1.    General

1.1    Personal data
The subject of data protection is personal data (hereinafter referred to as data). Personal data include all information relating to an identified or identifiable natural person. These data include, for example, the name, address, occupation, e-mail address, health status, income, marital status, genetic features, telephone number and if applicable also user data such as an IP address.

1.2    Controller and data protection officer
The controller is the entity responsible for processing your personal data in the context of your use of this website, www.romantic-germany.info (hereinafter referred to as website) is the Rheinland-Pfalz Tourismus GmbH (hereinafter referred to as the operator or controller). The contact information is provided in the imprint.

The controller has commissioned an external data protection officer:

MORGENSTERN consecom GmbH
Große Himmelsgasse 1
67346 Speyer
Phone: +49 (0) 6232 - 100119 44

2.    Scope and purpose of the data processing, legal basis and provision of data, Period of retention

2.1    Accessing and use of the website
Each time the website is accessed; user data is transmitted via your web browser and stored in log files (server log files). This access data contains the following information:

• Date and time of access
• Name of the accessed website
• IP address
• Referrer URL (URL of origin, from which you arrived at the website)
• Volume of data transmitted
• Information about your browser

The legal admissibility of this data processing is based on Art. 6 (1) b) GDPR (contract).
Provision of your data is necessary to invoke the operator's website. Failure to provide data means that the website can no longer be invoked and the operator's services cannot be utilised.

The log files are analysed by the operator in anonymised form in order to continuing to improve the website and make it more user-friendly, to detect and rectify errors more quickly and to control server capacities. For example, the operator is able to determine the preferred times of access to the website and therefor provide appropriate amounts of data volume.

The legal admissibility of this data processing may also be based on Art. 6 (1) f) GDPR (legitimate interests). The legitimate interest of the controller involves the provision of a website to convey information and offer services as well as the improvement of the websites performance.

The provision of data is neither required by law nor required for the performance of a contract. Failure to provide the data will result in you being unable to enter the operator’s website.

Your IP address is deleted or anonymised upon termination of use. Anonymisation means the IP address is altered so that it cannot or can only with a disproportionate investment of time, cost and labour be attributed to a particular or identified or identifiable natural person.

2.2    Contact forms and single-click e-mailing
This website contains a contact form if you wish to contact the operator. This form requires that you provide the following information:

• E-Mail address
• your message

In addition, you may voluntarily choose to provide the following information:

• Salutation, Last name, First name
• Postal code & Address

In the navigation bar, you have the option to contact the operator by clicking the respective field. This message automatically uses the e-mail address that is linked to the e-mail client you use. If you do not wish your e-mail address to be invoked in this way, you can change the settings in your e-mail program. The operator processes your data to communicate with you and to respond to your request.
The legal admissibility of this data processing is based on Art. 6 (1) b) GDPR (contract).

Provision of data is conducted on your request. Failure to provide the data means that you are unable to send a message to the operator.
Personal data processed during communication are deleted upon expiry of the statutory retention periods if the controller has no legitimate interest in further retention. In any event, data are continued to be stored only if they are truly necessary for the corresponding purpose. Personal data are anonymised as far as possible.

2.3    Advertising
If you have consented or if a legal provision applies, the controller may process your data for advertising purposes. The Controller may use your data for advertising purposes. The admissibility of such processing is based on Art. 6 (1) f) GDPR (legitimate interests).
The provision of the data is neither required by law nor by contract. Failure to provide the data means that the Controller cannot send you any advertising.

In the case of direct advertising to customers, § 7 para. 3 UWG applies, according to which unreasonable harassment in advertising using electronic mail is not to be assumed in the cases mentioned therein. You care able to object to the use at any time without incurring any costs other than the transmission costs according to the basic tariffs.

If you no longer wish to receive any recommendations or any advertising messages, you can object to this at any time. A message in text form to the Controller is sufficient for this. In addition, an unsubscribe link is included in each e-mail.
The provision of the data is necessary for the conclusion of a contract. Non-provision has the consequence that no contractual relationship can be established.

The personal data processed for advertising purposes will be deleted unless the Controller has a legitimate interest in further storage. In any case, only those data will continue to be stored which are actually absolutely necessary to achieve the corresponding purpose.

2.4    Use of cookies
The operator uses cookies to collect and store data. Cookies are small data packets that typically consist of letters and numbers and that are stored on a browser when you visit certain websites. Cookies allow the website to recognise your browser as you re-enter the operator`s website, to track your surfing through various sections of a website and to identify on a re-entry. Cookies contain no data that identify you personally. However, the information about you stored by the operator may be attributed to the data obtained by and stored in the cookies.
Information that the operator obtains through the use of cookies may be used for the following purposes:

• Recognition of the user's computer when they visit the website
• Tracking the user's browsing activity on the website
• Improving the user experience of the website
• Analysis of the website use by the operator
• Operating this website
• Preventing fraud and improving the security of the website
• Customising this website taking into consideration the needs of the user

Cookies do not damage your computer in any way. They do not contain viruses and also do not allow the operator to spy on you. There are two types of cookies. Temporary cookies are automatically deleted when closing your browser (session cookies). In contrast, permanent cookies have a maximum lifetime of up to 20 days. This type of cookie allows your computer to be recognised when you visit the website on a re-entry. The cookies allow the operator to track your use behaviour for the purposes listed above and to an appropriate extent. Cookies also allow you to optimally surf the operator's website. These data are collected by the operator only in anonymised form.

The legal admissibility of this data processing is based on Art. 6 (1) f) GDPR (legitimate interests). The legitimate interests of the controller involve the provision of a website that contains no errors and the opportunity to offer visitors the best user experience. Provision of your data is not prescribed by law. It is possible to visit the website without cookies. If you do not want the operator to recognise your computer, you can prevent the storage of cookies on your hard drives by selecting the option "do not accept cookies" on your browser settings. To find out specifically how to do this, please read the instructions provided by your browser manufacturer. If you choose to accept no cookies, this may limit the functionality of the website.

Temporary cookies are automatically deleted when you close your browser (session cookies). In contrast, permanent cookies have a maximum lifetime of up to 20 days. These types of cookies allow your computer to be recognised on your next visit on the controller’s website.

2.5     Use of tracking tools

We use cookies and tracking pixels to personalise content and advertisements, make social media features available and analyse traffic to our website. We also share information about your use of our website with our social media, advertising and analytics partners. Our partners may combine this information with additional data that you have provided to them or that they have collected in the course of your use of the services.

Below is a description of the tracking tools used. You also have the option to withdraw your consent or object to the data processing where applicable.

2.5.1   Google Analytics
The operator uses the web analysis service Google Analytics. This service uses cookies as described above to collect information about your operating system, browser, IP address, the previously accessed website and the date and time of your visit to the operator's website.
The data about the use of the website are generally transmitted to a Google server in the US and stored there. If IP- anonymisation is activated on the website, your IP address within Member States of the European Union or other Signatory States to the Agreement on the European Economic Area will be abbreviated in advance. Only in exceptional cases the full IP address will be transmitted to a Google server in the US and abbreviated there.

Your personal data is transmitted to Google in accordance with the standard data protection clauses set out in Art. 46 (2) (c) GDPR, issued by the European Commission in accordance with Art. 93 (2) GDPR. You can find information on the standard data protection clauses on the European Commission website (https://ec.europa.eu/info/index_en).

You can find further information on data protection at Google here.

Google uses this information to analyse the use of the website, compile reports about website activity for the operator and offer additional serves relating to the use of the website and the internet. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. This use takes place in anonymous or pseudonymous form.
You can find out more about Google Analytics on the Google website at https://policies.google.com/privacy?hl=en

The legal admissibility of this data processing is based on Art. (1) a) GDPR (consent). Provision of your data is not prescribed by law.
Personal data collected in the context of the use of tracking tools are deleted if the controller has no legitimate interest in further retention. In any event, data are continued to be stored only if they are truly necessary for the corresponding purpose. Personal data are anonymised as far as possible.

2.5.2   Facebook Pixel

The operator uses the ‘Facebook Pixel’ of Facebook, a social network operated by Meta Platforms Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, or, if you are a resident of the EU, Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (‘Facebook’).

When you visit our website, the Facebook Pixel enables Facebook to determine the target group you belong to for the display of advertisements (known as ‘Facebook ads’). Accordingly, the operator uses the Facebook Pixel to display the Facebook ads placed by the operator only to those Facebook users who have also shown an interest in the website or who have the specific characteristics (e.g. interest in certain topics or products determined by the websites visited) that the operator transmits to Facebook (known as ‘Custom Audiences’). By means of the Facebook Pixel, the operator also wishes to ensure that the Facebook ads match the potential interests of the users and do not constitute nuisance value. By means of the Facebook Pixel, the operator can additionally track the effectiveness of the Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (known as ‘conversion’). The processing of data by Facebook is carried out in accordance with Facebook’s data policy. Accordingly, general information on the display of Facebook ads can be found in Facebook’s data policy. Specific information and details about the Facebook Pixel and how it works can be found in Facebook’s help.

Use of the Facebook Pixel and the storage of ‘conversion cookies’ is in accordance with Art. 6 (1) lit. a GDPR (consent). You may withdraw your consent with future effect at any time by:

• deactivating the Facebook Pixel here or
• reconfiguring your cookie settings at the end of the privacy policy.

The personal data collected within the scope of use of the tracking tools shall be erased unless the controller has a legitimate interest for its further retention. In any case, only that data that is absolutely necessary to achieve the corresponding purpose shall continue to be stored. Personal data shall be anonymised wherever possible.

The provision of data is neither legally nor contractually required.

In some cases, this data may be transferred to countries outside the EU or EEA. You can find more information in Facebook’s data policy. Facebook warrants compliance with the standard privacy policy clauses including appropriate safety measures.

2.5.3   Pinterest Pixel

The operator uses the ‘Pinterest tag’ conversion tracking cookie of Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (hereinafter ‘Pinterest’). For this purpose, when the website is accessed, a Pinterest tag cookie and/or a Pinterest pixel is set. This enables information about the use of the website (including activity, time, device information and IP address), which has been specified by the operator, to be forwarded to Pinterest and evaluated by Pinterest for the operator so that the Pinterest ads match the interest of the respective user and the conversion of the respective advertising campaign can be measured for statistical and market research purposes. The operator can also optimise the website based on the personal data. Thus, data processing is carried out for the purpose of personalised advertising and website optimisation.

Pinterest collaborates with the operator in accordance with the Pinterest Advertising Services Agreement. If you have your own Pinterest account and are logged in to Pinterest when visiting the website or after being forwarded, a user ID based on the data collected may be created and linked to the Pinterest account.

The lawfulness of this processing shall be in compliance with Art. 6 (1) lit. a GDPR (consent). You may withdraw your consent at any time by:

• deleting the Pinterest tag cookie in your browser settings,
• deactivating it in the personalisation settings of your Pinterest account here,
• deactivating it here, or
• adjusting your cookie settings at the end of the privacy policy.

The personal data collected within the scope of use of the tracking tools shall be erased unless the controller has a legitimate interest for its further retention. In any case, only that data that is absolutely necessary to achieve the corresponding purpose shall continue to be stored. Personal data shall be anonymised wherever possible.

The provision of data is neither legally nor contractually required. Failure to provide data means that Pinterest Advertising Services cannot be used. Further information on the processing of this advertising data is available here and here.

In some cases, this data may be transferred to countries outside the EU or EEA. More information is available in Pinterest’s privacy policy, where Pinterest also warrants compliance with the standard privacy policy clauses including appropriate safety measures.

2.5.4   Outdooractive
On the website, contents of the website www.tourenplaner-rheinland-pfalz.de are transmitted via an interface to the service provider Outdooractive GmbH & Co. KG (hereinafter referred to as Outdooractive). Outdooractive provides electronic databases which you can use as an electronic information portal in the digital tourism area, including, for example, maps and route planners.
Outdooractive is responsible for processing the following data in order to provide you with the databases:

• IP address
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• Data volume transferred respectively
• Website from which the request was made
• Browser
• Location of the user
• Operating system and its interface
• Language and version of the browser software

The data is technically necessary to display the electronic databases and to ensure stability and security. The legal admissibility of this processing is based on Art. 6 (1) f) GDPR (legitimate interests). The provision of a travel database is in the economic interest of the controller. The provision of the data is voluntary, but necessary in order to use the functions offered.

You may opt out of this data processing at any time by adjusting your cookie settings at the end of the privacy policy.

Outdooractive uses cookies for evaluation purposes, which are stored on your system. Outdooractive stores the information collected on servers in Germany and in third countries. You can adjust the evaluation by deleting existing cookies and preventing the storage of cookies. If you disable the storage of cookies, we would like to advise you that you may not be able to use the electronic databases of Outdooractive to their full extent. The prevention of storing cookies is possible through the settings in your browser. Outdooractive continues to use your GPS data when you use the electronic databases.

The operator has neither influence on the collected data and data processing procedures nor is the operator aware of the full scope of data collection, the purposes of processing and the storage periods. Furthermore, the operator has no information about the deletion of the collected data by Outdooractive.

Outdooractive stores the data collected concerning you as user profiles and uses them for its own purposes of market research and/or the needs-based design of electronic databases. You have the right to object to the creation of such user profiles, whereas you must contact Outdooractive to exercise this right.

You can find more information on the purpose and scope of data collection and its processing by Outdooractive at Outdooractive GmbH & Co. KG, Missener Straße 18, 87509 Immenstadt, Germany, and in the privacy policy:
https://corporate.outdooractive.com/de/datenschutzrichtlinien/
https://www.outdooractive.com/de/datenschutz.html

2.6    reCAPTCHA
The Google service reCAPTCHA is integrated for forms on the website, which is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This service is used to contribute to the security of the website and differentiate between a natural person and a machine when entering data. Therefore, various personal data such as the IP address is collected and transferred to Google in Ireland. If applicable, data may also be transferred to the USA.

Your personal data is transmitted to Google in accordance with the standard data protection clauses set out in Art. 46 (2) (c) GDPR, issued by the European Commission in accordance with Art. 93 (2) GDPR. You can find information on the standard data protection clauses on the European Commission website (https://ec.europa.eu/info/index_en).

You can find further information on data protection at Google here.

For more information, see the Google Privacy Policy and Terms of Use.

The legal admissibility of this processing is based on Art. 6 (1) f) GDPR (legitimate interests). The use of data for the security of the website constitutes a legitimate interest of the operator within the meaning of Art. 6 (1) f) GDPR.

The provision of the data is neither prescribed by law nor required for the performance of a contract. Failure to provide the data will result in you being unable to use the corresponding forms.

The operator does not store personal data in the context of the use of reCAPTCHA. The personal data collected by Google will be deleted unless the operator has a legitimate interest in further storage. In any case, only the data will be stored that is necessary for achieving the corresponding purpose. As far as possible, the personal data will be anonymised. The data is stored by Google according to its own privacy policy. For more information, see the Google Privacy Policy and Terms of Use.

2.7    YouTube
The controller embedded YouTube videos on the website. This service is operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

On the website, this service is used in the extended privacy mode. This means that website usage information (such as the date and time of the call, IP address, etc.) will be sent to Google servers in the US and stored, if you choose to play the YouTube video on the operator’s website.

Your personal data is transmitted to Google in accordance with the standard data protection clauses set out in Art. 46 (2) (c) GDPR, issued by the European Commission in accordance with Art. 93 (2) GDPR. You can find information on the standard data protection clauses on the European Commission website (https://ec.europa.eu/info/index_en).

You can find further information on data protection at Google here.

The data will be used by Google for the purposes of advertising, market research and / or tailor-made website design. The data can also be linked to your user Google user account, if you are logged in while visiting the operator’s website. If you do not wish so, you must log out before use. Google's terms of use and privacy policy apply.

The operator uses YouTube videos to provide videos on various topics related to the websites services. The legal admissibility of this processing is based on Article 6 (1) (f) of the GDPR (legitimate interests). The use of data for the purposes of making videos available for illustration constitutes a legitimate interest of the operator within the meaning of Article 6 (1) (f) of the GDPR.

The admissibility of Google's processing is based on Article 6 (1) (a) of the GDPR (consent). The processing of the data takes place for the purposes stated in the privacy policy and terms of use. The consent can be given at the usage of YouTube.
The provision of the data is neither required by law nor required for the performance of a contract. Failure to provide the data will result in you being unable to use the feature.

The operator does not store personal data in the context of the use of YouTube. The personal data collected on YouTube will be deleted unless the operator has a legitimate interest in the further storage. In any case, only those data will be stored that is necessary for achieving the corresponding purpose. As far as possible, the personal data will be anonymised. The data is stored by Google according to its own privacy policy. For more information, see the Google Privacy Policy and Terms of Use.

2.8    Reservations and bookings
You may book various accommodations and package deals using this website. Booking requires you to provide the following information:

• Person master data (last name, first name)
• Address details (address, residence)
• Contact details (phone, e-mail)
• Travel data (arrival, departure, number of travellers)

Your data is used to process your reservation and are forwarded to the accommodation facility.
The legal admissibility of this data processing is based on Art. 6 (1) b) GDPR (contract). Failure to provide the data means that you cannot book a reservation.

Personal data processed for the purpose of booking reservations and the performance of a contract are deleted upon expiry of the statutory retention periods (in particular HGB (German commercial code) and AO (German tax code)) if the controller has no legitimate interest in further retention. In any event, data are continued to be stored only if they are truly necessary for the corresponding purpose. Personal data are anonymised as much as possible.

2.9    Social plug-ins
The operator uses social plug-ins from various social networks (e.g. Facebook). You can use these plug-ins for example to share content or to recommend a product. Plug-ins are deactivated by default and therefore transmit no data to the respective social platform. You may activate each plug-in by clicking on the appropriate button (known as the Shariff solution).

If you have activated a plug-in, your browser will form a direct connection to the server of the respective social platform as soon as you access the operator's website. The content of the plug-in is transmitted by from the social platform directly to your browser and integrated by it into the operator`s website.

Integration of the plug-in means that the social network receives the information that you have accessed the respective page of the operator. If you are logged in to the social network, the network can associate your visit to your account. If you interact with the plug-ins, the corresponding information is transmitted by your browser directly to the social network and stored there.

For more information about the purpose and scope of data collection and the further processing and use of the data by a social network and your rights in this regard as well as privacy options of the respective social network, please read the respective privacy policy for the respective social network.

If you do not want the social network to collect data about you via the operator's website, you must log out of this network prior to visiting the operator`s website or deactivate the social plug-ins.

Even if you do not have an account with the social network, websites with active social plug-ins can send data to these networks. When a plug-in is active, each visit of the website places a cookie with a unique identifier. Because your browser sends this these cookies without being asked, each time there is a connection with a network server, in principle the network can generate a profile about which websites the user associated with the identifier has visited. This means that it is also entirely possible that this identifier is also attributed to a person who subsequently registers for an account with that social network.

The legal admissibility of this data processing is based on Art. 6 (1) a) GDPR (consent).

2.10    Deskline brochure request
You have the option to order brochures of the controller via http://web4.deskline.net/rlpinfo/en/brochure/list Therefore, you shall provide the following data:

• Person master data
• Address details
• E-mail

You may provide additional data voluntarily.

The legal admissibility of this data processing is based on Art. 6 (1) b) GDPR (contract). The provision of your data is necessary to complete the order process. Failure to provide the data means that you cannot place an order.

The data will be stored until the purpose no longer applies and there is no retention obligation.

3.    Rights of the data subject

You have the right of access (Art. 15 GDPR), right to rectification (Art. 16 GDPR), right to erasure (Art. 17 GDPR), right to restriction of processing (Art. 18 GDPR) and the right to data portability (Art. 20 GDPR).

At any time, you have the right to object, on grounds relating to your particular situation, to the processing of the personal data concerning you, which is based on Art. 6 (1) e) or f), including profiling based on those provisions. The controller shall no longer process your personal data unless the controller demonstrates compelling legitimate grounds for the processing that override your interests, rights and freedoms or if processing is used for the establishment, exercise or defence of legal claims.

Where your personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
Please use the contact address provided in the imprint for your message.

4.    Revocation of consent
If you have provided consent to the processing of your personal data and revoke this consent, processing that has already taken place until the date of your revocation remains unaffected.

5.    Right of appeal
You have the right to lodge an appeal with the competent supervisory authority at any time.

6.    Recipients
Data obtained as a result of the access and use of this website and information provided as part of a contact you made are transmitted to the operator's server and stored there. Also, your data may be forwarded to the following categories of recipients:

• Internal departments that are involved in processing your personal data (e.g. marketing department, customer service, reservations department)
• Data processing services (e.g. data centres, IT service providers, providers of tracking tools, software providers)
• Contractual partners of the operator (e.g. shipping providers, hotels, event organisers)

7.    Links to third party sites
Visiting this website may display content that is linked with the website of a third party. The operator has no access to the cookies or other functionalities that are used by third-party websites and cannot control them. Such third-party sites are not subject to the data privacy conditions of the operator.