© Nordseeküsten-Radweg/ Florian Trykowski
Data protection

Information regarding data protection

This data protection notice is intended to inform you about how we handle your personal data and about your rights under the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The Administrative District of Cuxhaven (hereinafter referred to as "we" or "us") is responsible for processing data.

I. General information

1. Contact details

Any questions or suggestions you may have regarding this information, or if you would like to contact us to exercise your rights, please send your enquiry to

 

Landkreis Cuxhaven

Vincent-Lübeck-Straße 2

27474 Cuxhaven

Tel.: 04721 660

Email: info@landkreis-cuxhaven.de

 

or

 

Cuxland-Tourismus

Kapitän-Alexander-Str. 1

27472 Cuxhaven

info@cuxland.de

 

 

2. Legal grounds

The term "personal data" under data protection law refers to all information that relates to an identified or identifiable person. We process personal data in full compliance with the pertinent data protection regulations, especially the GDPR and the BDSG. We only process data if we have legal authorisation to do so. Personal data is only processed with your consent (§ 25 para. 1 of the Telecommunications-Telemedia Data Protection Act (TTDSG) or Art. 6 para. 1 lit. a GDPR), for fulfilling a contract of which you are a party or at your request for carrying out pre-contractual measures (Art. 6 para. 1 lit. b GDPR), for fulfilling a legal obligation (Art. 6 para. 1 lit. c GDPR) or if the processing is necessary to safeguard our legitimate interests or the legitimate interests of a third party, provided that your interests or fundamental rights and freedoms, requiring the protection of personal data, do not outweigh this (Art. 6 para. 1 lit. f GDPR).

We also process personal data in full compliance with the pertinent data protection regulations of the state of Lower Saxony (especially § 3 of the Lower Saxony Data Protection Act, NDSG).

 

3. Storage duration

If nothing to the contrary is stated in the following information, we will only store the data for as long as is necessary to fulfil the purpose of processing or for the fulfilment of our contractual or legal obligations. Such statutory retention obligations may arise in particular as a result of commercial or tax law regulations. From the end of the calendar year in which the data was collected, we will store such personal data included in our accounting data for ten years and personal data contained in commercial letters and contracts for six years. The legal grounds for storage in these cases are Art. 6 para. 1 lit. c) in conjunction with § 147 para. 2 of the German Fiscal Code (AO) and § 257 para. 4 of the German Commercial Code (HGB). We will also retain data in connection with consents subject to proof as well as complaints and claims for the duration of the statutory limitation periods. Data stored for advertising purposes will be deleted if you object to processing for this purpose.

 

4. Categories of data recipients

Within the framework of processing your data, we utilise processors. The processing operations undertaken by such processors include, for example, hosting, e-mail dispatch, maintenance and support of IT systems, customer and order management, order processing, accounting and billing, marketing measures or the destruction of files and data media. A processor is a natural or legal entity, public authority, agency or other body that processes personal data on behalf of the responsible data controller. Processors do not use the data for their own purposes, but rather process the data exclusively for the controller and are contractually obliged to ensure that suitable technical and organisational data protection measures are in place. In addition, your personal data may be transferred to organisations such as postal and delivery services, banks, tax consultants/auditors or the financial authorities. Any other recipients may be specified in the following information where applicable.

 

5. Data transfer to third countries

Our data processing activities may be associated with the transfer of certain personal data to third countries, i.e. countries in which the GDPR does not apply. Such transfers are permitted if the European Commission has determined that an adequate level of data protection is required in such a third country. If the European Commission has not adopted such a decision on adequacy, personal data will only be transferred to a third country if there are suitable guarantees in place in accordance with Art. 46 GDPR or if one of the requirements of Art. 49 GDPR is met.

In the absence of any decision on adequacy and unless otherwise stated below, we apply the EU standard data protection clauses as appropriate guarantees for the transfer of personal data to third countries. It is possible for you to obtain or view a copy of these EU standard data protection clauses. To do so, please contact us at the address given under Contact. 

To the extent that you consent to the transfer of personal data to third countries, such transfer takes place on the legal grounds of Art. 49 para. 1 lit. a GDPR.

 

6. Processing when exercising your rights

In the event that you exercise your rights according to Art. 15 to 22 GDPR, we shall process the personal data transmitted for the purpose of asserting these rights and to be able to provide proof thereof. Data stored for the purpose of providing information and its preparation shall only be processed for this purpose and for the purposes of data protection monitoring and shall otherwise be restricted in accordance with Art. 18 GDPR.

This processing is based on the legal grounds of Art. 6 para. 1 lit. c GDPR in conjunction with Art. 15 to 22 GDPR and § 34 para. 2 BDSG.

 

7. Your rights

You have the right as a data subject to assert your rights as a data subject against us. You have the following rights in particular:

  • You have the right, in accordance with Art. 15 GDPR and § 34 BDSG, to request information about whether and, if so, to what extent we process personal data about you or not.
  • You have the right, in accordance with Art. 16 GDPR, to request that we rectify your data.
  • You have the right, in accordance with Art. 17 GDPR and § 35 BDSG, to request that we delete your personal data.
  • You have the right, in accordance with Art. 18 GDPR, to have the processing of your personal data restricted.
  • You have the right, in accordance with Art. 20 GDPR, to have the personal data concerning you, which you have provided to us, delivered to you in a structured, conventional and machine-readable format and to transmit this data to another controller.
  • Provided you have given us specific consent to process your data, you may revoke such consent at any time in accordance with Art. 7, para. 3 GDPR. Such a revocation has no effect on the legality of the processing that was undertaken based on the consent prior to the revocation.
  • If you are of the view that the processing of your personal data is in breach of the provisions of the GDPR, then you have the right to lodge a complaint with a supervisory authority according to Art. 77 GDPR.

 

8. Right of objection

You have the right, in accordance with Art. 21 para. 1 GDPR, to object to processing based on the legal grounds of Art. 6 para. 1 lit. e or f GDPR for reasons arising from your particular situation. To the extent that we process personal data about you for the purpose of direct marketing, this processing may be objected to pursuant to Art. 21 para. 2 and para. 3 GDPR.

 

9. Data protection officer

Our data protection officer can be reached using the following contact details:

Ulrike Michaelis (Administrative District of Cuxhaven)

Email: datenschutz@landkreis-cuxhaven.de

II. Data processing on our website

We collect information that you provide yourself when you use our website. We also automatically collect certain information about your use of the website during your visit. The IP address is also regarded as personal data under data protection law. Every device that is connected to the Internet is assigned an IP address by the Internet provider so that it can send and receive data.

 

1. Processing of server log files

When you use our website purely for information purposes, we initially store general information that your browser transmits to our server automatically (i.e. not via registration). This includes by default: browser type/version, operating system used, page accessed, the page previously visited (referrer URL), IP address, date and time of the server request and HTTP status code.

Your data is processed to safeguard our legitimate interests and is based on the legal grounds of Art. 6 para. 1 lit. f GDPR. Such processing facilitates the technical administration and security of the website. The data that is stored is deleted after seven days insofar as there is no justified suspicion of illegal use based on concrete indications and further examination and processing of the information is necessary for this reason. We are unable to identify you as a data subject based on the information stored. Art. 15 to 22 GDPR therefore are not applicable in accordance with Art. 11 para. 2 GDPR, with the exception that you provide additional information that allows you to be identified for the purpose of exercising your rights set out in these articles.

 

2. Contact possibilities and enquiries

Our website provides you with the opportunity of sending us a message using a contact form. Your data will be transferred by us in encrypted form. All data fields marked as mandatory are necessary for processing your request. If you do not provide your data, we will not be able to process your enquiry in full. Providing additional data is voluntary. You can also send us a message using the contact e-mail. We will process the data for the purpose of processing your enquiry.  The legal grounds for processing the data is Art. 6 para. 1 sentence 1 f GDPR. Such processing serves our interest in being in a position to respond to your enquiry in an appropriate manner.

 

3. Cookies

Our website makes use of cookies and similar technologies ("cookies"). These are small data records that are stored by your browser when you visit a website. They are used to identify the browser used and can be recognised by web servers. Your browser gives you full control over the use of cookies. Cookies can be deleted at any time via your browser's security settings. It is possible to object to the use of cookies through your browser settings in principle or only in certain cases.

Using cookies is to some extent technically necessary for the operation of our website and is consequently allowed without requiring the user's consent. We may also use cookies for offering special features and content as well as for analytical and marketing purposes. These may also include cookies from third-party providers (so-called third-party cookies). Such cookies that are not technically necessary are only used with your consent according to § 25 para. 1 TTDSG and, if applicable, Art. 6 para. 1 lit. a GDPR. You can find information on the purposes, providers, technologies used, data stored and the storage duration of individual cookies in the cookie settings of our consent management tool.

 

4. Consent Management Tool

This website uses the Consent Manager from ConsentManager GmbH (Germany) for the management of cookies and the processing of personal data.

You will find a list of providers and companies that place cookies on our web pages in our consent banner, as well as a list of cookies that we use and an explanation of how you can refuse certain types of cookies. External plugins, such as video services or maps, are also controlled through our consent banner. If you click the "I accept" button or save your individual cookie settings, this is deemed your consent to the use of the associated cookies. Your consent within the meaning of Art. 6 para. 1 lit. a GDPR is the legal basis under data protection law.

All further information in accordance with Art. 13 GDPR can be found in the settings of our consent banner.

The banner also assists us in providing proof of the declaration of consent. In this case, we process information about the declaration of consent and other log data relating to this declaration. We also use cookies to collect this data. It is necessary to process this data for the purpose of providing proof of consent. The legal grounds arise from our legal obligation to document your consent (Art. 6 para. 1 lit c in conjunction with Art. 7 para. 1 GDPR).

You can revoke your consent for cookies here:

https://www.nordseekuesten-radweg.de/datenschutz?cmpscreen

 

5. Google Analytics

We use the Google Analytics service provided by Google Ireland Limited (Ireland, EU) on our website.

Google Analytics is a web analytics service enabling us to collect and analyse data about user behaviour on our website. Google Analytics allows us to measure interaction data from different devices and from different sessions. By doing so, we can put individual user actions into context and analyse long-term interactions.

Google Analytics uses cookies for this purpose, enabling us to analyse the use of our website. Personal data in the form of IP addresses, device identifiers and information about interaction with our website is also processed. This data is partly information that is stored on the device you are using. Furthermore, additional information is also stored on the device you are using via the cookies used.

Google Ireland will process the data obtained in this way on our behalf in order to analyse how users make use of our website, to compile reports on the activities within our website and to render further services to us in connection with the use of our website and the use of the internet. In this context, pseudonymised user profiles can be created from the processed data.

The placement of cookies and the further processing of personal data described here is carried out subject to your consent. The legal grounds for data processing in connection with the Google Analytics service is therefore Art. 6 para. 1 lit. a GDPR. It is possible to revoke this consent at any time with effect for the future via our Consent Management Tool.

We only use Google Analytics with IP anonymisation activated. This means that the IP address of users is truncated by Google Ireland within member states of the European Union or in other countries that are party to the Agreement on the European Economic Area. The IP address transmitted by the user's browser is not amalgamated with other data. The IP address is truncated on servers in the EU.

The data concerning user actions is stored for a period of 2 months and then automatically deleted. In this case, data, the storage period of which has expired, is automatically deleted once a month.

 

6. Cloudflare

Our website uses the Cloudflare service provided by Cloudflare Inc (USA) to display content. It is necessary to process your IP address for technical reasons so that the content can be sent to your browser. As a result, your IP address is transmitted to Cloudflare. It is possible to object to this data processing at any time using the settings of the browser you are using or certain browser extensions. Please note that this may restrict the functionality of the website.

Your data is processed according to Art. 6 para. 1 lit. f GDPR and is based on our legitimate interest in optimising our website and operating it economically.

It is not possible to rule out the transfer of your data to the USA when using the service. Please refer to the information in the section "Data transfer to third countries". Further information on data protection at Cloudflare can be found in the data protection notice of Cloudflare at https://www.cloudflare.com/privacypolicy/.

III. Further data processing

1. Content by e-mail

If you send us a message using the contact e-mail provided, then we will process the data transmitted for the purpose of dealing with your enquiry. We shall process this data based on our legitimate interest in getting in touch with persons making enquiries.

Art. 6 para. 1 lit. f GDPR is the legal grounds for data processing.

 

2. Data on costumers and prospective customers

If you contact our company as a customer or prospective customer, we will process your data to the extent necessary to establish or implement the contractual relationship. This regularly includes the processing of the personal master data, contract data and payment data provided to us, as well as the contact and communication data of our contact persons for commercial customers and business partners. Art. 6 para. 1 lit. b GDPR is the legal grounds for this processing.

We will also process customer and prospective customer data for evaluation and marketing purposes. This processing is conducted on the legal grounds of Art. 6 para. 1 lit. f GDPR and is in our interest to further develop our services and provide you with targeted information about our offers.

Further data processing may be conducted if you have given your consent (Art. 6 para. 1 lit. a GDPR) or if this is necessary to fulfil a legal obligation (Art. 6 para. 1 lit. c GDPR).    

 

As of: 10/2023