Data protection and liability
We attach great importance to the protection of your data and observe the legal data protection regulations. Here you will find detailed information on how we handle your personal data
A. Data controller
The data controller responsible for the processing of data on this website is Bayern Tourismus Marketing GmbH, represented by its managing director Barbara Radomski.
Bayern Tourismus Marketing GmbH
Arabellastraße 17
81925 München
Phone: +49 (0) 89 212397-0
Fax: +49 (0) 89 212397-99
Email: tourismus@bayern.info
We have appointed the following entity as data protection officer:
c/o activeMind AG
Management- und Technologieberatung
Potsdamer Str. 3
80802 München
+49 89 919294-900
datenschutz@bayern.info
B. Data subject rights
You have the right to request the disclosure of information regarding any of your personal data held by us, as well as the correction, deletion or restricted processing of this data, if applicable. If necessary, you can also make use of your right of refusal or your right to data portability. You have the right at any time to withdraw consent that you have granted without affecting the lawfulness of the processing based on consent before its withdrawal.
In addition, there is a right of appeal to a competent data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 Federal Data Protection Act [BDSG]). A list of the supervisory authorities (for the non-public sector) with the respective address can be found at: https://www.bfdi.bund.de/EN/Service/Anschriften/Laender/Laender-node.html
Right of objection:
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you, which is carried out on the basis of Art. 6 (1) Letter f GDPR (data processing on the basis of a balancing of interests); this also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if said processing serves to assert, exercise or defend legal claims.
C. Notes on individual processing operations
In order to assure fair and transparent processing, we also refer you to the following:
1. Server log files
When you access our website, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and similar information.
In particular, this is processed for the following purposes:
- Ensuring an error-free connection to the website,
- Ensuring the smooth use of our website,
- Ensuring the evaluation of system security and stability, and
- for other administrative purposes.
We also reserve the right to check the server log files retrospectively if there are specific indications of illegal use.
The processing is carried out in accordance with Art. 6 (1) Letter f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.
We use technical service providers for the operation and maintenance of our website who act as our processors.
The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case for data used to provide the website when the respective session has ended.
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address and the cookie identifier, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted.
2. Newsletter delivery
Your data is exclusively used for delivering the subscribed newsletter to you by email, and, insofar as you have also consented hereto, for evaluating how you use the newsletter and, if appropriate, other content linked to the newsletter.
Your name is indicated in order to be able to address you personally in the newsletter and, if appropriate, to identify you, should you wish to exercise your rights as a data subject.
The legal basis for these processing operations in each case is your consent, Article 6 (1) Sentence 1 Letter a) GDPR. We use a service provider, who acts as our processor, for delivery and, if appropriate, for analyses that are made. We process no data in third countries in this connection.
Data is processed in connection herewith only if the corresponding consent is given. This is deleted after this. You can revoke your consent by clicking once on the corresponding link at the end of each newsletter. For more information on this, please refer to the data subject rights.
Your personal data is made available voluntarily, and only on the basis of your consent. Unfortunately, we cannot send you our newsletter unless you have given your consent.
If you have given us your consent, we will evaluate your use of the newsletters sent and evaluate the subsequent visits to the BAYERN TOURISMUS Marketing GmbH website, in order to further improve the newsletter and the website and to optimise it according to the actual interests of the visitors.
3. Cookies: Web Analysis & Statistics
You can delete individual cookies or the entire cookie collection. In addition, you will receive information and instructions on how to delete these cookies or block their storage in advance. Depending on your browser provider, you will find the necessary information under the following links:
- Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
- Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
- Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
- Opera: http://www.opera.com/de/help
- Safari: https://support.apple.com/kb/PH17191locale=de_DE&viewlocale=de_DE
3.1 Necessary cookies
We use cookies to enable the basic functions that are necessary for the proper use of our website. The following data is stored and transmitted in the cookies:
- Cookie settings
The processing is carried out in accordance with Art. 6 (1) Letter f GDPR on the basis of our legitimate interest in creating a user-friendly design for our website. Insofar as you allow the use of technically necessary cookies through your browser settings, the following cookies may be used on our website:
Usercentrics
- Name: CookieConsent
- Purpose: Cookie from Usercentrics stores user’s consent status for cookies on the current domain.
- Expiration date: 12 months
- Details: This website uses Usercentrics, which sets a cookie that is necessary from a technical viewpoint to store your cookie consents. This cookie does not process any personal data. This cookie stores the consent you gave when you entered the website. If you wish to revoke these forms of consent, simply delete the cookie in your browser. When you re-access or reload the website, you will be asked again for your consent to cookies.
3.2 Unnecessary cookies (from a technical standpoint)
We also use cookies to better tailor the offer on a website to the interests of visitors, or to generally improve it on the basis of statistical evaluations. We use web analysis technologies from the following providers:
- Matomo
- Google Maps
- Youtube
The legal basis for these processing operations is, in each case, your consent as per Art. 6 (1) Letter a GDPR. To the extent that you allow the use of technically unnecessary cookies by browser setting or consent, the following cookies may be used on our website:
Matomo
If you have given your consent, this website uses Matomo (formerly Piwik), an open source software for statistical analysis of visitor access. The provider of the Matomo software is InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand.
Matomo sets a cookie (a text file) on your terminal device, with which your browser can be recognised. If sub-pages of our website are accessed, the following information is stored:
- the IP address of the user, shortened by the last two bytes (anonymised)
- the sub-page accessed and the time of the call-up
- the page from which the user reached our website (referrer)
- which browser with which plug-ins, which operating system and which screen resolution is used
- the length of stay on the website
- the pages that are accessed from the sub-page that was retrieved
Matomo is used for the purpose of improving the quality of our website and its content. This enables us to find out how the website is used and to constantly optimise our offer.
By anonymising the IP address by six digits, we take into account the interest of the website visitor in the protection of their personal data. The data is not used to personally identify the user of the website and is not merged with other data. The information generated by the cookie about your use of this website is not passed on to third parties.
Revocation of consent: You can revoke your consent to the storage and analysis of your data by Matomo at any time via the link below. A so-called opt-out cookie is then stored on your device, which is valid for two years. As a result, Matomo does not collect any session data. However, please note that the opt-out cookie will be deleted if you delete all cookies.
For more information on the privacy settings of the Matomo software, please see the following link: https://matomo.org/docs/privacy/.
You may also reject the use of cookies by selecting the appropriate settings on your browser; however, please note that, if you do this, you may not be able to use the full functionality of this website.
Google Maps
We use the Google Maps service on this website. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). This allows us to show you interactive maps directly in the website and enables you to use the map function in a convenient way.
You can find more information about data processing by Google in the Google data protection policy: https://policies.google.com/privacy. There, you can also change your personal data protection settings in the data protection centre.
Detailed instructions on how to manage your own data in connection with Google products can be found here: https://www.dataliberation.org
By visiting the website, Google receives the information that you have accessed the corresponding sub-page of our website. This takes place irrespective of whether Google provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account.
If you do not want the assignment in your Google profile, you must log out of Google before activating the button. Google stores your data as usage profiles and uses it for the purposes of advertising, market research and/or tailoring its websites to your needs. In particular, such an evaluation is carried out (and even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.
The recipient of the data is Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) as part of the order processing. Google Ireland Limited uses Google LLC in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, United States of America) as a service provider.
Third country transfer: Data may be transferred to the USA. For the US, there is currently no adequacy decision by the EU Commission. This creates a risk that your data may be processed by US authorities for control and monitoring purposes without you possibly having any legal recourse. The processing can be consented to accordingly via the cookie banner or any previously granted consent can be revoked.
Revocation of consent: No option for a simple opt-out or blocking of data transfer is currently offered by the provider. If you wish to prevent the tracking of your activities on our website, please revoke your consent for the relevant cookie category or all unnecessary cookies (from a technical standpoint) and data transfers via the Cookie Consent Tool. In this case, however, you may not be able to use our website, or may only be able to use it to a limited extent.
YouTube
We embed YouTube videos on our website. The operator of the corresponding plug-ins is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (hereinafter “YouTube”). YouTube, LLC is a subsidiary of Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA (hereinafter “Google”). When you visit a page with the YouTube plug-in, a connection to YouTube servers is established. This tells YouTube which pages you are visiting. If you are logged into your YouTube account, YouTube can assign your surfing behaviour to you personally. You can prevent this by logging out of your YouTube account beforehand.
When a YouTube video is started, the provider uses cookies that collect information about user behaviour.
The recipient of the data is Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) as part of the order processing. Google Ireland Limited uses Google LLC in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, United States of America) as a service provider.
Further information on the purpose and scope of data collection and processing by YouTube can be found in the provider’s data protection policy, where you will also find further information on your rights in this regard and settings options for protecting your privacy (https://policies.google.com/privacy).
Third country transfer: Data may be transferred to the USA. For the US, there is currently no adequacy decision by the EU Commission. This creates a risk that your data may be processed by US authorities for control and monitoring purposes without you possibly having any legal recourse. The processing can be consented to accordingly via the cookie banner or any previously granted consent can be revoked.
Revocation of consent: No option for a simple opt-out or blocking of data transfer is currently offered by the provider. If you wish to prevent the tracking of your activities on our website, please revoke your consent for the relevant cookie category or all unnecessary cookies (from a technical standpoint) and data transfers via the Cookie Consent Tool. In this case, however, you may not be able to use our website, or may only be able to use it to a limited extent.
Walls.io
We embed walls.io on the website. The operator of the corresponding plugin is "Die Socialisten" Social Software Development GmbH, Andreasgasse 6, Top 1, 1070 Vienna, Austria, Europe (hereinafter "walls.io"). When you visit a page with walls.io, a connection to walls.io servers is established. When these plugins are called up, the IP address and session cookie information are transmitted to walls.io, solely due to technical necessities for offering the service. In the process, walls.io is informed which pages you are visiting.
Third country transfer: Your data will be transferred to walls.io with your consent. This data will only be stored by walls.io in Europe and will not be passed on to third parties. For further information on data processing by walls.io, please refer to the walls.io privacy policy at https://walls.io/privacy.
The provision of your personal data is voluntary, based solely on your consent
Revocation of consent: No option for a simple opt-out or blocking of data transfer is currently offered by the provider. If you wish to prevent the tracking of your activities on our website, please revoke your consent for the relevant cookie category or all unnecessary cookies (from a technical standpoint) and data transfers via the Cookie Consent Tool. In this case, however, you may not be able to use our website, or may only be able to use it to a limited extent.
4 .Data processing by Facebook and Instagram
We maintain profiles and fan pages on Instagram and Facebook.
Through a simple link, you can reach our presences on the social networks Facebook and Instagram from our website. These platforms are provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. We maintain these Facebook/Instagram pages in order to inform users or interested parties, as well as customers, about our services.
We cannot exclude the possibility that, when our company website is accessed on these social networks, third-country transfers take place, e.g. to servers located in the USA. Furthermore, we would like to point out that as the operator of a Facebook/Instagram fan page, we are jointly responsible with Facebook for processing the personal data of visitors to the page (Art. 26 GDPR). For this purpose, we have concluded corresponding contracts with Facebook. Due to data processing in the USA, we have concluded corresponding standard contractual clauses with this company. You can access the standard contractual clauses at the following link: https://www.facebook.com/help/566994660333381/?helpref=search&query=Standardvertragsklauseln%20&search_session_id=fc9845e203c7c994b8c270b7678d9bd3&sr=0.
As an operator, we do not make any decisions regarding the processing of Insights data and any other information resulting from Art. 13 GDPR, including the legal basis, identity of the data controller and storage period of cookies on user terminals.
Facebook acknowledges joint responsibility for the Insights data with the operators of the pages and assumes primary responsibility, see:
https://www.facebook.com/legal/terms/page_controller_addendum
Provided you have a Facebook/Instagram profile and are logged in, Facebook can, for example, analyse your usage behaviour and create a usage profile corresponding to your usage behaviour. This user data is regularly processed for market research and (personalised) advertising purposes.
The processing of the data is based on your consent pursuant to Art. 6 (1) Sentence 1 Letter a GDPR.
If you wish to request information or assert your user rights, you can assert these rights against us or Facebook. Further information regarding the collection and use of data, as well as your rights and protection options, can be found at
https://facebook.com/about/privacy and https://instagram.com/about/legal/privacy/
Please note that Facebook Insights and the entire Facebook fan page is a service of Facebook Inc.
As the provider of the fan page and the Facebook Insights tool, Facebook collects and evaluates personal data required for our statistics and is, therefore, able to establish a personal connection on the basis of this data. However, we do not know which specific data is being collected by Facebook for the creation of the Insights statistics that are anonymously provided to us, or for which purposes beyond the creation of these site statistics it is processed by Facebook. In addition to this, we would like to point out that we have no influence whatsoever on Facebook’s personal data collection and processing beyond our own statistical purposes and their scope. For example, Facebook can create usage profiles based on the data collected and processed for us and beyond, and if necessary, create links to your private profile on Facebook or other platforms. Facebook alone is responsible for the additional collection and processing of this data.
Further information on the use of Facebook Insights can be found at:
https://www.facebook.com/legal/terms/information_about_page_insights_data
Contact Facebook Inc.:
Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA
Data protection policy:
https://www.facebook.com/policy.php
https://www.facebook.com/help/186325668085084