1. Data protection at a glance
The following notices provide a simple overview of what happens to your personal information when you visit our website. Personal information is any information by which you can be personally identified. For detailed information on the subject of data protection, please refer to our data protection declaration listed below this text.
Analysis tools and third-party tools
When you visit our website, your surfing behaviour can be statistically evaluated. This is mainly done with cookies and with so-called analysis programs. The analysis of your surfing behaviour is usually anonymous; the surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. You will find detailed information on this in the following data protection declaration.
2. General notes and mandatory information
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations and this data protection declaration.
We would like to point out that data transmission on the Internet (e.g. communication by e-mail) can have security gaps. A complete protection of data against access by third parties is not possible.
Note on the responsible party
The responsible party for data processing on this website is
Schmallenberg Sauerland Tourism GmbH
Phone: 02972 9740-0
Responsible party is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke any consent already given at any time. For this purpose, an informal notification by e-mail to us is sufficient. The legality of the data processing that took place up to the revocation remains unaffected by the revocation.
Right of appeal to the competent supervisory authority
In the event of violations of data protection law, the person concerned has a right of appeal to the competent supervisory authority. The competent supervisory authority in matters of data protection law is the State Data Protection Commissioner of the federal state in which our company is based. A list of the data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Right to data transferability
You have the right to have data, which we process automatically on the basis of your consent or in fulfilment of a contract, handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only take place to the extent that it is technically feasible.
SSL or TLS Encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If the SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Encrypted payment transactions on this website
If, after the conclusion of a contract with costs, there is an obligation to provide us with your payment data (e.g. account number for direct debit authorisation), this data is required for the processing of payments.
Payment transactions using the usual means of payment (Visa/MasterCard, direct debit) are carried out exclusively via an encrypted SSL or TLS connection. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
In the case of encrypted communication, your payment data that you transmit to us cannot be read by third parties.
Information, blocking, deletion
Within the framework of the applicable legal provisions, you have the right to obtain information free of charge at any time about your stored personal data, its origin and recipients and the purpose of the data processing and, if applicable, a right to correct, block or delete this data. For this purpose, as well as for further questions regarding personal data, you can contact us at any time at the address given in the imprint.
Objection against advertising mails
We hereby object to the use of contact data published within the scope of the imprint obligation to send advertising and information material not expressly requested. The operators of this website expressly reserve the right to take legal action in the event that unsolicited advertising information is sent, for example by spam e-mails.
3. Data protection officer
Data protection officer required by law
We have appointed a data protection officer for our company.
Schmallenberg Sauerland Tourism GmbH
Phone: 02972 9740-21
4. Data collection on our website
The Internet pages partly use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser on your next visit.
You can set your browser to inform you about the setting of cookies and to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or in general, and to activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.
Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested (e.g. shopping basket function) are stored on the basis of Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimised provision of his services. Insofar as other cookies (e.g. cookies for analysing your surfing behaviour) are stored, these are treated separately in this data protection declaration.
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and browser version
- operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
This information is not aggregated with any other data sources.
The basis for data processing is Art. 6 para. 1 letter f DSGVO, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.
If you send us enquiries via contact form, your data from the enquiry form including the contact data you entered there will be stored by us for the purpose of processing the enquiry and in case of follow-up questions. We will not pass on this data without your consent.
The processing of the data entered in the contact form is thus exclusively based on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time. For this purpose, an informal notification by e-mail to us is sufficient. The legality of the data processing operations carried out up to the time of revocation remains unaffected by the revocation.
The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to its storage or the purpose for which it was stored ceases to apply (e.g. after your request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected.
5. Social media
Facebook plugins (Like & Share button)
Our pages integrate plugins from the social network Facebook, provider Facebook Inc. 1 Hacker Way, Menlo Park, California 94025, USA. You can recognize the Facebook plugins by the Facebook logo or the "Like Button" ("Like") on our site. You can find an overview of the Facebook plugins here: https://developers.facebook.com/docs/plugins/.
If you do not want Facebook to associate your visit to our pages with your Facebook account, please log out of your Facebook account.
You can change your privacy settings on Twitter in the account settings at https://twitter.com/account/settings.
Our pages use functions of Google+. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Collection and sharing of information: You can use the Google+ button to publish information worldwide. The Google+ button allows you and others to receive personalized content from Google and our partners. Google stores both the information that you gave for a +1 content and information about the page you viewed when you clicked +1. Your +1 may be displayed as clues along with your profile name and photo in Google services, such as search results or your Google Profile, or elsewhere on websites and ads on the web.
Google records information about your +1 activity to improve Google's services to you and others. To use the Google+ button, you must have a globally visible, public Google profile, which must contain at least the name chosen for the profile. This name is used in all Google services. In some cases, this name may also replace another name that you used when sharing content through your Google Account. The identity of your Google Profile may be displayed to users who know your email address or have other identifying information about you.
Functions of the Instagram service are integrated on our pages. These functions are offered by Instagram Inc, 1601 Willow Road, Menlo Park, CA 94025, USA integrated.
If you are logged in to your Instagram account, you can link the contents of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to our sites with your account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Instagram.
On our site, we use social plugins from the social network Pinterest, which is operated by Pinterest Inc, 808 Brannan Street, San Francisco, CA 94103-490, USA ("Pinterest").
When you call up a page that contains such a plugin, your browser establishes a direct connection to the servers of Pinterest. The plugin transfers protocol data to the Pinterest server in the USA. This log data may include your IP address, the address of websites visited that also contain Pinterest functions, the type and settings of your browser, the date and time of your request, your use of Pinterest and cookies.
6. Analysis tools and advertising
This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called "cookies". These are text files which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.
The storage of Google Analytics cookies is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the analysis of user behaviour in order to optimise both his website and his advertising.
We have activated the IP anonymization function on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before it is transmitted to the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide further services to the website operator in connection with the use of the website and the Internet. The IP address transmitted by your browser within the scope of Google Analytics is not combined with other data from Google.
Objection to data collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie is set to prevent the collection of your information on future visits to this site: Disable Google Analytics.
Order data processing
We have concluded a contract with Google for commissioned data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Demographic characteristics in Google Analytics
This website uses the "demographic features" function of Google Analytics. This allows reports to be generated that contain information about the age, gender and interests of the site visitors. This data comes from interest-based advertising by Google as well as from visitor data from third parties. This data cannot be attributed to any specific person. You can disable this feature at any time by changing the ad settings in your Google Account, or generally prohibit Google Analytics from collecting your information as described in the "Opting out of data collection" section.
Google AdWords and Google Conversion Tracking
This website uses Google AdWords. AdWords is an online advertising program of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google").
In the context of Google AdWords we use the so-called conversion tracking. When you click on an ad placed by Google, a cookie is set for conversion tracking. Cookies are small text files that the web browser places on the user's computer. These cookies expire after 30 days and are not used to personally identify users. If the user visits certain pages of this website and the cookie has not expired, Google and we may recognize that the user clicked on the ad and was redirected to that page.
Each Google AdWords customer receives a different cookie. The cookies cannot be tracked through the websites of AdWords customers. The information collected through the conversion cookie is used to compile conversion statistics for AdWords customers who have opted in to conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you don't want to participate in tracking, you can opt-out of this use by slightly disabling the Google Conversion Tracking cookie on your web browser under User Preferences. You will then not be included in the conversion tracking statistics.
The storage of "conversion cookies" is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the analysis of user behaviour in order to optimise both his website and his advertising.
You can set your browser to inform you when cookies are set and to allow cookies only in individual cases, to exclude the acceptance of cookies for specific cases or in general, and to activate the automatic deletion of cookies when the browser is closed. If you deactivate cookies, the functionality of this website may be limited.
If you would like to receive the newsletter offered on the website, we need an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Further data will not be collected or only on a voluntary basis. We use these data exclusively for sending the requested information and do not pass them on to third parties.
The processing of the data entered in the newsletter registration form is based exclusively on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke your consent to the storage of the data, the e-mail address as well as its use for sending the newsletter at any time, for example by using the "unsubscribe" link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.
The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted after you cancel the newsletter. Data that has been stored by us for other purposes (e.g. e-mail addresses for the member area) remains unaffected by this.
This website uses CleverReach for sending newsletters. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach is a service with which the sending of newsletters can be organized and analyzed. The data entered by you for the purpose of newsletter subscription (e.g. e-mail address) is stored on the servers of CleverReach in Germany or Ireland.
Our newsletters sent with CleverReach allow us to analyze the behavior of the newsletter recipients. Among other things, we can analyze how many recipients opened the newsletter message and how often which link in the newsletter was clicked on. With the help of the so-called conversion tracking, it can also be analyzed whether a previously defined action (e.g. purchase of a product on our website) has taken place after clicking the link in the newsletter. Further information about data analysis by CleverReach newsletter can be found at: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/.
The data processing is based on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time by unsubscribing to the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.
If you do not want CleverReach to analyze your data, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message. Furthermore, you can also unsubscribe from the newsletter directly on the website.
The data that you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of CleverReach after you unsubscribe from the newsletter. Data that has been saved for other purposes (e.g. e-mail addresses for the member area) remain unaffected.
Conclusion of a contract for commissioned data processing
We have concluded a contract with CleverReach for commissioned data processing and fully implement the strict requirements of the German data protection authorities when using CleverReach.
8. Plugins and Tools
Our website uses plugins from the YouTube page operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
When you visit one of our sites equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited.
If you are logged in to your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used in the interest of an attractive presentation of our online offers. This represents a legitimate interest in the sense of Art. 6 para. 1 lit. f DSGVO.
Our website uses plugins from the video portal Vimeo. The provider is Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA.
When you visit one of our sites equipped with a Vimeo plugin, a connection to the Vimeo servers is established. This tells the Vimeo server which of our pages you have visited. Vimeo also obtains your IP address. This also applies if you are not logged in to Vimeo or do not have an account with Vimeo. The information collected by Vimeo is transferred to the Vimeo server in the USA.
If you are logged in to your Vimeo account, you allow Vimeo to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your Vimeo account.
Google Web Fonts
This page uses so-called web fonts, which are provided by Google, for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.
To do this, the browser you use must connect to Google's servers. This enables Google to know that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and attractive presentation of our online offers. This represents a legitimate interest in the sense of Art. 6 para. 1 lit. f DSGVO.
If your browser does not support web fonts, a standard font from your computer will be used.
This site uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use the functions of Google Maps it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.
The use of Google Maps is in the interest of an attractive presentation of our online offers and to make it easy to find the places we have indicated on the website. This represents a legitimate interest in the sense of Art. 6 para. 1 lit. f DSGVO.
We use Google reCAPTCHA from the company Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) to prevent spam.
The legal basis for this use is article 6 (1) f (lawfulness of processing), because there is a legitimate interest to protect this website from bots and spam.
reCAPTCHA is a free service that protects websites from spam and abuse. It uses advanced risk analysis techniques to keep people and bots apart. With the new API, a significant number of your valid human users will pass the reCAPTCHA challenge without having to solve a CAPTCHA. We use reCAPTCHA to secure forms.
By using reCAPTCHA, data is transmitted to Google which uses Google to determine whether the visitor is a human being or a (spam) bot. Which data is collected by Google and what this data is used for, you can read on https://policies.google.com/privacy?hl=de-AT.
In order to distribute and process our offers, we use a booking system of Sauerland-Ferienservice GmbH, Poststraße 7, 57392 Schmallenberg ("TOMAS"). If you place a booking/order on our site, you agree to the storage and processing of your personal data by Sauerland-Ferienservice GmbH. Your personal data will be forwarded and processed to Sauerland-Ferienservice GmbH and my-IRS GmbH (system provider, see below). This storage and processing of the data is for the purpose of supporting and processing your booking order. You can find more information on the conditions of use, your rights, data protection and the possible commissioning of third parties for data processing by Sauerland-Ferienservice GmbH under
Data transfer when concluding a contract for an overnight accommodation booking or inquiry via the contact form in the reservation system
On our website we offer guests the possibility to book accommodation services by entering personal data or to make enquiries via a contact form in the reservation system. The personal data is entered in the corresponding mask and transmitted to us and stored. The personal data will be forwarded to us for the purpose of further processing of the booking or inquiry to the:
my.IRS GmbH, Dornierstraße 4, 82178 Puchheim
The following data is collected during the registration process:
- Gender (Mr/Woman)
- First name
- Address (street, postal code, city)
Your personal data will also be passed on to the booked or requested overnight accommodation. In doing so, the service providers are expressly prohibited from using the personal data for other purposes. The service providers are prohibited from passing on or selling your data.
With the obligatory payment of the health resort contribution/health resort tax, you as a guest in the Schmallenberger Sauerland and the holiday region Eslohe will receive the Schmallenberger Sauerland Card (also called "guest card") in the form of a paper card. Your host also has the possibility to send you the guest card digitally. For this purpose, your e-mail address will be temporarily stored in the registration form system of AVS Allg. Verwaltungs- u. Service GmbH (Josephsplatz 8, 95444 Bayreuth) in addition to the data required anyway according to the registration law. To verify your e-mail address, you will receive a "double opt-in" e-mail in which you must actively agree to receive the digital guest card by clicking on a confirmation link. Only then will your e-mail address be finally stored on the servers of AVS Allg. Verwaltungs- u. Service GmbH. You will now receive another e-mail containing your personal digital guest card.
The data processing is carried out on the basis of your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time by contacting us directly. The legality of the data processing operations already carried out remains unaffected by the revocation.
Conclusion of a contract for commissioned data processing
We have concluded a contract for commissioned data processing with AVS Allg. Verwaltungs- u. Service GmbH and fully implement the strict requirements of the German data protection authorities.