We run our webpages in accordance with the following regulated principles:

We undertake to comply with the statutory regulations on data protection and always make every effort to take account of the principles of data avoidance and data minimisation.

Name and address of the party responsible for this website and the data protection officer

The party responsible for processing data on this website in line with the General Data Protection Regulation and other national data protection legislation of the member states of the European Union as well as other data protection regulations is:

Lohr a. Main Town Council
Represented by First Mayor Dr. Mario Paul
Schlossplatz 3
97816 Lohr a. Main Germany
Tel.: 09352/ 848 – 0
Fax: 09352/ 848 – 452
E-Mail: stadt@ lohr.de
Website: www.lohr.de

You can reach the data protection officer of the responsible party using the following contact details:

E-mail: datenschutz@ lohr.de
Tel: 09252/ 848 - 118

Explanation of terms
We have put together our data protection declaration in accordance with the principles of clarity and transparency. Should ambiguities nevertheless arise with regard to the use of different terms, the relevant definitions are to be found here [https://gdpr-info.eu/art-4-gdpr/].

Lawful basis for processing personal information

We process personal data, such as your surname and first name, your e-mail address and IP address, etc. only in so far as there is a lawful basis for doing so. Here, three lawful bases in particular apply for our data processing in accordance with the General Data Protection Regulation:

• You have given us your consent to the processing of your personal data for one or more purposes, pursuant to point (a) of Article 6, Paragraph 1 of the GDPR. In this connection we will provide you with detailed information on the purpose or purposes of the processing for which the personal data are intended and we will document your express consent.
• The processing of your personal data is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract with you, pursuant to point (b) of Article 6, Paragraph 1 of the GDPR.
• The processing of your personal information is necessary to safeguard our legitimate interests, in as far as these interests are not outweighed by your interests or basic rights and freedoms, pursuant to point (f) of Article 6, Paragraph 1 of the GDPR.

We will however always inform you again, at the time when personal data are obtained, of the legal basis for our processing of your personal information.

Disclosure of your personal data

Your personal data will not be disclosed to third parties for any purposes other than for the purposes listed below. We will only disclose your personal information to third parties if:
• You have given us your express consent to do so in accordance with point (a) of Article 6, Para. 1 of the GDPR;
• The disclosure is necessary in accordance with point (f) of Article 6, Paragraph 1 of the GDPR for the assertion, exercising or defence of legal claims and there is no reason to believe that you have an overriding and legitimate interest in your data not being disclosed;
• The disclosure is necessary to fulfil a legal obligation in accordance with point (c) of Article 6, Paragraph 1 of the GDPR;
• The disclosure is permitted by law and is necessary in accordance with point (b) of Article 6, Paragraph 1 of the GDPR for the settlement of contractual relationships with you.

Storage duration and erasure

We store all personal data you provide to us only for as long as they are required to fulfil the purposes for which they were provided, or for as long as this is stipulated by law. We delete or block the personal data once they have served their purpose and/or the storage deadlines stipulated by law have expired.

SSL encryption

This site uses SSL encryption for security reasons and for the protection of the transmission of confidential content, such as the enquiries you send to us as the site operator. You can recognise an encrypted connection in your browser’s address line when it changes from “http://” to “https://” and the lock icon is displayed in your browser’s address bar.
If the SSL encryption is activated, the data you transfer to us cannot be read by third parties.

Collection and storage of personal data and their type and the purpose of their use When you visit our website

When you visit our website, information is automatically sent by the browser used on your computer to the server of our website. This information is stored temporarily in a so-called log file. In the course of this procedure, the following information is collected, without any additional action on your part, and stored until an automatic deletion date:

• The IP address of the computer accessing the website
• The date and time of access
• The name and URL of the retrieved file
• The website from which the user accesses our website (referrer URL)
• The browser used and where applicable the operating system of your computer and the name of your access provider The listed data are processed by us for the following purposes:
• To ensure website access from the user’s computer
• To ensure the website’s functionality
• To evaluate and ensure the security and stability of our systems
• For other administrative purposes

Any data by which you could be personally identified, such as your IP address, for example, are deleted after no more than 7 days. Storage beyond this scope is possible. In this case, the data are pseudonymised so that they can no longer be attributed to you.

The legal basis for the data processing is point (f) of Article 6, Paragraph 1 of the GDPR. Our legitimate interest follows from the above listed purposes of the data collection. We do not under any circumstances use the data collected to draw conclusions about your person.

Newsletter
Content of the newsletter and registration details

We will only send you a newsletter if you have ordered it from us and given us your consent to the processing of your personal data in accordance with point (a) of Article 6, Paragraph 1 of the GDPR. The contents of the newsletter are described in concrete terms when you register for the newsletter. To register for the newsletter, all you need to do is enter your e-mail address. If you provide further details on a voluntary basis, such as your name and/or your sex, these will be used only for the purposes of personalising the newsletter we send you.

Double opt-in and logging

For security reasons, we use the so-called double opt-in system for registration for our newsletter, ensuring that no one can register with someone else’s e-mail address. When you register for our newsletter, you receive an e-mail asking you to confirm your registration. Only once you have done this does your registration take effect.

We also keep a log of your registration for the newsletter. The log records the time at which you signed up and the time you confirmed your registration, the data you provided, and your IP address. Any changes you make to your data are also logged.

Revocation

If you no longer wish to receive our newsletter, you can revoke your consent to receive it at any time with future effect. To do so, you can click on the link for cancelling the newsletter at the end of any newsletter, or send an e-mail to the following e-mail address: stadt@ lohr.de.

The legitimacy of any processing that has taken place based on your consent prior to the revocation of consent is not affected by the revocation of consent.

Creating an event

You can publish an event in the Events Calendar on our website. We will use the data you provide in this case in accordance with point (b) of Article 6, Paragraph 1 of the GDPR to publish your event.

Ordering brochures

We provide a form on our website through which you can order brochures. To use the form, you have to enter a form of address, your first name and surname, and an address to which we can send the brochures. We use this data solely for the purpose of sending you the brochures you have ordered, and do not disclose this data to third parties.

The data you provide is processed in accordance with points (b) and (f) of Article 6, Paragraph 1 of the GDPR in order to carry out pre-contractual measures in response to your request.

The requests and the associated data are deleted no later than 3 months after their receipt, in so far as they are not required for any further contractual relationship.

Use of Google Maps

Our website uses the Google Maps map service via an API. Through the use of Google Maps, information concerning your use of this website (including your IP address) may be sent to a Google server in the USA (Google Inc., 1600 Amphitheatre Parkway, Mountain View, California, 94043) and stored there.

Google may pass on the information gained through Maps to third parties, in as far as this is required by law or in so far as third parties process this data on behalf of Google. Under no circumstances however will your IP address be linked with any other data retrieved by Google. We must however point out that it would by all means be technically feasible for Google to identify individual users on the basis of the data obtained.

We have no influence on whether Google uses or processes your personal data and personal profile for other purposes. If you wish to be sure of preventing them from doing so, you can deactivate the Google Maps service and thus prevent the transfer of data to Google. To do so you just have to deactivate JavaScript in your browser. In this case no data will be transferred, but you will also not be able to use the maps feature on our website.

Google’s data protection declaration is to be found here. [https://www.google.com/policies/privacy/?hl=de]

The use of Google Maps on our website is intended to help you find your way around our town and where applicable with the planning of your visit. The use of Google Maps thus occurs on the basis of our legitimate interests pursuant to point (f) of Article 6, Paragraph 1 of the GDPR.

Cookies

Our website uses cookies. Cookies are small data packages that are created automatically by your browser and stored on your computer when you visit our website. These cookies serve to store information in association with the computer used, so that your browser is recognised when you next visit the site. It is not however possible to identify you personally through the cookies.

The data processed by cookies are required for the aforementioned purposes in order to safeguard our legitimate interests and those of third parties pursuant to point (f) of Article 6, Paragraph 1 of the GDPR.

Most browsers are pre-set to accept cookies automatically. You can however configure your browser to always reject cookies or to at least inform you when a cookie is about to be set so that you can decide on a case-by-case basis whether to accept or reject it. If you de-activate the cookie function in your browser completely, you may not be able to use all the functions on our website.

Below we explain the different types of cookies we use.

Session cookies

We use so-called session cookies to help make our website more user-friendly. These cookies recognise that you have visited individual pages on our website.

These session cookies are automatically deleted from your computer when you leave our website.

Temporary cookies

We also use cookies that permit us to recognise you when you re-visit our website and use our services. You thus do not have to re-enter the data and settings you put in on your previous visit.
These temporary cookies are stored for a specific period of time on your computer.

Cookies for marketing and optimisation purposes

We also use cookies for marketing and optimisation purposes. These generate statistical information about the use of our website and this is evaluated for the purpose of optimising our website for your use. The cookies allow your internet browser to be recognised when you re-visit our website.

These cookies are deleted automatically after a specific period of time.

Analysis and tracking tools

We use the analysis and tracking tools listed below on our website. These serve as a basis for the continual optimisation of our website and allow us to adapt it according to needs.

These interests constitute legitimate interests in the sense of point (f) of Article 6, Paragraph 1 of the GDPR. The respective purposes of the data processing and categories of data collected are stated in the information about the individual tools.

Matomo (formerly “Piwik”)

We use the analytics service Matomo (InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand). Matomo uses cookies. These are stored on your computer and allow us to analyse how you use our website.

The cookies generate website usage information and transfer this to our server, where it is stored for the purposes of analysing user behaviour and to help us to optimise our website. The website usage information includes your IP address, although this is shortened to anonymise it, and so that you as a user remain anonymous.

We do not disclose the information generated by the cookies about your use of this website to third parties. You can also prevent the use of cookies by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean that you will not be able to enjoy the full functionality of our website.

If you do not agree with the storage and use of your data, you can also disable this feature below at any time at the click of a mouse. In this case, a so-called opt-out cookie will be stored in your browser to prevent Matomo from storing your usage data.

Please note: If you delete your cookies, however, the opt-out cookie will also be deleted. You may thus need to reactivate the opt-out cookie when you next return to the site

Integration of videos Vimeo

Our website uses the plug-in Vimeo, operated by Vimeo, LLC (555 West 18th Street, New York, New York 10011).

As soon as you access one of our pages featuring this plug-in, a connection to Vimeo’s servers is automatically established. Though this connection, the Vimeo server receives information telling it which of our webpages you have visited. If you are logged in to your Vimeo account during the visit, Vimeo will immediately be able to assign your browsing behaviour, including information on the pages you visit and for example the start of a video, to your personal user account.

You can prevent this by logging out of your user account with Vimeo before visiting our website, and deleting the Vimeo cookies.

You will find further information on Vimeo’s data processing and privacy policy at vimeo.com/privacy.

The legal basis for the data processing is point (f) of Article 6, Paragraph 1 of the GDPR. The underlying promotional purpose constitutes a legitimate interest in the sense of the GDPR.

Rights of the person concerned

You have the following rights:

Right to information

In accordance with Article 15 of the GDPR, you have the right to request information on any personal data concerning your person that has been stored or processed on our servers. This right to information includes information on:

• The purposes for which personal data are processed
• The categories of personal data which are processed
• The recipients or categories of recipients to whom data concerning your person have been or will be disclosed
• The planned storage period or at least the criteria for determining the length of storage
• The existence of a right to rectification, erasure, restriction of processing or objection to such processing of your personal data
• The existence of a right of complaint to a supervising authority
• The origin of data related to your person, in as far as it has not been collected by us
• The existence of automated decision-making mechanisms, including profiling, and where applicable meaningful information on the details of these

Right to rectification

Pursuant to Article 16 of the GDPR, you have the right to obtain from us without undue delay rectification and/or completion of inaccurate personal data concerning your person.

Right to erasure

In accordance with Article 17 of the GDPR, you have the right to demand from us the immediate erasure of your personal data, to the extent that further processing is not required for one of the following reasons:

• For exercising the right of freedom of expression and information
• For compliance with a legal obligation that requires processing by European Union law or member state law to which the responsible party is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the responsible party
• For reasons of public interests in the area of public health in accordance with points (h) and (i) of Article 9, Paragraph 2, and Article 9, Paragraph 3 of the GDPR
• For archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89, Paragraph 1 of the GDPR, in so far as the right referred to in point (a) is likely to render impossible or seriously impair the achievement of the objectives of that processing
• For the establishment, exercise or defence of legal claims

Right to restriction of processing

Pursuant to Article 18 of the GDPR, you can demand the restriction of processing of your personal data where one of the following applies:
• You contest the accuracy of the personal data relating to your person.
• The processing is unlawful and you oppose the erasure of the personal data. • We no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims.
• You file an objection to processing pursuant to Article 21, Paragraph 1 of the GDPR.

Notification obligation

If you have asserted the right to rectification or erasure of your personal data or to restriction of processing in accordance with Article 16, Article 17 (1) and Article 18 of the GDPR, we will communicate this to all recipients to whom the data concerning your person were disclosed, unless this proves impossible or requires disproportionate effort. You are entitled to be informed by us about these recipients.

Right to data portability

You have the right to obtain the data which concerns your person and which you provided to us in a structured, conventional and machine-readable format. You also have the right to have this data transmitted to a third party, in as far as the processing is carried out by automated means and is based on consent pursuant to point (a) of Article 6 (1) or point (a) of Article 9 (2) or on a contract pursuant to point (b) of Article 6 (1) of the GDPR.

Right to revocation

Pursuant to Article 7 (3) of the GDPR, you have the right to revoke your consent at any time. The revocation of consent shall not affect the lawfulness of processing based on consent before its revocation. In future we are not permitted to continue the data processing that was based on your withdrawn consent.

Right to lodge a complaint

Pursuant to Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data infringes the GDPR.

Right to object

To the extent that the processing of your personal data is based on legitimate interests in accordance with point (f) of Article 6 (1) of the GDPR, you have the right, in accordance with Article 21 of the GDPR, for reasons arising from your particular situation or because the objection relates to the processing of your personal data for the purposes of direct marketing, to object to the processing of your personal data. In the latter case you have a general right of objection, which we will implement without specification of the particular situation. If you object to processing for purposes of direct marketing, we will no longer process your personal data for these purposes. If you wish to exercise your right to revoke consent or to object, you just have to send an e-mail to stadt@ lohr.de

Automated decision in individual cases, including profiling

You have the right not to be subjected to decisions which are based exclusively on automated processing - including profiling - and which have legal implications for you or similarly significantly affect you. This does not apply if the decision:

• Is necessary for conclusion or fulfilment of a contract between you and us
• Is permissible on the basis of the EU’s or a member state’s legislation to which we are subject, and this legislation contains appropriate measures to safeguard your rights and freedoms as well as your legitimate interests
• Is made with your explicit consent

However, these decisions must not be based on special categories of personal data pursuant to Article 9 (1) of the GDPR, unless point (a) or point (g) of Article 9 (2) applies and appropriate measures have been taken to protect your rights and freedoms as well as your legitimate interests.

With regard to the cases mentioned in (1) and (3), we will take appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, including at least the right to obtain human intervention from our side, to express your own point of view, and to contest the decision.

Changes to this data protection declaration

In the event that we make any changes to this data protection declaration, we will post the changes on the website.

Status 16.05.2018