Your accommodation at the Ruhr
The following statement gives you an overview of which personal data Mülheimer Stadtmarketing and Tourismus GmbH (MST) for what purpose during your visit to our website and how they are used.
Legal basis of processing
As far as we obtain your consent for processing of personal data, Art. 6 para. 1 lit. a) EU General Data Protection Regulation (DSGVO) as legal basis.
In the processing of personal data required to fulfill a contract of which you are a party, Art. 6 para. 1 lit. b) GDPR as legal basis. This also applies to processing operations required to carry out pre-contractual measures.
Insofar as processing of personal data is required to fulfill a legal obligation to which Mülheim City Marketing and Tourism GmbH (MST) is subject, Art. 6 para. 1 lit. c) GDPR as legal basis.
If the processing of personal data is necessary to safeguard legitimate interests of Mülheimer Stadtmarketing and Tourismus GmbH (MST), Art. 6 para. 1 lit. f) GDPR as legal basis.
Data erasure / storage duration
Your personal data will be deleted as soon as the purpose of the storage is eliminated. In addition, storage may take place if this has been provided by the European or national legislator in EU regulations, laws or other regulations to which Mülheimer Stadtmarketing and Tourismus GmbH (MST) is subject. A deletion of the data takes place even if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for a contract or fulfillment of the
Creation of log files
Every time you access the Mülheimer Stadtmarketing and Tourismus GmbH (MST) website, information is automatically temporarily stored by your browser. The created log file records the browser type / version, the operating system used, the name and URL of the retrieved file, the reference URL (the previously visited page), the host name of the accessing computer (IP address) and the date and time of the server request. There is no merge of this data with other data sources. The storage and processing of this data is solely for system security and optimization of the Internet offerings.
Mülheimer Stadtmarketing and Tourismus GmbH (MST) offers you the opportunity on the website to various questions about Mülheimer Stadtmarketing and Tourismus GmbH (MST) to inform or contact. You have the possibility to contact Mülheimer Stadtmarketing and Tourismus GmbH (MST) via the contact form, by phone call, or the agreement of a callback. When you contact us, we collect information such as your name, email address and phone number. The processing of this data takes place in the context of pre-contractual measures, which are necessary for the provision of the offered service. Subsequently, the data will be deleted unless the data is still required for the performance of a contract or pre-contractual action. If the inquiry relates to the activities of subsidiary, investment or business-related companies of Mülheimer Stadtmarketing and Tourismus GmbH (MST) and this is necessary for an efficient processing of the request, your data can be passed on to the company concerned.
Alternatively, contact via the provided e-mail address is possible. In this case, the user's personal data transmitted by e-mail will be stored.
On our website, we offer users the possibility of stating personal information, tickets (museums or similar) or so-called experience modules (white fleet, bus tours, guides, etc.) to book. The data is entered into an input mask and transmitted to us and stored. The data is used for the purpose of processing the order / booking and within the scope of a order processing to the my.IRS GmbH, Dornierstr. 4, 82178 Puchheim passed. The following data is collected during the registration process:
- Gender (Mr / Mrs)
- First given name
- Address (street, zip code, city)
In addition, the direct debit procedure saves the account data at myIRS GmbH.
With (online) payment by credit card, personal data is collected and stored at Datatrans AG, Kreuzbühlstraße 26, CH-8008 Zurich. These are the following data:
- Credit card providers (MasterCard, VISA, American Express, AmEx)
- card number
- check digit
- validity period
The data is passed on by Datatrans AG to the companies involved in the payment process. We do not store the credit card data.
Information on DataTrans data protection can be found here: https://www.datatrans.ch/en/data-privacy
With (online) payment by direct debit via Sofortüberweisung your account data will be processed by the Sofort GmbH, Theresienhöhe 12, 80339 Munich. We do not store the account data. To find out about the data protection at Sofort GmbH, you can visit the following website: https://www.sofort.de/datenschutz.html
For data collection and storage, we also use so-called cookies. Cookies are data packets that your browser stores at our request in your device. There they do no damage. They contain no executable code and therefore no viruses and do not allow us to spy on you. There are two types of cookies: temporary, so-called session cookies, and persistent cookies.
Session cookies are automatically deleted when you close the browser. These store a so-called session ID, with which various requests from your browser can be assigned to the common session. This will allow your computer to be recognized when you return to our website. The use of session cookies is required so that we can make the website available to you. The legal basis for the processing of your personal data using session cookies is Art. 6 para. 1 lit. f) GDPR.
Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time. With the help of cookies, we are able to understand your usage behavior for the above purposes and to the extent necessary. They should also allow you to surf the web on our website. The use of persistent cookies takes place with your consent. The legal basis for data processing is Art. 6 para. 1 lit. a) GDPR.
You can set your Internet browser so that our cookies cannot be stored on your device or already stored cookies can be deleted. If you do not accept cookies, this may result in restrictions on the functioning of the website.
With your consent, we also include third-party cookies. In this case, the corresponding data packets are stored by third parties in your browser or transmitted to them. You can also prevent the use of third-party cookies by setting your browser accordingly. The following third-party cookies are
- Google Analytics
- my.IRS GmbH
The legal basis for the processing of your personal data using third-party cookies is Article 6 (1) lit. a) GDPR.
The following information describes further, special data processing facts regarding the use or operation of our Facebook fan page.
Purposes and legal basis of data processing
We use Facebook to attract more attention to our own offerings and to stay in touch with customers. Facebook is a web-based platform of Facebook Ireland Limited, based in Ireland, which was developed to operate a social network.
By setting up a page on the Facebook platform, we process the following statistical data of users:
- Page activity and interaction (the total number of individuals who interacted with the page, broken down by interaction type, such as likes for the page, likes - net (after subtracting the removed likes) And the location where the likes for our likes were made, the number of page recommendations, the number of clicks on contact information, and the call to action button on the page Page.)
- Contribution Reach (The total number of individuals who have seen page and posts, the number of people for whom post was provided.)
- Page Preview (The number of people who hovered over the page name or profile picture to preview the page content.)
- Visits (page and tab views, number of visits from a website outside Facebook.)
- Interaction with videos (number of views, the most viewed videos for at least 3 seconds on the website) Information about the persons (information on the persons who like this page: gender, age, place of residence and language; that specific posts have been shown in the last 28 days, showing people who have tagged, commented on, shared, or interacted with posts on the page.
These statistics are generated and provided by Facebook. On the generation and presentation, we have no influence as the operator of the fan page. We cannot stop this feature and prevent the generation and processing of the data.
As part of the use of Facebook site insignia, we are responsible, in accordance with Art. 26 DS-GVO, together with Facebook for data processing on the Facebook fanpages.
More details about Facebook Insights can be found at: https://www.facebook.com/help/pages/insights.
A general statement on how Facebook processes the data collected and what data is affected can be found at: www.facebook.com/about/privacy. For complete data guidelines, click on the following link: https://www.facebook.com/full_data_use_policy.
If you are logged in to Facebook, Facebook can save further data about your surfing behavior. You can minimize this information when you log out of Facebook. More information can be found here: www.facebook.com/about/privacy
The statistics provided by Facebook are used to make posts more attractive and effective. For example, the distributions by age and gender for a correct approach, and preferred visiting times of the users for a time-optimized planning of the posted posts used. By information about the type of devices used by the visitors, the contributions can be visually and creatively adapted to the respective device. The described data processing takes place on the basis of the legitimate interests of the Mülheim City Marketing and Tourism according to Art. 6 I f) DSGVO.
We process your data within the scope of a legitimate interest in:
- Providing a communication channel and advertising for own products and services
- Facebook uses for storage and further processing of this information so-called cookies - so small text files that are stored on the various devices of the user.
If the users have a Facebook profile and are logged in to it, the storage and analysis is also cross-device.
These data processing takes place taking into account the principle of data minimization and as far as possible in pseudonymised and / or aggregated form.
Categories of recipients
- Internal jobs, eg. For example, to provide the content of the page
- Facebook as the operator of the platform gathers information about your users and information related to the Facebook services. Such information includes, for example, information about which products Facebook uses, what types of content are viewed, and with whom people interact. The information is used to, among other things, advertising carts, providing, personalizing and improving products, providing measurements, analysis and other business services. If you use the Facebook Fanpage, please also take note of the privacy information of Facebook Inc. at: https://www.facebook.com/privacy/.
Transmission to third countries
Facebook Inc. is based in the USA. We cannot exclude the transmission and further processing of your personal data as operator of the Facebook Fanpage.
In order to safeguard data protection compliant processing in terms of the General Data Protection Regulation, Facebook Inc. has submitted to the EU-US Privacy Shield:
Data of the usage analysis are stored by us pseudonymized for a maximum of 24 months. How long Facebook stores your data is currently unknown.
Consent and revocation
You can object to this data processing by Facebook at any time, in which you no longer subscribe to our Facebook page (by selecting the functions "I do not like this page" and / or "Do not subscribe to this page") you will be able to connect your user profile our fanpage).
Use of Google Analytics
Our website uses Google Analytics, a web analytics service provided by Google Ireland Limited. Google Analytics uses so-called "cookies", text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. On our website we use the code extension "anonymizeIp", which serves to activate the IP anonymization on this website. However, by using this extension, your IP address will be shortened by Google beforehand within member states of the European Union or other parties to the Agreement on the European Economic Area.
Google will use this information solely on our behalf to evaluate your use of the website, to compile reports on the website activity and to provide other services related to the use of the website and the internet to the website operator. The shortened IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by a corresponding setting of your browser software; However, we would like to point out that in this case you may not be able to use all functions of this website in full.
You can also prevent collection by Google Analytics by clicking on the following link tools.google.com/dlpage/gaoptout. An opt-out cookie will be set which prevents the future collection of your data when visiting this website.
Google has submitted to the EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
Mülheimer Stadtmarketing and Tourismus GmbH (MST) cannot guarantee the security of data transmission on the Internet. Messages via e-mail are not encrypted. A knowledge by third parties cannot be ruled out. It is therefore recommended that confidential information be sent by post only.
Responsible in the sense of the basic data protection regulation is:
Mülheimer Stadtmarketing and Tourismus GmbH (MST)
Am Schloß Broich 28
45479 Mülheim an der Ruhr
Rights of the data subject
If personal data are processed by you, you are the affected person within the meaning of the GDPR and you are entitled to the rights described below. Please direct your request in principle to the o.g. Responsible.
Information: You have the right to receive free information from us at any time as well as confirmation of the personal data stored about you and a copy of this data.
Correction: You have the right to rectification and / or completion if the personal data you process is incorrect or incomplete.
Restriction of processing: You have the right to request the restriction of processing if one of the following conditions is met:
- The accuracy of your personal information is contested by you for a period of time that allows us to verify the accuracy of your personal information.
- The processing is unlawful, you reject the deletion of personal data and instead require the restriction of the use of personal data.
- We no longer need your personal information for processing purposes, but you need it to assert, exercise or defend your rights.
- You have objection to the processing acc. Art. 21 para. 1 DSGVO and it is not yet clear whether our legitimate reasons prevail over yours.
Deletion: You have the right to have your personal data deleted without undue delay if one of the following reasons applies and if processing is not required:
- The personal data has been collected for such purposes or otherwise processed for which they are no longer necessary.
- They revoke their consent, on which the processing was based, and lack any other legal basis for processing.
- You object to the processing in accordance with Art. 21 (1) GDPR and there are no legitimate reasons for the processing, or you object to the processing according to Art. 21 (2) GDPR.
- The personal data was processed unlawfully.
- The deletion of personal data is required to fulfill a legal obligation under Union or national law to which we are subject.
- The personal data were collected in relation to information society services offered pursuant to Art. 8
Data portability: You have the right to receive personally identifiable information you provide us in a structured, common and machine-readable format. You also have the right to transfer this data to another person without hindrance. In exercising this right, you also have the right to obtain that personal data concerning you are transmitted directly by us to another person responsible, as far as this is technically feasible. Freedoms and rights of other persons may not be affected.
Objection: You have the right to object at any time to the processing of personal data relating to you which is "only" based on legitimate interests of us or third parties (Article 6 (1) (f) GDPR). We will not process personal information in the event of an objection, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purposes of asserting, exercising or defending legal claims.
Revocation of consent: You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
For the exercise of your rights, please always contact the o.g. Responsible as there are also your rights to implement. However, you can also contact the data protection officer, especially if your request requires more confidentiality:
The Data Protection Officer of Mülheimer Stadtmarketing and Tourismus GmbH (MST)
c / o migosens GmbH
45473 Mülheim an der Ruhr
Tel: +49 (0) 208-99395110
Fax: +49 (0) 208-99395119
dsb-Mülheimer-city marketing (at) dsb24.net
Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of its place of residence, employment or the place of the alleged infringement, if you believe that the processing of the personal data concerning you is against the DSGVO violates.