We are pleased that you are visiting our website www.rothenburg.de and your interest in our activities and offers. Despite careful control of the content, we assume no liability for external links to third-party content, since we did not initiate the transmission of this information, nor did we select or change the addressee of the transmitted information or the transmitted information. In addition, we cannot guarantee that the links shown (e.g. this data protection notice) are up-to-date and therefore functional.

The protection of your personal data during the collection, processing and use during your visit to our website is important to us and takes place within the framework of the statutory provisions, which you can find out about, for example, at https://www.bfdi.bund.de can inform.

1. Updating and changing this data protection notice

The following data protection notices are currently valid.

Due to the further development of our website and offers or due to changed legal or official requirements, it may become necessary to change this data protection notice.

2. data security

We endeavor to take all necessary technical and organizational security measures to store your personal data in such a way that they are not accessible to third parties or the public. If you want to contact us by e-mail, we would like to point out that the confidentiality of the information transmitted cannot be completely guaranteed with this communication channel. We therefore recommend that you only send us confidential information by post.

For security reasons and to protect the transmission of confidential content (e.g. orders or inquiries) that you send to us as the site operator, this site uses SSL or TLS encryption. If SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties. You can recognize such an encrypted connection by the address line of your browser, which changes from "http://" to "https://" and shows the lock symbol.

3. Name and contact details of the data controller

Large district town of Rothenburg ob der Tauber
Mayor
Dr. Markus Naser
Marktplatz 1
91541 Rothenburg ob der Tauber
Phone: 09861 404-100
Fax: 09861 404-109
E-Mail: stadt@rothenburg.de

4. Data Protection Officer

Official data protection officer of the person responsible (Art. 13 Para. 1 b GDPR)
Data protection officer for district municipalities
Landratsamt Ansbach
Subject area 25
Crailsheimstrasse 1
91522 Ansbach
Phone: 0981 468-2500
Fax: 0981 468-18 2519
Email: dsb-gemeinden@landratsamt-ansbach.de

List of processing activities and information in accordance with Art. 13 GDPR

In the following we explain what information we collect during your visit to our website and how it is used:

5. Collection and storage of personal data as well as the nature and purpose of their use

a) When visiting the website

If you only use our website for informational purposes, i.e. if you do not register or otherwise provide us with information, the Internet browser used on your device (computer, laptop, tablet, smartphone, etc.) will automatically send information to our server website sent. This information is temporarily stored in a so-called log file.

The following data is recorded without your intervention and stored until it is automatically deleted:

• The IP address
• Date and time of the request
• Time Zone Difference to Greenwich Mean Time (GMT)
• Content of the requirement (concrete page)
• Access Status / HTTP status code
• each transmitted amount of data
• Website from which the request comes
• Browser
• Operating system and its interface
• Language and version of the browser software
• Location Data, including location data from your mobile device. Please note that on most mobile devices you can control or disable the use of location services in the mobile device settings menu.

For reasons of technical security, in particular to prevent attempts to attack our web server, we store this data. After seven days at the latest, the data will be anonymized by shortening the IP address at domain level so that it is no longer possible to refer to individual users. This data collection takes place in accordance with Article 6 (1) sentence 1 lit. e) GDPR.

The data mentioned are processed for the aforementioned purposes by our web host (Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp on behalf of inixmedia GmbH, Liesenhörnweg 13, 24222 Schwentinental). Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.

b) When using our contact form

If you contact us by e-mail, by telephone or via our contact form, the data you provide (your e-mail address, your name and, if applicable, your telephone number) will be stored by us in order to answer your request. We delete the data arising in this context after the storage is no longer necessary, for example when your request has been dealt with. Otherwise, processing will be restricted if there are statutory retention requirements.

The legal basis for this is your consent in accordance with Article 6 Paragraph 1 Clause 1 Letter a) GDPR.

c) Registration on our website

You can register on our website to use the additional functions of the site. This function is advertising events, reporting address data or access to intranet sites for / in our region. For this purpose, events and related information can be published on our website after registration.

For registration, we ask for the following personal data:

Information that personally identifies you, such as name and email address, address and telephone number, other personal information that we are required or authorized by law to collect and process and that we use to authenticate you, identify you, or verify the information we have collected need.

We use the data entered for this purpose only for the purpose of this function for which you have registered. The mandatory information requested during registration must be given completely and truthfully. Otherwise we will refuse the registration.

For important changes, such as the scope of the offer or technically necessary changes, we use the e-mail address provided during registration to inform you accordingly.

The data entered during registration will be processed on the basis of your consent (Art. 6 Para. 1 S. 1 lit. a) GDPR). You can revoke any consent you have given at any time. An informal message by e-mail to us is sufficient. The legality of the data processing that has already taken place remains unaffected by the revocation.

The data collected during registration will be stored by us as long as you are registered on our website and will then be deleted. Statutory retention periods remain unaffected.

6. Data subject rights

Upon request, we will be happy to inform you whether and which personal data is stored about you (Art. 15 GDPR), in particular about the processing purposes, the category of personal data, the categories of recipients to whom your data was or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it was not collected from us, and the existence of automated decision-making including profiling.

You also have the right to have any incorrectly collected personal data corrected or to have incomplete data completed (Art. 16 GDPR).

Furthermore, you have the right to demand that we restrict the processing of your data, provided that the legal requirements for this are met (Article 18 GDPR).

You have the right to receive the personal data concerning you in a structured, common and machine-readable format or to request transmission to another person responsible (Article 20 GDPR).

In addition, you have the so-called "right to be forgotten", ie you can request us to delete your personal data if the legal requirements for this are met (Article 17 GDPR).

Irrespective of this, your personal data will be automatically deleted by us if the purpose of the data collection no longer applies or if the data processing has been carried out unlawfully.

If the processing of the personal data is based on a given consent, you have the right to revoke the consent at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the point of revocation.

You also have the right to object to the processing of your personal data at any time, provided that a right to object is provided for by law. In the event of an effective revocation, your personal data will also be automatically deleted by us (Article 21 GDPR).

To assert rights under data protection or if you have any questions about the use, collection or processing of your personal data, please contact: datenschutz@rothenburg.de

You also have, without prejudice to any other administrative or judicial remedy, the right to lodge a complaint under Art. 77 GDPR with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement, if the person concerned is of the opinion that the processing of the personal data concerning you violates this regulation. The addresses can be found below https://www.bfdi.bund.de.

Without prejudice to any available administrative or non-judicial remedy, including the right to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR, you have the right to an effective judicial remedy if you believe that the rights to which you are entitled under this Regulation are not processing of their personal data in accordance with this Regulation.

7. Telecommunications Telemedia Data Protection Act (TTDSG)

The legal basis for the storage and retrieval of information in the terminal device of the end user is the consent, according to § 25 Para. 1 S. 1 TTDSG. This consent is requested when the website is accessed. Pursuant to Section 25 (2) No. 2 TTDSG, consent is not required if the storage of information in the end user's terminal equipment or access to information already stored in the end user's terminal equipment is absolutely necessary so that the provider of a telemedia service can receive a expressly requested telemedia service. You can see in the cookie settings which cookies are to be classified as absolutely necessary (often also referred to as "technically necessary cookies"), therefore fall under the exception regulation of § 25 Para. 2 TTDSG and therefore do not require consent. Please note that the legal basis for the subsequent processing of personal data then results from the GDPR. The relevant legal bases for the processing of personal data on this website can be found in the further course of this data protection notice.

8. Disclosure of Personal Data

This notice applies to all services connected through order processing or options for integrating optional modules. A separate consent will be obtained if such is required.

Your data will not be transmitted to third parties for purposes other than those listed below.

We only pass on your data to third parties if:

You have given your express consent to this (Art. 6 Para. 1 S. 1 lit. a DSGVO), this is necessary for the processing of inquiries, administrative files or for the fulfillment of contracts with you (Art. 6 Para. 1 lit. b or Art. 6 Para. 1 S.1 lit e GDPR), this also includes inquiries on this website and the transfer of personal data to processors.

In these cases, however, the scope of the transmitted data is limited to the necessary minimum.

Our data protection regulations are in accordance with the applicable data protection regulations and the data will only be processed in the Federal Republic of Germany / European Union. A transfer to third countries does not take place and is not intended.

9. Cookies

In addition to the aforementioned data, cookies or similar technologies such as pixels (hereinafter referred to as "cookies") are used on your computer when you use and visit our website. Cookies are either small databases that are stored by your browser on your end device to store certain information, or image files such as pixels. The next time you visit our website with the same end device, the information stored in cookies is then sent back either to our website ("First Party Cookie") or to another website to which the cookie belongs ("Third Party Cookie").

Through the stored and returned information, the respective website recognizes that you have already accessed and visited it with the browser of your end device. We use this information to be able to optimally design and display the website according to your preferences. Only the cookie itself is identified on your end device. Any further storage of personal data will only take place with your express consent or if this is absolutely necessary in order to be able to use the service offered and accessed by you accordingly.

This website may use the following types of cookies, the scope and functionality of which are explained below:

• Strictly necessary cookies (type a)
• Functional and performance cookies (type b)
• Cookies requiring consent (type c)

Strictly necessary cookies (type a)

Strictly necessary cookies ensure functions without which you cannot use our websites as intended. These cookies are used exclusively by us and are therefore first party cookies. This means that all information stored in the cookies is fed back to our website.

Absolutely necessary cookies are used, for example, to ensure that you, as a registered user, always remain logged in when accessing various subpages of our website and do not have to re-enter your login data every time you call up a new page.

The use of absolutely necessary cookies on our website is possible without your consent. For this reason, absolutely necessary cookies cannot be deactivated or activated individually. However, you always have the option of generally deactivating cookies in your browser (see below).

Functional and performance cookies (type b)

Functional cookies enable our website to save information that has already been provided (such as registered name or language selection) and to offer you improved and more personal functions based on this. These cookies only collect and store information that is anonymous, so they cannot track your movements on other websites.

Performance cookies collect information about how our websites are used in order to consequently improve their attractiveness, content and functionality. These cookies help us, for example, to determine whether and which sub-pages of our website are visited and what content users are particularly interested in. In detail, we record in particular the number of hits on a page, the number of sub-pages called up, the time spent on our website, the order of the pages visited, which search terms led you to us, the country, the region and, if necessary, the city , from which access is made, as well as the proportion of mobile devices that access our websites. We also record movements, "clicks" and scrolling with the computer mouse in order to understand which areas of our website are of particular interest to users. As a result, we can tailor the content of our website to the needs of our users and optimize our offer. The IP address of your computer transmitted for technical reasons is automatically anonymized and does not allow us to draw any conclusions about the individual user.

You can object to the use of functional and performance cookies at any time by adjusting your cookie settings accordingly.

Legal basis: Article 6 (1) (e) GDPR

Cookies requiring consent (type c)

Cookies that are neither absolutely necessary (type a) nor functional or performance cookies (type b) are only used after your consent.

Marketing cookies come from external advertising companies (third party cookies) and are used to collect information about the websites visited by the user in order to create target group-oriented advertising for the user.

Legal basis: Article 6 (1) (a) GDPR

Management and deletion of all cookies

In addition, you can set your Internet browser so that the storage of cookies is generally prevented on your end device or you are asked each time whether you agree to the setting of cookies. Once cookies have been set, you can also delete them at any time. You can find out how all this works in detail in the help function of your browser.

We use the cookies described here for the following purposes:

Strictly necessary cookies

Functional and performance cookies

10. Maps

a) OpenStreetMaps (map)

We use the open source map service "OpenStreetMaps" (also called "OSM") from the company OpenStreetMap Foundation, 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom to display geo-data.

OSM serves to offer an interactive map on our website that shows you how to find and reach us. This service enables us to present our website in an appealing way by loading map material from an external server. The following data is transmitted to the OSM servers when it is displayed: The information on our website that you have visited and the IP address of your end device.

To protect your rights and personal data, we have integrated OSM with a so-called two-click solution, which only transmits data to OSM after you have explicitly activated the function.

The legal basis for the processing of your data in relation to the "OSM" service is Art. 6 Para. 1 S. 1 Letter a) GDPR.

More information on handling user data can be found in OSM's data protection declaration: https://wiki.osmfoundation.org/wiki/Privacy_Policy

b) Google Maps (route planner)

On our website we use Google Maps for route planning (“route planner”) and if you use the service to display our location and to create directions. This is a service provided by Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".

The integration can be implemented as a link (geo-data with location to activate a Google Maps service) or as a map, which is integrated into the page.

In order to protect your rights and personal data, we have integrated Google Maps with a so-called API in the second case just mentioned, which only transmits data to Google after you have explicitly activated the map function.

Insofar as you access the Google Maps component integrated in our website, Google will store a cookie on your device via your Internet browser. To view our location and provide directions, your user settings and data are processed. Here we can not rule out that Google uses servers in the United States.

Google's connection to Google enables it to determine from which website your request has been sent and to which IP address the directions are to be transmitted.

In addition, the use of Google Maps and the information obtained via Google Maps is based on the Google Terms of Use policies.google.com/terms?gl=DE&hl=de and the Google Maps Terms of Service google.com/intl/de_de/help/terms_maps.html.

Moreover, Google offers below adssettings.google.com/authenticated and policies.google.com/privacy further information.

If the standard contractual clauses are not sufficient to establish an adequate level of security, your consent can serve as the legal basis for transmission to third countries in accordance with Article 49 (1) (a) GDPR.

The legal basis here is Art. 6 (1) (a) GDPR.

11. Videos (YouTube and Vimeo)

a) YouTube

We have integrated videos from the provider YouTube, Google Ireland Limited Gordon House, Barrow Street Dublin 4. Ireland, into our online offer https://www.youtube.com are stored and which can be played directly from our website. We have no influence on this data transmission. The purpose of the processing is marketing backgrounds.

By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in YouTube's data protection information. There you will also find further information on your rights and setting options to protect your privacy:

policies.google.com/privacy

In order to establish an adequate level of security, your consent can serve as the legal basis for transmission to third countries in accordance with Article 49 (1) (a) GDPR.

To protect your rights and personal data, we have integrated YouTube with a so-called two-click solution, which only transmits data to Google after you have explicitly activated the video function.

Furthermore, Google offers a number of options to object to the collection of personal data by Google:

policies.google.com/privacy#infochoices

Legal basis: Article 6 (1) (a) GDPR.

b) Vimeo

Provider for video hosting on Vimeo is: Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. A connection to the Vimeo servers is established. The Vimeo server is informed which of our pages you have visited. In addition, Vimeo obtains your IP address. This also applies if you are not logged into Vimeo or do not have a Vimeo account. The information collected by Vimeo is transmitted to the Vimeo server in the USA. If you are logged into your Vimeo account, you enable Vimeo to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your Vimeo account.

In order to establish an adequate level of security, your consent can serve as the legal basis for transmission to third countries in accordance with Article 49 (1) (a) GDPR.

To protect your rights and personal data, we have integrated Vimeo with a so-called two-click solution, which only transmits data to Vimeo after you have explicitly activated the video function.

Further information on handling user data can be found in Vimeo's data protection information at: vimeo.com/features/video-privacy.

The legal basis here is Art. 6 Para. 1 lit.a) GDPR.

12. Analysis Tools

The tracking measures we use are carried out on the basis of Article 6 Paragraph 1 Sentence 1 Letter a GDPR, your consent.

With the tracking measures used, we want to ensure a needs-based design and the continuous optimization of our website. On the other hand, we use the tracking measures to statistically record the use of our website and for the purpose of evaluating and optimizing our Internet presence.

Use of Matomo

With your consent, we use the open source software Matomo from ePrivacy Holding, without transmitting data to the company, for the statistical evaluation of user access and the click and surfing behavior of visitors to our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user.

Matomo creates cookies on your computer. The information contained in the cookies - for example time, place and frequency of your website visit including your IP address - is not transmitted to the Matomo server. Your IP address is immediately anonymized during this process, so that you as a user remain anonymous to us. The information contained in the cookie about your use of this website will not be passed on to third parties. You can prevent the installation of cookies by setting your browser software accordingly; we would like to point out to you however that in this case you can if applicable not use all functions of our website in full.

Legal basis: Article 6 (a) GDPR

13. Google Translate

Google Translate is a third-party provider (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) that automatically translates the content. We have no influence on the translation quality. Sometimes the translations generated by Google Translate do not match the original content. They can contain incorrect information and also offensive language. We do not guarantee that the translated content is correct, reliable or up-to-date. A liability claim for any damage incurred does not exist. There is also no guarantee that the content will be fully translated - so it may be possible that some elements, applications and files (e.g. PDFs, images, graphics, etc.) cannot be translated.

By using Google Translate, data is transmitted to Google. By default, Google Translate is not active. This only happens once you have clicked on a language. You then leave the website and retrieve content from Google servers. If you do not want your data to be transmitted to Google, close the language selection window by clicking on "Close".

To protect your rights and personal data, we have provided Google Translate with a so-called two-click solution, which only transmits data to Google after you have explicitly activated the translation function.

Google collects, stores and processes information in order to provide users with better services. This includes, for example, the language used, but also includes the entire surfing behavior. In addition to the URL of the page visited, your IP address is also transmitted. We have no influence whatsoever on the data collected and data processing operations by Google.

You can find more information in the data protection notices of Google, Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA: https://policies.google.com/privacy?hl=de

The option on this site to make online bookings of accommodation and experience offers is provided and operated by our cooperation partner, OBS OnlineBuchungService GmbH, which acts as an intermediary for bookings between the customer and the respective service provider:

OBS OnlineBookingService GmbH
In the D33 business park, 93059 Regensburg
Tel 0941/46374855, Fax 0941/46374859
www.online-buchung-service.de

Managing Director: Magdalena Lexa, Dr. Michael Brown
HRB Regensburg 10880 / VAT identification number: DE 260130012