Privacy Policy

Privacy statement

1) Information about the collection of personal data and contact details

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following we will inform you about the handling of your personal data when you use our website. Personal data are all data that allow you to be personally identified.

1.2 The controller within the meaning of the General Data Protection Regulation (GDPR) responsible for data processing on this website is:

Berlin Tourismus & Kongress GmbH
Am Karlsbad 11
D-10785 Berlin
Tel: +49 (0)30 25 00 23 33 Fax: +49 (0)30 25 00 24 24

The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

1.3 The controller has appointed a data protection officer for this website, who can be contacted as follows:

DA.S Beratung
Mr. Wolfgang Mengel
Beerentalweg 76
D-21077 Hamburg
Tel:        +49 (0)40 761 01 907
Fax:       +49 (0)40 761 01 908

1.4 This website uses SSL and/or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible). You can recognise an encrypted connection by the character string “https://” and the lock symbol in your browser bar.

2) Data collection when you visit our website

When you use our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “server log files”). When you call up our website, we collect the following data that are technically necessary for us to display the website to you:
– our website which was visited
– date and time of access
– volume of data sent, in byte
– source/link from which you accessed the page
– browser used
– operating system used
– IP address used (in some cases: made anonymous)

Processing is carried out in accordance with Art. 6 (1) letter f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files at a later date if there are any concrete indications of illegal use.

If the opportunity for the input of personal or business data (email addresses, name, addresses) is given, the input of these data takes place voluntarily. The use and payment of all offered services are permitted – if and so far technically possible and reasonable – without specification of any personal data or under specification of anonymized data or an alias. The use of published postal addresses, telephone or fax numbers and email addresses for marketing purposes is prohibited, offenders sending unwanted spam messages will be punished.

3.) Transmission of data to third parties

Within the Übermut project we cooperate with the cooperation partner Hamburg Marketing GmbH. Your personal data will therefore also be used by Hamburg Marketing GmbH. The contact details are as follows:

Hamburg Marketing GmbH
Wexstraße 7
D-20355 Hamburg
T +49 (0) 40 41 11 10 500
F +49 (0) 40 41 11 10 615

Your data will not be transmitted to other third parties.

4) Cookies

In order to make visits to our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies (cookies from third parties) to recognise your browser on your next visit (persistent cookies). If cookies are set, they collect and process specific user information such as browser and location data as well as IP address values to varying degrees. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. In some cases, cookies are used to simplify the ordering process by saving settings (e.g. remembering the contents of a virtual shopping basket for a later visit to the website). If personal data are also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 (1) letter b GDPR either for the execution of the contract or in accordance with Art. 6 (1) letter f GDPR in order to safeguard our legitimate interest in the website’s best possible functionality and a customer-friendly and effective design of the visit to the site.

We may work with advertising partners to help us make our website more interesting for you. To this end, cookies from partner companies (third-party cookies) will also be stored on your hard disk in this case when you visit our website. When we cooperate with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the extent of the information collected in each case in the following paragraphs.

Please note that you can set your browser in such a way that you are informed about the setting of cookies and can decide individually about their acceptance, or exclude the acceptance of cookies in certain cases or in general. Each browser is different in the way it manages the cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You will find such information for the respective browsers under the following links:

Internet Explorer:


Please note that the functionality of our website may be restricted if cookies are not accepted.

5) Contacting us

When you contact us (e.g. via contact form or email), personal data are collected. Which data are collected when using a contact form can be seen on the respective form. These data are stored and used exclusively for the purpose of responding to your request and establishing contact, and for the ensuing technical administration. The legal basis for the processing of the data is our justified interest in responding to your enquiry pursuant to Art. 6 (1) letter f GDPR. If the purpose of your contacting us is to conclude a contract, then an additional legal basis for the processing is Art. 6 (1) letter b GDPR. Your data will be deleted after final processing of your enquiry; this is the case if it can be inferred from the circumstances that the facts in question have been conclusively clarified and if there are no legal retention obligations to the contrary.

6) Use of YouTube videos

This website uses the YouTube embedding function for the display and playing of videos of the provider “YouTube”, which belongs to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). For this, the extended data protection mode is applied, which, according to the provider, only starts to store user data when the video(s) is/are played. When the playback of embedded YouTube videos is started, the provider uses “YouTube” cookies to collect data on user behaviour, which, according to “YouTube”, serve among other things to collect video statistics, improve user-friendliness and prevent unlawful actions. When you are logged in to Google, your data will be directly mapped to your account when you click on a video. If you want to avoid this mapping to your profile on YouTube, you need to log out before activating the button. Google saves your data (even for users who are not logged in) as usage profiles and evaluates them. Such evaluation is carried out in particular pursuant to Art. 6 (1) letter f GDPR on the basis of Google’s legitimate interests in the insertion of personalised advertising, market research and/or demand-oriented design of its website. You have the right to object to the creation of these user profiles; to do so, you need to contact YouTube. Regardless of whether the embedded videos are played back, every time this website is accessed a connection to the Google network “DoubleClick” is established, which could trigger further data processing operations without our influence. Google LLC, based in the USA, is certified for the US-European data protection agreement “Privacy Shield”, which guarantees adherence to the data protection standards applicable in the EU.

You will find further information on YouTube’s data protection in the
provider’s privacy statement under:

7) Web analysis services

Google Analytics
This website uses Google Analytics, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses so-called “cookies”, text files which are saved on your computer and allow an analysis of your use of the website. The information generated by the cookie about your use of this website (including the shortened IP address) is generally transmitted to a Google server in the USA and stored there. This website exclusively uses Google Analytics with the extension “_anonymizeIp()”, which ensures anonymisation of the IP address by shortening it and thus prevents it from being directly linked to a particular individual. Due to this extension, your IP address will first be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. In these exceptional cases, processing is carried out in accordance with Art. 6 (1) letter f GDPR on the basis of our legitimate interest in a statistical analysis of user behaviour for purposes of optimisation and marketing. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website and Internet use. The IP address transmitted by your browser in connection with Google Analytics will not be combined with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser; however, please note that if you do this you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link:

As an alternative to the browser plug-in or with browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent future data collection by Google Analytics from this website (this opt-out cookie only works with this browser and only for this domain; if you delete your cookies in this browser, you must click on this link again): Google Analytics deaktivieren Google LLC, based in the USA, is certified for the US-European data protection agreement “Privacy Shield”, which guarantees adherence to the data protection standards applicable in the EU. More information on how Google Analytics handles user data can be found in Google’s privacy statement:

Click here to opt-out from being tracked by Google Analytics on this website by using a cookie in your internet web browser. Cookies must be enabled on your system.
You can also opt-out from being tracked by Google Analytics with effect for the future by downloading and installing Google Analytics Opt-out Browser Addon for your current web browser:

8.) Social plug-ins

visitBerlin uses so-called social plug-ins (“plug-ins”) of the social networks Facebook, Twitter, Google+, YouTube and Pinterest. These services are provided by Facebook Inc., Twitter Inc. and Google Inc. (“providers”). Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). Twitter is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103. Google+ and YouTube are operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Pinterest is operated by Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA. Instagram is operated by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. Sharethis is operated by ShareThis, 4005 Miranda Ave, Suite 100, Palo Alto, CA 94304, USA.

An overview of the plug-ins and their appearance can be found here:

Share Buttons

When you access a page of our website that contains such a plug-in, your browser establishes a direct connection to the servers of Facebook, Twitter, Google or Pinterest. The relevant provider will transmit the content of the plug-in directly to your browser and integrate it into the page. Through this integration, the providers will receive the information that your browser has called up the corresponding page of our website, even if you do not have a profile with the social network in question or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a server of the relevant provider in the USA and stored there. If you are logged in to one of the social networks, the providers can directly map your visit to our website to your profile on Facebook, Twitter, Google+ or Pinterest. If you interact with the plug-ins, e.g. by pressing the “Like” or “+1” button, this information will also be transmitted directly to a server of the providers and stored there. The information will also be published on the social network and shown to your contacts. The purpose and extent of the data collection and the further processing and use of the data by the providers as well as your rights in this regard and the setting options for the protection of your privacy can be found in the privacy notices supplied by the providers. and


If you do not wish Facebook, Twitter, Google, YouTube or Pinterest to map the data collected via our website directly to your profile on the relevant social network, you need to log out of the network before visiting our website.

9.) Rights of the data subject

9.1 The current data protection law grants you comprehensive data subject rights (rights of access and intervention) as regards the processing of your personal data vis-à-vis the controller, about which we inform you below:

– Right of access pursuant to Art. 15 GDPR:
In particular, you have a right to information about your personal data processed by us, the purposes of the processing, the categories of the personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the envisaged storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing or objection to the processing, of a right to complain to a supervisory authority, about the source of your data, if these were not collected from you by us, the existence of automated decision-making including profiling and, if required, meaningful information about the logic involved and the extent to which you are concerned and the envisaged consequences of such processing, as well as your right to be informed of any safeguards which exist pursuant to Art. 46 GDPR in the event of the transfer of your data to third countries;

– Right to rectification pursuant to Art. 16 GDPR:
You have a right to immediate rectification of any inaccurate data concerning you and/or completion of any incomplete data concerning you stored by us;

– Right to erasure pursuant to Art. 17 GDPR:
You have the right to demand the erasure of your personal data if the requirements of Art. 17 (1) GDPR are met. This right does not, however, exist especially if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;

– Right to restriction of processing pursuant to Art. 18 GDPR:
You have the right to demand the restriction of the processing of your personal data for as long as the contested accuracy of your data is being verified, or if the processing is unlawful and you oppose the erasure of your data and instead request the restriction of their use, or if we are no longer in need of this data for the purposes of the processing but you require your data for the establishment, exercise or defence of legal claims, or if you have filed an objection on grounds relating to your particular situation, for as long as it is not yet clear whether our legitimate reasons prevail;

– Right to information pursuant to Art. 19 GDPR:
If you have exercised your right to have the data controller rectify or erase your personal data or restrict the processing, he shall be obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed of these recipients;

– Right to data portability pursuant to Art. 20 GDPR:
You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to demand their transfer to another controller, where technically feasible;

– Right of withdrawal of consent pursuant to Art. 7 (3) GDPR:
You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event of withdrawal we will delete the relevant data without delay, unless further processing can take place on a legal basis which allows processing without consent. The withdrawal of consent shall not affect the lawfulness of the processing carried out on the basis of the consent up to the withdrawal;

– Right to complain pursuant to Art. 77 GDPR:
If you believe that the processing of personal data concerning you infringes the GDPR, you have the right to complain to a supervisory authority, in particular in the member state where you reside or work or the place where the alleged infringement occurred, without prejudice to any other administrative or judicial remedy;

Contact details of the supervisory authority in Berlin: Berlin Representative for Data Protection and Freedom of Information, Ms. Maja Smoltczyk, Friedrichstr. 219, D-10969 Berlin. Tel.: +49 (0)30 13889-0 Fax: +49 (0)30 2155050 Email:


If, in the course of balancing interests, we should process your personal data on the basis of our overriding legitimate interest, you will have the right to object at any time to this processing with future effect on grounds relating to your particular situation. If you exercise your right of objection, we will stop processing the data concerned. However, we reserve the right to continue processing if we can prove that there are compelling reasons worthy of protection for the processing, which override your interests, fundamental rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims. If we process your personal data for direct advertising purposes, you will have the right to object at any time to the processing of personal data concerning you for such advertising purposes. You may raise the objection as described above. If you exercise your right of objection, we will stop processing the relevant data for direct advertising purposes.

Duration of storage of personal data
The duration of the storage of personal data is determined by the respective statutory retention period (e.g. commercial and fiscal retention periods). For more details on the storage period, please refer to the specific data protection information at the beginning of the booking process. After expiry of this period, the relevant data will routinely be deleted, provided that they are no longer necessary for the fulfilment or initiation of the contract and/or there is no longer any legitimate interest on our part in further storage.

Copyright © 2018, IT-Recht-Kanzlei · Alter Messeplatz 2 · 80339 Munich Tel: +49 (0)89 130 1433-0· Fax: +49 (0)89 130 1433-60