Privacy policy

Data privacy statement

The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is

Bayer. Staatsbad Bad Reichenhall / Bayer. Gmain GmbH
Geschäftsführung: Dirk Sasse
Wittelsbacherstr. 15
D-83435 Bad Reichenhall
Telefon: +49 (0) 8651 6060
E-Mail: office@staatsbad.gmbh

Your rights as data subject

You can exercise the following rights at any time using the contact details provided for our data protection officer:

• Information about your data stored by us and its processing (Art. 15 GDPR),
• Correction of incorrect personal data (Art. 16 GDPR), 
  Erasure of your data stored by us (Art. 17 GDPR), 
  Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR) 
  Objection to the processing of your data by us (Art. 21 GDPR) and 
  data portability if you have consented to data processing or have concluded a contract with us (Art. 20 GDPR).
• If you have given us your consent, you can revoke it at any time with effect for the future.

You can contact a supervisory authority at any time with a complaint, e.g. the competent supervisory authority in the federal state of your place of residence or the authority responsible for us as the controller. 

A list of supervisory authorities (for the non-public sector) with addresses can be found at https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Collection of general information when visiting our website

Type and purpose of processing:

When you access our website, i.e. if you do not register or otherwise transmit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and similar.

They are processed in particular for the following purposes:

• Ensuring a smooth connection to the website,
• Ensuring the smooth use of our website,
• analysing system security and stability and
• for other administrative purposes.

We do not use your data to draw conclusions about your person. Information of this kind may be statistically evaluated by us in order to optimise our website and the technology behind it.

Legal foundation:

Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

Recipient:

Empfänger der Daten sind ggf. technische Dienstleister, die für den Betrieb und die Wartung unserer Webseite als Auftragsverarbeiter tätig werden.

Storage time:

The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case for the data used to provide the website when the respective session has ended.

Provision prescribed or required:

The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted. For this reason, an objection is excluded.

Cookies Type and purpose of processing:

Like many other websites, we also use so-called ‘cookies’. Cookies are small text files that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. 

This provides us with certain data such as IP address, browser used and operating system. 

Cookies cannot be used to start programmes or transfer viruses to a computer. Using the information contained in cookies, we can make navigation easier for you and enable the correct display of our web pages.

Under no circumstances will the data collected by us be passed on to third parties or linked to personal data without your consent. 

Of course, you can also view our website without cookies. Internet browsers are regularly set to accept cookies. In general, you can deactivate the use of cookies at any time via your browser settings. Please use the help functions of your Internet browser to find out how to change these settings. Please note that individual functions of our website may not work if you have deactivated the use of cookies.

Storage time and cookies used:

If you allow us to use cookies through your browser settings or consent, the following cookies may be used on our websites:

Technically required cookies

Technically non-essential cookies (web analysis and use of tracking and localisation tools, marketing)

Insofar as these cookies may (also) affect personal data, we will inform you about this in the following sections. 

You can delete individual cookies or the entire cookie inventory via your browser settings. You will also receive information and instructions on how to delete these cookies or block their storage in advance. Depending on your browser provider, you will find the necessary information under the following links:

• Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
• Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
• Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
• Opera: http://www.opera.com/de/help
• Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE

Kontaktformular

Type and purpose of processing:

The data you enter will be stored for the purpose of personalised communication with you. This requires you to provide a valid e-mail address as well as your name and address. This is used to allocate the enquiry and subsequently answer it. The provision of further data is optional.

Legal basis:

The data entered in the contact form is processed on the basis of a legitimate interest (Art. 6 para. 1 lit. f GDPR). 

By providing the contact form, we would like to make it easy for you to contact us. The information you provide will be stored for the purpose of processing your enquiry and for possible follow-up questions. 

If you contact us to request a quote, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 para. 1 lit. b GDPR).

Recipient:

Recipients of the data may be processors.

Storage time

Data will be deleted no later than 6 months after the enquiry has been processed. 

If there is a contractual relationship, we are subject to the statutory retention periods according to the German Commercial Code (HGB) and delete your data after these periods have expired.

Provision prescribed or required:

The provision of your personal data is voluntary. However, we can only process your enquiry if you provide us with your name, e-mail address and the reason for the enquiry.

Purchasing tickets

Purpose and legal basis:

Your data will be used to process the purchase of the tickets you have ordered and to send you the tickets you have ordered. The data collected is necessary for this purpose. 

The legal basis can be found in Art. 6 para. 1 lit. b GDPR. The processing is necessary for the performance of a contract to which the data subject is party or in order to take steps prior to entering into a contract.

Recipient:

The recipients of the data are the controller and our processor for the ticket portal. Third party recipients may be payment service providers used by you. If you have chosen an external payment service provider, their privacy policy will also apply.

Storage time:

Your data will be stored for as long as the purpose or a further retention obligation exists. In this specific case, your data will generally be stored for a period of six years in accordance with Section 257 HGB or ten years in accordance with Section 147 AO.

Provision prescribed or required:

The provision of your personal data is necessary for the fulfilment of the contract.

Profiling:

No automated decision-making or profiling is used.

Use of Google Analytics 

Nature and purpose of processing:

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter: ‘Google’). Google Analytics uses ‘cookies’, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on these websites, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

The purpose of the data processing is to analyse the use of the website and to compile reports on activities on the website. Based on the use of the website and the Internet, further associated services are then to be provided.

Legal basis:

The data is processed on the basis of the user's consent (Art. 6 para. 1 lit. a GDPR).

Recipient:

The recipient of the data is Google as the processor. We have concluded the corresponding data processing agreement with Google for this purpose.

Storage time:

The data will be deleted as soon as it is no longer required for our recording purposes.

Third country transfers:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield : more information 

Provision prescribed or required:

The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.

Cancellation of consent:

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: Browser Add On to deactivate Google Analytics.

In addition or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by installing an opt-out cookie on your device. This will prevent the collection by Google Analytics for this website and for this browser in the future as long as the cookie remains installed in your browser.

Profiling:

With the help of the Google Analytics tracking tool, the behaviour of visitors to the website can be evaluated and their interests analysed. We create a pseudonymised user profile for this purpose.

Use of script libraries (Google Webfonts)

Type and purpose of processing:

In order to display our content correctly and graphically appealing across browsers, we use ‘Google Web Fonts’ from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter ‘Google’) to display fonts on this website.

The privacy policy of the library operator Google can be found here 

Legal basis:

The legal basis for the integration of Google Maps and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).

Recipient:

Calling up script libraries or font libraries automatically triggers a connection to the operator of the library. It is theoretically possible - although it is currently unclear whether and for what purposes - that the operator collects Google data in this case.

Storage time:

We do not collect any personal data through the integration of Google Web Fonts. 

You can find more information about Google Web Fonts here  and in Google's privacy policy here

Third-country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield. more information 

Provision prescribed or required:

The provision of personal data is neither legally nor contractually required. However, it may not be possible to display the content correctly using standard fonts.

Cancellation of consent:

The programming language JavaScript is regularly used to display the content. You can therefore object to data processing by deactivating the execution of JavaScript in your browser or installing a JavaScript blocker. Please note that this may result in functional restrictions on the website. 

Use of Google Maps 

Nature and purpose of processing:

We use the Google Maps service on this website. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter ‘Google’). This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently. 

You can find more information about data processing by Google in the Google data protection information. You can also change your personal data protection settings there in the data protection centre. 

Detailed instructions on managing your own data in the Google data protection information You can also change your personal data protection settings there in the data protection centre.

Detailed instructions on managing your own data in the
in the Google data protection information. You can also change your personal data protection settings there in the data protection centre.

Detailed instructions on managing your own data can be found here

Legal basis:

The legal basis for the integration of Google Maps and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).

Recipient:

When you visit the website, Google receives information that you have accessed the corresponding subpage of our website. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. 

If you do not wish your data to be assigned to your Google profile, you must log out of Google before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or customising its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide customised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

Storage time:

We do not collect any personal data through the integration of Google Maps.

Third-country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shieldn more information

Revocation of consent: 

If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. In this case, however, you will not be able to use our website, or only to a limited extent. 

Provision prescribed or required: 

The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.

Embedded YouTube videos 

Type and purpose of processing: 

We embed YouTube videos on some of our websites. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (hereinafter referred to as ‘YouTube’). When you visit a page with the YouTube plugin, a connection to YouTube servers is established. YouTube is informed which pages you visit. If you are logged into your YouTube account, YouTube can assign your surfing behaviour to you personally. You can prevent this by logging out of your YouTube account beforehand. 

If a YouTube video is started, the provider uses cookies that collect information about user behaviour. 

Further information on the purpose and scope of data collection and its processing by YouTube can be found in the provider's privacy policy, where you will also find further information on your rights in this regard and setting options to protect your privacy here . Google processes your data in the USA and has submitted to the EU-US Privacy Shield further information

Legal basis:

The legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).

Recipient: 

Accessing YouTube automatically triggers a connection to Google.

Storage period and revocation of consent:

If you have deactivated the storage of cookies for the Google Ad programme, you will not have to expect any such cookies when watching YouTube videos. However, YouTube also stores non-personalised usage information in other cookies. If you wish to prevent this, you must block the storage of cookies in your browser.

Further information on data protection at ‘YouTube’ can be found in the provider's privacy policy at 

Third-country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield further information

Provision prescribed or required:

The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.

Google AdWords 

Type and purpose of processing: 

Our website uses Google Conversion Tracking. The company operating the Google AdWords services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you have reached our website via an advert placed by Google, Google AdWords will set a cookie on your computer. The cookie for conversion tracking is set when a user clicks on an advert placed by Google. 

If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognise that the user has clicked on the ad and has been redirected to this page. Each Google AdWords customer receives a different cookie. Cookies can therefore not be tracked via the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers are told the total number of users who clicked on their advert and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

Legal basis: 

The legal basis for the integration of Google AdWords and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR). 

Recipient: 

Each time you visit our website, personal data, including your IP address, is transferred to Google in the USA. This personal data is stored by Google. Google may share this personal data collected via the technical process with third parties. 

Our company does not receive any information from Google that could be used to identify the data subject. 

Storage period: 

These cookies lose their validity after 30 days and are not used for personal identification.

Third-country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield. more information https://www.privacyshield.gov/EU-US-Framework.

Revocation of Consent:

If you do not wish to participate in tracking, you can refuse the setting of the necessary cookie — for example, by configuring your browser to generally disable the automatic setting of cookies or by setting your browser to block cookies from the domain “googleleadservices.com”.

Please note that you must not delete the opt-out cookies as long as you do not want any tracking of measurement data. If you have deleted all your cookies in your browser, you will need to set the respective opt-out cookie again.

Provision Required or Necessary:

The provision of your personal data is voluntary and based solely on your consent. If you block access, this may result in functional limitations on the website.

Use of Google Remarketing

Type and Purpose of Processing:

This website uses the remarketing function of Google Inc. The operator of the Google Remarketing services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as "Google").

The function is intended to present interest-based advertisements to visitors of the website within the Google advertising network. A so-called "cookie" is stored in the browser of the website visitor, which makes it possible to recognize the visitor when they access websites that are part of Google’s advertising network. On these sites, the visitor may be shown advertisements that relate to content the visitor previously accessed on websites that use Google's remarketing function.

Legal Basis:

The legal basis for the integration of Google Remarketing and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).

Recipients:

Each time our website is visited, personal data, including your IP address, is transmitted to Google in the USA. This personal data is stored by Google. Google may transfer this personal data, collected via the technical process, to third parties.

Our company does not receive any information from Google that could be used to identify the data subject.

Revocation of Consent:

According to Google, no personal data is collected during this process. However, if you still do not wish to use Google’s remarketing function, you can generally deactivate it by adjusting the settings at 

 Alternatively, you can disable the use of cookies for interest-based advertising via the Network Advertising Initiative by following the instructions at 

Provision Required or Necessary:

The provision of your personal data is voluntary and based solely on your consent. If you block access, this may result in limitations to the functionality of the website.

SSL Encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g., SSL) via HTTPS.

Commissioned Data Processors

The following organizations, companies, or individuals have been commissioned by the operator of this website to process data:

Kompetenzzentrum Tourismus im Schwarzwald

land in sicht AG | Wiesentalstr. 5 | 79115 Freiburg

phone: +49 761 887917-0

www.land-in-sicht.de

Accessibility

Eye-Able® is a software of Web Inclusion GmbH to ensure barrier-reduced access to information on the Internet for all people. The necessary files such as JavaScript, stylesheets and images are loaded from an external server. Eye-Able uses the local storage of the browser to save the settings when functions are activated. All settings are only stored locally and are not transferred further.

In order to fend off attacks and provide our service in near real time, Eye-Able® uses the Content Delivery Network (CDN) of BunnyWay d.o.o. (Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia). This is used for the purpose of fulfilling contracts with our customers (Art. 6 para. 1 lit. b DSGVO) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f DSGVO). All transmitting data and servers remain in the EU at all times to enable data protection-compliant processing in accordance with DSGVO. Web Inclusion GmbH does not collect or analyze personal user behavior or other personal data at any time.

In order to ensure data protection-compliant processing, Web Inclusion GmbH has concluded commissioned processing contracts with our hosters IONOS and BunnyWay.

For more information, please see the privacy statements from eye-able and bunny

Changes to Our Privacy Policy

We reserve the right to amend this privacy policy so that it always complies with the current legal requirements or to reflect changes in our services in the privacy policy, for example, when introducing new services. The updated privacy policy will apply to your next visit.

Questions for the Data Protection Officer

If you have any questions about data protection, please send us an email or contact the person responsible for data protection in our organization directly:

Bayer. Staatsbad Bad Reichenhall / Bayer. Gmain GmbH

Wittelsbacher Str. 15

83435 Bad Reichenhall

E-Mail: datenschutzbeauftragter@staatsbad.gmbh

Die Datenschutzerklärung wurde mithilfe der activeMind AG erstellt, den Experten für externe Datenschutzbeauftragte (Version #2019-04-10).