With this privacy policy, we inform you about the scope of the processing of your personal data (hereinafter referred to as “data”).
The controller responsible for data processing in accordance with the provisions of the General Data Protection Regulation (GDPR) is:
mainzplus GmbH
Rheinstr. 66
55116 Mainz
Phone: +49 6131 242 0
Web: www.mainzplus.com
Email: datenschutz(at)mainzplus.com
You can contact our Data Protection Officer at datenschutz(at)mainzplus.com.
As part of our business and website operations, we process data.
This also includes disclosure by transmission to third parties and, where applicable, to so-called third countries outside the European Union (“EU”) and the European Economic Area (“EEA”). Where we transfer data outside the EU or the EEA, this is indicated accordingly below.
The specific data concerned, purposes of processing, legal bases, recipients and, where applicable, transfers to third countries are listed below:
We log your visit to our website. In doing so, we process:
The legal basis for data processing is, pursuant to Art. 6(1)(f) GDPR, our overriding legitimate interest in the continuous provision and security of our website.
The log file is deleted after seven days unless it is required to prove or clarify specific legal violations that became known within the retention period.
To provide our app, we use services from web hosting providers, which process the above-mentioned data and all data to be processed in connection with the operation of this app on our behalf.
The legal basis for data processing is, pursuant to Art. 6(1)(f) GDPR, our overriding legitimate interest in providing our website.
If you contact us, we process the following data from you for the purpose of handling and processing your enquiry: name, contact details — if provided by you — and your message.
The legal basis for data processing is our obligation to perform a contract and/or to fulfil our pre-contractual obligations pursuant to Art. 6(1)(b) GDPR and/or our overriding legitimate interest in processing your enquiry pursuant to Art. 6(1)(f) GDPR.
We use so-called cookies on our website. Cookies are small text files that are stored on your respective end device (PC, smartphone, tablet, etc.) and saved by your browser.
Information about the specific cookies we use, their providers and purposes can be found in our consent banner. There, you can give your consent to the respective services, withdraw it or subsequently adjust your settings using the button at the bottom right of each page.
In order to document your selection regarding certain data processing operations and to fulfil our data protection obligations, we use a consent banner. When you access our website, your cookie preferences are requested via a banner. We then set a cookie in which data relating to consent given or withdrawn is stored. The data processing is carried out to fulfil our legal obligations pursuant to Art. 6(1)(c) GDPR.
As part of our accommodation offering, we process your data for the initiation (reservation) and performance (booking) of the future or existing contractual relationship between you and us. We require the following data for your booking or reservation: first and last name of all travellers; address of the person making the booking or reservation; email address; credit card details and/or bank details. Reservation enquiries and bookings can be made via our website.
The legal basis for data processing is, pursuant to Art. 6(1)(b) GDPR, the fulfilment of our contractual obligations and, in individual cases, the fulfilment of our legal obligations pursuant to Art. 6(1)(c) GDPR.
We transmit your payment data (name, date of booking, payment method, amount and payment recipient, where applicable bank details or credit card details) to the payment service provider commissioned with processing the payment.
In the case of an online booking via our website, you will be redirected to the booking page of our external booking platform operator Deskline. Deskline is a product of Feratel Schweiz AG, Riedstr. 1, 6346 Rotkreuz, Switzerland. For data transfers to Switzerland, an adequacy decision by the EU Commission exists. Rheinland-Pfalz Touristik GmbH provides IT support for Deskline on our behalf.
As part of the acquisition, connection and data maintenance of hosts of private holiday apartments, we process the data with OBS OnlineBuchungService GmbH as joint controllers pursuant to Art. 26 GDPR.
We use various services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”) on our website. In this context, data may also be transferred to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google is certified under the EU-US Data Privacy Framework and is subject to the EU adequacy decision for the USA.
Google Analytics
We use the Google Analytics tracking tool from Google on our website. We use Google Analytics to evaluate your use of the website, compile reports on activities within this online offering and provide further services related to website usage, thereby improving user-friendliness.
When Google Analytics is used, interactions by website visitors are primarily recorded and systematically evaluated using cookies.
We use Google Analytics with the “anonymizeIp()” extension. This means that IP addresses are shortened within the member states of the EU or EEA. If data is transferred to Google servers in the USA, the full IP address is transmitted and shortened there only in exceptional cases. Direct personal identification is therefore generally excluded. In particular, it is no longer possible to assign the data to the computer or end device accessed by the website visitor.
The following data is processed through the use of Google Analytics:
Google Tag Manager
To manage and bundle our Google services and third-party providers on an online presence, we use Google Tag Manager. Tags are small code elements on an online presence that are used, among other things, to measure visitor numbers and behaviour, record the impact of online advertising and social channels, use remarketing and audience targeting, and test and optimise online presences.
Legal basis and withdrawal
The use of cookies or comparable technologies set by Google takes place with your consent on the basis of Section 25(1) sentence 1 TTDSG. The legal basis for data processing in connection with the aforementioned Google services is your prior consent pursuant to Art. 6(1)(a) GDPR.
You can withdraw your consent at any time with effect for the future by adjusting your preferences in our consent banner.
We use a so-called tracking pixel from Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of Meta Platforms Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, on our website. We use Meta Pixel to track the success of our own advertising campaigns on Meta platforms and to optimise the delivery of Meta advertising campaigns to interested target groups.
After clicking on a Meta advertisement or when visiting our website, a cookie is stored on your end device using the pixel on our website. The cookie processes data about whether you reached our website via a Meta advertisement and makes it possible to analyse user behaviour up to the completion of a purchase. This allows us to track the success rate of our Meta advertising campaigns. In addition, the pixel processes data showing that you have visited our website and makes it possible to tailor advertising displayed on Meta platforms to your interests.
When visiting our website, the Meta Pixel integrated into our website establishes a direct connection to Meta’s servers. The information generated by the cookie about your use of this website, including your IP address, is transmitted to Meta in the USA.
The data collected is anonymous to us and does not allow us to draw any conclusions about the user. If you are registered with a Meta platform, Meta can assign the collected information to your account. Even if you do not have an account or are not logged in when visiting our website, Meta may process and store your IP address and other identifying data.
The use of the cookies or comparable technologies set takes place with your consent on the basis of Section 25(1) sentence 1 TTDSG. The legal basis for data processing is your consent pursuant to Art. 6(1)(a) GDPR.
You can withdraw your consent to data processing by Meta Pixel for our web domain at any time with effect for the future by adjusting your preferences in our consent banner.
Meta is certified under the EU-US Data Privacy Framework and is, in this respect, subject to the EU adequacy decision for the USA.
We use the Meta Conversion API tracking tool from Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of Meta Platforms Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.
This is a data interface through which we transmit data about your behaviour on our website to Meta for evaluation. This enables us to display advertisements to you that match your user behaviour on our website.
In connection with the Conversion API, we use the following data:
We transmit the data to Meta. In doing so, the data is also transmitted to Meta in the USA.
Meta is certified under the EU-US Data Privacy Framework and is, in this respect, subject to the EU adequacy decision for the USA.
The use of cookies or comparable technologies set by Meta takes place with your consent on the basis of Section 25(1) sentence 1 TTDSG. The legal basis for data processing is your consent pursuant to Art. 6(1)(a) GDPR.
You can withdraw your consent to data processing by Meta Pixel for our web domain at any time with effect for the future by adjusting your preferences in our consent banner.
We use the statistics program Matomo for the statistical analysis of visitor access to our website.
The statistical analysis is carried out using log files that have already been anonymised. A personal reference cannot be established. No cookies are used.
For the analysis, we process the following data: website accessed, number of visits, location data via our own geoIP database, time spent on the website, browser type and version, the operating system used by you, the referrer URL (the previously visited website), your anonymised IP address, as well as statistics on user actions (click, selection).
The program operates exclusively via our own web server (Server location: Germany); no data is transferred to third parties.
The data processing is carried out on the basis of our overriding interest in measuring the success of our website for the optimal marketing of our online offering pursuant to Art. 6(1)(f) GDPR.
We use dynamic content (“content”) from third parties to optimise the presentation and offering of our website. When visiting the website, a request is automatically made via an interface to the server of the respective content provider, during which certain log data (e.g. the user’s IP address) is transmitted. The dynamic content is then transmitted to our website and displayed there.
We use external content in connection with the following functionalities:
We have embedded videos from the YouTube platform of YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (“YouTube”) on our website. The controller responsible for data processing at YouTube is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”). When playing the videos, log data is transmitted to YouTube servers in the USA.
The legal basis for the processing is your prior consent pursuant to Art. 6(1)(a) GDPR.
Google is certified under the EU-US Data Privacy Framework and is subject to the EU adequacy decision for the USA.
We use the “Google Maps” map service from Google on our website to provide you with an interactive map. When displaying the map, data, including your IP address and your location, is transmitted to Google servers and stored there. The legal basis for processing is your prior consent pursuant to Art. 6(1)(a) GDPR.
The controller responsible for data processing in connection with Maps is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”). It cannot be ruled out that data may be transferred to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google is certified under the EU-US Data Privacy Framework and is therefore subject to the EU adequacy decision for the USA.
For the online booking of guided tours and experiences, we use the booking widget of the provider Regiondo GmbH, Neumarkter Str. 63, 81673 Munich (hereinafter “Regiondo”) on our website.
When the widget is loaded, a connection to Regiondo’s servers is automatically established. In this process, technical data — in particular your IP address as well as information about your browser and the device you are using — is transmitted to Regiondo. Regiondo may also use cookies or comparable technologies.
The widget is only loaded once you have given your consent in the consent banner.
The legal basis for the use of cookies or comparable technologies is your consent pursuant to Section 25(1) TTDSG. The legal basis for the subsequent data processing is your consent pursuant to Art. 6(1)(a) GDPR and — if you initiate a booking process — the performance of a contract or pre-contractual measures pursuant to Art. 6(1)(b) GDPR.
You can withdraw your consent at any time with effect for the future by adjusting your settings in our consent banner.
Further information on data protection at Regiondo can be found at: https://pro.regiondo.com/de/datenschutz/
We only store personal data for as long as is necessary for the purposes for which it is processed or until you withdraw your consent. Where statutory retention obligations apply, the storage period for certain data may be up to 10 years irrespective of the processing purposes.
Upon request, you will receive free information at any time about all personal data we have stored about you.
If you no longer agree with the storage of your personal data or if it has become inaccurate, we will arrange for the deletion or blocking of your data or make the necessary corrections upon appropriate instruction (to the extent permitted by applicable law). The same applies if we are to process data only restrictively in the future. You have a right to object, in particular in cases where your data is required for the performance of a task carried out in the public interest or where processing is based on our legitimate interest, including profiling based on these provisions. You also have such a right to object in the case of data processing for direct marketing purposes.
You may withdraw any consent you have given at any time with effect for the future. Your withdrawal does not affect the lawfulness of processing carried out up to the time of withdrawal.
If data processing is carried out on the basis of a contract, pre-contractual negotiations, consent or by automated means, you have the right to data portability. Upon request, we will provide you with your data in a common, structured and machine-readable format so that you can transmit the data to another controller if you wish.
Data for which we are not able to identify the data subject, e.g. if it has been anonymised for analysis purposes, is not covered by the above rights. Access, deletion, blocking, correction or transfer to another company may be possible with regard to this data if you provide us with additional information that allows us to identify you.
If you have any questions regarding the processing of your personal data, for information, rectification, blocking, objection or deletion of data or the wish to transfer data to another company, please contact datenschutz@mainzplus.com.
You also have the option of lodging a complaint with a supervisory authority regarding your rights as a data subject.
__
mainzplus CITYMARKETING GmbH
Rheinstr. 66
55116 Mainz
Germany
Telefon: +49 (0) 6131/242 - 0
info(at)mainzplus.com
