Privacy Policy for Social Media
We find it important to protect your data and comply with all applicable data protection laws. Below you will find detailed information about how we process your personal data.
A. Data Controller
The controller responsible for data processing on this website is Bayern Tourismus Marketing GmbH, represented by its Managing Director, Barbara Radomski.
Bayern Tourismus Marketing GmbH
Arabellastraße 17
81925 München
Telefon: +49 (0) 89 212397-0
Telefax: +49 (0) 89 212397-99
E-Mail: tourismus@bayern.info
We have appointed the following data protection officer:
c/o colenio GmbH & Co. KG
Bahnhofstr. 15
53572 Unkel
+49 (0) 175 379 11 77
E-Mail: dsb@colenio.com
B. Rights of data subjects
You have the right to request access to your personal data. Where applicable, you may also request the rectification or erasure of your data or the restriction of its processing. In some cases, you may also exercise your right to object to processing or your right to data portability. You have the right to withdraw your consent at any time; if you decide to do so, this will not affect the lawfulness of any processing carried out on the basis of your consent up to that point.
In addition, you have the right to lodge a complaint with a competent data protection supervisory authority in accordance with Article 77 of the General Data Protection Regulation (GDPR) in conjunction with Section 19 of the Federal Data Protection Act (BDSG). Further information is available https://www.bfdi.bund.de/EN/Service/Anschriften/Laender/Laender-node.html
If you wish to exercise your rights as a data subject, you may contact us or the relevant social media provider.
Please note that we have no control over how individual social networks process data. The policies of each provider largely determine what we can do in this regard. If you contact us regarding your rights, we may only be able to forward your request to the relevant social network operator.
If you wish to exercise your rights as a data subject under Chapter V of the GDPR, you will find detailed information and instructions in the privacy policies and terms of use of each social media platform (see links below).
B.1. Right to object in specific cases
You have the right to object, on grounds relating to your particular situation, at any time to any processing of your personal data that is based on point (f) of Article 6 (1) GDPR (processing based on legitimate interests), including any profiling based on those provisions within the meaning of Article 4 (4) GDPR.
If you raise an objection, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or unless your data is being processed for the establishment, exercise or defence of legal claims.
Recipient of objection
You may submit your objection in any form. Please include the word “objection” in the subject line and indicate your name, address and date of birth. Please address your objection to:
Bayern Tourismus Marketing GmbH
Arabellastraße 17
81925 München
Telefon: +49 (0) 89 212397-0
Telefax: +49 (0) 89 212397-99
E-Mail: tourismus@bayern.info
C. Data Security
We will only process your personal data to the extent permitted under data protection law. We will take all necessary technical and organisational security measures to ensure that your personal data is adequately protected against unauthorised access and misuse at all times.
All personal data that we store or process is handled within a high-security data centre. To safeguard data during transmission, we use encryption methods (e.g. TLS) via HTTPS. Our servers are protected by firewalls and antivirus software. Back-up and recovery processes, as well as role-based access controls, are standard practice within our organisation.
Our employees are obliged to comply with the provisions of the GDPR and the BDSG when handling personal data.
D. Social Media Channels
Our website contains direct links to our social media accounts. We operate the following social media channels:
Facebook and Instagram
We are active on Facebook and Instagram.
These platforms are operated by Meta Platforms Ireland Ltd. (4 Grand Canal Square, Dublin 2, Ireland). Our Facebook and Instagram pages are designed to provide users and other interested parties with information about Bavaria as a leisure and travel destination.
If you visit our company profiles on these social networks, this may result in data being transferred to a third country (e.g. to servers located in the United States).
If you are logged in to your Facebook or Instagram account, Meta may analyse your usage behaviour and create a profile reflecting your activity. This user data will be regularly processed for market research and (targeted) advertising purposes.
For more information on data collection and usage, as well as your rights and ways to protect your data, please see: https://facebook.com/about/privacy and https://instagram.com/about/legal/privacy/
Contact via Facebook/Instagram
If you reach out to us on Facebook or Instagram using instant messaging services (e.g. Facebook Messenger), your username, message and any other personal data you provide will be stored. If you contact us in this way, you acknowledge and understand that your data will also be processed in accordance with the respective platform’s privacy policy.
TikTok
Our company has a TikTok account. TikTok is operated by ByteDance in China. For the European region, TikTok is provided by TikTok Technology Limited (registered office: 10 Earlsfort Terrace, Dublin, D02 T380, Ireland) and TikTok Information Technologies UK Limited (6th Floor, One London Wall, London, EC2Y 5EB, United Kingdom).
Our TikTok page is designed to provide users and other interested parties with information about Bavaria as a leisure and travel destination.
If you visit our TikTok page, this may result in data being transferred to a third country.
Where TikTok transfers data to third countries without an adequacy decision issued by the European Commission, TikTok relies on standard contractual clauses to ensure an adequate level of protection for the personal data of EU citizens. Please note that such data transfers may carry risks for you as a data subject, as you have no control over the processing or storage of your personal data and may not be able to fully enforce your rights under the GDPR.
For more information on how TikTok may transfer your personal data to third countries, please see: https://www.tiktok.com/legal/page/eea/transferee-countries/en
You can obtain a copy of the standard contractual clauses and other safeguards for third-country transfers by contacting us using the details provided below.
We have no control over how TikTok may collect or process your personal data. We do not know the extent to which it will be processed, where it will be processed or how long it will be stored. Moreover, we do not know whether TikTok will comply with the relevant deletion requirements, how it will analyse your personal data or link it to other datasets, or whether it will disclose your personal data to any third parties.
If you are logged in to your TikTok account, TikTok may collect and process additional information about you (e.g. to analyse your usage behaviour and create a profile reflecting your activity).
If you wish to exercise your rights as a data subject (e.g. your right of access), you may reach out to us or TikTok.
For more information on data collection and usage, as well as your rights and ways to protect your data, please see: https://www.tiktok.com/legal/page/eea/privacy-policy/en and https://www.tiktok.com/legal/page/eea/terms-of-service/en
TikTok Insights
TikTok provides us with page insights (analytics) for our TikTok page. These insights consist of aggregated data, allowing us to see how people interact with our page.
The data is pseudonymised, which means it cannot be matched to specific individuals. This feature enables us to analyse our page more effectively and tailor it to our users’ interests.
You can find more information here: https://www.tiktok.com/creators/creator-portal/en-us/tiktok-content-strategy/understanding-your-analytics/
YouTube
We are also active on YouTube. YouTube is a service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, United States).
Our YouTube page is designed to provide users and other interested parties with inspiration and ideas regarding Bavaria as a leisure and travel destination.
If you visit our YouTube channel, this may result in data being transferred to a third country (e.g. to servers located in the United States). Your visit to our page may be tracked by YouTube.
When you use YouTube, your personal data may be collected, transmitted, stored, disclosed and used by Google. Google will analyse your usage behaviour and create a user profile based on your activity, regardless of whether you have a Google account. This data may be used to offer targeted content and advertising.
For more information on data collection and usage, as well as your rights and ways to protect your data, please see: https://policies.google.com/technologies/product-privacy and https://policies.google.com/privacy
We use the technical platform and services provided by Pinterest Inc. (808 Brannan Street, San Francisco, CA 94103-490, United States). Our website contains direct links to our Pinterest page.
If you access our Pinterest page while logged in to your Pinterest account, your visit to our website may be matched to your Pinterest account.
If you do not want Pinterest to associate this data with your account, you must log out of Pinterest before visiting our website.
Please note that you are free to use Pinterest on your own responsibility; we currently do not have full insight into all aspects of Pinterest’s data processing. This applies in particular to the use of interactive features (e.g. sharing, commenting and liking).
Further information is available here: policy.pinterest.com/en-gb/privacy-policy
Komoot
We have a profile on Komoot. This is a service provided by Komoot GmbH (Friedrich-Wilhelm-Boelcke-Straße 2, 14473 Potsdam, Germany). We use our Komoot profile to provide maps relating to our tours.
If you access this page, your data may be transmitted to Komoot and other companies, potentially including transfers to countries outside the European Union.
Komoot uses cookies to automatically collect information about visitors to its website. This mainly includes the following data:
- your device type;
- your browser and operating system;
- your IP address and the page you visited before opening the Komoot website; and
- search terms entered in Komoot forms, as well as pages viewed on Komoot and certain interactions with them.
Komoot uses this information for various purposes (e.g. to compile aggregated statistics on user behaviour and to improve its user experience). If you would like to learn more about how Komoot processes data, you can find further information in its privacy policy: https://www.komoot.com/privacy
D.1. Legal Basis
Our presence on social media platforms is based on point (f) of Article 6 (1) GDPR. We have a legitimate interest in using social media as a promotional channel. We use these platforms to increase awareness of our company.
Depending on the design of the respective lead ad campaign, your personal data will be processed on the basis of your explicit consent pursuant to point (a) of Article 6 (1) GDPR (e.g. for the purpose of direct marketing or providing additional information about our products) or on the basis of our legitimate interest in effectively marketing our services pursuant to point (f) of Article 6 (1) GDPR. Your personal data will not be shared with third parties.
D.2. Withdrawal of consent
We have obtained your consent for the data processing described above in accordance with point (a) of Article 6 (1) GDPR. You may withdraw your consent at any time with future effect by disabling pixel tracking in the “Cookie Consent Tool” integrated on this website.
D.3. Joint Controllers
If you visit one of our social media profiles, your personal data may be processed. In such cases, we and the operator of the respective social network may act as joint controllers within the meaning of Article 26 GDPR, provided that we jointly determine the purposes and means of data processing and have an influence on such activities. Where possible, we have entered into joint controllership agreements with the operator of each social network in accordance with Article 26 GDPR.
Facebook/Instagram
Meta acknowledges joint responsibility with page operators for the processing of Insights data and assumes primary responsibility for such processing. Further information is available here: https://www.facebook.com/legal/terms/page_controller_addendum.
TikTok
You can find more information about each controller’s responsibilities here: https://ads.tiktok.com/i18n/official/policy/jurisdiction-specific-terms.
YouTube
YouTube, as the platform operator, and we, as the operator of a channel hosted on the platform, are jointly responsible for the data processing activities carried out via the channel in accordance with Article 26 GDPR. Further information is available here: https://policies.google.com/privacy?hl=en
Pinterest, as the platform operator, and we, as the operator of a channel hosted on the platform, are jointly responsible for the data processing activities carried out via the channel. If you would like to learn more about how Pinterest Europe Limited processes data, you can find further information in its privacy policy: https://policy.pinterest.com/en/privacy-policy.
Komoot
We assume that we and Komoot act as joint controllers within the meaning of Article 26 GDPR. Data processing is carried out by us and by Komoot. If you would like to learn more about how Komoot processes data, you can find further information in its privacy policy: https://www.komoot.com/privacy
Please note that, despite the fact that we act as joint controllers with the social network operators under Article 26 GDPR, we do not have full control over how these networks process data.
E. Amendments
We reserve the right to update this privacy policy to ensure that it always complies with the applicable legal requirements or to reflect certain changes in our activities, such as the launch of new social media channels. The new version of our privacy policy will take effect during your next visit.