Data protection

In this data protection declaration we inform you about the processing of personal data when using our website.

Personal data is information relating to an identified or identifiable person. This includes, in particular, information that allows conclusions to be drawn about your identity, such as your name, your telephone number, your address or e-mail address. Statistical data that we collect when you visit our website, for example, and that cannot be linked to your person, do not fall under the concept of personal data.

You can print out or save this data protection declaration by using the usual functionality of your browser.

1. Contact Person

The contact person and so-called person responsible for the processing of your personal data when you visit this website within the meaning of the EU General Data Protection Regulation (GDPR) is Fränkisches Weinland Tourismus GmbH, Turmgasse 11, 97070 Würzburg, telephone: +49 931 37 23 35, e-mail: tourismus @fraenkisches-weinland.de

2. Data processing on our website

2.1. Calling up our website / access data

Every time you use our website, we collect the access data that your browser automatically transmits to enable you to visit the website. The access data includes in particular:

IP address of the requesting device;
Date and time of the request;
Address of the accessed website and the requesting website;
Information about the browser used and the operating system;
Online identifiers (e.g. device identifiers, session IDs).

The data processing of this access data is necessary to enable visits to the website and to ensure the permanent functionality and security of our systems. The access data is also temporarily stored in internal log files for the purposes described above in order to generate statistical information about the use of our website in order to further develop our website with regard to the usage habits of our visitors (e.g. if the proportion of mobile devices increases, with which the pages are accessed) and for general administrative maintenance of our website. The legal basis is Article 6 Paragraph 1 Sentence 1 Letter b GDPR.

The information stored in the log files does not allow any direct conclusions to be drawn about your person; in particular, we only store the IP addresses in an abbreviated, anonymous form. The log files are stored for 30 days and archived after subsequent anonymization.

2.2. Contact

You have various options for contacting us (e.g. via our contact form). In this context, we process the data you have given us exclusively for the purpose of communicating with you. The legal basis is Art. 6 Para. 1 lit. b GDPR. The data collected by us will be automatically deleted after your request has been processed in full, unless we still need your request to fulfill contractual or legal obligations (see section "Storage period").

2.3. Orders

During an ordering process (e.g. when ordering brochures), we collect the mandatory information required for contract processing:

Salutation;
First and Last Name;
Address.

Optionally, information such as an e-mail address is possible so that we can also contact you in this way if we have any questions. The legal basis for processing is Art. 6 (1) sentence 1 lit. b GDPR.

2.4. Sweepstakes

In the context of competitions, we use your data for the purpose of conducting the competition and notifying you of the winner. If necessary, you will find detailed information in the conditions of participation for the respective competition. The legal basis for the processing is the sweepstakes contract in accordance with Article 6 (1) sentence 1 lit. b GDPR.

2.5. Google Maps

Our website uses the Google Maps map service from Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). In order for the Google map material we use to be integrated and displayed in your web browser, your web browser must connect to a Google server, which may also be located in the USA, when you call up the contact page.

In the event that personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield. This gives Google the information that the contact page of our website was accessed from the IP address of your device. The legal basis is Art. 6 Paragraph 1 S. 1 lit. f GDPR, based on our legitimate interest in the integration of a map service, among other things to make contact.

If you call up the Google map service on our website while you are logged into your Google profile, Google can also link this event to your Google profile. If you do not wish to be assigned to your Google profile, you must log out of Google before calling up our contact page. Google stores your data and uses it for advertising, market research and personalized Google Maps display purposes. You can object to this data collection by contacting Google.

For more information, see Google's privacy policy and the additional terms of use for Google Maps.

2.6. Use of own cookies

Some of our services require us to use so-called cookies. A cookie is a small text file that is stored on your device by the browser. Cookies are not used to run programs or load viruses onto your computer. The main purpose of our own cookies is rather to provide you with an offer that is specially tailored to you and to make the use of our services as time-saving as possible.

Most browsers are set by default to accept cookies. However, you can adjust your browser settings so that cookies are rejected or only saved with prior consent. If you refuse cookies, not all of our offers can function properly for you.

We use our own cookies to enable you to use our website more comfortably and individually. These services are based on our aforementioned legitimate interests, the legal basis is Art. 6 (1) sentence 1 lit. f GDPR.

We also use cookies and similar technologies (e.g. web beacons) from partners for analysis and marketing purposes. This is described in more detail in the following sections.

2.7. Use of cookies and comparable technologies for analysis purposes

In order to improve our website, we use cookies and comparable technologies (e.g. web beacons) for statistical recording and analysis of general usage behavior based on access data. We also use analysis services to evaluate the use of our various marketing channels.

The legal basis for the data processing described in the following section is Article 6 Paragraph 1 Clause 1 Letter f GDPR, based on our legitimate interest in the needs-based design and continuous optimization of our website.

In the following list of the technologies we use, you will also find information on the possibility of objecting to our analysis measures using a so-called opt-out cookie. Please note that after deleting all cookies in your browser or later using a different browser and/or profile, an opt-out cookie must be set again.

Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses cookies and similar technologies to analyze and improve our website based on your user behavior. The data generated in this context can be transmitted by Google to a server in the USA for evaluation and stored there.

In the event that personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield. However, your IP address will be shortened before the usage statistics are evaluated, so that no conclusions can be drawn about your identity. For this purpose, Google Analytics on our website was expanded to include the code "anonymizeIP" to ensure that IP addresses are recorded anonymously.

Google will process the information obtained through the cookies in order to evaluate your use of the website, to compile reports on website activity for the website operator and to provide other services related to website activity and internet usage.

You can configure your browser so that it rejects cookies, or you can prevent the collection of data generated by cookies and related to your use of this website (including your IP address) and the processing of this data by Google by using the Download and install the browser add-on provided by Google. As an alternative to the browser add-on or if you access our website from a mobile device, please use this opt-out link. This will prevent future collection by Google Analytics within this website (the opt-out only works in the browser and only for this domain). If you delete your cookies in this browser, you must click this link again.

For more information, see Google's privacy policy.

2.8. Use of cookies and similar technologies to online advertising technologies

We also use cookies and similar technologies for advertising purposes. Some of the access data generated when using our website is used for interest-based advertising. By analyzing and evaluating this access data, we are able to show you personalized advertising on our website and on the websites of other providers. This means advertising that corresponds to your actual interests and needs.

The legal basis for the data processing described in the following section is Article 6 Paragraph 1 Sentence 1 Letter f GDPR based on our legitimate interest in advertising our products and services in a personalized form.

In the following section we would like to explain these technologies and the providers used for them in more detail.

The data collected includes in particular

the IP address of the device;
the date and time of access;
the identification number of a cookie;
the device identifier of mobile devices;
technical information about the browser and the operating system.

However, the data collected is only stored pseudonymously, so that no direct conclusions can be drawn about the person.

In the following descriptions of the technologies we use, you will also find information on the possibility of objecting to our analysis and advertising measures using a so-called opt-out cookie. Alternatively, you can exercise your objection by making the appropriate settings on the Truste or Your Online Choices websites, which provide bundled objection options from many advertisers. Both sites allow you to deactivate all ads at once for the listed providers using opt-out cookies or, alternatively, to make the settings for each provider individually. Please note that after deleting all cookies in your browser or later using a different browser and/or profile, an opt-out cookie must be set again.

This website uses "fonts.com", a font service provided by Monotype Imaging Holdings Inc. ("fonts.com"), Monotype GmbH, Horexstraße 30, 61352 Bad Homburg, Germany. Each time this website is accessed, files are loaded from a "fonts.com" server to display the text in a specific font. Your IP address can be transmitted to a "fonts.com" server and stored as part of the usual weblogs. "fonts.com" is responsible for the further processing of this information; please refer to the data protection notices of "Monotype Imaging Holdings Inc.)" for the relevant conditions and setting options. https://www.monotype.com/en/legal/privacy-policy/

2.10. Social Media

Our website uses social media plug-ins (such as the Like button) from the social networks Facebook Inc., 1601 Willow Road, Menlo Park, California, 94025, USA ("Facebook") and Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA (“Twitter”). The legal basis is Article 6 Paragraph 1 Clause 1 Letter f GDPR, based on our legitimate interest in you sharing our content via social networks and thereby increasing our reach. In the event that personal data is transferred to the USA, Facebook and Twitter have submitted to the EU-US Privacy Shield.

Facebook / Twitter receives the information that you have accessed the corresponding subpage of our online offer. This occurs regardless of whether you have a Facebook / Twitter account and are logged in there. If you are logged in to Facebook / Twitter, this data is assigned directly to your account. If you activate the activated plug-in and e.g. B. link the page, Facebook / Twitter also saves this information including date and time in your user account and publicly communicates this to your contacts and followers. If you do not wish to be associated with your profile on Facebook / Twitter, you must log out before activating the plug-in.

Facebook / Twitter stores this data as user profiles and uses it for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) to display needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. As a Facebook / Twitter member, you can deactivate advertising based on social activities, e.g. B. in the advertising preferences. You can also completely prevent the Facebook / Twitter social media plug-ins from loading with additional programs for your browser, e.g. with the Facebook blocker.

For more information see the data protection information from Facebook and the data protection information from Twitter.

2.11. Integration of Youtube Videos

We have embedded videos on our website that are stored on YouTube and can be played directly from our website. YouTube is a multimedia service provided by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA ("YouTube"), a group company of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google")

In the event that personal data is transferred to the USA, Google and the group company YouTube have submitted to the EU-US Privacy Shield. The legal basis is Article 6 Paragraph 1 Sentence 1 Letter f GDPR, based on our legitimate interest in the integration of video and image content.

By visiting our website, YouTube and Google receive the information that you have accessed the corresponding subpage of our website. This happens regardless of whether you are logged in to YouTube or Google or not. YouTube and Google use this data for advertising, market research and needs-based design of their websites. If you access YouTube on our website while you are logged into your YouTube or Google profile, YouTube and Google can also link this event to the respective profiles. If you do not wish to be assigned, you must log out of Google before accessing our website.

As shown above, you can configure your browser so that it rejects cookies, or you can prevent the collection of data generated by cookies and related to your use of this website and the processing of this data by Google by going to the Google settings for advertising disable the "Personalized advertising on the web" button. In this case, Google will only display non-personalised advertising.

For more information, see Google's privacy policy, which also applies to YouTube.

2.12. Use of the Online Booking Tool from OBS OnlineBuchungService GmbH

Our online presence uses the online booking tool (hereinafter “OBT”) from OBS OnlineBuchungService GmbH, Im Gewerbepark D 33, 93059 Regensburg (www.online-kk-service.de, hereinafter "OBS"). As part of the OBT, OBS processes the data as the responsible party. The information and provisions on data protection can be found in the OBS data protection declaration for the OBT, which you can call up at any time from the OBT or at https://online-buchung-service.de/datenschutzerklaerung-buchung/.

2.13. Integration of Relive Videos

We have also embedded videos on our website that are stored at Relive and can be played directly from our websites. Relive is a multimedia service provided by Relive B.V. Stationsplein 45 E1.154 3013 AK Rotterdam The Netherlands, www.relive.cc. The legal basis is Article 6 Paragraph 1 Sentence 1 Letter f GDPR, based on our legitimate interest in the integration of video and image content. When you visit our website, Relive receives the information that you have accessed the corresponding subpage of our website. Otherwise the video content cannot be displayed to you. For more information, see Relive's privacy policy at https://www.relive.cc/privacy.

2.14. OpenStreetMap

On our website we use the open source map service "OpenStreetMap" from the provider OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. To integrate the map material and to display it in your web browser, your web browser must connect to the servers of the OpenStreetMap Foundation. There is the possibility that information about the use of the website (including the IP address) is transmitted to these servers and stored. Data processing can be prevented by deactivating JavaScript in the browser. Please note that this means that the map display can only be used to a limited extent or not at all.

The legal basis for data processing is Article 6 Paragraph 1 Sentence 1 Letter f GDPR, based on our legitimate interest in the integration of a map service, among other things to explore excursion destinations, events, etc.

3. Sharing of Data

In principle, the data collected by us will only be passed on if:

you have given your express consent to this in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR;
the disclosure is required in accordance with Article 6 Paragraph 1 Clause 1 Letter f GDPR to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data;
we are legally obliged to pass on data according to Article 6 Paragraph 1 Clause 1 Letter c GDPR;
or
this is permitted by law and is required according to Article 6 Paragraph 1 Sentence 1 Letter b GDPR for the processing of contractual relationships with you or for the implementation of pre-contractual measures that take place at your request.

Part of the data processing can be carried out by our service providers. In addition to the service providers mentioned in this data protection declaration, this may include data centers that store our website and databases, IT service providers that maintain our systems and platforms for online booking of accommodation providers. If we pass on data to our service providers, they may only use the data to fulfill their tasks. The service providers have been carefully selected and commissioned by us. They are contractually bound to our instructions, have appropriate technical and organizational measures to protect the rights of the data subjects and are regularly checked by us.

4. Duration of Storage

In principle, we only store personal data for as long as is necessary to fulfill contractual or legal obligations for which we collected the data. We then delete the data immediately, unless we still need the data until the end of the statutory limitation period as evidence for civil claims or due to statutory retention requirements.

For evidence purposes, we must keep contract data for three years from the end of the year in which the business relationship with you ends. Any claims become statute-barred according to the statutory limitation period at the earliest at this point in time.

Even after that, we still have to store some of your data for accounting reasons. We are obligated to do so due to legal documentation obligations that may result from the German Commercial Code, the Tax Code, the Banking Act, the Money Laundering Act and the Securities Trading Act. The periods specified there for storing documents range from two to ten years.

5. Your Rights

You have the right to request information about the processing of your personal data by us at any time. We will explain the data processing to you as part of the provision of information and provide you with an overview of the data stored about you.

If data stored by us is incorrect or no longer up-to-date, you have the right to have this data corrected. You can also request the deletion of your data. If, in exceptional cases, deletion is not possible due to other legal provisions, the data will be blocked so that they are only available for this legal purpose.

You can also have the processing of your data restricted, e.g. if you believe that the data we hold is incorrect.

You also have the right to data portability. This means that we can send you a digital copy of the personal data you have provided if you request it.

In order to assert your rights described here, you can contact us at any time using the contact details given above. This also applies if you like to receive copies of guarantees to prove an appropriate level of data protection.

You also have the right to object to data processing based on Article 6 Paragraph 1 lit. e or f GDPR. Finally, you have the right to complain to the data protection supervisory authority responsible for us. You can assert this right with a supervisory authority in the member state of your place of residence, your place of work or the place of the alleged infringement. The responsible supervisory authority is: Bavarian State Office for Data Protection Supervision, postal address: Postfach 606, 91511 Ansbach.

6. Right of Withdrawal and Objection

In accordance with Article 7 Paragraph 2 GDPR, you have the right to revoke any consent you have given us at any time. As a result, we will no longer continue the data processing based on this consent for the future. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the point of revocation.

Insofar as we process your data on the basis of legitimate interests in accordance with Art. 6 (1) lit. f GDPR, you have the right, in accordance with Art.21 GDPR to object to data processing. If you object to data processing for direct marketing purposes, you have a general right to object, which we will implement without giving reasons.

If you like to make use of your right of revocation or objection, an informal message to the contact details given above will be sufficient.

7. Data Security

We maintain current technical measures to ensure data security, in particular to protect your personal data from dangers during data transmission and from third parties gaining knowledge. These are adapted in accordance with the current state of the art. To secure the personal information you provide on our website, we use Transport Layer Security (TLS), which encrypts the information you enter.

8. Changes to the Privacy Policy

We occasionally update this data protection declaration, for example if we adapt our website or if the legal or official requirements change.