Privacy policy
Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.
Person responsible for data processing
Sommerrodelbahn Operator GmbH & Co. KG
Nico Brinkmann
At the Waltenberg 89
59955 Winterberg
Tel.: 02981 92 96 433
fax: 02981 92 96 434
E-Mail: info@erlebnisbergkappe.de
Data Protection Officer
Great Oak Data Protection GmbH & Co. KG
Florian Umbrella
Ruhr road 16
59955 Winterberg
Tel.: 02985 99 99 69 0
fax: 02985 99 99 69 3
E-Mail: datenschutz@great-oak.de
Purpose of the processing
Purpose A: Logging of visits to the website on the basis of the IP address for the evaluation of the number of visitors and the pages accessed
Purpose B: Logging of system events with IP address for troubleshooting purposes.
Purpose C: Contact form with indication of name, first name, email address - on request telephone number and message - for the purpose of the establishment of contact on visitor request
Purpose D: Google Analytics is used to analyse how visitors use the website. For this purpose, Google collects customer data on the basis of page views, which relate to technical characteristics and activities of visitors to your website. This customer data is analysed by the processing software in order to create reports, which may include statements on dwell time, approximate geographical origin, origin of visitor traffic, exit pages and usage patterns.
Purpose E: Google Fonts is used to provide different fonts that are reliably displayed on all visitor systems.
Purpose F: Initiation and execution of a sales contract
Purpose G: Payment via Paypal
Purpose H: With the help of DoubleClick it should be possible to act more targeted in the field of advertising and to place interactive advertising campaigns.
Purpose I: Youtube provides videos that serve to visualize content. These are pulled in by means of iframe.
Legal basis of the processing
The processing of purposes A, B, D, E, H is based on legitimate interests pursuant to Art. 6(1)(f) EU-DSGVO
The processing of the purposes C, G, I is based on the voluntary consent by the data subject pursuant to Art. 6(1)(a) EU-DSGVO.
The processing of purpose F is based on the performance of a contract in accordance with Art. 6(1)(b) EU-DSGVO.
Legitimate interests of the processor
For Purpose A: The website is used to attract new contractors and to provide information to interested parties. In order to be able to measure the effectiveness of this site and to be able to optimise the site on the basis of this data, the data of purpose A are collected.
For purpose B: In order to be able to guarantee the technical availability of the page permanently, the system events are stored and evaluated. In order to be able to detect and prevent any events that may have been intentionally caused, all events are stored together with IP addresses.
For purpose D: The website serves to attract new contractual partners and to transmit information to interested parties. To this end, it is important to optimally adapt the site to the needs of the visitor and to ensure that maximum reach is achieved. Data is collected in order to measure the effectiveness of these measures.
For purpose E: For a good economically justifiable design experience on our website, we use the generally available Google Fonts. Here an optimal display for you is ensured.
For purpose H: To improve our advertising measures, the optimization of cost-benefit ratios and the targeted use of advertising, we use DoubleClick.
Recipients of the data
Access to the data by our processor for the hosting, operation and development of this website is possible at any time:
Hosting:
Alfahosting GmbH, Ankerstraße 3b, 06108 Halle (Saale)
Development:
Michael Lanczyk & Claudiu-Silviu Stritter GbR, Schneppenkauten 1a, 57076 Siegen, Germany
Furthermore, data will be forwarded to the following bodies:
Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland
YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA
In case of payment with Paypal:
PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449, Luxembourg
Duration of storage
Purpose A: 12 months
Purpose B: 6 months
Purpose C: 6 months or earlier in case of revocation
Purpose D: 12 months
Purpose E: 6 months
Purpose F: 12 months
Purpose G: 12 months
Purpose H: 12 months
Purpose I: 12 months
Rights of the data subjects
As a data subject, you are entitled to the following protection rights free of charge:
a) You can revoke your voluntary consent at any time (right of revocation).
b) You can request an overview of all the data we have stored about you at any time (right to information)
c) In the case of data that is not subject to a legal or contractual obligation to retain, you can demand deletion free of charge at any time (right to delete)
d) You can restrict your consent to data processing to certain areas at any time (right of restriction).
e) You may object at any time to data processing that serves the public interest or the legitimate interests of the processor, provided that there are reasons based on your particular situation (right to object).
f) In the case of data that has been stored incorrectly by you, you have the right to correct this data at any time (right of correction).
g) You have the right to receive the personal data concerning you in a structured, common and machine-readable format or to have it transferred to another location. (right to data portability)
Right of complaint
Every person affected by data processing has the right to lodge a complaint with the data protection supervisory authority in his or her country or with the supervisory authority responsible for the operator of this site.
State Commissioner for Data Protection and Freedom of Information
North Rhine-Westphalia
PO Box 20 04 44
40102 Düsseldorf
Tel.: 0211/38424-0
Fax: +49 211/38424-10
E-mail: poststelle@ldi.nrw.de
SOFORT voucher system
We use the "SOFORT-Gutschein" widget on our websites. The provider is FIRMEDIA® GmbH & Co. KG, Zum Ritzhagen 5, 34508 Willingen. Personal data will only be collected and processed when ordering a voucher/ticket directly in the SOFORT-Gutscheinshop. SOFORT-Gutschein automatically collects and stores information in so-called server log files, which your browser automatically transmits. These are: Browser type and browser version; Operating system used; Referrer URL; Host name of the accessing computer; Time of server request; IP address. This data is not merged with other data sources. The collection of this data is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website - for this purpose, the server log files must be collected. Personal data provided in the course of competitions of the SOFORT Voucher Advent Calendar are used and stored exclusively in the context of the competitions. Personal data will be automatically deleted at the latest 30 days after the end of the competitions. We have concluded an order processing agreement with FIRMEDIA® GmbH & Co.KG.
Google Analytics
We use Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google uses cookies. The information generated by the cookie about the use of the online offer by the users is usually transmitted to a Google server in Ireland and stored there.
Google will use this information on our behalf to evaluate the use of our online offer by the users, to compile reports on the activities within this online offer and to provide us with further services related to the use of this online offer and the internet use. In doing so, pseudonymous usage profiles of the users can be created from the processed data.
We only use Google Analytics with IP anonymisation activated. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in Ireland and shortened there.
The IP address transmitted by the user's browser will not be merged with other data from Google. Users can prevent the storage of cookies by setting their browser software accordingly; users can also prevent the collection of the data generated by the cookie and related to their use of the online offer to Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
For more information about Google's use of data for advertising purposes, settings and opt-out options, please visit Google's websites athttps://www.google.com/intl/de/policies/privacy/partners ("How Google uses data when you use our partners' websites or apps"), http://www.google.com/policies/technologies/ads ("How Google uses data for advertising purposes"), http://www.google.de/settings/ads ("Manage the information Google uses to serve ads to you") and http://www.google.com/ads/preferences ("Control what ads Google shows you").
Google DoubleClick
DoubleClick by Google is a service provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). DoubleClick by Google uses cookies to present you with ads that are relevant to you. In doing so, a pseudonymous identification number (ID) is assigned to your browser in order to check which ads were displayed in your browser and which ads were called up. The cookies do not contain any personal information. The use of DoubleClick cookies only enables Google and its partner websites to serve ads based on previous visits to our website or other websites on the Internet. The information generated by the cookies is transferred by Google to a server in the USA for analysis and stored there. Google observes the data protection provisions of the "Privacy Shield" agreement and is registered with the "Privacy Shield" programme of the US Department of Commerce. A transfer of data by Google to third parties only takes place on the basis of legal regulations or within the framework of commissioned data processing. Under no circumstances will Google combine your data with other data collected by Google.
By using our websites, you consent to the processing of data about you by Google and to the aforementioned method of data processing and the aforementioned purpose. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of our website. Furthermore, you can prevent the collection of the data generated by the cookies and related to your use of the websites to Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link under the item DoubleClick deactivation extension. Alternatively, you can also deactivate the DoubleClick cookies with this opt-out.
Google Fonts
This website uses Google Fonts as external fonts. The integration of these fonts is done by downloading the fonts when calling them from servers of Google Inc. in Ireland. By this call data of you are transferred to Google. These are at least the address of our website that you have visited. Also, the IP address of the browser of the end device of the visitor of these Internet pages is stored by Google. You can find more information in Google's privacy policy, which you can access here:
www.google.com/fonts#AboutPlace:about
www.google.com/policies/privacy/
Google Tag Manager
This website uses the Google Tag Manager. Through this service, website tags can be managed via an interface. The Google Tool Manager only implements tags. This means that no cookies are used and no personal data is collected. The Google Tool Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, it remains in place for all tracking tags, insofar as these are implemented with the Google Tag Manager.
YouTube plugins
We use the provider YouTube, among others, for the integration of videos. YouTube is operated by YouTube LLC with headquarters at 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is represented by Google IGoogle Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland.
On some of our Internet pages, we use plugins from the provider YouTube. When you call up the Internet pages of our website that are provided with such a plugin - for example, our media library - a connection is established to the YouTube servers and the plugin is displayed. This transmits to the YouTube server which of our Internet pages you have visited. If you are logged in as a member of YouTube, YouTube assigns this information to your personal user account. When using the plugin, such as clicking on the start button of a video, this information is also assigned to your user account. You can prevent this assignment by logging out of your YouTube user account and other user accounts of the companies YouTube LLC and Google Inc. before using our website and deleting the corresponding cookies of the companies.
Further information on data processing and notes on data protection by YouTube (Google) can be found at www.google.de/intl/de/policies/privacy/.
PayPal
On our website we offer, among other things, payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). If you choose to pay via PayPal, the payment data you enter will be transmitted to PayPal. The transmission of your data to PayPal is based on Art. 6 para. 1 lit. a DSGVO (consent) and Art. 6 para. 1 lit. b DSGVO (processing for the performance of a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the validity of past data processing operations.
Further hints
We make every effort to store your personal data in such a way that it is not accessible to third parties by taking all technical and organisational measures. When communicating by e-mail, complete data security cannot be guaranteed, so we recommend that you send confidential information by post.
Our employees and the service companies commissioned by us are obliged to maintain confidentiality and to comply with the provisions of the Federal Data Protection Act and other professional data protection regulations.
Information letter according to Art. 13 DSGVO
for the Erlebnisberg Kappe Winterberg
Person responsible for data processing
Sommerrodelbahn Operator GmbH & Co. KG
Mr. Nico Brinkmann
At the Waltenberg 89
59955 Winterberg
Tel: +49 (0) 2981 92 96 433
E-Mail: info@erlebnisbergkappe.de
Data Protection Officer
Great Oak Privacy GmbH & Co. KG
Mr. Florian Schirm
Ruhr road 16
59955 Winterberg
Tel: +49 (0) 2985 99 690
E-Mail: datenschutz@great-oak.de
Purpose of processing
Purpose A: Initiation and implementation of an employment relationship incl. training and internship relationships and fulfillment of legal obligations for employers.
Purpose B: Information to interested parties and guests for stays at Erlebnisberg Kappe about current offers and interesting information by means of various contact channels according to their given consents.
Legal basis of processing
§ Section 26 (1) BDSG - data processing for purposes of the employment relationship.
Art. 6 para. 1 lit. a DSGVO - consent by the data subject pursuant to Art. 4 no. 11 DSGVO in conjunction with. § Section 26 para. 2 BDSG
§ Art. 26 (3) BDSG - processing of data requiring special protection pursuant to Art. 9 DSGVO for the purposes of the employment relationship, the exercise of rights or the fulfillment of legal obligations under labor law, social security law and social protection law.
Art. 6 para. 1 lit. b DSGVO - Initiation and fulfillment of the contract.
Art. 6 para. 1 lit. c DSGVO - processing for compliance with a legal obligation
We process the data of our guests and interested parties for the preparation of offers, as well as for the settlement of services rendered and goods received.
Art. 6 para. 1 lit. f DSGVO - Legitimate interest
We also conduct video surveillance of certain areas of the adventure mountain in order to maintain our house rules and to prevent accidents as well as to follow up on accidents.
Explanation of legitimate interests
The purpose of recording by video camera is to comply with security regulations for the protection of our guests. These require, among other things, to monitor the area you enter by video. In particular, theft and vandalism are to be prevented. Also misuse of our facility or possible accidents, e.g. in the course of Sommerrodelbahn use, should be prevented or clarified.
Recipient of the data
Recipient A: The data will be passed on to our tax advisor for the purpose of billing.
Recipient B: The data will be shared with the different stations of Erlebnisberg Kappe for the purpose of carrying out offers.
Duration of storage
In accordance with the statutory retention periods and, in the case of data not regulated by law and voluntary data, if no other agreement has been made, up to six years after the end of the employment relationship or prematurely if consent is revoked.
Rights of the data subjects
As a data subject, you have the following protection rights free of charge:
- You can revoke your voluntary consent at any time (right of revocation)
- You can request an overview of all the data we have stored about you at any time (right to information)
- In the case of data that is not subject to a legal or contractual obligation to retain, you can request deletion free of charge at any time (right of deletion)
- You can restrict consents to data processing to certain areas at any time (right of restriction)
- You can object to data processing that serves the public interest or the legitimate interests of the processor at any time, if there are reasons based on your particular situation (right of objection).
- In the case of data that has been stored incorrectly by you, you have the right to correct this data at any time (right of correction)
- You have the right to receive the personal data concerning you in a structured, common and machine-readable format or to have it transferred to another location. (Right to data portability)
Consequences of not providing the data
Data processing based on voluntary consent (data collection form) does not affect the performance of the contract. However, the waiver would mean a loss of convenience for you. All other data are collected and processed on the basis of the performance of the contract or legal requirements. Employment and execution of the employment contract is not possible without these data.
Right of complaint
Every data subject of a data processing has the right to complain to the data protection supervisory authority of his/her country or to the supervisory authority responsible for the processor of your data. The supervisory authority responsible for the employer is:
State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.
Kavalleriestrasse 2 - 4
40213 Düsseldorf
Tel: +49 (0) 211 38424 - 0
E-mail: poststelle@ldi.nrw.de
Explanation of the data subject rights
The General Data Protection Regulation, which has been in force in the EU since 2018, grants you, the data subject, several rights vis-à-vis the controller when processing personal data. The controller is the one who uses and processes your personal data.
As a data subject, you can invoke these rights at any time free of charge.
The rights of the data subjects are listed and briefly explained below.
- Right of withdrawal - You can withdraw your voluntary consent at any time.
You will often be asked for your consent or permission to use certain personal data in data protection. An example of this is consent to the creation of a photo and publication in social media. However, consent is also required, for example, when storing private e-mail addresses of an employee or customer.
However, once consented does not mean that this consent can no longer be withdrawn and you can no longer stop the data processing.
The right of withdrawal of the data subject states that you can at any time withdraw the filed consent that you gave at the beginning to the processing of your data.
Data processing will thus stop from the moment you revoke your consent.
However, your right of revocation only applies to the processing of personal data to which you have voluntarily consented. The processing of data that is required for the performance of a contract or processed due to a legal obligation cannot simply be revoked.
- Right of access - You can request an overview of all data stored by you with a specific user at any time.
Would you like to know which of your personal data is used by processors?
If you do not know which data a data controller is processing about you, if you are considering a revocation, or if you simply want to check whether the data concerning you is true, you can request information at any time.
You will then receive a precise overview of which of your data is processed, where it comes from and whether and how it is forwarded if necessary.
For example, you have the right to inspect your patient file as well as the personnel file of your workplace at any time.
- Right to erasure - For data that is not subject to a legal or contractual retention period, you may request erasure at any time.
You may at any time request the deletion of personal data concerning you that is processed and stored by responsible parties.
However, this is not always possible because there are legal/contractual exceptions. Certain categories of personal data may not simply be deleted, as they must be retained for a certain period of time due to a contract or a law. They are therefore subject to so-called retention obligations.
For example, you cannot simply have the data about your working time collected by a time recording system deleted, as this data is needed to fulfill the payroll stipulated in your employment contract. Otherwise, you might not receive a salary for your performance.
A technical impossibility may also prevent deletion. For example, it is no longer possible to delete information from the Internet once it has been published.
However, personal data that is not affected by these retention obligations must be deleted by the processor immediately upon your request.
- Right to Restriction - You can restrict consent to data processing to certain areas at any time.
Consent that you have given to the processing of certain personal data may often cover several categories of data. However, you can limit this consent to a smaller amount of data at any time.
For example, if you initially consented to the use of all cookies on a website, you can limit your consent to only the essential cookies at any time.
The use of the other cookies is stopped.
For example, even after a TV interview, you may have consented to your interview being broadcast with picture and sound in two weeks, but decide in time that you don't want your picture on TV after all. You can then restrict your consent so that only your answers are heard on TV.
- Right of objection - You may object at any time to data processing that serves the public interest or the legitimate interests of the processor, if there are grounds based on your particular situation.
The right of the data subject to object entitles you to object to the processing of certain data concerning you.
The right to object here refers to data processing that is carried out on the basis of a legitimate or public interest.
In principle, all data processing requires a legal basis so that it is permissible. This is often consent, a contract or a law. However, if the legal basis is not consent, a contract or a law, the controller may process your data based on its own legitimate or even necessary interest in your data.
Examples of data processing based on legitimate interest include:
- the transfer of your data within a company for administrative purposes
- Market research purposes
- Scientific, historical and statistical purposes
- The inspection of data by IT operators to maintain IT security
If data processing is carried out on the basis of such legitimate or public interest, they may object, which will result in the discontinuation of the use or collection of your data despite the legitimate interest of the processor, and the legitimate interest will be reassessed and evaluated.
- Right of rectification - In the case of data that has been stored incorrectly by you, you have the right to rectify this data at any time.
The right of rectification therefore describes that if you notice that processed data of yours contains errors or has changed, you can have the data rectified at any time with the person responsible.
- Right to data portability - You have the right to receive the personal data concerning you in a structured, common and machine-readable format or to have it transferred to another entity.
The right to data portability allows you to be handed over all personal digital data collected by a controller concerning you and provided to the processor.
In addition, you would be allowed to transfer or have transferred all relevant data to another entity.
So, for example, you could have all the digital data your primary care physician has received from you handed over or transferred to another physician's office of your choice.
In this regard, the responsible party is obliged to hand over the corresponding data to you in a suitable format, i.e. common, structured and machine-readable, not handwritten or otherwise encrypted.