Data protection

Responsible body
We, OstWestfalenLippe GmbH, Walther-Rathenau-Straße 33-35, 33602 Bielefeld, 0521-967330, info@ostwestfalen-lippe.de, as the controller, would like to explain to you below which of your data we process and how.

Data protection officer
If you have any questions about data protection, please contact our data protection officer, Mr Thomas Werning.

He can be contacted at:
werning.com GmbH - Dieselstraße 12 - 32791 Lage, 
E-mail: dsb-owl-gmbh-bi@werning.com, Phone: +49 5232 980-4700

Below you will find information on which personal data (this is all data that identifies you as a natural person (hereinafter ‘data subject’) or makes you identifiable, such as name, address, e-mail address or user behaviour) we collect during your visit to our site and how it is used. Data subjects are visitors to our website and users of our online offering.

Data security/encryption
This website uses ‘Hypertext Transfer Protocol Secure’ (https). The connection between your browser and our server is encrypted.

Your rights as a data subject affected by data processing

Right to lodge a complaint If you are of the opinion that the processing of personal data concerning you violates the General Data Protection Regulation, you have the right to lodge a complaint with the data protection supervisory authority responsible for us, the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, www.ldi.nrw.de, as well as with any other data protection supervisory authority.

Right to revocation You can revoke any consent you have given with effect for the future in accordance with Art. 7 GDPR.

Right to information, erasure and rectification In accordance with Art. 15 GDPR, you have the right to obtain information about the personal data stored about you - including any recipients and the planned storage period. If incorrect personal data is processed, you have the right to rectification in accordance with Art. 16 GDPR. If the legal requirements are met, you can request the deletion or restriction of processing and object to the processing (Art. 17, 18 and 21 GDPR). If you wish your data to be erased but we are still legally obliged to retain it, access to your data will be restricted (blocked). The same applies in the event of an objection. You can exercise your right to data portability insofar as the technical possibilities are available to the recipient and to us.

Mr Thomas Werning will be happy to assist you with your rights as a data subject using the contact details above.

Obligation to provide information  
Without correct information from you, it is generally not possible to conclude a contract.

Automated decision-making and profiling 
Does not currently take place.

Intention to process in third countries 
Takes place in accordance with your consent.

Categories of recipients  
As part of the provision of special services, we use service companies that we have separately sworn to secrecy and data protection. Access to personal data cannot be ruled out here.

These categories of recipients are
Processors employed by us (Art. 28 GDPR), particularly in the areas of IT services, taxes, logistics and printing services, who process your data for us in accordance with our instructions.

Public bodies and institutions (tax authorities) in the event of a legal or official obligation.

Other bodies for which you have given us your consent to transfer data.

Data will only be passed on to authorities if there are overriding legal provisions.

Purposes of the processing
Presentation of the company, provision of services and/or sale of products and communication via the Internet. The purpose of data processing on this website is to provide information about products and services of our company/association and, if necessary, to process applications with the possibility for users to get in touch with the contact persons in the company in a targeted manner.

General information
If you have provided us with personal data, we will use it to answer your enquiries, to advise you and process contracts concluded with you and for technical administration. Your personal data will only be passed on or transmitted to third parties if this is necessary for the purpose of processing the contract, for billing purposes or if you have given your prior consent. You have the right to revoke your consent at any time with effect for the future, see ‘Right of revocation’.

The legal basis for the collection, processing and forwarding of data in the context of contract processing is Art. 6 para. 1 lit. b GDPR.
This data will be deleted after expiry of the applicable statutory retention obligations. If we are not subject to any statutory retention obligations, the data will be deleted when the purpose no longer applies.

You have the right to access and object to your data stored by us at any time. Further information can be found under ‘Rights of data subjects’ and ‘Right to cancellation’.

Purpose of the processing
When you visit our website, various data (server statistics) are automatically stored which your browser transmits to our provider's server: Among other things, the IP address of your device, date and time of access, name and URL of retrieved files, website (from which the access is made or from which you were directed to our site (referrer URL)), browser used and, if applicable, the operating system of your device and the name of your provider are logged.

This data is processed by us for the purpose of ensuring a smooth connection and system security. This data is not merged with other data sources. The IP address is anonymised. The connection data is automatically deleted, usually after a maximum of seven days. If the website is misused, log data whose further storage is required for evidence purposes will be retained until the incident has been clarified.

The legal basis is Art. 6 para. 1 lit. f GDPR and § 25 para. 2 TDDDG (here, however, only data such as browser or header information that is inevitably transmitted or due to (browser) settings of the end device when accessing our website). This is not to be regarded as ‘access to information that is already stored in the terminal equipment’. Our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR arises from the fact that we want to ensure the secure operation of the website and recognise any attacks.
 

Purpose of the processing
When you use our contact form, we collect and store your name and email address for the purpose of responding to your enquiry. Providing a telephone number for a callback is optional. If you send us a contact enquiry by email, we collect and store the email address and the data contained in the email.

The legal basis is Art. 6 para. 1 lit. a GDPR as you consent to the above-mentioned processing of your data when using the form and sending an e-mail. In addition, the legal basis also arises from Art. 6 para. 1 lit. b GDPR as the storage of the data is necessary for the fulfilment of a pre-contractual or possibly later contractual relationship.  

The data will be deleted when the purpose of the storage no longer applies, i.e. after your email/contact form enquiry has been answered or when the matter relating to the enquiry has been finally clarified.

You have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

You can find information on the right to cancellation and information under ‘Data subject rights’.

Purpose of data processing
The processing of the user's data is necessary for the provision of certain content and services on our website:
Processing the brochure order

Description and scope of data processing
On our website, we offer users the opportunity to order information material, e.g. brochures, by providing personal data. The data is entered into an input mask and transmitted to us and stored. The following data is collected during the ordering process

• First name
• Surname
• Institution
• Street, house number
• Postcode
• Town
• E-mail address

The following data is also stored at the time of the order:Date and time of the order

The legal basis for the processing of the data is the fulfilment of a contract in accordance with Art. 6 para. 1 lit. b) GDPR.

Duration of storage
The data is stored by us for processing purposes.

Possibility of objection and removal
The stored data can be changed or deleted by the user at any time.
Data can be deleted by sending an email to the email address.

Purpose of data processing
The ‘bookmark list’ function allows you to save articles or content on our website to make it easier to find them again later. We use the LocalStorage of your browser to save your selection.

We store the following data in LocalStorage:
Item IDs or identifiers: These are required to identify the content or items you have selected.
Date and time of storage: To track when the watchlist was updated.
LocalStorage: The data is stored locally in your browser and is only accessible to you. You can delete the stored data at any time by deleting the LocalStorage data in your browser.
Duration of storage: The data remains stored in LocalStorage until you delete it manually or the data is automatically deleted when you clear your browser cache.
Use of the data: The data stored in LocalStorage is used exclusively to manage your watch list on our website. The data is not passed on to third parties. The data is only stored on your device and is not stored on our servers.  

The legal basis for the processing of users' personal data is Art. 6 para. 1 lit. f) GDPR for the legitimate interest. Our legitimate interest arises from the merely technically necessary storage of data without personal reference.

Purpose of the processing
This website uses cookies. Cookies are data records (used to be just small text files) that are stored in your Internet browser (e.g. Firefox, Google Chrome, Microsoft Explorer/Edge, Safari, etc.) or on your computer (i.e. your operating system) when you visit our website. With the help of the cookie, which contains a certain character string and, if necessary, further information, our website recognises your Internet browser when you access it. We use our own cookies, so-called session cookies. These are used to manage the use of the website via a login area. These cookies are only valid for the duration of your browser session and are deleted at the end of your visit to our website.

The legal basis for our own cookies is Art. 6 para. 1 lit. f GDPR and § 25 para. 1 TDDDG. Our legitimate interest arises from the fact that we only use the aforementioned cookies to make it easier for you to access the site, do not collect any tracking data and therefore do not interfere with your personal rights and fundamental freedoms.  

You can exclude the acceptance of cookies in your web browser. However, this may lead to functional impairments.

If you use the following objection function of Matomo, an opt-out cookie will be stored.

We use cookies from the following third-party providers

• Matomo

Purpose of the processing 
The processing of users' personal data enables us to analyse the surfing behaviour of our users. By analysing the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to constantly improve our website and its user-friendliness. These purposes also constitute our legitimate interest in processing the data in accordance with Art. 6 para. 1 lit. f GDPR. By anonymising the IP address, the interest of users in the protection of their personal data is adequately taken into account.

The legal basis for the processing of users' personal data is Art. 6 para. 1 lit. a) GDPR for consent to data processing and lit. f) GDPR for the legitimate interest. Our legitimate interest arises from the statistical analysis of user behaviour to make adjustments for optimisation and marketing purposes.

We use a locally operated Matomo Analytics platform for data protection-compliant reach measurement. Information about the respective visit, the average time spent on the website, pages viewed and various other purely statistical measurement points are recorded. Matomo does not set a cookie without your consent and uses the IP address anonymised by 1 byte for device recognition. No data is retrieved from the end device and the legal requirements are complied with.

The consent banner asks for your consent to extended data collection. If this consent is granted, Matomo uses three cookies to execute the consent. In addition, once consent has been granted, the recording of the screen resolution and any installed extensions is activated in Matomo. Here, too, care is taken to ensure that no personal reference can be established.

Purpose of the processing

We use maps from OpenStreetMap, FOSSGIS e.V., Bundesallee 23, 10717 Berlin, Germany, on our website. The maps in the standard map view and terrain view are hosted by neusta destination.one GmbH, Mühlenstraße 153, 26789 Leer, Germany. To integrate the winter and satellite view, neusta destination.one GmbH uses an API from its subcontractor Maptiler AG, Zugerstrasse 22, 6314 Unterägeri, Switzerland. The service enables us to display maps for the localisation of tours and their course, excursion destinations and other offers.

The legal basis for the integration of the map display is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the user-friendly and appealing presentation of our online offer and the easy findability of places described on our website. 

We reserve the right to amend the content of this privacy policy at any time. This is usually done in the event of further development or adaptation of the services used. You can view the current privacy policy on our website. Status of this declaration: 13.11.2024