With this Data Protection Notification the “Deutsche Jugendherbergswerk (DJH)“ informs you how personal data is processed with your enquiry by mail/by our contact form on this site or other written or telephonical approaches and which rights are due to concerned persons according to article 13 GDPR. It obtains in any case, that we will just gather, process and use your personal dataas far as this is permissible according to the Federal Data Protection Act and the GDPR.

1. Name and adress of the person in charge for the processing; operational data protection commissioner

Person in charge for the data processing -according to article 4 nr. 7 GDPR- is:

Deutsches Jugendherbergswerk
Landesverband Rheinland e. V.
Düsseldorfer Str. 1a
40545 Düsseldorf
e-mail: service@djh-rheinland.de
phone: 0211-577030
fax: 0211-579735
internet: rheinland.jugendherberge.de

The person in charge for the processing has implemented numerous technical and organisational measures to assure a prefarably gapless protection for the personal data processed by this site. Nevertheless, internet-based data transmission can show security gaps, so that an absolute protection cannot be guaranteed. For this reason, it is within your discretion to transport personal data to us on alternative ways, for example by phone.

The data protection commissioner of the person in charge for the processing is:

Datenschutz Süd GmbH
Wörthstr. 15
97082 Würzburg

You can contact our data protection commissioner at office@datenschutz-sued.de. Every concerned person can direct towards the commissioner with any questions on data protection at any time.

2. Personal data

Personal data is the entire information which refers to an identified or identifiable corporate entity (following mentioned as concerned person); a concerned person is considered as identifiable which can be identified – direct or indirect- especially by allocation to an identification such as a name, an identification number, to location-data, to an online-identification (for example Cookies) or to one or several characteristics which are an expression of the physical, physiological, genetic, psychic, economic, cultural or social identity of this concerned person.

3. Gathering and storage of personal data as well as way and purpose of its usage

With your approach by mail, by our contact form or if you contact us written or by post for a demand of documents or brochures, an enquiry for a stay in one of our houses or for a travel, we will gather the needed personal data ( name, prename, adress, mail-adress, phone-nr. - landline or mobile-. If its about a travel, we will also collect the personal data of fellow travellers, date of birth respectively age and gender of all travellers and – as appropriate- data related to the payment handling ( for example bank data), correspondence data ( for example correspondence or mail traffic with you), but also name/firm of a company, a club, an institution, as appropriate the membership-number. The gathering and storage of this data takes place to identify you as a customer, to answer your questions or to process your brochure-order or your booking of a travel. The data processing for the purpose of an approach with us takes place due to your approach and is needed – according to article 6 subparagraph 1 page 1 lit. b GDPR- for the mentioned purposes for the appropriate processing of your nonbinding enquiry, brochure-order or your booking enquiry and for the bilateral compliance of liabilities due to the travel contract.

The personal data, entered by the concerned person, is gathered and stored by the person in charge for the processing solely for the internal usage and for own purposes. The person in charge for the processing can prompt the transfer to one or several order processors, for example a parcel delivery company, who will use the personal data also solely for an internal usage which can be related to the person in charge for the processing. The person in charge for the processing will anytime furnish particulars to the concerned person about which personal data of the concerned person is stored. Furthermore, the person in charge for the processing will correct or delete personal data on request or advice of the concerned person, as long as no legal duty to preserve records is opposed. In this context, the entirety of the employees of the person in charge for the processing is at disposal for the concerned person as contact persons at service@djh-rheinland.de.

4. Data deletion and storage period

The entirety of the personal data is stored just as long as this is necessary for the mentioned purpose (processing of your enquiry or execution) and the compliance of the contract. We will delete your personal data when the storage is no longer needed or will restrict the processing as long as no duty to preserve records (article 6 subparagraph1 page 1 lit. c GDPR) is existing. In any case the personal data, gathered by us, will be stored until the expiration of the duty to preserve records and will be deleted routinely afterwards, unless we are obliged -according to article 6 subparagaph1 page1 lit. c GDPR- to a longer storage due to fiscal- or commercial duty of storage or documentation or you have consent a longer storage according to article 6 subparagraph1 page1 lit. a GDPR or if they are anew necessary for the fulfilment or the initiation of a contract.

Excluded from the deletion is data which we still need for the execution of outstanding tasks or for the enforcement of our rights and charges. In this case the data will be blocked for further usage.

With a message to service@djh-rheinland.de you can object the usage or processing of your data for the purpose of advertising, marketing- or attitude research.

If we will draw for separate functions of our offer on commissioned service providers or want to use your data for advertising purposes, we will inform you from digit 6 on -stated below- about the respective proceedings. Hereby we will also mention the defined criteria of the storage period.

If there is no legal basis existing for the processing of your personal data, we will seek a consent from the concerned person.

5. Your rights as a concerned person

Cancellation right: according to article 7 subparagraph3 GDPR you have

- the right to disconfirm your once confered consent to us. This implicates, that we shall not continue the data processing, based on this consent, in the future.

Right to information / further rights: according to article 15 GDPR you have

- the right to demand information on the personal data processed by us. You can especially demand information on the purposes of processing, the category of personal data, the categories of recipients towards who your personal data was or is published, the planned storage period, the existence of a right of correction, deletion, limitation of processing or objection, the existence of a right of complaint, the origin of your data as long as they were not gathered from us as well as the existence of an automatized decision-making inclusively profiling and - as appropriate- convincing information about their particulars.

Right of correction of incorrect data: according to article 16 GDPR you have

- the right to demand immediately the correction of incorrect data or the completion of your personal data stored by us.

Right of deletion: according to article 17 GDPR you have

- the right to demand the deletion of your personal data stored by us, as long as not the processing for exercising, the right of freedom of expression and information, for fulfilment of a legal obligation, for reasons of public interest or for the enforcement, exercise or defense of titles is necessary.

Right of limitation of the processing: according to article 18 GDPR you have

- the right to demand the limitation of the processing of your personal data as far as the veracity of the data is contradicted by you, the processing is unlawful but you refuse to delete the data and we don`t need the data anymore, but you need these for the enforcement, exercise or defense of titles or you have entered an objection against the processing according to article 21 GDPR.

Right of data portability: according to article 20 GDPR you have

- the right to receive the personal data, provided by you, in a structured, current and machine-parsable form or to demand the transmission to another person in charge.

Right of complaint: according to article 77 GDPR you have

- the right to complain about the processing of your personal data by us at a data controlling authority. Usually you can direct towards the controlling authority of your usual residence or working place or our office home ( regional commissioner of the data protection NRW, Kavalleriestr. 2-4, 40213 Düsseldorf).

Furthermore a right to information appertains to the concerned person, to know if personal data was transmitted to a third country or an international organisation. If this is the case, apart from that the right appertains to the concerned person to receive information on appropriate warranties related to the transmission. If a concerned person wants to utilise this right to information, he/she can direct towards an employee of the person in charge for the processing at any time.
 

Right of objection:

If your personal data is processed in accordance with justified interests according to article 6 subparagraph1 page 1 lit. f GDPR, you have the right to enter an objection against the processing of your personal data according to article 21 GDPR, as far as reasons are existing which are resulting from your special situation. With an E-mail to service@djh-rheinland.de

you can make use of your right of objection or contact us at the adress mentioned under digit1. We will than no longer process the personal data, if not verifiable worth being protected reasons for the processing are existing which will outweigh the interests, rights and liberties of the concerned person or the processing serves the enforcement, exercise or defense of titles.

If personal data is processed to practise direct advertising, you have the right to enter an objection against the processing of your personal data for the purpose of advertising, marketing- or attitude research anytime at service@djh-rheinland.de.

For the exercise of the prementioned rights as well as for further details, wishes or suggestions on the topic data protection, we are gladly available to customers at the above mentioned adress or at service@djh-rheinland.de.

6. Data transfer to third parties

A transfer of your personal data to third parties for other then the following listed purposes does not take place.

We will just transfer your personal data to third parties, if:

• you have granted your explicit consent according to article 6 subparagraph 1 page 1 lit. a GDPR,
• the transfer is – according to article 6 subparagraph 1 page 1 lit. f GDPR- needed for the purposes of enforcement, exercise or defense of titles and there is no reason to presump, that you have an outweighing worth being protected interest in the non-transfer of your data,
• for the case, that for the transfer – according to article 6 subparagraph 1 page 1 lit. c GDPR- a legal obligation does exist,
• for the case, that this is legal valid and – according to article 6 subparagraph 1 page 1 lit. b GDPR- necessary for the liquidation of contractual relationships with you.

Especially the transfer of data, such as for example name, adress, travel data, passport data and credit cards data takes place for the gathering, processing and implementation of your booking. Within this scope, we will for example transfer your data to separate youth hostels and service providers on-site. For the purpose of an order processing according to article 28 GDPR, we can transfer data to service providers who will support us with the running of our website and the herewith related processes.

7. Application for the Newsletter / subscription of the Newsletter

The DJH Landesverband Rheinland e.V. informs its customers at regular intervals with a Newsletter about the offers of the company and concedes the possibility to subscribe this Newsletter. If the customer registers himself by the input mask, his personal data ( name, adress, E-mail adress), which he will indicate with the Newsletter-enrolment, will be transfered to and stored by the person in charge for the processing. The Newsletter can basically just be received by the concerned person, if ( 1) the concerned person has a valid E-mail adress available and ( 2) the concerned person registers himself for the Newsletter-dispatch. For juridical reasons, a confirmation E-mail will be sent with the Double-Opt-In-Procedure to the E-mail adress, first-time enroled by the concerned person. This confirmation E-mail serves the verification, that the holder of the E-mail adress as a concerned person has authorised the receipt of the Newsletter.

Legal basis for the processing of the data after application for the Newsletter by the user is article 6 subparagraph 1 page 1 lit. f GDPR. The data will be deleted, as soon as they are no longer needed for the attainment of the purpose of their gathering. According to this, the E-mail adress of the user is stored as long as the Newsletter-subscription is active.

The personal data, collected within the scope of an application for the Newsletter, will solely be used for the dispatch of our Newsletter. Furthermore, subsribers of the Newsletter can be informed by mail as far as this is necessary for the running of the Newsletter-service or an enrolment regarding to this; this can be the case with alterations at the Newsletter-offer or with a change of the technical conditions.

The subscription of the Newsletter can be cancelled by the concerned person at anytime. In every Newsletter you will find a respective link for the purpose of a revocation. With a message to DJH Landesverband Rheinland e.V., Düsseldorfer Str. 1a, 40545 Düsseldorf, phone: 0211 30263026, e-mail: service@djh-rheinland.de, the customer can object the usage or processing of his data for the purpose of advertising, marketing- or attitude research and can unsubscribe the Newsletter costfree at any time. Furthermore, there`s the opportunity to unsub from the Newsletter-dispatch at any time also directly at the internet-site of the person in charge for the processing or to inform the person in charge for the processing on other ways.