Privacy policy of bremenstadtfuehrung.de
In accordance with Article 13 of the GDPR, we would like to inform you about how we use your data on our website. We also wish to point out that internet-based data transmission involves security risks, and that complete protection against access by third parties is therefore impossible.
Data controller pursuant to Art. 4(7) in conjunction with Art. 24 GDPR
Jasmin Nitzschner, M.A.
Aumunder Heide 89
28755 Bremen
VAT ID: DE35 108 7606
Phone: +49 421 - 17 42 662
Email: info@bremenstadtfuehrung.de
Website Hosting
We have engaged a hosting provider to host our website. The use of a hosting partner is based on our legitimate interest in making our website available on technically secure servers. The legal basis is Article 6(1)(f) in conjunction with Article 5 of the GDPR.
Here are the hosting provider’s details:
ALL-INKL.COM - Neue Medien Münnich
Owner: René Münnich
Hauptstraße 68 | 02742 Friedersdorf, Germany
Phone : +49 35872 353-10
Fax : +49 35872 353-30
Email: info@all-inkl.com
The company ALL-INKL.COM is a data processor within the meaning of Art. 28, 4 No. 8 GDPR. We have entered into a data processing agreement with this service provider.
When you visit our website, the hosting provider automatically collects and processes information in so-called server log files. These include, in particular:
• IP address of the requesting device
• Date and time of access
• Page/file accessed
• Amount of data transferred
• Notification of successful retrieval
• Browser and operating system used
• Referrer URL (the previously visited page)
This data is technically necessary to ensure the website functions properly, to guarantee the stability and security of the system, and for error analysis.
The processing is based on Article 6(1)(f) of the GDPR (legitimate interest in the secure and functional operation of the website).
The collected data is not stored permanently but is processed exclusively for the duration of the respective session and subsequently deleted automatically, provided that no legal retention obligations preclude this.
Domain Hosting
We have our domain bremenstadtfuehrung.de managed by another provider. The use of this service provider is also based on our legitimate interest in hosting our website on technically secure servers. The legal basis is Article 6(1)(f) in conjunction with Article 5 of the GDPR.
Provider details:
united-domains GmbH
Gautinger Straße 10
82319 Starnberg
Germany
Phone: +49 (0) 8151 / 36867-0
support@united-domains.de
united-domains GmbH acts as a data processor within the meaning of Articles 28 and 4(8) of the GDPR. We have entered into a data processing agreement with this service provider.
For information on data processing, see Website Hosting.
Processing of your data on our website
Technically necessary cookies
To ensure our website functions smoothly, we rely on technically necessary cookies. The legal basis for this stems from our legitimate interest in presenting our company and our services online and thereby competing in the marketplace. The legal basis for the use of these cookies is therefore Article 6(1)(f) in conjunction with Article 5 of the GDPR.
The retention period for these cookies depends on your browser settings; we recommend deleting cookies regularly.
Cookie consent banner
We use the consent management tool “Klaro” on our website to manage user consent for the use of cookies and external services.
The tool enables the following:
• Only cookies for which consent has been given are set
• Consents can be controlled on a granular basis by service
• Consents are documented and stored
Integration is carried out via a locally embedded script or via a content delivery network (CDN).
The following data is processed when using Klaro:
• Consent status (consent decision)
• Selected cookie categories / services
• Time of consent
• Anonymized IP address (if applicable)
• Technical browser information
The legal basis stems from the legal obligation to obtain the necessary consents from the website user. Legal basis: Art. 6(1)(c) in conjunction with Art. 5 GDPR
Newsletter
When you subscribe to our newsletter, we process the data you provide in order to send you regular updates about our offers, services, or news.
We use the so-called double opt-in procedure for newsletter subscriptions. This means that after you subscribe, we will send you an email asking you to confirm your subscription. Your subscription will only become effective after this confirmation.
The following data is processed:
Email address
Time of registration
Time of confirmation
IP address at the time of registration and confirmation
Processing is carried out exclusively for the purpose of sending the newsletter and verifying your consent.
The legal basis for the processing is your consent pursuant to Articles 5 and 6(1)(a) of the GDPR.
You may revoke your consent to receive the newsletter at any time with future effect, for example via the unsubscribe link in each newsletter or by sending us a message.
The data collected in connection with the newsletter will be stored for as long as the newsletter subscription remains active or until you withdraw your consent.
We use the services of Brevo for the registration process and the distribution of the newsletter. The registration form is technically provided via SibForms, a form technology offered by Brevo. The use of this service provider’s services is in our legitimate interest to utilize the services of a competent provider for purposes unrelated to our core business, thereby ensuring our processes are efficient and legally compliant.
The legal basis for the use of this service is therefore: Articles 5, 6(1)(f) of the GDPR.
Provider details:
Brevo
SAS106 boulevard Haussmann
75008 Paris
France
Privacy Policy:https://www.brevo.com/de/legal/privacypolicy/
Brevo is a data processor within the meaning of Articles 28 and 4(8) of the GDPR. We have entered into a data processing agreement with this service provider.
Contact form / Email / Phone
When you contact us via our contact form, by email, or by phone, we process your personal data solely for the purpose of handling your inquiry. We generally assume that your contact constitutes an inquiry regarding our offerings and thus represents an initial business contact.
The legal basis for this processing is Article 6(1)(b) in conjunction with Art. 5 GDPR in conjunction with Sections 611, 311(2) of the German Civil Code (BGB), provided you are not yet a customer of ours; otherwise, from Art. 6(1)(b) in conjunction with Art. 5 GDPR in conjunction with Sections 611 of the German Civil Code (BGB). (Service contract)
If you use our contact form, we process the data you enter there:
Your name, your email address.
If you contact us by email or phone, we process the data you provide via this communication channel, but at a minimum your email address if you choose to email us, or your phone number if you call us.
If your inquiry results in a contract, we will inform you separately about the applicable legal basis for data processing.
Retention period for general inquiries that do not result in a contract
We store your data only for as long as is necessary to fully process your request. To be able to answer any follow-up questions, we retain your data for a maximum of three months after the last contact. This retention period is based on our past experience.
Bookings for city tours via our booking system, bookingkit
When you book city tours or events through our booking system, we use your personal data to enter into a service contract with you in accordance with Section 611 of the German Civil Code (BGB). The legal basis for this processing under data protection law is derived from Article 6(1)(b) and Article 5 of the General Data Protection Regulation (GDPR) in conjunction with Section 611 of the German Civil Code (BGB).
When you book a video city tour through our booking system, we use your personal data to enter into a contract with you for the one-time provision of digital content in accordance with Section 327 of the German Civil Code (BGB). The legal basis for this processing under data protection law is derived from Article 6(1)(b) and Article 5 of the GDPR in conjunction with Section 327 of the German Civil Code (BGB).
In the case of the video city tour, we use the services of YouTube to provide the video.
The connection to YouTube is only established once you actually book the video city tour with us and click on the link provided to you after booking. When you use our videos, your personal data is additionally processed by Google. This data processing is not connected to our use of your data; it is merely an offer regarding which you are free to decide.
Google uses the following data from you: IP address, device and browser information, cookies that store tracking data, and referrer URL (the referring website), provided that you have not restricted or disabled such usage via your browser settings.
Please note that the use of YouTube is absolutely necessary to view the videos. The legal basis for the use of this service therefore stems from our legitimate interest in making our videos available via a professional video portal. The legal basis is therefore: Art. 5. 6 I lit. f) GDPR.
Information about Google’s use of data can be found here.
The contact details of the provider are:
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland
Phone: +353 1 543 1000
Fax: +353 1 686 5660
Email: support-deutschland@google.com
Please direct any inquiries regarding your data processed by Google directly to Google.
We have entered into a data processing agreement with Google pursuant to Articles 4(8) and 28 of the GDPR.
In addition, we use the following personal data in our shop:
First and last name, email address, phone number, address, ZIP code, city, payment information.
To manage bookings, participant numbers, and all other information related to the services we offer, we use the booking system provided by bookingkit. The use of this service provider’s services is in our legitimate interest to utilize the services of a competent provider for purposes unrelated to our core business, thereby ensuring our processes are efficient and legally compliant.
The legal basis for the use of this service is therefore: Articles 5, 6(1)(f) of the GDPR.
Provider details:
bookingkit GmbH
Sonnenallee 223
12059 Berlin
Germany
Authorized representatives:
Lukas C. C. Hempel (Managing Director)
Email: dataprotection@bookingkit.de
Web: https://bookingkit.com
https://bookingkit.com/de/datenschutzerklaerung
The company bookingkit GmbH is a data processor within the meaning of Articles 28 and 4(8) of the GDPR. We have entered into a data processing agreement with this service provider.
Sharing of data from the booking system
You can use various payment methods for bookings made through our booking system. Depending on the payment method you select, bookingkit will redirect you to the relevant service provider.
Retention of your data
If you register for a city rally or an event through our booking system, a service contract is established with us in accordance with § 611 of the German Civil Code (BGB), or, in the case of a video tour, a contract for the provision of digital services in accordance with § 327 of the German Civil Code (BGB). In this case, we use the aforementioned data to fulfill the contract, such as sending further information, transmitting payment data, etc.
The statutory retention period in this case is determined by § 195 BGB and is 3 years.
Google Recaptcha
To protect our website, and in particular our online forms, from abusive automated use (e.g., by bots), we use Google reCAPTCHA from Google.
Google reCAPTCHA analyzes the behavior of website visitors to determine whether entries are made by a human or by an automated system. This analysis begins automatically as soon as you visit a page with reCAPTCHA enabled.
When using Google reCAPTCHA, the following data in particular may be processed:
• IP address (truncated)
• Information about the browser and operating system
• Referrer URL
• Date and duration of the website visit
• Mouse movements and keystrokes
• Google account (if applicable, if you are logged in to Google)
Data processing takes place in the background and is generally not visible to users.
We use reCAPTCHA to ensure the technical security of our website, particularly against DDoS attacks; therefore, we base the processing of your data by reCAPTCHA on Article 6(1)(f) in conjunction with Article 5 of the GDPR (legitimate interest in preventing misuse of our website).
The provider’s contact information is as follows:
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland
Phone: +353 1 543 1000
Fax: +353 1 686 5660
Email: support-deutschland@google.com
Google acts as a data processor within the meaning of Articles 28 and 4(8) of the GDPR. We have entered into a data processing agreement with this service provider.
Your rights as a person whose data we process
With regard to your personal data processed by us, you have the following rights as a data subject. These rights are derived from the GDPR.
Right of access, Art. 15 GDPR
Pursuant to Art. 15(1) GDPR, you have the right to obtain information regarding the nature, scope, and purposes of the processing of your data.
Right to rectification, Art. 16 GDPR
Pursuant to Art. 16(1) GDPR, you have the right to have any inaccurate data rectified.
Right to erasure, Art. 17 GDPR
You have the right to erasure pursuant to Art. 17(1) GDPR. This essentially applies to inaccurate data or data that is no longer needed. Accurate data is exempt from your right to erasure during the statutory retention period, Art. 17(3)(b) GDPR.
Right to withdraw consent, Art. 7(3)(1) GDPR
Pursuant to Art. 7(3)(1) GDPR, you have the right to withdraw your consent at any time without providing a reason. To withdraw your consent for the newsletter, please use the unsubscribe link in the latest newsletter or send us an email. For other consents, please revisit our cookie banner and make the appropriate changes there; afterward, do not forget to delete the cookies stored on your device via your browser settings.
Right to Data Portability, Art. 20 GDPR
You also have the right to data portability. The data exchange format for this purpose is MS Excel.
Please direct any inquiries regarding your rights under the GDPR to us. You can find our contact information at the top of the “Data Controller” section.
Complaints
If you do not agree with our use of your data or have questions about it, please contact us directly. Furthermore, you have the right to contact the competent supervisory authority, which for the state of Bremen is:
The State Data Protection Commissioner of the Free Hanseatic City of Bremen
Georgstraße 122-124
Phone: +49 471 596 2010
Email: office@datenschutz.bremen.de
Copyright by cheyenne-IT