This privacy police applies to the following pages:
www.oberharzinfo.de
www.obenimharz.de
www.harzer-hoehlen.de

as well as the various social media channels (Facebook, Twitter, Instagram, Pinterest).

Tourismusbetrieb der Stadt Oberharz am Brocken,
Rübeländer Tropfsteinhöhlen
Blankenburger Straße 35
38889 Oberharz am Brocken OT Rübeland
tourismus[at]oberharzinfo.de
phone 039454 - 49 110

is responsible within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR).

You can use the following rights at any time using the contact details of our data protection officer:

• Information about your data stored by us and their processing (Art. 15 GDPR),
• Correction of incorrect personal data (Art. 16 GDPR),
• Deletion of your data stored by us (Art. 17 GDPR),
• Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
• Objection to the processing of your data by us (Art. 21 GDPR) and
• Data transferability, provided you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR).

If you have given us your agreement, you can revoke it at any time with effect for the future. You can contact a supervisory authority with a complaint at any time, e.g. to the responsible supervisory authority of the federal state of your place of residence or to the authority responsible for us as the responsible agency.

A list of the supervisory authorities (for the non-public area) with addresses can be found here:
The contact details of the data protection officers in the federal states.

Type and purpose of processing:

When you access our website, meaning you do not register or otherwise provide information, information of a general nature is automatically recorded. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and suchlike.

In particular, they are processed for the following purposes:

• Ensuring a uncomplicated connection to the website,
• Ensuring smooth use of our website,
• Evaluation of system security and stability as well as
• for further administrative purposes.

We do not use your data to draw conclusions about you personally. Information of this kind may be statistically evaluated by us in order to optimize our website and the technology behind it.

Legal basis:
The processing takes place in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

Receiver:
The recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Storage period:
The data will be deleted as soon as they are no longer required for the purpose of the survey. For the data used to provide the website, this is generally the case when the respective session has ended.

Provision required:
The provision of the aforementioned personal data is neither legally nor contractually required. Without the IP address, however, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or restricted. For this reason, no contradiction is possible.

Type and purpose of processing:
The data you enter will be stored for the purpose of individual communication with you. To do this, it is necessary to provide a valid email address and your name. This is used to assign the request and then answer it. The specification of further data is optional.

Legal basis:
The processing of the data entered in the contact form takes place on the basis of a legitimate interest (Art. 6 Para. 1 lit. f GDPR). By providing the contact form, we would like to make it easy for you to contact us. The information you provide will be stored for the purpose of processing the request and for possible follow-up questions. If you contact us to inquire about an offer, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 Para. 1 lit. b GDPR).

Receiver.
The recipients of the data may be processors.

Storage period:
Data will be deleted no later than 6 months after the request has been processed.
If there is a contractual relationship, we are subject to the statutory retention periods according to German Commercial Code and delete your data after these periods have expired.

Provision required:
The provision of your personal data is optional. However, we can only process your request if you provide us with your name, email address and the reason for the request.

Type and purpose of processing:
Our website uses the Matomo web analysis service. Matomo is an open source solution.
Matomo uses "cookies".  These are small text files that your web browser saves on your device and that enable website usage to be analyzed
Matomo cookies remain on your device until you delete them.
As the operator of this website, we have a legitimate interest in the anonymous analysis of user behavior in order to optimize both our website and, if necessary, advertising.
The information stored in the Matomo cookie about the use of this website is not passed on. The setting of cookies by your web browser can be prevented. However, this could limit some functions of our website.
You can deactivate the storage and use of your data here. Your browser sets an opt-out cookie, which prevents the storage of Matomo usage data. If you delete your cookies, the Matomo opt-out cookie will also be removed. When you visit our website again, the opt-out cookie must be set again to prevent the storage and use of your data.

Legal basis:
The processing of the data takes place on the basis of the consent of the user (Art. 6 Para. 1 lit. f GDPR).

Type and purpose of processing:
This website uses Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA (hereinafter: "Google"). Google Analytics uses so-called "cookies", which are text files that are stored on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymization on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address will only be transmitted to a Google server in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The purposes of data processing are to evaluate the use of the website and to compile reports on activities on the website. Based on the use of the website and the Internet, other related services are then to be provided.

Legal basis:
The processing of the data takes place on the basis of the agreement of the user (Art. 6 Para. 1 lit. a GDPR).

Receiver:
The recipient of the data is Google as the processor. We have concluded the corresponding order processing contract with Google for this purpose.

Storage period:
The data is deleted as soon as it is no longer required for our recording purposes.

Third country transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Provision required:
The provision of your personal data is optional, based solely on your agreement. If you prevent access, this can lead to functional restrictions on the website.

Revocation of consent:
You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out, however, that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading the browser plug-in available under the following link and install: Browser add-on to deactivate Google Analytics. In addition or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our website by clicking this link. An opt-out cookie will be installed on your device. This will prevent Google Analytics from collecting data for this website and for this browser in the future as long as the cookie remains installed in your browser.

Profiling:
With the help of the tracking tool Google Analytics, the behavior of the website visitors can be evaluated and the interests analyzed. To do this, we create a pseudonymous user profile.

Type and purpose of processing:
In order to display our content correctly and graphically appealing across browsers, we use “Google Web Fonts” from Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; hereinafter “Google”) to display fonts.
You can find the privacy policy of the library operator Google here:  https://www.google.com/policies/privacy/

Legal basis:
The legal basis for the integration of Google web fonts and the associated data transfer to Google is your agreement (Art. 6 Para. 1 lit. a GDPR).

Receiver:
Calling up script libraries or font libraries automatically triggers a connection to the library operator. It is theoretically possible - but currently also unclear whether and, if so, for what purposes - that the operator collects Google data in this case.

Storage period:
We do not collect any personal data through the integration of Google web fonts.
Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's data protection declaration: https://www.google.com/policies/privacy/.

Third country transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Provision required:
The provision of personal data is neither legally nor contractually required. However, it may not be possible to correctly display the content using standard fonts.

Revocation of consent:
The JavaScript programming language is regularly used to display the content. You can therefore object to the data processing by deactivating the execution of JavaScript in your browser or by installing a JavaScript blocker. Please note that this can lead to functional restrictions on the website.

References and links on this page

Our offer contains links to external third-party websites over whose content we have no influence. Therefore, we cannot accept any liability for this third-party content. The respective provider or operator of the pages is always responsible for the content of the linked pages. The linked pages were checked for possible legal violations at the time they were linked. No illegal content was found at the time the link was created. A permanent control of the content of the linked pages is not reasonable without concrete evidence of a violation of the law. Please inform us immediately if you are of the opinion that a website linked by us contains illegal, offensive or anti-competitive content so that we can investigate the matter and remove the link if necessary:
phone 039454 – 49 110
tourismus[at]oberharzinfo.de

Type and purpose of processing:
We embed YouTube videos on some of our websites. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter "YouTube"). When you visit a page with the YouTube plug-in, a connection to YouTube servers is established. This tells YouTube which pages you are visiting. If you are logged into your YouTube account, YouTube can assign your surfing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand.

If a YouTube video is started, the provider uses cookies that collect information about user behavior. Further information on the purpose and scope of data collection and its processing by YouTube can be found in the provider's data protection declaration, where you will also find further information on your rights in this regard and setting options to protect your privacy (https://policies.google.com/privacy).
Google processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework

Legal basis:
The legal basis for the integration of YouTube and the associated data transfer to Google is your agreement (Art. 6 Para. 1 lit. a GDPR).

Receiver:
Calling up YouTube automatically triggers a connection to Google.

Storage period and revocation of consent:
If you have deactivated the storage of cookies for the Google Ad program, you will not have to reckon with such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you have to block the storage of cookies in your browser. Further information on data protection at "YouTube" can be found in the provider's data protection declaration at: ttps://www.google.de/intl/de/policies/privacy/

Third country transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Provision required:
The provision of your personal data is optional, based solely on your agreement. If you prevent access, this can lead to functional restrictions on the website.

Type and purpose of processing:
We offer you the option of using so-called "social media buttons" on our website. To protect your data, we use the “Shariff” solution during implementation. As a result, these buttons are only integrated into the website as a graphic that contains a link to the corresponding website of the button provider. By clicking on the graphic you will be forwarded to the services of the respective provider. Only then will your data be sent to the respective provider. If you do not click on the graphic, there will be no exchange between you and the providers of the social media buttons. Information about the collection and use of your data in social networks can be found in the particular terms of use of the respective provider. You can find more information about the Shariff solution here: http://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html
We have integrated the social media buttons of the following companies on our website: Instagram, Facebook and Twitter

Type and purpose of processing:
Our website uses Google conversion tracking. The operating company for the services of Google AdWords is Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. If you have reached our website via an advertisement placed by Google, Google Adwords will set a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad placed by Google.
If the user visits certain pages on our website and the cookie has not yet expired, we and Google can see that the user clicked on the ad and was redirected to this page. Every Google AdWords customer receives a different cookie. Cookies cannot therefore be tracked via the websites of AdWords customers. The information obtained using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. The customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified.

Legal basis:
The legal basis for the integration of Google AdWords and the associated data transfer to Google is your consent (Art. 6 Para. 1 lit. a GDPR).

Receiver:
Every time you visit our website, personal data, including your IP address, is transferred to Google in the USA. These personal data are stored by Google. Google may pass this personal data collected through the technical process on to third parties.
Our company does not contain any information from Google that could identify the data subject.

Storage period:
These cookies lose their validity after 30 days and are not used for personal identification.

Third country transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Revocation of agreement:
If you do not want to participate in the tracking, you can refuse the setting of a cookie required for this - for example via a browser setting that generally deactivates the automatic setting of cookies or set your browser to block cookies from the “googleleadservices.com” domain..
Please note that you must not delete the opt-out cookies as long as you do not want measurement data to be recorded. If you have deleted all of your cookies in your browser, you must set the respective opt-out cookie again.

Provision required or required:
The provision of your personal data is optional, based solely on your consent. If you prevent access, this can lead to functional restrictions on the website.

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) over HTTPS.

We reserve the right to adapt this data protection declaration so that it always complies with current legal requirements or to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new data protection declaration will then apply to your next visit.

If you have any questions about data protection, please send us an email or contact the person responsible for data protection in our organization directly:
Stadt Oberharz am Brocken
info@oberharzstadt.de
phone 039454 - 45 0

The data protection declaration was created with the help of activeMind AG at https://www.activemind.de, the experts for external data protection officers (version # 2019-04-10).
 

November 14th, 2023