Privacy Policy for Social Media
We attach great importance to the protection of your data and observe the legal data protection regulations. Here, you will find detailed information on how we handle your personal data
A. Data Controller
The data controller responsible for the processing of data on this website is Bayern Tourismus Marketing GmbH, represented by its managing director Barbara Radomski.
Bayern Tourismus Marketing GmbH
Arabellastraße 17
81925 München
Telefon: +49 (0) 89 212397-0
Telefax: +49 (0) 89 212397-99
E-Mail: tourismus@bayern.info
We have appointed the following entity as data protection officer:
c/o activeMind AG
Management- und Technologieberatung
Potsdamer Str. 3
80802 München
+49 89 919294-900
datenschutz@bayern.info
B. Data Subject Rights
You have the right to request the disclosure of information regarding any of your personal data held by us, as well as the correction, deletion or restricted processing of this data, if applicable. If necessary, you can also make use of your right of refusal or your right to data portability. You have the right to revoke your consent at any time without affecting the lawful compliance of any processing carried out on the basis of your consent until the point in time of revocation.
In addition, there is a right of appeal to a competent data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 Federal Data Protection Act [BDSG]). More information can be found at: https://www.bfdi.bund.de/DE/Buerger/Inhalte/Allgemein/Datenschutz/BeschwerdeBeiDatenschutzbehoereden.html?nn=343502
In principle, you may assert your rights as a data subject both vis-a-vis us and vis-a-vis the operator of the respective social media channel.
Please note that we have no influence over the data processing performed by the individual social networks. The corporate policy of the respective provider has a significant influence on the options available to us. In the event of the assertion of data subject rights, we can only forward these requests to the social media network operator.
For more information on how you may assert your data subject rights under Chapter V of the GDPR vis-a-vis the social media channels used, please refer to the linked data use policies or privacy statements in the section for the respective providers.
B.1. Right to Lodge an Objection on a Case-by-Case Basis
You have the right to lodge an objection, at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6 (1) lit. f) GDPR (processing of data on the basis of a balance of interests); this shall also apply to profiling based on this provision within the meaning of Article 4 (4) GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if said processing serves to assert, exercise or defend legal claims.
Recipient of the objection
The objection can be made informally with the subject “Objection”, stating your name, address and date of birth, and should be addressed to:
Bayern Tourismus Marketing GmbH
Arabellastraße 17
81925 München
Telefon: +49 (0) 89 212397-0
Telefax: +49 (0) 89 212397-99
E-Mail: tourismus@bayern.info
C. Data Security
We only handle personal data insofar as this is possible in accordance with data protection regulations. We also take all necessary technical and organisational security measures to adequately protect your personal data from unauthorised access and misuse at all times.
Insofar as we store or process personal data, this is done within a high-security computer centre. In order to protect the security of your data during transmission, we use encryption methods (e.g. TSL) via HTTPS. Our servers are secured by firewall and virus protection. Back-up and recovery procedures, as well as role and authorisation concepts, are an essential part of everything we do.
Our employees are obligated to observe the regulations stipulated under the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) when handling data.
D. Social Media Channels
A simple link will take you from our website to our presences on social media. We operate the following social media channels:
Facebook and Instagram
We are present on the social networks Facebook and Instagram
These platforms are provided by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland. We maintain these Facebook/Instagram pages, in order to inform users and interested parties about Bavaria as a leisure and travel destination.
We cannot exclude the possibility that a transfer of data to a third country, e.g. to servers located in the USA, may take place when our company websites are accessed via these social networks.
If you have a Facebook/Instagram profile and are logged in, Meta can, for example, analyse your usage behaviour and create a usage profile corresponding to your usage behaviour. This user data is regularly processed for market research and (personalised) advertising purposes.
Further information on the collection and use of data, as well as your rights and protection options, can be found at https://facebook.com/about/privacy and https://instagram.com/about/legal/privacy/
Contact options via Facebook/Instagram
If you contact us via Facebook and Instagram using instant messaging services – such as Facebook Messenger – your username, the description of your request and other personal data transmitted will be stored. Should you make use of such contact options, you are informed and hereby agree that your data will also be processed in accordance with the data protection declaration in the respective current version of the respective provider.
TikTok
We are represented as a company on the social network TikTok. TikTok is operated by the Chinese company ByteDance. For the European region, TikTok is provided by TikTok Technology Limited (registered office 10 Earlsfort Terrace, Dublin, D02 T380, Ireland) and TikTok Information Technologies UK Limited (6th Floor, One London Wall, London, EC2Y 5EB, United Kingdom).
We maintain this site, in order to inform users and interested parties about Bavaria as a leisure and travel destination.
We cannot exclude the possibility that a transfer of data to a third country may take place when you access our company website on TikTok.
Where data is transferred by TikTok to third countries without an adequacy decision issued by the EU Commission, TikTok refers to the use of standard contractual clauses to ensure adequate protection of EU citizens’ data. We would like to point out that this data transfer may be associated with a risk for the data subjects, as they can neither influence the processing (or storage) of their personal data, nor fully enforce the rights as a data subject guaranteed under the GDPR with regard to this type of data processing.
For more information about TikTok’s transfer of personal data to third countries, please visit: https://www.tiktok.com/legal/page/eea/transferee-countries/en
You can obtain a copy of the standard contractual clauses and further guarantees in the event of a transfer of your data to a third country by contacting us using the contact details provided in the “Contact us” section below.
We have no influence on the data collection and further processing by TikTok. Furthermore, it is not apparent to us regarding the extent, location and duration of the data being stored, to what extent TikTok complies with existing deletion obligations, what evaluations and links are made with the data, and to whom the data is forwarded.
If you have a TikTok profile and are logged in, TikTok may collect and process more information about you; e.g. analyse your usage behaviour and create a usage profile according to your usage behaviour.
If you wish to request information or exercise your user rights, you may do so by contacting us or TikTok.
Further information on the collection and use of data, as well as your rights and protection options, can be found at https://www.tiktok.com/legal/page/eea/privacy-policy/en and https://www.tiktok.com/legal/page/eea/terms-of-service/en
TikTok Insights
TikTok provides us with so-called page insights (analytics) for our TikTok site. This concerns aggregate data that allows us to understand how people interact with our site.
This data is pseudonymised, which means that we cannot assign it to a specific person. This function allows us to better analyse our site and adapt it to our users’s interests.
For more information, please visit: https://www.tiktok.com/creators/creator-portal/en-us/tiktok-content-strategy/understanding-your-analytics/
YouTube
We are also represented on YouTube. YouTube is a service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”)).
We maintain this presence, in order to inspire users and those interested in the leisure and travel destination of Bavaria.
We cannot exclude the possibility that a transfer of your data to a third country, e.g. to servers located in the USA, takes place when our YouTube channel is accessed. Your visit to our website may thereby be tracked by YouTube.
By using YouTube, your personal data will be collected, transferred, stored, disclosed and used by Google. Google analyses your user behaviour, and creates a corresponding usage profile, regardless of whether you have a Google Account. This data can be used to tailor content or advertising to you.
Further information on the collection and use of data, as well as your rights and protection options, can be found at https://policies.google.com/technologies/product-privacy and https://policies.google.com/privacy
We are represented on this technical platform and by means of the services of Pinterest Inc., 808 Brannan Street San Francisco, CA 94103-490, USA (hereinafter “Pinterest”). A simple link will take you from our website to our page on Pinterest.
If you access the page and are logged into your Pinterest account at the same time, Pinterest can directly assign the visit to our website to your Pinterest account.
If you do not want Pinterest to assign your data to your account, you must log out of Pinterest before visiting our website.
We would like to point out that any use of our Pinterest offer is your own responsibility, and that we are not aware of all the details of data processing at Pinterest at the present time. This applies, in particular, to the use of the interactive functions (e.g. sharing, commenting).
For further information, please refer to policy.pinterest.com/en-gb/privacy-policy
Komoot
We maintain a profile on Komoot. The provider is Komoot GmbH, Friedrich-Wilhelm-Boelcke-Straße 2, 14473 Potsdam, Germany. On our Komoot profile, we provide various maps for our tours.
When you access the site, data is already transferred to Komoot and potentially other companies, as well as possibly to countries outside the European Union.
The operator of Komoot uses cookies to automatically collect information about visitors to its website. This mainly concerns the following data:
- The type of device,
- Browser and operating system,
- IP address, the page that was accessed immediately before the visit to the Komoot website,
- any search terms entered into forms on the Komoot website, as well as pages accessed on Komoot and certain interactions with them.
Komoot uses this (among other things) to collect aggregated statistics on user behaviour and to improve the user experience. For more information on data processing by Komoot, please visit: https://www.komoot.com/privacy
D.1. Legal Basis
The legal basis for our social media presence is based on Art. 6 (1) Sentence 1 lit. f) GDPR. Our legitimate interest arises from the promotional function of social media. We use this to raise the profile of our company.
Depending on the focus of the Lead Ad Campaign, the legal basis for data processing is either your express consent pursuant to Art. 6 (1) lit. a) GDPR (e.g. for direct advertising measures or for further information on our products), or our legitimate interest in the optimal marketing of our offer pursuant to Art. 6 (1) lit. f) GDPR. This data will not be passed on to third parties.
D.2. Revocation of Consent
We have obtained your consent in accordance with Art. 6 (1) lit. a) GDPR for the processing of your data as described above. You may revoke your consent at any time with effect for the future by deactivating the pixel tracking in the “Cookie Consent Tool” integrated on this website.
D.3. Contract Governing Shared Responsibility
If you visit one of our social media sites, you trigger the processing of your personal data during such a visit. In this case, we are jointly responsible with the operator of the respective social network for the data processing operations within the meaning of Art. 26 GDPR, insofar as we actually make a joint decision with the operator of the social network regarding the data processing, and we also have an influence on the data processing. To the greatest extent possible, we have concluded contracts governing shared responsibility with the operators of the social networks in accordance with Art. 26 GDPR:
Facebook/Instagram
Meta acknowledges shared responsibility for Insights data with site operators and assumes primary responsibility, see: https://www.facebook.com/legal/terms/page_controller_addendum.
TikTok
Details on the different responsibilities in each case can be found here: https://ads.tiktok.com/i18n/official/policy/jurisdiction-specific-terms.
YouTube
YouTube – as the platform operator – and we – as the operator of a channel located on the platform – are jointly responsible for the data processing carried out via the respective channel pursuant to Art. 26 GDPR. For further information, please refer to https://policies.google.com/privacy?hl=en
Pinterest – as the platform operator – and we – as the operator of a channel located on the platform – are jointly responsible for the data processing carried out via the respective channel. For more information on data protection at Pinterest Europe Limited, please click here: https://policy.pinterest.com/en/privacy-policy.
Komoot
We assume that we and Komoot are jointly responsible for data processing pursuant to Art. 26 GDPR. Data processing takes place by us as well as Komoot. For more information on data processing by Komoot, please visit: https://www.komoot.com/privacy
Please note that, despite the existence of joint responsibility according to Art. 26 GDPR with the operators of social networks, we do not have full influence on the data processing of the individual social networks.
E. Amendment of our Data Protection Provisions
We reserve the right to adapt this privacy policy to ensure that it always complies with prevailing legal requirements, or to implement changes in the privacy policy, e.g. when introducing new social media channels. The new privacy policy will then apply to your next visit.