We at the Wendelsteinbahn take protection of your personal data very seriously. Your personal privacy is very important to us. We process your personal data in accordance with the applicable data protection laws in each case and for the purposes described below.
Personal data in the sense of this Data Protection Information means any details relating to you as a person. In particular, relevant personal data includes data captured online (e.g. cookie or tracking data, user IDs and IP addresses) and your personal details (e.g. name, address, contact details), marketing and sales data (e.g. findings of customer data analysis).
The following information tells you how we handle such data. For the sake of clarity, we have divided this Data Protection Information into sections.
2. Responsible organisation and contact details
Wendelsteinbahn GmbH, Kerschelweg 30, 83098 Brannenburg / Germany, Tel. +49 8034 / 308-0, Fax +49 8034 / 308-106, email@example.com is responsible for processing your personal data.
If you have any questions or comments about the data protection practices of Wendelsteinbahn, (e.g. disclosure and editing of your personal data), you may also contact our Data Protection Officer citing the reference "Data Protection" ( firstname.lastname@example.org ).
3. General information about visiting our websites and using our web offers
3.1 Log files
Every time one of our websites is accessed, Wendelsteinbahn collects data and information via an automated system. This is stored in the log files of the server, i.e. the files that record the processes running on a computer or network system.
The following details are collected in this way:
Information about browser type and version
Operating system of the user
Internet service provider of the user
IP address of the user
Date and time of access
Websites from which the user’s system has accessed our website (referrers)
Processing of the IP address serves to protect against or trace any hacking or cyberattacks. Processing of the remaining data serves to deliver the content of our website, ensure the functionality of our IT systems, optimise our internet presence and preserve the functionality of the website. The data of these log files is always stored separately from the user’s other personal data.
This processing of your data as described above is required to safeguard the legitimate interests of Wendelsteinbahn and is justified by balancing the respective interests in favour of Wendelsteinbahn. Wendelsteinbahn has a legitimate interest in ensuring that the website and services offered there function in a technical sense and are protected from cyberattacks. Your justifiable interest that the aforementioned data is not used for this purpose does not outweigh the legitimate interest of Wendelsteinbahn, since Wendelsteinbahn uses this data appropriately and in accordance with the stated purpose and you also benefit from the functionality of the websites.
Your personal data will be erased after a period of no more than 14 days, except where Wendelsteinbahn is required by law to retain the information or retention of it is permitted for legitimate reasons.
3.2 Options for making contact
Wendelsteinbahn processes your personal data for the purpose of making contact with you. Contact forms for the purpose of electronic contact are available on our websites. Alternatively, you have the option of making contact with us via the contact details provided in Section 2 of this document.
When you make contact with us via one of these channels, the personal details voluntarily supplied by you are automatically saved. They are stored for the purpose of processing your enquiry, making contact with you or, with your consent, used for marketing purposes.
This processing of your data as described above is required to safeguard the legitimate interests of Wendelsteinbahn and is justified by balancing the respective interests in favour of Wendelsteinbahn. Wendelsteinbahn has a legitimate interest in providing you with a platform for simple contact and communication with us. Your justifiable interest that the aforementioned data is not used for this purpose does not outweigh the legitimate interest of Wendelsteinbahn, since it is also in your interest for us to process your contact request and respond to it accordingly. Other personal data processed during the dispatching process serves to prevent any misuse of the contact form and safeguard the security of our IT systems.
Your personal data will be automatically deleted 3 months after your contact request has been answered and there is no further justification (such as an existing customer relationship) or statutory requirement to retain the information.
We use the web analysis service Google Analytics to collect usage data from our websites. This enables us to compile reports on website activity and thus to improve the website.
Furthermore, we use Google Analytics to process additional information from users, provided they are registered with Google and have consented to the processing of their data for personalized advertising. In these cases, the usage activities on our website are assigned to the Google account, possibly including location, search history and YouTube history. If applicable, cross device tracking might also take place. We receive socalled insights, i.e. aggregated demographic information about our website visitors.
In addition, by clicking on the "Accept all" button, you give us your consent for your data to be processed in countries outside the European Union (EU), namely in the USA and in other third countries. This can make it more difficult to enforce your rights as a data subject.
4. YOUR RIGHTS
In accordance with the relevant statutory provisions, (including any applicable restrictions arising from the GDPR (the EU General Data Protection Regulation) and/or the new version of the BDSG (Federal Data Protection Act), you have the opportunity to exercise the following rights:
For instance, you have the right to receive information from us about any personal data stored by us.
At your request, we will correct any of your stored data if it is inaccurate or inapplicable.
If you wish, we will delete your data, provided there are no other legal requirements (e.g. statutory retention obligations) or an overriding interest on our part (e.g. to defend our rights and claims) that would prevent its erasure.
With due consideration for any legal requirements, you have the right to set limits to the processing of your data.
4.5 Data transmission
You also have the right under statutory provisions to receive or transmit your data to third parties in a structured, accessible and machine-readable format.
Furthermore, you have the right to lodge a complaint with a data protection supervisory authority. In the first instance, you are welcome to consult our data protection officer.
Moreover, you are entitled to lodge an objection to the processing of your data (for further information, refer to the box below).
If you wish to exercise any of these rights, you can contact us by using the contact details provided in Section 2.
Information about your right to object
You have the right to object at any time to processing of your data which occurs as the result of a balancing of interests, if there are grounds for objection arising from your particular situation. This also applies to any profiling based on this provision.
If you lodge an objection, your personal data will no longer be processed unless we can show evidence of compelling, legitimate reasons for processing it which outweigh your interests, rights and freedoms, or if processing the information serves to assert, exercise or defend rights or legal claims.
We also process your personal data to conduct direct marketing. If you do not wish to receive any marketing material, you have the right to object to this at any time; this also applies to any profiling conducted in relation to direct marketing. We will then respect your wishes in any future marketing action.
Your objection can be made informally and should ideally be lodged with:
Wendelsteinbahn GmbH, Kerschelweg 30, 83098 Brannenburg / Germany, Tel. +49 8034/308-0, Fax +49 8034 / 308-106, email@example.com