Privacy policy of inspektour International GmbH
The provisions of the EU General Data Protection Regulation (hereinafter referred to as DSGVO) apply throughout Europe. We would like to inform you about the processing of personal data carried out by our company in accordance with this regulation (compare articles 13 and 14 DSGVO). If you have any questions or comments about this data protection declaration, you can send them at any time to the email address given in section 1.2 or 1.3.
Table of contants:
2.1 General information on the data processing operations
3.4 Right to erasure (“right to be forgotten”)
3.5 Right to restriction of processing
3.7 Right of revocation in the case of consent
1. Overview
In this section of the Privacy Policy you will find information on the scope of application, the data controller and its data protection officer.
1.1 Scope
On this page we inform you about the type, scope and purpose of the personal data collected by inspektour international GmbH Tourismus, which is processed both when you visit this homepage (https://www.destination-brand.com/) and during other processing under our responsibility, which is not related to this homepage.
1.2 Responsible party
The person responsible for data processing – i.e. the person who decides on the purposes and means of the processing of personal data – in connection with the processing operations is
inspektour GmbH
Osterstraße 124
D-20255 Hamburg
Telephone: +49 (0) 40 414 3887 40
E-Mail: info@inspektour.de
1.3 Data protection officer
You can contact our data protection officer using the contact details provided under
2. Data processing in detail
In this section of the data protection declaration, we inform you in detail about the processing of personal data. For better clarity, we structure this information according to specific functionalities.
2.1 General information on the data processing operations
Unless otherwise stated, the following applies to all processing operations described below:
No obligation to provide
There is neither a contractual nor a legal obligation to provide personal data. You are under no obligation to provide data.
Consequences of not providing data
In the case of required data (data that is marked as mandatory when entered), failure to provide the data will result in the relevant service not being provided. Otherwise, failure to provide the data may mean that our services cannot be provided in the same form and quality.
Transmission to government authorities
We only transfer personal data to state authorities (including law enforcement agencies) if this is necessary for the fulfilment of a legal obligation to which we are subject (legal basis: Art. 6 para. 1 c) DSGVO) or if it is necessary for the assertion, exercise or defence of legal claims (legal basis Art. 6 para. 1 f) DSGVO).
Storage period
We do not store your data for longer than we need it for the respective processing purposes. If the data is no longer required, it is regularly deleted, unless its temporary storage is still necessary. Reasons for this may be, for example, the following:
- Fulfilment of retention obligations under commercial and tax law
- Preservation of evidence for legal disputes within the framework of the statutory limitation provisions.
Categories of recipients
In addition to the categories of recipients explicitly listed below, personal data is also transferred to the following categories of recipients: Shipping service providers, telephone and fax providers.
Categories of data
- Account data: Login/user ID and password
- Personal master data: Title, salutation/gender, first name, last name, date of birth
- Address data: street, house number, if applicable address additions, postcode, city, country
- Contact data: Telephone number(s), fax number(s), e-mail address(es).
- Registration data: Information about the service through which you have registered; timing and technical information about registration, confirmation and deregistration; data provided by you when registering.
- Order data: Products ordered, prices, payment and delivery information.
- Payment data: Account data, credit card data, data on other payment services such as Paypal
- Access data: Date and time of the visit to our service; the page from which the accessing system accessed our site; pages called up during use; data for session identification (session ID); also the following information of the accessing computer system: Internet protocol address (IP address) used, browser type and version, device type, operating system and similar technical information.
- Application data: Curriculum vitae, references, proofs, work samples, certificates, pictures.
- Data according to Art. 9 DSGVO: Data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, genetic data, biometric data uniquely identifying a natural person, health data or data concerning a natural person’s sex life or sexual orientation.
2.2 Accessing the website
This describes how we process your personal data when you access the website.
Information on processing |
||||
| data category | Purpose | Legal basis | Legitimate interest, if applicable | Storage period |
| Access data | Establishing connections, displaying the contents of the service, detecting attacks on our site based on unusual activity, diagnosing errors. | Safeguarding legitimate interests (Art. 6 para. 1f DSGVO) | Proper functioning of services, security of data and business processes, prevention of misuse, prevention of damage due to interference with information systems | permanent |
Recipients of the personal data |
|||
| Recipient category | Data concerned | Legal basis of the transfer | Legitimate interest, if applicable |
| Map service | Access data | Consent (Art. 6 para. 1a DSGVO) | Display of additional information for comfortable use of the website |
| Webfonts | Access data | Consent (Art. 6 para. 1a DSGVO) | Optimised presentation of the website |
| Video services | Access data | Consent (Art. 6 para. 1a DSGVO) | Display of additional information for comfortable use of the website |
| Hosting service provider | Access data | Order processing (Art. 28 DSGVO) | |
Content providers that transfer data to third countries |
||||
| Name of the service | How it works | Data categories | If applicable, adequacy decision (Art. 45 GDPR) | Where applicable, appropriate safeguards, (Art. 46 GDPR) |
A transfer of personal data to recipients in third countries does not take place in this processing and is also not planned.
Tracking to analyse and optimise our services and their use as well as to measure the success of advertising campaigns and optimise the display of advertisements
Below we describe how your personal data is processed using tracking technologies to analyse and optimise our services and for advertising purposes.
The description of the tracking methods also includes information on how you can prevent or object to the data processing. Please note that the so-called “opt-out”, i.e. the refusal of processing, is usually stored via cookies. If you use our services via a new terminal device or in a different browser, or if you have deleted the cookies set by your browser, you will have to declare your rejection again.
The tracking methods described only process personal data in pseudonymous form. A connection with a concrete, identified natural person, i.e. a combination of the data with information about the bearer of the pseudonym, does not take place.
Purposes of the processing
The analysis of user behaviour by means of tracking helps us to check the effectiveness of our services, to optimise them and adapt them to the needs of the users as well as to correct errors.
Tracking to measure the success of advertising campaigns helps us to optimise our ads for the future.
Legal basis of the processing
Consent in accordance with Art. 6 para. 1 lit. a DSGVO.
The tracking methods used in detail
| Name of the service | Functionality | Possibility to prevent processing (opt-out) | Data transfer to third country? | If applicable, adequacy decision (Art. 45 GDPR) | Where applicable, appropriate safeguards, (Art. 46 GDPR) |
| Google Analytics | Web analysis service | About the cookie and privacy settings | Yes – USA | No | EU-U.S. Privacy Shield |
2.3 Newsletter
What happens to your personal data in connection with a subscription to our newsletter is described here:
Information on processing |
||||
| Data category | Purpose | Legal basis | Legitimate interest, if applicable | Storage period |
| E-Mail-address | Verification of registration Double opt-in procedure, newsletter delivery | Consent (Art. 6 para. 1a DSGVO) | Duration of the newsletter subscription | |
| Personal master data | Personalisation of the newsletter | Consent (Art. 6 para. 1a DSGVO) | Duration of the newsletter subscription | |
| Registration/deregistration data | Traceability of successful newsletter registration/confirmation/unsubscription | Safeguarding legitimate interests (Art. 6 para. 1f DSGVO) | Proof of successful newsletter subscription/confirmation/unsubscription | Duration of the newsletter subscription (Unsubscribe data, unlimited to meet accountability requirements) |
| Usage profile data Newsletter / Tracking | Interest-orientated design of the newsletter | Safeguarding legitimate interests (Art. 6 para. 1f DSGVO) | Improvement of our service, advertising purposes | Duration of the newsletter subscription |
Recipients of the personal data |
|||
| Recipient category | Data concerned | Legal basis of the transfer | Legitimate interest, if applicable |
| Service provider for newsletter dispatch | all data mentioned under 2.3.1 | Order processing (Art. 28 DSGVO) | |
Transfer of personal data to third countries |
A transfer of personal data to recipients in third countries does not take place in this processing and is also not planned.
2.4 Application
In an ongoing application process, we process your personal data in the following ways:
Information on processing |
||||
| Data category | Purpose | Legal basis | Legitimate interest, if applicable | Memory duration |
| Address data, contact data | Identification, contacting, communication for contract initiation | Contract (Art. 6 para. 1b DSGVO) | 6 months, possibly 3 years if consent is given | |
| Personal master data | Identification, contact, age verification | Contract (Art. 6 para. 1b DSGVO) | 6 months | |
| Application data | Applicant selection | Contract (Art. 6 para. 1b DSGVO) | 6 months | |
Recipients of personal data |
|||
| Recipient category | Data concerned | Legal basis of the transfer | Legitimate interest, if applicable |
A transfer of personal data to other bodies does not take place during this processing and is also not planned.
2.5 Kundenmeldungen
You can find out how we process your personal data when you contact us here:
Processing information |
||||
| Data category | Purpose | Legal basis | Legitimate interest, if applicable | Storage period |
| Personal master data, contact data, content of enquiries/ complaints/ concerns etc. | Processing of customer messages | Contract (Art. 6 para. 1b DSGVO), safeguarding legitimate interests (Art. 6 para. 1f DSGVO) | Customer loyalty, improving our service | 5 years after project completion |
Recipients of personal data |
|||
| Recipient category | Data concerned | Legal basis of the transfer | Legitimate interest, if applicable |
| Project/cooperation partners, authorities and communities of interest | Personal master data, contact data, content of enquiries/ complaints/ concerns etc. | Contract (Art. 6 para. 1b DSGVO), safeguarding legitimate interests (Art. 6 para. 1f DSGVO) | Improving joint action with the respective project/cooperation partners |
Transfer of personal data to third countries |
||||
| Receiver | Data categories | If applicable, adequacy decision (Art. 45 GDPR) | Where applicable, appropriate safeguards, (Art. 46 GDPR) | |
A transfer of personal data to recipients in third countries does not take place in this processing and is also not planned.
2.6 DESTINATION BRAND
You can find out how we process your personal data in the context of DESTINATION BRAND here:
Processing information |
||||
| Data categories | Purpose | Legal basis | Legitimate interest, if applicable | Storage period |
| Personal master data, contact data, lists of participants, photos, project/process content, content of the concern, complaints, etc. | Implementation and processing of DESTINATION BRAND, market research activities in the course of DESTINATION BRAND | Contract (Art. 6 para. 1b DSGVO), Consent (Art. 6 para. 1a DSGVO) | – | 10 years after project completion |
Recipients of personal data |
|||
| Recipient category | Data concerned | Legal basis of the transfer | Legitimate interest, if applicable |
| Project/cooperation partners, authorities and communities of interest | Personal master data, contact data, content of enquiries/ complaints/ concerns etc. | Contract (Art. 6 para. 1b DSGVO), safeguarding legitimate interests (Art. 6 para. 1f DSGVO) | Improving joint action with the respective project/cooperation partners |
Transfer of personal data to third countries |
|||
| Receiver | Data categories | If applicable, adequacy decision (Art. 45 GDPR) | Where applicable, appropriate safeguards, (Art. 46 GDPR) |
A transfer of personal data to recipients in third countries does not take place in this processing and is also not planned.
2.7 Data & Tools
Processing information |
||||
| Data categories | Purpose | Legal basis | Legitimate interest, if applicable | Storage period |
| Personal master data, contact data, lists of participants, photos, project/process content, content of the concern, complaints, etc. | Conducting guest, service provider/resident/employee surveys, commissioned market research activities, conducting lectures, workshops and moderations, processing studies and concepts | Contract (Art. 6 para. 1b DSGVO), Consent (Art. 6 para. 1a DSGVO) | – | 10 years after project completion |
Recipients of personal data |
|||
| Recipient category | Data concerned | Legal basis of the transfer | Legitimate interest, if applicable |
| Project/cooperation partners, authorities and communities of interest | Personal master data, contact data, content of enquiries/ complaints/ concerns etc. | Contract (Art. 6 para. 1b DSGVO), safeguarding legitimate interests (Art. 6 para. 1f DSGVO) | Improving joint action with the respective project/cooperation partners |
Transfer of personal data to third countries |
|||
| Receiver | Data categories | If applicable, adequacy decision (Art. 45 GDPR) | Where applicable, appropriate safeguards, (Art. 46 GDPR) |
A transfer of personal data to recipients in third countries does not take place in this processing and is also not planned.
2.8 Information desk
You can find out how we process your personal data within the framework of the information desk here:
Processing information |
||||
| Data category | Purpose | Legal basis | Legitimate interest, if applicable | Storage period |
| Personal master data, contact data, lists of participants, photos, project/process content, content of the concern, complaints, etc. | Processing and editing of DESTINATION BRAND results and data from source market analyses | Contract (Art. 6 para. 1b DSGVO), Consent (Art. 6 para. 1a DSGVO) | – | 10 years after project completion |
Recipients of personal data |
|||
| Recipient category | Data concerned | Legal basis of the transfer | Legitimate interest, if applicable |
| Project/cooperation partners, authorities and communities of interest | Personal master data, contact data, content of enquiries/ complaints/ concerns etc. | Contract (Art. 6 para. 1b DSGVO), safeguarding legitimate interests (Art. 6 para. 1f DSGVO) | Improving joint action with the respective project/cooperation partners |
Transfer of personal data to third countries |
|||
| Receiver | Data categories | If applicable, adequacy decision (Art. 45 GDPR) | Where applicable, appropriate safeguards, (Art. 46 GDPR) |
A transfer of personal data to recipients in third countries does not take place in this processing and is also not planned.
3. data subject rights
3.1 Right to object
You have the right to object at any time with future effect to the processing of personal data relating to you which is carried out pursuant to Article 6(1)(e) or (f) DSGVO on grounds relating to your particular situation; this also applies to profiling based on these provisions.
You can exercise the right of objection free of charge.
3.2 Right to information
You have the right to know whether personal data concerning you is being processed by us, which personal data it is, if any, as well as further information in accordance with Art. 15 DSGVO.
3.3 Right of rectification
You have the right to request that we correct any inaccurate personal data relating to you without undue delay (Art. 16 DSGVO). Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data – also by means of a supplementary declaration.
3.4 Right to erasure (“right to be forgotton”)
You have the right to demand that we delete personal data relating to you without delay, provided that one of the reasons set out in Article 17(1) of the GDPR applies and the processing is not necessary for one of the purposes regulated in Article 17(3) of the GDPR.
3.5 Right to restriction of processing
You have the right to request a restriction in the processing of your personal data if one of the conditions regulated in Art. 18(1)(a) to (d) DSGVO applies.
3.6 Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. Furthermore, you have the right to transfer this data to another controller without hindrance from us or to obtain that a direct transfer is made by us, if this is technically possible. This should always apply if the basis of the data processing is consent or a contract and the data is processed automatically. Accordingly, this does not apply to data held only in paper form.
3.7 Right of revocation in the case of consent
If the processing is based on your consent, you have the right to revoke your consent at any time. This does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
3.8 Right of complaint
You have the right to lodge a complaint with a supervisory authority.