1. Data Controller / Responsible for Data Processing
The data controller responsible for data processing in accordance with the provisions of the General Data Protection Regulation (GDPR) is:
Jürgen Czielinski
Anton-Reuter-Str, 6
56072 Koblenz
Tel.: 015153282843
Web: www.koblenz-identity.de 
E-Mail: info@koblenz-identity.de 

2. General Information on Data Processing
In the course of our business and website operations, we process data. This also includes disclosure by transfer to third parties and, where applicable, to so-called third countries outside the European Union ("EU") and the European Economic Area ("EEA"). Where we transfer data outside the EU or the EEA, we have indicated this accordingly below.

3. Data Processing 
The specific data concerned, processing purposes, legal bases, recipients and, where applicable, transfers to third countries are listed in the following table:

a) Log file when visiting the website
We log your website visit. In doing so, we process: 

Name(s) of our accessed website(s), 

• Date and time of retrieval, 
• the amount of data transferred, 
• the browser type and version, 
• the operating system you are using, 
• the referrer URL (the previously visited website), 
• Your IP address, 
• the requesting provider. 

The legal basis for data processing is, in accordance with Art. 6 para. 1 f) GDPR, our overriding legitimate interest in the continuous provision and security of our website.

b) Hosting
To provide our app, we use services from web hosting providers who process the above-mentioned data and all data to be processed in connection with the operation of this app on our behalf.
The legal basis for data processing is, in accordance with Art. 6 para. 1 f) GDPR, our overriding legitimate interest in providing our website.

c) Contacting
us: If you contact us, we will process the following data from you for the purpose of processing and handling your request: name, contact details - if provided by you - and your message.
The legal basis for data processing is our obligation to fulfill the contract and/or our pre-contractual obligations pursuant to Art. 6 para. 1 b) GDPR and/or our overriding legitimate interest in processing your request pursuant to Art. 6 para. 1 f) GDPR.

d) Use of cookies
We use so-called cookies on our website. Cookies are small text files that are placed on your respective device (PC, smartphone, tablet, etc.) and stored by your browser.

Information about the specific cookies we use, their providers, and their purposes can be found in our consent banner. There you can give your consent to the respective services, revoke it, or adjust your settings later using the button in the bottom right corner of each page. 

To document your choices regarding specific data processing activities and to comply with our data protection obligations, we use a consent banner. When you visit our website, your cookie preferences are requested via a banner. We then set a cookie that stores data about granted or withdrawn consent. This data processing is carried out to fulfill our legal obligations under Article 6(1)(c) GDPR.

e) Processing and execution of guided tour contracts.
As part of our service offering, we process your data for the initiation (reservation) and execution (booking) of the future or existing contractual relationship between you and us. We require the following data for your booking or reservation: address of the person making the booking or reservation; email address; credit card details and/or bank account information. Reservation requests and bookings can be made via our website.

The legal basis for data processing is, according to Art. 6 para. 1 b) GDPR, the fulfillment of our contractual obligations and, in individual cases, the fulfillment of our legal obligations according to Art. 6 para. 1 c) GDPR.

We transmit your payment details (name, date of booking, payment method, amount and payee, possibly bank details or credit card details) to the payment service provider commissioned with processing the payment.

We only store personal data for as long as it is necessary for the purposes for which it is processed, or until you withdraw your consent. Where statutory retention obligations apply, the storage period for certain data may be up to 10 years, regardless of the processing purposes.

4. Data Retention Period
We store personal data only as long as it is necessary for the purposes for which it is processed or until you withdraw your consent. Where statutory retention obligations apply, the storage period for certain data may be up to 10 years, regardless of the processing purposes.

5. Your Data Subject Rights
a) Right of Access Upon request, you will receive information free of charge at any time about all personal data we have stored about you. 
b) Right to Rectification, Erasure, Restriction of Processing (Blocking), and Objection  If you no longer consent to the storage of your personal data or if it has become inaccurate, we will, upon your instruction, arrange for the erasure or blocking of your data or make the necessary corrections (to the extent permitted by applicable law). The same applies if you wish us to restrict the processing of your data in the future. You have the right to object, in particular, in cases where your data is required for the performance of a task carried out in the public interest or where the data processing is based on our legitimate interests, including profiling based thereon. You also have the right to object to data processing for direct marketing purposes. 
c) Right to Withdraw Consent with Future Effect You may withdraw any consent you have given at any time with effect for the future. Your withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.  
d) Data Portability If data processing is based on a contract, pre-contractual negotiations, consent, or automated procedures, you have the right to data portability. Upon request, we will provide you with your data in a commonly used, structured, and machine-readable format so that you can transmit the data to another controller if you wish. 
e) Restriction of Processing Data where we are unable to identify the data subject, e.g., if it has been anonymized for analytical purposes, is not covered by the aforementioned rights. Access, erasure, restriction of processing, rectification, or transfer to another company may be possible with regard to this data if you provide us with additional information that allows us to identify you. 
f) Exercising Your Data Subject Rights and Right to Lodge a Complaint If you have any questions about the processing of your personal data, or if you wish to request access, rectification, restriction of processing, object to processing, or erasure of your data, please contact Koblenz Identity.