Data protection

1 Subject matter and controller

1.1 The subject of data protection is "personal data"
The GDPR defines "personal data" as any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. (Art. 4 No. 1 GDPR)
It is possible to use our website without providing personal data. Different regulations may apply to the use of individual services on our website, which are explained separately below in this case. Your personal data (e.g. name, address, e-mail, telephone number, etc.) will only be processed by us in accordance with the provisions of German data protection law. Data is personal if it can be clearly assigned to a specific natural person. The legal basis for data protection can be found in the Federal Data Protection Act (BDSG), the Digital Services Act (DDG) and the EU General Data Protection Regulation (GDPR).
The following regulations inform you about the type, scope and purpose of the collection, use and processing of personal data by the provider.

1.2 Controller (Art. 4 No. 7 GDPR)
The controller in charge of the processing of personal data in connection with the use of the website www.eifel.info is
Eifel Tourismus (ET) Gesellschaft mbH
Kalvarienbergstraße 1
D - 54595 Prüm
Phone: +49 6551 9656-0
Fax: +49 6551 9656-96
Email: info@eifel.info
Managing Director: Wolfgang Reh
Data Protection Officer: Steffen Wagner

We would like to point out that Internet-based data transmission is subject to security vulnerabilities, making complete protection against access by third parties impossible. To protect the security of your personal data during transmission, we use SSL encryption (Secure Socket Layer).

2. use of the website

The following regulations inform you about the type, scope and purpose of the collection, use and processing of personal data by Eifel Tourismus GmbH:

2.1. server data
Scope and purpose of data processing
The legitimate interest of the controller lies in the provision of a website for the provision of information and services on the Internet. The central objectives of Eifel Tourismus GmbH are set out in Section 2 (1) to (3) of the partnership agreement: The object of the company is the promotion of regional tourism.
The provision of your data is necessary in order to be able to access the operator's website. Failure to provide it would mean that the website could not be accessed and the services of Eifeltourismus GmbH could not be used and the central objectives of Eifel Tourismus GmbH could not be pursued.
For technical reasons, the following data, which your Internet browser transmits to us or to our web provider, is recorded (so-called server log files):

Browser type and version
Operating system used
Website from which you visit us (referrer URL)
Website that you visit
Date and time of your access
Your Internet Protocol (IP) address.

Legal basis
Art. 6 GDPR (6) 1b:
"Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract."
Supplementary to this
Art. 6 GDPR (6) 1f:
"Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child."

Duration of storage
Your IP address will be deleted or anonymized after the end of use
The log files are evaluated by the operator in anonymized form in order to further improve the website and make it more user-friendly.

2.2 Contact form
Scope and purpose of data processing
If you would like to contact Eifel Tourismus GmbH, a contact form is available for this purpose. You must provide the following information in this form:

Surname
e-mail address
Your message

You can also provide the following information voluntarily:

Salutation
First name

Eifel Tourismus GmbH uses your data to respond to your contact request and to send you any information you may have requested.

Duration of storage
The processed personal data will be deleted after expiry of the legal storage obligations and fulfillment of the purpose, unless the person responsible has a legitimate interest in further storage.

2.3 Cookies
Scope and purpose of data processing
Eifel Tourismus GmbH uses cookies to collect and store data. Cookies are small files that make it possible to store specific information relating to the device on the user's access device (PC, tablet, smartphone, etc.). On the one hand, they serve the user-friendliness of the website and thus the users (e.g. storage of login data). On the other hand, they are used to collect statistical data on the use of the website and to be able to analyze it to improve the offer. The users themselves can influence the use of cookies. Most browsers have an option to restrict or completely prevent the storage of cookies. Please read the instructions for your browser. However, it should be noted that the use of the website and ease of use will be restricted without cookies.
You can manage many online advertising cookies from companies via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/uk/your-ad-choices/.

Duration of storage
Temporary cookies are automatically deleted when you close your browser (session cookies). Persistent cookies, on the other hand, have a maximum lifespan of up to 20 days. This type of cookie enables you to be recognized when you return to the website after leaving it.

2.4 Newsletter
Scope and purpose of data processing
Eifel Tourismus GmbH informs you about additional offers and news about the region by means of an email newsletter. This requires you to provide your e-mail address. Further information to personalize the newsletter is voluntary.
The double opt-in procedure is used to send the newsletter.
You will only receive a newsletter by e-mail if you have expressly confirmed that the newsletter service should be activated. After you have activated the service, you will receive a notification e-mail with an activation link. You will not receive the actual newsletter until you click on this link.

Legal basis
Art. 6 GDPR (6) 1a:
"The data subject has given consent to the processing of personal data concerning him or her for one or more specific purposes."

Duration of storage
You can deactivate the newsletter at any time. To do so, please contact Eifel Tourismus GmbH or use the unsubscribe link provided in every newsletter.
The personal data processed for the purpose of sending the newsletter will be deleted unless the controller has a legitimate interest in further storage. In any case, only the data that is absolutely necessary to achieve the relevant purpose will continue to be stored.

2.5 Bookings
You can book accommodation on the website. To do so, you must provide the following data:

Salutation
First name
Surname
Street, house number
Zip code, town
Country
e-mail address

Your data will be used to process your booking and passed on to the accommodation accordingly.

Duration of storage
The personal data processed for the purpose of processing bookings and handling contracts will be deleted after expiry of the statutory retention obligations, unless the controller has a legitimate interest in further storage. In any case, only the data that is absolutely necessary to achieve the relevant purpose will continue to be stored.

2.6 Non-binding booking inquiries
You can send a non-binding booking inquiry to the operator using a special contact form. To do so, you must provide the following data:

First name
Surname
e-mail address

Your data will be used to process the booking request and prepare a quote.

Duration of storage
The personal data processed for the purpose of processing a non-binding booking request will be deleted unless the controller has a legitimate interest in further storage. In any case, only the data that is absolutely necessary to achieve the relevant purpose will continue to be stored.

2.7 Ordering brochures
You have the option of ordering various brochures on the website. To do so, you must provide the following data:

Salutation
First name
Surname
Street, house number
Zip code, town
Country
E-mail address

Your data will be used to send you the brochure you have ordered.

Duration of storage
The personal data processed for the purpose of sending brochures will be deleted unless the controller has a legitimate interest in further storage. In any case, only the data that is absolutely necessary to achieve the relevant purpose will continue to be stored.

3. data protection provisions about the application and use of Facebook

On this website, the controller has integrated components of the enterprise Facebook. Facebook is a social network.
A social network is a social meeting place operated on the Internet, an online community that generally enables users to communicate with each other and interact in virtual space. A social network can serve as a platform for the exchange of opinions and experiences or enable the Internet community to provide personal or company-related information. Facebook enables users of the social network to create private profiles, upload photos and network via friend requests, among other things.
The operating company of Facebook is Meta Platforms, Inc, 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the USA or Canada, the controller for the processing of personal data is Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Each time one of the individual pages of this website is accessed, which is operated by the controller and on which a Facebook component (Facebook plug-in) has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective Facebook component to download a representation of the corresponding Facebook component from Facebook. A complete overview of all Facebook plug-ins can be accessed at https://developers.facebook.com/docs/plugins/?locale=de_DE. During the course of this technical procedure, Facebook gains knowledge of what specific sub-page of our website was visited by the data subject.
If the data subject is logged in at the same time on Facebook, Facebook detects with every call-up to our website by the data subject-and for the entire duration of their stay on our Internet site-which specific sub-page of our Internet page was visited by the data subject. This information is collected by the Facebook component and assigned by Facebook to the respective Facebook account of the data subject. If the data subject clicks on one of the Facebook buttons integrated on our website, for example the "Like" button, or if the data subject makes a comment, Facebook assigns this information to the personal Facebook user account of the data subject and stores this personal data.
Facebook always receives information via the Facebook component that the data subject has visited our website if the data subject is logged in to Facebook at the same time as accessing our website; this takes place regardless of whether the data subject clicks on the Facebook component or not. If the data subject does not want this information to be transmitted to Facebook, they can prevent the transmission by logging out of their Facebook account before accessing our website.
The data policy published by Facebook, which is available at https://de-de.facebook.com/about/privacy/, provides information about the collection, processing and use of personal data by Facebook. It also explains the setting options Facebook offers to protect the privacy of the data subject. In addition, various applications are available that make it possible to suppress the transmission of data to Facebook. Such applications can be used by the data subject to suppress data transmission to Facebook.

4. data protection provisions about the application and use of Google AdSense

The controller has integrated Google AdSense on this website. Google AdSense is an online service that enables advertising to be placed on third-party websites. Google AdSense is based on an algorithm that selects the advertisements displayed on third-party sites to match the content of the respective third-party site. Google AdSense allows interest-based targeting of the Internet user, which is implemented by generating individual user profiles.
The operating company of the Google AdSense component is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The purpose of the Google AdSense component is the integration of advertisements on our website. Google AdSense places a cookie on the information technology system of the data subject. What cookies are has already been explained above. By setting the cookie, Alphabet Inc. is enabled to analyze the use of our website. Each time one of the individual pages of this website is accessed, which is operated by the controller and on which a Google AdSense component has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective Google AdSense component to transmit data to Alphabet Inc. for the purpose of online advertising and billing of commissions. During the course of this technical procedure, Alphabet Inc. gains knowledge of personal information, such as the IP address of the data subject, which serves Alphabet Inc. inter alia to understand the origin of visitors and clicks, and subsequently create commission settlements.
The data subject may, as stated above, prevent the setting of cookies through our website at any time by means of a corresponding adjustment of the web browser used and thus permanently deny the setting of cookies. Such an adjustment to the Internet browser used would also prevent Alphabet Inc. from setting a cookie on the information technology system of the data subject. In addition, a cookie already set by Alphabet Inc. can be deleted at any time via the Internet browser or other software programs.
Google AdSense also uses so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in Internet pages to enable log file recording and log file analysis, which allows statistical evaluation to be carried out. Based on the embedded tracking pixel, Alphabet Inc. can recognize whether and when a website was opened by a data subject and which links were clicked on by the data subject. Tracking pixels are used, among other things, to evaluate the flow of visitors to a website.
Personal data and information, which also includes the IP address and is necessary for the collection and billing of the advertisements displayed, is transferred to Alphabet Inc. in the United States of America via Google AdSense. This personal data is stored and processed in the United States of America. Alphabet Inc. may pass on this personal data collected via the technical process to third parties.
Google AdSense is explained in more detail at this link https://www.google.de/intl/de/adsense/start/.

5. data protection provisions about the application and use of Google Analytics 4 (with anonymization function)

The controller has integrated the Google Analytics component (with anonymization function) on this website. Google Analytics is a web analysis service. Web analysis is the collection, gathering and evaluation of data about the behavior of visitors to websites. Among other things, a web analysis service collects data on the website from which a data subject came to a website (so-called referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. Web analysis is mainly used to optimize a website and for the cost-benefit analysis of Internet advertising.

The operating company of the Google Analytics component is Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The data controller uses the addition "_gat._anonymizeIp" for web analysis via Google Analytics. This addition is used by Google to shorten and anonymize the IP address of the data subject's Internet connection if our website is accessed from a member state of the European Union or from another state party to the Agreement on the European Economic Area.

The anonymization of your IP address is already automatically preset in Google Analytics. The purpose of the Google Analytics component is to analyze the flow of visitors to our website. Google uses the data and information obtained, among other things, to evaluate the use of our website, to compile online reports for us that show the activities on our website, and to provide other services related to the use of our website.

Google Analytics uses AI to predict the behavior of individual visitor groups. Changing customer needs are tracked and forecasts can be made for future user behavior.

Google Analytics places a cookie on the data subject's IT system. What cookies are has already been explained above. By setting the cookie, Google is enabled to analyze the use of our website. Each time one of the individual pages of this website is accessed, which is operated by the data controller and on which a Google Analytics component has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. During the course of this technical procedure, Google gains knowledge of personal information, such as the IP address of the data subject, which serves Google, inter alia, to understand the origin of visitors and clicks, and subsequently create commission settlements.

The cookie is used to store personal information, such as the access time, the location from which access was made and the frequency of visits to our website by the data subject. Each time our website is visited, this personal data, including the IP address of the Internet connection used by the data subject, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical process to third parties.

The data subject may, as stated above, prevent the setting of cookies through our website at any time by means of a corresponding adjustment of the web browser used and thus permanently deny the setting of cookies. Such a setting of the Internet browser used would also prevent Google from placing a cookie on the data subject's IT system. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.

Furthermore, the data subject has the option of objecting to and preventing the collection of data generated by Google Analytics relating to the use of this website and the processing of this data by Google. To do this, the data subject must download and install a browser add-on from the link tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data and information about visits to websites may be transmitted to Google Analytics. The installation of the browser add-on is considered an objection by Google. If the data subject's IT system is deleted, formatted or reinstalled at a later date, the data subject must reinstall the browser add-on in order to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by the data subject or another person who is attributable to their sphere of control, it is possible to reinstall or reactivate the browser add-on.

Further information and the applicable data protection provisions of Google may be retrieved under https://www.google.de/intl/de/policies/privacy/ and under www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail at this link https://www.google.com/intl/de_de/analytics/.

6. data protection provisions about the application and use of Google AdWords

The controller has integrated Google AdWords on this website. Google AdWords is an internet advertising service that allows advertisers to place ads both in Google's search engine results and in the Google advertising network. Google AdWords allows an advertiser to specify certain keywords in advance, which are used to display an ad in Google's search engine results only when the user uses the search engine to retrieve a keyword-relevant search result. In the Google advertising network, the ads are distributed on relevant websites using an automatic algorithm and taking into account the previously defined keywords.
The company operating the Google AdWords services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The purpose of Google AdWords is to advertise our website by displaying interest-relevant advertising on the websites of third-party companies and in the search engine results of the Google search engine and by displaying third-party advertising on our website.
If a data subject reaches our website via a Google ad, a so-called conversion cookie is stored on the data subject's information technology system by Google. What cookies are has already been explained above. A conversion cookie loses its validity after thirty days and is not used to identify the data subject. If the cookie has not yet expired, the conversion cookie is used to track whether certain sub-pages, such as the shopping cart from an online store system, have been accessed on our website. The conversion cookie enables both us and Google to track whether a data subject who has reached our website via an AdWords ad has generated sales, i.e. completed or abandoned a purchase.
The data and information collected through the use of the conversion cookie is used by Google to compile visit statistics for our website. These visit statistics are in turn used by us to determine the total number of users who were referred to us via AdWords ads, i.e. to determine the success or failure of the respective AdWords ad and to optimize our AdWords ads for the future. Neither our company nor other Google AdWords advertisers receive information from Google that could be used to identify the data subject.
The conversion cookie is used to store personal information, such as the web pages visited by the data subject. Each time our website is visited, personal data, including the IP address of the Internet connection used by the data subject, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may share this personal data collected through the technical process with third parties.
The data subject can prevent the setting of cookies by our website, as described above, at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from placing a conversion cookie on the data subject's IT system. In addition, a cookie already set by Google AdWords can be deleted at any time via the Internet browser or other software programs.
Furthermore, the data subject has the option of objecting to interest-based advertising by Google. To do this, the data subject must call up the link https://www.google.de/settings/ads from each of the Internet browsers they use and make the desired settings there.
Further information and the applicable data protection provisions of Google may be retrieved under https://www.google.de/intl/de/policies/privacy/.

7 Data protection provisions about the application and use of Twitter

The data controller has integrated Twitter components on this website. Twitter is a multilingual, publicly accessible microblogging service on which users can publish and disseminate so-called tweets, i.e. short messages limited to 280 characters. These short messages can be accessed by anyone, including people who are not registered with Twitter. However, the tweets are also displayed to the so-called followers of the respective user. Followers are other Twitter users who follow a user's tweets. Twitter also makes it possible to address a broad audience via hashtags, links or retweets.
Twitter's operating company is Twitter, Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.
Each time one of the individual pages of this website is accessed, which is operated by the controller and on which a Twitter component (Twitter button) has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective Twitter component to download a representation of the corresponding Twitter component from Twitter. Further information about the Twitter buttons is available at https://about.twitter.com/de/resources/buttons. During the course of this technical procedure, Twitter gains knowledge of what specific sub-page of our website was visited by the data subject. The purpose of the integration of the Twitter component is to enable our users to redistribute the contents of this website, to make this website known in the digital world and to increase our visitor numbers.
If the data subject is logged in at the same time on Twitter, Twitter detects with every call-up to our website by the data subject-and for the entire duration of their stay on our Internet site-which specific sub-page of our Internet page was visited by the data subject. This information is collected by the Twitter component and assigned by Twitter to the respective Twitter account of the data subject. If the data subject clicks on one of the Twitter buttons integrated on our website, the data and information transmitted with it is assigned to the personal Twitter user account of the data subject and stored and processed by Twitter.
Twitter always receives information via the Twitter component that the data subject has visited our website if the data subject is logged in to Twitter at the same time as accessing our website; this takes place regardless of whether the data subject clicks on the Twitter component or not. If such a transmission of this information to Twitter is not desirable for the data subject, the delivery may be prevented if the data subject logs off from their Twitter account before a call-up to our website is made.
The applicable data protection provisions of Twitter may be accessed under https://twitter.com/privacy?lang=de.

8. data protection provisions about the application and use of Instagram

The controller has integrated components of the Instagram service on this website. Instagram is a service that qualifies as an audiovisual platform and allows users to share photos and videos and also to redistribute such data in other social networks.
The operating company of the Instagram services is Meta Platforms, Inc, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA. If a data subject lives outside the USA or Canada, the controller for the processing of personal data is Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which an Instagram component (Insta button) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to the download of a display of the corresponding Instagram component of Instagram. During the course of this technical procedure, Instagram gains knowledge of what specific sub-page of our website was visited by the data subject.
If the data subject is logged in at the same time on Instagram, Instagram detects with every call-up to our website by the data subject-and for the entire duration of their stay on our Internet site-which specific sub-page of our Internet page was visited by the data subject. This information is collected by the Instagram component and assigned by Instagram to the respective Instagram account of the data subject. If the data subject clicks on one of the Instagram buttons integrated on our website, the data and information transmitted with it is assigned to the personal Instagram user account of the data subject and stored and processed by Instagram.
Instagram always receives information via the Instagram component that the data subject has visited our website if the data subject is logged in to Instagram at the same time as accessing our website; this takes place regardless of whether the data subject clicks on the Instagram component or not. If such a transmission of this information to Instagram is not desirable for the data subject, the delivery may be prevented if the data subject logs off from their Instagram account before a call-up to our website is made.
Further information and the applicable data protection provisions of Instagram may be retrieved under https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.

9. data protection provisions about the application and use of YouTube

The controller has integrated YouTube components on this website. YouTube is an Internet video portal that enables video publishers to post video clips free of charge and other users to view, rate and comment on them free of charge. YouTube allows the publication of all types of videos, which is why complete film and television programs, but also music videos, trailers or videos made by users themselves can be accessed via the Internet portal.
The service at en.youtube.com is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Each time one of the individual pages of this website is accessed, which is operated by the controller and on which a YouTube component (YouTube video) has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information about YouTube can be found at https://www.youtube.com/yt/about/de/. During the course of this technical procedure, YouTube and Google gain knowledge of what specific sub-page of our website was visited by the data subject.
If the data subject is logged in at the same time on YouTube, YouTube recognizes with each call-up to a sub-page that contains a YouTube video, which specific sub-page of our Internet site was visited by the data subject. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.
YouTube and Google always receive information via the YouTube component that the data subject has visited our website if the data subject is logged in to YouTube at the same time as accessing our website; this takes place regardless of whether the data subject clicks on a YouTube video or not. If the data subject does not want this information to be transmitted to YouTube and Google, they can prevent the transmission by logging out of their YouTube account before accessing our website.
The data protection provisions published by YouTube, which can be accessed at https://www.google.de/intl/de/policies/privacy/ , provide information about the collection, processing and use of personal data by YouTube and Google.

10. use of Google Maps

We use the "Google Maps" component of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter "Google", on our website.
Each time the "Google Maps" component is called up, Google sets a cookie to process user settings and data when the page on which the "Google Maps" component is integrated is displayed. As a rule, this cookie is not deleted when the browser is closed, but expires after a certain period of time unless you delete it manually beforehand.
If you do not agree to this processing of your data, you have the option of deactivating the "Google Maps" service and thus preventing the transfer of data to Google. To do this, you must deactivate the Java Script function in your browser. However, we would like to point out that in this case you will not be able to use "Google Maps" or only to a limited extent.
The use of "Google Maps" and the information obtained via "Google Maps" is subject to the Google terms of use http://www.google.de/intl/de/policies/terms/regional.html and the additional terms and conditions for "Google Maps " https://www.google.com/intl/de_de/help/terms_maps.html

11. use of reCAPTCHA

To protect input forms on our website, we use the "reCAPTCHA" service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google". By using this service, it can be distinguished whether the corresponding input is of human origin or whether it is abusive due to automated machine processing.
To our knowledge, the referrer URL, the IP address, the behavior of the website visitor, information about the operating system, browser and length of stay, cookies, display instructions and scripts, the input behavior of the user and mouse movements in the area of the "reCAPTCHA" checkbox are transmitted to "Google".
Google uses the information obtained in this way, among other things, to digitize books and other printed materials and to optimize services such as Google Street View and Google Maps (e.g. house number and street name recognition).
The IP address transmitted as part of "reCAPTCHA" is not merged with other Google data unless you are logged into your Google account at the time you use the "reCAPTCHA" plug-in. If you want to prevent this transmission and storage of data about you and your behavior on our website by "Google", you must log out of "Google" before you visit our site or use the reCAPTCHA plug-in.
The use of the "reCAPTCHA" service obtained information is in accordance with the Google Terms of Use: https://www.google.com/intl/de/policies/privacy/

12. use of Google Web Fonts

This site uses so-called web fonts provided by Google for the uniform display of fonts. The Google fonts are installed locally. There is no connection to Google servers. Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=de

13. use of GoogleTagManager

This website uses GoogleTagManager. GoogleTagManager is a solution with which website tags can be managed via an interface. GoogleTagManager itself, which is used to implement the tags, is a cookie-free domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. GoogleTagManager does not access this data. If a deactivation has been made at domain or cookie level, this remains in place for all tracking tags implemented with GoogleTagManager.

14. use of yumpu

We use https://www.yumpu.com/ from i-magazine AG (Gewerbestrasse 3, 9444 Diepoldsau, CH) on our website to display flip page catalogs. Yumpu provides a digital platform for publishing magazines, brochures or catalogs.
To run the service, your web browser retrieves the content directly from yumpu. You can find more information on the Yumpu website:
Yumpu privacy policy: https://www.yumpu.com/de/info/privacy_policy
Yumpu cookie policy: https://www.yumpu.com/de/info/cookie_policy

15. recipient

The data collected through the use of the website and the information you provide will be transmitted to the operator's server and stored there. Your data may also be forwarded to the following recipients:

Processors (e.g. advertising agency, service provider (IT), brochure dispatch, provider of tracking tools, software provider, store partner, etc.).
Internal departments involved in the processing of your personal data (e.g. accounting, marketing department, partners)
Service providers and partners for the booked services (e.g. hotel, event organizer)

16. rights of the data subject

16.1 Right to confirmation
Each data subject shall have the right granted by the European legislator to obtain from the controller the confirmation as to whether or not personal data concerning him or her are being processed. If a data subject wishes to avail himself of this right of confirmation, he or she may, at any time, contact any employee of the controller.

16.2 Right of access
Any person affected by the processing of personal data has the right, granted by the European Directive and Regulation, to obtain at any time and free of charge from the controller information on the personal data stored about him/her and a copy of that information. Furthermore, the European legislator has granted the data subject access to the following information

the purposes of the processing
the categories of personal data being processed
the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations
where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period
the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing
the existence of the right to lodge a complaint with a supervisory authority
if the personal data are not collected from the data subject: All available information about the origin of the data
the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject

Furthermore, the data subject has a right to information as to whether personal data has been transferred to a third country or to an international organization. If this is the case, the data subject also has the right to be informed of the appropriate safeguards relating to the transfer.
If a data subject wishes to exercise this right of access, he or she may contact an employee of the controller at any time.

16.3 Right to rectification
Each data subject shall have the right granted by the European legislator to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
If a data subject wishes to exercise this right to rectification, he or she may, at any time, contact any employee of the controller.

16.4 Right to erasure (right to be forgotten)
Each data subject shall have the right granted by the European legislator to obtain from the controller the erasure of personal data concerning him or her without undue delay, and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies, as long as the processing is not necessary

The personal data have been collected or otherwise processed for such purposes for which they are no longer necessary.
The data subject withdraws consent on which the processing is based according to point (a) of Article 6(1) of the GDPR, or point (a) of Article 9(2) of the GDPR, and where there is no other legal ground for the processing.
The data subject objects to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21 (2) GDPR.
The personal data have been processed unlawfully.
The personal data must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
The personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

If one of the aforementioned reasons applies, and a data subject wishes to request the erasure of personal data stored by the Eifel Tourismus (ET) GmbH, he or she may, at any time, contact any employee of the controller. An employee of Eifel Tourismus (ET) GmbH shall promptly ensure that the erasure request is complied with immediately.
If the personal data have been made public by Eifel Tourismus (ET) GmbH and our company, as the controller, is obliged pursuant to Article 17(1) of the GDPR to erase the personal data, we shall no longer process the personal data. 1 GDPR to erase the personal data, Eifel Tourismus (ET) GmbH shall, taking account of available technology and the cost of implementation, take reasonable steps, including technical measures, to inform other controllers processing the personal data that the data subject has requested erasure by such controllers of any links to, or copy or replication of, those personal data, as far as processing is not required. An employees of the Eifel Tourismus (ET) GmbH will arrange the necessary measures in individual cases.

16.5 Right to restriction of processing
Each data subject shall have the right granted by the European legislator to obtain from the controller restriction of processing where one of the following applies:

The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.
The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead.
The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims.
The data subject has objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.

If one of the aforementioned conditions is met, and a data subject wishes to request the restriction of the processing of personal data stored by the Eifel Tourismus (ET) GmbH, he or she may at any time contact any employee of the controller. The employee of Eifel Tourismus (ET) GmbH will arrange for the restriction of processing.

16.6 Right to data portability
Each data subject shall have the right granted by the European legislator to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format. He or she also has the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where the processing is based on consent pursuant to point (a) of Article 6(1) of the GDPR or point (a) of Article 9(2) of the GDPR or on a contract pursuant to point (b) of Article 6(1) of the GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Furthermore, in exercising his or her right to data portability pursuant to Article 20(1) of the GDPR, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible and when doing so does not adversely affect the rights and freedoms of others.
In order to assert the right to data portability, the data subject may at any time contact any employee of Eifel Tourismus (ET) GmbH.

16.7 Right to object
Each data subject shall have the right granted by the European legislator to object, on grounds relating to his or her particular situation, at any time, to processing of personal data concerning him or her, which is based on point (e) or (f) of Article 6(1) of the GDPR. This also applies to profiling based on these provisions.
Eifel Tourismus (ET) GmbH shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defense of legal claims.
If the Eifel Tourismus (ET) GmbH processes personal data for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing. This also applies to profiling insofar as it is associated with such direct advertising. If the data subject objects to the Eifel Tourismus (ET) GmbH to the processing for direct marketing purposes, the Eifel Tourismus (ET) GmbH will no longer process the personal data for these purposes.
In addition, the data subject has the right, on grounds relating to his or her particular situation, to object to processing of personal data concerning him or her by the Eifel Tourismus (ET) GmbH for scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the GDPR. 89 (1) GDPR, unless such processing is necessary for the performance of a task carried out for reasons of public interest.
To exercise the right to object, the data subject may contact any employee of Eifel Tourismus (ET) GmbH or another employee directly. The data subject is also free, in the context of the use of information society services, and notwithstanding Directive 2002/58/EC, to exercise his or her right to object by automated means using technical specifications.

16.8. Automated decisions in individual cases, including profiling
Any person affected by the processing of personal data has the right, granted by the European legislator, not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her, if the decision (1) is not necessary for entering into, or performance of, a contract between the data subject and the controller, or (2) is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, or (3) is based on the data subject's explicit consent.
If the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or (2) it is based on the data subject's explicit consent, the Eifel Tourismus (ET) GmbH shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and contest the decision.
If the data subject wishes to exercise the rights concerning automated individual decision-making, he or she may, at any time, contact any employee of the controller.

16.9. right to withdraw data protection consent
Any person affected by the processing of personal data has the right granted by the European legislator of directives and regulations to withdraw consent to the processing of personal data at any time.
If the data subject wishes to assert their right to withdraw consent, they can contact an employee of the data controller at any time: datenschutz@eifel.info

17. paypal

When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by installments" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), as part of the payment processing.

The transfer takes place in accordance with Art. 6 para. 1. b GDPR and only insofar as this is necessary for payment processing.

PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1. f GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. Further data protection information, including information on the credit agencies used, can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

18 Regiondo ticket shop

Iframe components of the company Regiondo GmbH, Grafinger Straße 6, 81671 Munich (Regiondo) are integrated on the website of Eifel-Tourismus GmbH. Regiondo acts as a tourism service provider for the sale of guided tours and other tourist offers.

The data protection provisions published by Regiondo, which can be accessed at https://www.regiondo.de/datenschutz , provide information about the collection, processing and use of personal data by Regiondo GmbH. There you will also find information on the type of data processing, storage period and your rights as well as on the transfer of data to third parties, for example for payment processing when using services such as Paypal, Klarna and others.

All data entered by customers during order processing is stored. Which data this is can be seen from the form fields. These include

- Surname, first name
- Payment data
- E-mail address

Data that is absolutely necessary for delivery or order processing is passed on to third parties (e.g. service providers). As soon as the booking has been fully processed and the event date has expired, the data will no longer be used. If there is a retention period in accordance with Section 14b (1) UStG, the data may be stored for up to 10 years.

This data protection declaration was created in part by the data protection declaration generator of DGD Deutsche Gesellschaft für Datenschutz GmbH and the data protection generator of the law firm Weiß & Partner .
Status: 17.03.2025