Privacy

VI. Newsletter

1. Description and scope of data processing

You can subscribe to a free newsletter on our website. When registering for the newsletter, the data from the input mask is transmitted to us. This is:

1. IP address of the calling computer
2. Date and time of registration
3. Email of the customer

Your consent will be obtained for the processing of the data as part of the registration process and reference will be made to this data protection declaration. We use rapidmail to send and analyze our newsletter. Your data will therefore be transmitted to rapidmail GmbH. Rapidmail GmbH is prohibited from using your data for purposes other than sending the newsletter. Rapidmail GmbH is not permitted to pass on or sell your data. rapidmail is a German, certified newsletter software provider that has been carefully selected according to the requirements of the GDPR and the BDSG. You can revoke your consent to the storage of the data and its use for sending the newsletter at any time, e.g. via the unsubscribe link in the newsletter.

Newsletter tracking
The Ruhr Tourismus GmbH newsletter contains so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in e-mails that are sent in HTML format to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns to be carried out. Based on the embedded tracking pixel, Ruhr Tourismus GmbH can see if and when an e-mail was opened by a data subject, and which links in the e-mail were called up by data subjects.
Such personal data collected via the tracking pixels contained in the newsletters are stored and evaluated by the person responsible for processing in order to optimize the newsletter dispatch and to adapt the content of future newsletters even better to the interests of the person concerned. This personal data will not be passed on to third parties. Affected persons are entitled at any time to revoke the relevant separate declaration of consent given via the double opt-in procedure. After a revocation, this personal data will be deleted by the person responsible for processing. The Ruhr Tourismus GmbH automatically regards a withdrawal from the receipt of the newsletter as a revocation.

2. Legal basis for data processing
The legal basis for the processing of the data after the user has registered for the newsletter is Article 6 (1) lit. a GDPR.

3. Purpose of data processing
The collection of the user's e-mail address serves to deliver the newsletter.

4. Duration of storage
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. The e-mail address of the user is therefore stored as long as the subscription to the newsletter is active.

5. Opposition and removal possibility
Subscription to the newsletter may be terminated at any time by the user concerned. For this purpose, there is a corresponding link in each newsletter.

VII. E-commerce

1. Description and scope of data processing
On our website, we offer users the option of booking package tours, admission tickets (museums, etc.) or so-called experience modules (bus tours, guided tours, etc.) by providing personal data. The data is entered into an input mask and transmitted to us and stored. For the purpose of processing the order/booking, the data will be sent to my.IRS GmbH, Dornierstr. 4, 82178 Puchheim. The following data is collected as part of the registration process:

• Gender (Mr/Ms)
• Name
• First Name
• Address (street, zip code, city)
• e-mail
• in some cases (events and ticket reservations) telephone number
• in some cases (WelcomeCard Ruhr) date of birth

When paying (online) by credit card or PayPal, your credit card details (MasterCard, VISA, American Express, AmEx, card number, check digit and period of validity) are recorded and stored at DataTrans, Kreuzbühlstraße 26, CH-8008 Zurich and only passed on to the companies involved in the payment process passed on. We do not store the credit card data.
In the case of (online) payment by direct debit, your account details will be sent to EVO Payments International GmbH, Elsa-Brandström-Str. 10-12, 50668 Cologne. In addition, the account data for the direct debit procedure at myIRS GmbH, Dornierstr. 4, 82178 Puchheim. We do not store the account data.

The controller has integrated components from PayPal on this website. PayPal is an online payment service provider. Payments are made through so-called PayPal accounts, which are virtual private or business accounts. In addition, PayPal has the ability to process virtual payments through credit cards if a user does not have a PayPal account. A PayPal account is managed via an email address, which is why there is no classic account number. PayPal makes it possible to initiate online payments to third parties or to receive payments. PayPal also takes on trustee functions and offers buyer protection services.
The European operating company of PayPal is PayPal (Europe) S.à.rl & Cie. SCA, 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

If the data subject selects "PayPal" as a payment option during the order process in our online shop, data of the data subject will be automatically transmitted to PayPal. By selecting this payment option, the data subject consents to the transfer of personal data required for payment processing.
The personal data sent to PayPal are usually first name, last name, address, email address, IP address, telephone number, mobile phone number or other data required for payment processing. For the execution of the purchase contract, also such personal data are necessary, which are in connection with the respective order.

The purpose of the transmission of the data is payment processing and fraud prevention. The controller will provide PayPal with personally identifiable information, in particular if there is a legitimate interest in the transfer. The personal data exchanged between PayPal and the controller may be transferred by PayPal to credit reporting agencies. This transmission aims at the identity and credit check.

PayPal may disclose personal information to affiliates and service providers or subcontractors, to the extent necessary to fulfill its contractual obligations or to process the data on behalf of.
The data subject has the option to revoke the consent to the handling of personal data against PayPal at any time. A revocation has no effect on personal data which must be processed, used or transmitted for (contractual) payment processing.
The applicable privacy policies of PayPal can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full be accessed.

SSL encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us, this site uses an SSL or. TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.

If, after the conclusion of a fee-based contract, there is an obligation to send us your payment data (e.g. account data when paying by credit card or direct debit), this data is required for payment processing. Payment transactions using the usual means of payment (Visa/MasterCard, direct debit) are carried out exclusively via an encrypted SSL or TLS connection. With encrypted communication, your payment data that you transmit to us cannot be read by third parties.

Your personal data will also be passed on to the respective service providers (e.g. accommodation providers, experience module providers). The service providers are prohibited from using your data for purposes other than processing the booking. The service providers are not permitted to pass on or sell your data.

2. Legal basis for data processing
The data collected is used to fulfill a contract to which the user is a party or to carry out pre-contractual measures, so the additional legal basis for processing the data is Article 6 (1) (b) GDPR.

3. Purpose of data processing
A collection of the user's data is necessary to fulfill a contract with the user or to carry out pre-contractual measures.

4. Duration of storage
The data will be deleted as soon as they are no longer required by law to fulfill the contract.

VIII. Contact form and e-mail contact

5. Description and scope of data processing

On our website is a contact form available, which can be used for electronic contact. If a user realizes this option, the data entered in the input mask will be transmitted to us and saved. These data are:

• Name
• First Name
• Email
• Phone
• Street and house number
• Postal code and city
• Country
• Remark

At the time of sending the message, the following data is also stored:

1. The IP address of the user
2. Date and time of registration

For the processing of the data in the context of the sending process your consent is obtained and referred to this privacy statement.
Alternatively, contact via the provided e-mail address is possible. In this case, the user's personal data transmitted by e-mail will be stored.
In this context, there is no disclosure of the data to third parties. The data is used exclusively for processing the conversation.

6. Legal basis for data processing
The legal basis for processing the data is Art. 6 Para. 1 lit. a GDPR.

7. Purpose of data processing
The processing of the personal data from the input mask serves us only to process the contact. In the case of contact via e-mail, this also includes the required legitimate interest in the processing of the data.
The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

8. Duration of storage
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. For the personal data from the input form of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the relevant facts have been finally clarified.
The additional personal data collected during the sending process will be deleted at the latest after a period of seven days.

9. Opposition and removal possibility
The user has the option to revoke his consent to the processing of personal data at any time. If the user contacts us by email, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. For this purpose, the user declares his revocation in writing by e-mail in a clear manner. All personal data that was saved in the course of making contact will be deleted in this case.

IX. Disclosure of Personal Information to Third Parties

1. Extent of processing of personal data
On our website, we offer users the opportunity to order brochures by providing personal data. The data is entered in an input mask and transmitted to us and stored. The data will be sent to my.IRS GmbH, Dornierstr. 4, 82178 Puchheim and passed on to HID workshops Karthaus, Industriestraße 7, 48249 Dülmen.
These data are:

• Name
• First Name
• Email
• Phone
• Street and house number
• Postal code and city
• Country

2. Legal basis for the processing of personal data
The data collected is used to fulfill a contract to which the user is a party or to carry out pre-contractual measures, so the additional legal basis for processing the data is Article 6 (1) (b) GDPR.

3. Purpose of data processing
The collection of the user's personal data serves to deliver the desired brochure material

4. Duration of storage
The data you enter in the input form will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected.

5. Opposition and removal possibility
The user has the option to revoke his consent to the processing of personal data at any time. If the user contacts us by email, he can object to the storage of his personal data at any time.
For this purpose, the user declares his revocation in writing by e-mail in a clear manner.
All personal data stored in the course of ordering the brochure will be deleted in this case.

X. Website Analysis Services

1. Description and scope of data processing
This website uses Google Analytics for web analysis. This is a service provided by Google Ireland Limited ("Google"), a company incorporated and operating in Ireland (registered number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland ("Google") ). Google Analytics uses "cookies". The information generated by the cookie about your use of our website (including your IP address) is transferred to Google's computer and stored there. It cannot be ruled out that the data processing will take place outside the scope of EU law. Google has concluded the EU standard data protection clauses with the companies based there for transmissions to a third country or the USA.

2. Legal basis for the processing of personal data
Google Analytics cookies are stored on the basis of Article 6 (1) (f) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

3. Purpose of data processing
The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out to you however that in this case you will if applicable not be able to use all functions of this website in full. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: https://tools.google.com/dlpage/gaoptout?hl=de.

4. Opposition and removal possibility
You can prevent these cookies being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

5. Objecting to Data Collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this site: https://adssettings.google.com/anonymous?hl=de&sig=ACi0TChVmevmsGgtwDdljrftL3IiFgyMPAyXecL6tIHU9zVeljWkqh1qD-5CARUH0OE-Thkp3vUU6Sg4MHuYN_zyroCJUguOszFkkZeYsNRNyknLcVQIP0M. You can find more information on the handling of user data at Google Analytics in Google's data protection declaration: https://support.google.com/analytics/answer/6004245?hl=de.

XI. Google Adwords

1. Data protection provisions on the application and use of Google AdWords
The person responsible for processing has integrated Google AdWords on this website. Google AdWords is an internet advertising service that allows advertisers to place advertisements in Google's search engine results as well as in the Google advertising network. Google AdWords enables an advertiser to define certain keywords in advance by means of which an advertisement is only displayed in Google's search engine results if the user calls up a keyword-relevant search result with the search engine. In the Google advertising network, the ads are distributed to topic-related websites using an automatic algorithm and taking into account the previously defined keywords.
The operator of the Google AdWords services is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
The purpose of Google AdWords is to advertise our website by displaying interest-relevant advertising on the websites of third-party companies and in the search engine results of the Google search engine and by displaying third-party advertising on our website.
If a person concerned reaches our website via a Google ad, a so-called conversion cookie is stored on the information technology system of the person concerned by Google. What cookies are has already been explained above. A conversion cookie loses its validity after thirty days and is not used to identify the person concerned. If the cookie has not yet expired, the conversion cookie is used to determine whether certain sub-pages, such as the shopping cart from an online shop system, were accessed on our website. The conversion cookie enables both us and Google to understand whether a person who came to our website via an AdWords ad generated revenue, i.e. completed or canceled a purchase. The data and information collected through the use of the conversion cookie are used by Google to create visit statistics for our website. In turn, we use these visit statistics to determine the total number of users who were referred to us via AdWords ads, i.e. to determine the success or failure of the respective AdWords ad and to optimize our AdWords ads for the future . Neither our company nor other Google AdWords advertisers receive information from Google that could be used to identify the person concerned.
The conversion cookie is used to store personal information, such as the websites visited by the person concerned. Each time you visit our website, personal data, including the IP address of the Internet connection used by the person concerned, is transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may pass this personal data collected through the technical process on to third parties.
The person concerned can prevent the setting of cookies by our website, as already shown above, at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the internet browser used would also prevent Google from setting a conversion cookie on the information technology system of the person concerned. In addition, a cookie already set by Google AdWords can be deleted at any time via the Internet browser or other software programs.
Furthermore, the data subject has the opportunity to object to Google's interest-based advertising. To do this, the person concerned must access the link www.google.com/settings/ads from each of the Internet browsers they use and make the desired settings there.
Further information and the applicable data protection provisions of Google can be found at https://www.google.de/intl/de/policies/privacy/ be accessed.

2. Privacy Policy on Use and Use of Google Remarketing
The controller has integrated Google Remarketing services on this website. Google Remarketing is a feature of Google AdWords that allows a business to show advertisements to such internet users that have previously been on the company's website. The integration of Google Remarketing therefore allows a company to create user-friendly advertising and thus allow Internet users to display interest-based ads.
The operator of the Google Remarketing services is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
The purpose of Google Remarketing is to show interest-based advertising. Google Remarketing allows us to display ads through the Google Network or view them on other websites tailored to the individual needs and interests of Internet users.
Google Remarketing places a cookie on the information technology system of the data subject. What cookies are, has already been explained above. By setting the cookie, Google will be able to recognize the visitor to our website, if he subsequently calls websites that are also members of the Google ad network. With each visit to a website on which Google Remarketing's service has been integrated, the person's Internet browser automatically identifies with Google. As part of this technical process, Google receives knowledge about personal data, such as the IP address or the surfing behavior of the user, which Google uses among other things to display interest-relevant advertising.
Personal information, such as the Internet pages visited by the person concerned, is stored by means of the cookie. Accordingly, each time you visit our website, personal data, including the IP address of the Internet connection used by the person concerned, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical process to third parties. The person concerned can prevent the setting of cookies by our website, as already described above, at any time by means of a corresponding setting in the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system of the person concerned. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.
Furthermore, the data subject has the opportunity to object to Google's interest-based advertising. To do this, the person concerned must access the link www.google.com/settings/ads from each of the Internet browsers they use and make the desired settings there.
Further information and the applicable data protection provisions of Google can be found at https://www.google.de/intl/de/policies/privacy/ be accessed.

XII. Social media integrations

1.Privacy Policy on Use and Use of Facebook
The person responsible for processing has integrated components of the company Facebook on this website. Facebook is a social network. A social network is a social meeting place operated on the Internet, an online community that usually enables users to communicate with one another and to interact in virtual space. A social network can serve as a platform for exchanging opinions and experiences, or it allows the Internet community to provide personal or company-related information. Among other things, Facebook enables users of the social network to create private profiles, upload photos and network via friend requests.
Facebook's operating company is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. Persons responsible for the processing of personal data, if an affected person lives outside the US or Canada, are Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland.
Each time one of the individual pages of this website is called up, which is operated by the person responsible for processing and on which a Facebook component (Facebook plug-in) has been integrated, the Internet browser on the information technology system of the person concerned is automatically activated by the respective Facebook Component causes a representation of the corresponding Facebook component to be downloaded from Facebook. A complete overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=de_DE be retrieved. As part of this technical process, Facebook is informed which specific subpage of our website is visited by the person concerned. If the person concerned is logged on to Facebook at the same time, Facebook recognizes which specific subpage of our website the person concerned is visiting each time the person concerned calls up our website and for the entire duration of their stay on our website. This information is collected by the Facebook component and assigned to the respective Facebook account of the person concerned by Facebook. If the person concerned clicks on one of the Facebook buttons integrated on our website, for example the “Like” button, or if the person concerned makes a comment, Facebook assigns this information to the personal Facebook user account of the person concerned and stores this personal data .
Facebook always receives information via the Facebook component that the data subject has visited our website if the data subject is logged in to Facebook at the same time as accessing our website; this happens regardless of whether the person clicks on the Facebook component or not. If such a transfer of this information to Facebook is not wanted by the data subject, it can prevent the transfer by logging out of their Facebook account before calling our website.
The data policy published by Facebook, which can be found under https://de-de.facebook.com/about/privacy/ is available, provides information about the collection, processing and use of personal data by Facebook. It also explains which setting options Facebook offers to protect the privacy of the data subject. In addition, various applications are available that make it possible to suppress data transmission to Facebook. Such applications can be used by the data subject to suppress data transmission to Facebook.

2. Data protection provisions on the application and use of Instagram
The controller has integrated components of the Instagram service on this website. Instagram is a service that qualifies as an audiovisual platform, allowing users to share photos and videos, and also disseminate such data to other social networks.
The operating company of the Instagram services is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA. Each time one of the individual pages of this website is called up, which is operated by the person responsible for processing and on which an Instagram component (Insta button) has been integrated, the Internet browser on the information technology system of the person concerned is automatically activated by the respective Instagram component causes a representation of the corresponding component to be downloaded from Instagram. As part of this technical process, Instagram is informed which specific subpage of our website is visited by the person concerned. If the person concerned is logged in to Instagram at the same time, Instagram recognizes which specific subpage the person concerned is visiting each time the person concerned calls up our website and for the entire duration of their stay on our website. This information is collected by the Instagram component and assigned by Instagram to the respective Instagram account of the person concerned. If the person concerned clicks on one of the Instagram buttons integrated on our website, the data and information thus transmitted are assigned to the personal Instagram user account of the person concerned and stored and processed by Instagram.
Through the Instagram component, Instagram always receives information that the person concerned has visited our website if the person concerned is simultaneously logged into Instagram at the time of accessing our website; this happens regardless of whether the person clicks on the Instagram component or not. If the affected person does not want to transmit this information to Instagram, the latter can prevent the transmission from logging out of their Instagram account before calling our website.
Further information and the applicable data protection provisions of Instagram can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/ be accessed.

3. Data protection provisions on the application and use of Pinterest
The person responsible for processing has integrated components from Pinterest Inc. on this website. Pinterest is a so-called social network. A social network is a social meeting point operated on the Internet, an online community that usually enables users to communicate with one another and interact in virtual space. A social network can serve as a platform for the exchange of opinions and experiences or enables the Internet community to provide personal or company-related information. Pinterest enables users of the social network, among other things, to publish image collections and individual images as well as descriptions on virtual pinboards (so-called pinning), which in turn can be shared (so-called repinning) or commented on by other users.
Pinterest's operating company is Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA.
Each time one of the individual pages of this website is called up, which is operated by the person responsible for processing and on which a Pinterest component (Pinterest plug-in) has been integrated, the Internet browser on the information technology system of the person concerned is automatically activated by the respective Pinterest component causes a representation of the corresponding Pinterest component to be downloaded from Pinterest. More information about Pinterest is available at https://pinterest.com/ available. As part of this technical process, Pinterest is informed which specific subpage of our website is visited by the person concerned. If the person concerned is logged in to Pinterest at the same time, Pinterest recognizes which specific subpage of our website the person concerned is visiting each time the person concerned calls up our website and for the entire duration of their stay on our website. This information is collected by the Pinterest component and assigned by Pinterest to the respective Pinterest account of the data subject. If the person concerned clicks on a Pinterest button integrated on our website, Pinterest assigns this information to the personal Pinterest user account of the person concerned and saves this personal data.
Pinterest always receives information via the Pinterest component that the person concerned has visited our website if the person concerned is logged in to Pinterest at the same time as accessing our website; this takes place regardless of whether the person concerned clicks on the Pinterest component or not. If the data subject does not want this information to be transmitted to Pinterest, they can prevent the transmission by logging out of their Pinterest account before calling up our website.
The privacy policy published by Pinterest, located at https://about.pinterest.com/privacy-policy is available, provides information about the collection, processing and use of personal data by Pinterest.

4. Data protection provisions on the application and use of Twitter
The controller has integrated components from Twitter on this website. Twitter is a multilingual, publicly accessible microblogging service on which users can publish and distribute so-called tweets, i.e. short messages that are limited to 280 characters. These short messages are available to everyone, including people who are not logged on to Twitter. The tweets are also displayed to the so-called followers of the respective user. Followers are other Twitter users who follow a user's tweets. Furthermore, Twitter enables a broad audience to be addressed via hashtags, links or retweets.
Twitter's operating company is Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.
Each time one of the individual pages of this website is accessed, which is operated by the person responsible for processing and on which a Twitter component (Twitter button) has been integrated, the Internet browser on the information technology system of the person concerned is automatically activated by the respective Twitter component causes a representation of the corresponding Twitter component to be downloaded from Twitter. Further information on the Twitter buttons can be found at https://about.twitter.com/de/resources/buttons retrievable. As part of this technical process, Twitter receives information about which specific subpage of our website is visited by the person concerned. The purpose of integrating the Twitter component is to enable our users to redistribute the content of this website, to make this website known in the digital world and to increase our visitor numbers.
If the person concerned is logged in to Twitter at the same time, Twitter recognizes which specific sub-page of our website the person concerned is visiting with each visit to our website by the person concerned and for the entire duration of their stay on our website. This information is collected by the Twitter component and assigned to the respective Twitter account of the person concerned by Twitter. If the person concerned clicks one of the Twitter buttons integrated on our website, the data and information transferred with it are assigned to the personal Twitter user account of the person concerned and stored and processed by Twitter.
Twitter always receives information via the Twitter component that the person concerned has visited our website if the person concerned is logged in to Twitter at the same time as accessing our website; this takes place regardless of whether the data subject clicks on the Twitter component or not. If the data subject does not want this information to be transmitted to Twitter in this way, they can prevent the transmission by logging out of their Twitter account before accessing our website. Twitter's applicable privacy policy is available at https://twitter.com/privacy?lang=de accessible.

5. Data protection provisions on the application and use of YouTube
The person responsible for processing has integrated components from YouTube on this website. YouTube is an Internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment on them free of charge. YouTube allows the publication of all types of videos, which is why both complete film and television programs as well as music videos, trailers or videos made by users themselves can be accessed via the Internet portal. The service on de.youtube.com is provided by: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Authorized to accept service for Google Ireland Limited within the meaning of Section 5 (1) NetzDG is: Google Germany GmbH, Legal Department, ABC-Strasse 19, 20354 Hamburg, Germany. Each time one of the individual pages of this website is called up, which is operated by the person responsible for processing and on which a YouTube component (YouTube video) has been integrated, the Internet browser on the information technology system of the person concerned is automatically activated by the respective YouTube component caused to download a representation of the relevant YouTube component from YouTube. More information about YouTube can be found at https://www.youtube.com/yt/about/de/ be retrieved. As part of this technical process, YouTube and Google are informed which specific subpage of our website is visited by the person concerned. If the person concerned is logged in to YouTube at the same time, YouTube recognizes which specific subpage of our website the person concerned is visiting by calling up a subpage that contains a YouTube video. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.
YouTube and Google always receive information via the YouTube component that the person concerned has visited our website if the person concerned is logged in to YouTube at the same time as accessing our website; this takes place regardless of whether the data subject clicks on a YouTube video or not. If the data subject does not want this information to be transmitted to YouTube and Google, they can prevent the transmission by logging out of their YouTube account before accessing our website. The data protection regulations published by YouTube, which can be found at https://www.google.de/intl/de/policies/privacy/ are available, provide information about the collection, processing and use of personal data by YouTube and Google.

6. Data protection regulations for the use of Juicer
The person responsible for processing has integrated a social wall from Juicer on this website. The Juicer system offers the option of bundled social media activities in a social feed and integrating this as a social wall on the website. It is possible to integrate posts from Instagram, Twitter and numerous other social media channels based on hashtags or, alternatively, to display all posts from an account (Instagram, Twitter, etc.) on the social wall. The social wall can be accessed by anyone, including people who are not logged in to Instagram, Twitter, etc. Juicer is operated by Juicer.io, 1515 7th Street, #424, Santa Monica, CA 90403.
Juicers and third-party providers who work with Juicer work in compliance with the EU GDPR. The GDPR was designed to give the user more information and better protect user data. juicer has at no time and will at no time:

• Store or collect personal information from users viewing the Juicer Feed (Social Wall) on a Site.
• Juicer share user data apart from cookies that enable the user to make better use of the system. Juicer collects a minimum of data and treats it discreetly. Pass on any type of data to social networks.

7. Data protection regulations for the deployment and use of Vimeo
We can embed the videos of the Vimeo platform of Vimeo Inc., Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA. Data protection: https://vimeo.com/privacy. We would like to point out that Vimeo can use Google Analytics and refer to the data protection declaration (https://www.google.com/policies/privacy) as well as opt-out options for Google Analytics (https://tools.google.com/dlpage/gaoptout?hl=de) or Google's data-use settings for marketing purposes (https://adssettings.google.com/.).

8. Data protection regulations for the deployment and use of WhatsApp
About the site www.industriekultur.ruhr or www.ruhr-tourismus.de/industriekultur it is possible to register for a newsletter via the app WhatsApp. To register, the number of the mobile phone provided for the service must be actively stored by the user. The user's data will only be processed after the user has entered the start command "Start" and the associated contact has been made in WhatsApp. The sending of the term "Start" is saved and evaluated as consent to be contacted. Use is a free additional service and absolutely voluntary. You can object to the termination of the newsletter subscription and the associated processing of the data at any time by using the "Stop" command. To have all data deleted, it is sufficient to send the command "Delete all data". This command will erase the data in our systems. A deletion in the system can take some time, since the data is technically present in the (unprocessed) backups until they are overwritten (daily). The following data categories are processed by the user: name, telephone number, profile picture if applicable depending on the setting, communication data, course/history. These are provided by the WhatsApp service. No tasks or contractual regulations are assumed for any processing by WhatsApp itself, since Ruhr Tourismus GmbH acts exclusively as a "dialogue partner". Participation is possible from the age of 16. The corresponding regulations of WhatsApp must also be observed in this regard. Ruhr Tourismus does not carry out any checks, since an age check is not possible and the WhatsApp terms of use stipulate corresponding regulations. The data will not be passed on to third parties. The sole purpose is to send direct messages from Ruhr Tourismus GmbH.

9. Facebook fan page/group
(1) The use of our Facebook fan page/Facebook group requires the collection of personal data. Some are also collected during an unannounced visit. Metadata (frequency, duration, location from which the "I like" information was made, when users are online, which posts reach fans, which fans have interacted with posts and to what extent, information about the device used), personal data is more specific here (gender, age, place of residence, language and other demographic data) collected by Facebook. This personal data is used for statistical purposes. The legal basis for the benefit is Art. 6 Paragraph 1 f of the GDPR.

(2) As a data subject, you can exercise your rights in accordance with Art. 12 – 23 GDPR.

(3) Further information on Facebook's data policy can be found at https://www.facebook.com/about/privacy/, and specifically information about the Insight data https://www.facebook.com/legal/terms/information_about_page_insights_data

(4) According to Art. 26 GDPR, there is joint responsibility for the Insights pages between us and Facebook. This is in the form of a contract https://www.facebook.com/legal/terms/page_controller_addendum
a DAK Bungalow.

XIII. rights of the data subject
If personal data is processed by you, you are the person concerned within the meaning of the DSGVO and you have the following rights towards the responsible person:

1. right
You may ask the person in charge to confirm if personal data concerning you is processed by us. If such processing is available, you can request information from the person responsible about the following information:

(1) the purposes for which the personal data are processed;

(2) the categories of personal data that are processed;

(3) the recipients or the categories of recipients to whom the personal data relating to you have been disclosed or are still being disclosed;

(4) the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;

(5) the existence of a right to correction or deletion of your personal data, a right to restrict processing by the person responsible or a right to object to this processing;

(6) the right to lodge a complaint with a supervisory authority;

(7) all available information on the origin of the data if the personal data are not collected from the data subject;

(8) The existence of automated decision-making including profiling in accordance with Art. 22 Paragraphs 1 and 4 GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the person concerned.

You have the right to request information about whether the personal data relating to you is being transmitted to a third country or to an international organization. In this context, you can request to be informed about the appropriate guarantees in accordance with. Art. 46 GDPR to be informed in connection with the transfer.

2. Right to rectification
You have a right to rectification and / or completion to the controller, provided the personal data you process is incorrect or incomplete. The responsible person must make the correction without delay.

3. Right to restriction of processing
You may request the restriction of the processing of your personal data under the following conditions:

(1) if you dispute the accuracy of the personal data concerning you for a period of time that enables the person responsible to verify the accuracy of the personal data;

(2) the processing is unlawful and you refuse to delete the personal data and instead request the restriction of the use of the personal data;

(3) the person responsible no longer needs the personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, or

(4) if you have objected to the processing in accordance with Art. 21 Paragraph 1 GDPR and it has not yet been determined whether the legitimate reasons of the person responsible outweigh your reasons.

If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest Union or a Member State.
If the restriction on processing has been restricted in accordance with the above conditions, the person responsible will inform you before the restriction is lifted.

4. Right to delete

1. deletion obligations

You may require the controller to delete your personal information without delay, and the controller is required to delete that information immediately if one of the following is true:

(1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.

(2) You revoke your consent on which the processing was based in accordance with Article 6 (1) (a) or Article 9 (2) (a) GDPR, and there is no other legal basis for the processing.

(3) You object to the processing in accordance with Art. 21 Paragraph 1 GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Art. 21 Paragraph 2 GDPR.

(4) The personal data concerning you have been processed unlawfully.

(5) The deletion of your personal data is necessary to fulfill a legal obligation under Union law or the law of the member states to which the person responsible is subject.

(6) The personal data concerning you was collected in relation to information society services offered pursuant to Article 8 (1) GDPR.

• Information to third parties

If the person responsible has made the personal data concerning you public and is acc. According to Art. 17 Para. 1 GDPR, he shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform those responsible for data processing who process the personal data that you are the data subject You have requested that you delete all links to this personal data or copies or replications of this personal data.

• exceptions

The right to erasure does not exist if the processing is necessary

(1) to exercise the right to freedom of expression and information;

(2) To fulfill a legal obligation that requires processing under the law of the Union or of the member states to which the person responsible is subject, or to perform a task that is in the public interest or in the exercise of official authority that is transferred to the person responsible has been;

(3) to establish, exercise or defend legal claims.

5. Right to information
If you have the right of rectification, erasure or restriction of processing to the controller, he / she is obliged to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless: this proves to be impossible or involves a disproportionate effort.
You have a right to the person responsible to be informed about these recipients.

6. Right to data portability
You have the right to receive personally identifiable information you provide to the controller in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another person without hindrance by the person responsible for providing the personal data, provided that

(1) the processing is based on consent in accordance with Art. 6 Paragraph 1 lit. a GDPR or Art. 9 Paragraph 2 lit. a GDPR or on a contract in accordance with Art. 6 Paragraph 1 lit. b GDPR and

(2) the processing is carried out using automated procedures.

In exercising this right, you also have the right to obtain that your personal data relating to you are transmitted directly from one person to another, insofar as this is technically feasible. Freedoms and rights of other persons may not be affected.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller.

7. Right of objection
You have the right, for reasons that arise from your particular situation, to object at any time to the processing of your personal data, which is based on Art. 6 Para. 1 lit. e or f DSGVO takes place to object; this also applies to profiling based on these provisions.
The controller will no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is intended to assert, exercise or defend legal claims.
If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
You have the option, in the context of the use of information society services - regardless of the 2002 / 58 / EC directive - of exercising your right of opposition through automated procedures using technical specifications.

8. Right to revoke the data protection consent declaration
You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

9. Automated decision on an individual basis including profiling
You have the right not to be subjected to a decision based solely on automated processing - including profiling - that will have legal effect or similarly affect you in a similar manner. This does not apply if the decision

(1) is necessary for the conclusion or performance of a contract between you and the person responsible,

(2) is permissible on the basis of legal provisions of the Union or of the member states to which the person responsible is subject and these legal provisions contain appropriate measures to safeguard your rights and freedoms and your legitimate interests or

(3) takes place with your express consent.

However, these decisions may not be based on special categories of personal data according to Art. 9 Para. 1 GDPR, unless Art. 9 Para. 2 lit. a or g GDPR applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.
With respect to the cases referred to in (1) and (3), the controller shall take reasonable steps to uphold the rights and freedoms and your legitimate interests, including at least the right to obtain the intervention of a person by the controller, to express his / her own position and heard on challenge of the decision.

10. Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of its residence, place of work or place of alleged infringement, if you believe that the processing of the personal data concerning you is against the DSGVO violates.
The supervisory authority to which the complaint was submitted informs the complainant about the status and the results of the complaint, including the possibility of a judicial remedy according to Art. 78 GDPR.