Welcome to our online presence

We are pleased that you are interested in our offers. The protection of your privacy and your personal data is very important to us. The collection and use of your data is therefore always in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 (DSGVO), the Federal Data Protection Act (BDSG) and the Telemedia Act (TMG). In the following, we - as the data controller - therefore inform you about what data is collected by us and how we process this data.

1. Personal data

Personal data within the meaning of the GDPR is any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal data is stored only to the extent necessary to provide the booked service, to comply with legal requirements or for the purpose stated below.
 

2. Anonymized data / log files

You can visit our website without the need to collect personal data. Whenever you visit our website, certain anonymized data is nevertheless stored, e.g. which page or which offer was called up. However, this data is not personal and is therefore not subject to the legal regulations of the DSGVO or the BDSG.

The website operator or page provider collects data about accesses to the page and stores them as "server log files". The following data is logged in this way: Visited website, time at the time of access, amount of data sent in bytes, source/reference from which you reached the page, Browser used, Operating system used, IP address used.

The collected data is only used for statistical analysis and to improve the website. However, the website operator reserves the right to subsequently check the server log files if there are concrete indications of illegal use.

Anonymous data is collected solely for statistical evaluation in order to improve our services. Please note the point "Right to information / right of withdrawal".
 

3. Purpose of the collection of personal data

However, the collection of personal data becomes indispensable if you book a stay or other service via our portal, contact us, subscribe to our newsletter or wish to use other offers on our site, for the processing of which personal data is indispensable. This includes voucher purchases as well as participation in competitions.

In accordance with the legal regulations and in the sense of data economy, we generally only collect data that is required for the provision of this particular service. As far as we ask for further information in our forms, the information is always voluntary and marked as such.

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. Furthermore, the storage in log files takes place in order to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 lit. f DSGVO.

In the case of booking a stay or other service, the data collected in this context will be used for the processing of this booking, within the legal requirements for promotional purposes and for statistical purposes. The legal basis for sending the newsletter as a result of the sale of goods or services is Section 7 (3) UWG.

If you subscribe to our newsletter, we also store and use, on the basis of Art. 6 para. 1 lit. f DSGVO, the data you provide when booking about your person and your stay, in order to best serve you as a newsletter subscriber.

The legal basis for the processing of the data after the user has subscribed to the newsletter is, if the user has given his consent, Art. 6 (1) lit. a DSGVO.

We also use the personal data stored by us to maintain customer relations, for customer care (e.g. information about the course of your stay), to carry out our own advertising and marketing measures (e.g. the dispatch of catalogs other advertising mailings within the legally permissible scope, inquiries about customer satisfaction) and for order processing.
 

4. Legal basis for processing personal data

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

Insofar as processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) lit. c DSGVO serves as the legal basis.

In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) lit. d DSGVO serves as the legal basis.

If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Art. 6 (1) f DSGVO serves as the legal basis for the processing.
 

5. Transfer of personal data to third parties

Your personal data will only be passed on within the relevant requirements, in particular those relating to data protection and competition law.

Insofar as this is necessary for the provision of the contractual service owed by us or legal obligations, your data will also be passed on to subcontractors or service providers for the provision of the service in the name of or on behalf of us (e.g. technical processing of mail and email dispatch, payment processing, customer service).

In addition, the transfer of data to persons or companies for the processing of your booking, in particular to tour operators, hotels, authorities, etc..

A disclosure and transfer of your data to third parties will also take place if we are required to do so by law or due to a legally binding judicial proceeding.

You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without hindrance by the controller to whom the personal data was provided.

 

6. Data storage and deletion

Within the scope of the purposes stated under the point "Purpose of the collection of personal data", your personal data will be stored. The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may take place beyond this if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the responsible party is subject. The legislator has enacted a variety of storage obligations and periods. Blocking or deletion of data will also take place if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

 

7. Cookie usage

We use cookies (small computer files containing text information that the web server sends to your internet browser) to improve your experience when visiting our online services. For example, some notices appear only once if you allow us to set a cookie. In addition, our cookies have an expiration date. If you manually delete your cookies before they expire, you will receive a new one the next time you visit the site, unless you block the cookie from being stored.

The technical specifications stipulate that only the server can read a cookie sent by it. We assure you that no personal data is stored in cookies.

Unfortunately, it is only possible to use our offers to a limited extent without accepting cookies. We therefore recommend that you activate cookies permanently for our website. Most Internet browsers are set to accept cookies automatically. However, you can deactivate the storage of cookies and set your internet browser to notify you as soon as cookies are sent.The legal basis for the processing of personal data using cookies is Art. 6 (1) lit. f DSGVO. The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 para. 1 lit. a DSGVO if the user has given his consent in this regard.
 

8. Use of Matomo (formerly PiWik)...

This website uses the open source web analytics service Matomo. Matomo uses so-called "cookies". These are text files that are stored on your computer and allow an analysis of your use of the website. For this purpose, the information generated by the cookie about the use of this website is stored on our server. The IP address is anonymized before storage. Matomo cookies remain on your terminal device until you delete them.
The storage of Matomo cookies and the use of this analysis tool are based on Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in the anonymized analysis of user behavior in order to optimize both its web offering and its advertising. The information generated by the cookie about the use of this website will not be disclosed to third parties. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

If you do not agree to the storage and use of your data, you can deactivate the storage and use here.
 

9. Use of OpenStreetMap

We use maps from the OpenStreetMap Foundation on our website. Please refer to the privacy policy of the OpenStreetMap Foundation for information on the extent to which your personal data is processed.

 

10. Reviews via Trusted Shops

If you have given us your express consent to do so during or after your order by activating a corresponding checkbox or clicking a button provided for this purpose ("Rate later"), we will transmit your e-mail address to Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne (www.trustedshops.de) for the purpose of reminding you by e-mail of the possibility to submit a rating of your order. This consent can be revoked at any time by sending a message to the contact option described below or directly to Trusted Shops.
 

11. Youtube

This website uses a link to YouTube of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We use the "extended data protection mode" when embedding, so that a transmission of usage information only takes place when the video is started. In this case, it is transmitted which specific page of our website you visit and which video is viewed. If you are logged into your YouTube account while doing so, you enable YouTube to assign your page views directly to your personal profile. For more information on the collection and processing of your data by YouTube, please refer to the relevant data protection information at www.youtube.com.

If you would like to ensure that no data about you is stored by YouTube, do not click on the embedded videos.

 

12. Security, questions and suggestions, responsible person

Last but not least, security depends on your system. You should always keep your access information confidential, never allow passwords to be saved by the web internet browser and close the internet browser window when you end your visit to our website. In this way, you will make it more difficult for third parties to access your personal data.

Use an operating system that can manage user rights. Set up multiple users on your system, even in the family, and never use the Internet under administrator rights. Use security software such as virus scanners and firewalls and keep your system up to date.

The responsible person for this online presence within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

Bayer. Staatsbad Bad Kissingen GmbH
Im Luitpoldpark 1
97688 Bad Kissingen
Telefon: +49 (0) 971 8048-444
Telefax: +49 (0) 971 8048-445
E-Mail: tourismus@badkissingen.de

and

Stadt Bad Kissingen
Rathausplatz 1
97688 Bad Kissingen
Telefon: +49 (0) 971 807-0
Fax: +49 (0) 971 807-4444
E-Mail: info@stadt.badkissingen.de

15. Right to information / right of revocation; other data subject rights

Sie haben das Recht...

You have the right...

- to request information about your personal data processed by us in accordance with Art. 15 DSGVO. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details;

- pursuant to Art. 16 DSGVO, to request the correction of incorrect or incomplete personal data stored by us without undue delay;

- pursuant to Art. 17 DSGVO, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;

- pursuant to Art. 18 DSGVO, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 DSGVO;

- pursuant to Art. 20 DSGVO, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller;

- in accordance with Art. 7 (3) DSGVO, to revoke your consent once given to us at any time. This has the consequence that we may no longer continue the data processing, which was based on this consent, for the future; and

- complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.

You are of course entitled to these rights free of charge. To revoke your consent to the use of data, to request information or the correction, blocking or deletion or to exercise the other data subject rights, please contact:

Bayer. Staatsbad Bad Kissingen GmbH
Im Luitpoldpark 1
97688 Bad Kissingen
Telefon: +49 (0) 971 8048-444
Telefax: +49 (0) 971 8048-445
E-Mail: tourismus@badkissingen.de

and

Stadt Bad Kissingen
Rathausplatz 1
97688 Bad Kissingen
Telefon: +49 (0) 971 807-0
Fax: +49 (0) 971 807-4444
E-Mail: info@stadt.badkissingen.de

Contact details of the data protection officer/organization:

Data Protection Officer for the City of Bad Kissingen:
Hans-Jürgen Bühner

Datenschutz-Organisation der Stadt Bad Kissingen:
Verwaltungsmodernisierung
Tel.: 0971 807-2103
Rathausplatz 1
97688 Bad Kissingen
E-Mail: datenschutz@stadt.badkissingen.de

Please contact the data protection organization of the city of Bad Kissingen if you have any questions about data protection, wish to report a data protection incident, or wish to assert your rights as a data subject.
 

16. Newsletter unsubscribe

If you no longer wish to receive our newsletter or promotional emails, click on the link: "Unsubscribe Newsletter", which is included at the bottom of all emails we send.