Privacy policy
Your personal data and fair and transparent data processing are important to us. Below we provide you with the information you need to review and exercise your data protection rights.
1 Who is responsible for data processing?
Person responsible is:
Bahnprojekt Stuttgart-Ulm e.V.
Legally represented by the chairman of the association: Bernhard Bauer
Am Schlossplatz 15/1
70173 Stuttgart
Tel. 0711 184 217 0 or by e-mail to hallo@its-projekt.de
2 How can I contact the data protection officer?
Privacy Officer:
Bahnprojekt Stuttgart-Ulm e.V.
Am Schlossplatz 15/1
70173 Stuttgart
Email to datenschutz@its-projekt.de
3 For what purposes and on what legal basis do we process personal data?
When you browse our website, book our tours, or otherwise contact us, we receive personal information from you.
In general, we process data based on the following legal bases:
- If you give us your express consent (Art. 6 para. 1 a DSGVO), e.g. if you want us to contact you directly or if you participate in competitions.
- To fulfill our contractual obligations (Art.6 para.1 b DSGVO), e.g. if you book/visit one of our guided tours or site tours.
- As a company, we are subject to various legal obligations (Art.6 para.1 c DSGVO). For example, we are obliged to keep certain documents in accordance with tax law and commercial law.
- In addition, we process data based on a legitimate interest of us or third parties (Art. 6 para. 1 f DSGVO). This includes, among other things, data processing for purposes of direct advertising, sales promotion, IT security and fraud prevention, as well as the creation of pseudonymous usage profiles for analysis and needs-based design of the website (tracking). You have the right to object to data processing on the basis of legitimate interest pursuant to Art. 21 (1) DSGVO.
3.1 Data processing on our website
3.1.1 Collection of personal data when visiting our website
In the case of merely informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security. The legal basis for this is Art. 6 para. 1 f DSGVO. The data processing collects the following data:
IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, amount of data transferred in each case, website from which the request came, browser, operating system, and its interface, language and version of the browser software.
3.1.2 Site tours and exhibition tours
You can register directly via our website for site tours and exhibition tours. In order for us to reserve a place for you, we need your name and details of the desired date. Your shoe size is required, as safety shoes are obligatory for our tours due to the terrain. We need your e-mail address to confirm your registration and to send you further information. The specification of your telephone number is necessary to communicate short-term consultations regarding changes in the schedule. The legal basis for this is Art. 6 para. 1 lit. b DSGVO.
3.1.3 Participation in lotteries
When you participate in sweepstakes, we collect data that is necessary for the execution of the sweepstakes. This is usually an individual sweepstakes entry (e.g. a comment or a photo), as well as name and contact details. It may be that we pass on your data to our sweepstake partners, e.g. to send you the prize. The data processing and data transfer may vary depending on the sweepstakes and is therefore specifically described in the respective conditions of participation. Participation in the sweepstakes and the associated data collection is of course voluntary (legal basis is Art. 6 para. 1 lit. a DSGVO).
This website uses social plugins of the providers:
- Facebook (Operator: Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA)
- Twitter (Operator: Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA)
- Google+ (Operator: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)
These plugins usually collect data from you by default and transmit it to the servers of the respective provider. To ensure the protection of your privacy, we have taken technical measures to ensure that your data cannot be collected by the providers of the respective plugin without your consent. When you call up a page on which the plugins are integrated, they are initially deactivated. Only by clicking on the respective icon are the plugins activated and you thereby give your consent for your data to be transferred to the respective provider. The legal basis for the use of the plugins is Art. 6 para. 1 a and f DSGVO.
After activation, the plugins also collect personal data such as your IP address and send it to the servers of the respective provider, where it is stored. In addition, activated social plugins set a cookie with a unique identifier when the relevant website is called up. This also allows the providers to create profiles about your usage behavior. This happens even if you are not a member of the social network of the respective provider. If you are a member of the provider's social network and are logged into the social network during your visit to this website, your data and information about your visit to this website may be linked to your profile on the social network. We have no influence on the exact scope of the data collected from you by the respective provider. For more information about the scope, nature and purpose of data processing and about rights and settings options for protecting your privacy, please refer to the privacy policy of the respective provider of the social network. These are available at the following addresses:
- Facebook: https://www.facebook.com/policy.php
- Twitter: https://twitter.com/privacy/
- Google+: https://www.google.com/intl/de/privacy/
Videos from YouTube are embedded on the website in extended data protection mode. When you watch the video, the following data is transmitted to Google as YouTube operator:
- the IP address,
- the specific address of the page accessed on our site,
- the transmitted identifier of the browser and
- System date and time of the call and
- already existing cookies, via which your browser can be uniquely identified
Only when the video is played are cookies and pixel tags set by YouTube for the personalization of advertising and search results. No information about visitors to the website is stored by YouTube unless they watch the video.
We would like to point out that Google may receive further data via already stored cookies. To what extent these are utilized by Google is beyond our control. Google Inc. is responsible for this data collection and processing.
The website uses Google Maps API to visually display geographical information. When using Google Maps, Google also collects, processes and uses data about the use of the Maps functions by visitors to the websites. More information about the data processing by Google can be found in the Privacy policy of Google take out.
3.1.7 How are cookies used on this website?
Our website uses cookies. Cookies are small text files that are stored in the Internet browser or by the Internet browser on a user's computer system. When a user calls up a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.
Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your Internet browser, you can be notified before cookies are set and decide on their acceptance individually, as well as prevent the storage of cookies and transmission of the data they contain. Cookies that have already been stored can be deleted at any time. However, we would like to point out that you may then not be able to use all functions of this website to their full extent.
You can find out how to manage (including disabling) cookies on the main browsers by following the links below:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Technically necessary cookies
Unless otherwise stated in the privacy policy below, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.
The use of cookies or similar technologies takes place on the basis of § 25 para. 2 TTDSG. The processing of your personal data is based on Art. 6 para. 1 lit. f DSGVO from our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offer.
You have the right to object to this processing of personal data concerning you at any time on grounds relating to your particular situation.
Use of Borlabs cookie
On our website, we use the consent management tool Borlabs Cookie from the provider Borlabs - Benjamin A. Bornschein (Georg-Wilhelm-Str. 17, 21107 Hamburg; "Borlabs").
The tool allows you to give consent to data processing via the website, in particular the setting of cookies, as well as to exercise your right to withdraw consent you have already given.
Data processing serves the purpose of obtaining and documenting required consents for data processing and thus complying with legal obligations.
Cookies may be used for this purpose. Among other things, the following information may be collected: Date and time of the page view, information about the browser you are using and the device you are using, UID (randomly assigned, anonymous ID), opt-in and opt-out data. This data is not passed on to third parties.
The data processing is carried out for the fulfillment of a legal obligation on the basis of Art. 6 para. 1 lit. c DSGVO.
For more information about Borlabs' privacy practices, please visit: https://de.borlabs.io/borlabs-cookie/
For the purpose of analyzing and optimizing our websites, we use various services, which are presented below. For example, we can analyze how many users visit our site, which information is most in demand or how users find the offer. Among other things, we collect data on which website a data subject came to a website from (so-called referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. This helps us to design and improve our offers in a user-friendly way. The data collected is not used to identify individual users personally. Anonymous or at most pseudonymous data is collected. The legal basis for this is Art. 6 para. 1 f DSGVO. We understand the optimization of our website as a legitimate interest, your fundamental rights and freedoms do not outweigh our interest in this regard, as we inform you comprehensively about the data collection within the scope of our privacy policy and you have the option of an opt-out (via link or browser settings) at any time. In addition, we only use pseudonymous tracking.
We use the Google Analytics web analytics service provided by Google Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
The data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. For this purpose, Google will use the information obtained on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. In this context, the following information may be collected, among others: IP address, date and time of page view, click path, information about the browser you are using and the device you are using (device), pages visited, referrer URL (website from which you accessed our website), location data, purchase activity. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.
Google Analytics uses technologies such as cookies, web storage in the browser and tracking pixels, which enable an analysis of your use of the website. The information generated by this about your use of this website is usually transferred to a Google server in the USA and stored there. There is no adequacy decision of the EU Commission for the USA. The data transfer takes place, among other things, on the basis of standard contractual clauses as appropriate guarantees for the protection of personal data, viewable at: https://policies.google.com/privacy/frameworks and https://business.safety.google/adsprocessorterms/. Both Google and U.S. government agencies have access to your data. Your information may be linked by Google to other information, such as your search history, your personal accounts, your usage data from other devices, and any other information Google may have about you.
IP anonymization is activated on this website. This means that your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
The use of cookies or similar technologies takes place with your consent on the basis of § 25 para. 1 p. 1 TTDSG in conjunction with. Art. 6 para. 1 lit. a DSGVO. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.
You can find more information on terms of use and data protection at https://www.google.com/analytics/terms/de.html or under https://www.google.de/intl/de/policies/ as well as under https://policies.google.com/technologies/cookies?hl=de.
MyFontsCounter
We have installed the MyFontsCounter analytics service on our website, operated by MyFonts, Inc. 600 Unicorn Park Drive, Woburn, MA, 0180.
3.1.9 Use of the e-mail address for sending newsletters
We use your e-mail address exclusively for our own newsletter mailing, provided that you have expressly consented to this. The processing is based on Art. 6 para. 1 lit. a DSGVO with your consent. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation. To do so, you can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your e-mail address will then be removed from the distribution list.
3.2 Data processing for e-mail requests
When you contact us by telephone for inquiries, we record your name, your company, your request and, if necessary, contact data for a callback, if required for processing. Your data will be used to process your request. The legal basis is Art. 6 para. 1 b and f DSGVO.
3.3 Data processing during telephone inquiries
When you contact us by telephone for inquiries, we record your name, your company, your request and, if necessary, contact data for a callback, if required for processing. Your data will be used to process your request. The legal basis is Art. 6 para. 1 b and f DSGVO.
4 Will my data be transferred to third parties?
So that Bahnprojekt Stuttgart-Ulm e.V. can process your data in accordance with the purposes described above, it may be necessary for other recipients to be able to view and process your data.
4.1 External service providers (processors)
Your data will be passed on to service partners if they act on our behalf and support Bahnprojekt Stuttgart-Ulm e.V in the provision of their services. If you subscribe to our newsletter, for example, we have commissioned a service provider to send the mailing.
A processing of your personal data by contracted service providers takes place within the framework of order processing according to Art. 28 DSGVO.
4.2 Other service providers, partners and third parties
Bahnprojekt Stuttgart-Ulm e.V. may cooperate with additional partners if it is necessary for the fulfillment of our service offerings or if we are legally obligated to disclose data. These may be the following partners or third parties:
- Credit institutions and payment service providers
- Credit checks
- Call center at support
- Disclosure to public authorities or by court order
5 Is my data processed outside the EU/EEA and how is data protection ensured?
We make a point of processing your data within the EU / EEA. However, it may happen that we use service providers that operate outside the EU / EEA. In these cases, we ensure that an adequate level of data protection is established before transferring your personal data. This means that via EU standard contracts or an adequacy decision, such as the EU Privacy Shield, a level of data protection is achieved that is comparable to the standards within the EU.
6 How long will my data be stored?
We delete personal data of the data subject as soon as the purpose of storage ceases to apply and legal retention periods do not prevent deletion. For example, we have established the following deletion routines:
- Payment data: We delete your data when the payment has been processed. Information that is subject to legal retention periods is stored separately.
- Newsletter: We delete your data after you have revoked your consent. If you are an existing customer and therefore receive promotional information, we will delete your data no later than three years after your last purchase.
- Applications: We delete your data 6 months after completion of the application process.
7 What rights do I have and how can I assert them?
You have the following rights with respect to us regarding personal data concerning you:
You have the right to information, correction, deletion, restriction of processing, objection to processing and data portability. If processing is based on your consent, you have the right to revoke it with effect for the future.
7.2 Rights in data processing according to legitimate interest
Pursuant to Article 21 (1) DSGVO, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6 (1) (e) DSGVO (data processing in the public interest) or on the basis of Article 6 (1) (f) DSGVO (data processing for the purposes of safeguarding a legitimate interest); this also applies to profiling based on this provision. In the event of your objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
7.3 Rights in the case of direct advertising
If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing pursuant to Art. 21 (2) DSGVO; this also applies to profiling, insofar as it is associated with such direct marketing.
In the event of your objection to processing for the purpose of direct marketing, we will no longer process your personal data for these purposes
7.4 Right to complain to a supervisory authority
You also have the right to complain to a competent data protection supervisory authority about our processing of your personal data.
8.1.1 Changes to the privacy policy
This privacy policy will be adapted continuously in the course of further development of the Internet or our offer. We will announce any changes on this page in good time. In order to be informed about the current status of our data usage regulations, this page should be called up regularly.
Our websites may contain links to websites of other providers. We would like to point out that this data protection declaration applies exclusively to the web pages of Bahnprojekt Stuttgart-Ulm e.V.. We have no influence on and do not control that other providers comply with the applicable data protection regulations.