© www.pkfotografie.com, Philipp Kirschner

Privacy notice

Data protection declaration of Leipzig Tourismus und Marketing (LTM) GmbH

Our company takes the protection of personal data very seriously. In accordance with Articles 12, 13 and 21 of the General Data Protection Regulation (GDPR), we provide information below on how LTM GmbH handles personal data.

Personal data are individual details about the personal or factual circumstances of a specific or identifiable natural person. According to Article 4, paragraph 1, personal data are "all information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person."

Part A: Information on the handling of personal data at LTM GmbH

Part B: Further information on the handling of personal data on the website leipzig.travel of LTM GmbH

Part A: Information on the handling of personal data at LTM GmbH

I. Person responsible

Leipzig Tourism and Marketing GmbH
Augustusplatz 9
04109 Leipzig, Germany
Tel. + 49 341 7104 -260
Fax +49 341 7104-271
info@ltm-leipzig.de

II. Data Protection Officer

Leipzig Tourism and Marketing GmbH
Data Protection Officer Thomas Köhn
Augustusplatz 9
04109 Leipzig, Germany
Tel. + 49 341 7104 -320
Fax +49 341 7104-301
datenschutz@ltm-leipzig.de

III. Purposes and legal bases of data processing by LTM GmbH

LTM GmbH processes personal data in accordance with the provisions of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and other applicable data protection regulations if required by law.

Which data is processed in detail and how it is used depends largely on the respective services requested or agreed. Further details or additions to the purposes of data processing can be found in the respective contract documents, agreements, forms, declarations of consent and/or other information provided (e.g. when using the leipzig.travel website, travel conditions for package offers from LTM GmbH).

  1. purposes within the scope of consent according to Art. 6 para. 1 a GDPR
    Personal data may be processed for specific purposes (e.g. using an email address for marketing purposes) based on consent. This consent can usually be revoked at any time. This also applies to the revocation of declarations of consent given to LTM GmbH before the GDPR came into force, i.e. before May 25, 2018. The purposes and consequences of revoking or not granting consent are explained separately in the corresponding text of the consent.
    In principle, the revocation of consent will only take effect in the future. Processing that took place before the revocation is not affected and remains lawful.
     
  2. Purposes for the performance of a contract or pre-contractual measures pursuant to Art. 6 Para. 1 b GDPR
    Personal data is processed to carry out contracts with LTM GmbH and to execute orders, as well as to carry out measures and activities within the framework of pre-contractual relationships, e.g. with interested parties. The processing therefore serves in particular to provide tourist services and deliver products in accordance with orders and wishes and includes the services, measures and activities required for this purpose. This essentially includes:

    - contract-related communication, the verifiability of orders, other agreements and transactions as well as quality control through appropriate documentation, goodwill procedures, measures to control and optimize business processes as well as to fulfill general due diligence obligations, management and control by affiliated companies (e.g. parent company),

    - statistical evaluations for corporate management, cost recording and controlling, reporting, internal and external communication, emergency management, accounting and tax assessment of operational services, risk management, assertion of legal claims and defense in legal disputes,

    - Ensuring IT security (including system and plausibility tests) and general security, including building and facility security, ensuring and exercising house rules, ensuring the integrity, authenticity and availability of data, preventing and solving criminal offenses; control by supervisory bodies or control authorities (e.g. audit).
     
  3. Purposes for the fulfilment of legal requirements according to Art. 6 Para. 1 c GDPR or in the public interest according to Art. 6 Para. 1 e GDPR
    Like everyone who participates in economic activity, LTM GmbH is subject to a number of legal obligations. These are primarily legal requirements (e.g. commercial and tax laws, but also possibly supervisory or other official requirements). The purposes of processing may include identity and age verification, fraud and money laundering prevention, the prevention, combating and investigation of terrorist financing and crimes that endanger assets, comparisons with European and international anti-terrorist lists, the fulfillment of tax control and reporting obligations and the archiving of data for the purposes of data protection and data security as well as audits by tax and other authorities. In addition, the disclosure of personal data may be necessary as part of official/judicial measures for the purposes of gathering evidence, criminal prosecution or enforcing civil law claims.
     
  4. purposes within the scope of a legitimate interest of LTM GmbH or third parties according to Art. 6 Para. 1 f GDPR
    In addition to the actual fulfillment of the contract or preliminary contract, LTM GmbH may process data if it is necessary to protect the legitimate interests of LTM GmbH or third parties, in particular for the following purposes:
  • advertising and market and opinion research, provided that the use of the data has not been objected to,
  • obtaining information and exchanging data with credit agencies, insofar as this goes beyond the economic risk of LTM GmbH,
  • the testing and optimization of needs analysis procedures,
  • the further development of products and services as well as existing processes and systems,
  • the disclosure of personal data as part of a risk assessment in company sale negotiations,
  • for comparison with European and international anti-terrorism lists, insofar as this goes beyond the legal obligations,
  • the enrichment of the LTM data, including through the use or research of publicly available data, 
  • market analysis or statistical evaluations,
  • benchmarking,
  • the assertion of legal claims and defense in legal disputes that are not directly related to the contractual relationship,
  • the restricted storage of data if deletion is not possible or only possible with disproportionate effort due to the special nature of the storage,
  • the development of scoring systems or automated decision-making processes,
  • the prevention and investigation of criminal offences, unless exclusively for the fulfilment of legal requirements,
  • building and facility safety, insofar as it goes beyond the general duty of care;
  • internal and external investigations, security audits,
  • the possible listening or recording of telephone conversations for quality control and training purposes,
  • obtaining and maintaining certifications of a private or official nature,
  • Ensuring and exercising house rules through appropriate measures to protect customers and employees of LTM GmbH as well as to secure evidence in the event of criminal offenses and to prevent them.

IV. Categories of data processed by LTM GmbH, insofar as the data were not directly available, and their origin

To the extent necessary for the provision of LTM GmbH's services, LTM GmbH processes personal data lawfully received from other companies or other third parties (e.g. address publishers, credit agencies). In addition, LTM GmbH processes personal data that has been lawfully obtained, received or acquired from publicly accessible sources (such as telephone directories, press, Internet and other media, commercial and association registers, residents' registers, debtor registers, land registers) and may be processed.

Relevant personal data categories may include in particular:

  • Personal data (name, date of birth, place of birth, nationality, marital status, occupation/industry and comparable data),
  • Contact details (address, email address, telephone number and comparable data),
  • Address data (registration data and comparable data),
  • Payment/coverage confirmation for bank and credit cards,
  • Information on the financial situation of customers (creditworthiness data including scoring, and data for assessing economic risk),
  • customer history,
  • Data on the use of the electronic information and communication services offered by LTM GmbH (e.g. time of access to the LTM website, clicked pages/links of LTM GmbH or entries and comparable data, newsletter),
  • video and photo data.

V. Recipients or categories of recipients 

Within LTM GmbH, those internal departments receive data that require it to fulfil contractual and legal obligations or in the context of processing and implementing the legitimate interests of LTM GmbH.

In addition, LTM GmbH shares personal data with other recipients who provide services for LTM GmbH, insofar as this is permitted or required by law. LTM GmbH limits the sharing of personal data to what is necessary. In some cases, LTM service providers receive personal data as contract processors and are then strictly bound by the instructions of LTM GmbH when handling personal data.

Data will not be passed on to external parties exclusively:

  • in connection with the execution of the contract,
  • due to the legitimate interest of LTM GmbH or the legitimate interest of the third party for the purposes stated under Section III. / 4 (e.g. to authorities, credit agencies, debt collection agencies, lawyers, courts, experts, group companies and committees and supervisory bodies),
  • for the purposes of fulfilling legal requirements according to which LTM GmbH is obliged to provide information, report or pass on data or if the data transfer is in the public interest (see III. / 3),
  • to the extent that external service providers process data on behalf of LTM GmbH as processors or function takers (e.g. external data centers, support/maintenance of IT applications, archiving, document processing, call center services, compliance services, controlling, data screening for anti-money laundering purposes, data validation or plausibility checks, data destruction, purchasing/procurement, customer management, lettershops, marketing, media technology, research, risk controlling, billing, telephony, website management, auditing services, credit institutions, printing companies or companies for data disposal, courier services, logistics),
  • if LTM GmbH has been given consent to transmit the data to third parties.

VI. Duration of data storage

LTM GmbH processes and stores data for the duration of the respective business relationship. This also includes the initiation of a contract (pre-contractual legal relationship) and the execution of a contract.

In addition, LTM GmbH is subject to various retention and documentation obligations, which arise from the German Commercial Code (HGB) and the German Fiscal Code (AO), among others. The retention and documentation periods specified therein are up to ten years after the end of the business relationship or the pre-contractual legal relationship.

Furthermore, special legal regulations may require a longer retention period, such as the preservation of evidence within the framework of the statutory limitation periods. According to Sections 195 ff. of the German Civil Code (BGB), the regular limitation period is three years, but limitation periods of up to 30 years may also apply.

If the data is no longer required to fulfil contractual or legal obligations and rights, it will be deleted unless its - limited - further processing is necessary to fulfil the purposes listed under III. / 4 due to an overriding legitimate interest. Such an overriding legitimate interest also exists, for example, if deletion is not possible or only possible with disproportionate effort due to the special type of storage and processing for other purposes is excluded by suitable technical and organisational measures.

VII. Third country transfers, data transfer to international organisations

Data will be transferred to locations in countries outside the European Union (EU) or the European Economic Area (EEA) (so-called third countries) if it is necessary to execute an order/contract, if it is required by law (e.g. tax reporting obligations), if it is within the scope of a legitimate interest of LTM GmbH or a third party, or if LTM GmbH has been given consent.

The processing of data in a third country can also take place in connection with the involvement of service providers within the framework of order processing. If there is no decision by the EU Commission regarding an appropriate level of data protection for the country in question, LTM GmbH ensures through appropriate contracts in accordance with EU data protection regulations that rights and freedoms are adequately protected and guaranteed. LTM GmbH will provide corresponding detailed information on request.

VIII. Data protection rights as a data subject

Under the statutory requirements, the data subject is entitled to the following rights, which can be asserted against LTM GmbH:

Right: You have the right, within the framework of Art. 15 GDPR, to request confirmation from LTM GmbH as to whether LTM GmbH processes personal data of its customers. If this is the case, you have the right, within the framework of Art. 15 GDPR, to receive information about this personal data as well as certain other information (including processing purposes, categories of personal data, categories of recipients, planned storage period, the origin of the data, the use of automated decision-making and, in the case of transfer to a third country, the appropriate guarantees) and a copy of the data (possibly with restrictions according to Section 34 BDSG).

Right to rectification: According to Art. 16 GDPR, you have the right to request that LTM GmbH correct the personal data stored about its customers if these are inaccurate or incorrect.

Right to erasure: Under the conditions of Art. 17 GDPR, you have the right to demand that LTM GmbH immediately delete the personal data of its customers. The right to deletion does not exist, among other things, if the processing of the personal data is necessary for the exercise of the right to freedom of expression and information, to fulfill a legal obligation to which LTM GmbH is subject (e.g. statutory retention periods) or to assert, exercise or defend legal claims.

Right to restriction of processing: Under the conditions of Art. 18 GDPR, you have the right to request that LTM GmbH restrict the processing of its customers’ personal data.

Right to data portability: Under the conditions of Art. 20 GDPR, you have the right to request that LTM GmbH transfer the personal data of its customers that have been made available to LTM GmbH in a structured, common and machine-readable format.

Withdrawal: You have the right to revoke your consent to the processing of personal data at any time with future effect.

Right to: You have the right to object to the processing of personal data under the conditions of Art. 21 GDPR, so that LTM GmbH must stop processing this personal data. The right to object only exists within the limits set out in Art. 21 GDPR. In addition, the interests of LTM GmbH may conflict with the termination of processing, so that LTM GmbH is entitled to process the personal data despite the objection.

Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement, under the conditions of Art. 77 GDPR, if you believe that the processing of personal customer data violates the GDPR. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

The supervisory authority responsible for LTM GmbH is:

The Saxon Data Protection Commissioner
Devrientstraße 5
01067 Dresden
Phone: 0351 / 85471-101
Fax: 0351 / 85471-109
Website: www.datenschutz.sachsen.de
Email: saechsdsb@slt.sachsen.de

However, LTM GmbH recommends that you always first address a complaint to the company’s data protection officer.

If possible, requests to exercise rights should be submitted in writing to the address provided above under Section I or directly to the data protection officer of LTM GmbH.

IX. Scope of obligations to provide data

In principle, there is no obligation to provide personal data to LTM GmbH. If this is not done, however, LTM GmbH will not be able to answer customer inquiries, will not be able to enter into a contract and the LTM GmbH website will not be able to be used in some cases. Personal data that LTM GmbH does not absolutely need for the processing purposes mentioned above is marked as voluntary information with a "if necessary" or another symbol.

X. Automated decision-making / profiling according to Article 22 GDPR

LTM GmbH does not use automated decision-making or profiling (an automated analysis of personal circumstances).

XI. Information on the right of objection according to Art. 21 GDPR

  1. You have the right to object at any time to the processing of data based on Art. 6 (1) e GDPR (data processing in the public interest) or Art. 6 (1) f GDPR (data processing on the basis of a balance of interests) if there are reasons for doing so that arise from a particular situation. This also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR.

    If an objection is lodged, LTM GmbH will no longer process personal data unless compelling legitimate grounds for the processing can be demonstrated which outweigh the interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
     
  2. In individual cases, LTM GmbH also processes personal data in order to conduct direct advertising. If no advertising is desired, there is the right to object to this at any time; this also applies to profiling insofar as it is associated with such direct advertising. LTM GmbH will respect this objection in the future.

    LTM GmbH will no longer process the data for direct marketing purposes if processing for these purposes is objected to.
     
  3. The objection can be made in any form and should, if possible, be addressed to:

Leipzig Tourism and Marketing GmbH
Augustusplatz 9
04109 Leipzig, Germany
Tel. + 49 341 7104 -260
Fax +49 341 7104-271
info@ltm-leipzig.de

XII. Amendments

LTM GmbH reserves the right to change this privacy policy at any time. Any changes will be announced by publishing the amended privacy policy on the LTM GmbH website leipzig.travel. Unless otherwise specified, such changes will take effect immediately. We recommend that you check this privacy policy regularly to see the most current version.

This privacy policy is dated May 03.05.2022, XNUMX.

Part B: Further information on the handling of personal data on the website leipzig.travel of LTM GmbH

I. Person responsible

Leipzig Tourism and Marketing GmbH
Augustusplatz 9
04109 Leipzig, Germany
Tel. + 49 341 7104 -260
Fax +49 341 7104-271
info@ltm-leipzig.de

II. Data Protection Officer

Leipzig Tourism and Marketing GmbH
Data Protection Officer Thomas Köhn
Augustusplatz 9
04109 Leipzig, Germany
Tel. + 49 341 7104 -320
Fax +49 341 7104-301
datenschutz@ltm-leipzig.de

III. Purposes and legal bases of data processing on the leipzig.travel website

1. Informational use of the website

The LTM GmbH website can be visited without providing any personal information. If the LTM website is used for information purposes only, LTM GmbH does not process any personal data, with the exception of the data transmitted by the browser to enable the visit to the website and information transmitted to LTM GmbH as part of cookies used for statistical analysis of the use of the LTM website.

a. Technical provision of the website

For the purpose of the technical provision of the website, it is necessary for LTM GmbH to process certain automatically transmitted information so that the browser can display the website and the website can be used. This information is automatically recorded each time the LTM GmbH website is accessed and stored in the server log files. This information relates to the computer system of the accessing computer. The following information is collected:

  • IP address (Internet Protocol address) of the accessing computer,
  • the website from which the LTM website is visited (referrer),
  • the website visited on the LTM website,
  • the date and duration of the visit,
  • browser type and browser settings,
  • Operating system.

LTM GmbH also uses cookies to make the website available for use. Cookies are text files that are stored in the Internet browser or by the Internet browser on your own computer system when you access a website. A cookie contains a characteristic character string that enables the browser to be uniquely identified when you access the website again. LTM GmbH uses these cookies exclusively to make the website and its technical functions available. Some functions of the LTM website cannot be offered without the use of cookies.

LTM GmbH uses cookies to the following extent:

  • There are transient cookies in temporary use on the LTM website. These include session cookies in particular. These store a so-called session ID, which can be used to assign various browser requests to the shared session. This allows the browser to be recognized when the website is visited again. The session cookies are deleted when the browser is closed.
  • LTM GmbH also uses persistent cookies (time-limited use). These save certain settings so that they are available the next time you visit the website. This means that, for example, the language setting can be remembered for 24 hours. Such cookies are automatically deleted after a specified period of time, which can vary depending on the cookie. The cookies can be deleted at any time in the browser's security settings.

Information collected by LTM GmbH through the above cookies is not used to create user profiles or to evaluate surfing behavior.

LTM GmbH processes personal data for the technical provision of the LTM website on the basis of the following legal bases:

  • to fulfil a contract or to carry out pre-contractual measures in accordance with Art. 6 (1) lit. b GDPR, insofar as the LTM website is visited to obtain information about the services of LTM GmbH and
  • to protect the legitimate interests of LTM GmbH in accordance with Art. 6 (1) (f) GDPR in order to be able to make the website technically available. The legitimate interest of LTM GmbH is to provide an attractive, technically functioning and user-friendly website and to take measures to protect the LTM website from cyber risks and to prevent the LTM website from posing cyber risks to third parties.

Use of web fonts
This website uses external fonts, Google Fonts. Google Fonts is a service provided by Google Inc. ("Google") (1600 Amphitheatre Parkway, Mountain View, California, 94043). The use of Google Fonts is intended to make the website easier to read and more graphically pleasing. Use is either with prior consent or through local integration. This may result in the following being transmitted to the server and stored by Google:

  • Name and version of the browser used
  • website from which the request was initiated (referrer URL)
  • operating system of the computer
  • screen resolution of the computer
  • IP address of enquiring computer
  • Language settings of the browser or operating system used by the user

Further information can be found in Google’s privacy policy: www.google.com/fonts#AboutPlace:about 

use of OpenWeatherMap
This website uses the OpenWeatherMap weather service via an API. This is provided by Openweather Ltd., 17th floor, 1 Ropemaker Street, City Point, London, EC2Y 9ST United Kingdom. When used, the IP address and the stored coordinates are usually transferred to an OpenWeatherMap server in the UK, the USA and/or Latvia and stored there. LTM GmbH has no influence on this data transfer. OpenWeatherMap is used in the interest of an attractive presentation of the website and to provide the user with current weather data and weather forecasts. Further information on how user data is handled can be found in OpenWeatherMap's privacy policy: openweather.co.uk/privacy-policy

Use of Outdooractive's services
To the extent that the Outdooractive service, in particular the map material, is used on this website, the following data protection declaration also applies:

Outdooractive provides electronic databases that can be used in the form of an electronic information portal in the digital tourism sector. This includes, for example, maps and route planning. Outdooractive receives the following data, which is technically necessary for Outdooractive to display the electronic databases and to ensure stability and security (the legal basis is Art. 6 Para. 1 Clause 1 Letter f of GDPR):

  • The IP address
  • Date and time of the request
  • Time Zone Difference to Greenwich Mean Time (GMT)
  • Content of the requirement (concrete page)
  • Access Status / HTTP status code
  • each transmitted amount of data
  • Website from which the request comes
  • Browser
  • User location
  • Operating system and its interface
  • Language and version of the browser software.

Outdooractive uses cookies for the evaluation, which are stored on your browser. Outdooractive stores the information collected in this way on servers in Germany and in third countries. The evaluation can be stopped by deleting existing cookies and preventing cookies from being saved. If you want to prevent cookies from being saved, please note that Outdooractive's electronic databases cannot be used to their full extent. You can prevent cookies from being saved by changing the settings in your browser.

The IP address transmitted by the browser is not merged with other collected data. Outdooractive continues to use GPS data when the electronic databases are used.
LTM GmbH has no influence on the data collected and data processing procedures, nor is LTM GmbH aware of the full extent of data collection, the purposes of processing, or the storage periods. LTM GmbH also has no information on the deletion of the data collected by Outdooractive.
Outdooractive stores the collected data as user profiles and uses them for the purposes of market research and/or needs-based design of electronic databases. There is a right to object to the creation of these user profiles, but this must be done directly via Outdooractive. The legal basis for the use of Outdooractive's services is Art. 6 Paragraph 1 Clause 1 Letter f of GDPR.
Further information on the purpose and scope of data collection and processing by Outdooractive can be found in Outdooractive's privacy policy. There you can also find further information on your own rights and setting options for protecting your privacy.

Data protection declaration of Outdooractive GmbH & Co. KG, Missener Straße 18, 87509 Immenstadt:

corporate.outdooractive.com/de/privacy-policy/

www.outdooractive.com/de/datenschutz.html

Use of Feratel with the booking route TOSC5
The website uses the feratel booking system. The service provider is feratel media technologies AG, Maria-Theresien-Straße 8, A-6020 Innsbruck, Austria. The aim of feratel is to enable simple appointment booking on the website. By using feratel, data entered into the appointment booking form is transferred to feratel media technologies AG. There is no obligation to use feratel to make an appointment. Other contact options can also be used.
The processing is carried out on the basis of your own consent. The consent is given via the cookie consent tool of feratel media technologies AG. LTM GmbH has no influence on this processing activity. Further information on data processing by feratel media technologies AG can be found here: www.feratel.com/datenschutz.html

use of Open Street Map
The website uses Open Street Map for data economy reasons. The OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, GB - Great Britain, is a non-profit organisation registered in Great Britain whose aim is to support the OpenStreetMap project. When the page is accessed, the map components are loaded from the Open Street Map servers. Data is automatically processed by Open Street Map. User data is used by Open Street Map solely to operate and further develop the services. The user data is used in anonymised form for research purposes and under https://planet.openstreetmap.org made available to the public. 

b. Statistical analysis of the use of the LTM website and increasing reach

For the purpose of statistical analysis of the use of the LTM website, LTM GmbH uses Google Analytics and thus cookies that enable an analysis of surfing behavior. This enables LTM GmbH to improve the quality of the LTM website and its content. LTM GmbH learns how the website is used and can therefore continuously optimize the LTM offering.

LTM GmbH processes personal data for statistical analysis of the use of the LTM website on the basis of the following legal basis:

  • Consent according to Art. 6 Para. 1 lit. a GDPR.

Google Analytics

On the LTM website, LTM GmbH uses Google Analytics, a web analysis service provided by Google Inc., USA. Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable an analysis of how the website is used. The information generated by the cookie about your use of the LTM website is usually transferred to a Google server in the USA and stored there. However, if IP anonymization is activated on the LTM website, Google will shorten your IP address beforehand within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of LTM GmbH, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by the browser as part of Google Analytics will not be merged with other data held by Google.

On the LTM website, LTM GmbH uses Google Analytics with the extension “_anonymizeIp()”. This means that IP addresses are shortened and processed, thus preventing them from being directly linked to individuals.

LTM GmbH only uses Google Analytics with prior consent. This consent can be revoked by

  • the storage of cookies is prevented by a corresponding setting in the browser software; however, LTM GmbH points out that in this case not all functions of the LTM website may be fully available,
  • the browser plug-in available under the following link is downloaded and installed: http://tools.google.com/dlpage/gaoptout?hl=de 
  • to prevent Google Analytics from collecting data on the LTM website in the future. An opt-out cookie is stored in the browser. Please note that the opt-out cookie must be activated in every browser used on all end devices and may also need to be reactivated if all cookies in a browser are deleted.

Further information on terms of use and data protection from Google Analytics is provided here: https://www.google.de/intl/de/policies/

Google Analytics Remarketing

The LTM website uses the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google AdWords. The provider is Google Inc., USA.

This function makes it possible to link the advertising target groups created with Google Analytics Remarketing with the cross-device functions of Google AdWords. In this way, interest-based, personalized advertising messages that have been adapted depending on previous usage and surfing behavior on one device (e.g. mobile phone) can also be displayed on another device (e.g. tablet or PC).

If consent has been given, Google will link your web and app browsing history to your Google account. This means that the same personalized advertising messages can be displayed on every device on which you log in with your Google account.

To support this feature, Google Analytics collects Google-authenticated IDs of users that are temporarily linked to our Google Analytics data to define and create audiences for cross-device ad promotion.

You can permanently opt out of cross-device remarketing/targeting by deactivating personalized advertising in your own Google account: www.google.com/settings/ads

The summary of the collected data in your own Google account is carried out exclusively on the basis of consent, which can be given or revoked to Google (Art. 6 Para. 1 lit. a GDPR). For data collection processes that are not merged in your own Google account (e.g. because no Google account exists or the merging has been objected to), the collection of the data is based on Art. 6 Para. 1 lit. f GDPR. The legitimate interest arises from the fact that LTM GmbH, as the website operator, has an interest in the anonymized analysis of website visitors for advertising purposes.

Further information and the data protection provisions can be found in Google’s privacy policy at: policies.google.com/technologies/ads.

Facebook remarketing

LTM GmbH uses the remarketing function “Custom Audiences” of Facebook Inc., USA, on the LTM website.

This function serves the purpose of targeting website visitors with interest-based advertising on the social network Facebook.

For this purpose, the Facebook remarketing tag has been implemented on the LTM website. This tag establishes a direct connection to the Facebook servers when the website is visited. This transmits to the Facebook server which of the LTM websites have been visited. Facebook assigns this information to the personal Facebook user account. When the social network Facebook is visited, personalized, interest-based Facebook ads are displayed.

The processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to the legitimate interest in the above-mentioned purpose.

You have the right to object to the processing of personal data based on Art. 6 (1) f GDPR at any time for reasons arising from a particular situation. You can use the remarketing function “Custom Audiences” at https://www.facebook.com/settings/?tab=ads#_=_ deactivated.

Further information on the collection and use of data by Facebook, as well as your rights and options for protecting your privacy, can be found in Facebook’s privacy policy at https://www.facebook.com/about/privacy/.

2. Active use of the website

In addition to the purely informational use of the LTM website, the website can also be actively used to order one of the LTM products, register for an event, register for the LTM newsletter or to contact LTM GmbH. In addition to the processing of personal data described above for purely informational use, LTM GmbH also processes other personal data that LTM GmbH needs to process orders or to process and answer inquiries.

a. User requests

In order to process and answer inquiries to LTM GmbH, e.g. via the contact form, the inquiry form for travel offers, the tour construction kit inquiry form, the registration form for the photo archive or the email address, LTM GmbH processes the personal data provided in this context. This always includes the name and email address in order to receive a response, as well as other information that is sent to LTM GmbH as part of the notifications.

LTM GmbH processes personal data to respond to user inquiries based on the following legal basis:

  • to safeguard the legitimate interests of LTM GmbH in accordance with Art. 6 (1) (f) GDPR, the legitimate interest consists in the appropriate response to customer inquiries.

b. Booking of accommodation, tours and experiences, Welcome Cards and ordering information materials

LTM GmbH has integrated online booking systems from external service providers to process bookings for accommodation, tours and experiences, welcome cards and to order information materials via the LTM website. As soon as one of the "Book" buttons is clicked, the user leaves the LTM server and is redirected to an online booking system from external service providers. The service provider processes the personal data entered there to process a booking/order.

The personal data processed are transmitted by the service provider of booking accommodation and booking tours and experiences to the relevant hotel operator or provider of the tours and experiences. The processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR, fulfillment of a contract or to carry out pre-contractual measures.

The personal data in the case of booking Welcome Cards and ordering information materials are transmitted to LTM GmbH to process the order or order and payment process. This is also the legitimate interest of LTM GmbH in accordance with Art. 6 Paragraph 1 Letter b of GDPR. The data is deleted by LTM GmbH as soon as it is no longer required for the purposes mentioned or after the expiry of applicable legal requirements.

The provision of data is neither legally nor contractually required. There is no obligation to provide personal data. If processing is objected to, this means that no booking/order can be made with LTM GmbH.

c. Purchase Regional souvenir shop

Within the regional souvenir shop, LTM GmbH enables the purchase of regional souvenirs and tourist literature/maps, e.g. souvenirs, cycling and hiking maps, regional literature, CDs/DVDs, vouchers, from third-party providers (= retailers).

Individual services from the range can be placed in the shopping cart in the shop. All services and their quantity are stored in the shopping cart. To simplify the ordering process, LTM GmbH saves an order that has not yet been fully completed so that it can be completed on the next visit.

After placing an order, LTM GmbH forwards it as a messenger to the retailer of regional souvenirs and tourist literature/maps selected in the ordering process. In addition to the data known from the registration process, first and last name, contact details (address, telephone number if applicable, email address, etc.) and, if applicable, a different delivery address, the following data is collected:

  • service(s) from the range,
  • number of services,
  • Costs, shipping costs (net/gross) of the service(s),
  • Dealer of regional souvenirs and tourist literature/maps who is to deliver the goods.

The retailer of regional souvenirs and tourist literature/maps processes the personal data to complete a purchase, payment and delivery process. The processing of the data for the above purpose is based on the following legal basis:

  • to fulfill a contract or to carry out pre-contractual measures pursuant to Art. 6 (1) (b) GDPR.

LTM GmbH processes the data for the above purpose on the basis of the following legal bases:

  • to fulfil a contract or to carry out pre-contractual measures in accordance with Art. 6 (1) (b) GDPR, insofar as the LTM website is used to obtain information about the range of services offered by LTM GmbH and to place orders as well as for statistical evaluations,
  • to protect the legitimate interests of LTM GmbH in accordance with Art. 6 (1) (f) GDPR in order to be able to make the website technically available. The legitimate interest of LTM GmbH is to be able to provide an attractive, technically functioning and user-friendly website.

d. Compliance with legal regulations

LTM GmbH also processes personal data in order to fulfil other legal obligations that affect LTM GmbH in connection with the processing of the booking/order. This includes in particular retention periods under commercial, trade or tax law.

LTM GmbH processes personal data based on the following legal bases:

  • to fulfill a legal obligation to which LTM GmbH is subject pursuant to Art. 6 (1) (c) GDPR in connection with commercial, trade or tax law, insofar as LTM GmbH is obliged to record and store the data.

e. Law enforcement

LTM GmbH also processes personal data in order to assert its own rights and enforce its own legal claims. LTM GmbH also processes personal data in order to defend the company against legal claims. Finally, LTM GmbH processes personal data to the extent that this is necessary to prevent or prosecute criminal offenses.

LTM GmbH processes personal data for this purpose on the basis of the following legal bases:

  • to protect the legitimate interests of LTM GmbH in accordance with Art. 6 (1) (f) GDPR, insofar as LTM GmbH can assert legal claims or defend itself in legal disputes or insofar as criminal offenses can thereby be prevented or solved.

f. Advertising purposes such as newsletters, surveys, etc.

With your consent, LTM GmbH uses the data for advertising purposes, such as sending an LTM newsletter or current offers, events, etc. from Leipzig and the Leipzig region. LTM GmbH processes mandatory information such as the email address, but also information that is provided voluntarily. LTM GmbH uses the voluntary information to continuously improve the information experience and make it more customer-friendly, to enable a personalized approach, to analyze preferences and to inform about products that are the best fit and that make the advertising more useful and interesting. Notifications can be canceled at any time by clicking on the link provided in the newsletter and thus unsubscribe.

LTM GmbH uses a newsletter service provider to send newsletters. This enables LTM to collect information such as opening times, information about the email client and device, click behavior and the topics that were viewed. LTM GmbH uses this information exclusively in pseudonymized form. By analyzing and evaluating this information, LTM GmbH is able to improve the LTM newsletter and its offers both technically and in terms of content and thus send customized advertising.

The evaluation and analysis of this data helps LTM GmbH not to send advertising indiscriminately. Instead, advertising such as newsletters, product recommendations or invitations are sent by email or direct mail that corresponds to the areas of interest. In this respect, for example, a comparison is also made as to which of the advertising emails are opened in order to avoid unnecessary emails being sent. If the email address was communicated to LTM GmbH in connection with the purchase of goods or services, this can subsequently be used by LTM GmbH to send a newsletter. In such a case, only direct advertising for similar goods or services will be sent via the newsletter.

In addition, LTM GmbH uses the contact details for marketing purposes with your consent if advertising brochures or other materials are ordered, event registrations are made or surveys are taken part in.

LTM GmbH processes the data for sending newsletters and personalizing the message on the following legal basis:

  • provided that LTM GmbH has been granted consent via the double opt-in procedure, in accordance with Art. 6 (1) lit. a GDPR,
  • if the email address was communicated to LTM GmbH in connection with the purchase of goods or services or if LTM GmbH sends personalized advertising, to protect the legitimate interests of LTM GmbH in accordance with Art. 6 Para. 1 lit. f GDPR in conjunction with Section 7 Para. 3 UWG. The legitimate interest of LTM GmbH is based on economic interests such as the implementation of promotional measures and target group-oriented advertising.

g. Use of data for e-mail advertising and right of objection

If LTM GmbH receives the email address in connection with the conclusion of the contract and the provision of LTM products and this has not been objected to, LTM GmbH reserves the right to regularly send offers for similar products from the LTM range by email. This use of the email address can be objected to at any time by sending a message to the contact option described below or via a link provided for this purpose in the advertising email, without incurring any costs other than the transmission costs according to the basic rates.

IV. Links and Social Links

a. Links

Some sections of the LTM websites contain links to third-party websites. These websites are subject to their own data protection principles. LTM GmbH is not responsible for their operation, including data handling. If information is sent to or via such third-party sites, the privacy statements of these sites should be checked before transmitting information that can be assigned to a person.

b. Social Links

The LTM website contains links to services such as Facebook, Instagram, YouTube and Pinterest. After clicking on the link, you will be redirected to the website of the respective provider, i.e. only then will user information be transferred to the respective provider. Information on how your own data is handled when using the websites of other providers can be found in the respective data protection notices of these providers.

V. Recipients or categories of recipients of data

Within LTM GmbH, those internal departments receive data that they need to fulfill contractual and legal obligations or in the context of processing and implementing the legitimate interests of LTM GmbH. In addition, LTM GmbH shares personal data, insofar as this is permitted or required by law, with other recipients who provide services for LTM GmbH in connection with the LTM website. LTM GmbH limits the sharing of personal data to what is necessary, in particular to be able to process the order/booking. In some cases, LTM service providers receive personal data as contract processors and are then strictly bound by the instructions of LTM GmbH when handling personal data.

The categories of recipients of personal data are listed below:

  • external service providers for booking accommodation, tours and experiences, welcome cards, ordering information materials and sending newsletters,
  • Dealers of regional souvenirs and tourist literature/maps,
  • Payment service providers and banks when processing the payment,
  • logistics service providers to deliver the goods,
  • Debt collection companies and legal advisors in the assertion of LTM GmbH’s claims,
  • IT service provider for the administration and hosting of the LTM website,
  • if applicable, other categories of recipients.

VI. Duration of storage

Informational use of the website

When using the LTM website for purely informational purposes, LTM GmbH stores personal data on the servers exclusively for the duration of the visit to the LTM website. After leaving the LTM website, the personal data is deleted immediately.

Cookies installed by LTM GmbH are also usually deleted after leaving the LTM website. However, this does not apply to persistent cookies (including cookies used by Google Analytics), which are automatically deleted after a specified period of time that may vary depending on the cookie - maximum storage period of one year (see III. / 1. / a. or b.).

In addition, you have the option to delete installed cookies yourself at any time (see III /1. / a. or b.).

Active use of the website

When you actively use the LTM website, LTM GmbH initially stores personal data for the duration of answering an inquiry or for the duration of the business relationship. This also includes the initiation of a contract (pre-contractual legal relationship) and the execution of a contract.

In addition, LTM GmbH stores personal data until any legal claims expire in order to use them as evidence if necessary. The limitation period is usually between 12 and 36 months, but can also be up to 30 years.

When the statute of limitations expires, LTM GmbH deletes personal data unless there is a legal obligation to retain the data, for example under the German Commercial Code (§§ 238, 257 para. 4 HGB) or the German Tax Code (§ 147 para. 3, 4 AO). These retention periods can be between two and ten years.

VII. Third country transfer

When using Google tools, LTM GmbH transfers the shortened IP address to the USA. The data transfer is based on the EU Commission Implementing Decision (EU) 2016/1250 of July 12, 2016 in accordance with Directive 95/46/EC of the European Parliament and of the Council on the adequacy of the protection offered by the EU-US Privacy Shield.

Furthermore, LTM GmbH does not transfer personal data to countries outside the EU or EEA or to international organizations.

VIII. Your data protection rights as a data subject

Under the statutory requirements, the data subject is entitled to the following rights, which can be asserted against LTM GmbH:

Right: You have the right, within the framework of Art. 15 GDPR, to request confirmation from LTM GmbH as to whether LTM GmbH processes personal data; if this is the case, you have the right, within the framework of Art. 15 GDPR, to receive information about this personal data as well as certain other information (including processing purposes, categories of personal data, categories of recipients, planned storage period, the origin of the data, the use of automated decision-making and, in the case of transfer to a third country, the appropriate guarantees) and a copy of your own data (possibly with restrictions according to Section 34 BDSG).

Right to rectification: According to Art. 16 GDPR, you have the right to request that LTM GmbH correct the personal data stored about you if it is inaccurate or incorrect.

Right to erasure: Under the conditions of Art. 17 GDPR, you have the right to demand that LTM GmbH delete the personal data in question immediately. The right to deletion does not exist, among other things, if the processing of the personal data is necessary for exercising the right to freedom of expression and information, to fulfill a legal obligation to which LTM GmbH is subject (e.g. statutory retention periods) or to assert, exercise or defend legal claims.

Right to restriction of processing: Under the conditions of Art. 18 GDPR, you have the right to request that LTM GmbH restrict the processing of its customers’ personal data.

Right to data portability: Under the conditions of Art. 20 GDPR, you have the right to request that LTM GmbH transfer the personal data provided to LTM GmbH in a structured, common and machine-readable format.

Withdrawal: You have the right to revoke your consent to the processing of personal data at any time with future effect.

Right to: There is the right to object to the processing of personal data under the conditions of Art. 21 GDPR, so that LTM GmbH must stop processing personal data. The right to object only exists within the limits provided for in Art. 21 GDPR. In addition, the interests of LTM GmbH may conflict with the termination of processing, so that LTM GmbH is entitled to process personal data despite the objection.

Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement, under the conditions of Art. 77 GDPR, if you consider that the processing of your personal data violates the GDPR. This right of appeal is without prejudice to any other administrative or judicial remedy.

The supervisory authority responsible for LTM GmbH is:

The Saxon Data Protection Commissioner
Devrientstraße 5
01067 Dresden
Phone: 0351 / 85471-101
Fax: 0351 / 85471-109
Website: www.datenschutz.sachsen.de
Email: saechsdsb@slt.sachsen.de

However, LTM GmbH recommends that you always first address a complaint to the company’s data protection officer.

If possible, requests to exercise rights should be submitted in writing to the address provided above under Section I or directly to the data protection officer of LTM GmbH.

IX. Scope of obligations to provide data

In principle, there is no obligation to provide personal data to LTM GmbH. If this is not done, however, LTM GmbH will not be able to answer customer inquiries, will not be able to enter into a contract and the LTM GmbH website will not be able to be used in some cases. Personal data that LTM GmbH does not absolutely need for the processing purposes mentioned above is marked as voluntary information with a "if necessary" or another symbol.

X. Automated decision-making / profiling according to Article 22 GDPR

LTM GmbH does not use automated decision-making or profiling (an automated analysis of personal circumstances).

XI. Information on the right of objection according to Art. 21 GDPR

1. You have the right to object at any time to the processing of data based on Art. 6 (1) e GDPR (data processing in the public interest) or Art. 6 (1) f GDPR (data processing on the basis of a balance of interests) if there are reasons for doing so that arise from a particular situation. This also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR.

If an objection is lodged, LTM GmbH will no longer process personal data unless compelling legitimate grounds for the processing can be demonstrated which outweigh the interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

2. LTM GmbH also processes personal data in individual cases in order to conduct direct advertising. If no advertising is desired, there is the right to object to this at any time; this also applies to profiling insofar as it is associated with such direct advertising. LTM GmbH will respect this objection in the future.

LTM GmbH will no longer process the data for direct marketing purposes if processing for these purposes is objected to.

3. The objection can be made in any form and should, if possible, be addressed to:

Leipzig Tourism and Marketing GmbH
Augustusplatz 9
04109 Leipzig, Germany
Tel. + 49 341 7104 -260
Fax +49 341 7104-271
info@ltm-leipzig.de

XII. Copyright

The content and works on the LTM website created by LTM GmbH are subject to German copyright law. Duplication, processing, distribution and any type of exploitation outside the limits of copyright law require the written consent of the respective author or creator. Downloads and copies of the LTM website are only permitted for private, non-commercial use. Insofar as the content of this site was not created by the operator, the copyrights of third parties are observed. In particular, third-party content is marked as such. Should a copyright infringement nevertheless exist, LTM GmbH asks for appropriate notification. If LTM GmbH becomes aware of any infringements, it will remove such content immediately.

XIII. Amendments

LTM GmbH reserves the right to change this privacy policy at any time. Any changes will be announced by publishing the amended privacy policy on the LTM GmbH website leipzig.travel. Unless otherwise specified, such changes will take effect immediately. We recommend that you check this privacy policy regularly to see the most current version.

This privacy policy is dated May 03.05.2022, XNUMX.