Privacy Policy for Social Media

A. Data Controller

The data controller responsible for the processing of data on this website is Bayern Tourismus Marketing GmbH, represented by its managing director Barbara Radomski.

Bayern Tourismus Marketing GmbH
Arabellastraße 17
81925 München
Telefon: +49 (0) 89 212397-0
Telefax: +49 (0) 89 212397-99
E-Mail: tourismus@bayern.info

We have appointed the following entity as data protection officer:

c/o activeMind AG
Management- und Technologieberatung
Potsdamer Str. 3
80802 München
+49 89 919294-900
datenschutz@bayern.info

B. Data Subject Rights

You have the right to request the disclosure of information regarding any of your personal data held by us, as well as the correction, deletion or restricted processing of this data, if applicable. If necessary, you can also make use of your right of refusal or your right to data portability. You have the right to revoke your consent at any time without affecting the lawful compliance of any processing carried out on the basis of your consent until the point in time of revocation.

In addition, there is a right of appeal to a competent data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 Federal Data Protection Act [BDSG]). More information can be found at:  https://www.bfdi.bund.de/DE/Buerger/Inhalte/Allgemein/Datenschutz/BeschwerdeBeiDatenschutzbehoereden.html?nn=343502

In principle, you may assert your rights as a data subject both vis-a-vis us and vis-a-vis the operator of the respective social media channel.

Please note that we have no influence over the data processing performed by the individual social networks. The corporate policy of the respective provider has a significant influence on the options available to us. In the event of the assertion of data subject rights, we can only forward these requests to the social media network operator.

For more information on how you may assert your data subject rights under Chapter V of the GDPR vis-a-vis the social media channels used, please refer to the linked data use policies or privacy statements in the section for the respective providers.

C. Data Security

We only handle personal data insofar as this is possible in accordance with data protection regulations. We also take all necessary technical and organisational security measures to adequately protect your personal data from unauthorised access and misuse at all times.

Insofar as we store or process personal data, this is done within a high-security computer centre. In order to protect the security of your data during transmission, we use encryption methods (e.g. TSL) via HTTPS. Our servers are secured by firewall and virus protection. Back-up and recovery procedures, as well as role and authorisation concepts, are an essential part of everything we do.

Our employees are obligated to observe the regulations stipulated under the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) when handling data.

D. Social Media Channels

A simple link will take you from our website to our presences on social media. We operate the following social media channels:

Facebook and Instagram

We are present on the social networks Facebook and Instagram

These platforms are provided by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland. We maintain these Facebook/Instagram pages, in order to inform users and interested parties about Bavaria as a leisure and travel destination.

We cannot exclude the possibility that a transfer of data to a third country, e.g. to servers located in the USA, may take place when our company websites are accessed via these social networks.

If you have a Facebook/Instagram profile and are logged in, Meta can, for example, analyse your usage behaviour and create a usage profile corresponding to your usage behaviour. This user data is regularly processed for market research and (personalised) advertising purposes.

Further information on the collection and use of data, as well as your rights and protection options, can be found at https://facebook.com/about/privacy and https://instagram.com/about/legal/privacy/

Contact options via Facebook/Instagram

If you contact us via Facebook and Instagram using instant messaging services – such as Facebook Messenger – your username, the description of your request and other personal data transmitted will be stored. Should you make use of such contact options, you are informed and hereby agree that your data will also be processed in accordance with the data protection declaration in the respective current version of the respective provider.

YouTube

We are also represented on YouTube. YouTube is a service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”)).

We maintain this presence, in order to inspire users and those interested in the leisure and travel destination of Bavaria.

We cannot exclude the possibility that a transfer of your data to a third country, e.g. to servers located in the USA, takes place when our YouTube channel is accessed. Your visit to our website may thereby be tracked by YouTube.

By using YouTube, your personal data will be collected, transferred, stored, disclosed and used by Google. Google analyses your user behaviour, and creates a corresponding usage profile, regardless of whether you have a Google Account. This data can be used to tailor content or advertising to you.

Further information on the collection and use of data, as well as your rights and protection options, can be found at https://policies.google.com/technologies/product-privacy and https://policies.google.com/privacy

D.1. Legal Basis

The legal basis for our social media presence is based on Art. 6 (1) Sentence 1 lit. f) GDPR. Our legitimate interest arises from the promotional function of social media. We use this to raise the profile of our company.

Depending on the focus of the Lead Ad Campaign, the legal basis for data processing is either your express consent pursuant to Art. 6 (1) lit. a) GDPR (e.g. for direct advertising measures or for further information on our products), or our legitimate interest in the optimal marketing of our offer pursuant to Art. 6 (1) lit. f) GDPR. This data will not be passed on to third parties.

D.2. Revocation of Consent

We have obtained your consent in accordance with Art. 6 (1) lit. a) GDPR for the processing of your data as described above. You may revoke your consent at any time with effect for the future by deactivating the pixel tracking in the “Cookie Consent Tool” integrated on this website.

D.3. Contract Governing Shared Responsibility  

If you visit one of our social media sites, you trigger the processing of your personal data during such a visit. In this case, we are jointly responsible with the operator of the respective social network for the data processing operations within the meaning of Art. 26 GDPR, insofar as we actually make a joint decision with the operator of the social network regarding the data processing, and we also have an influence on the data processing. To the greatest extent possible, we have concluded contracts governing shared responsibility with the operators of the social networks in accordance with Art. 26 GDPR:

Facebook/Instagram

Meta acknowledges shared responsibility for Insights data with site operators and assumes primary responsibility, see: https://www.facebook.com/legal/terms/page_controller_addendum.

YouTube 

YouTube – as the platform operator – and we – as the operator of a channel located on the platform – are jointly responsible for the data processing carried out via the respective channel pursuant to Art. 26 GDPR. For further information, please refer to https://policies.google.com/privacy?hl=en

E. Amendment of our Data Protection Provisions 

We reserve the right to adapt this privacy policy to ensure that it always complies with prevailing legal requirements, or to implement changes in the privacy policy, e.g. when introducing new social media channels. The new privacy policy will then apply to your next visit.