Privacy policy

I. Overview of data protection

Who is responsible for the collection of your data?
‍ The controller within the meaning of the EU General Data Protection Regulation (hereinafter: GDPR) and other national data protection laws of the German member states as well as other data protection regulations is:

Kernwasser Wunderland Freizeitpark GmbH
Griether Street 110-120
D-47546 Kalkar
Germany
Telephone: 0049 2824 9100
Email: info@wunderlandkalkar.eu

How do we collect your data?

Data is primarily collected when you provide it to us (e.g. on the contact or booking form). In addition, data is automatically collected by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of page view). This data is collected automatically as soon as you access our website.

What do we use your data for?

The data is partly collected to ensure the website works without errors. Other data may be used to analyse your user behaviour, whereby this data is collected anonymously and cannot be traced back to you. We only collect personal data that the user transmits when using the website or the app, for example, when booking a room or enquiring via the contact form on the website.

When making a reservation and/or booking, you must provide your full name, address and email address. This data is necessary to process the booking. In addition, further details may be required, such as telephone number, company name, tax number, bank account details or credit card details.

What rights do you have regarding your data?

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request correction, blocking or deletion of this data. If you have any further questions on data protection, you can contact us at any time at the address above. You also have the right to appeal with the competent supervisory authority.

II General notes and mandatory information

Data protection

We assure you that your personal data will be treated confidentially and in accordance with the statutory data protection regulations and this privacy policy.

Nevertheless, we would like to point out that data transmission over the Internet (e.g. email communication) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Disclosure of data

Your personal data will only be passed on to third parties in the following legally permissible cases:

If it is necessary for the assertion, exercise or defence of legal claims, and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data (Art. 6 para. 1 sentence 1 lit. f GDPR), to the extent that we are legally obliged to disclose (Art. 6 para. 1 sentence 1 lit. c GDPR) and this is necessary for the processing of contractual relationships with you (Art. 6 para. 1 sentence 1 lit. b GDPR).

Revocation of your consent to data processing

Many data processing operations are only possible with your explicit consent. You can revoke your consent at any time. All you need to do is send us an informal email. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to complain to the competent supervisory authority

In the event of breaches of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to data portability

You have the legal entitlement to be handed over data that we process automatically based on your consent or in fulfilment of a contract to you or a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another person, this will only be done if technically feasible.

SSL and TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as payment transactions you send to us as the site operator. You can recognise an encrypted connection by the fact that the browser's address line changes from ‘http://’ to ‘https://’ and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, third parties cannot read the data you transmit to us.

Information, blocking and deletion

Within the framework of the applicable legal provisions, you have the right to receive information about your stored personal data, its origin and recipient, the purpose of the data processing and, if applicable, a right to correction, blocking or deletion of this data at any time and for free. You can contact us at any time at the address in the legal notice if you have any further questions about personal data.

Data protection officer

You can contact the data protection officer at:

Kernwasser Wunderland Freizeitpark GmbH
Data Protection Officer
Griether Straße 110-120
D-47546 Kalkar
Germany
Phone: 02824 9100
Email: Datenschutzbeauftragte@wunderlandkalkar.eu

Server log files

When you visit the website, your browser automatically transmits information to us, stored in server log files (browser type and browser version, operating system used, referrer, URL hostname of the accessing computer, time of the server enquiry, IP address). This data will not merged with other data sources. In the context of the fulfilment of a contract or for pre-contractual measures, this is permissible in accordance with Art. 1 lit. F GDPR.

Cookies

We sometimes use so-called cookies on our website. These serve to make our website more user-friendly, effective and secure. They are harmless and do not contain viruses. Cookies are small text files stored on your computer and saved by your browser. Most of the cookies we use are so-called ‘session cookies’. They are automatically deleted at the end of your visit.

Other cookies remain stored on your end device until you delete them. These cookies enable us to recognise your browser on your next visit.
You can adjust your browser so that you are informed about the application of cookies, only allow cookies in individual cases, exclude the acceptance of cookies for certain cases, or generally block them. You can also activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

Cookies required to carry out the electronic communication process or provide certain functions you have requested (e.g. the shopping basket function) are stored based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the storage of cookies for the technically correct and optimised provision of its services. Other cookies (e.g. cookies for analysing your surfing behaviour) are stored as listed in this privacy policy.

Contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us to process the enquiry and in the event of follow-up questions. We will not pass on this data without your consent.

Therefore, the data entered in the contact form is processed exclusively based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time by sending us an informal email. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or when the purpose for its storage no longer applies (e.g. after fulfilling your request). Mandatory statutory provisions - in particular retention periods - remain unaffected.

Plug-ins / Social Media

Our pages use Google+ functions. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Collection and transfer of information: You can use the Google+ button to publish information worldwide. You and other users receive personalised content from Google and our partners via the Google+ button. Google stores both the information you have given +1 for a piece of content and the page you viewed when you clicked +1. Your +1s can be displayed as references with your profile name and photo in Google services, such as in search results, in your Google profile, or other places on websites and adverts on the Internet. Google records information about your +1 activities to improve Google services for you and others. To use the Google+ button, you need a globally visible, public Google profile, which must contain at least the profile name.

This name is used in all Google services. In some cases, this name may also replace another name you used when sharing content via your Google account. The identity of your Google profile may be displayed to users who know your email address or have other identifying information about you. Use of the information collected: In addition to the uses explained above, the information you provide will be used in accordance with the applicable Google privacy policy. Google may publish summarised statistics about the +1 activities of users or pass these on to users and partners, such as publishers, advertisers or associated websites.

The functions of Instagram are also integrated into our pages. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to our pages with your user account. We would like to point out that, as the providers of the pages, we have no knowledge of the content of the data transmitted or its use by Instagram. Further information on this can be found in Instagram's privacy policy.

Social media plugins from Facebook are used on our website to personalise their use. We use the ‘LIKE’ or ‘SHARE’ button. This is an offer from Facebook. When you access a page on our website that contains such a plugin, your browser establishes a direct connection with the Facebook servers. The plugin's content is transmitted by Facebook directly to your browser, which integrates it into the website. By integrating the plugin, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there. If you are logged in to Facebook, Facebook can directly associate your visit to our website with your Facebook account. The purpose and scope of the data collection, the further processing and use of the data by Facebook, and your rights in this regard and setting options to protect your privacy can be found in Facebook's data protection information.

The service ‘X’ (formerly Twitter) is integrated into this online presence. This service provider is X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. The purpose and scope of the data collection, the provider's further processing and use of the data on its pages, and your existing rights and setting options for protecting your privacy can be found in the provider's data protection information. The provider's privacy policy can be found at the following link: x.com/privacy. Information on the opt-out option can be found at the following link x.com/settings/account/personalization.Functions of the Instagram service are integrated on our pages. These functions are offered by Instagram Inc, 1601 Willow Road, Menlo Park, CA 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram. Further information on this can be found in Instagram's privacy policy.social media plugins from Facebook are used on our website to make their use more personal. We use the "LIKE" or "SHARE" button for this purpose. This is an offer from Facebook. When you visit a page on our website that contains such a plugin, your browser establishes a direct connection with the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser, which integrates it into the website. By integrating the plugins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there. If you are logged in to Facebook, Facebook can directly associate your visit to our website with your Facebook account. The purpose and scope of the data collection, the further processing and use of the data by Facebook as well as your rights in this regard and setting options to protect your privacy can be found in Facebook's data protection information.

The "Twitter" service is integrated into this online presence. The provider of this service is Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. The purpose and scope of the data collection, the further processing and use of the data by the provider on its pages as well as your existing rights and setting options for the protection of your privacy can be found in the provider's data protection information. The provider's privacy policy can be found at the following link: twitter.com/privacy. Information on the opt-out option can be found at the following link: twitter.com/personalization.

Our website uses YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, to embed videos. Normally, when you access a page with embedded videos, your IP address is sent to YouTube and cookies are installed on your computer. However, we have embedded our YouTube videos with the extended data protection mode (in this case, YouTube still contacts Google's Double Click service, but according to Google's privacy policy, personal data is not analysed). This means that YouTube no longer stores any information about visitors unless they watch the video. If you click on the video, your IP address is transmitted to YouTube, and YouTube learns that you have watched the video. If you are logged in to YouTube, this information will also be assigned to your user account (you can prevent this by logging out of YouTube before watching the video).

Updating the data protection information

This privacy policy is currently valid as of May 2018. If changes are made to the website in the future, this may result in an update of the privacy policy.

Film/photo

In accordance with the GDPR and in conjunction with the provisions of the KUG, Kernwasser Wunderland Freizeitpark GmbH would like to point out that film and photo recordings are occasionally produced for advertising purposes on our premises, which may also show visitors. The production is carried out by our own employees or by third parties commissioned by us. By entering our premises, you automatically consent to being filmed and photographed.

We will use the recordings on our website, social networks, and in the press to report on current events and advertise future events. Third parties may also broadcast the recorded material via various advertising channels. The recordings will be stored permanently.