![[Translate to English:]](/fileadmin/_processed_/f/d/csm_Format_Startseite_Header_R%C3%BCdesheim_walklikealocal_klein_89db621a73.jpg "[Translate to English:]")
Data protection concerns personal data (hereinafter also referred to as data). This is any information relating to an identified or identifiable natural person. This includes, for example, information such as name, address, occupation, email address, state of health, income, marital status, genetic characteristics, telephone number and, where applicable, user data such as the IP address.
The controller responsible for the processing of your personal data in the context of the use of the website www.ruedesheim.de (hereinafter referred to as the website) is the Wirtschafts- u. Tourismusförderung Rüdesheim u. Assmannshausen am Rhein e.V. (hereinafter referred to as the operator or controller). The contact details are as follows:
Wirtschafts- u. Tourismusförderung Rüdesheim u. Assmannshausen am Rhein e.V.
represented by first chairperson Astrid Climenti
Oberstraße 32
65385 Rüdesheim am Rhein
Phone: +49 6722 9378943
Email: kontakt@wtf-ruedesheim.de
The controller is not obliged to appoint an (external) data protection officer.
Should you wish to object to the processing of your data by the operator as a whole or for individual measures in accordance with this privacy policy, you can do so by using the contact details provided in the legal notice. Please note that in the event of such an objection, the use of the website and the retrieval of the services offered here may only be possible to a limited extent or not at all.
Every time the website and its subpages are accessed, usage data are transmitted by the respective internet browser and stored in log files (server log files). The stored data records contain the following data: date and time of access, name of the subpage accessed, IP address, referrer URL (original URL from which you accessed the website), amount of data transferred as well as product and version information of the browser used.
This processing is lawful under Art. 6 para. 1 b), f) GDPR (user relationship, legitimate interest). The legitimate interest of the operator lies in providing a website with content relevant to tourism, in offering services and goods to customers, in processing contracts online as well as in optimising the operation of the website. The data processed by the operator is required to enable you to use the website.
The log files are analysed by the operator in anonymised form to further improve the website and make it more user-friendly, to find and correct errors more quickly and to manage server capacities. For instance, it is possible for the operator to determine during which times the website is particularly popular in order to provide the according data volume. Your IP address will be deleted or anonymised after you have stopped using the website. Anonymisation means that IP addresses are changed in such a way that they can no longer – or only with a disproportionate amount of time, cost and labour – be assigned to a specific or specifiable / identified or identifiable natural person.
The website is hosted by Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp and by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur.
Processing is lawful under Art. 6 para. 1 f) GDPR (legitimate interest). The operator's legitimate interest lies in the seamless and secure provision of the website. The host has the necessary capacity and expertise to do so.
In the context of web hosting, data may be passed on to the web host and accessed by Mittwald and Ionos employees. The data are stored and saved by the web host in accordance with the company's own deletion concept. IP addresses are only stored in anonymised form. Further information on their storage of data can be found here and here.
If you would like to contact the operator, there are various contact forms available. For this, you must provide the indicated mandatory information (e.g. personal data, address data, contact data). All other information is optional.
In some instances, you also have the possibility to open an email addressed to the operator with just one click. The email address linked to your email programme is automatically used as sender. If you do not wish for your email address to be retrieved in this manner, you can adjust your settings.
This processing is lawful under Art. 6 para. 1 b) GDPR (pre-contractual measure). Providing your data is necessary, otherwise you are unable to send a message to the operator and your request cannot be processed.
There is no legal obligation to provide your data. If you do not provide your data or only parts of it, you may not be able to contact the operator, or it may not be possible for your enquiry to be processed properly.
If a contract is concluded between you and the operator, the duration of storage is largely determined by the applicable statutory retention obligations. If the contract is not concluded, your personal data will be deleted after 6 months. In individual cases, the data will be stored for longer should the operator have an overriding legitimate interest to do so.
The operator uses so-called cookies. These are small data packets that generally consist of letters and numbers and are stored on a browser when you visit certain websites. Cookies allow the website to recognise your browser, to follow you through various sections of the website as you browse and to identify you when you return to the website. Cookies do not contain any data identifying you personally, but the information stored by the operator concerning your person can be linked to the data obtained from and stored in the cookies.
Information the operator receives from you through the use of cookies can be processed for the following purposes:
Cookies do not cause any damage to a browser. They do not contain viruses and do not allow the operator to spy on you. Two types of cookies are used:
With the help of cookies, the operator is able to track your usage behaviour for the above-mentioned purposes and to the corresponding extent. They also serve to optimise your browsing experience on the operator's website. These data are also only collected in anonymised form by the operator. This processing is lawful under Art. 6 para. 1 f) GDPR, which states that processing is permitted if it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. The legitimate interest of the operator lies in the optimised presentation of its website.
The storage of information (cookies) on the end user's equipment is lawful under Section 25 (2) no. 2 TDDDG, as storage is absolutely necessary for the provider to offer a digital service expressly requested by the user.
The provision of the data is necessary in order to access the operator's website without any errors. If you do not accept cookies or delete cookies that have already been set, it can lead to functional restrictions on the website.
Matomo
When you visit the website, the open-source tracking service “Matomo” is active. This is used for the statistical evaluation of website visits.
This processing is lawful under Art. 6 para. 1 f) GDPR (legitimate interest). The legitimate interest of the operator lies in the evaluation of website visits. For the design of the website to be as attractive as possible for website visitors, the operator needs information about the number of clicks, the length of a session, etc.
The IP addresses collected are anonymised by the service. It is not possible for the operator to trace them back to you. The data collected is only transmitted to the servers of the website operator. No further transmission, especially to third countries, takes place.
Further information about the service can be found at https://matomo.org/privacy/.
Google Tag Manager
The operator uses the Google Tag Manager of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), hereinafter referred to as ‘Google’. In this context, data such as the IP address are collected.
Processing is lawful under Art. 6 para. 1 a) GDPR (consent). Consent can be withdrawn at any time with effect for the future. This does not affect the data processing carried out prior to the withdrawal of consent.
When using this Google service, it is possible that data may be transferred to Google's servers in Ireland and stored there. It is also possible that data may be transferred to the USA. The transfer of your personal data to the USA is based on an adequacy decision, the EU-U.S. Data Privacy Framework. Google LLC and its subsidiaries are certified under this adequacy decision. The transfer is also based on the use of standard contractual clauses under Art. 46 (2c) GDPR issued by the European Commission following Art. 93 (2) GDPR.
Information on the standard contractual clauses can be found on the website of the European Commission (https://ec.europa.eu/info/index_de). Information on the EU-U.S. Data Privacy Framework can be found here: www.dataprivacyframework.gov/s/
Further information can be found directly at Google: https://policies.google.com/privacy/frameworks?gl=de.
Providing your data is optional. If you do not provide your data, the Google Tag Manager cannot be activated.
The operator uses the OpenData-based map service OpenStreetMap. This is operated by the Openstreetmap Foundation, St. John's Innovation Centre, Cowley Road, Cambridge, CB 0WS, United Kingdom. Information on the use of the website and the service is transmitted to various servers (e.g. to the web agency Shapefruit, to deskline or to OpenStreetMap itself). It is also possible that data may be transferred to the United Kingdom as a third country. There is a so-called adequacy decision for the United Kingdom, on which the data transfer can be based. You can find out more about this on the European Commission's website https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en.
The operator uses OpenStreetMap to enable your use of the interactive maps to find routes. This processing is lawful under Art. 6 para. 1 f) GDPR, which states that processing is permitted if it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. The use of data for the purpose of providing the maps for route finding constitutes a legitimate interest of the operator as defined by Art. 6 para. 1 f) GDPR. This facilitates access to the operator's place of business. Providing the data is neither required by law nor necessary for the conclusion of a contract. By not providing the data you will be unable to use this function.
Some of the data is stored. Further information on this can be found in the privacy policy of the Openstreetmap Foundation https://wiki.osmfoundation.org/wiki/Privacy_Policy.
The operator uses YouTube videos on the website. YouTube is a service provided by YouTube LLC (‘YouTube’), 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland.
The operator uses YouTube in extended data protection mode to provide you with videos on various topics. Processing is lawful under Art. 6 para. 1 a) GDPR, which states that processing is permitted if the data subject has given their consent to the processing of their personal data for one or more specific purposes. By using the extended data protection mode, there is no tracking of the user and therefore no personalisation.
Once you have given your consent, usage information (e.g. date and time of access, IP address, etc.) may be transmitted to YouTube's servers and stored there (possibly in a third country such as the USA). In cases where data are transferred to the USA, Google relies on the EU standard contractual clauses. You can find further information on this directly through Google https://policies.google.com/privacy/frameworks?gl=de.
Providing the data is neither required by law nor necessary for the conclusion of a contract. By not providing the data you will be unable to use our website or use it to its full extent.
Further information on the purpose and scope of data collection and its processing by YouTube can be found in Google's privacy policy and terms of use.
You also have the option of booking various experiences on the website (wine shop tours, self-organised events, etc.). In this context, various information on your person and the details you provide are processed.
To book the experiences, you must provide the following information:
Indicating the name of the cardholder as well as the card number is mandatory when paying by credit card. You may also provide further information (e.g. company name, VAT ID, etc.).
Processing is lawful under Art. 6 para. 1 b) GDPR, which states that data processing is permitted when it is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
There is no legal obligation to provide your data. If you do not provide your data, however, no contract can be concluded with you and you cannot purchase any goods, services or tickets via the shop.
The operator stores the data within the scope of its statutory retention obligations. Any further storage will only take place if the operator has an overriding legitimate interest in further storage of the data.
In order to be able to offer you the goods, services and tickets, the operator uses the booking system of Regiondo GmbH Mühldorfstraße 8, 81671 München, Germany. In this context, data is passed on to the service provider Regiondo.
Processing is lawful under Art. 6 para. 1 f) GDPR, which states that processing is permitted if it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. The operator has an overriding interest in the seamless provision of an encrypted booking system.
There is no legal obligation to provide your data. If you do not provide your data, however, the booking tool cannot be used and you will not be able to purchase goods, services or tickets via the shop.
You can make your payment via PayPal, among other methods. When paying via PayPal, you will be redirected to this provider. PayPal is a payment service provided by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal uses the personal data you enter to process the payment transaction. Data may be transferred to countries outside the European Economic Area and to Switzerland. PayPal has adopted binding corporate rules for this purpose, which you can find here. Furthermore, the data protection provisions of PayPal.
PayPal also offers you the option of express checkout. If you use this, the contact, address and payment information you provide to PayPal will be automatically transmitted to us. Further information on the processing, storage and deletion of your data by PayPal can be found here.
The other payment options are processed by the payment service provider Stripe Payments Europe, Limited (SPEL), 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. Further information can be found at Stripe Payments or can be requested from Regiondo.
To enable you to book overnight stays, room reservations and packages, the operator uses the booking tool “booking & more” from feratel media technologies AG, Maria-Theresien-Straße 8, 6020 Innsbruck, Austria. You can also use the tool to order brochures. In this context, various information on your person as well as the details you provide will be processed.
The following information is required to order the goods:
You can also enter a telephone number and add a message to the booking.
Processing is lawful under Art. 6 para. 1 b) GDPR, which states that processing is permitted when it is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
There is no legal obligation to provide your data. If you do not provide your data, however, no contract can be concluded with you and you cannot make any bookings.
The operator stores the data within the scope of its statutory retention obligations. Any further storage will only take place if the operator has an overriding legitimate interest in the further storage of the data.
The operator uses the ‘booking & more’ service of feratel media technologies AG, Maria-Theresien-Straße 8, 6020 Innsbruck, Austria, to provide the offers. In this context, data may also be transferred to the service provider and stored or otherwise processed by it. Further information on the processing of data can be obtained directly from feratel.
Processing is lawful under Art. 6 (1) f) GDPR, which states that processing is permitted if it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. The operator has an overriding interest in the seamless provision of a reliable booking system.
You have the following rights: You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR).
You also have the right to contact a supervisory authority. You can find a list of the current supervisory authorities here.
If your personal data is processed on the basis of Art. 6 para. 1 f) GDPR, you have the right to object if there are reasons for this arising from your particular situation or if the objection concerns direct advertising (Art. 21 GDPR). If you object to direct advertising, the operator will no longer send you any advertisements.
You can revoke consent given to the operator at any time with effect for the future. However, this has no influence on the data processing carried out up to that point based on this consent (e.g. sending a newsletter, evaluating your usage data for analysis purposes).
To notify us, please use the contact address of the controller indicated in the legal notice.
The data collected when you access and use the website and the information you provide when contacting us are transmitted to the operator's server and stored there. Your data may also be passed on to employees of the controller involved in processing (clerks, customer service). Other potential recipients are processors (e.g. data processing center, IT service providers, software support), contractual partners of the operator (e.g. tax consultants, podcast service providers), the German Bundesbank, the Federal Financial Supervisory Authority, the European Banking Authority, the European Central Bank, law enforcement authorities and supervisory authorities. The transfer to these recipients is either based on a legal obligation of the operator or necessary for the execution of your contract or as part of order processing.
When you visit the website, content which is linked to third-party websites may be displayed. Neither has the operator access to the cookies or other functions used by third-party sites nor can he control them. Such third-party sites are not subject to the operator's data protection provisions.
