Purpose
Our company collects and processes personal data for the purpose of establishing and fulfilling business relationships in accordance with specific orders. This covers all categories of data required to fulfil pre-contractual and contractual obligations.

Disclosure of data to third parties
Personal data will only be disclosed to third parties if this is necessary to fulfil the business purpose. Personal data will not be disclosed to third parties, including those in third countries with an unclear level of data protection (generally countries outside the EU), who are not involved in the business purpose, unless the data subject has given their consent. 

Lawfulness of data processing
The collection, processing and use of personal data are carried out within the limits permitted by law in accordance with Articles 5, 6 and 9 of the GDPR. Where personal data is collected from the data subject, the data subject is entitled to transparent information in accordance with Article 13 of the GDPR. In principle, only such information is processed and used as is necessary for the performance of operational tasks and is directly related to the purpose of processing. In doing so, the specific requirements for the collection, processing and use of special categories of personal data in accordance with Article 9 of the GDPR and Section 22 of the BDSG are observed. In accordance with the GDPR, the processing of sensitive data is permitted exclusively under the principle of prior authorisation or where there is a legal basis.

The rights of data subjects
In accordance with Article 15 et seq. of the GDPR, data subjects have the right to access, rectification, erasure, restriction and objection to the processing of their data.

The right of data subjects to withdraw consent
Pursuant to Article 13(2)(c) of the GDPR, data subjects have the right to withdraw their consent to the processing of personal data with effect from the future, provided that the processing is based on Article 6(1)(a) or Article 9(2)(a) of the GDPR. The lawfulness of the processing carried out on the basis of consent up to the point of withdrawal remains unaffected.

However, withdrawal of consent or failure to provide the necessary data will generally mean that the purpose for which the data was or would have to be collected cannot be fulfilled. Written form is required to exercise these rights. Please contact us by email at info@sachsen-tour.de. 

Deletion of personal data
Personal data is deleted when the purpose for which it was stored no longer applies and no legal provision (e.g. regarding statutory retention periods) requires the data to be retained. The provisions of Article 17 of the GDPR in conjunction with Section 35 of the BDSG apply. If deletion is not possible for legal, contractual, commercial or tax reasons, the processing of the data may be restricted at the request of the data subject. Written form is required to exercise this right. 

The data subject’s right to data portability
The company ensures the right to data portability in accordance with Article 20 of the GDPR. Every data subject has the right to receive a copy of their personal data in a commonly used machine-readable file format.

Data controller within the meaning of the GDPR and the BDSG
Tourismus Marketing Gesellschaft Sachsen mbH
Managing Director Veronika Hiebl
Bautzner Straße 45/47
D-01099 Dresden
Tel.: +49 351 491700
Fax: +49 351 4969306

Email address: info@sachsen-tour.de
Website: www.sachsen-tourismus.de

Commercial Register: Dresden Local Court HRB 17813
VAT No.: DE203959452

Company Data Protection Officer
If you have any further questions, suggestions or comments regarding data protection, please contact our Data Protection Officer: Astrid Kloss – Data Protection and Data Security Specialist, who can be reached at: info@kloss-consulting.de. 

Right to lodge a complaint
In accordance with Article 77 of the GDPR, every data subject has the right to lodge a complaint with the supervisory authority of the state. The State Data Protection Commissioner can be contacted by email at: saechsdsb@slt.sachsen.de.

Dresden, 25 May 2018