EN
DE

Data privacy

In this data protection declaration, we will inform you about which data we process when you visit our website, for what purpose and to what extent, and we will give you an overview of the rights to which you are entitled.


1. Controller

Personenschifffahrt Gebr. Kolb oHG
Brunnenstr. 4
56820 Briedern
GERMANY
Telephone: +49 2673-1515
Telefax: +49 2673-1510
email: zentrale@moselrundfahrten.de


2. Processing operations, purposes, duration, and legal basis of data processing

2.1 Web server log files

When you visit our website, the following data is collected and stored in log files:

  • Browser type and version
  • Operating system used
  • Websites from which the user's system accesses the website
  • Date and time of access
  • IP address in anonymized form

The purpose of the processing is, in addition to statistical evaluation for the purpose of optimizing the website, to ensure security and stability, as well as to ensure the establishment of a connection and the functionality of the website.


The legal basis for the data processing is our legitimate interest in the error-free and secure operation of our website (point (f) of Article 6(1) of the GDPR).


The data is stored for a period of 8 weeks. Due to the anonymization of the IP address, it is not possible to assign the accessing client.


The data will not be passed on to third parties or transferred to a third country.


2.2 Contact Support

When you contact us by email or telephone, we store the data you provide.


Alternatively, you can use the contact form available on our website to contact us electronically. If you contact us using the contact form, the following data entered in the input mask will be transmitted to us and stored:

  • Name (mandatory)
  • email address (mandatory)
  • Message (mandatory)

The processing of personal data transmitted via contact form, email, or telephone is used to enable us to contact you quickly and thus to process your request promptly. Our legitimate interest thus consists in the performance of the communication necessary for our business operations. The legal basis is point (f) of Article 6(1) of the GDPR.


The data will be erased when the processing of the respective request has ended. Processing is ended when it can be determined that the matter in question has been resolved conclusively, provided no legal obligations to preserve records prevent the process ending.


If your contact is aimed at concluding a contract, the legal basis for the processing is point (b) of Article 6(1) of the GDPR. If your request leads to the conclusion of a contract, your data will be stored until the contract has been processed. In this case, we will delete your data immediately, provided that we are not legally obliged to preserve records and/or we have to store certain data for accounting or billing reasons. We will then only use this data for these purposes and only store it for the legally prescribed period. After that, it will also be erased.


The data will not be passed on to third parties or transferred to a third country.


2.3 Cookies

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. Cookies contain a characteristic string of characters that enables the browser to be clearly identified when the website is accessed again.


The following cookies are used on our website:
CAMS2ID

CAMS2ID is a session cookie. This session cookie is only stored for the duration of your use of our website. After each session has ended, the session cookie is deleted. The session cookie is not used for any other purpose


Most browsers are set to accept cookies automatically. You can object to the generation of cookies by deactivating cookies in your browser's system settings. However, please note that if you deactivate cookies, you may no longer be able to use all the functions of the website to their full extent.


3. Google Web Fonts

Our website downloads fonts, known as web fonts, from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“) nachgeladen. Google Ireland Limited is a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.


However, no data is transferred to Google because Google fonts are stored locally.


4. Matomo Analytics

We use the web analysis service Matomo for this website to tailor our internet presence to user needs. To record and analyze the use of the website, usage information is transmitted to the server of our hosting provider and stored for analysis purposes. Your IP address is completely anonymized during this process. We use Matomo without the use of tracking cookies.


The legal basis for the use of Matomo is point (f) of Article 6(1) of the GDPR. Our legitimate interest lies in improving the user-friendliness of our website. The anonymization of the IP address sufficiently takes into account the interest of users in the protection of their personal data.


 

5. External Hosting

This website is hosted by an external service provider (IONOS). Personal data collected on this website is stored on the host's servers. This may include, but is not limited to, IP addresses, contact requests, metadata and communications, contact information, names, web page access, and other data generated through a web page.


The legal basis for hosting with an external service provider is our legitimate interest in a secure and professional provision of our website on the internet (point (f) of Article 6(1) of the GDPR).


Our hoster will only process your data to the extent necessary to fulfill its performance obligations and will follow our instructions regarding this data. In order to ensure that the processing complies with data protection regulations, we have concluded a Commissioned Data Processing Contract (Article 28(3) of the GDPR) with our hoster.


6. Presentation of Search Results, Booking of Trips, and Payment Processing

We use the Ticket Regional system from click around GmbH, Konstantinstr. 10, 54290 Trier, to search for and book trips and for payment processing. For this purpose, we will redirect you to the www.ticket-regional.de website of click around GmbH. In this respect, our website contains a link (“external links”) to the www.ticket-regional.de website of click around GmbH for displaying search results and booking trips. Further information on the “external links” can be found in section 10 of this data protection declaration.


The following personal data is processed by click around GmbH on our behalf when we book trips:

  • Names (first name and surname)
  • Street address
  • email address
  • Payment method

You can also voluntarily provide the following additional information:

  • Form of address
  • Titel
  • Company
  • House number
  • Telephone

The purpose of processing personal data is to process the bookings and fulfill the contract. The legal basis for the processing of personal data described here is point (b) of Article 6(1) of the GDPR.


As our service provider, click around GmbH offers you different payment providers to process your payment. Depending on the selected payment method, click around GmbH transmits data to the respective payment provider. The payment provider processes the data transmitted to it and, if necessary, collects data on its own responsibility. In this respect, the data protection regulations of the respective payment provider apply.


The use of the payment providers and the transmission of data to the selected payment provider is based on point (b) of Article 6(1) of the GDPR (contract processing).


The following payment providers are available:

  • Giropay: Provider for this service is paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main (Germany). Detailed information on data protection at Giropay is available at the following link: https://www.giropay.de/rechtliches/datenschutzerklaerung
  • Klarna: Provider is Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm (Sweden). In Germany you can contact Sofort GmbH, Theresienhöhe 12, 80339 München (Germany). Detailed information on data protection at Klarna is available at the following link: https://www.klarna.com/uk/privacy
  • Credit Card: We offer you the possibility of paying for your order by credit card. Payment is processed via the providor "Computop". Computop is PCI-DSS certified and is operated by Computop Paygate GmbH, Schwarzenbergstr. 4, 96050 Bamberg (Germany). Detailed information on data protection at Computop is available at the following link: https://computop.com/de/datenschutz
  • Mollie: We also offer you the possibility of paying for your order by selecting the payment method iDEAL, Bancontact, and Belfius. To process your payment via these services, we use the payment service "Mollie". Mollie is a PCI-DSS, level 1 certified payment service and is operated by Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam (Netherlands). Detailed information on data protection at Mollie is available at the following link: https://www.mollie.com/privacy
  • PayPal: Provider for this service is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg (Luxembourg). Detailed information on data protection at PayPal is available at the following link: https://www.paypal.com/webapps/mpp/ua/privacy-full

In order to ensure that click around GmbH processes data in a manner that complies with data protection regulations when booking trips and processing payments, we have concluded a Commissioned Data Processing Contract (Article 28(3) of the GDPR) with click around GmbH.


Otherwise, your data will only be forwarded to third parties if this is necessary for the performance of the contract (legal basis is point (b) of Article 6(1) of the GDPR). This applies in particular to the following service providers:

  • Shipping providers

We will only process your data for as long as is necessary for the performance of the contract, whereby we must observe the deadlines under tax and commercial law. We are then obliged to keep certain documents for up to 10 years. The legal basis for this is point (c) of Article 6(1) of the GDPR.


7. Newsletter

On our website, users are given the opportunity to subscribe to our company newsletter, which provides information about our company's offers at regular intervals.


If you wish to subscribe to our newsletter, you must provide us with the email address at which you wish to receive the newsletter.


The newsletter will only be sent with your explicit consent. After entering your email address, you will receive a confirmation email at the email address provided. The newsletter will only be sent after you have expressly confirmed this by clicking on a link provided in the confirmation email (so-called double opt-in).


The purpose of the processing is to deliver the newsletter. The legal basis for the processing of the data is point (a) of Article 6(1) of the GDPR.


Your email address will be stored until you unsubscribe from the newsletter.


You have the right to withdraw your consent for the future at any time and to unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message.


8. CleverReach

This website uses CleverReach for sending newsletters. The provider of this service is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede (Germany), to which we pass on the data you provided when registering for the newsletter. This transfer takes place in accordance with point (f) of Article 6(1) of the GDPR and serves our legitimate interest in using an effective, secure and user-friendly newsletter system.


Furthermore, CleverReach analyzes the behavior of newsletter recipients by measuring the opening and click rates of newsletters (newsletter tracking). This is used to analyze how many recipients have opened the newsletter and how often which link in the newsletter has been clicked. The data is collected exclusively in pseudonymized form and is not linked to other user data. A direct assignment to a recipient is therefore not made.


The newsletter tracking is based on your consent (point (a) of Article 6(1) of the GDPR). You can withdraw this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the withdrawal.


If you do not want CleverReach to analyze your newsletter, you have to unsubscribe from the newsletter. We provide a link for you to do this in every newsletter message.


In order to ensure that the processing complies with data protection regulations, we have concluded a Commissioned Data Processing Contract (Article 28(3) of the GDPR) with CleverReach.


9. Social Plugins for the Social Networks Facebook and Instagram

This website uses plugins from the social networks Facebook and Instagram on the “News” subpage. The service provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2 (Ireland). According to Meta, the data collected is also transferred to the USA and other third countries.


The plugins establish a direct connection between your browser and the Facebook or Instagram server. Facebook and Instagram receive the information that you have visited our site with your IP address. If you are logged into Facebook or Instagram at the same time, a connection is established between the page plugin and your Facebook or Instagram account.


We base the use of the aforementioned social plugins on point (a) of Article 6(1) of the GDPR. By activating the corresponding link, you give us your consent to process the data.


10. External Links to Other Websites

The website contains so-called “external links” (links) to other websites.


If you use these external links, please note that this data protection declaration does not apply to these links. We have no influence on the compliance of the providers of the linked pages with data protection. Therefore, please inform yourself about the data protection declarations provided on the websites of the other providers.


11. Your Rights

a) You have the following rights with respect to us regarding your personal data:

  • Right of access,
  • Right to rectification or erasure,
  • Right to restriction of processing,
  • Right to data portability.

Moreover, you have the right to lodge a complaint with a data protection supervisory authority concerning our processing of your personal data.


b) Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your declaration of consent under the data protection law - if such a declaration was given - at any time with effect for the future. Withdrawing the consent does not affect the legality of the processing carried out based on the consent up to the time of the withdrawal.


If you wish to claim your right to withdrawal, an email to zentrale@moselrundfahrten.de is sufficient.


c) Right to object according to Art. 21 of the GDPR

Provided your personal date was processed based on legitimate interests according to point (f) of Article 6(1) of the GDPR, you have the right, according to Art. 21 of the GDPR, to lodge an objection to the processing of your personal data with effect for the future, if reasons exist resulting from your special situation or if the objection is directed against direct advertising. In the latter case, you have a general right to object, which we will implement without specifying a particular situation.


If you wish to claim your right to withdrawal, an email to zentrale@moselrundfahrten.de is sufficient.


12. Automated Decision-making and Profiling

According to Art. 22(1 & 4) of the GDPR, automated decision-making, including profiling, does not take place.