Privacy Policy
1. General
1.1 Personal data (Art. 4 No. 1 GDPR)
The privacy policy relates to personal data (hereinafter also known as data). This is all information relating to an identified or identifiable natural person, including details such as name, address, profession, email address, health, income, marital status, genetic features, telephone number and, if applicable, user details such as IP address.
1.2 Responsible party (Art. 4 No. 7 GDPR)
The party responsible for processing your personal data resulting from the use of the website www.triershop.de (hereinafter website) is Trier Tourismus und Marketing GmbH (hereinafter operator or responsible party). Its contact details are: Trier Tourismus und Marketing GmbH, Sichelstr. 34-36, 54290 Trier, Managing Director: Yannick Jaeckert, Telephone: +49 (0)651 97808-0, Email:info@trier-info.de
1.3 Data protection officer
The responsible party has appointed Frank Gorstelle as data protection officer, who may be contacted at Datenschutz@trier-info.de.
1.4 Objections
If you wish to object to the operator processing your data in accordance with this privacy policy in general or for specific measures, you may do so using the contact details stated in the legal info. Please note that, in the event of an objection, you may not be able to use the website or retrieve the services offered here, or may be restricted in doing so.
2. Scope and purpose of data processing
2.1 Retrieving and using the website
Every time the website is accessed, usage data is sent by the respective Internet browser and stored in server log files. The data sets stored here contain the following data: Date and time of retrieval, name of website retrieved, IP address, referrer URL (URL from which you accessed the website), volume of data transferred, product, and version information of the browser used. Your IP address will be deleted or anonymised once the usage is over. In the event of anonymisation, IP addresses are modified so that they can no longer be attributed to a certain/identified or identifiable natural person, or only by spending excessive amounts of time, money and labour. The log files are analysed anonymously be the operator to further improve the website and make it more user-friendly, to identify and eliminate errors faster, and to control server capacities. They can be used to trace, for example, the time when website usage is most popular, enabling the operator to provide the appropriate volume of data.
2.2 Email at a click
The navigation bar gives you the option of opening an email sent to the operator with just one click. The email address linked to your email program is automatically used here as the sender. If you do not want your email address to be retrieved in this way, you may adjust your email program’s settings. The user will use your data to reply to your email and send you any requested information.
2.3 Bookings
You may book various services and accommodation facilities through the website. To do this, you must provide the following data: Service (for packages), title, last name, first name, street, unit number, post code, city, country, telephone, and email. Your data will be used to process your booking, and will be passed onto the accommodation facility or tour operator accordingly.
2.4 Requests
You may send requests for different services to the operator through various special contact forms. To do so, you need to provide the following data for each request: Name, address, email address, telephone, date of arrival, date of departure, date, number of people, number of double rooms, number of single rooms, and your message. Your data will be used to process the booking request and formulate an offer.
2.5 Brochures
The website gives you the opportunity to order various brochures. To do so, you need to provide the following data: Salutation, title, last name, first name, company, street, post code, city, country, email, telephone, fax, and comments. Your data will be used to send you the brochures you have ordered.
2.6 Online shop
The website gives you the opportunity to purchase various items from the operator’s online shop. In this context, you need to provide the following data: Salutation, title, first name, last name, company, street, post code, city, country, differing shipping address, email, telephone, and payment information (credit card, PayPal). If you want to register and create a customer account at the same time, you will need to provide the following data: Password. Your data will be used to process your order and operate your customer account.
2.7 Newsletter
In order to receive additional operator information, you may subscribe to an e-newsletter. This only requires you to enter your email address. The following additional information is voluntary: Salutation, title, and last name. The so-called double opt-in process is used to send the newsletter, i.e. you will only receive a newsletter by email if you have expressly confirmed beforehand that the newsletter service is to be activated. Once you have activated the newsletter, you will receive a notification email containing an activation link. Only by clicking this link will you then receive the newsletter. You may deactivate the newsletter at any time. To do so, contact the operator or use the unsubscribe link contained in every newsletter.
2.8 E-postcard
The website gives you the opportunity to send a virtual postcard using your own email address. To do this, you need to provide the following data: Sender: Name and email address, recipient: Name and email address. The data is used to send your shown e-postcard.
2.9 Cookies
The operator uses so-called cookies to collect and store data. Cookies are small data packages normally consisting of letters and numbers, and which are stored on a browser when you visit certain websites. The cookies enable the website to recognise your browser, follow you as your surf through the various sections of a website, and identify you when you return to the website. Cookies do not contain any data that identifies you personally, but the information stored by the operator about you may be attributed to the data received by and stored in the cookies. Information the operator receives from you as a result of the cookie may be used for the following purposes: Recognising the user computer when visiting the website, tracing the user’s surfing activities on the website, improving the website’s user-friendliness, analysing the operator’s website usage, operating this website, preventing fraud and improving this website’s security, and personalising this website taking into account user needs. Cookies do not damage browsers in any way. They do not contain any viruses, and do not enable the operator to spy or mine data. Two types of cookies are used. Temporary cookies are automatically deleted when your browser is closed (session cookies). Permanent cookies, on the other hand, last a maximum of 20 days. These types of cookies enable you to be recognised when revisiting the website. The cookies allow the operator to trace your usage for the aforementioned purposes and to the appropriate extent. They are also designed to optimise browsing on the operator’s website. The operator similarly only collects this data in anonymised form. You can, of course, also view the website without cookies. If you do not want the operator to recognise your computer, you can prevent cookies from being stored on your hard drive by selecting “do not accept cookies” in your browser settings. Your browser manufacturer’s instructions will detail how exactly this works. If you do not accept cookies, however, this may restrict the website functions. Please also read your browser’s instructions in relation to deleting cookies already created by your browser.
2.10 Google Analytics
The operator uses the Google Analytics web analysis service, which uses the aforementioned cookies to record information about things like your operating system, your browser, your IP address, the previously visited website, and the date and time of your visit to the operator’s website. The information generated in relation to the website usage is generally sent to a Google server in the USA, where it is stored. If IP anonymisation is enabled on the website, your IP address will be shortened beforehand in the European Union or other member state of the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and then be shortened. Google will use this information to analyse website usage, compile reports on website activities for the operator, and render additional services relating to the website usage and Internet usage. If stipulated by law or if third parties process this data on behalf of Google, Google will also share this information with said third parties. This usage occurs in anonymised or pseudonymised form. The IP address sent by your browser as part of Google Analytics is not combined with any other Google data. You may prevent cookies from being stored by adjusting your browser software settings accordingly. The operator advises, however, that this may mean you are unable to use all of the website’s functions. The operator also advises that Google Analytics has been extended with the code “anonymizeIp” to ensure IP addressed are recorded anonymously (so-called IP masking). You can prevent Google Analytics from processing data by downloading and installing the plugin available at https://tools.google.com/dlpage/gaoptout?hl=de. Google Analytics uses the Double Click DART cookie, which you can disable by downloading and installing the plugin available at https://www.google.com/settings/ads/plugin?hl=de. Further information on Google Analytics is available directly from http://www.google.com/intl/de/privacypolicy.html#information.
2.11 Outdooractive tracking pixel
The website features content from www.tourenplaner-rheinland-pfalz.de. This content is linked to a tracking pixel which collects and processes data relating to hits on this content. The operator of www.tourenplaner-rheinland-pfalz.de, Outdooractive GmbH & Co. KG, uses the obtained information to measure hits on the content (e.g. views, page hits, actions, downloads). The results are provided to the operator for analysis purposes, enabling the operator to ascertain which content on the www.tourenplaner-rheinland-pfalz.de website is particularly popular. The tracking pixel does not collect or process any personal data.
2.12 Social plugins
The operator uses social plugins from various social networks (e.g. Facebook), allowing you to share content or recommend products, for example. The plugins are disabled by default, meaning they do not send any data to other websites. You can enable all plugins by clicking the “enable social media” button (so-called 2-click solution). The plugins can of course be disabled again with one click. When these plugins are enabled, your browser establishes a direct connection with the servers of the respective social network as soon as you visit the operator’s website. The plugin’s content is sent from the social network directly to your browser, which then integrates it into the website. The plugin integration informs the social network that you have retrieved the relevant page provided by the operator. If you are logged into the social network, this network may be able to link this visit to your account. If you interact with the plugins, the corresponding information will be sent from your browser directly to the social network, where it will be stored. The purpose and scope of the data processing, the further processing and usage of the data by social networks, and your associated rights and setting options to protect your privacy can be found in the privacy policies of the respective networks. If you do not want social networks to collected data about you through the operator’s website, you need to log out of these networks or disable the social plugins before visiting our website. Even if you are no longer logged into the social networks, data may still be sent to these networks by websites with active social plugins. Active plugins create a cookie with an ID every time the website is retrieved. As your browser sends this cookie automatically every time it connects with a network server, the network could, in principle, create a profile of the websites retrieved by the user associated with the ID. And it could also be possible for this ID to later be linked back to a specific person – e.g. when logging into the social network again.
The operator uses the following plugins in particular:
Facebook (provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304 USA) The Facebook privacy policy is available here: https://www.facebook.com/about/privacy/your-info#public-info
Google+ My Business (provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA) The Google privacy policy is available here: https://www.google.de/intl/de/policies/privacy/
Twitter (provided by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA) The Twitter privacy policy is available here: https://twitter.com/privacy
LinkedIn (provided by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA) The LinkedIn privacy policy is available here: http://www.linkedin.com/static?key=privacy_policy&trk=hb_ft_priv
Reddit (provided by Reddit Inc., 520 Third Street, Suite 305, San Francisco, CA 94107, USA) The Reddit privacy policy is available here: https://www.reddit.com/help/privacypolicy
Tumblr (provided by Tumblr Inc., 35 East 21st St, 10th Floor, New York, NY 10010, USA) The Tumblr privacy policy is available here: https://www.tumblr.com/policy/en/privacy
Pinterest (Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA) The Pinterest privacy policy is available here: https://policy.pinterest.com/de/privacy-policy. The operator also uses a series of other plugins whose privacy policies can be viewed on the respective provider’s website.
3. Legal bases
3.1 Retrieval and usage of the website (Section 15 Para. 1 of the German Telemedia Act (TMG))
The data processed by the operator is required by the operator to enable you to retrieve and use the website. This is data that needs to be processed when using a telemedium. The legitimacy of this processing is governed by Section 15 Para. 1 TMG, according to which the service provider is allowed to collect and use a user’s personal data if this is necessary in order to enable and bill telemedia usage (usage data).
3.2 Email at a click, requests (Art. 6 Para. 1 b) GDPR)
The operator processes the data provided by you in order to respond to your contact request and communicate with you. This relates to data necessary for the aforementioned processes. The legitimacy of this processing is governed by Art. 6 Para. 1 b) GDPR, according to which the processing is legal if it is necessary to fulfil a contract involving the affected person, or to implement pre-contractual measures taken at the affected person’s request.
3.3 Bookings, brochures (Art. 6 Para. 1 b) GDPR)
The operator processes the data provided by you in order to action your booking, render your requested services or have these rendered by another provider, and send you your requested brochures. This relates to data necessary for the aforementioned processes. The legitimacy of this processing is governed by Art. 6 Para. 1 b) GDPR, according to which the processing is legal if it is necessary to fulfil a contract involving the affected person, or to implement pre-contractual measures taken at the affected person’s request.
3.4 Online shop (Art. 6 Para. 1 b) GDPR)
The party responsible uses your data to process bookings made by you. This relates to data necessary for the aforementioned processes. The legitimacy of this processing is governed by Art. 6 Para. 1 b) GDPR, according to which the processing is legal if it is necessary to fulfil a contract involving the affected person, or to implement pre-contractual measures taken at the affected person’s request.
3.5 Newsletter (Art. 6 Para. 1 a) GDPR)
The operator users your data for advertising purposes and to send a newsletter. The legitimacy of this processing is governed by Art. 6 Para. 1 a) GDPR, according to which the processing is legal if the affected party has consented to their personal data being processed for one or more specific purposes.
3.6 E-postcard (Art. 6 Para. 1 b), f) GDPR)
The party responsible uses your data to send the selected e-postcard. This relates to data necessary for the aforementioned processes. The legitimacy of this processing is governed by Art. 6 Para. 1 b) GDPR, according to which the processing is legal if it is necessary to fulfil a contract involving the affected person, or to implement pre-contractual measures taken at the affected person’s request. The e-postcard recipient details entered by you are also used by the responsible party to send the e-postcard. The legitimacy of this processing is governed by Art. 6 Para. 1 f) GDPR, according to which the processing is legal if it is necessary to protect the justified interests of the responsible party or a third party, and insofar as this is not outweighed by the interests or basic rights and freedoms of the affected person, which require the protection of personal data. Sending the e-postcard constitutes a justified sender interest as defined by Art. 6 Para. 1 f) GDPR.
3.7 Cookies, pixel (Section 15 Para. 1 TMG)
The data processed by the operator is required by the operator to enable you to retrieve and use the website. This is data that needs to be processed when using a telemedium. The legitimacy of this processing is governed by Section 15 Para. 1 TMG, according to which the service provider is allowed to collect and use a user’s personal data if this is necessary in order to enable and bill telemedia usage (usage data).
3.8 Analysis tools (Section 15 Para. 3 TMG)
The operator uses cookies to create and analyse user profiles, and optimise the website’s functions. The legitimacy of this processing is governed by Section 15 Para. 3 TMG, according to which the operator may create usage profiles, using pseudonyms, for the purposes of advertising, market research, or tailored telemedia designs, unless the user objects to this. These usage profiles must not be combined with data relating to the pseudonym holders.
3.9 Social plugins (Art. 6 Para. 1 a) GDPR)
The operator uses your data to enable the website to link to various social networks. The legitimacy of this processing is governed by Art. 6 Para. 1 a) GDPR, according to which the processing is legal if the affected party has consented to their personal data being processed for one or more specific purposes.
4. Information on the guarantee of fair, transparent processing
4.1 Storage duration
(a) Retrieving and using the website
Your IP address will be deleted or anonymised once the usage is over. In the event of anonymisation, IP addresses are modified so that they can no longer be attributed to a certain/identified or identifiable natural person, or only by spending excessive amounts of time, money and labour.
The server log files are analysed anonymously be the operator to further improve the website and make it more user-friendly, to identify and eliminate errors faster, and to control server capacities. They can be used to trace, for example, the time when website usage is most popular, enabling the operator to provide the appropriate volume of data.
(b) Email at a click
The personal data processed as part of communications is deleted once the legal storage periods have elapsed, unless the responsible party has a justified interest in continued storage. In any case, only the data specifically needed to fulfil the corresponding purpose shall continue to be stored. The personal data shall be anonymised where possible.
(c) Bookings
The personal data processed in order to handle bookings and execute contracts is deleted once the legal storage periods have elapsed, unless the responsible party has a justified interest in continued storage. In any case, only the data specifically needed to fulfil the corresponding purpose shall continue to be stored.
(d) Requests
The personal data processed in order to handle non-binding booking requests is deleted unless the responsible party has a justified interest in continued storage. In any case, only the data specifically needed to fulfil the corresponding purpose shall continue to be stored.
(e) Brochures
The personal data processed in order to send brochures is deleted unless the responsible party has a justified interest in continued storage. In any case, only the data specifically needed to fulfil the corresponding purpose shall continue to be stored.
(f) Online shop
The data collected in order to process orders in the online shop is deleted insofar as the responsible party has no specific interest in storage. In this case, the data specifically needed to fulfil the corresponding purpose shall be stored.
(g) Newsletter
The personal data processed in order to send newsletters is deleted unless the responsible party has a justified interest in continued storage. In any case, only the data specifically needed to fulfil the corresponding purpose shall continue to be stored.
(h) E-postcard
The data collected in order to send e-postcards is deleted insofar as the responsible party has no specific interest in storage. In this case, the data specifically needed to fulfil the corresponding purpose shall be stored.
(i) Cookies
Temporary cookies will be automatically deleted when your browser is closed (session cookies). Permanent cookies, on the other hand, last a maximum of 20 days. These types of cookies enable you to be recognised when revisiting the website.
(j) Google Analytics
The personal data collected through the use of tracking tools is deleted insofar as the responsible party has no specific interest in storage. In any case, only the data specifically needed to fulfil the corresponding purpose shall continue to be stored. The personal data shall be anonymised where possible.
(k) Outdooractive tracking pixel
The personal data collected through the use of the outdooractive tracking pixel is deleted insofar as the responsible party has no specific interest in storage. In any case, only the data specifically needed to fulfil the corresponding purpose shall continue to be stored. The personal data shall be anonymised where possible.
(l) Social Plugins
The data collected through so-called social plugins in order to link the website to various social networks is deleted insofar as the responsible party has no specific interest in storage. In this case, the data specifically needed to fulfil the corresponding purpose shall be stored.
4.2 Right to information, deletion, restriction, objection and data transferability
(a) Right to information
Upon request, the operator provides you with information on whether it processes data relating to you. You are also entitled to receive information on: The personal data processed, and the category it falls under, the available information on data origin, the purpose of the processing and its legal basis, the recipients or categories of recipients to whom the data has been disclosed, particularly in the case of recipients in third countries or international organisations, the storage duration applicable to the data, or, if this is not possible, the criteria for setting this duration, the existence of a right to correct, delete or limit the processing of the data by the party responsible, the right to call on the federal commissioner, and details regarding the federal commissioner’s availability. The operator endeavours to process requests for information promptly and efficiently.
(b) Right to deletion
You are entitled to ask the operator to immediately delete personal data relating to you, and the operator is obliged to immediately delete personal data, if one of the following grounds applies: The personal data is not longer necessary for the purposes for which they have been collected or otherwise processed. You revoke your consent on which the processing was based according to Art. 6 Para. 1 a) GDPR or Art. 9 Para. 2 a) GDPR, and there is no other legal basis for the processing. You object to processing under Art. 21 Para. 1 GDPR, and there are no overriding justified grounds for processing, or you object to the processing under Art. 21 Para. 2 GDPR. The personal data has been processed unlawfully. The personal data must be deleted in order to comply with a legal obligation under EU law or under the law of the member states governing the operator. The personal data has been collected in relation to services offered by the information society in accordance with Art. 8 Para. 1 GDPR.
(c) Right to restriction
You are entitled to ask the operator to restrict processing if one of the following requirements has been met: You dispute the accuracy of the personal data, for a duration enabling the operator to review the accuracy of your personal data; the processing is unlawful, and you refuse to have the personal data deleted, instead demanding restricted use thereof; the operator no longer needs your personal data for processing, but you still need it to assert, exercise or defend legal claims; or you have objected to the processing under Art. 21 Para. 1 GDPR, unless it has been established that operator’s justified grounds outweigh yours.
(d) Right to objection
You are entitled to object to your personal data being processed under Art. 6 Para. 1 e) or f) GDPR at any time for reasons resulting from you particular situation; this also applies to profiling based on these provisions. The operator will stop processing your personal data, unless it can prove mandatory, defence-worthy grounds for processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. If your personal data is processed for the purpose of direct advertising, you are entitled to object to the processing of your personal data for such advertising; this also applies to profiling, insofar as it relates to this direct advertising. You are entitled, at any time, to object to your personal data being processed under Art. 89 Para. 1 GDPR for scientific or historic research purposes or statistical purposes based on grounds resulting from your particular situation, unless the processing is required in order to fulfil a task in the public’s interests. Please use the contact address listed under the legal info to lodge your objection.
(e) Right to data transferability
You are entitled to receive the personal data provided to the operator in a conventional, structured, machine-readable format, and send this data to another responsible party without interference from the operator to whom the personal data has been provided, insofar as the processing is based on consent under Art. 6 Para. 1 a) GDPR, Art. 9 Para. 2 a) GDPR or a contract under Art. 6 Para. 1 b) GDPR, and the processing is performed using automated processes.
4.3 Revocation of your consent
If you have consented to the processing of your personal data, and then revoke this consent, this shall not affect data processed before the revocation.
4.4 Right of appeal
You are entitled to appeal to the competent supervisory authority at any time.
4.5 Provision of your data
The data stated under points 2.1 to 2.8 must be provided in order to use the operator’s services. Without this data, the operator’s website cannot be retrieved or used, your contact request cannot be responded to, your booking cannot be processed, your request cannot be answered, your requested brochure cannot be sent, your selected product in the online shop cannot be purchased, your requested newsletter cannot be sent to your provided email address, and your selected e-postcard cannot be sent to your appointed recipient. Not providing data means the aforementioned services cannot be rendered.
5. Recipients
The data collected when retrieving and using the website, and the data entered by you when making contact with us, is sent to the operator’s server, where it is stored. For the rest, your data may be shared with the following categories of recipients: Data processing centre
IT service providers
Software providers
Tracking-tools providers
6. Links to third-party sites
When visiting the website, content linked to third-party websites may be displayed. The operator has no access to the cookies or other functions used by third-party sites, nor can it control these. These third-party sites are not governed by the operator’s privacy policy.