Data protection information for visitors to the website www.teutoburgerwald.de / en.teutoburgerwald.de

Responsible body
We, OstWestfalenLippe GmbH, Walther-Rathenau-Straße 33-35, 33602 Bielefeld, Tel. + 49 521-967330, info@owl.gmbh, as the controller, would like to explain to you below which of your data we process and how.

Data protection officer
If you have any questions about data protection, please contact our data protection officer, Mr Thomas Werning.

He can be contacted at:
werning.com GmbH - Dieselstraße 12 - 32791 Lage, 
E-mail: dsb-owl-gmbh-bi@werning.com, Phone: +49 5232 980-4700

Below you will find information on which personal data (this is all data that identifies you as a natural person (hereinafter ‘data subject’) or makes you identifiable, such as name, address, e-mail address or user behaviour) we collect during your visit to our site and how it is used. Data subjects are visitors to our website and users of our online offering.

Data security/encryption
This website uses ‘Hypertext Transfer Protocol Secure’ (https). The connection between your browser and our server is encrypted.

Your rights as a data subject affected by data processing

Right to lodge a complaint: If you are of the opinion that the processing of personal data concerning you violates the General Data Protection Regulation, you have the right to lodge a complaint with the data protection supervisory authority responsible for us, the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, www.ldi.nrw.de, as well as with any other data protection supervisory authority.

Right to revocation: Consent given may be revoked with future effect in accordance with Art. 7 GDPR by notifying the above address.

Right to information, erasure and rectification: In accordance with Art. 15 GDPR, you have the right to obtain information about the personal data stored about you - including any recipients and the planned storage period. If incorrect personal data is processed, you have the right to rectification in accordance with Art. 16 GDPR. If the legal requirements are met, you can request the deletion or restriction of processing and object to the processing (Art. 17, 18 and 21 GDPR). If you wish your data to be erased but we are still legally obliged to retain it, access to your data will be restricted (blocked). The same applies in the event of an objection. You can exercise your right to data portability insofar as the technical possibilities are available to the recipient and to us.

Mr Thomas Werning will be happy to assist you with your rights as a data subject using the contact details above.

Automated decision-making and profiling 
Does not currently take place.

Processing in third countries outside the EU
does not take place as a matter of principle. For information on optional cookies, see section 7.2.

Categories of recipients  
As part of the provision of special services, we use service companies that we have separately sworn to secrecy and data protection. Access to personal data cannot be ruled out here.

These categories of recipients are
Processors employed by us (Art. 28 GDPR), particularly in the areas of IT services, taxes, logistics and printing services, who process your data for us in accordance with our instructions. Currently, these are neusta destination.one GmbH, Münchener Straße 1, D-86899 Landsberg am Lech, and consentmanager AB, Håltegelvägen 1b, 72348 Västerås, Sweden.

Public bodies and institutions (tax authorities) in the event of a legal or official obligation.

Other bodies for which you have given us your consent to transfer data.

Data will only be passed on to authorities if there are overriding legal provisions.

Purpose of the processing
When you visit our website, various data (server statistics) are automatically stored which your browser transmits to our provider's server: Among other things, the IP address of your device, date and time of access, name and URL of retrieved files, website (from which the access is made or from which you were directed to our site (referrer URL)), browser used and, if applicable, the operating system of your device and the name of your provider are logged.

This data is processed by us for the purpose of ensuring a smooth connection and system security. This data is not merged with other data sources. The IP address is anonymised. The connection data is automatically deleted, usually after a maximum of seven days. If the website is misused, log data whose further storage is required for evidence purposes will be retained until the incident has been clarified.

The legal basis is Art. 6 para. 1 lit. f GDPR and § 25 para. 2 TDDDG (here, however, only data such as browser or header information that is inevitably transmitted or due to (browser) settings of the end device when accessing our website). This is not to be regarded as ‘access to information that is already stored in the terminal equipment’. Our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR arises from the fact that we want to ensure the secure operation of the website and recognise any attacks.
 

Purpose of the processing
When you use one of our contact forms (e.g. to subscribe to our press distribution list or to provide feedback), we collect and store your name and email address for the purpose of responding to your enquiry. Providing your telephone number for a callback is optional. If you send us a contact enquiry by email, we collect and store your email address and the data contained in the email.

The legal basis is Art. 6 para. 1 lit. a GDPR as you consent to the above-mentioned processing of your data when using the form and sending an e-mail. In addition, the legal basis also arises from Art. 6 para. 1 lit. b GDPR as the storage of the data is necessary for the fulfilment of a pre-contractual or possibly later contractual relationship.  

The data will be deleted when the purpose of the storage no longer applies, i.e. after your email/contact form enquiry has been answered or when the matter relating to the enquiry has been finally clarified.

You have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

You can find information on the right to cancellation and information under ‘Data subject rights’.

Description and scope of data processing
On our website, we offer users the opportunity to order information material, e.g. brochures, by providing personal data. The data is entered into an input mask and transmitted to us and stored. The following data is collected during the ordering process

• First name
• Surname
• Institution
• Street, house number
• Postcode
• Town
• E-mail address

The following data is also stored at the time of the order: Date and time of the order

The legal basis for the processing of the data is the fulfilment of a contract in accordance with Art. 6 para. 1 lit. b) GDPR.

Duration of storage
The data is stored 12 month for processing purposes.

Possibility of objection and removal
The stored data can be changed or deleted by the user at any time.
A request for deletion of the data can be sent by email to info@teutoburgerwald.de.

Purpose of data processing
The ‘wish list’ function allows you to save items or content on our website so that you can find them more easily later. We use your browser's local storage to save your selection.
We store the following data in local storage:
Item IDs or identifiers: These are required to identify the content or items you have selected.
Date and time of storage: To track when the watch list was updated.
LocalStorage: The data is stored locally in your browser and is only accessible to you. You can remove the stored data at any time by deleting your browser's LocalStorage data.

Duration of storage: The data remains stored in LocalStorage until you delete it manually or the data is automatically deleted when you clear your browser cache.
Use of data: The data stored in LocalStorage is used exclusively to manage and display your watch list on our website. The data is not passed on to third parties. 

The legal basis for the processing of users' personal data is Art. 6 (1) lit. f) GDPR for legitimate interest. Our legitimate interest is based on the storage being technically necessary.

You can find data protection information about our Teuto Training subpage here: https://teutotraining.teutoburgerwald.de/datenschutz/ 

Purpose and scope of data processing

We only process your location if you expressly consent to the location query in your browser. The purpose of the location query is to provide you with location-based services (e.g. display of events in your area, personalised content such as navigation).

If you consent to location tracking, geographical coordinates (e.g. longitude and latitude), IP address and, if necessary, additional technical information about your device will be processed in order to determine your approximate location.

Legal basis
Processing is based on your consent in accordance with Art. 6 (1) (a) GDPR. No location query will be made without your consent.

Transfer of data

Data will only be transferred to our service provider neusta one.destionation GmbH (see above) within the scope of order data processing, if this is necessary for the provision of services.

Storage period
After you have finished using the website, the location data is anonymised and statistically evaluated to improve the service. Your personal location data is not stored permanently, but is only processed for the respective usage session and deleted once the purpose has been fulfilled.

Withdrawal of consent

You can withdraw your consent to location tracking at any time by clicking on the icon (see image on the right) at the right end of the address bar in your browser and then selecting ‘Block access’.

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is visited again.

6.1 Technically necessary cookies

Function: These cookies and similar technologies are used for activities that are strictly necessary to operate or provide the service you have requested. They do not require your consent and cannot be disabled.

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

The legal basis for technically necessary cookies is Art. 6 para. 1 lit. f GDPR and § 25 para. 1 TDDDG. Our legitimate interest arises from the fact that we only use the aforementioned cookies to make it easier for you to access the site, do not collect any tracking data and therefore do not interfere with your personal rights and fundamental freedoms.  

You can disable cookies in your web browser. However, this may lead to impairments in functionality.

6.2 Other cookies (for marketing and analysis purposes)

Marketing: These cookies and similar technologies help us to deliver personalised advertising or marketing content to you and to measure its effectiveness.

Measurement: With the help of cookies and similar technologies, we are able to measure how many users visit our website and observe how you interact with our services, which helps us to make improvements.

We only use such technically unnecessary cookies if you have given us your express consent to do so.

You can change or revoke your consent at any time via the consent banner, which you will find on our website via the cookie icon in the bottom left-hand corner.

If you use Matomo's opt-out function as specified in "7. Matomo" will result in an opt-out cookie being stored.

6.3 Detailed information about cookies

We use the following cookies (with your consent, where applicable). The privacy policy of the respective provider can be found in the first table on the right under the link ‘Privacy Policy’. Further information about the provider and the purpose of its data use can be found in the list of providers in the drop-down menu.

Purpose of the processing 
The processing of users' personal data enables us to analyse the surfing behaviour of our users. By analysing the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to constantly improve our website and its user-friendliness. These purposes also constitute our legitimate interest in processing the data in accordance with Art. 6 para. 1 lit. f GDPR. By anonymising the IP address, the interest of users in the protection of their personal data is adequately taken into account.

The legal basis for the processing of users' personal data is Art. 6 para. 1 lit. a) GDPR for consent to data processing and lit. f) GDPR for the legitimate interest. Our legitimate interest arises from the statistical analysis of user behaviour to make adjustments for optimisation and marketing purposes.

We use a locally operated Matomo Analytics platform for data protection-compliant reach measurement. Information about the respective visit, the average time spent on the website, pages viewed and various other purely statistical measurement points are recorded. Matomo does not set a cookie without your consent and uses the IP address anonymised by 1 byte for device recognition. No data is retrieved from the end device and the legal requirements are complied with.

The consent banner asks for your consent to extended data collection. If this consent is granted, Matomo uses three cookies to execute the consent. In addition, once consent has been granted, the recording of the screen resolution and any installed extensions is activated in Matomo. Here, too, care is taken to ensure that no personal reference can be established.

If you use the following objection function of Matomo, an opt-out cookie will be stored.

Purpose of the processing
Our website integrates YouTube videos from the service provider Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). The videos are integrated in the so-called ‘extended data protection mode’. This means that YouTube does not store any information about visitors to our website unless they watch a video. If a video is played, YouTube stores cookies on the user's device and can collect personal data, such as the IP address, the time spent on the website or other information about user behaviour. This data is used, among other things, to record video statistics, improve user-friendliness and prevent misuse.

YouTube may merge this data with other Google services. If the user is logged in with a Google account at the same time, the data can be assigned directly to the account. If you wish to avoid this, you should log out of your Google account before using our website.

This service transfers personal data to the USA. The EU Commission has confirmed that there is an adequate level of data protection in this country (TADPF), to which the service is subject.

You can find out more at policies.google.com/privacy.

The legal basis for the processing of the data is the consent of the user Art. 6 para. 1 lit. a) GDPR. Consent is given before the video is played.

Possibility of cancellation
You have the option to withdraw your consent at any time. In general, you can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. Please note that you should not delete opt-out cookies if you wish to permanently deactivate tracking. If you delete all cookies in the browser, the opt-out cookie must be set again.

Alternatively, you can make individual settings for data processing in your Google account: myaccount.google.com.

Purpose of the processing

We use maps from OpenStreetMap, FOSSGIS e.V., Bundesallee 23, 10717 Berlin, Germany, on our website. The maps in the standard map view and terrain view are hosted by neusta destination.one GmbH, Mühlenstraße 153, 26789 Leer, Germany. To integrate the winter and satellite view, neusta destination.one GmbH uses an API from its subcontractor Maptiler AG, Zugerstrasse 22, 6314 Unterägeri, Switzerland. The service enables us to display maps for the localisation of tours and their course, excursion destinations and other offers.

The legal basis for the integration of the map display is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the user-friendly and appealing presentation of our online offer and the easy findability of places described on our website. 

We reserve the right to amend the content of this privacy policy at any time. This is usually done in the event of further development or adaptation of the services used. You can view the current privacy policy on our website. Status of this declaration: 10.09.2025