Data Privacy Statement

Last Updated: October 2024

The company Rhein-Mosel-Halle (hereinafter: "RMH") appreciates your visit to our website and your interest in our offers, products and services. The protection of your personal data (hereinafter: "data") during use is an important concern for us and we want you to feel comfortable and secure when visiting our website. Compliance with the statutory data protection regulations is a matter of course for us.

In principle, it is possible to use our website without having to provide your data. Below we explain whether and what information we collect and use on our websites during your visit.

This privacy policy applies to the website www.koblenz-kongress.de.

1. IDENTITY OF THE CONTROLLER

Responsible for data processing within the meaning of Art. 4 No. 7 GDPR (EU General Data Protection Regulation) is the

Rhein-Mosel-Halle Eigenbetrieb der Stadt Koblenz
Represented by Koblenz-Touristik GmbH
Julius-Wegeler-Straße 4, 56068 Koblenz

can be contacted by phone: 0261 91481-0, fax: 0261 91481-22, e-mail info@koblenz-touristik.de

2. DATA PROTECTION OFFICER

Koblenz-Touristik has effectively appointed a data protection officer at

3rd Mind Business Consulting GmbH
Langer Weg 60
65760 Eschborn

If you have any questions about data protection, please contact Mr. Frank Giebel at DSB-Service@3rd-mind.de

Please note that if you contact us by standard e-mail, the confidentiality of the information transmitted cannot be guaranteed due to the (technical) nature of e-mail transmission. We therefore recommend that you send confidential information by post.

3. PERSONAL DATA

This is any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person (human being) is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

This basically means all direct or indirect information that leads to your identity. This includes, for example, information such as name, address, telephone number, e-mail address, account data, credit/debit card data, but also fingerprints, photos, etc.

4. PROCESSING PURPOSES AND LEGAL BASES

If you provide us with your data, its use by us is regularly based on the contract concluded with you or pre-contractual negotiations on the basis of Art. 6 (1) lit. b GDPR or on your voluntary consent in accordance with Art. 6 (1) lit. a GDPR, e.g. to process your inquiries, use our web forms or similar.

Depending on the purpose of the processing, we may, as the City of Koblenz's own company and therefore as a public body, also process data on the basis of Art. 6 (1) lit. e GDPR in conjunction with Section 3 LDSG RP (Landesdatenschutzgesetz RP). § Section 3 LDSG RP (Rhineland-Palatinate State Data Protection Act) for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

Web forms:

If we use web forms and your consent is required for the transmission and processing of the information provided therein, you will find the consent text directly below the respective form.

After submitting the corresponding web form, it is then transmitted to our systems and stored for the purpose of executing a contract, an application or a request for information etc. until the process has been completed. Data will only be stored for longer if there is a legal obligation to retain it (e.g. under tax law).

The data you enter there yourself is regularly

  • Your first name and surname(for identification, reservation, registration, etc.)
  • Your postal address (for sending requested information / tickets by post)
  • Your e-mail address (for electronic contact / reservation / registration or sending information / tickets)
  • if applicable, your telephone number (for information requested by telephone, coordination, queries etc.)
  • Your desired booking period, possibly with details of the number of people, program requests, etc. (for coordination and preparation of offers)
  • Your request itself (free text)

The special processing purposes, options for revocation/objection and other (also participation) conditions are specified in the texts under the respective forms. Please note this information before submitting your data from the respective forms.

Automatically collected data when you visit our websites:

In log files ("server log files"), via search engines and/or forms, data is automatically collected when you use our websites, which your web browser / provider automatically transmits to our provider. When you visit our websites, our web servers temporarily store the following as standard

  • the web pages you visit on our website as well as the date, time and duration of your visit
  • the type of browser you are using, its version and the operating system you are using
  • the search engine you may have used
  • the names of any files downloaded
  • the (anonymized) IP address at the time of access
  • the type of device used
  • the website from which you visit us ("referrer URL").

If we evaluate this technical data, this is done anonymously and to ensure a smooth connection to the website, to ensure convenient use of our website, to evaluate and improve system security and stability and for other administrative purposes on the legal basis of Art. 6 (1) lit. e GDPR i.V.m. § 3 LDSG RLP.

This data is not merged with other data sources. However, we reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use.

E-mail newsletter:

If we offer a newsletter service on our website and you register for this, we require your e-mail address for delivery. You can provide further information on a voluntary basis. By submitting your data entered in the newsletter registration form, you agree that we may process it exclusively for the purpose of sending our newsletter to your specified e-mail address and documenting your consent. Your data will not be passed on to third parties. The processing is based on Art. 6 (1) lit. a GDPR. You will first receive an automated email containing a link that you should click on to activate your subscription to the newsletter. In this way, we prevent misuse of the email address you have provided and can ensure that you have actually registered yourself. We will not send you any newsletters without completing this so-called "double opt-in procedure".

You can revoke your consent at any time with effect for the future, e.g. via an unsubscribe link in the newsletter or via an unsubscribe form.

Other purposes:

Data may also be processed on the basis of Art. 6 (1) lit. e GDPR i.V.m. § Section 3 LDSG RLP for the establishment, assertion or defense of legal claims in these contexts.

5. RECIPIENTS OR CATEGORIES OF RECIPIENTS / TRANSFER TO THIRD COUNTRIES

We host our websites exclusively in data centers in Germany or in the EU.

Your data will not be passed on, sold or otherwise transferred to third parties unless this is necessary and permissible within the scope of the purposes and legal bases set out above or if you have expressly consented to this.

Otherwise, your data will be processed on our behalf on the basis of Art. 28 GDPR (order processing), e.g. for external services for the operation of our IT infrastructure.

In addition, data processing and its transmission to state institutions and authorities entitled to receive information is only carried out within the framework of the relevant laws or if we are obliged to do so by court order (see Art. 6 (1) lit. c GDPR).

6. AUTOMATED DECISION-MAKING / PROFILING

Automated decision-making / profiling or scoring within the meaning of Art. 22 GDPR does not take place.

7. CRITERIA FOR STORAGE DURATION AND DELETION

The storage period of your data depends on the processing purposes (see above) or the statutory retention, limitation and deletion periods. As a rule, it is stored for the duration of the processing purposes, contractual relationship or similar with us. Longer (access-protected) storage only takes place in accordance with the relevant statutory retention obligations (e.g. for accounting and tax purposes) or for the exercise, assertion or defense of legal claims.

If your data is no longer required for the aforementioned purposes, including statutory retention obligations, it will be deleted within the statutory periods.

For technical reasons, data may be duplicated in backup files and mirror copies. Such copies may only be deleted with a time delay for technical reasons.

8. COOKIES

A cookie is a small data package in the form of a text file that is transmitted from your device to your browser when you visit a website and stored on your computer. Cookies do not regularly cause any damage to your computer, nor do they contain viruses or personal data. Cookies are primarily used to ensure basic technical functions of the website, such as navigation or shopping cart and booking functions, as well as to store user information during or after visiting a website. This includes, for example, language settings for multilingual websites, a login status or the point up to which a video was viewed so that it can be played at the same point on the next visit. This may also include related technologies with the same function, which store pseudonymized user data in so-called "user IDs", for example.

Some cookies, especially from third-party providers, transfer their content and other information about visitors to the respective locations, including to third countries, which is why your consent is required.

This website uses the following cookies:

  • Strictly necessary or "essential" cookies are absolutely necessary for the proper technical operation of a website or for reasons of information security. These include, for example, booking functions or your preferences for the storage of cookies (see below).
  • Statistical and third-party cookies: No personal data is analyzed for the use of MATOMO, nor is it transferred to third countries. However, we require your consent for other third-party cookies (e.g. for the integration of a script to save the last page accessed). You regularly give this consent via a manual "double-click" solution directly on the element or via our cookie consent box (hereinafter: "CCB", see below).
  • Cookies for external media: Your consent is required for the integration and display of YouTube videos, for example, because this would regularly require data to be transferred to third countries. Content from video and social media platforms is blocked by default. You give your consent either via a manual "double-click" solution or via our CCB.

Legal basis for the use of cookies

In principle, we do not process any personal data with the help of cookies unless this would be necessary for a function of this website for the fulfillment of a contract with you, e.g. for bookings (see Art. 6 (1) lit. b or 49 (1) lit. b GDPR) or on the basis of your consent (see Art. 6 (1) lit. a or 49 (1) lit. a GDPR). In any other cases, we process purely technical data without personal reference on the basis of Art. 6 (1) lit. e GDPR in conjunction with § 3 LDSG RP for a properly functioning website, an economical and secure operation of the same and the optimization of our online offer.

Effective submission and revocation of consent to cookies

Before setting cookies on the legal basis of consent, we ask you to give your consent directly for this function by actively clicking on it or via our "Cookie Consent Box (CCB)". You can revoke this consent at any time with effect for the future by closing the browser or via the CCB. If this is not the case, only the technically absolutely necessary cookies are set, the use of which is based on our interest and the interest of the users in the expected security and functionality of our website. You can access the CCB via a moving symbol on the page.

Basic settings via your browser

Irrespective of the respective legal basis for the setting of cookies (see above) and the technology used (cookie banner, cookie box), you can define the basic management of cookies via the browser you use; these then apply regularly to all websites, in that your browser

  • Informs you in principle about the setting of cookies,
  • Only allowing cookies in individual cases, excluding cookies for certain cases or in general, or
  • Automatically deleting cookies from your computer when you close your browser.

To do this, please follow the instructions in your browser manual.

Cookie block from online services (without guarantee of proper function)

You can also object to the use of cookies for online marketing purposes by third-party services, in cases of "tracking" via http://optout.aboutads.info (in English) and www.youronlinechoices.com/ (also in German) online.

Cookie management via our cookie consent box (CCB)

You can give your consent (activation of cookies) and withdraw your consent(de-activation of cookies) elegantly via our "cookie box", which automatically appears on your screen the first time you visit our website. You can access the "cookie box" at any time via the corresponding (moving) symbol on the page. Deactivation is just as easy as activation (consent): by checking or unchecking the corresponding box. Exceptions are, as already mentioned, the technically absolutely necessary ("essential") cookies for the proper and secure functioning of our website (see above)

Please note that deactivating cookies may restrict certain functions of our website.

9. USE OF MATOMO

We use Matomo software to statistically analyze the use of this website. This is an open source application. The Matomo software uses cookies (see above) and stores the IP address of the requesting end device or router in anonymized form. Anonymization takes place immediately after the IP address is processed (when the page is accessed) and before it is stored. This is done by shortening the IP address by the last octet in accordance with the resolutions of the data protection conference of the data protection supervisory authorities of the federal and state governments (DSK). This means that no conclusions can be drawn about you as a website user. Matomo then collects certain technical information, e.g.

  • Browser type and version and operating system used
  • Device type, model and brand as well as screen resolution
  • search engine used
  • websites visited on our site, including length of visit, search terms and keywords if applicable
  • Date and time of the visit
  • Location of the visit (continent, country, region, city)
  • Browser language.
  • The number of visitors to each individual website,
  • The internet provider used.

10. USE OF SCRIPT LIBRARIES

This website regularly uses so-called "web fonts" from Google (see above) for the uniform display of fonts. When you call up a page, your browser automatically loads the required fonts into its browser cache. We regularly store these fonts locally on our servers, i.e. no connection needs to be established with the transmission of your IP address to the Google servers.

However, it cannot be completely ruled out that your browser may nevertheless establish a connection to Google servers for these or other purposes, through which Google ultimately becomes aware that our website has been accessed via your IP address.

If your browser does not support web fonts, a standard font will be used by your computer.

You can find more information about Google Web Fonts at https://developers.google.com/fonts/faq and in Google's privacy policy: https: //www.google.com/policies/privacy/.

11. INTEGRATION OF YOUTUBE VIDEOS

We integrate videos from YouTube (belonging to Google, see above) on our websites via corresponding plug-ins in our online offer on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR. This data transfer to a third country is legitimized by an adequacy decision of the EU Commission in conjunction with the EU-US Data Privacy Framework (DPF), the US company is certified accordingly according to the US Department of Commerce, see https://www.dataprivacyframework.gov/s/data-protection-authorities). The videos are or will be regularly stored on www.youtube.com and can be played directly from our website. These are primarily integrated in "extended data protection mode", i.e. no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in the following paragraph be transmitted. We have no influence on this data transfer.

You give your consent through the so-called "double-click" solution, i.e. as long as you do not click on a YouTube video marked accordingly, it will neither be played nor will data be transferred to the YouTube servers. Only when you explicitly click on the video (again) will the streaming service start. A connection to the YouTube servers in the USA is then established and YouTube receives the information that you have accessed the corresponding subpage of our website. This occurs regardless of whether YouTube provides a user account that you are logged into or whether no user account exists. If you are logged in to YouTube / Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your YouTube profile, you must log out of your account before activating the video. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube or Google to exercise this right.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in their privacy policy. There you will also find further information on your rights and settings options to protect your privacy under the current link www.google.de/intl/de/policies/privacy.

12. CHILDREN & ADOLESCENTS

Persons under the age of 18 should only transmit their personal data on the Internet with the consent of their parents or legal guardians. We do not request such information from children and young people, nor do we collect it, let alone pass it on to third parties. Exceptions are special tickets as part of special offers for this group of people and are marked accordingly.

13. DATA SECURITY

We have taken technical and organizational security measures to protect your data from loss, destruction, manipulation and unauthorized access and in particular to protect confidentiality, availability and (data) integrity, e.g. by storing it in data centers only in Germany or the EU. All employees and all persons involved in data processing (including contracted service providers) have been obliged by us to maintain confidentiality, to comply with data protection regulations and to handle personal data with care.

To protect the data during transmission, we regularly encrypt it using SSL (Secure Sockets Layer) or TLS (Transport Layer Security) where possible. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and a lock symbol is displayed in the address line of the browser.

Our security measures are continuously adapted in line with technological developments.

14. YOUR RIGHTS AS A DATA SUBJECT

As a data subject, authorized or otherwise entitled person, you have the possibility to assert the following rights against us at any time in writing or by e-mail, provided that there are no contractual or legal provisions to the contrary or the processing is necessary for other reasons.

To do so, please use the contact options under Section 2 (Data Protection Officer) of this declaration.

  • Right to information: You can obtain information about your personal data stored by us at any time. Please only submit requests for information by letter or e-mail. For data protection reasons and due to a lack of qualified identification options, no information will be provided by telephone.
  • Right to rectification: If we process your personal data directly and you discover incorrect information or a need to update it, you are welcome to inform us of this for correction purposes. In the event of significant changes (e.g. name changes due to marriage or similar), please enclose appropriate supporting documents with your request.
  • Right to erasure: You have the right to request that we erase your personal data at any time. Please note that we are legally obliged to retain certain data in accordance with the statutory retention obligations. We will then inform you of these data categories.
  • Right to restriction: You can request that we restrict the processing of your personal data at any time.
  • Right to data portability (data export): As you do not generally provide us with any personal data via our websites, we cannot offer you a classic data export function for this purpose. In any case, we will examine your request in accordance with the legal provisions and technical feasibility and will contact you immediately regarding implementation.
  • Right of objection / revocation: You can object to the processing of your personal data by us at any time or revoke any consent you have given with effect for the future.
  • Right to lodge a complaint with the supervisory authorities: You have the right to lodge a complaint with your competent state data protection supervisory authority, if you are of the opinion that the processing of data concerning you violates the GDPR. You can find the address on the website of the Federal Commissioner for Data Protection and Freedom of Information in Berlin (BfDI).

15. COMPETENT DATA PROTECTION SUPERVISORY AUTHORITY

The following supervisory authority is responsible for Rhein-Mosel-Halle

The State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate
Hintere Bleiche 34, 55116 Mainz

16. LINKS TO OTHER WEBSITES

If you use links to external websites that are offered on our website, our data protection information does not extend to these external websites.

At the time the links were created, we were able to satisfy ourselves of the correctness of the linked website(s) in terms of content and security and we check this regularly. However, we have no influence on the continued compliance with data protection and security regulations of other providers or changes to content.

If you click on links to external websites that are displayed on our website, these external websites may collect user data if you click on these links or otherwise follow the instructions of these external websites, especially if you are logged in to other platforms or similar. We have no control over the data that is collected voluntarily or involuntarily via third-party advertisements or websites. Therefore, for your own safety, please also inform yourself on the websites of the other providers about the data protection declarations provided there.

If you become aware of an "unsafe" link from our applications, please inform us immediately so that we can investigate the matter. Thank you very much.

17. CHANGES TO OUR DATA PROTECTION INFORMATION

We reserve the right to change our security and data protection measures accordingly if this becomes necessary due to the legal situation and technical developments. In such cases, we will also adapt this document.

Please therefore note the current version at the beginning of this document.

18. FURTHER INFORMATION

If you would like further information that is not provided in this data protection notice or if you would like further information on a specific point, please contact our data protection officer directly at DSB-Service@3rd-mind.de.