Data protection

Dear guests,

With the GuestCard Rostock & Warnemünde you will receive powerful special offers from more than 50 service partners as a thank you for your spa tax. As an overnight guest, you also benefit from free use of local public transport throughout the entire Warnow transport network (except Molli and ferries) during your stay. You will receive your Guest Card directly from your host (e.g. hotel, guesthouse, holiday apartment, campsite) upon arrival - either in paper form or digitally as an email, as you wish. As a day guest, you can purchase your Guest Card conveniently and easily via our online shop or at our Rostock & Warnemünde tourist information centers. General

1. Below we will inform you about the collection of personal data when using our Progressive Web App (PWA) at Willkommen.rostock.de and about the use of our GuestCard Rostock & Warnemünde.

2. The term “personal data” means, with reference to the definition of Article 4 No. 1 of Regulation (EU) 2016/679 (hereinafter referred to as “General Data Protection Regulation” or “GDPR” for short), all data that is on They are personally relatable. This includes, for example, name, address, email address, user behavior. With regard to further terms, in particular the terms “processing”, “controller”, “processor” and “consent”, we refer to the statutory data protection definitions in Article 4 GDPR.

3. The Swiss Federal Act on Data Protection, hereinafter referred to as “DSG”, applies to matters that have an impact in Switzerland, even if they are initiated outside Switzerland. However, we use the terms of the GDPR throughout here. The terms of the GDPR “personal data, “processing”, “processor”, “special categories of data” and “data portability” also mean, to the extent that the DSG applies, the terms “personal data” used in the DSG; "Editing"; “Order processor”, “data transfer” and “particularly sensitive personal data” according to the DSG. In this case, the legal meaning of the terms is determined by the DSG.

4. We generally only process personal data to the extent that this is necessary to provide a functional PWA and the content and services we offer. The processing of personal data only takes place if you have given us your consent within the meaning of Art ) to f) GDPR is permitted.

5. Your personal data will only be processed and stored for specified, explicit and legitimate purposes in accordance with Article 5 paragraph 1 b). Your data will be deleted or blocked as soon as the purpose of storage no longer applies. Storage can also take place if this is required by national or European regulations to which we are subject. In this case, the data will be blocked or deleted when the storage period specified in the relevant regulations has expired. The latter does not apply if further processing and storage of the data is necessary to conclude or fulfill a contract.

6. If we use contracted service providers for individual functions of our PWA or want to use your data for commercial purposes, we will inform you in detail about the respective processes below.

Responsible bodies for data collection and processing

1. Responsible within the meaning of Art. 4 No. 7 GDPR, the other data protection laws applicable in the member states of the European Union and other regulations and provisions of a data protection nature is: Hanseatic and university city of Rostock Rostock & Warnemünde Tourism Office
Am Strom 59
18119 Rostock
Germany
Telephone: +49 (0)381 381 2222
Email: gaestecard@rostock.de

2. In the event of an overnight stay in the survey area of the entire urban area of the Hanseatic and university city of Rostock, your host is responsible for fulfilling the contractual requirements and his resulting legal obligations with regard to the Municipal Taxes Act (KAG M - V), the municipal constitution for the state of Mecklenburg-Western Pomerania and the underlying reporting law for the state of Mecklenburg-Western Pomerania in accordance with Article 6 Paragraph 1 b) and b) GDPR is responsible for the collection and processing of your data.

3. Your data will be sent to the Rostock Tourism Center within the framework of the Municipal Taxes Act (KAG M - V), the municipal constitution for the state of Mecklenburg-Western Pomerania and the underlying registration law for the state of Mecklenburg-Western Pomerania in accordance with Article 6 Paragraph 1 b) and b) GDPR 6 Warnemünde is transmitted and processed as an in-house operation by the Hanseatic and university city of Rostock.

4. Your host is legally obliged to prepare a so-called registration form for you and to give you the GuestCard Rostock & Warnemünde as proof of your paid spa tax no later than on the day of your arrival.

5. You are obliged to sign and thereby confirm the registration form on the day of your actual arrival. Your host, in turn, is obliged to transmit the necessary data for billing the spa tax to the respective registration authority. The legal basis for this is Sections 29 to 31 of the Federal Registration Act and Section 134 of the Tax Code based on Article 6 Paragraph 1 b) and c) GDPR.

6. If your host has requested your email address before your arrival and asked for your consent to use it in accordance with Art. 6 Para. 1 a) and b) GDPR, you can receive your GuestCard Rostock & Warnemünde digitally by email receive.

7. The GuestCard Rostock & Warnemünde serves to ensure that you and your host comply with the legal obligations that result from registration law and state law as well as from the municipal spa tax regulations.

8. Further details about responsible bodies can be found in our legal notice. Data protection officer position 1. You can reach and contact our data protection officer at the following address: Data protection officer of Rostock & Warnemünde Tourism Office Am Strom 59 18119 Rostock Telephone: +49 (0)381 381 2222 Email: tzrw-widerruf@rostock.de

Data protection officer position

1. You can reach and contact our data protection officer at the following address:
Data protection officer of Rostock & Warnemünde Tourism Office
Am Strom 59
18119 Rostock
Germany
Telephone: +49 (0)381 381 2222
Email: tzrw-widerruf@rostock.de

Your rights

1. You have the following rights towards us with regard to personal data relating to you: the right to information, the right to rectification, the right to restrict processing, the right to object to processing, the right to deletion, the right to data portability.

2. You also have the right to complain to a data protection supervisory authority about our processing of your personal data.

3. Within the scope of the DSG, you also have the right to data release and data destruction.

Processing of personal data when using our PWA for informational purposes

1. Our PWA is based on the web-based editorial system from destination.data, Münchener Straße 1, 86899 Landsberg am Lech, Germany. Website: www.destination.one Data protection declaration: www.destination.one/datenschutz/ General terms and conditions of use for the eT4 data management system from Destination One

2. If you access our PWA without registering or providing us with information in any other way (“informational use”), we only collect the personal data that your web browser transmits to our server. In order to enable you to display our PWA and to ensure its stability and security, we collect the following personal data: IP address of the user, date and time of the request, time zone difference to GMT, access status (“http status”), amount of data transferred , web browser, operating system, language and version of the browser

3. The aforementioned data is also stored in so-called log files on our servers. This data will not be stored together with your other personal data.

4. The storage of the above-mentioned data in log files serves to ensure the functionality and optimization of our PWA as well as to ensure the security of our information technology systems.

5. In order to ensure the functionality of the PWA, it requires access to the location of your device if the search results are to be filtered according to the "current location" or your location is to be located on a map. The data about your location is only used to process the request and is analyzed anonymously to improve our service. When you use our PWA, your location is requested at regular intervals, but based on an encrypted connection. The data will not be passed on to third parties.

6. As a user of our PWA, you can create and save a watch list in it. It is stored using cookies so that your list can be synchronized and displayed again at any time even if you continue to use the PWA. Your watchlist(s) will also be stored on the server of the editorial system (destination.one) so that you can share them with other users of our PWA. The data will not be passed on to third parties.

7. If you submit your data (email) and your request via the "Report a problem" contact form in our PWA, we will only use this to process your request and the problem you have described (e.g. queries about the email address you provided -Mail). In addition, your data will be stored in a log file on the server of the editorial system (destination.one) for three months and then automatically and irrevocably deleted. The data will not be passed on to third parties.

8. The above data will not be evaluated for marketing purposes. The exception to this is your active registration for our newsletter, whereby you agree to the processing and use of your data. You will find further information about this further in this data protection declaration.

9. Our legitimate interest in data processing lies in the above purposes. The legal basis for the collection and temporary storage of the aforementioned data and log files is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR. The above data used to provide our PWA will be deleted when the respective session has ended. The collection of the above data to provide our PWA is absolutely necessary for its operation. There is no possibility of objection to this.

Processing of personal data through cookies

1. We use so-called cookies in our PWA. Cookies are small text files that are stored on the storage medium of your device, for example on a hard drive, and through which we, as the party that sets the cookie, receive certain information. Cookies cannot run programs or transmit viruses to your device. The PWA uses the following types of cookies, the scope and functionality of which are explained below.

2. Cookies stored in your web browser: Transient cookies: These cookies are automatically deleted when you close your web browser. These include, in particular, session cookies. These store a so-called Session.ID, which can be used to assign various requests from your web browser to the shared session. This enables your device to be recognized when you return to our website. Session cookies are deleted as soon as you log out or close the web browser. Persistent cookies: These cookies are automatically deleted after a specified period of time, which may differ depending on the cookie. You can delete these cookies at any time in your web browser settings.

3. The processing of personal data through the above cookies serves to make our PWA offering more user-friendly and effective for you overall. Some functions of our PWA cannot be offered without the use of these cookies (e.g. location query for filter function). In particular, some functions of our PWA require that your web browser can still be identified after a page change. We use cookies to be able to identify you for subsequent visits. The data processed through cookies, which is necessary to provide the functions of our PWA, is not used to create user profiles. If cookies are used for analysis purposes, they serve to improve the quality and user-friendliness of our PWA; to improve their content and functions. They allow us to understand how the PWA is used and which functions are used and how often. This enables us to continuously optimize our offering.

4. Unless cookies are absolutely technically necessary, we will only use them with your previously declared consent, which you can also revoke. The legal basis for this is Article 6 Paragraph 1 Letter a) GDPR.

5. The above cookies are stored on your device and transmitted from it to our server. You can therefore configure the processing of data and information using cookies yourself. You can make appropriate configurations in your web browser settings, which will allow you, for example, to reject third-party cookies or cookies altogether. In this context, we would like to point out that you may then not be able to properly use all of the functions of our PWA. We also recommend regularly manually deleting cookies and your browser history in your web browser settings.

6. Your consent to the cookies mentioned below applies to the domain Willkommen.rostock.de.

7. Necessary cookies: Necessary cookies are used to make the PWA usable by enabling basic functions (e.g. page navigation). The PWA cannot perform its functions without these cookies.

Name: EXPERIENCENAME_Lng
Content: Longitude (from Experience, or from the user if approved)
Running time: 24 hours
Type: Technical cookies

Name: EXPERIENCENAME_Lat
Content: Latitude (from Experience, or from user if released)
Running time: 24 hours
Type: Technical cookies

Name: _et4frontend_session
Content: sessionid pages
Running time: browser session
Type: Technical cookies

Name: ASP.NET SessionID
Content: sessionid meta
Running time: browser session
Type: Technical cookies

Name: cookieConsent
Content: Storage of cookies (based on user selection); If "true" 3rd party cookies are allowed and stored. Duration: Unlimited
Type: User setting

8. 3rd party cookies: 3rd party cookies are used to make the PWA more user-friendly (e.g. data collection for statistics and marketing).

Name: __cfduid
Contents: Cloudflare ID
Duration: 1 month
Type: Technical cookies

Name: _ga
Content: GoogleAnalytics ID (based on user consent)
Duration: 2 years
Type: Analysis cookies

Name: _gid
Content: GoogleAnalytics ID (based on user consent)
Duration: 1 day
Type: Analysis cookies

9. When you are redirected to our website www.rostock.de, additional cookies are used. The website's privacy policy, including a list of cookies, can be found here.

Further functions and offers of our PWA

1. In addition to the informational use of our PWA as described above, we offer various services that you can use if you are interested. For this purpose, it may be necessary to provide additional personal data. We need this data to provide the respective service. The above data processing principles apply.

2. To process this data, we sometimes use external service providers who have been carefully selected and commissioned by us. These service providers are bound to our instructions and are regularly checked by us. If personal data is passed on to third parties as part of services that we offer together with partners, you can find further information in the following descriptions of the individual services. If these third parties are based in a country outside the European Economic Area, you can find more detailed information about the consequences of this circumstance in the following descriptions of the individual services.

Contact

1. If you contact us by email, the personal data you provide will be stored.

2. If you contact us using the form, the data you enter in the input mask will be transmitted to us and stored: salutation, last name, first name, email address, if applicable, address, interests, location and duration.

3. The data will only be used and processed to answer your request. Unless explicitly stated in this data protection declaration, the data will not be passed on to third parties. We also record your IP address and the time of sending.

4. The processing of further personal data that arises through the use of the contact form integrated in our PWA serves to prevent misuse and to ensure the security of our information technology systems.

5. This also lies in our legitimate interest in processing your personal data. If you have given us your consent for this, the legal basis for the processing of this data is Art. 6 Para. 1 lit a) GDPR. Furthermore, the legal basis for the processing of this data is Art. 6 Para. 1 lit. f) GDPR, especially in the event that you send us the data by sending an email. If you want to use your email to conclude a contract, Art. 6 Para. 1 lit b) GDPR represents an additional legal basis.

6. We process and store your personal data on the server of an external provider in the European Union. This ensures that the standards and regulations of European data protection law are adhered to.

Accommodations

1.We collect and process personal data of our customers via the booking mask under the subdomain buchen.rostock.de in order to enable them to select and book selected accommodations. This also includes payment and confirmation of the booking process. If it is necessary for the execution of a booking, we use service providers, in particular for eCommerce and the corresponding digital dispatch of any booking documents (Destination Solution). For the processing of payment transactions, the service provider uses payment service providers. The required information is marked as such in the context of the booking or comparable purchase process and includes the information required for delivery, provision and invoicing, as well as contact information in order to be able to hold any consultations.

• Types of data processed: In addition to the accommodation master data for the individual booking (name, street, postcode, city, country, e-mail, telephone number, fax, website, landlord picture) and the respective intermediary agency (name, e-mail, telephone number), we collect and process personal data of the booking customer (name, street, zip code, country, e-mail, telephone number, credit card details). The customer's personal data is transmitted to the underlying booking system (Destination Solution).
• Purpose of the processing: Processing of the booking option; Provision of contractual services and customer service
• Legal basis: Performance of contract and pre-contractual information (Art. 6 para. 1 b sentence 1 lit. b GDPR); Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR); Legal obligation (Art. 6 para. 1 sentence lit. c. GDPR)

2. To use Destination Solution's online booking system:

• Service provider: DS Destination Solution GmbH - HRS Group
• Website: https://www.ds-destinationsolutions.com
• Privacy Policy: https://www.ds-destinationssolutions.com/datenschutz

3. For further details on the processing of personal data via the Destination Solution booking platform, please refer to the privacy policy of the service provider: https://www.ds-destinationssolutions.com/datenschutz

4. Destination Solution, as an external service provider for the processing of accommodation bookings from our site, uses different payment providers. The data processed by the payment providers includes inventory data, such as name, address, bank details, account numbers, credit card numbers, passwords, TANs and check digits, as well as contract, sum and recipient-related information. The information is required to carry out the transaction requested by the user. The data entered is only processed by and stored by the payment providers, i.e. we do not receive any account or credit card-related information, but only information confirming or negative information about the payment. Under certain circumstances, the data may be transmitted by the payment service providers to credit agencies. The purpose of this transfer is to check identity and creditworthiness. For this purpose, we refer to the data protection information of the service provider Destination Solution under https://www.ds-destinationssolutions.com/datenschutz as well as to the individual payment providers listed there.

5. The general terms and conditions and the data protection information of the respective payment service providers, which can be accessed within the respective websites or transaction applications, apply to the payment transactions. We also refer to them for the purpose of further information and assertion of rights of revocation, information and other data subjects.

6. If you would like to receive information about the personal data collected from you in the case of an accommodation booking via Destination Solution, object to its use or request deletion, you can do so under https://gdpr.hrs.com/.

Event offers

1. We process personal data of our customers to enable them to select and order selected services, such as purchasing event tickets. This also includes their payment and delivery.

2. If it is necessary to execute an order, we use service providers, in particular for e-commerce, postal, forwarding and shipping companies, to carry out the delivery/delivery to our customers.

3. We use the services of banks and payment service providers to process payment transactions. The required information is marked as such as part of the ordering or comparable purchase process and includes the information required for delivery or provision and billing as well as contact information in order to be able to hold any consultations if necessary.

4. The following data is collected and processed as part of the purchase of event tickets: Inventory data (e.g. last name, first name, address); Payment details (e.g. bank details); Contact details (e.g. email address, telephone); Contract data (e.g. subject matter, term, customer category); Usage data (e.g. page visits, access times); Metadata (e.g. IP address, device information).

5. The purpose of the processing arises from the provision of contractual services and customer service; Communicate, manage and respond to inquiries; Conversion measurement (measuring the effectiveness of marketing measures). The legal basis for this is the processing of pre-contractual inquiries as well as the fulfillment of the contract in accordance with Art. 6 Para. 1 S. lit. b) GDPR as well as legitimate interest in accordance with Art. 6 Para . 1 S 1 lit c) GDPR.

6. To provide the selection and booking of tourist services such as booking city tours, we use the booking platform bookingkit GmbH, Sonnenallee 223, 12059 Berlin, Germany. Website: https://bookingkit.com/de/ Data protection declaration: https://bookingkit.com/de/datenschutzerklaerung/

7. To maintain the confidentiality of your personal data, we have entered into an order processing agreement with the company.

8. For further details on the processing of your personal data via the bookingkit booking platform, we refer to our separate data protection notice on our event offers.

9. If a booking is made for these tourist services, the payment service providers collect and process your data, such as last name, first name, account number, verification numbers. This information is required to complete the transaction. The data entered will be processed and stored exclusively by the respective payment provider. We do not receive any account or credit card-related information, only the positive or negative information about your payment. When booking these tourist services, the terms and conditions and data protection notices of the respective payment service providers apply, which can be accessed on the respective website or application. We also refer to these for further information and to assert rights of revocation, information and other rights of those affected.

• Mangopay payment processing services; Service provider: MANGOPAY SA, 10 boulevard Royal, L-2449 Luxembourg; Website: www.mangopay.com; Data protection declaration: https://www.mangopay.com/de/privacy/
• Giropay payment processing services; Service provider: PAYDIREKT GMBH, Stephanstr. 14-16, 60313 Frankfurt am Main; Website: https://www.giropay.de; Data protection declaration: https://www.giropay.de/rechts/datenschutzerklaerung
• Sofortüberweisung payment processing services; Service provider: Sofort GmbH, a Klarna Group company, Theresienhöhe 12, 80339 Munich; Website: //www.klarna.com/sofort/; Data protection declaration: https://www.sofort.com/payment/wizard/getCmsContent/data_protection/DE/0/de
• VISA: payment processing services (credit card providers); Service provider: Visa Europe Management Services Limited, German Branch - Neue Mainzer Straße 66-68, 60311 Frankfurt; Website: https://www.visa.de; Data protection declaration: https://www.visa.de/legal/privacy-policy.html
• MASTERCARD: payment processing services (credit card providers); Service provider: Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo Belgium; Website: https://www.mastercard.de; Data protection declaration: https://www.mastercard.de/de-de/datenschutz.html

Newsletter dispatch

1. You have the option of registering for our newsletter (“Fanmail”) via our PWA. For this purpose, we collect your email address and your consent that you agree to receive our newsletter. After registering for our newsletter, we will send you a confirmation email to the email address you provided (double opt-in procedure).

2. By subscribing to our newsletter, you agree to receive information about our tourism services from us in the sense of direct marketing in accordance with Article 6, Paragraph 1, Sentence a) and f).

3. In order to be able to provide you with targeted information about our tourism services, we also collect and process your information on areas of interest and usage profile such as opening and click rates on a voluntary basis.

4. As our customer, as part of the processing of your booking, you will receive so-called transaction emails about the booked product or service to the email address you provided.

5. Even after your stay has ended, you will continue to receive regular product recommendations from us by email. You will receive these product recommendations as our existing customer. The legal basis for this is Section 7 Paragraph 3 UWG and Art. 6 lit f) GDPR.

6. To create and send our newsletter we use the content management system (CRM) from NumBirds GmbH, Gottfried-Hagen-Str. 22, 51105 Cologne, Germany. Website: https://numbirds.com Data protection declaration: https://numbirds.com/datenschutzerklaerung/

7. To maintain the confidentiality of your personal data, we have entered into an order processing agreement with the company.

8. We hereby expressly point out your right of withdrawal. You can object to receiving our newsletter at any time by sending an email to tzrw-widerruf@rostock.de or by clicking on the unsubscribe button, which is located at the bottom of every newsletter we send.

Revocation

1. If your personal data is collected and processed on the basis of legitimate interest in accordance with Article 6, Paragraph 1, Letter f) of the GDPR, you generally have the right to object to the processing of your personal data in accordance with Article 21 of the GDPR.

2. If you would like to exercise your right to object, simply send an email to tzrw-widerruf@rostock.de

You can find our further data protection declaration on our website www.rostock.de under data protection declaration.