Privacy Policy
The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the member states of the European Union, and other provisions of a data protection nature is Mr. Daniel Friesen, Bonn City Tours, Colmantstraße 6, 53115 Bonn (hereinafter referred to as “controller” or ‘we’ or “us”).
A. General information on data processing
1) Personal data
Personal data is individual information about the personal or factual circumstances of an identified or identifiable natural person. This includes information such as name, address, telephone number, and email address, but also the IP address assigned to a connection. Information that is not directly related to the identity of a person—such as favorite websites or the number of users of a site—is not personal data.
2) Scope of processing of personal data
We collect and use personal data from our users only to the extent necessary to provide a functional website and our content and services. The collection and use of personal data from our users is generally only carried out with the user’s consent. An exception applies in cases where prior consent cannot be obtained for practical reasons and the processing of the data is permitted by law.
3) Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 (1) lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.
If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights, and freedoms of the data subject do not outweigh the former interest, Art. 6 (1) lit. f GDPR serves as the legal basis for processing.
4) Data deletion and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in EU regulations, laws, or other provisions to which we are subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.
B. Provision of the website and creation of log files
Each time our website is accessed, data and information are collected by us through an automated system.
The following data is collected:
Information about the browser type and version used
The user’s operating system
The user’s Internet service provider
The user’s IP address
Date and time of access
Websites from which the user’s system accesses our website (referrer)
Websites accessed by the user’s system via our website
This data is stored in our system’s log files. This data is not stored together with other personal data of the user.
Legal basis for data processing
The legal basis for the temporary storage of data and log files is Art. 6 (1) lit. f GDPR
Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.
Storage in log files is done to ensure the functionality of the website. In addition, the data serves us to optimize the website and to ensure the security of our information technology systems.
These purposes also constitute our legitimate interest in data processing pursuant to Art. 6 (1) lit. f GDPR.
Duration of storage
The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. In the case of data collection for the provision of the website, this is the case when the respective session has ended.
In the case of data storage in log files, this is the case at the latest
Translated with DeepL.com (free version)
