Data Privacy Policy

Our company takes the protection of personal data very seriously. We want you to know when we store which data and how we use it. When processing personal data, we comply with the requirements of the EU General Data Protection Regulation (GDPR) and the new Federal Data Protection Act (BDSG).
  

Usage data

The use of the TMGS website does not require the disclosure of personal data. Every time you access one of our websites, data about your visit to the website is stored in a log file. These log files and prepared usage statistics are made available to us via our web host. This data is not personal; we cannot trace which user has retrieved which data. No data will be passed on to third parties. Please note that data transmitted via the internet (e.g. via email communication) may be subject to security breaches. It is not possible to fully protect the transferred data from being accessed by third parties.
  

Server log files

The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This information includes:
• Browser type, browser version and browser language
 • Operating system used
 • Referrer URL
 • Host name of the accessing computer
 • Time of server request
 • Date and time zone difference for GMT of server request
 • IP address
 • Name and URL of the retrieved file or website
 • The volume of data transferred
 • Access status / http status code
 • Notification of successful retrieval
  
We use the log data only for statistical evaluations for the purpose of operation, security and optimisation of our service/ website. We do not combine this data with other data sources.
  

Contact details

We may need personal data in individual cases for certain offers and services. In that case, the data voluntarily provided by you - for example via a form - shall only be used by us for the purpose you have requested, for example, for getting in touch with you. No data will be passed on to third parties.

Usage of cookies

"Cookies" are small files that enable us to store information specific to you, the user, on your PC while you are visiting one of our websites. Cookies help us to ascertain the number of users who have used our web pages and the usage frequency and to make our services as convenient and efficient as possible for you.

 On the one hand, we use so-called "session cookies", which are stored temporarily solely for the period that you use one of our web pages.. On the other hand, we use "permanent cookies" to record information about visitors who access one of our websites on a repeated basis. This allows us to offer you optimized user guidance as well as to "recognize" you and with repeated use to present you with a website which is as varied as possible and which contains new content. The content of a permanent cookie is limited to an identification number. Name, IP address etc. are not stored. No individual profiles are created about your user behaviour.

 It is also possible to use our services without cookies. You can disable the storage of cookies in your browser, restrict it to certain websites or set your browser such that it notifies you as soon as a cookie is sent. You can also delete cookies from your computer’s hard drive at any time (Folder: "Cookies"). Please note that in this case you must expect a restricted display of the website and limited user guidance.
  

Rights of data subject

Data subject is entitled:

  • To request information about your personal data which is being processed by us in accordance with Art. 15 GDPR. In particular, you may request information on the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the right to rectification, deletion, restriction of processing or objection, the right of complaint, the origin of your data, unless it has been collected from us, as well as the existence of an automated decision-making,including profiling and, where appropriate, meaningful information about their specifics;
  • Pursuant to Art. 16 GDPR, you are entitled to demand the rectification of inaccurate or the completion of your personal data stored by us without delay.;
  • Pursuant to Art. 17 GDPR, you are entitled to request the erasure of your personal data stored with us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.;
  • Pursuant to Art. 18 GDPR, you are entitled to demand the restriction of the processing of your personal data if you dispute the accuracy of the data, if the processing is unlawful but you refuse its deletion and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have filed an objection against the processing in accordance with Art. 21 GDPR.

To do this, please contact us by e-mail at info@sachsen-tour.de. Alternatively, as in all other cases, you can of course contact our company at the postal address provided.

Furthermore, pursuant to Art. 7 para. 3 GDPR, the data subject is entitled to revoke its consent to the processing of personal data for one or more purposes in the future. Revoking your consent will not affect the legality of any processing that took place before the revocation. However, revoking your consent may affect the purpose for which the data was collected. To do this, please contact us by e-mail at  info@sachsen-tour.de.

 

Deletion of personal data

Personal data will be deleted if the purpose for the storage no longer applies and no legal provision (e.g. pertaining to the statutory retention period) prescribes the retention of the data. The provisions of Art. 17 GDPR in conjunction with Section 35 BDSG apply. Where the deletion is impossible for legal, contractual, commercial or tax-related reasons, the processing of data may be restricted at the data subject's request.
  

Data subject's right to data transferability

Pursuant to Art. 20 GDPR, the company guarantees the right to data transferability . Every data subject is entitled to receive a copy of his/her personal data in a standard machine-readable file format.
  

Data subject's right of appeal

Pursuant to Art. 77 GDPR, the data subjects are entitled to file a complaint with a supervisory authority. As a rule, you can contact the supervisory authority at your usual place of residence or at our headquarters.
  

Right of objection in accordance with Art. 21 GDPR

Where your personal data is processed based on legitimate interests pursuant to Art. 6 para. 1 p. 1 (f) GDPR, you have the right, pursuant to Art. 21 GDPR, to object to the processing of your personal data on grounds relating to your particular situation or if the objection is directed against direct advertising. In the latter case, you have a general right of objection, which is implemented by us without stating a particular situation. If you wish to exercise your right of revocation or objection, please send an e-mail to info@sachsen-tour.de.
 

Data security

We implement current technical measures to ensure data security, in particular to protect your personal data against the data transmission hazards and against third parties gaining unauthorised access to your data. These are adapted to the current state of the art in each individual case.

We use the most common SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser when you visit our website. Typically, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual Web page of our website is transmitted in encrypted form by the closed representation of the key or lock symbol in your browser status bar.

We also implement appropriate technical and organisational security measures to protect your data against accidental or intentional tampering, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

Information on data processing in relation to Google Analytics

This website uses Google Analytics, a web analytics service of Google Ireland Ltd. If those responsible for the processing of data on this website are resident outside the European Economic Area or Switzerland, Google Analytics data processing will be performed by Google LLC. In the following, Google LLC und Google Ireland Ltd will be called "Google". When using Google Analytics, the technical side of data processing will be delivered by Jimdo and we hereby refer to the privacy policy of Jimdo. Jimdo GmbH (Jimdo GmbH, Stresemannstrasse 375, 22761 Hamburg, Datenschutz@jimdo.com) and Tourismus Marketing Gesellschaft Sachsen mbH (TMGS) carry the joint responsibility for the data processing in relation to Google Analytics on this website.

 

Google Analytics uses so-called cookies – text files, which are being stored on the used device and enable analysing how visitors use the website. In general, the information about your website use that is generated by a cookie is being transferred to a Google server and stored there.

 

Google Analytics is on this website exclusively used with the extension "_anonymizeIp()". This extension ensures that the IP address is anonymised by shortening it and makes it impossible to trace the IP address to a specific user. Using this extension, Google shortens the IP address within member states of the EU or other Contracting States to the Agreement on the European Economic Area beforehand. The IP address that is transferred from the corresponding server in the context of Google Analytics is not being linked with other data held by Google.

 

On behalf of Jimdo and TMGS, Google will use the gathered information to analyse the use of the website, to prepare reports about website activities and to provide Jimdo and TMGS with further services that are related to the use of the website and internet use (Art. 6 Abs. 1 lit. f DSGVO). The legitimate interest in the data processing is the optimisation of the website, the analysis of website use and the modification of content, which is enabled by Jimdo’s statistics functionalities. User interests are sufficiently safeguarded through the pseudonymisation.

 

Google carries a Privacy Shield certificate (see entry here) and on this basis, guarantees a suitable level of data protection. The data that is being sent and linked with cookies, user IDs or advertising IDs is automatically being deleted after 50 months. Data that has reached its storage period is automatically being deleted once per month.

 

Visitors to this site can prevent Google Analytics data collection by adjusting the cookie settings for this website. Users can also deny consent to future collection and storage of the IP address and the cookie-generated data at any time. The corresponding browser plugin can be downloaded and installed here: https://tools.google.com/dlpage/gaoptout.

 

Visitors to this site can prevent the data collection through Google Analytics on this website by clicking on this link. This will activate an opt-out-cookie, which prevents future data collection when visiting this website.

 

If link is clicked: The website visitor has objected to data collection through Google Analytics on this website.

 

For further information on Google’s terms of use and data protection please see Google Analytics Terms of Service and Google Privacy and Terms.

 

Under the relevant legislation and General Data Protection Regulation (GDPR) visitors to this site have certain rights with respect to the personal data that is being processed through the Google Analytics data processing. In particular, they have a right of information, correction and deletion as well as right of data portability. Website visitors also have a right to object with regards to specific processing of their data. To exercise these rights with regards to Google Analytics data processing on this website, website visitors can contact Jimdo (Jimdo GmbH, datenschutz@jimdo.com) or TMGS (Tourismus Marketing Gesellschaft Sachsen mbH, info@sachsen-tour.de) at any time.

Use of Google AdWords

We also use the Google advertising tool "Google-Adwords" for advertising purposes. As part of this, our website uses the "Conversion Tracking" analysis service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as "Google". If you access our website via a Google ad, a cookie is placed on your computer. Cookies are small text files that your Internet browser downloads and stores on your computer. These so-called "conversion cookies" cease to be active after 30 days and are no longer used to identify you personally. If you visit certain pages of our website and the cookie is till active, we and Google know that you as a user have clicked on one of our advertisements placed with Google and have been redirected to our webpage.

 Google uses the information obtained through “conversion cookies” to compile statistics for our website. These statistics tell us the total number of users who have clicked on our ads, as well as which pages of our website were subsequently accessed by each user. However, neither we nor other advertisers who use “Google-Adwords” receive any kind of information that can be used to personally identify users.

 You can prevent the installation of "conversion cookies" by making the appropriate settings in your browser, such as a browser setting that generally disabled the automatic setting of cookies or specifically blocks only the cookies from the "googleadservices.com" domain.

 You can obtain the relevant data privacy policy from Google at the following link: https://policies.google.com/privacy?hl=en

Privacy policy for the usage of YouTube

Our website uses plug-ins from the YouTube site operated by Google. The site is operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.
 If you visit one of our websites provided with a YouTube plug-in, no direct connection to Google's servers will be established initially. Only when you activate the YouTube videos embedded in our websites do you enter the scope of Google data usage guidelines at https://policies.google.com/privacy?hl=en. This will transfer information about your use of YouTube to the operator in the USA and may save it.

If you are logged in to your YouTube account, you can enable YouTube to associate your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

You can find more information about the handling of user data in YouTube's privacy statement at: https://policies.google.com/privacy?hl=en.


Links to other websites

Our webpage contains links to other websites. We have no influence on whether their operators comply with the data protection regulations. Please note the disclaimer in the Imprint.

Processing authority or controller

The processing authority or controller as defined in the General Data Protection Regulation and the Federal Data Protection Act is Tourismus Marketing Gesellschaft Sachsen mbH in 01099 Dresden, Bautzner Str. 45-47.
  

Data protection officer

Our company has appointed an external data protection officer to safeguard data protection rights. You can find our data protection officer at


Astrid Kloss - Consultant for Data Protection and Data Security, www.kloss-consulting.de
 

Miscellaneous/ updates

The rapid development of the Internet requires occasional updates to this Privacy Policy. We will use this website to inform you about any such changes.
 A change to the privacy policy will take effect for you upon your next visit to our website following the change.

 

Dresden, May 1, 2020