Privacy policy

In the following, we provide information on the collection of personal data via the website of FWTM Freiburg Wirtschaft Touristik und Messe GmbH & Co. KG www.visit.freiburg.de.

§ 1 - Definitions and contact details

1) Personal data is all data that relates or can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.

2. the controller responsible for data processing is FWTM Freiburg Wirtschaft Touristik und Messe GmbH & Co KG, represented by the managing directors Hanna Böhme and Jens Mohrmann.

You can reach the responsible body

Address: Neuer Messplatz 3, 79108 Freiburg
Phone: 0761 3881-01
Mail: info@visit.freiburg.de
Internet: www.fwtm.freiburg.de

3. the data protection officer of FWTM Freiburg Wirtschaft Touristik und Messe GmbH & Co. KG is our certified data protection officer and lawyer Marc E. Evers.

You can reach our data protection officer at

address: DataSEKure Rechtsanwaltsgesellschaft mbH, Weilerstraße 9, 79252 Stegen
Phone: 0761/3876955
Email: datenschutz@datasekure.de

§ 2 - Purpose and legal basis of data processing

1. collection of personal data when visiting the website

When using the website for information purposes only, i.e. when you visit our website, we do not process any personal data, with the exception of the data that your browser transmits to enable you to visit the website. This means that we only store access data in so-called server log files, which are stored until they are automatically deleted. These are

- IP address
- date and time of the request
- time zone difference to Greenwich Mean Time (GMT)
- content of the request (specific page)
- access status/http status code
- amount of data transferred
- website from which the request originates
- browser
- operating system and its interface
- language and version of the browser software.

The aforementioned data is processed by us for the following purposes

  • Ensuring a smooth connection to the website
  • Ensuring convenient use of the website
  • Analysing system security and stability and
  • For further administrative purposes

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person.

We also use cookies and analysis services when you visit our website. You will find more detailed explanations on this under § 6 and 7 of this privacy policy.

2. collection of personal data for the "enquiry form for groups" function on our website

In addition to the purely informational use of our website, we also offer the possibility on our website to send your accommodation enquiry for groups directly to Lohospo GmbH, which will then make you a corresponding offer. Lohospo sees itself as a service partner for destinations and hosts. In order to send your accommodation enquiry for groups, you will generally have to provide further personal data, which Lohospo GmbH will use exclusively for the provision of the respective service. This is the following data:

Title
First name and surname
Street and house number
Postcode/city
Country
Telephone
Email
Further information about your desired accommodation

If additional voluntary details are possible, these are labelled accordingly. Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntarily given consent.

The personal data collected by Lohospo for the use of the contact form will be automatically deleted after your enquiry has been dealt with.

3. collection of personal data for the "contact form" function on our website

In addition to the purely informational use of our website, we also offer the option on our website of contacting us directly and informing us of your enquiry. To do this, you must generally provide additional personal data, which we use exclusively to provide the respective service. This is the following data:

Title
First name and surname
Street and house number
Postcode/city
Country
Telephone
Email
Message

If additional voluntary information is possible, it is labelled accordingly.

Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntarily given consent.

The personal data collected by us for the use of the contact form will be automatically deleted after your enquiry has been dealt with.

4. collection of personal data for the "Book or enquire about accommodation" function on our website

In addition to the purely informational use of our website, we also offer the possibility on our website to book or enquire about the desired accommodation directly online. To do this, you usually have to provide further personal data, which Lohospo GmbH and the corresponding host use exclusively for the provision of the respective service. Lohospo sees itself as a service partner for destinations and hosts. This is the following data:

Salutation
First and last name
Street and house number
Postcode/city
Country
E-mail

5. use of data when registering for the e-mail newsletter

(1) With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers, events and services. The areas advertised are specified in the newsletter registration process and can be selected by you.

(2) We use the so-called double opt-in procedure to subscribe to our newsletter. This means that after you have registered, we will send you an e-mail to the e-mail address you have provided in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 56 days, your information will be blocked and automatically deleted after 56 days. We also store the IP addresses you use and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.

(3) The only mandatory information for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and is used to address you personally. After your confirmation, we will save your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR.

(4) You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can declare your cancellation by clicking on the link provided in every newsletter email, by sending an email to info@news.visit.freiburg.de or by sending a message to the contact details provided in the legal notice.

(5) We would like to point out that we evaluate your user behaviour when sending the newsletter. We create an interest profile for you for the analyses. Furthermore, the emails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. We link your interest profile and the web beacons for analysis purposes. We use the data obtained in this way to enrich your interest profile in order to tailor the newsletter to your individual interests. We record when you read our newsletters, which links you click on in them and deduce your personal interests from this. We link this data to the actions you take on our website. You can object to this tracking at any time by unsubscribing from the newsletter by clicking on the link provided in every newsletter email, by sending an email to info@news.visit.freiburg.de or by sending a message to the contact details provided in the legal notice. The information will be stored for as long as you have subscribed to the newsletter. After unsubscribing, we store the data purely statistically and anonymously. Such tracking is also not possible if you have deactivated the display of images in your e-mail programme by default. In this case, the newsletter will not be displayed in full and you may not be able to use all the functions. If you click on one of the links, the above-mentioned tracking will take place.

6 Use of data for email advertising without newsletter registration and your right to object

If we receive your e-mail address in connection with the sale of a product or service and you have not objected to this, we reserve the right to regularly send you offers for similar products to those you have already purchased from our range by e-mail. This serves to safeguard our legitimate interests, which predominate in the context of a balancing of interests, in a promotional approach to our customers in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. You can object to this use of your e-mail address at any time by sending a message to the contact option described above or via a link provided for this purpose in the advertising e-mail, without incurring any costs other than the transmission costs according to the basic tariffs.

7 Use of data for postal advertising and your right to object

We also reserve the right to use your first name, surname and postal address for our own advertising purposes, e.g. to send you interesting offers and information about our products by post. This serves to safeguard our legitimate interests, which predominate in the context of a balancing of interests, in a promotional approach to our customers in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

§3 - Recipients of your data

1. your personal data will not be transferred to third parties for purposes other than those listed below.

We only pass on your personal data to third parties if:

  • you have given your express consent to this in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
  • the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
  • in the event that there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, and
  • this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.

2. we may also pass on your personal data to third parties if we offer participation in promotions, competitions, contracts or similar services together with partners. You will receive more detailed information on this when you provide your personal data.

3. if our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the respective offer.

§4 - Duration of the storage of your data

The data stored by you will be stored for the duration of the processing of your general contact enquiry or your request for a quotation or for the processing of the contract concluded with you. If the processing or our contractual relationship has ended or you make use of your rights mentioned under § 5, your data will be treated in accordance with your exercise of rights within the meaning of § 5, if necessary deleted, unless statutory provisions provide for longer retention periods. As soon as these retention periods under tax and commercial law have also expired, your data will be deleted.

§ 5 - Your rights

1. to information, rectification, erasure, restriction or data portability

You have the right to request information from us at any time about the data we have stored about you, as well as its origin, recipients or categories of recipients to whom this data is passed on and the purpose of storage. You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller.

You have the right to correct, restrict and delete the data we have stored about you at any time, provided there are no statutory retention periods to the contrary.

2. to object to or revoke the processing of your data at any time

(1) If you have given your consent to the processing of your data, you can revoke this at any time. Such a revocation affects the permissibility of the processing of your personal data after you have given it to us.

(2) If we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if, in particular, the processing is not necessary for the fulfilment of a contract with you, which is described by us in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or point out to you our compelling reasons worthy of protection on the basis of which we will continue the processing.

(3) Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time.

3. to lodge a complaint with the data protection authority

If you do not agree with the handling of your personal data stored by us, you have the right to lodge a complaint with the competent data protection authority.

Please send all requests for information, requests for information or objections to data processing by e-mail to our data protection officer and lawyer Marc E. Evers: datenschutz@datasekure.de

§6 - Cookies

1. we use cookies on our website. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware.

2. information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity.

3. the use of cookies serves on the one hand to make the use of our website more pleasant for you. For example, we use so-called session cookies to recognise that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

4. in addition, we also use temporary cookies to optimise user-friendliness, which are stored on your end device for a specified period of time. If you visit our site again to use our services, it is automatically recognised that you have already visited us and which entries and settings you have made so that you do not have to enter them again.

5 Secondly, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you (see § 7). These cookies enable us to automatically recognise that you have already visited our website when you visit it again. These cookies are automatically deleted after a defined period of time.

6. the data processed by cookies are necessary for the purposes mentioned to safeguard our legitimate interests and those of third parties in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

7. most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website.

If you click on the following button, you can display the cookie notice again:

Show cookie notice again

§7 - Use of Google Analytics

If you have given your consent, we use the web analysis service "Google Analytics" in the version "Google Analytics 4" of Google Inc. on our website.

Google Analytics uses so-called cookies, text files that are stored on your computer and enable your use of the website to be analysed.

We only use Google Analytics with activated IP anonymisation. This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.

We use the Google Analytics function "Google Signals" to collect and analyse information about your user behaviour. If you are logged in with your Google account, this also takes place across devices and platforms (so-called "cross-device tracking"); if you have activated personalised ads, interest and demographic data (such as age and gender) are also collected.

We synchronise, manage and visualise the data collected together with data collected from other data sources using Google Looker Studio in dashboards and reports in order to analyse results and optimise our website.

Google will use the information collected on our behalf to analyse your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. This is done using pseudonymised user profiles - i.e. these do not contain any unique data such as name or email address.

The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. 
The following data in particular is collected during your website visit:

  • Your approximate location,
  • Time of the enquiry
  • Your abbreviated IP address
  • Your user behaviour,
  • Pages you have visited,
  • Your purchases and downloads,
  • Technical information about your browser, operating system and end device,
  • your internet provider,
  • the referrer URL.

The data and the associated cookies are deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.

You can prevent the storage of cookies by selecting the appropriate settings in your browser software; however, please note that if you do this you may not be able to use the full functionality of this website.

You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link:https://tools.google.com/dlpage/gaoptout?hl=de

The data processing in connection with Google Analytics is based on your consent in accordance with Art. 6 para. 1 lit. a) GDPR, which was requested, for example, when you consented to the storage of cookies. You can withdraw your consent at any time. The easiest way to revoke your consent is via our Consent Manager or by installing the Google browser add-on, which can be accessed via the following link:https://tools.google.com/dlpage/gaoptout?hl=de/.

Google acts as a processor and we have concluded a corresponding contract with Google. The information generated by the cookie and the (usually shortened) IP addresses about your use of this website are usually transferred to a Google server in the USA and processed there. Google participates in the EU-US Data Privacy Framework, which came into force on 10 July 2023, and has thus officially committed itself to the US Department of Commerce to comply with the principles of the EU-US Data Privacy Framework. Google's EU-US Data Privacy Framework registration is available at https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active . In accordance with the European Commission's adequacy decision of 10 July 2023, the EU-US Data Privacy Framework guarantees an adequate level of data protection, i.e. a level of data protection equivalent to that in the EU.

For more information about Google Analytics or information from the third-party provider: Google Dublin, Google Ireland Ldt, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001, please visit 
at https://marketingplatform.google.com/about/analytics/terms/de/ (user conditions), at https://support.google.com/analytics/answer/6004245?hl=de/ (information on data processing when using Google Analytics), at https://policies.google.com/privacy?hl=de&gl=de (privacy policy - general information on data processing which, according to Google, should also apply to Google Analytics).

§8 - Use of social media plug-ins

Social plugins ("plugins") from social networks are used on our website. This serves to safeguard our legitimate interests, which predominate in the context of a balancing of interests, in the optimal marketing of our offer in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. In order to increase the protection of your data when you visit our website, the plugins are not integrated into the page without restrictions, but only using an HTML link (so-called "Shariff solution" from c't). This integration ensures that no connection is established with the servers of the provider of the respective social network when a page of our website containing such plugins is accessed. If you click on one of the buttons, a new window of your browser opens and calls up the page of the respective service provider, where you can (if necessary after entering your login data) e.g. press the Like or Share button. The purpose and scope of the data collection and the further processing and use of the data by the providers on their pages as well as your rights in this regard and setting options to protect your privacy can be found in the providers' data protection notices.

https:// help.instagram.com/155833707900388

§9 - Integration of Google Maps

1. we use the Google Maps service on this website. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently. This serves to safeguard our legitimate interests, which predominate in the context of a balancing of interests, in the optimal marketing of our offer in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR.

2. by visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under § 2 of this declaration will be transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or customising its website. Such an analysis is carried out in particular (even for users who are not logged in) to provide customised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

3. further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

§10 - Data security

We use the widespread SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser when you visit our website. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can recognise whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

§11 Integration of YouTube videos 
1. We have integrated YouTube videos into our online offering, which are stored on https://www.YouTube.com and can be played directly from our website. [These are all integrated in "extended data protection mode", i.e. no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence on this data transfer]. This serves to safeguard our legitimate interests, which predominate in the context of a balancing of interests, in the optimal marketing of our offer in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

2. by visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under § 2 of this declaration will be transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or customising its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide customised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

3. further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

8. use of data when organising prize draws

If we receive your email address and other personal data, such as your surname and first name, as a result of your participation, this personal data will be used exclusively for the purpose of organising the prize draw. If we identify you as the winner of the prize draw, we will send a corresponding notification to the email address you have provided. The legal basis for this is Art. 6 para. 1 lit. b GDPR, the realisation of the lottery procedure. This data will then be deleted, unless there is a legal obligation to retain it. 
The raffle tickets and thus also the personal data contained therein of participants who have not won will be destroyed immediately after the raffle has been held in accordance with data protection regulations.