Data Protection Declaration of the DJH LVB Rheinland e.V.

The Deutsche Jugendherbergswerk (DJH) takes the protection of personal data very seriously. Following we like to inform you about the dealing with your data according to article 13 of the General Data Protection Regulation (GDPR).

1. Website

Person in charge according to article 4 nr. 7 GDPR:

Deutsches Jugendherbergswerk
Landesverband Rheinland e.V.
Düsseldorfer Str.1a
40545 Düsseldorf
e-mail: service@djh-rheinland.de
phone: +49211-577030
fax: +49211-579735
internet: rheinland.jugendherberge.de

Usage data

While visiting our websites, on our webserver so-called usage data will be temporarily evaluated for statistical purposes to improve the quality of our websites. This data set contents of:

  • the name and the address of the required contents
  • the date and the time of the enquiry
  • the transmitted data size
  • the status of access (content transmitted, content not found)
  • the description of the used webbrowser and the operating system
  • the referral-link, which will state from which site you got to our site
  • the IP-address of the requiring computer, which will be shortened in a way that a people reference cannot be produced.

The mentioned protocol data will only be evaluated anonymised.

Storing of the IP-address for security purposes

Furthermore we will store the entire IP-address, transmitted by your computer, strictly appropriated for a period of 14 days. This takes place in the interest of recognising, limiting and eliminating offences on our websites. Legal basis is article 6 section 1 page 1 lit. f GDPR.

Data Security

To protect your data from unwanted hits in a possibly comprehensive way, we will adopt technical and organizational measures. On our websites we are applying a ciphering method. Your details will be transmitted from your computer to our server and vice versa per internet by use of a TLS-ciphering.Usually you will recognise this by the closed key-symbol in your status display and that the address bar starts with https://

Google Tag Manager

This website is using the Google Tag Manager. Through this service website-tags can be administrated by an interface. The Google Tool Manager is solely implementing tags. This means: no Cookies are used and no personal data will be recorded. The Google Tool Manager is initiating other tags, which are in turn recording data where appropriate. Nevertheless the Google Tool Manager will not access this data. If a deactivating was made on a Cookie- or Domain-level, this will remain for all of the tracking-tags insofar they are implemented by the Google Tag Manager.

Usage of Cookies

While visiting our website, information is filed and stored inside the browser-software of your computer in the form of Cookies. The usage of Cookies eases the utilization of the website for you because we are able to recognise your computer at another visit and therefore the repeated enter of data will be easier for you. Cookies are a matter of small text-data with configuration-information, which will be stored associated on the hard disk for the used browser. Specific information will flow to the site which is setting the Cookie ( in this case by us).

The Cookies setted by us are helping to determine the frequency of usage and the number of users of our websites and to enable the entire usage of the service for you. Cookies are not able to implement programmes or to transfer viruses on your computer. They are serving to make the internet-offer more user-friendly and more effective.

(a) Necessary Cookies

We are implementing Cookies on our websites which are necessary for the usage of our websites.

We will not use these necessary Cookies for analyse-, tracking- or advertisement purposes.

Partly these Cookies solely content information about specific settings and they are not concerning to persons. They can be necessary also to enable the user guidance, the safety and the implementation of the site.

The processing takes place on the basis of §25 section 2 nr. 2 TTDSG i.V.m. Article6 section 1 lit. f GDPR ( weighing of interests, based on our interest to ensure the safety of IT-systems and to enable the offer of our website).

Provider

Purpose

Storage duration

Usercentrics GmbH

Consent Management

max. 3 years


(b)Analysis Tools

The following mentioned and from us setted Analyse Tools are implemented based on your acceptance.We would like to ensure a needs-based configuration and a consecutive optimisation by these deployed tracking-measures. On the other hand we are implementing the tracking-measures to gather the usage of our website statistically and to evaluate it for the purpose of optimising our offer.

Google Analytics

For the needs-based configuration of our websites we are using the web-analyse tool „Google Analytics“. Google Analytics is generating user profiles on the basis of pseudonymes. Concerning this, permanent Cookies are stored on your terminal and are selected by us. In this way we are able to recognise recurring visitors and to count them as such.

Within the frame of Google Analytics we are supported by Google Ireland Limited as the order processor according to article 28 GDPR. The data processing can take place also in the USA and therefore outside the EU respectively the EWR. Due to the processing in the USA an appropriate data-security-level cannot be assumed. There is the risk that authorities are able to access data for security- and surveillance purposes without informing you or the possibility  to lodge an appeal. Please be aware of this if you decide to hand your acceptance in our usage of Google Analytics.

With the Cookies of Google Analytics we made sure that the last digits of your IP-adress will be masked and deleted before they are transmitted to Google. Therefore Google will receive just pseudonymised IP-addresses for the implementation of the analyse-functionalities.

As far as you handed your acceptance by our banner the data-processing will take place according to § 25 section 1 TTDSG (acceptance for the setting or the selecting of Cookies) i.V.m. Article 6 section 1 page 1 lit. a ) GDPR ( acceptance for the thereto drawing data-processing).

You can disconfirm your acceptance at any time. To do this, click on the "Change settings" link in the "Privacy settings" area on the right and select the appropriate setting.

Tracking-technologies of third party suppliers for advertisement purposes

We are using cross-device tracking-technologies so that you can be shown targeted advertisement on other websites based on your visit of our websites and to recognise how efficient our advertisement-measures are.

The data processing takes place on the basis of your acceptance as far as you handed your acceptance through our banner. Your acceptance is voluntarily and can be reconfirmed at any time.

The data processing takes place as far as you handed your acceptance through our banner, according to §25 section 1 TTDSG ( acceptance of setting or selecting of the Cookies) i. V. m. Article 6 section 1 page 1 lit. a) GDPR (acceptance of the thereto drawing data-processing). The transfer to a third country takes place on the basis of article 49 section1 lit. a GDPR.

You can disconfirm your acceptance at any time. To do this, click on the "Change settings" link in the "Privacy settings" area on the right and select the appropriate setting.

How does the tracking works?

If you are visiting our websites, it is possible that the below mentioned third party suppliers will obtain recognizability-characteristics for your browser or terminal ( for example a so-called browser-fingerprint), evaluate your IP-address, store and/or select recognizability-characteristics on your terminal ( for example Cookies) or will get access to individual tracking-pixels.

The individual characteristics can be used by the third party suppliers to recognise your terminal on other internet sites. We can order the circuit of advertisement at the corresponding third party suppliers which is determined by the visited sites on our website. 

What is the meaning of cross-device tracking?

As far as you are enroling with your own login-data at the third party supplier, the corresponding recognizability-characteristics of the various browsers and terminals can be linked with each other.

As soon as you are using a service of a third party supplier by your login-data and the third party supplier is generating an each separate characteristic for a laptop, desktop-pc, smartphone or tablet, these separate characteristics can be assigned with each other. In this way the third party supplier is able to operate our promotion-campaigns targeted also away different terminals.

Which third party suppliers do we use in this frame?

Following we will mention the third party suppliers with whome we are working together for advertisement-purposes. Insofar the data in this frame will be processed outside the EU respectively the EWR, please notice,  there is a risk that authorities can access data for security- and surveillance purposes without informing you or the possibility to lodge an appeal. Insofar we are applying suppliers in insecure third countries and you are agreeing, the conveyance to a third country takes place on the basis of article 49 section 1 lit. a GDPR.

Supplier

Appropriate level of data protectionPossibility to disconfirmation
Facebook ( USA and/or Ireland)No appropriate data-security-level. The transfer takes on the basis of article 49 section 1 lit. a GDPR.If you wish to withdraw your consent, please click on the "Change settings" link in the "Privacy settings" section on the right and change your settings accordingly.

Anonymised visitor-measurement

Additionally we make an anonymised visitor-measurement on our websites. Hereto the protocol-data of the webserver as well as the shortened IP-address will be evaluated. Drawing conclusions about your person are not possible.

Contact via live chat application

On our website, we offer you the opportunity to contact us directly via chat in order to address your concerns individually. Here, the messages that you exchange with us are processed. The transmission of this data is encrypted via TLS (https) to our servers, so that third parties cannot read this data. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f DSGVO. If you do not wish your data to be processed further, please inform our staff.

To enable us to differentiate between multiple chat sessions, we use cookies. This allows us to ensure that you can continue your chat even if you open other windows on our site or switch from the current page to another page with us. For the technical provision of the live chat, we use a service provider strictly bound by instructions (INEXSO GmbH, based in Germany), with whom we have concluded an order processing contract.

The chat history is stored for a period of 3 months. The chat history can be stored longer if this is necessary for further processing or you consent. In this case, however, we will ask you for your customer number or your e-mail address for further communication, for example.. 

Embedded videos

We are embedding videos on our websites which are not stored on our servers. So that the invocation of our websites with embedded videos does not automatically cause to a download of contents by the third party supplier, as a first step we are showing just local stored thumbnails of the videos. Through this the third party supplier does not receive information. Just after a cklick on the thumbnail contents of the third party supplier will be downloaded. Through this the third party supplier gets the information that you had accessed our site as well as the usage-data which is  necessary in a technical way in this frame. Furthermore the third party supplier is able to implement tracking-technologies.

We do not have an effect on the further data-processing by the third party supplier. With the click on the thumbnail you give us your acceptance to download contents of the third party supplier. The embedding takes place on the basis of your acceptance according to article 6 section1 page 1 lit. a GDPR respectively §25 section 1 TTDSG, as far as you had given your acceptance through a click on the thumbnail before. Please notice, that the embedding of many videos causes a processing of your data outside the EU respectively the EWR. In some countries there is the risk that authorities will access data for security- or surveillance purposes without informing you or the possibility to lodge an appeal. As far as we are applying suppliers in insecure third countries and you give your acceptance, the conveyance to an insecure third country takes place on the basis of article 49 section 1 lit. a GDPR.

Supplier

Appropriate level of data protectionPossibility to disconfirmation
YouTube/Google (USA)No appropriate data-security-level. The transfer takes on the basis of article 49 section 1 lit. a GDPR.Once you have clicked on a preview image, the third-party content is immediately reloaded. If you do not want such reloading on other pages, please do not click the thumbnails anymore.


Map Services

On our websites we are embedding map services which are not stored on our servers. So that the invocation of our websites does not automatically leads to a download of the contents of third party suppliers, as a first step we are just showing local stored thumbnails of the maps. Through this the third party supplier does not get information. 

Not until a click on the thumbnail contents of the third party supplier will be downloaded. Through this the third party supplier gets the information that you have accessed our site as well as the in this frame necessary technical usage data, We have no effect on the further data processing of the third party supplier. With the click on the thumbnail you give us the acceptance for downloading contents of the third party supplier.

The embedding takes place due to your acceptance according to article 6 section2 lit. a GDPR respectively §25 section 1 TTDSG, as far as you had given your acceptance by a click on the thumbnail before. 

Please notice that the embedding of many does lead to a processing outside the EU respectively the EWR. In some countries there is the risk that authorities will access data for security- and surveillance purposes without informing you or the possibility to lodge an appeal. Insofar we are applying suppliers in insecure third countries and you give your acceptance, the conveyance to an insecure third country takes place on the basis of article 49 section 1 lit. a GDPR.

Supplier

Appropriate level of data protectionPossibility to disconfirmation
Google Ireland Limited/Google LLC (USA)No appropriate data-security-level. The transfer takes on the basis of article 49 section 1 lit. a GDPR.If you wish to withdraw your consent, please click on the "Change settings" link in the "Privacy settings" section on the right and change your settings accordingly.


Application for the Newsletter

The DJH Landesverband Rheinland e.V. offers the possibility to order an e-mail-newsletter. If you  are registering through the input mask, your personal data (name, address, email-address) which you will state with the newsletter application will be conveyed and stored with the person in charge  for the proceeding. The newsletter can be received by the concerned person principally if (1) the concerned person disposes of a valid email-address and (2) the concerned person will register for the newsletter dispatch. For legal reasons, a confirmation email will be dispatched with the double-opt-in procedure to the -for the first time- registered email-address of the concerned person. This confirmation email serves the verification if the owner of the email-address has authorised the receipt of the newsletter as the concerned person.

For the dispatch of the newsletter we are using rapidmail GmbH, Wentzingerstrasse 21, 79106 Freiburg im Breisgau as the service provider. They are strictly bounded by instructions towards us and are respectively contractual bound.

Legal basis for the dispatch of the newsletter is your explicit acceptance according to article 6 section 1 page 1 lit. a GDPR. You can disconform your acceptance at any time. You can receive an uncomplicated possibility for a revocation for example by the concellation link available in every newsletter. With a message to the DJH Landesverband Rheinland e.V. Düsseldorfer Str.1a, 40545 Düsseldorf, phone: 0211 30263026, email: service@djh-rheinland.de you can object the usage or processing of your data for the purposes of advertisement, marketing- or opinion research and are able to cancel the newsletter at any time costfree.

In the frame of the newsletter application we will store data beyond the already mentioned data, as long as this data is necessary to attest that you have ordered our newsletter. This can contain the storage of the entire IP-address at the point in time of the order respectively the confirmation of the newsletter, as well as a copy of the confirmation-mail conveyed by us.The corresponding data processing takes place on the basis of article 6 section1 page 1 lit. f GDPR and takes place in the interest of giving an account of the dispatch of the newsletter.

The data will be deleted as soon as it is no longer necessary for the attainment of the purpose of its elicitation. Therefore the email address of the user will be stored as long as the subscription of the newsletter is active.

Newsletter-Tracking / Data-Analyse by rapidmail

The newsletter of the DJH Landesverband Rheinland e.V. contents so-called tracking pixel which are connecting themselves with the servers from rapidmail while opening up. Tracking pixels are miniature graphics which are embedded in such emails, who are send in the HTML-format to enable a logfile-analyse and a logfile-recording. Through this a statistic evaluation of the success or failure of the online-marketing-campaigns can be implemented. By means of the embedded tracking pixel the DJH Landesverband Rheinland e.V. is able to recognise, if and when an email was opened by the concerned person and which links, included in the email, were viewed by the concerned person.

Please abstract particulars from the data protection information of rapidmail: https://www.rapidmail.de/dsgvo-konformes-email-marketing. Please abstract particulars of the analyse-functions of rapidmail from the following link: https://www.rapidmail.de/wissen-und-hilfe.

Legal basis for the data-processing is article 6 section 1lit. a) GDPR. If you don`t want an analyse by rapidmail you have to cancel the newsletter. Hereto we are allocating a corresponding link in every newsletter-message.

The for your part at us in the frame of the acceptance for the purpose of the newsletter stored data will be stored by us until your removal from the newsletter and will be deleted both from our servers and the servers from rapidmail after the cancellation of the newsletter. Data which was stored at us for other purposes ( for example email addresses for the member area) will stay inviolated by this.

Prize Game

We will use particulars you had made in the frame of prize games to determine and contact the winners (article 6 section 1 lit. b GDPR). The winners will be informed in written form. Additionally we are processing your name and address according to article 6 section 1 lit. f GDPR, to inform you postally about our offers ( based on the legitimate interest to promote our service). You can object the usage of your data for the advertising appeal ( contact details below under „your rights as a concerned person“) at any time. Your data will be deleted with the enforcement of the right of objection.

Online-Feedback

At a visit in one of our youth hostels, we are asking our guests after their departure if they would like to give us a short online-feedback concerning their stay. Hereto we are processing your name and email-address according to article 6 section 1 page 1 lit. a GDPR. You can confirm your acceptance at any time ( for example sending a mail to service@djh-rheinland.de or postally: DJH Landesverband Rheinland e.V. Düsseldorfer Strasse 1a 40545 Düsseldorf). Data processing is lawful until you withdraw your consent. To response your comment, your name and email-address will be solely stored for this purpose. Naturally just anonymised feedback-data will be published on our website and no personal data. Your personal data will be stored in our feedback system for 6 months or until you withdraw your consent.

Implementation of surveys

Occasionally we are implementing surveys. For the implementation of our marketing research-projects we are using the tool Quantilope (https://www.quantilope.com/de) of the company Quantilope GmbH. Hereto we are using the at us deposited email-addresses from the survey. The surveys are implemented anonymised, so that no personal data will be processed at this.

The data processing takes place on the basis of article 6 section 1 lit. f GDPR. Our legitimate interest consists therein to adjust our offers better to the needs of our guests/members. You can object the usage of your data ( contact details below under „your rights as a concerned person“) at any time. Your data will be deleted with the enforcement of the right of objection.

You will find details about the data processing at quantilope under the Quantilope Privacy Policy.

Approach by email / contact form / verbally / postally

We will gather the necessary personal data ( name, prename, address, mail-address, phone-nr.- landline, mobile-) at a travel also from the with you travelling persons, date of birth respectively age and gender of all travelling persons and possibly data related to the payment handling ( for example bank data), correspondence data ( for example correspondence or email-messages with you), but also name/company of a corporation, an association, an institution possibly the membership-number. This takes place with your approach by email, through our contact form or if you will contact us verbal or postally concerning the request of documents or catalogues, the request of a stay in one of our houses or concerning a travel. We are processing this data to answer your request appropriate. The gathering and storage of this data takes place to identify you as a customer, to answer your questions or to process your catalogue-order or the booking of a travel. The data processing for the purpose of an approach takes place due to your contact-request and is necessary for the mentioned purposes for the appropriate processing of your request without engagement, catalogue-order or your booking request and for the bilateral compliance of liabilities mentioned in the travel contact. This takes place on the basis of article 6 section 1 page 1 lit. b GDPR.

Does the approach not takes place relating to a planned stay or a travel, we will process the data stated by you in the contact form or otherwise transmitted data on the basis of article 6 section 1 page 1 lit. f GDPR, to reply your request appropriate. Our legitimate interest exists primary in enabling you to a fast und uncomplicated approach and to process your request ; medium-termed also in the initiation of a contractual relationship. We are processing your name and address to inform you postally about new offers. Our legitimate interest lies in the increase of the offered travels, programmes and courses.

You have the possibility to communicate with us through our contact form. For the usage of our contact form we first at all need from you the as mandatory fields marked data. We are using this data on the basis of article 6 section 1 page 1 lit. f GDPR, to reply your approach.Beyond this, you can decide on your own if you like to impart further details. These indications take place voluntarily and are not stringently required for the approach. We are processing your voluntarily indications on the basis of your acceptance.

Your data will solely processed for the reply of your approach. If a DJH state association is able to reply your approach in a better way it can also be the recipient.

  • Landesverband Baden-Württemberg e.V. Fritz-Walter-Weg 19 70372 Stuttgart-Bad Canstatt
  • Landesverband Bayern e.V. Mauerkircherstrasse5 81679 München
  • Landesverband Berlin-Brandenburg e.V. Schulstrasse 9 14482 Potsdam-Babelsberg
  • Landesverband Hannover e.V.  Ferdinand-Wilhelm-Fricke-Weg 1 30169 Hannover
  • Landesverband Hessen e.V. Berner Str. 119 60437 Frankfurt am Main
  • Landesverband Mecklenburg-Vorpommern e.V. Konrad-Zuse-Str.2 18057 Rostock
  • Landesverband Nordmark e.V. Rennbahnstr. 100 22111 Hamburg
  • Landesverband Rheinland e.V. Düsseldorfer Str. 1a 40545 Düsseldorf
  • Die Jugendherbergen in Rheinland-Pfalz und im Saarland In der Meielache 1 55122 Mainz
  • Landesverband Sachsen e.V. Zschopauer Str. 216 09126 Chemnitz
  • Landesverband Sachsen-Anhalt e.V. Leiterstrasse 10 39104 Magdeburg
  • Landesverband Thüringen e.V. Zum Wilden Graben 12 99425 Weimar
  • Die Jugendherbergen gemeinnützige GmbH Woltmershauser Allee 8 28199 Bremen
  • DJH Landesverband Westfalen-Lippe gemeinnützige GmbH Eppenhauser Strasse 65 58093 Hagen

We will delete your data as far as it is no longer necessary and no legal duty to preserve records are opposed to.

The person in charge for the processing can cause the transfer to one or several order processors, for example a parcel delivery service, who will use the personal data also solely for an internal usage which is assigned to the person in charge for the processing.

Job applications

We are processing your personal data according to the valid legal data-protection terms on the basis of §26 BDSG. We will process the data, which you will reveal in the frame of your application, solely for the purpose of the candidate selection. A data processing for other reasons will not take place. You will determine the extent of the data you like to transfer to us in the frame of the application by yourself. Applications will be transferred electronically to our Human Resource and be fastest possible processed there.

Normally applications are transferred to the manager of the responsible departments in our house. Beyond that  a transfer of your data will not take place. Your indications will be handled confidential in our house. In the case of an unsuccessful application your documents will be deleted at the end of 3 months.

In case that we are authorized to consider your application also at other or future job adverts, we will gladly come up to you again. We will then process your data on the basis of article 6 section 1 lit. a) GDPR. You can disconfirm your acceptance at any time. The data processing is lawfully up to the revocation of your acceptance.

Data-Deletion and Storage Period

The entire personal data will be stored just as long as this is necessary for the mentioned purpose ( processing and handling) and for the fulfilling of the contract. We will delete your personal data as soon as the storage is no longer necessary, or limit the processing as far as no duty to preserve records ( article 6 section 1 lit. c GDPR) is existing. In any case the personal data – gathered by us- will be stored up to the expiration of the duty to preserve records and afterwards deleted unless we are obligated according to article 6 section 1 page 1 lit. c GDPR due to tax or commercial preserve and documentation duties ( from HGB, StGB, or AO) to a longer storage or you have accepted a longer storage according to article 6 section 1 page 1 lit a GDPR or if it is necessary for a fulfilling of a contract or a contractual initiation.

Data which we need for the handling of yet remaining tasks or need for the inforcement of our rights and claims is excepted from the deletion. In this case the data will be locked for a further usage.

With a message to service@djh-rheinland.de you are able to object the usage or processing of your data for the purpose of advertisement, marketing- or opinion research. 

Further order processors

We will pass your data in the frame of an order-processing according to article 28 GDPR to service providers which are supporting us with the running of our websites and the therewith connected processes. For example these are hosting-service providers. Our service providers are strictly bounded by instructions towards us and therefore contractual obliged.

Following we will mention the order processors with which we are working together as far as we did not already mentioned them in the text above. If in this frame data will be transferred to outside the EU respectively the EWR we will give information about the data protection level.

Order-processors

PurposeAppropriate level of data protection
Data center of the DJHWebhosting of the site www.jugendherberge.de/rheinland and support.Processing within EU/EWR
IONOS SEWebhosting of the site www.djh-rheinland.de and support.Processing within EU/EWR


Technical Standards- Saved Transfer

For safety reasons and for the protection of the transfer of confidential contents at the data-transfer- for example orderings or requests which you will send to us as the website operator- we are using the so-called SSL-Sicherheitssystem ( Secure Socket Layer), usually in connexion with a 256-bit-encryption. This technique is offering highest security and is therefore implemented for instance for the data-protection at the online-banking.

In the case of alterations the state of the art is adjusted ongoing. Nevertheless we like to point out that a comprehensive data-protection for the transfer of data inside the internet cannot be warranted with the current state of the art.

Your rights as a concerned person

The GDPR is warranting particular rights at the processing of your personal data for you as the concerned person

Right of information (article 15 GDPR)

You have the right to demand a confirmation if you concerning personal data is processed;  if this is the case then you have the right of information about these personal data and about the information achieved in particular in the article 15 GDPR.

Right of correction (article 16 GDPR)

You have the right to demand immediately the correction of you concerning incorrect personal data and possibly to demand the completion of incomplete data.

Right to erasure (article 17 GDPR)

You have the right to demand that you concerning personal data will be deleted immediately as far as one of the in article 17 GDPR  in particular achieved reasons applies.

Right of limitation of the processing (article 18 GDPR)

You have the right to demand the limitation of the processing if one of the in article 18 achieved preconditions is existing, for example if you had entered an objection to the processing, this takes place for the period of the review by the person in charge.

Right of data portability (article 20 GDPR)

In specific cases which are achieved in particular in article 20 GDPR, you have the right to receive the you concerning personal data in a structured, current and machine-parsable form respectively to demand the transfer of this data to a third party.

Right of revocation (article 7 GDPR)

As far as the processing of data takes place on the basis of your acceptance, you are legitimated on the basis of article 7 section 3 GDPR to reconfirm your acceptance to the usage of your personal data  at any time. Please notice that the revocation first takes place in the future. Processing which took place before the revocation is not effected. 

Right of objection (article 21 GDPR)

If data is gathered on the basis of article 6 section 1 page1 lit. f GDPR ( data processing for the protection of legitimate interests) or on the basis of article 6 section1 page 1 lit. e GDPR ( data processing for the protection of public interest or in practice of public authority), you have the right- based on reasons which are a result of your specific situation- to object the processing of your data at any time. We will no longer process the data unless verifiable compelling worth being protected reasons for the processing are existing, which are outweighing your interests, rights and liberties or if the processing serves for the enforcement, practice or defence of legitimate claims.

Please send your objection to service@djh-rheinland.de

Right of appeal at a regulating authority ( article77 GDPR)

According to article77 GDPR you have the right of an appeal at a regulating authority, if you consider that the processing of you concerning data is in violation of data protection legal terms. The right of appeal can especially be claimed at a regulating authority in the member state of your usual place of redidence, your worksite or the place of the suspected offence.

Enforcement of your rights

As long as nothing else was descripted foregoing please contact for your enforcement of your rights as a concerned person the section mentioned in the web imprint.

Contact details of the data protection official

datenschutz süd GmbH
Wörthstrasse 15
97082 Würzburg
email: office@datenschutz-sued.de

If you contact our data protection official please state also the responsible section mentioned in the site notice.

 

 

2. Membership

The precondition for an admission in a youth hostel always is the membership in the Deutsche Jugendherbergswerk or in the International Youth Hostel Federation ( IYHF).

Person in charge

Responsible for the data processing is the state association in which territorial jurisdiction the concerned person has his residence.

Data processing for the purpose of fulfilling a contract or the implementation of precontractual measures

We are processing the data, gathered with the membership application, according to article 6 section 1 lit. b GDPR for the purpose of fulfilling a contract or the implementation of precontractual measures (for example invoice of the membership dues, issuance of the international valid membership card)  , for the corespondance with you ( for example invitation for the members' meeting).

Especiall included is the following data: gender, name, address, date of birth, mail-address, details of partners and children ( gender, name, date of birth).

The membership-data will be stored at the central database at the DJH-Hauptverband, Leonardo-da-Vinci-Weg1, 32760 Detmold. Especially in accordance with the §§14, 14 UstG, §256 HGB, §147 AO, the data will bestored for the period of 10 years. In the case of the existing of legal deadlines for the preserve of records the concerned data will be stored for the period of these deadlines and will be locked for public access if it is  no longer needed for the fulfilling of contracts.

Data-processing on the basis of an acceptance

As far as you had voluntarily stated details (for example phone- or fax number) or had granted a separate acceptance for the dispatch of a newsletter, a respective processing on the basis of article 6 section 1 lit. a GDPR will take place. Your acceptance can be cancelled at any time without that this will affect the legitimacy of the so far happened processing. If your acceptance will be cancelled we will cease the respective data procession. Please send your revocation to: service@djh-rheinland.de

Data processing for the protection of the legitimate interests of the person in charge

We are processing your data according to article 6 section 1 lit. f GDPR as follows:

  1. we are processing your name and address to inform you postally about our new offers. Our legitmate interest lies in the increase of the utilization of our youth hostels and in the sales increase.
  2. We will use your name and email-address for the electronical advertisement of own similar products as far as we received them in connexion with your booking. Here also our legitimate interest lies in the increase of the utilization of the offered youth hostels and in the sales increase.

You can object the data processing at any time. By this no other costs will be incurred just costs for the conveyance according to the base rate. Your data will be deleted with the enforcement of the right of objection.

Data receiver

We will transfer your data solely to third persons if a permission for the conveyance ( especially according to the above mentioned legal provisions) is existing. If necessary personal data will only be passed to those companys which are involved in the liquidation of this contract, for example credit institutions for the payment handling, printing- and shipping provider, co-operation partner for the implementation of booked events etc.

With the gathering and processing of the foregoing mentioned purposes we are using the services of the Deutsche Jugendherbergswerk, Hauptverband for youth-hiking and youth hostels e.V. (Leonardo-da-Vinci-Weg 1 ,32760 Detmold) in the frame of an ordering-processing relationship in the sense of the article 28 GDPR.

Your data protection laws

In accordance with the corresponding regulation in the GDPR concerned persons have the right of information ( article 15) about them concerning personal data as well as the right of correction of incorrect data or of deletion ( article 16,17). Additionally the right of limitation of the processing ( article 18) and in the cases of article 20 GDPR the right of data portability is existing.

Objection

If data is processed on the basis of article 6 section 1 lit. f GDPR ( data processing for the protection of legitimate interests) the right appertains to the concerned person to object the processing at any time due to reasons of his particular situation.

We will then no longer process the personal data unless verifiable compelling worth being protected reasons are existing, which are overweighing the interests, rights and liberties of the concerned person or the processing serves the enforcement, practise or defense of titles.

In the case of advertisement per email you can object the data processing at any time without the existing of reasons.

Plese send your objection to: service@djh-rheinland.de 

Right of complaint at a regulating authority

According to article 77 GDPR you have the right of complaint at a regulating authority if you consider that the processing of you concerning data is against data protection regulations. The right of complaint can especially be claimed at a regulating authority in the memberstate of your usual residence, your worksite or the place of the suspected offense.

Contact details of the data protection official

datenschutz sued GmbH
Wörthstrasse 15
97082 Würzburg
email: office@datenschutz-sued.de

 

 

3. Booking requests and bookings

Person in charge

The German Youth Hostel Association, Landesverband Rheinland e.V., Düsseldorfer Str. 1a, 40545 Düsseldorf, Tel.: +49211-577030, e-mail: service@djh-rheinland.de is responsible for data processing. Data processing is carried out by the youth hostel where you have booked services and by the office of the responsible party.

Kind, purpose and legal basis of the data processing

We are processing the by the booking or booking request gathered data according to article 6 section 1 lit. b GDPR for the purpose of the fulfilling of the contract or the implementation of the pre-contractual measures. The data processing takes place by the youth hostel at which you had booked achievements as well as by the office of the person in charge.

We are processing the following personal data:

  • data of the person booking ( name, address, email-address, phone numbers -landline or mobile, DJH membership-number)
  • data of companions ( name, address, possibly email-address, phone numbers -landline or mobile-, DJH membership-number)
  • booking details ( number and age of the guests, period of booking, catering-details, choosed accomodation)
  • possibly bank details
  • possibly data for our fee-based offers ( benefits such as bedding, WLAN, leasure time offers) which you will embrace during your stay.

Legal basis of the processing is in each case article 6 section 1 lit. b GDPR ( for the fulfilling or implementation of pre-contractual measures). If the contract had been concluded with a juristic person or a facility ( for example society, school, daycare centre, authority, company) or the contract should be concluded in the future, the data of the contact person of the juristic person or the facility will be processed on the basis of article 6 section 1 lit. f GDPR. Our legitimate interest lies in the implementation of the contract with the juristic person or the facility which you belong to.

Furthermore we are processing specific categories of personal data ( for example information about a disability- here for the supplying of an appropriate room-, about allergies – here for the consideration at the preparing of the meals-). Legal basis of the processing of this data is article 9 section 2 lit. a GDPR ( acceptance). The acceptance can be disconfirmed at any time with an effect for the future. The processing tooked place remains lawful up to the revocation of the acceptance. Please send the revocation to: service@djh-rheinland.de

We are processing your name and address according to article 6 section lit. f GDPR to inform you postally about our offers (based on the legitimate interest to promote our services). You can object the processing of your data for a promotional appeal (contact details below under „Your data protection laws“) at any time. Your data will be deleted with the enforcement of your right to object.

As far as we received your email-address in the frame of a contractual relationship, we will use it to inform you about the same or similar products and offers. The advertisement takes place on the basis of our legitimate interest to increase the utilization of our youth hostels. You can object the usage of your email-address for the purpose of a promotional appeal at any time (contact details below under „your data protection laws“) without that other but the costs for the transmission will be occured. 

Transfer of data

We will transfer your data solely to third persons if a data-protectional transmission permission ( for example acceptance/fulfilling of a contract/legitimate interest) is existing. If neccesary, personal data will be transferred to those companys which are involved in the handling/fulfilling of this contract, for example credit institutes for the handling of payment, co-operation partner for the implementation of booked events.

With the data processing external service providers who are strictly bounded by instructions can be deployed. With them, contracts for the order-processing were concluded. Those are audited consistently by us. 

Implementation of surveys

Occasionally we are implementing surveys. For the implementation of our marketing research-projects we are using the tool Quantilope (https://www.quantilope.com/de) of the company Quantilope GmbH. Hereto we are using the at us deposited email-addresses from the survey. The surveys are implemented anonymised, so that no personal data will be processed at this.

The data processing takes place on the basis of article 6 section 1 lit. f GDPR. Our legitimate interest consists therein to adjust our offers better to the needs of our guests/members. You can object the usage of your data ( contact details below under „your rights as a concerned person“) at any time. Your data will be deleted with the enforcement of the right of objection.

You will find details about the data processing at quantilope under the Quantilope Privacy Policy.

Data deletion

We will delete your data if it is no longer necessary for the above mentioned purposes and no legal deadlines of preserving records ( especially from UStG, HGB and AO) are against the deletion. With booking details this is the case usually after 10 years.

Your data protection laws

In according to the corresponding regulation of the GDPR concerned persons have the right of information ( article 15) as well as the right of correction of incorrect data or deletion ( article 16,17). Additionally the right of limitation of the processing ( article 18) and in the cases of article 20 GDPR the right of data portability is existing.

Objection

If data is processed on the basis of article 6 section 1 lit. f GDPR ( data processing for the enforcement of legitimate interests) it appertains to the concerned person to enter an objection towards the processing for reasons which are a result of his specific situation.

We will then no longer process the personal data, unless verifiable compelling worth being protected reasons for the processing are existing which are overweighing the interests, rights or liberties of the concerned person or the processing serves the enforcement, practise or defense of legal claims.

In the case of advertisement by email you can object the data processing without reasons at any time.

Please send the objection to: service@djh-rheinland.de

Right of complaint at a regulating authority

Each concerned person has the right of complaint at a regulating authority if he/she considers that the processing of them concerning data is against data-protectional regulations. The right of complaint can especially be claimed at a regulating authority in the memberstate of the residence of the concerned person or the place of the suspected offense.

Contact details of the data protection official

datenschutz sued GmbH
Wörthstrasse 15
97082 Würzburg
email: office@datenschutz-sued.de