s data protection policy: https://www.google.com/policies/privacy/.

Google Maps

This website uses the Google Maps map service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this page has no influence on this data transmission.

The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easier to find the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR.

You can find further information on the handling of user data in Google's data protection policy: https://www.google.de/intl/de/policies/privacy/.