Privacy Policy of Celle Tourismus und Marketing GmbH

The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall be in line with the requirements of the Data Protection Regulation (General Data Protection Regulation - GDPR), and in accordance with the country-specific data protection regulations (DSAnpUG-EU (GDPR) / BDSG (FEDERAL DATA PROTECTION ACT)) applicable to the Celle Tourismus und Marketing GmbH. By means of this data protection declaration, Celle Tourismus und Marketing GmbH would like to inform you about the type, scope and purpose of the personal data processed by us. Furthermore, you will be informed of your rights by means of this data protection declaration..

In general, it is not necessary for you to provide personal data in order to use our website. However, in order to be able to offer our services in individual cases, we may need your personal data, for example when sending information material, ordered goods and also for answering individual enquiries or registering for our online services, e.g. registering for events. In detail, the purpose includes in particular delivery and invoicing in the case of orders via our websites, orders via our advance ticket sales, bookings via our reservation system as well as registration in the case of brochure orders and subscriptions to our newsletter.

If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject.

The Celle Tourismus und Marketing GmbH has implemented numerous technical and organisational measures to ensure the most complete protection of personal data processed through this website.

Name and address of the person(s) responsible
The responsible party within the meaning of the GDPR and the DSAnpUG-EU (GDPR) / BDSG (FEDERAL DATA PROTECTION ACT) and other provisions with data protection character is:

Celle Tourismus und Marketing GmbH
Markt 14-16, 29221 Celle
Tel.: +49 5141 90 90 80
Fax: +49 5141 90 90 8710
eMail: info@celle-tourismus.de
Management: Mr. Klaus Lohmann

Name and address of the data protection officer
The data protection officer of the data controller is::
Mr. Stephan Toleikis, Thosa-Datenschutz UG (haftungsbeschränkt)
Hans-Böckler-Allee 26, 30173 Hannover
eMail: datenschutz@celle-tourismus.de
You can contact our data protection officer directly at any time with all questions and suggestions regarding data protection.

Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for processing operations involving personal data, Article 6 (1) lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis. When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures. Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation to which our company is subject, Art. 6 (1) c GDPR serves as the legal basis. In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) (d) GDPR serves as the legal basis. If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Art. 6 (1) lit. f GDPR serves as the legal basis for the processing. For processing operations of personal data outside the EU / EEC in the USA, your consent according to Art. 45 (1) lit. a GDPR is the legal basis.

Cookies
Cookies and how we use them.

Cookies are specific identification characters that can be transferred to the hard drive of your computer or other end devices so that our systems can recognise your device, for example.
CCookies are also used by us for other purposes.
For example, we may:

Automatically recognise you when you log on to our website. This enables us to give you targeted product recommendations and, if necessary, to offer you further functions and services.
display content on the Celle Tourismus und Marketing GmbH website that is specifically tailored to your interests, including advertising.
Carry out research and diagnostics to improve content, products and services
prevent attempts at fraud
Improve security.

Cookies have the advantage that they allow you to use many of our offers (services/features). Insofar as you do not allow cookies to be set or reject cookies in some other way, it is not possible, for example, to use other products or services that require registration.

Reject cookies: Browser settings
The help function of most web browsers explains how to prevent your browser from accepting new cookies, how to have your browser notify you when you receive a new cookie, or how to turn off all cookies you receive. Similar features to Flash cookies used by browser add-ons can be turned off or deleted by changing the settings of the browser add-on or by visiting the website of the browser add-on manufacturer.

General data and information

In addition to personal data, information that is not assigned to a specific person, such as the browser used, operating system, number of visits, etc., is sometimes collected automatically when you access our website. We collect this data exclusively for statistical purposes in order to further optimise our Internet presence and to be able to make our Internet offers even more attractive. The data is collected and stored exclusively in anonymised or pseudonymised form and does not allow any conclusions to be drawn about you as a natural person.

Deletion and blocking of personal data
Celle Tourismus und Marketing GmbH processes and stores personal data only for the period of time required to achieve the purpose of storage or insofar as this has been provided for by the European Directive and Regulation Maker or another legislator in laws or regulations to which Celle Tourismus und Marketing GmbH is subject.

If the storage purpose ceases to apply or if a storage period prescribed by the European Directive and Regulation Maker or another competent legislator expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.

Newsletter
To subscribe to our newsletter, we need your email address (mandatory information). If you have registered for our newsletter, we will send you a confirmation e-mail to the e-mail address you have provided, asking you to confirm that you have registered for the newsletter (so-called double opt-in). If you do not confirm your registration within 24 hours, your registration will be automatically deleted.
After your confirmation that you wish to receive the newsletter, we will store your email address until you unsubscribe from the newsletter. The storage of your email address serves the purpose of being able to send you the newsletter. In order to prevent misuse of your data in connection with the registration for our newsletter, we store your IP address and the time of registration and confirmation. You can unsubscribe from the newsletter at any time by sending an informal message to eMail: lyss@celle-tourismus.de or by clicking on the unsubscribe link provided in each newsletter.

Passing on personal information to third parties
In order to process the travel contracts arranged by us, we pass on your personal data (exclusively) to your respective contractual partners/tour operators. In this respect, your personal data will only be passed on to such third parties who are involved in the booking. Your personal data will only be passed on for the purpose of processing your booking. Should data be passed on to service providers of Celle Tourismus und Marketing GmbH, these are bound by contractual specifications of Celle Tourismus und Marketing GmbH on the subject of data protection in addition to the mandatory statutory regulations. The person making the booking expressly agrees to this data processing and transfer.

Rights of the data subject
You can obtain information about your data stored by us free of charge at any time without giving reasons. You can have your data collected by us blocked, corrected or deleted at any time and object to anonymised or pseudonymised data collection and storage for the purpose of optimising our website.

You can also revoke your consent to the collection and use of your data at any time without giving reasons; the data processing remains lawful until the time of revocation.

Pursuant to Art. 77 GDPR, you have the right to complain to a supervisory authority (for example, the State Commissioner for Data Protection of Lower Saxony) if you believe that the processing of your personal data is unlawful.

Data protection for applications and in the application process
Celle Tourismus und Marketing GmbH collects and processes the personal data of applicants for the purpose of handling the application procedure. The processing may also take place electronically. This is particularly the case if an applicant sends corresponding application documents to the controller by electronic means, for example by e-mail. If Celle Tourismus und Marketing GmbH concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If Celle Tourismus und Marketing GmbH does not conclude an employment contract with the applicant, the application documents shall be automatically deleted six months after notification of the rejection decision, provided that no other legitimate interests of the controller conflict with such deletion. Other legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).

Data protection declaration for the use of social media plugins, here Like buttons.
Consent to data collection

Art. 6 para. 1 subpara. 1 lit. a GDPR also allows data collection through social plugins if the users have consented. According to this provision, the processing of personal data is lawful if the data subject has given consent to the processing of personal data relating to him or her for one or more specific purposes.

What the GDPR actually means by consent is defined in Art. 4 No. 11 GDPR. According to this, consent is any expression of will given voluntarily for the specific case, in an informed manner and unambiguously. A specific form is not prescribed for consent. All that is required is a clearly affirmative act by which the data subject indicates that he or she consents to the processing of personal data relating to him or her. Celle Tourismus und Marketing GmbH uses a two-stage solution for this, which only transmits data with the explicit consent of the user (2-click concept).

Plugins of the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA , of the service Twitter 355 Market Street, Suite 900, San Francisco, CA 94103 U.S.A. and Google+ 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA are integrated on our pages. You can recognise the respective plugins by the associated logo or the "Like" button on our site. When you visit our pages, a direct connection is established between your browser and the respective server via the plugin (2-click concept). Facebook, Twitter or Google+ thereby receive the information that you have visited our site with your IP address. If you click on the respective "Like" button while logged into your Facebook, Twitter or Google+ account, you may be able to link the contents of our pages on your respective profile. This enables Facebook, Twitter or Google+ to associate your visit to our pages with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use.

Data protection regulations on the use and application of Google Analytics
The website of Celle Tourismus und Marketing GmbH uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

In the event that IP anonymisation is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de
Please note that this website uses Google Analytics with the extension "_anonymizeIp()" and that IP addresses are therefore only processed in abbreviated form in order to exclude direct personal references.
Further information and the applicable data protection provisions of Google can be found at https://www.google.de/intl/de/policies/privacy/ and at http://www.google.com/analytics/terms/de.html
Purpose of processing: On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
Legal basis:The legal basis for the use of Google Analytics is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR, as well as your consent pursuant to Art. 45 para. 1 lit. a GDPR for processing operations of personal data outside the EU / EEC (so-called third countries incl. USA).
Recipients / categories of recipients:: The recipient of the collected data is Google. Transfer to third countries: Personal data is transferred to the USA on the basis of the standard data protection clauses (SCC), which were made available on the basis of a decision by the EU Commission and which - insofar as they are adopted essentially unchanged - are intended to ensure an appropriate level of data protection between the respective parties involved. In cases where the standard data protection clauses (SCC) do not meet the requirements of the GDPR, the transfer takes place after consent in accordance with Art. 45 (1) a GDPR.

Duration of data storage: The data sent by us and linked to cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 14 months. The deletion of data whose retention period has been reached takes place automatically once a month. Google Analytics is explained in more detail under this link https://www.google.com/intl/de_de/analytics/ genauer erläutert.

Privacy policy on the use and application of YouTube
Our website uses plug-ins from the YouTube site operated by Google. The operator of the site is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plug-in, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account. Further information on the handling of user data can be found in YouTube's privacy policy at www.google.de/intl/de/policies/privacy 

Google Web Fonts
This site uses so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to Google's servers. This may also result in the transmission of personal data to the servers of Google LLC. in the USA. In this way, Google learns that our website was accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR. If your browser does not support web fonts, a standard font will be used by your computer.
In the event of the transfer of personal data to Google LLC. based in the USA, Google LLC. has accepted the EU Standard Contractual Clauses (SCC / EU Model Contract Clauses MCC) , which ensures compliance with the level of data protection applicable in the EU.

A current certificate can be viewed here: https://www.privacyshield.gov/list
Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/

Web font from Fast.Fonts.Net or Fonts.com
This site uses so-called web fonts provided by Monotype GmbH (fonts.com or fast.fonts.net) for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.

For this purpose, the browser you are using must connect to the servers of fonts.com. This enables fonts.com to know that our website has been accessed via your IP address. The use of Fonts.com web fonts is in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR.

If your browser does not support web fonts, a standard font from your computer will be used..
Further information on these web fonts can be found at https://www.fonts.com/info/legal und in der Datenschutzerklärung von Fonts.com: https://www.fonts.com/info/legal/privacy/ and in the privacy policy of Monotype GmbH: https://www.monotype.com/legal/privacy-policy/

Contact
If you have any further questions about the collection, processing or use of your personal data, please contact us. The same applies to information, blocking, deletion and correction requests regarding your personal data as well as to revocations of given consents.

Celle Tourismus und Marketing GmbH is a company of the city of Celle