Collecting your data serves to provide you with user-friendly, efficient and secure internet services. We use the collected and processed personal data in order to provide those users who are interested with information.
3.1 Informational Use of Our Website
You are free to visit our websites for informational reasons only without setting up an account. Only limited personal data will be processed to provide you with the website itself. If you subscribe to our newsletter, personal data will be processed in the scope of this service only.
3.2 Registration for Our Services
In order to be able to use all functions and services of the TouriSpo websites, you have to set up an account. With regard to the registration of an account and its subsequent use, we process information that is provided by registration, such as your name and email address. Therefor, we process information connected with an account sign-in facility, such as log-in and password details. Neither your email address nor your password will be disclosed to any third party.
3.3 Additional Account Information
You may want to add further personal data such as your address, your date of birth or other information regarding your person, voluntarily. As a standard feature, your adress is invisible to others. You have access to your account at any time to view your information and data open to other users, to alter or delete your personal data.
3.4 Entries and Comments
All your entries and comments are visible to both registered and non-registered users visiting the TouriSpo websites. Comments and entries will display your user name.
3.5 Protocol Data
While using our TouriSpo websites and services, data is stored for security purposes on our servers together with each of your accesses to our online platforms. Such data include your current IP address, the internet browser used, date, time, prior visited websites (“referrer ”). All of these data are transferred from your browser/computer to TouriSpo and are stored in so-called log files. The aforementioned protocol data is used pseudonymized to compile user profiles for the purpose of customized advertising, market research and configuration of all TouriSpo websites and services. User profiles created in this context are kept separately from your personal data.
In addition, we save these protocol data for reasons of data security in order to secure our systems and the therein saved data against unauthorized access and for cases giving reason to believe that a TouriSpo member account is used illegally and contrary to agreement, for instance, to commit crime such as incitement of the people (demagoguery) or depiction of violence (according to German law §§130, 131 StGB).
3.6 Cookies
TouriSpo uses cookies, which serve the user friendliness of our websites. What's more is these cookies serve the purpose of collecting statistical data on website use. Cookies are small text files that are stored on your hard drive providing us with specific information including information on your visit of your website. Some cookies will be deleted automatically from your terminal device as soon as you leave the website; these so-called “session cookies“ are used to ensure your connection with our website during your interaction with it as a TouriSpo member.
Other cookies will be stored for a specified period of time. These so-called persistent cookies are necessary in order to ensure automatic login features for your next session using the TouriSpo services. Most browsers can limit or prevent the storage of cookies. However, please keep in mind that the use and its convenience is limited without cookies.
3.7 Google Analytics
In order to ensure up-to-date content, the TouriSpo websites employ Google Analytics, which is a web-analysis tool provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (hereinafter referred to as “Google“). Google Analytics uses cookies that track your preferences during your visit to our websites, helping us to make our websites even more user-friendly. The data generated by these cookies are usually transferred and stored on a server in the United States.
IP Anonymization Information generated in this process, such as the IP address, is anonymized. Your IP address will be truncated within the area of member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases the whole IP address will be first transferred to a Google server in the United States and truncated there. The IP-address your browser conveys within the scope of Google Analytics will not be associated with any other data held by Google.
Browser Plugin You will always have the option of disabling cookies in your browser settings. However, please note that changing this setting may disrupt certain functions of our websites. Moreover, you are free to prevent Google's acquisition and processing of the information generated by the cookies by downloading and installing a browser plug-in available at the following link:
https://tools.google.com/dlpage/gaoptout/Opt-Out-CookieIn order to prevent your data from being used by Google Analytics, you can make use of the Google Analytics opt-out browser add-on for Google Analytics JavaScript. If you'd like to opt-out, download and install the add-on for your web browser by clicking on the following link:
Disable Google Analytics An opt-out cookie is set which prevents the collection of your data on future visits to this website. More information on how Google Analytics handles user data can be found in Google's privacy policy:
https://support.google.com/analytics/answer/6004245Data Processing AmendmentBeing a Google Analytics customer, we have a contract with Google regarding their data processing as part of the terms of service which is in line with the EU's General Data Protection Regulation (GDPR).
3.8 Social Media Plug-Ins
3.8.1 Facebook
We use plugins of the social networking site www.facebook.com provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook“). The plugins can be identified by one of Facebook’s logos (white “f” on blue tile or a “thumps-up”-sign). If a user visits one of the websites using such a plugin, the user’s browser directly connects to Facebook’s servers. The plugin and its content are made available directly on Facebook’s servers and included in the website by the user’s browser. Due to the integration of the plugin, Facebook collects the information that a user is visiting the corresponding website. If the user is logged in on Facebook at the moment he or she visits the website, Facebook may be able to connect the visit on the website to the user’s Facebook account. If the user interacts with the plugin – for example if he or she presses the like button or comments on something – the user’s browser transmits this information to Facebook. Facebook stores this information. If a user is not a member of Facebook, Facebook may collect and store the user’s IP-address. Facebook states that it only collects anonymized IP-addresses in Germany. If the user is a member of Facebook and does not wish Facebook to collect personal data via this website and to link this with their data stored on Facebook, the user needs to log off from Facebook before going to this website. So, transfer of personal data takes place whether you have an account with the provider or not.
Please note that we neither have the control of the extent of personal data that is collected by the respective plugin provider nor do we know the processing’s purpose or the period your personal data will be retained. Further information about the processing of your personal data in the provider’s course of operation is provided via their respective privacy policy. Moreover, you will be provided with further information with regard to your rights and settings concerning privacy:
https://www.facebook.com/about/privacy/. If you do not want Facebook to collect data about you via our websites and to link this directly with your data stored on your Facebook account, you need to log off from Facebook before going to our website.
3.8.3 Twitter
We use plugins of the social networking site www.twitter.com provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA (“Twitter“). The plugins can be identified by Twitter's logo (white bird on blue tile). If a user visits one of the websites using such a plugin, the user’s browser directly connects to Twitter's servers. The plugin and its content are made available directly on Twitter's servers included in the website by the user’s browser. Due to the integration of the plugin, Twitter collects the information that a user is visiting the corresponding website. If the user is logged in on Twitter at the moment he or she visits the website, Twitter may be able to connect the visit on the website to the user’s Twitter account. If the user interacts with the plugin – for example if he or she twitters something – the user’s browser transmits this information to Twitter. Twitter stores this information. If a user is not a member of Twitter, Twitter may collect and store the user’s IP-address. If the user is a member of Twitter and does not wish Twitter to collect personal data via this website and to link this with their data stored on Twitter, the user needs to log off from Twitter before going to this website. So, transfer of personal data takes place whether you have an account with the provider or not.
Please note that we neither have the control of the extent of personal data that is collected by the respective plugin provider nor do we know the processing’s purpose or the period your personal data will be retained. Further information about the processing of your personal data in the provider’s course of operation is provided via their respective privacy policy. Moreover, you will be provided with further information with regard to your rights and setting concerning privacy:
https://twitter.com/privacy. If you do not want Twitter to collect data about you via our websites and to link this directly with your data stored on your Twitter account, you need to log off from Twitter before going to our website.
3.8.4 Facebook Connect
You may want to login on TouriSpo with your Facebook account. This feature is called “Facebook Connect“ or “Login with Facebook“, which allows Facebook users to use their accounts to log in at or create accounts with other websites. When logging in with your Facebook account, Facebook gets access to some of your personal data and is free to store it. In turn, TouriSpo gets access to your email address, your name, and your profile picture as well as – in some cases – public profile information. If you do not agree to this data exchange between Facebook and TouriSpo, we recommend to not use Facebook Connect.
Further information about the processing of your personal data in the provider’s course of operation is provided via their respective privacy policy. Moreover, you will be provided with further information with regard to your rights and setting concerning privacy:
https://www.facebook.com/about/privacy.
3.8.5 Google+ Connect
You may want to login on TouriSpo with your Google+ account. This feature is called Google+ Connect, which allows Google+ users to use their accounts to log in at or create accounts with other websites. When logging in with your Google+ account, Google+ gets access to some of your personal data and is free to store it. In turn, TouriSpo gets access to your email address, your name, and your profile picture as well as – in some cases – public profile information. If you do not agree to this data exchange between Google+ and TouriSpo, we recommend to not use Google+ Connect.
Further information about the processing of your personal data in the provider’s course of operation is provided via their respective privacy policy. Moreover, you will be provided with further information with regard to your rights and setting concerning privacy:
https://policies.google.com/privacy.
3.8.6 Instagram
On our websites social plugins of the online service Instagram are applied, which are operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram“). The plugins can be identified by the Instagram logo, for example in form of an Instagram camera. If you request a page of our website, which contains such a plugin, your browser will connect directly to the servers of Instagram; the content of the plugin will be directly transmitted from Instagram to your browser and integrated into the page of the website. By integrating the plugin, Instagram obtains the information that your browser has accessed on the corresponding page of our website, even if you do not have an Instagram profile or if you are not logged into Instagram. This information (including your IP address) will be directly transferred to and stored on a server operated by Instagram in the United States. If you are logged in with Instagram, it will be able to assign your visit of our website to your Instagram account. If you interact with the plugins, such as pressing the Instagram camera button, the corresponding information will be sent directly to a server of Instagram and be stored there. The information is also posted on your Instagram account and can be seen by your followers.
For information on the purpose and extent of data capture and the further processing and use of data by Instagram as well as your rights in this regard and turn-off options for the protection of your personal privacy, please refer to the Instagram data protection information:
https://instagram.com/about/legal/privacy/. If you do not want Instagram to collect data about you via our websites and to link this directly with your data stored on your Instagram account, you need to log off from Instagram before going to our website.
3.9 YouTube
To incorporate videos, we use YouTube. You Tube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. YouTube is a platform that enables the playback of audio and video files.
If you do not want YouTube and thus Google to collect data about you via our internet website, you need to log out on YouTube before going to our website. Please find further information on data protection at YouTube/Google in its data protection declaration under:
https://policies.google.com/privacy.
3.10 Google Maps
On this website we use Google Maps, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (“Google“), which allows us to display interactive maps directly on the website and enables you to conveniently use the map function. Further information on the purpose and scope of data collection and the further processing and use of the data by Google as well as your rights in this regard and options for setting up your privacy can be found here:
Google Maps Additional Terms of Service 3.11 Thunderforest
On this website we use Thunderforest, operated by Gravitystorm Limited, 53 Ancaster Crescent, New Malden KT3 6BD, UK, which allows us to display interactive maps directly on the website and enables you to conveniently use the map function. Further information on the purpose and scope of data collection and the further processing and use of the data by Thunderforest as well as your rights in this regard and options for setting up your privacy can be found here:
https://www.thunderforest.com/privacy/ 3.12 Purpose of Data Collection
3.12.1 Using TouriSpo Services
In order to provide you with access to our TouriSpo services or data within our websites and applications as well as with access to the services of third parties, we collect information/personal data.
3.12.2 Newsletter
Our newsletter provides information about us as well as information on destinations and tourism services. If you would like to receive our newsletter, we need a valid email address from you. For the registration for our newsletter we make use of the so-called double opt-in process. This means that after your registration we will send you an email to the specified email address asking you to confirm that you would like to receive the newsletter. If you do not confirm your registration, you will not receive the newsletter. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible abuse of your personal data.
The only information needed in order to receive the newsletter is your email address. After your confirmation we will save your email address for the purpose of sending you the newsletter. Your email address will be stored until you decide to unsubscribe the newsletter. It is at no time shared with third parties. You will find a link to unsubscribe at any time at the bottom of each newsletter. You are also free to unsubscribe at any time by sending an email to
info@tourispo.com.
3.12.3 Newsletter Tracking
TouriSpo newsletters may contain so-called tracking pixels. A tracking pixel is a miniature graphic embedded in such emails, which are sent in HTML format to enable log file recording and analysis. This allows a statistical analysis of the success or failure of online campaigns. Based on the embedded tracking pixel, TouriSpo may see if and when an email was opened by a data subject, and which links in the email were called up by data subjects.
Such personal data collected in the tracking pixels contained in the newsletters are stored and analyzed by TouriSpo in order to optimize the delivery of the newsletters, as well as to adapt the content of future newsletters even better to the interests of the data subject. These personal data is not passed onto third parties.
3.12.4 Snow Ticker
Our newsletter with the latest powder alerts and thus information on both weather and snow conditions is sent on a regular basis. If you would like to receive the snow ticker, we need a valid email address from you. For the registration we use the so-called double opt-in process. This means that after your registration we will send you an email to the specified email address asking you to confirm that you would like to receive the snow ticker. If you do not confirm your registration, you will not receive the snow ticker. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible abuse of your personal data.
The only information needed in order to receive the snow ticker is your email address. After your confirmation we will save your email address for the purpose of sending you the snow ticker. Your email address will be stored until you decide to unsubscribe and is at no time shared with third parties. You will find a link to unsubscribe at any time at the bottom of each snow ticker. Keep in mind that you will need to unsubscribe individually for each and every ski resort you requested the snow ticker for.
3.12.5 Surveys & Sweepstakes
Sweepstakes and surveys all are subject to the GDPR. When participating in one these offered on the TouriSpo websites, personal data of the data subjects is collected and comprises first name, last name, address, or email. In order to verify the correctness of the email, TouriSpo makes use of the double opt-in process. By participating in the sweepstakes and surveys, the participant agrees to abide by these rules and automatically consents to publicity releases by the sponsor on the TouriSpo websites and TouriSpo's social media channels (Facebook and Instagram) in case of winning. Personal data will be used and stored only for the purposes of the respective survey or sweepstake as well as for the selection and notification of the winners.
Additional terms, conditions and data processing, such as the transfer of personal data to third parties (e.g. the tourism association providing the prize) may apply and may supplement this policy.
3.12.6 Comment Function
For the comment function on the TouriSpo websites, not only your comment but also information about the time the comment was created and the name you entered is stored. If you are a registered user of TouriSpo and are logged in when commenting, your comments will be merged on our websites with your profile data stored at TouriSpo. If you do not want this, you must log out of your TouriSpo account before commenting.
3.12.7 SSL
TouriSpo uses SSL. SSL stands for Secure Sockets Layer and uses the encrypted connection between web browser and server, which means that every data sent via the submitted form is only visible to the web owner and at no time to third parties, hence reducing the risk of data breach. The website URL is prefixed with HTTPS ('https://') elements instead of insecure HTTP ('http://' ) and you may notice a padlock icon in the web browser location bar.
3.12.8 Contact Form
If you send us enquiries using the contact form, your details from the enquiry including the contact data you provided there will be stored for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass this data onto third parties without your consent.
3.12.9 Inquiry Form for Ski Resorts, Cross-Country Skiing Areas, Lodging and Terrain Parks
If you send a request to one of the tourist facilities (ski resort, cross-country skiing area, lodging, terrain park), your request together with your personal data will be automatically forwarded to the respective tourist facility. This data is stored in order to improve the quality of our websites and to track down any illegal or non-contractual uses (see 3.12.10).
3.12.10 Prosecution of Criminal Activity & Assurance of Data Security and Protection
We may use your personal data (including the data on your profile and your IP address) for the purpose of data protection as well as the prevention and prosecution of criminal acts in connection with using the TouriSpo services that are suspected of being illegal and contrary to agreement, especially in respect of certain crimes such as incitement of the people or depiction of violence (according to German law §§ 130-131 StGB) or in the event of violation by negligence of our General Terms and Conditions.
3.12.11 Applicant and Employee Data Protection
We hereby declare that our employees and soon-to-be employees as well as applicants are data subjects with the exact same rights as TouriSpo users/members. Their roles and responsibilities are clearly defined, they are aware of who the responsible data protection person is, they only ever process personal data in line with their defined responsibilities, they have a clear overview and understanding of TouriSpo's data protection notice as well as easy access to all relevant internal policies. Only the specific groups of persons and positions receive personal data of applicants which they need for hiring decisions and the fulfilment of our pre-contractual and statutory obligations.
TouriSpo collects and processes personal data of the data subjects for the purpose of their application for an employment relationship insofar as this is necessary for the decision to establish an employment relationship with TouriSpo. This can be general data (such as name, address and contact data) and information about professional knowledge and skills such as curriculum vitae, certificates, evaluations, and communication data.
We store personal data for as long as it is necessary to make a decision about the respective application. The application documents will be deleted two months after notification of the rejection decision, unless longer storage is required due to legal disputes. The legitimate interest is, for example, a duty of proof in proceedings under the General Equal Treatment Act (AGG).
3.13 Use of Audio
Videos produced by TouriSpo GmbH & Co. KG and integrated and published on our websites may contain GEMA-free music from https://www.frametraxx.de and https://www.musicfox.com/, which is licensed under the Creative Commons License CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/).
3.14 Transfer of Data
Forwarding personal data (especially name, email address, mail address etc.) to authorities of the public sphere or other authorized third parties (such as police authorities or right holders of intellectual property), for instance in cases of criminal prosecution or averting a danger, will be effected upon the order of appropriate authorities as far as we are legally obligated to do so.
3.15 Protection of Your Member Account
Your password is the entrance key to your member account. We encourage you to use a combination of various numbers, letters, and special characters. Please do not communicate your password to others. In case you forward your password to others, please bear in mind that you will be held legally liable for any action that can be traced back to your member account.
If you face a situation of your password not being safe enough or you suspect a fraudulent use of your account, please contact us immediately and change your password as soon as possible. According to the state of technology, your password will be coded and cannot be accessed or seen by neither us nor external third parties.
3.16 Rights of Data Subjects
According to applicable Data Protection Laws and Regulations, members of TouriSpo have the right to receive information about the type and scope of your personal data stored with us at any time. Please send us a message with your request stating your user name and email address used for TouriSpo to our Data Protection Officer (DPO): Andrea Berger, TouriSpo GmbH & Co. KG, Ebenäcker 2a, 94121 Salzweg, Germany, email:
dataprotection@tourispo.com. Please note that we must ensure that such requests are actually the person concerned.
Moreover, the GDPR provides the following rights for data subjects:
- The right to be informed (Art. 15 GDPR)
- The right of access (Art. 16 GDPR)
- The right to rectification (Art. 21 GDPR)
- The right to erasure (Art. 17 GDPR)
- The right to restrict processing (Art. 18f. GDPR)
- The right to data portability (Art. 20 GDPR)
3.17 Data Deletion
You may deactivate your TouriSpo account at any time by sending an email to
support@tourispo.com. Upon receiving your email, we will instantly deactivate your account including your personal data, comments, wall posts, and user name. All information necessary to assert our rights for existing contractual or legal rights with you, for instance in the case of litigation or information we are legally obliged to store, will equally be deactivated and made inaccessible. Touristic content created by you will stay online, but will no longer be associated with your account.
3.18 Consent of the Collection and Use of Data
The following key points of the above-mentioned purposes of use of your personal data require your consent:
3.17.1 Provided that I have agreed to receiving newsletters, I hereby agree that TouriSpo may inform me with email newsletters about new functionalities and special offers, “My TouriSpo“ statistics, private messages or wall posts on my profile page, as well as services or products of companies cooperating with TouriSpo. If I no longer wish to receive TouriSpo newsletters, I can easily unsubscribe from those by following the Unsubscribe link provided in each newsletter.
3.17.2 I hereby agree that TouriSpo uses the personal data on my profile, for instance, age, sex, favourite entries and valuations to offer me customized services and content.
3.17.3 I agree that TouriSpo may use my personal data, including the data on my profile and my IP address, for the purpose of data protection as well as the prevention and prosecution of criminal acts in connection with using the TouriSpo services that are suspected of being illegal and contrary to agreement, especially in respect of certain crimes such as incitement of the people or depiction of violence (according to German law §§ 130-131 StGB) or in the event of violation by negligence of our General Terms and Conditions.
3.17.4 In case I log onto TouriSpo via my Facebook or Google+ account using the applications Facebook Connect or Goggle+ Connect on www.tourispo.com and have agreed to the transfer of my personal data to TouriSpo, I hereby agree that TouriSpo uses my Facebook or Google+ data for the purposes as described in section 3.8.4 and 3.8.5
3.17.5 I am aware that I may object the afore-mentioned sections 3.17.1 to 3.17.4 separately or altogether and revoke my consent to processing my data at any time in the future by sending a letter or an email with my revocation request stating my user name and email address used for TouriSpo to our Data Protection Officer (DPO): Andrea Berger, TouriSpo GmbH & Co. KG, Ebenäcker 2a, 94121 Salzweg, Germany, email:
dataprotection@tourispo.com.
3.19 Modification of the Privacy Policy
We reserve the right to change our Privacy Policy in accordance with the Data Protection Regulations and other national data protection laws. We will of course inform you via email well in advance about any changes. The changed data protection regulations will come into force from the date stated in the latest version of our data protection regulations.