Section 1 — Definitions and contact information
1. “Personal data” is all data that relates to you personally or can be related to you personally, for example your name, address, email addresses or user behaviour.
2. The data controller is Freiburg Wirtschaft Touristik und Messe GmbH & Co. KG.
The data controller can be reached as follows:
Address: Neuer Messplatz 3, 79108 Freiburg
Phone: +49 761 3881 - 02
Fax: +49 761 3881 - 3006
Section 2 — Purpose of data processing and legal basis
1. Collection of personal data during visits to the website
When the website is used purely for information purposes, i.e. when you visit our website, we do not process any personal data, with the exception of the data that your browser transfers to enable you to visit the website. This means that we only store access data in files known as server log files, which are stored until they are automatically erased. Access data includes:
- IP address
- Date and time of access
- Time difference from Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status / HTTP status code
- Quantity of data transmitted
- Website from which the request comes
- Operating system and interface
- Language and version of browser software.
We process the data listed for the following purposes:
- To ensure the website can establish a smooth connection
- To ensure the website can be used comfortably
- To evaluate system security and stability, and
- For other administrative purposes.
The legal basis for data processing is Article 6 para. 1 sentence 1 (f) of the General Data Protection Regulation (GDPR). Our legitimate interest is derived from the data collection purposes listed above. We never use the data collected for the purpose of drawing conclusions about you.
Section 3 — Who receives your data
1. Your data will not be transferred to third parties without your explicit consent. We sometimes use external service providers to process your data. We carefully select and instruct these service providers, and they are bound to our instructions and are subject to regular checks. We will not transfer your personal data to third parties for any purposes other than those listed below.
We will only transfer your personal data to third parties if:
- You have given express consent pursuant to Article 6 para. 1 sentence 1 (a) GDPR,
- Data transfer is required for the establishment, exercise or defence of legal claims, and there is no reason to assume that you have an overriding legitimate interest in your data not being transferred, pursuant to Article 6 para. 1 sentence 1 (f) GDPR,
- Transfer is necessary for compliance with a legal obligation pursuant to Article 6 para. 1 sentence 1 (c) GDPR, and
- This is legally admissible, and is necessary for the performance of a contract to which you are party pursuant to Article 6 para. 1 sentence 1 (b) GDPR.
2. We may also pass on your personal data to third parties in the event that we offer special promotions, competitions, the conclusion of contracts or similar services in collaboration with partners. You will receive more detailed information on this when you provide us with personal data or in the description of the offer in question.
3. If any of our service providers or partners are headquartered in a state outside of the European Economic Area (EEA), we will inform you of the implications of this in the description of the offer.
Section 4 — Duration of storage of your data
1. If you contact us by email, we will store the data you share with us (your email address and possibly your name and telephone number) so that we can reply to you. Once it is no longer necessary for us to store the data we receive in this context, we will erase it, or limit its processing if it is subject to statutory retention obligations.
2. Your data which we store will also be stored for the duration of the ongoing business relationship with you. In the event that this contractual relationship comes to an end or that you exercise the rights listed in Section 5, your data will be treated in accordance with the right or rights which you have exercised as set out in Section 5, and may be erased, unless a longer retention period is required by law.
Section 5 — Your rights
1. Right of access and right to rectification, erasure, restriction of processing, or data transmission
You have the right to obtain information from us at any time regarding the data concerning you which we store, as well as the origin of the data, the recipients or categories of recipients to whom this data is passed on and the purpose of storage.
You have the right to have the personal data which we store rectified or erased, or to have the processing of this data restricted, at any time, unless this is opposed by statutory retention periods.
You have the right to receive the personal data which you have provided to us, in a structured, commonly used and machine-readable format, or to request the transmission of these data to another controller.
2. Right to object or withdraw consent to the processing of your data at any time
(1) If you have given consent to the processing of your data, you can withdraw this consent at any time. Withdrawal of consent will affect the permissibility of processing your personal data from the point in time at which you communicate this withdrawal of consent to us.
(2) To the extent that we process your personal data based on the balancing of interests, you can object to this processing. This is the case in particular when the processing is not necessary for the performance of a contract with you, which is explained by us in the following description of functions. If you choose to exercise your right to object, please state the reason why you do not want us to continue processing your personal data in the way that we have done. When you communicate your objection and justification, we will assess the matter and will either cease or modify the processing of your data, or demonstrate to you the compelling legitimate grounds on which we shall continue this processing.
(3) You can of course object at any time to the processing of your personal data for the purposes of advertising and data analysis.
3. Right to lodge a complaint with a data protection authority
If you do not agree with our handling of the data concerning you which we store, you have the right to lodge a complaint with the competent data protection authority.
Section 6 — Cookies
2. Cookies store information that is generated in connection with the specific device used. However, this does not mean that we can directly identify you.
3. One purpose of using cookies is to make the use of our website more comfortable for you. For example, we use “session cookies” to detect that you have already visited individual pages on our website. These are automatically deleted once you have left our website.
4. To improve usability, we also use temporary cookies that are stored on your device for a specified period of time. If you visit our website again, it will automatically detect that you have already visited. It will also detect what submissions you have made previously and what settings you have configured, so that you will not need to re-enter this information.
6. The data processed by cookies is necessary for the purposes mentioned above in order to safeguard legitimate interests pursued by us or by a third party pursuant to Article 6 para. 1 sentence 1 (f) GDPR.
7. Most internet browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer, or so that a message always appears before a new cookie is stored. Disabling cookies completely may prevent you from using all of the features of our website.
Section 7 — Use of Google Analytics
1. This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses “cookies” — text files that are stored on your computer to enable us to analyse how you use our website. The information generated by cookies concerning your use of this website is usually transferred to and stored on a Google server in the USA. However, if IP anonymization is activated on this website, your IP address will be shortened by Google before this happens, provided you are in a European Union member state or another state that has entered into the Agreement on the European Economic Area. Full IP addresses will only be transferred to a Google server in the USA and shortened there in exceptional cases. Google uses this information on behalf of this website’s operator to analyse your website usage, create reports about your website activities and provide further services related to website and internet usage to the website operator.
2. The IP address transmitted by your browser as part of the Google Analytics process will not be combined with other Google data.
3. You can prevent cookies from being stored by changing your browser software settings; however, you should note that this may prevent you from being able to use all of this website’s functions.
4. In addition, you may prevent Google from collecting and processing the data generated by the cookie and relating to your use of the website, including your IP address, by downloading and installing the browser plug-in available here: https://tools.google.com/dlpage/gaoptout?hl=en
5. As an alternative to this browser add-on, in particular for browsers on mobile devices, you can also prevent Google Analytics from collecting your data by clicking on this link (https://support.google.com/analytics/answer/6004245?hl=en). An opt-out cookie will be created which will prevent your data from being collected when you visit this website in future. The opt-out cookie is only valid in this browser and for our website and is stored on your device. If you delete cookies in this browser, you will have to set up the opt-out cookie again afterwards.
6. Google Analytics is used in compliance with the terms of Google’s agreement with the German data protection authorities.
Details of the third-party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
Terms of Service: https://www.google.com/analytics/terms/us.html,
Data protection summary: https://support.google.com/analytics/answer/6004245?hl=en,
Section 8 — Newsletter
1. You can choose to subscribe to our newsletter so that we can inform you about current interesting offers. The goods and services which are advertised in the newsletter are stated in the declaration of consent.
2. For newsletter subscriptions, we use the “double opt-in” method. This means that, after you subscribe to the newsletter, we will send an email to the email address you have provided and ask you to confirm that you would like to receive the newsletter. If you do not confirm your subscription within [24 hours], access to your information will be blocked and the information will be automatically erased after one month. We will also store the IP address which you used on each occasion and the time of subscription and confirmation. The purpose of this procedure is to create proof of your subscription and to be able to resolve any potential misuse of your personal data.
3. The only information which we require in order to send the newsletter is your email address. [The provision of other, separately marked data is voluntary; this data will be used to enable us to address you personally.] Following your confirmation, we will store your email address for the purpose of sending you the newsletter. The legal basis for this is Article 6 para. 1 sentence 1 (a) GDPR.
4. You can withdraw your consent to the sending of the newsletter and unsubscribe from the newsletter at any time. You can withdraw consent by clicking on the link provided in every newsletter email, or by sending us a message using the contact information given under “contact” on our website.
5. Please note that we will analyse your user behaviour when we send you the newsletter. To enable this analysis, the emails which we send contain “web beacons” or “tracking pixels”, which represent single-pixel image files that are stored on our website. To carry out the analysis, we combine the data listed in Section 3 and the web beacons with your email address and an individual ID. [OPTIONAL: Links within the newsletter also contain this ID.] [EITHER:] The data will only be collected in pseudonymised form, which means that the IDs will not be combined with other personal data belonging to you and it will not be possible to directly identify you. [OR:] We use the data gathered in this way to create a user profile, so that we can tailor the newsletter to your personal interests. We record when you read our newsletters and which links you click on within the newsletters, in order to gather information about your personal interests. We combine this data with information on actions you carry out on our website.
You can object to this tracking at any time by clicking on the specially provided link in every email or by notifying us using another means of communication. The information will be stored for as long as you subscribe to the newsletter. If you unsubscribe, we will store the data only in statistical and anonymised form following this. [OPTIONAL: This tracking is also not possible if you have deactivated the display of images as standard in your email programme. In this case, the newsletter will not be displayed to you in full and you may not be able to use all functions. If you manually allow the images to be displayed, the above-mentioned tracking will take place.]
Section 9 — Use of social media plug-ins
Social media plug-ins (“plug-ins”) provided by social networks are used on our website. This serves the purposes of our legitimate and, on balance, overriding interests in optimal marketing of our range of products and services pursuant to Article 6 para. 1 sentence 1 (f) GDPR.
In order to strengthen the protection of your data when you visit our website, plug-ins are not directly integrated into the page but are embedded via an HTML link (using the “Shariff” solution developed by c’t). This means that, when you visit pages on our website containing plug-ins of this kind, this will not automatically create a connection with the servers of the social network provider in question. If you click on one of the buttons, a new browser window will open and will display the site of the relevant service provider, where you will be able to click the “like” or “share” button, for example (you may first need to enter your login details). Please consult the privacy statements of the service providers for information on the purpose and scope of data collection and the further processing and use of the data by the providers on their sites, as well as your rights in this regard and the settings which you can use to protect your privacy.
Section 10 — Data security
When you visit our website, your security is protected by the widely used SSL (Secure Sockets Layer) technology combined with the highest level of encryption which is supported by your browser. This is generally 256-bit encryption. If your browser does not support 256-bit encryption, we will instead use 128-bit v3 technology. If an individual page of our website is being transmitted in encrypted form, the key or lock depicted in the lower status bar of your browser will be shown as closed or locked.
We also take appropriate technical and organisational safety precautions in order to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or unauthorised access by third parties. We are continuously improving our safety precautions in line with technological developments.
Last updated May 2018