Data Privacy Policy
Preamble
The protection of your data is extremely important to us! This online Privacy Policy informs you about which data we collect and how we use them. Data collected and stored exclusively for use are only processed by us on the basis of statutory provisions and with due adherence to the relevant data protection regulations, in particular the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). Wherever third parties are commissioned with the provision and fulfilment of services, they are naturally contractually obliged to comply with our data protection standards.
Below you will find information about the collection of personal data. In particular, we inform you of the way in which we process your personal data, as well as the scope and purpose of such processing.
Sec. 1 Data controller
Your point of contact on the subject of data protection:
We have appointed a Data Protection Officer for our company in compliance with the GDPR.
In the event of questions, problems or suggestions on the subject of data protection, please contact our Data Protection Officer through:
Rostocker Gesellschaft für Tourismus und Marketing mbH
z.Hd. Data Protection Officer
Warnowufer 65
18057 Rostock
Tel.: +49 (0) 381 381 2947
E-Mail: info@rostock-convention.de
Sec. 2 Information on the collection of personal data when using our website
(1) Personal data means all data that relates to you, e.g. name, postal address, date of birth, email addresses, user behaviour.
(2) When you make contact with us via email or a contact form, we will store the data you provide (your email address, possibly your name and telephone number) in order to reply to your query. We erase the data collected in this way when the purpose of its storage no longer applies or restrict the processing of your data where we are subject to statutory retention periods.
(3) We use SSL encryption for data transfer via the internet when you access pages and files on this website and in doing so are requested to provide personal data. This prevents unauthorised access by third parties. Your personal data will not be transferred or used for purposes other than those stated herein.
(4) If we rely on commissioned service providers for individual functions in our offering or we would like to use your data for advertising purposes, we will inform you in detail of the particular processes below. In the process, we will state the criteria defined for the duration of storage.
Sec. 3 Your rights
(1) You have the following rights in regard to your personal data:
• right to information;
• right to rectification or erasure;
• right to restriction of processing;
• right to object to processing;
• right to data portability.
(2) Right to object to data processing
You have the right under certain circumstances to object – party or completely – to the processing of your personal data, unless we can demonstrate compelling legitimate grounds that override your interests, or the continued processing is necessary for the establishment, exercise or defence of legal claims.
(3) Right to withdraw consent to data processing
Where processing of your personal data takes place based on your express, prior consent, you are entitled to withdraw this consent – partly or completely – at any time, effective for the future. This does not affect the processing of your data that is carried out according to other statutory provisions.
(4) Right to data portability
Where we process your personal data based on your express, prior consent or for the performance of a contract with you, you have the right under certain circumstances to request us to make the data available to you or to another controller to be determined by you in a structured, machine-readable format.
(5) Kindly address all requests for information, erasure and rectification, as well as all requests for access, data portability and objections to data processing to:
personal/confidential
Rostocker Gesellschaft für Tourismus und Marketing mbH
z.Hd. Data Protection Officer
Warnowufer 65
18057 Rostock
Tel.: +49 (0) 381 381 2947
Email: kontakt@rostock-convention.de
If you are of the view that the processing of your personal data breaches data protection legislation or your rights under data protection legislation have been otherwise infringed, you can also complain to the responsible regulatory authority about the processing of your personal data by us.
Sec. 4 Collection of personal data when visiting our website
(1) Where you visit our website merely for informational purposes, i.e. if you do not log on, register or otherwise disclose information to us during your use of our website, we will only collect the data that your browser transmits to our server. If you wish only to view our website, we collect the following data required for technical reasons to display our website and to guarantee its stability and security (the legal basis is set out in Art. 6 (1) Sentence 1 (f) GDPR):
• IP address,
• date and time of the request,
• time zone difference to Greenwich Mean Time (GMT),
• content of the request (specific page),
• access status/HTTP status code,
• data volume transferred in each case,
• referrer website,
• browser
• operating system and its user interface,
• language and version of browser software.
(2) Use of cookies
In addition to the data specified above, cookies are also stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and allocated to the browser you use and which send certain information to the site that places the cookie (in this case us). Cookies are unable to execute programs or place viruses on your computer. Their purpose is to improve the ease-of-use and efficiency of our website.
Cookie-Consent-Tool (Cookiebot)
A cookie consent tool (hereinafter: Cookiebot) is implemented on the website to enable you to monitor the use of cookies. Cookiebot is operated by Cybot A/S, 1058 Copenhagen, Denmark, and at the end of this data privacy statement, it shows you a list of cookies divided by functional group and explains the purpose of the cookie functional groups and of individual cookies as well as their length of storage. It is technically necessary to store a cookie in order to use Cookiebot. You can obtain further information on the terms of use at https://www.cookiebot.com/de/terms-of-service/ and on the data protection guideline of Cybot A/S at https://www.cookiebot.com/de/privacy-policy/
Settings through Cookiebot
Cookiebot is displayed to you as a pop-up window on the website on your first visit. Here you can then switch on the cookies divided by functional groups by clicking on the corresponding box. Please note that the technical cookies are stored as soon as the website is called up and the corresponding box is preset.
If technical cookies are deactivated, use of the website and/or individual functions on the website may be restricted or impossible.
Your cookie settings
If you would like to review or change your cookie settings, please scroll to the bottom, click on “Change your consent” and then make the corresponding settings in Cookiebot.
Revocation / opt-out options
Settings through Cookiebot
If you have issued your consent to the placement of cookies on a visit to this website, you can revoke your consent by calling up Cookiebot (see above cookie settings) and cancelling the selection of the relevant cookie category.
Directly with the cookie provider
Besides the revocation option via Cookiebot, you can deactivate cookies directly with a cookie provider or prevent the processing of data through browser plug-ins. Where a cookie provider offers such options, we have included a corresponding link in the relevant notes.
Browser settings / plug-ins
An additional opportunity to monitor the use of cookies is available through appropriate settings in browsers with corresponding setting options.
(3) Use of the web analysis tool Google Analytics
The web analysis tool Google Analytics is used on this website – provided you give your consent. Google Analytics is a web analysis service provided by Google LLC. The responsible service provider in the EU is Google Ireland Limited , Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
Google Analytics uses cookies to facilitate analysis of your use of our web pages. The information collected by the cookie about your use of this website is usually sent to one of Google's servers in the USA and stored there.
Google Analytics uses so-called “cookies” which are text files placed on your computer to enable your use of the website to be analysed. User profiles can be produced from these data under a pseudonym but such profiles cannot be traced back to individuals as the IP address is anonymised. During your visit to the website, the tracking tool registers the following data:
- the pages you call up, your “click path”
- attainment of “website targets” (conversions, e.g. newsletter registrations, downloads, purchases)
- your user behaviour (e.g. clicks, length of stay, bounce rates)
- your rough location (region)
- IP address (in abbreviated form)
- technical information on your browser and the devices used by you (e.g. language setting, screen resolution).
- your internet provider
- referrer URL (from what website/ad you arrived on this website)
Purposes of the processing
Google will use this information on behalf of the website operator to evaluate your use of the website and compile reports on website activities. The reports provided by Google Analytics serve to analyse the performance of our website and the success of our marketing campaigns.
Receivers
The receiver of the data is:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
as the processor. We have concluded a data processing agreement with Google for this purpose. Google LLC, headquartered in California, USA, and possibly US authorities may access the data stored at Google.
Transfer to third countries
The transfer of data to the USA cannot be ruled
Storage period
The data sent by us and linked to cookies are automatically deleted after 14 months. Data for which the retention period has expired are automatically deleted once a month.
You can also prevent the data generated by the cookie and related to your use of the website (including your IP address) from being registered and sent to Google and the processing of such data by Google by
a. not issuing your consent to the placement of cookies, or b. downloading and installing the browser add-on for deactivating Google Analytics (https://tools.google.com/dlpage/gaoptout?hl=de)
You can also prevent the storage of cookies by means of a corresponding setting in your browser software. If you configure your browser to reject all cookies, however, the functionality of this and other websites may be restricted.
Legal basis and revocation option
For this data processing, your consent is required in accordance with Art. 6 (1) Sentence 1 (a) GDPR. You can revoke your consent at any time effective for the future by calling up cookie settings at the bottom of this page (“Change your consent”) and changing your selection there.You can find more detailed information on Google Analytics’ terms of use and data protection at Google at https://marketingplatform.google.com/about/analytics/terms/de/ and at https://policies.google.com/?hl=de.
(4) Other external services
a. YouTube
We embed YouTube videos through our website (YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066 USA) to provide you with a range of multimedia information. These videos are stored at www.YouTube.com. YouTube facilitates the free insertion of video clips which you can view, evaluate and comment on. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. The responsible service provider in the EU is Google Ireland Limited , Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
Data processing by YouTube
We have integrated YouTube in an unactivated state as standard. To view our videos, you must first click on the thumbnail. The video will only be played once you have removed the notice by clicking on it. In addition, we have embedded the YouTube videos in extended data protection mode or with the no-cookie solution, i.e. cookies and pixel tags for personalising advertising and search results are only placed by YouTube when the video is played.
The following data are transferred to Google as the YouTube operator when the YouTube video is played:
• IP address,
• specific address of the page called up on our website,
• browser ID transferred and
• system date and time of the call-up,
• existing cookies that can be used to unambiguously identify your browser.
As the operator of YouTube, Google is solely responsible for this data processing. We would like to point out that Google may receive further data on cookies already stored on your device. The extent to which Google uses such data is beyond our control. To this extent, we, too, have no effective monitoring options.
You can find further information here: https://policies.google.com/privacy?hl=de
When you use Google, your personal data are captured, transferred, stored, disclosed and used by Google and in the process transferred to the United States, Ireland and any other country in which Google operates and stored and used there irrespective of your place of residence. The data are passed on to companies associated with Google as well as to other trustworthy companies or persons who/which process them on Google’s behalf. On the one hand, Google processes the data you have provided voluntarily such as your name, username, email address and telephone number. Content which you create, upload or receive from others in using the services will also be processed by Google. For example, this includes photos and videos which you save, documents and tables which you create and comments which you write about YouTube videos. On the other, however, Google also evaluates the content you share to see what subjects you are interested in, stores and processes confidential messages that you send directly to other users and it can determine your location on the basis of GPS data, information on WiFi networks or through your IP address in order to have advertising or other content sent to you.
Google may use analytical tools such as Google Analytics for such evaluations. Finally, Google also receives information, e.g. when you view content even if you have not set up an account. These so-called “log data” may be the IP address, browser type, operating system, information on the previous website visited and the pages you viewed, your location, your mobile phone provider, the device you are using (including device ID and application ID) and the search terms you used and cookie information.
You will find details of the data processed by Google and for what purposes it uses them in Google’s privacy policy:
https://policies.google.com/privacy?hl=de&gl=de#infocollect
In the general settings of your Google account, you have options to restrict the processing of your data. In addition to these tools, Google also offers specific data protection settings for YouTube. You can find out more on this in the guide to data protection in Google products: https://policies.google.com/technologies/product-privacy?hl=de&gl=de
Legal basis
The legal basis for the data processing is set out in Article 6 (1) (f) GDPR. We have a legitimate interest in providing you with multimedia information and thus expanding our range of information. Cookies are also only placed if you actively click away the thumbnail.
b. Google Tag-Manager
This website uses Google Tag Manager. With this service, website tags can be administered through an interface, i.e. the service is used to register data on a website which are then relayed to the relevant analytical tool. However, the data are only relayed but not collected or stored by Tag Manager. Tag Manager is merely a cookie-less domain that does not access any data and therefore does not process any personal data either. The data are evaluated in the integrated tools.
Click here for further remarks on Google Tag Manager:
https://marketingplatform.google.com/intl/de/about/tag-manager/
Sec. 5 Other functions and services on our website
(1) Besides the purely informational use of our website, we also provide a variety of services that may be of interest to you. In these cases you will usually be required to provide personal data that we use for the provision of the individual services and that are subject to the principles of data processing set out above. All information that you may disclose voluntarily is marked suitably as such.
(2) We use external service providers to process your data in some cases. We have selected and commissioned them carefully; they are required to adhere to our instructions and are audited regularly. In particular, they have entered into a contractual undertaking to adhere to our data protection standards.
(3) Furthermore, we can only pass on your personal data to third parties if participation in campaigns, competitions, the conclusion of contracts or similar services are offered by us together with partners. You can obtain further information if you provide your personal data or in the description of the offer below.
(4) Where our service providers or partners are located in a state outside of the European Economic Area (EEA), we will inform you of the consequences in the description of services.
Sec. 6 Collection of personal data for the claiming of services via online forms, for recipients of email services and other functions
(1) For example, we collect personal data in the following processes:
• utilisation of services (online and print, etc.)
• recipients of email services
(2) Online forms
For some of our online services, we require personal data to enable us to provide these services (contacting us, call-back service, online information, applications, notifications). Where you wish to make use of these services, we only collect, store and process the data required for the provision of these services. These data will only be used for the specified purpose. The specific data we collect, store and use for the provision of individual services can be taken from the relevant input screens. All other voluntary details are marked as such. Data are processed according to the statutory provisions as set out in Art. 6 (1) (a) (consent) of the GDPR. Processing is lawful provided you have given your consent to the processing. You may withdraw your consent at any time.
a. Details for admission to partner network
Hotels, holiday accommodation and further tourism service providers have joined the tourism network of Rostock Marketing and are working together to offer powerful destination marketing. If you let out holiday accommodation, hotel rooms, boarding houses or you are a tourism service provider, you have the opportunity to become a partner of Rostock Marketing by using the contact form on our website and benefit from numerous advantages.
There is a contact form “partner application” on our website which can be used to contact us electronically. If a user interested in admission to the partner network takes advantage of this opportunity, the data entered in the input screen are transmitted to us and stored.
When you make contact with us via this contact form, we will store the data you provide (selection of category, certain corporate data, nomination of points of contact with contact details (email address, title, surname, first name and telephone numbers)) in order to reply to your query and process your application to join the partner network. The following data are also stored when the message is sent:
• user’s IP address
• date and time of registration
Alternatively, we can be contacted via the email addresses or telephone numbers we have provided. In this case, the user’s personal data transmitted with the e-mail are stored. If you provide us with details regarding your means of communication (e.g. email address, telephone number), we will use them to reply to your concern. The data will not be passed on to third parties in such cases. Your data will only be used to process your concern.
Legal basis for the data processing
The legal basis for processing data transmitted in the course of contacting us is given by Art. 6 (1) Sentence 1 (b) and/or (f) GDPR. If we request details through our contact form that are not necessary for making contact, we always mark them as optional. Such details help us to give concrete form to your enquiry and better handle your concern. They are communicated explicitly on a voluntary basis and with your consent, Art. 6 (1) Sentence 1 (a) GDPR.
Purpose of data processing
The processing of the personal data from the input screen serves solely for processing your partner application. In the event of contact by email, this also provides the required legitimate interest in processing the data. Further personal data processed during the sending procedure serve to prevent any abuse of the contact form and ensure the security of our IT systems.
Duration of storage
The data are deleted as soon as they are no longer required to achieve the purpose of their collection. With regard to the personal data from the input screen of the contact form and those sent by e-mail, this is the case when the relevant conversation with the user has been completed. The conversation is completed when the circumstances indicate that the subject in hand has been conclusively dealt with. Any additional personal data collected during the sending procedure will be deleted after a period of seven days at the latest.
Objection and removal option
The user has the option at any time to revoke their consent to the processing of their personal data. If the user makes contact with us by email, they can object to the storage of their personal data at any time. In any such event, it will not be possible to continue the conversation.
All personal data saved in the process of establishing contact, will be erased in that case.
b. Online contact with partner companies
Users of our website have the option to contact our partner companies. However, the precise contact details of partner companies are not visible to the user. Any message to the relevant partner is sent directly to the partner’s email address filed in the system and is not stored on our website.
(3) Recipients of email services
Where we receive an email from you (e.g. using the contact form), we will assume that we are entitled to answer by email also. A different form of communication (e.g. postal correspondence) would otherwise be necessary. For reasons of data protection, we respond by post to enquiries containing personal data. Where you send us an email, your email address will only be used to correspond with you.
a. Newsletter
You have the option of registering on our website for our regular newsletter sent by email. In this regard, we would like to inform you of the nature, scope and purpose of the collection and use of personal data by us or the service providers commissioned by us in accordance with the requirements of the GDPR, the BDSG and the Digital Services Act (DSA). We take data protection very seriously and treat your personal data confidentially and in accordance with statutory regulations.
Data collected
We send out our newsletters using a corresponding tool of CleverReach GmbH & Co. KG, //CRASH Building, Schafjückenweg 2 in 26180 Rastede. We have concluded a processing agreement with this company for this purpose. When you register for the newsletter on our website, we collect data. The data collected are used exclusively to send the newsletter and otherwise not transmitted to third parties – with the exception of the website operator and CleverReach GmbH & Co. KG. The following data are collected:
Email address
Your personal data are only passed on if this is legally permitted or you consent to the collection of the data. Personal data constitute all information that can be used to identify you and that can be traced back to you – e.g. your name, email address and telephone number.
Purpose of data processing
The processing of the personal data is based solely on your request / application to be included in the email circulation list. You have communicated your email address to us for this purpose. Further personal data processed during the sending procedure serve to prevent any abuse of the contact form and ensure the security of our IT systems.
Legal basis for the data processing
The legal basis for processing data transmitted in the course of contacting us is given by Art. 6 (1) Sentence 1 (a) and/or (f) GDPR. Such details help us to give concrete form to your enquiry and better handle your concern. They are communicated explicitly on a voluntary basis and with your consent, Art. 6 (1) Sentence 1 (a) GDPR. If the purpose of making contact by email is to conclude a contract, Art 6 (1) Sentence 1 (b) GDPR constitutes a further legal basis for the processing.
Duration of storage
The data are deleted as soon as they are no longer required to achieve the purpose of their collection. For example, this is the case at the latest once you have informed us that you no longer wish to receive the newsletter. Any additional personal data collected during the sending procedure will be deleted after a period of seven days at the latest.
Objection and removal option
You can revoke your consent with regard to receiving the newsletter at any time effective for the future by clicking on the separate link provided in every email or by sending us your revocation in a message to info@rostock-convention.de without incurring any costs other than the basic rate of transmission. As a result of your cancellation, you will not receive any further newsletters from us.
(4) Data protection in the event of applications and application procedures
We collect and process the personal details of applicants for the purpose of handling the application procedure. The data may also be processed electronically. This is the case, in particular, if an applicant sends us their application documentation electronically, e.g. by email. If we conclude a contract of employment with an applicant, the data transmitted are stored for the purpose of processing the employment relationship taking account of statutory regulations. If no contract of employment is concluded with the applicant, the application documents will be deleted at the latest six months after notification of rejection, provided this does not conflict with other legitimate interests of the controller. For example, another legitimate interest in this context is an obligation to provide evidence in a legal case under the General Equal Treatment Act (AGG).
Sec. 7 Objection or revocation of consent to data processing
(1) Where you have consented to the processing of your data, you may revoke your consent at any time. Any such revocation will affect the legitimacy of the processing of your personal data after you have informed us of your revocation.
(2) Where processing of your personal data is based on a balance of interests, you have the right to object to this processing. This is the case in particular where processing is not necessary for the performance of a contract with you, as indicated by us in the following description of functions. If you exercise your right of objection, we request that you inform us of the reasons why our right to the processing of your personal data should no longer apply. Where your objection is legitimate, we will review the circumstances and will either refrain from processing, adapt processing or inform you of our compelling legitimate interests for the continuation of processing.
(3) Naturally, you may object at any time to the processing of your personal data for marketing and data analysis purposes. To exercise your right to object to the use of your personal data for marketing purposes, kindly contact us at:
personal/confidential
Rostocker Gesellschaft für Tourismus und Marketing mbH
z.Hd. Data Protection Officer
Warnowufer 65
18057 Rostock
Tel.: +49 (0) 381 381 - 2947
E-Mail: kontakt@rostock-convention.de
Sec. 8 Standard periods for the erasure and blocking of personal data
Your personal data will only be stored for the period that is necessary for us to fulfil the purpose of its storage or as required or intended for compliance with legal obligations. If the storage purpose no longer applies or a statutory retention period expires, the personal data are routinely blocked or erased in accordance with statutory provisions.
Sec. 9 Existence of automated decision-making
Profiling describes the compilation of personality, behavioural or activity profiles through the collection and analysis of data to provide a schematic, algorithm-based, overall impression of an individual personality. As a responsible entity under public law, we do not use automated decision-making or profiling.
Sec. 10 Data security
We maintain up-to-date technical and organisational measures to guarantee security of processing, in particular to protect your personal data from the risks associated with data transfer and access by unauthorised third parties. These measures are kept state-of-the-art and are adapted to suit the necessary protection of the personal data and the risks to your rights and freedoms.
Sec. 11 Amendment of this Privacy Statement
We will review this Privacy Statement on a regular basis and update it where necessary to protect your personal data. You are advised to read the Privacy Statement from time to time in order to obtain current information on how we protect your data and continuously improve the content of our website. Where we make significant changes to the collection, use and/or transfer of the personal data provided by you, we will notify you suitably in an unambiguous statement at a prominent position on our website. You agree to the provisions of this Privacy Statement by continuing to use this website.
This website uses cookies. We use cookies in order to personalise content and notices, to enable us to offer social media functions and analyse access to our website. We also pass on information on your use of our website to our partners for social media, advertising and analyses. Our partners may combine this information with further data which you have provided or which they have collected in the course of your use of the services.
Cookies are small text files used by websites to make the user experience more efficient.
By law, we can store cookies on your device if they are essential for the operation of this site. We need your permission for all other types of cookie.
This site uses different types of cookies. Some cookies are placed by third parties that feature on our pages.
You can amend or revoke your consent to the cookie statement on our website at any time.
Find out more in our data protection guideline about who we are, how you can contact us and how we process personal data.