This is information for your relating to the handling of your personal data when you visit our website. To provide the functions and services of our website, it is required that we collect your personal data. In the following, we explain you which of your data we collect, the purpose of the collection, and which rights you have in relation to your data. The entity responsible for the processing of personal data on this website is (cf. Legal Information):

Saint Elmo's Tourismusmarketing GmbH
Augustenstraße 24
80333 München
Telefon: +49 89 46 23 72 - 0

E-Mail: office@tourismusmarketing.com

You may as well ask our data protection officer questions on data privacy at any time at privacy@saint-elmos.com .

Use for Information Purposes

If you use the website without transmitting any other data to us (e.g. by registration or use of the contact form), we will only collect the technically required data, which are transmitted automatically to our server (e.g. IP address, date and time of the request, browser type and operating system). This is a technical requirement to allow us showing you our website. If personal data are affected in this context, Art. 6(1)(f) GDPR is the legal basis for the collection.

Use of Cookies

We use cookies to facilitate and improve the use of our website. Cookies are text information stored via the web browser on a computer at the visit of a website. The purpose is to recognize a visit, e.g. in case of a permanent login to a website or for the shopping cart function of an online shop.
Most of the web browsers accept cookies automatically. You may erase stored cookies at any time via the settings of your web browser. You may also adjust the settings of your web browser to bar the storing of cookies. Then, however, not all the functions of our website might be available.

Contact Form

On our website, you may use a contact form to enter personal data. If you use the contact form, we collect and store the data you enter in the input screen (e.g. second name, first name, email address). There will be no forwarding to any third parties.
If consent is given, the legal basis for the processing is Art. 6(1)(a) GDPR. If your request has the purpose of preparing the signing of a contract, Art. 6(1)(b) GDPR is an additional legal basis. We use the data to process and answer your request only.

Application Option

You may file your application on our website. If you apply, we collect and store the data you enter in the input screen. There will be no forwarding. The use of the application function is possible with your consent only. The legal basis for the processing is Art. 6(1)(a) GDPR. The exclusive purpose of the collection of the application data is to process your application.

Newsletter

On our website, you can subscribe to a newsletter. If you subscribe to the newsletter, we collect and store the data you enter in the input screen (e.g. second name, first name, email address). There will be no forwarding to any third parties. The subscription to the newsletter is possible with your consent only. The legal basis for the processing is Art. 6(1)(a) GDPR. We use the data only for sending newsletters.

Social Media

We link on this website to our presence in social networks or set social plugins such as "Share" or "Like" buttons. When you access our website, no data is transmitted to the operator of the respective social network, but only when you actively follow the link to our profile on the respective social network or click on the social plugin.
The following categories of data are processed by the respective social network:

• IP address
• Date, time
• Visited website

If you are logged in to your user account on a social network when you access our profile page, the operator of the social network may be able to assign the information collected during your visit to your personal account.

If you interact via a "Share" or "Like" button of the respective network, this information can also be assigned to the user's personal account and published if necessary.

If you want to avoid that the collected information can be directly assigned to your user account, you have to log out of the respective social network before accessing our profile page or using the social plugin.

You can also configure the user account on the respective social network accordingly.

If you access our profile page on a social network, the operator of the social network can also set cookies on your end device, regardless of whether you have an account with the network or whether you are logged in there. Cookies are data packets that mark the user's end devices with a specific identifier. Cookies are set primarily to enable us to display personalized advertising to visitors to social networks, including our profile pages. This is done, for example, by showing the user ads on social network pages from social network advertising partners whose websites the user had previously visited. Cookies also enable us to compile statistics on the use of our profile page (e.g. number of page views, user categories). If we receive such statistical analyses from the operator of the social network, the data is previously anonymised by the operator, i.e. it is not possible for us to assign usage data to an individual user.

The purpose of processing your data on our profile page with the respective social network is to inform you about our offers and services and to answer any enquiries on our profile page. The legal basis for the processing is Art. 6 par. 1 lit. f GDPR. In this respect, public relations work is covered by our legitimate interests within the meaning of the provision. If you use a social plugin integrated by us, the legal basis is your consent according to Art. 6 par. 1 lit. a GDPR.

Private messages that you send us via social networks will be deleted 2 years after the last communication with you. Public posts from you (e.g. in our timeline) will always remain permanently published until you explicitly request their deletion.

We have no influence on which data is collected and transmitted by the social network operator, to which third party recipients a transmission by the social network operator takes place and how long the data is stored by the social network operator. For this we refer to the privacy policy of the respective social network.

We reserve the right to delete illegal content published by users on our profile page on the respective social network, e.g. copyright infringements or statements relevant under criminal law.

In accordance with the case law of the European Court of Justice, we are jointly responsible with the operator of the respective social network for the operation of our profile page or the social plugin with regard to compliance with data protection regulations. Within this framework, the operator of the social network provides the corresponding IT infrastructure as well as the social network website and is basically the primary contact person when it comes to processing your data on the social network pages (e.g. information or deletion). However, you can also assert your legal rights against us. In this case we will forward your requests to the operator of the social network.

US providers (Facebook, Twitter, YouTube, Instagram, LinkedIn) are transmitting to the US. By concluding so-called EU standard contractual clauses, these providers have undertaken to comply with a level of data protection that essentially corresponds to the European level.
Please note, however, that the existence of an appropriate data protection standard for providers outside the EU / EEA – even in the case of the conclusion of EU standard contractual clauses – cannot be guaranteed in every case.

We include the following social networks on our website by linking to them:

Facebook:
Provider: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2 D02 X525, Ireland
https://www.facebook.com/about/privacy/
Twitter:
Provider: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland
https://twitter.com/de/privacy
Instagram:
Provider: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2 D02 X525, Ireland
https://help.instagram.com/519522125107875
YouTube:
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 D04 E5W5, Ireland
https://policies.google.com/privacy?hl=de&gl=de
Pinterest:
Anbieter: Pinterest Europe Limited, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland
https://policy.pinterest.com/de/privacy-policy
LinkedIn:
Provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2 D02 AD98, Ireland
https://www.linkedin.com/legal/privacy-policy/
Xing:
Provider: New Work SE, Dammtorstraße 30, 20354 Hamburg, Deutschland
https://privacy.xing.com/de/datenschutzerklaerung

Storing Period

We process and store your data only for as long as it is required for the processing or for complying with statutory duties. Once the purpose of processing no longer exists, your data will be blocked or erased. If there are any additional statutory duties to store the data, we block or erase your data upon the lapse of the statutory storing periods.

Your Rights

You have the following statutory rights against us relating to your personal data:

• Right to be informed
  As the data subject (affected person), you have the right to request a confirmation on whether we process personal data relating to you. If this is the case, you have the right to be informed of such personal data as well as to further information, e.g. the purpose of processing, the recipient and the scheduled storing period or the criteria for the determination of such period, respectively.
• Right to rectification and completion
  As the data subject, you have the right to request the immediate rectification of incorrect data. Taking into consideration the purpose of processing, you have the right to request the completion of incomplete data.
• Right to erasure (“right to be forgotten”)
  As the data subject, you have the right to erasure if processing is not necessary. This is the case e.g. if your data are no longer required for the original purposes, if you withdrew your statement of consent relating to data privacy, or if the data have been processed unlawfully.
• Right to restriction of processing
  As the data subject, you also have the right to restriction of the processing if e.g. you think that the personal data would be incorrect.
• Right to data portability
  As the data subject, you have the right to receive your personal data in a structured, customary and machine-readable format.
• Right to object
  As the data subject, you have the right to raise objection against the processing of certain of your personal data at any time for reasons resulting from your situation. In case of direct marketing, you as the data subject have the right to raise objection against the processing of your personal data for the purpose of such marketing at any time; this also applies to the profiling associated with such direct marketing.
• Right to withdraw your consent relating to data privacy
  You may withdraw a consent to the processing of your personal data with effect in the future at any time. The legality of the processing made until such withdrawal, however, is not affected by the foregoing.
  Moreover, you may lodge complaint with a data protection supervisory authority if you feel that the data processing does not comply with data protection regulations.

Google Analytics

We use Google Analytics to analyse and improve the use of our website.
Google Analytics is a web analysis service of Google Inc. (“Google”). Google Analytics uses what is known as “cookies”, i.e. text files that are stored on your computer to allow an analysis of your use of the website. As a rule, the information on your use of the website generated by the cookie is transmitted to and stored on a server of Google in the USA. In the event of activation of the IP-anonymization on this website, however, your IP address will be truncated previously in member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases, the full IP address is transferred to a server of Google in the USA and is truncated there. On the instruction of the operator of this website, Google will use this information to evaluate your use of the website in order to prepare reports on the website activities and to provide other services for the website operator relating to website use and internet use.
The IP address transmitted by your browser in the context of Google Analytics will not be combined with other data of Google.
You can prevent the storing of the cookies by an appropriate setting of your browser software; please note, however, that in this case you might not be able to use the full range of all functions of this website. Moreover, you can prevent the collection of the data (incl. your IP address) generated by the cookie and relating to your use of the website for Google as well as the processing of such data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en
We use Google Analytics with the extension “anonymizeIp()”. This is to truncate the IP addresses (so-called IP-masking). Thus, a connection to specific persons can be ruled out.
By concluding so-called EU standard contractual clauses, Google has undertaken to comply with a level of data protection that essentially corresponds to the European level. Please note, however, that the existence of an appropriate data protection standard for providers outside the EU / EEA – even in the case of the conclusion of EU standard contractual clauses – cannot be guaranteed in every case.
The legal basis for the processing of data using Google Analytics is your consent in accordance with Art. 6 (1) (a) GDPR.
Information on the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001 More information on the terms of use: www.google.com/analytics/terms/

Privacy Policy Online Advertising

The following media agencies of the Serviceplan Group deliver online campaigns for their advertising customers via technical systems of technology service providers (so-called “ad servers”):

• Mediaplus Austria GmbH & Co. KG
• Mediaplus Berlin GmbH & Co. KG
• Mediaplus Forward GmbH & Co. KG
• Mediaplus Geo Intelligence GmbH & Co. KG
• Mediaplus Gruppe für innovative Media GmbH & Co. KG
• Mediaplus International GmbH
• Mediaplus Köln GmbH & Co. KG
• Mediaplus Media 1 GmbH & Co. KG
• Mediaplus Media 2 GmbH & Co. KG
• Mediaplus Hamburg GmbH & Co. KG
• Mediascale GmbH & Co. KG
• Mediateam 360 GmbH & Co. KG
• Nayoki Mediaplus GmbH & Co. KG
• Plan.Net Gruppe für digitale Kommunikation GmbH & Co. KG
• Plan.Net Neo GmbH & Co. KG
• Plan.Net Hamburg GmbH & Co. KG
• Plan.Net Media Erste Mediaagentur GmbH & Co. KG
• Plan.Net Performance GmbH & Co. KG
• Prex Programmatic Exchange GmbH & Co. KG
• Saint Elmo’s Tourismusmarketing GmbH

The ad servers of the service providers use browser cookies and mobile identifiers to mark and recognize end devices (web browsers or mobile apps).

Processing purposes, legal basis

Insofar as the purpose of processing is the storage of information on your end device or the personalization of advertisements, the legal basis in each case is your consent in accordance with Article 6 (1) (a) GDPR. Otherwise, the legal basis is the pursuit of the legitimate advertising interests of our customers in accordance with Article 6 (1) (f) GDPR. This covers the display of non-personalized advertisements and the statistical evaluation of the effectiveness of such advertising.
You can find further information on processing purposes and the legal basis for data processing in connection with online marketing at:
https://iabeurope.eu/iab-europe-transparency-consent-framework-policies/#Appendix_A_Purposes_and_Features_Definitions.

Browser Cookies

These are small text files or simple entries in a database that your browser stores. The data in the cookies can only be read again by the system that wrote them. To identify end devices during advertising delivery, the cookies set by the ad servers contain a pseudonymous, unique serial number (identifier). When a cookie is deleted, the identifier on the terminal device is also irrevocably deleted. The cookies used by the systems do not cause any damage to your end device (e.g. computer / tablet), in particular, they do not contain viruses. You may refuse the use of cookies by selecting the appropriate settings on your browser, which may prevent you from using the full functionality of the platform or the website you are visiting. The same applies to the deletion of stored cookies.

Adform

Address of the service provider:
Adform ApS
Wildersgade 10B
1408 Copenhagen
Denmark
You have the option of stopping the recording of usage data by the system at any time by setting an opt-out cookie. If you delete the cookies in your browser, opt-out cookies will also be deleted. You must then perform the opt-out again.
An opt-out option with Adform can be found under: https://site.adform.com/datenschutz-opt-out/
Further information on data protection at Adform can be found at: https://site.adform.com/privacy-center/overview/
If you have any questions or complaints on these topics, you can contact us by e-mail set_privacy@saint-elmos.com