In the following, we would like to inform you about the handling of your data in accordance with Art. 13/14 of the General Data Protection Regulation (GDPR) when you visit one of our social media or applicant websites.
See under 7. responsible body:
In addition to us, there is also the operator of the social media or applicant platform itself. In this respect, the operator is also another controller who carries out data processing, but over which we have only limited influence. Where we can exert influence and parameterise data processing, we work within the scope of the possibilities available to us to ensure that the operator of the social media or applicant platform handles the data in accordance with data protection regulations. In many cases, however, we cannot influence the data processing by the operator of the social media or applicant platform and do not know exactly which data they process. However, the operator will inform you about this in their respective privacy policy (see point 5.).
2 Who can you contact if you have questions about data processing?
Data Protection Officer of DER Touristik Group
Emil-von-Behring-Straße 6
60424 Frankfurt am Main
E-mail: datenschutz@dertouristik.com
The data you enter on our social media or applicant websites, such as comments, questions, videos, images, likes, public messages, job preferences and selection, etc., will be published by the operator of the social media or applicant platform and will only be used or processed by us for the purposes stated below. We reserve the right to delete content should this be necessary. We may share your content on our website if this is a function of the website and communicate with you via the website.
The legal basis is Article 6(1)(f) of the General Data Protection Regulation. Data processing is carried out in the interests of our public relations work, recruitment and communication.
3.1 Purposes of processing
If you wish to object to certain data processing over which we have an influence, please contact us at the contact address provided. We will then review your objection.
3.1.1 Competitions
From time to time, you have the opportunity to take part in competitions on our social media websites. We process your data (name, email address, address and any other data required for the competition) in order to organise a competition. We process your data to check eligibility to participate, determine and notify the winner, send the prize and, if applicable, publish the winner, albeit with your consent. Your data collected by us will not be passed on to third parties unless this is necessary for the implementation of the competition or the sending of the prize and there is a data protection transfer authorisation. We generally delete your data two months after the end of the competition
The legal basis for the data processing described is Article 6(1)(b) of the General Data Protection Regulation (competition contract) and your consent to the publication of the winners
3.1.2 Social media
On the social media and applicant websites on which we have a presence, you will find links to other company presences on social media and applicant platforms. You can recognise links to the websites of the social media services by the respective company logo, for example. If you follow these links, you will reach our company presence on the respective social media service. When you click on a link to a social media service, a connection is established to the servers of the social media service. This tells the servers of the social media service that you have visited our website. In addition, further data is transmitted to the provider of the social media service. These are, for example
Address of the website on which the activated link is located
Date and time of accessing the website or activating the link
Information about the browser and operating system used
IP address
If you are already logged in to the corresponding social media service at the time the link is activated, the provider of the social media service may be able to determine your user name and possibly even your real name from the transmitted data and assign this information to your personal user account with the social media service. You can exclude this possibility of assignment to your personal user account if you log out of your user account beforehand.
3.1.3 Making contact
You can contact us via some of our social media and applicant websites. We process your data in order to answer your enquiry and, if necessary, to send you the requested information material. Your data may be transmitted to the office responsible for your enquiry. This office may also be a third party. Data will only be transferred if there is authorisation to do so under data protection law.
The legal basis for the data processing described is Article 6(1)(b) and (f) of the General Data Protection Regulation (pre-contractual measures, contract fulfilment or balancing of interests, based on the company’s interest in responding to enquiries from customers, applicants and other persons).
If you send us an enquiry on the social media platform, we may also refer you to other, secure communication channels that guarantee confidentiality, depending on the required response.
You always have the option of sending confidential enquiries to the controller.
3.1.4 Monitoring advertising success and statistical analyses
We analyse the results of our (marketing) activities on our social media and applicant websites in order to measure the efficiency and relevance of our web presence. We determine the success of our activities in order to continuously improve our (marketing) activities in your interests and to plan new measures.
We can only influence the statistics provided to us by the operator of the social media or applicant platform (in particular information on page views etc.) to a limited extent and cannot switch them off. However, we make sure that no additional optional statistics are made available to us.
The legal basis for the data processing described is Article 6(1)(f) of the General Data Protection Regulation (balancing of interests, based on the interest in measuring the success of advertising measures).
As already stated, where the operator of the social media or applicant platform gives us the opportunity, we make sure that our social media or applicant websites are as data protection compliant as possible.
The servers of the social media services are located in the USA and other countries outside the European Union. The data may therefore also be processed by the provider of the social media service in countries outside the European Union. Please note that companies in these countries are subject to data protection laws that do not generally protect personal data to the same extent as is the case in the member states of the European Union. If a data transfer outside the scope of the EU GDPR is necessary due to our predominantly legitimate interest or if a third country transfer takes place when using contract processors, this is secured, among other things, with EU standard contractual clauses in accordance with Art. 46 para. 2 lit. c EU GDPR.
Please note that we have no influence on the scope, type and purpose of data processing by the provider of the social media service. For more information on the use of your data by the social media services integrated on our website, please refer to the privacy policy of the respective social media service.
5 Data processing by the operator of the social media or applicant website
The operator of the social media or applicant website uses web tracking methods. Web tracking can also take place regardless of whether you are logged in or registered with the platform. As already explained, we can hardly influence the platform’s web tracking methods. For example, we cannot switch them off.
Please be aware that it cannot be ruled out that the platform operator may use your profile and behavioural data, approx. to evaluate your habits, personal relationships, preferences, etc. In this respect, we have no influence over this. In this respect, we have no influence on the processing of your data by the platform operator.
For more information on data processing by the platform operator and further objection options, please refer to the privacy policy of the respective operator:
Instagram:https://www.instagram.com/legal/privacy/
TikTok: https://www.tiktok.com/legal/privacy-policy-eea?
YouTube: https://policies.google.com/privacy?hl=de
In cases where we are jointly responsible for the processing with the operator, you will find the main contents of the joint processing of your data here:
Facebook: https://www.facebook.com/legal/terms/page_controller_addendum, https://www.facebook.com/policy.php
6 Your rights as a user
When processing your personal data, the General Data Protection Regulation (GDPR) grants you as a website user certain rights that you can exercise both against us and against the operator of the social media or applicant website:
Right to information (Art. 15 GDPR): You have the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have a right to information about this personal data and to the information listed in detail in Art. 15 GDPR.
Right to rectification and erasure (Art. 16 and 17 GDPR): You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and, where applicable, the completion of incomplete personal data.
You also have the right to demand that personal data concerning you be deleted immediately if one of the reasons listed in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued.
Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of processing if one of the conditions listed in Art. 18 GDPR applies, e.g. if you have objected to processing, for the duration of any review.
Right to data portability (Art. 20 GDPR): In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format or to request the transmission of this data to a third party.
Right to object (Art. 21 GDPR): If data is collected on the basis of Art. 6 para. 1 letter f) GDPR (data processing to safeguard legitimate interests), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defence of legal claims.
Right to lodge a complaint with a supervisory authority: In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of the data concerning you violates data protection regulations. The right to lodge a complaint can be exercised in particular with a supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement.
Amtliches Allgäuer Reisebüro GmbH, Kaiser-Max-Straße 20, 87600 Kaufbeuren, Germany
DER Touristik Hotels & Resorts GmbH, Humboldtstraße 140-144, 51149 Cologne
Status: August 2022
