Data protection

1 Subject matter and controller

1.1 The subject of data protection is "personal data"
The GDPR defines "personal data" as any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. (Art. 4 No. 1 GDPR)
It is possible to use our website without providing personal data. Different regulations may apply to the use of individual services on our website, which are explained separately below in this case. Your personal data (e.g. name, address, e-mail, telephone number, etc.) will only be processed by us in accordance with the provisions of German data protection law. Data is personal if it can be clearly assigned to a specific natural person. The legal basis for data protection can be found in the Federal Data Protection Act (BDSG), the Digital Services Act (DDG) and the EU General Data Protection Regulation (GDPR).
The following regulations inform you about the type, scope and purpose of the collection, use and processing of personal data by the provider.

1.2 Controller (Art. 4 No. 7 GDPR)
The controller in charge of the processing of personal data in connection with the use of the website www.eifel.info is
Eifel Tourismus (ET) Gesellschaft mbH
Kalvarienbergstraße 1
D - 54595 Prüm
Phone: +49 6551 9656-0
Fax: +49 6551 9656-96
Email: info@eifel.info
Managing Director: Wolfgang Reh
Data Protection Officer: Steffen Wagner

We would like to point out that Internet-based data transmission is subject to security vulnerabilities, making complete protection against access by third parties impossible. To protect the security of your personal data during transmission, we use SSL encryption (Secure Socket Layer).

2. use of the website

The following regulations inform you about the type, scope and purpose of the collection, use and processing of personal data by Eifel Tourismus GmbH:

2.1. server data
Scope and purpose of data processing
The legitimate interest of the controller lies in the provision of a website for the provision of information and services on the Internet. The central objectives of Eifel Tourismus GmbH are set out in Section 2 (1) to (3) of the partnership agreement: The object of the company is the promotion of regional tourism.
The provision of your data is necessary in order to be able to access the operator's website. Failure to provide it would mean that the website could not be accessed and the services of Eifeltourismus GmbH could not be used and the central objectives of Eifel Tourismus GmbH could not be pursued.
For technical reasons, the following data, which your Internet browser transmits to us or to our web provider, is recorded (so-called server log files):

Browser type and version
Operating system used
Website from which you visit us (referrer URL)
Website that you visit
Date and time of your access
Your Internet Protocol (IP) address.

Legal basis
Art. 6 GDPR (6) 1b:
"Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract."
Supplementary to this
Art. 6 GDPR (6) 1f:
"Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child."

Duration of storage
Your IP address will be deleted or anonymized after the end of use
The log files are evaluated by the operator in anonymized form in order to further improve the website and make it more user-friendly.

2.2 Contact form
Scope and purpose of data processing
If you would like to contact Eifel Tourismus GmbH, a contact form is available for this purpose. You must provide the following information in this form:

Surname
e-mail address
Your message

You can also provide the following information voluntarily:

Salutation
First name

Eifel Tourismus GmbH uses your data to respond to your contact request and to send you any information you may have requested.

Duration of storage
The processed personal data will be deleted after expiry of the legal storage obligations and fulfillment of the purpose, unless the person responsible has a legitimate interest in further storage.

2.3 Cookies
Scope and purpose of data processing
Eifel Tourismus GmbH uses cookies to collect and store data. Cookies are small files that make it possible to store specific information relating to the device on the user's access device (PC, tablet, smartphone, etc.). On the one hand, they serve the user-friendliness of the website and thus the users (e.g. storage of login data). On the other hand, they are used to collect statistical data on the use of the website and to be able to analyze it to improve the offer. The users themselves can influence the use of cookies. Most browsers have an option to restrict or completely prevent the storage of cookies. Please read the instructions for your browser. However, it should be noted that the use of the website and ease of use will be restricted without cookies.
You can manage many online advertising cookies from companies via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/uk/your-ad-choices/.

Duration of storage
Temporary cookies are automatically deleted when you close your browser (session cookies). Persistent cookies, on the other hand, have a maximum lifespan of up to 20 days. This type of cookie enables you to be recognized when you return to the website after leaving it.

2.4 Newsletter
Scope and purpose of data processing
Eifel Tourismus GmbH informs you about additional offers and news about the region by means of an email newsletter. This requires you to provide your e-mail address. Further information to personalize the newsletter is voluntary.
The double opt-in procedure is used to send the newsletter.
You will only receive a newsletter by e-mail if you have expressly confirmed that the newsletter service should be activated. After you have activated the service, you will receive a notification e-mail with an activation link. You will not receive the actual newsletter until you click on this link.

Legal basis
Art. 6 GDPR (6) 1a:
"The data subject has given consent to the processing of personal data concerning him or her for one or more specific purposes."

Duration of storage
You can deactivate the newsletter at any time. To do so, please contact Eifel Tourismus GmbH or use the unsubscribe link provided in every newsletter.
The personal data processed for the purpose of sending the newsletter will be deleted unless the controller has a legitimate interest in further storage. In any case, only the data that is absolutely necessary to achieve the relevant purpose will continue to be stored.

2.5 Bookings
You can book accommodation on the website. To do so, you must provide the following data:

Salutation
First name
Surname
Street, house number
Zip code, town
Country
e-mail address

Your data will be used to process your booking and passed on to the accommodation accordingly.

Duration of storage
The personal data processed for the purpose of processing bookings and handling contracts will be deleted after expiry of the statutory retention obligations, unless the controller has a legitimate interest in further storage. In any case, only the data that is absolutely necessary to achieve the relevant purpose will continue to be stored.

2.6 Non-binding booking inquiries
You can send a non-binding booking inquiry to the operator using a special contact form. To do so, you must provide the following data:

First name
Surname
e-mail address

Your data will be used to process the booking request and prepare a quote.

Duration of storage
The personal data processed for the purpose of processing a non-binding booking request will be deleted unless the controller has a legitimate interest in further storage. In any case, only the data that is absolutely necessary to achieve the relevant purpose will continue to be stored.

2.7 Ordering brochures
You have the option of ordering various brochures on the website. To do so, you must provide the following data:

Salutation
First name
Surname
Street, house number
Zip code, town
Country
E-mail address

Your data will be used to send you the brochure you have ordered.

Duration of storage
The personal data processed for the purpose of sending brochures will be deleted unless the controller has a legitimate interest in further storage. In any case, only the data that is absolutely necessary to achieve the relevant purpose will continue to be stored.

3. data protection provisions about the application and use of Google Analytics 4 (with anonymization function)

The controller has integrated the Google Analytics component (with anonymization function) on this website. Google Analytics is a web analysis service. Web analysis is the collection, gathering and evaluation of data about the behavior of visitors to websites. Among other things, a web analysis service collects data on the website from which a data subject came to a website (so-called referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. Web analysis is mainly used to optimize a website and for the cost-benefit analysis of Internet advertising.

The operating company of the Google Analytics component is Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The data controller uses the addition "_gat._anonymizeIp" for web analysis via Google Analytics. This addition is used by Google to shorten and anonymize the IP address of the data subject's Internet connection if our website is accessed from a member state of the European Union or from another state party to the Agreement on the European Economic Area.

The anonymization of your IP address is already automatically preset in Google Analytics. The purpose of the Google Analytics component is to analyze the flow of visitors to our website. Google uses the data and information obtained, among other things, to evaluate the use of our website, to compile online reports for us that show the activities on our website, and to provide other services related to the use of our website.

Google Analytics uses AI to predict the behavior of individual visitor groups. Changing customer needs are tracked and forecasts can be made for future user behavior.

Google Analytics places a cookie on the data subject's IT system. What cookies are has already been explained above. By setting the cookie, Google is enabled to analyze the use of our website. Each time one of the individual pages of this website is accessed, which is operated by the data controller and on which a Google Analytics component has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. During the course of this technical procedure, Google gains knowledge of personal information, such as the IP address of the data subject, which serves Google, inter alia, to understand the origin of visitors and clicks, and subsequently create commission settlements.

The cookie is used to store personal information, such as the access time, the location from which access was made and the frequency of visits to our website by the data subject. Each time our website is visited, this personal data, including the IP address of the Internet connection used by the data subject, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical process to third parties.

The data subject may, as stated above, prevent the setting of cookies through our website at any time by means of a corresponding adjustment of the web browser used and thus permanently deny the setting of cookies. Such a setting of the Internet browser used would also prevent Google from placing a cookie on the data subject's IT system. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.

Furthermore, the data subject has the option of objecting to and preventing the collection of data generated by Google Analytics relating to the use of this website and the processing of this data by Google. To do this, the data subject must download and install a browser add-on from the link tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data and information about visits to websites may be transmitted to Google Analytics. The installation of the browser add-on is considered an objection by Google. If the data subject's IT system is deleted, formatted or reinstalled at a later date, the data subject must reinstall the browser add-on in order to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by the data subject or another person who is attributable to their sphere of control, it is possible to reinstall or reactivate the browser add-on.

Further information and the applicable data protection provisions of Google may be retrieved under https://www.google.de/intl/de/policies/privacy/ and under www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail at this link https://www.google.com/intl/de_de/analytics/.

4. data protection provisions about the application and use of Google AdWords

The controller has integrated Google AdWords on this website. Google AdWords is an internet advertising service that allows advertisers to place ads both in Google's search engine results and in the Google advertising network. Google AdWords allows an advertiser to specify certain keywords in advance, which are used to display an ad in Google's search engine results only when the user uses the search engine to retrieve a keyword-relevant search result. In the Google advertising network, the ads are distributed on relevant websites using an automatic algorithm and taking into account the previously defined keywords.
The company operating the Google AdWords services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The purpose of Google AdWords is to advertise our website by displaying interest-relevant advertising on the websites of third-party companies and in the search engine results of the Google search engine and by displaying third-party advertising on our website.
If a data subject reaches our website via a Google ad, a so-called conversion cookie is stored on the data subject's information technology system by Google. What cookies are has already been explained above. A conversion cookie loses its validity after thirty days and is not used to identify the data subject. If the cookie has not yet expired, the conversion cookie is used to track whether certain sub-pages, such as the shopping cart from an online store system, have been accessed on our website. The conversion cookie enables both us and Google to track whether a data subject who has reached our website via an AdWords ad has generated sales, i.e. completed or abandoned a purchase.
The data and information collected through the use of the conversion cookie is used by Google to compile visit statistics for our website. These visit statistics are in turn used by us to determine the total number of users who were referred to us via AdWords ads, i.e. to determine the success or failure of the respective AdWords ad and to optimize our AdWords ads for the future. Neither our company nor other Google AdWords advertisers receive information from Google that could be used to identify the data subject.
The conversion cookie is used to store personal information, such as the web pages visited by the data subject. Each time our website is visited, personal data, including the IP address of the Internet connection used by the data subject, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may share this personal data collected through the technical process with third parties.
The data subject can prevent the setting of cookies by our website, as described above, at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from placing a conversion cookie on the data subject's IT system. In addition, a cookie already set by Google AdWords can be deleted at any time via the Internet browser or other software programs.
Furthermore, the data subject has the option of objecting to interest-based advertising by Google. To do this, the data subject must call up the link https://www.google.de/settings/ads from each of the Internet browsers they use and make the desired settings there.
Further information and the applicable data protection provisions of Google may be retrieved under https://www.google.de/intl/de/policies/privacy/.

5. Data protection provisions regarding the use of Facebook
Our website may contain links to external websites, e.g. to our social media profile on Facebook. We would like to point out that we have no influence on the data processing procedures of external sites. Their operators are solely responsible for this content.

6. Data protection provisions regarding the use of Instagram
Our website may contain links to external websites, e.g. to our social media profile on Instagram. We would like to point out that we have no influence on the data processing procedures of external sites. The operators of these sites are solely responsible for their content.

7. data protection provisions about the application and use of YouTube

The controller has integrated YouTube components on this website. YouTube is an Internet video portal that enables video publishers to post video clips free of charge and other users to view, rate and comment on them free of charge. YouTube allows the publication of all types of videos, which is why complete film and television programs, but also music videos, trailers or videos made by users themselves can be accessed via the Internet portal.
The service at en.youtube.com is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Each time one of the individual pages of this website is accessed, which is operated by the controller and on which a YouTube component (YouTube video) has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information about YouTube can be found at https://www.youtube.com/yt/about/de/. During the course of this technical procedure, YouTube and Google gain knowledge of what specific sub-page of our website was visited by the data subject.
If the data subject is logged in at the same time on YouTube, YouTube recognizes with each call-up to a sub-page that contains a YouTube video, which specific sub-page of our Internet site was visited by the data subject. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.
YouTube and Google always receive information via the YouTube component that the data subject has visited our website if the data subject is logged in to YouTube at the same time as accessing our website; this takes place regardless of whether the data subject clicks on a YouTube video or not. If the data subject does not want this information to be transmitted to YouTube and Google, they can prevent the transmission by logging out of their YouTube account before accessing our website.
The data protection provisions published by YouTube, which can be accessed at https://www.google.de/intl/de/policies/privacy/ , provide information about the collection, processing and use of personal data by YouTube and Google.

8. use of Google Web Fonts

This site uses so-called web fonts provided by Google for the uniform display of fonts. The Google fonts are installed locally. There is no connection to Google servers. Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=de

9. use of GoogleTagManager

This website uses GoogleTagManager. GoogleTagManager is a solution with which website tags can be managed via an interface. GoogleTagManager itself, which is used to implement the tags, is a cookie-free domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. GoogleTagManager does not access this data. If a deactivation has been made at domain or cookie level, this remains in place for all tracking tags implemented with GoogleTagManager.

10. use of yumpu

We use https://www.yumpu.com/ from i-magazine AG (Gewerbestrasse 3, 9444 Diepoldsau, CH) on our website to display flip page catalogs. Yumpu provides a digital platform for publishing magazines, brochures or catalogs.
To run the service, your web browser retrieves the content directly from yumpu. You can find more information on the Yumpu website:
Yumpu privacy policy: https://www.yumpu.com/de/info/privacy_policy
Yumpu cookie policy: https://www.yumpu.com/de/info/cookie_policy

11. recipient

The data collected through the use of the website and the information you provide will be transmitted to the operator's server and stored there. Your data may also be forwarded to the following recipients:

Processors (e.g. advertising agency, service provider (IT), brochure dispatch, provider of tracking tools, software provider, store partner, etc.).
Internal departments involved in the processing of your personal data (e.g. accounting, marketing department, partners)
Service providers and partners for the booked services (e.g. hotel, event organizer)

12. rights of the data subject

12.1 Right to confirmation
Each data subject shall have the right granted by the European legislator to obtain from the controller the confirmation as to whether or not personal data concerning him or her are being processed. If a data subject wishes to avail himself of this right of confirmation, he or she may, at any time, contact any employee of the controller.

12.2 Right of access
Any person affected by the processing of personal data has the right, granted by the European Directive and Regulation, to obtain at any time and free of charge from the controller information on the personal data stored about him/her and a copy of that information. Furthermore, the European legislator has granted the data subject access to the following information

the purposes of the processing
the categories of personal data being processed
the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations
where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period
the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing
the existence of the right to lodge a complaint with a supervisory authority
if the personal data are not collected from the data subject: All available information about the origin of the data
the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject

Furthermore, the data subject has a right to information as to whether personal data has been transferred to a third country or to an international organization. If this is the case, the data subject also has the right to be informed of the appropriate safeguards relating to the transfer.
If a data subject wishes to exercise this right of access, he or she may contact an employee of the controller at any time.

12.3 Right to rectification
Each data subject shall have the right granted by the European legislator to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
If a data subject wishes to exercise this right to rectification, he or she may, at any time, contact any employee of the controller.

12.4 Right to erasure (right to be forgotten)
Each data subject shall have the right granted by the European legislator to obtain from the controller the erasure of personal data concerning him or her without undue delay, and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies, as long as the processing is not necessary

The personal data have been collected or otherwise processed for such purposes for which they are no longer necessary.
The data subject withdraws consent on which the processing is based according to point (a) of Article 6(1) of the GDPR, or point (a) of Article 9(2) of the GDPR, and where there is no other legal ground for the processing.
The data subject objects to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21 (2) GDPR.
The personal data have been processed unlawfully.
The personal data must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
The personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

If one of the aforementioned reasons applies, and a data subject wishes to request the erasure of personal data stored by the Eifel Tourismus (ET) GmbH, he or she may, at any time, contact any employee of the controller. An employee of Eifel Tourismus (ET) GmbH shall promptly ensure that the erasure request is complied with immediately.
If the personal data have been made public by Eifel Tourismus (ET) GmbH and our company, as the controller, is obliged pursuant to Article 17(1) of the GDPR to erase the personal data, we shall no longer process the personal data. 1 GDPR to erase the personal data, Eifel Tourismus (ET) GmbH shall, taking account of available technology and the cost of implementation, take reasonable steps, including technical measures, to inform other controllers processing the personal data that the data subject has requested erasure by such controllers of any links to, or copy or replication of, those personal data, as far as processing is not required. An employees of the Eifel Tourismus (ET) GmbH will arrange the necessary measures in individual cases.

12.5 Right to restriction of processing
Each data subject shall have the right granted by the European legislator to obtain from the controller restriction of processing where one of the following applies:

The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.
The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead.
The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims.
The data subject has objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.

If one of the aforementioned conditions is met, and a data subject wishes to request the restriction of the processing of personal data stored by the Eifel Tourismus (ET) GmbH, he or she may at any time contact any employee of the controller. The employee of Eifel Tourismus (ET) GmbH will arrange for the restriction of processing.

12.6 Right to data portability
Each data subject shall have the right granted by the European legislator to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format. He or she also has the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where the processing is based on consent pursuant to point (a) of Article 6(1) of the GDPR or point (a) of Article 9(2) of the GDPR or on a contract pursuant to point (b) of Article 6(1) of the GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Furthermore, in exercising his or her right to data portability pursuant to Article 20(1) of the GDPR, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible and when doing so does not adversely affect the rights and freedoms of others.
In order to assert the right to data portability, the data subject may at any time contact any employee of Eifel Tourismus (ET) GmbH.

12.7 Right to object
Each data subject shall have the right granted by the European legislator to object, on grounds relating to his or her particular situation, at any time, to processing of personal data concerning him or her, which is based on point (e) or (f) of Article 6(1) of the GDPR. This also applies to profiling based on these provisions.
Eifel Tourismus (ET) GmbH shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defense of legal claims.
If the Eifel Tourismus (ET) GmbH processes personal data for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing. This also applies to profiling insofar as it is associated with such direct advertising. If the data subject objects to the Eifel Tourismus (ET) GmbH to the processing for direct marketing purposes, the Eifel Tourismus (ET) GmbH will no longer process the personal data for these purposes.
In addition, the data subject has the right, on grounds relating to his or her particular situation, to object to processing of personal data concerning him or her by the Eifel Tourismus (ET) GmbH for scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the GDPR. 89 (1) GDPR, unless such processing is necessary for the performance of a task carried out for reasons of public interest.
To exercise the right to object, the data subject may contact any employee of Eifel Tourismus (ET) GmbH or another employee directly. The data subject is also free, in the context of the use of information society services, and notwithstanding Directive 2002/58/EC, to exercise his or her right to object by automated means using technical specifications.

12.8. Automated decisions in individual cases, including profiling
Any person affected by the processing of personal data has the right, granted by the European legislator, not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her, if the decision (1) is not necessary for entering into, or performance of, a contract between the data subject and the controller, or (2) is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, or (3) is based on the data subject's explicit consent.
If the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or (2) it is based on the data subject's explicit consent, the Eifel Tourismus (ET) GmbH shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and contest the decision.
If the data subject wishes to exercise the rights concerning automated individual decision-making, he or she may, at any time, contact any employee of the controller.

12.9. right to withdraw data protection consent
Any person affected by the processing of personal data has the right granted by the European legislator of directives and regulations to withdraw consent to the processing of personal data at any time.
If the data subject wishes to assert their right to withdraw consent, they can contact an employee of the data controller at any time: datenschutz@eifel.info

13. paypal

When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by installments" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), as part of the payment processing.

The transfer takes place in accordance with Art. 6 para. 1. b GDPR and only insofar as this is necessary for payment processing.

PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1. f GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. Further data protection information, including information on the credit agencies used, can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

14. Regiondo ticket shop

Iframe components of the company Regiondo GmbH, Grafinger Straße 6, 81671 Munich (Regiondo) are integrated on the website of Eifel-Tourismus GmbH. Regiondo acts as a tourism service provider for the sale of guided tours and other tourist offers.

The data protection provisions published by Regiondo, which can be accessed at https://www.regiondo.de/datenschutz , provide information about the collection, processing and use of personal data by Regiondo GmbH. There you will also find information on the type of data processing, storage period and your rights as well as on the transfer of data to third parties, for example for payment processing when using services such as Paypal, Klarna and others.

All data entered by customers during order processing is stored. Which data this is can be seen from the form fields. These include

- Surname, first name
- Payment data
- E-mail address

Data that is absolutely necessary for delivery or order processing is passed on to third parties (e.g. service providers). As soon as the booking has been fully processed and the event date has expired, the data will no longer be used. If there is a retention period in accordance with Section 14b (1) UStG, the data may be stored for up to 10 years.

This data protection declaration was created in part by the data protection declaration generator of DGD Deutsche Gesellschaft für Datenschutz GmbH and the data protection generator of the law firm Weiß & Partner .
Status: 02.12.2025

Data protection

Cookie-Consent-Tool

Cookie Consent Tool