We take the protection of your privacy seriously. Please find below details on how we handle the data that is collected when you use our website.

CONTROLLER

Controller pursuant to Art. 4 (7) of the European General Data Protection Regulation (GDPR)

a) in respect of content pertaining to Erlebniskontor GmbH

Erlebniskontor GmbH
Alte Feuerwache
Waller Stieg 3
28217 Bremen
Germany

Telephone: +49 (0)421-168 45 0
Mail: info@erlebniskontor.com

b) in respect of content pertaining to Wissenswelten Management GmbH

Wissenswelten Management GmbH
Alte Feuerwache
Waller Stieg 3
28217 Bremen
Germany

Mail: info@wissenswelten.info

Name and address of the Data Protection Officer

Bertold Frick (lawyer)
Datenschutz-Metropol GmbH
Baumwollbörse, Wachtstrasse 17/24
28195 Bremen
Germany
Mail: frick@datenschutz-metropol.de

GENERAL

1. Scope and processing of personal data

We gather and utilise our users’ personal data in principle only as far as this is necessary to provide a functional website as well as our content and services.

Should this not be the case, personal data is only used regularly with the consent of the user. Exceptions are made in cases when it is not practically possible to obtain a user’s prior consent and the processing of data is permitted within the scope of law.

In the event that we commission service providers for individual functions of our website or use your data for advertising purposes, we will let you know below in detail about the respective processes. We will also state the criteria used to determine data storage periods.

2. Routine erasure and restriction of processing of personal data

We only process and store personal data for as long as necessary to achieve the purpose for which the data is stored. Data may be stored beyond this point insofar as this is provided for in European or national directives, laws or other regulations to which the data controller is subject. Insofar as the storage purposes ceases to apply or if a storage period specified in the aforementioned legislation elapses, personal data will be routinely erased or be made subject to restriction of processing.

3. Security of your data

We secure our website and other systems by means of technical and organisational measures to combat the loss, destruction, access, alteration or processing of your data by unauthorised parties. Despite regular inspections, it is not possible to fully protect data against all risks. Some areas of this website use encryption in line with the industry standard SSL (Secure Sockets Layer). As such, the confidentiality of your personal details transmitted via the Internet is ensured.

In respect of email communication, we are unable to ensure complete data security. The provider expressly points out that data transmission via the Web (e.g. email communication) may exhibit security vulnerabilities and cannot be comprehensively protected against third-party access. We therefore recommend that you send confidential information by post.

USAGE DATA

1. Log files

Description and scope of data collection

If you use the website solely for informational purposes, i.e. if you do not register or transmit information to us in any other way, we will only collect the personal data transmitted to us by your browser. If you wish to view our website, we will collect the following data, which, for technical reasons, is necessary for us to be able to display the website to you and in order to ensure stability and security (the legal basis is Art. 6 (1) 1f of the GDPR):

• IP address
• Date and time of access
• Content of the request (specific page)
• Website from which the request originates
• Browser type and version used
• Operating system and its interface
• The user’s Internet service provider
• Purpose of processing data

It is necessary for the system to temporarily store the IP address in order to facilitate provision of the website to the user’s computer. To this end, the user’s IP address must be stored for the duration of the session.

Log files are stored in order to ensure the website’s functionality. We also use this data to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

These purposes also include our legitimate interest in data processing pursuant to Art. 6 1f  of the GDPR.

Duration of storage

The data is erased as soon as it is no longer necessary to achieve the purpose for which it was gathered. Where data is collected to provide the website, this becomes the case when the session in question is ended.

If the data is stored in log files, this is the case after seven days at the latest. Your data may be stored beyond this point. In this case, your IP address will be deleted or distorted so that it is not possible to determine the client machine that has accessed the website.

Option to object and opt out

The collection of data to provide the website and the storage of data in log files are absolutely essential to operate the website. Therefore, there is no option for the user to object.

2. Cookies

Description and scope of data collection

Our web pages use both session cookies and persistent cookies. Cookies are small text files that are either stored in your browser cache for the duration of your browser session (“session cookies”) or for a set period on your hard drive (“persistent cookies”).

The cookies store information on particular user behaviour and visited sites. However, they do not store any personal data. Therefore, the cookies stored do not allow user behaviour to be associated with an identified or identifiable natural person. Insofar as cookies are used, they are assigned an encrypted number. However, the cookies do not contain a name, IP address, addresses or other personal data, and cookie ID numbers cannot be associated with personal data at any time. The information transmitted to us is generic, meaning that we only receive information about which pages have been visited or which individual pages on the site have been clicked on. This information is only transmitted under a pseudonym and stored in such a way that no information can be associated with the name. Storage therefore serves the sole purpose of reviewing the efficiency of content on our websites internally and not the analysis of the personal usage patterns of individual identifiable users.

Purpose of processing data

Cookies make it possible to recognise your Web browser, meaning that we can provide you with content tailored to your wants and needs faster and more accurately on your future visits to our website. We therefore use cookies to serve our legitimate interest of providing a website customised to user needs.

Duration of storage

Session cookies are automatically erased from the customer’s hard drive once the session has ended. Persistent cookies remain on the hard drive and erase themselves automatically after a pre-defined period (currently 26 months).

Opt-out

You can adjust your browser settings so that cookies are only stored if you give your consent. You can delete any pre-existing cookies. If you deactivate cookies, however, the functionality of our website may be limited. Please access the following LINK for detailed instructions on how to deactivate cookies.

 

GOOGLE MAPS

We use the Google Maps service on this website. We are therefore able to display interactive maps on the site itself and can provide you with a convenient map function.

Google Maps is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. During use, Google collects and processes data about your use of the map function, irrespective of whether Google provides a user account in which you are logged in or whether no such user account exists. If you are logged into Google, your data will be associated directly with your account. If you do not wish this information to be associated with your Google profile, you must log out prior to activating the button. Google stores your data in the form of usage profiles. In particular, analysis of this kind is performed in order to place needs-based advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of such user profiles, but you have to assert this right vis-à-vis Google.

For more information on the purpose and scope of data collection and the processing of data by the plugin provider, please refer to the provider’s privacy policy. Here, you will also find further information on your rights and configuration options to safeguard your privacy: http://www.google.de/intl/de/policies/privacy

PERSONAL DATA (master data)

1. What is “personal data”?

‘Personal data’ is any information relating to your person that enables inferences to be drawn about your identity and/or that relates directly/indirectly to your person, e.g. your name, your address or your telephone number. Information that does not enable inferences to be drawn about an identified/identifiable person does not fall within this category.

2. Applications

At www.erlebniskontor.com/jobs, you can access the current vacancies at Erlebniskontor GmbH and our partner companies. You also have the option of submitting applications to Erlebniskontor GmbH and our partner companies using the email address stated in the relevant job advertisement. This data is processed in accordance with the privacy policy of the company concerned. In some cases, you will also have the option to submit applications via your phone (or PC) using the provider WhatsApp. By using this service, you consent to your WhatsApp data being transmitted to the contact person named in the job advertisement. For information on the WhatsApp privacy policy, please visit https://www.whatsapp.com/legal/

The provision and processing of this data serves our legitimate interest in creating a further channel for the submission of applications and appealing to a wider range of potential candidates. This data will be stored for the sole purpose of carrying out the application process. The storage period is a maximum of 6 months following conclusion of the application process.

Speculative applications submitted electronically (by email) are regularly deleted immediately after receipt. However, we reserve the right to store applications for up to 12 months for the purpose of potentially making contact if our legitimate interests result in the application being considered for a specific position. By submitting a speculative application, you consent to this storage. You are entitled to withdraw your consent to storage at any time by sending an email to info@erlebniskontor.com. Applications submitted by post will be returned to the applicant following the conclusion of the application process. For more information on data protection at our partner companies, please refer to their data protection policies.

3. Forwarding to third-party websites

In order to expand our services, our website includes links to other websites, for which the respective third-party providers are responsible. For information on the extent of data collection by our advertising partners, please refer to their privacy policies. You will recognise that you have been forwarded by the fact that a new browser window opens and that a new address is displayed in the browser’s address bar.

4. Disclosure of data to third parties

We only disclose your personal data to third parties if you have given your express consent pursuant to Art. 6 (1) 1a of the GDPR, disclosure is necessary pursuant to Art. 6 (1) 1f of the GDPR for the establishment, exercise or defence of legal claims and there is no reason to believe that you have an overriding interest in the non-disclosure of your data, a legal obligation to disclose the data applies pursuant to Art. 6 (1) 1c of the GDPR.

Your data will not be passed on to third parties for advertising purposes.

RIGHTS OF DATA SUBJECTS

You have the right,

pursuant to Art. 15 of the GDPR, to request information on your personal data processed by us. In particular, you can request information on the purposes of processing, the categories of personal data concerned, the categories of recipient(s) to whom your data has been or will be disclosed, the envisaged storage period of the data, the existence of a right to request rectification, erasure, restriction of processing or to object to processing, the existence of a right to lodge a complaint with a supervisory authority, the origin of the data insofar as it was not collected by us and the existence of automated decision-making, including profiling, pursuant to Art. 22 (1) and (4) of the GDPR and any meaningful information about the details thereof. You have the right to demand information as to whether your personal data has been transferred to a third country or an international organisation; in this context, you also have the right to be informed of the appropriate safeguards pursuant to Art. 46 of the GDPR in respect of such data transfer;

pursuant to Article 16 of the GDPR, to obtain the rectification of inaccurate personal data or to have incomplete personal data held by us completed;

pursuant to Article 17 of the GDPR, to obtain the erasure of your personal data held by us unless processing is necessary to exercise the right of freedom of speech, to comply with a legal obligation, for reasons of public interest or for the purpose of establishing, exercising or defending legal claims or for archiving purposes in the public interest or for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) of the GDPR, insofar as the aforementioned right is likely to render impossible or seriously impair the achievement of the objectives of processing;

pursuant to Art. 18 of the GDPR, to obtain restriction of processing if you are contesting the accuracy of the data, if the processing of your data is unlawful but you oppose its erasure, if we no longer need your personal data but you need it for the establishment, exercise or defence of legal claims or if you have objected to the processing of your data pursuant to Art. 21 of the GDPR; where the processing of your personal data has been restricted, this data may only be processed with your consent or for the purpose of establishing, exercising or defending legal claims, for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. Further, you will be informed by the data controller prior to the restriction of processing being lifted;

pursuant to Art. 20 of the GDPR, to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format and to have this data transmitted to another data controller insofar as this transmission does not adversely affect the rights and freedoms of others. This right to data portability shall not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

pursuant to Art. 7 (3) of the GDPR, to withdraw your consent at any time. This shall result in us being unable to continue the processing of data based on this consent in the future;

pursuant to Art. 22 of the GDPR, not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects on you or similarly significantly affects you insofar as the decision is not necessary for entering into, or performing, a contract between you and us, is not authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests or is not based on your express consent. These decisions shall not be based on special categories of personal data referred to in Article 9 (1) of the GDPR, unless point (a) or (g) of Article 9 (2) applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place;

pursuant to Art. 77 of the GDPR, to lodge a complaint with a supervisory authority. Generally speaking, you can lodge a complaint with the supervisory body in your place of habitual residence, your place of work or the place of our registered office. The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.

To assert your rights, please contact frick@trinity-metropol.de

If you wish to lodge a complaint concerning our processing of your personal data with the responsible data protection supervisory authority for the location of our registered office, please contact: Die Landesbeauftragte für Datenschutz und Informationsfreiheit der Freien Hansestadt Bremen
Dr Inke Sommer
Arndtstrasse 1
27570 Bremerhaven
Germany
Tel.: +49 (0)421 361 2010
Fax: +49 (0)421 49 61 84 95
Email: office@datenschutz-bremen.de

RIGHT TO OBJECT

Insofar as the processing of your personal data is based on legitimate interests pursuant to Art. 6 (1) 1f of the GDPR, you have the right, pursuant to Art. 21 of the GDPR, to object to the processing of your personal data on grounds relating to your particular situation or if you object on the grounds of direct marketing. In the latter case, you have a general right to object, which we will respect without you having to indicate a particular situation.

If you wish to make use of your right to withdraw consent or your right to object, all you have to do is send an email to info@erlebniskontor.com

ADVERTISING DIRECTED TO US

We hereby expressly object to any third-party use of the contact details published in the legal notice to send us any advertising or informational materials that have not been expressly solicited. The operators of the website expressly reserve the right to take legal action in the event of unsolicited advertising information, such as spam emails, being sent.

 

Last updated: January 2023