Share this page:

Data protection declaration

Data Protection Declaration


This data protection declaration informs users about the type, extent and purposes of the collection and use of personal data by the provider responsible

Thüringer Tourismus GmbH
Willy-Brandt-Platz 1, 99084 Erfurt

Telephone: +49(0)361/37420
on this web site (hereinafter referred to as “website”).

Data Protection Officer:

Spirit Legal LLP Rechtsanwälte
Neumarkt 16-18, 04109 Leipzig
Telephone: 0800 2482000

The legal basis can be found in the Telemedia Act (TMG) and Regulation (EU) 2016/679 of the European Parliament and Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data, free movement of data and repealing Directive 95 / 46 / EC (EU-GDPR).

Access data / Server log files

The provider (or their web space provider) collects data about each access to the website (known as server log files). The access data includes:

Name of the accessed website, file, date and time of access, volume of data transmitted, report about successful access, browser type together with version, the user’s operating system, referrer URL (previous site visited), IP address and the requesting provider.

The provider only uses the protocol data for statistical analysis for the purpose of operation, security and optimisation of the website. However, the provider reserves the right to subsequently examine the protocol data if, for specific reasons, there is a justified suspicion of illegal use.

Handling of personal data

Personal data is information which helps make a person identifiable, so it is information with which a person can be traced. This includes the name, email address or telephone number. However, data about preferences, hobbies, memberships or which websites have been viewed by a person also count as personal data.

Personal data is only collected, used or passed on by the provider if this is permitted by law or the user agrees to the collection of data.

Making contact

When contact is made with the provider (for example via the contact form or email), the user’s information is stored for the purpose of processing the request and in case follow-up questions arise.

Comments and posts

When users leave comments in the blog or other posts, their IP addresses are saved. This is for the security of the provider in case of illegal content in comments and posts (insults, prohibited political propaganda, etc.). In such cases, the provider itself may be prosecuted for the comment or contribution and therefore has an interest in knowing the identity of the author.

Comment subscriptions

Users can subscribe to follow-up comments. Users will receive a confirmation email to verify that they own the email address they entered. Users can unsubscribe from ongoing comment subscriptions at any time. The confirmation email will contain notices on this option.


Through the newsletter, we provide you with information about ourselves and our range of services.

If you would like to receive the newsletter, we require you to provide us with a valid email address and information which allows us to check that you are the owner of the email address provided or that the owner agrees to receive the newsletter. Other data is not collected. This data is only used for the sending of the newsletter and is not passed on to third parties.

When you register for the newsletter, we store your IP address and the date of registration. This storage is only used for evidence in the event that a third party misuses an email address and registers it to receive the newsletter without the knowledge of the authorised owner.

You can revoke your consent to storage of the data, email address and their use for the sending of the newsletter at any time. Revocation can be performed via a link in the newsletters themselves, in your profile area or by sending a message via the contact options mentioned above.

Integration of services and content of third parties

On this online website, there may be integrated content from third parties, such as videos from YouTube, map data from Google Maps, RSS feeds or graphics from other websites. This always requires the providers of this content (hereinafter referred to as "third party providers") to learn the IP addresses of the users. This is because without the IP address, they could not send the content to the browser of the respective user. Therefore, the IP address is required in order to display this content. We try to only use content where the respective third party provider only uses the IP address for the transmission of content. However, we are not able to exert any influence if the third party provider stores the IP address for statistical purposes, for example. Provided we are aware of this, we will inform the user.


Cookies are small files which enable specific information which is related to the device to be stored on the user’s access device (PC, smart phone etc.). They help, on the one hand, the user-friendliness of websites and therefore also the users (e.g. the saving of login details). They also help to collect statistical data on website use, which can then be analysed for the purpose of improving the website. Users can influence the use of cookies. Most browsers have an option where the storage of cookies is limited or prevented completely. However it should be noted that use, and in particular user convenience, is limited without cookies.

You can manage many online ad cookies from companies via the US American website

or via the EU website

Registration function

The data which is entered as part of registration is used for the purposes of using the website. Users can be sent website- or registration-relevant information, such as changes to the scope of the website or technical conditions, by email. The data collected can be seen from the input template as part of registration. It includes: form of address, first name, surname, email and interests.


Use of the reservation and booking mask (Thuringia booking)

Data is only collected and processed to prepare and perform reservation enquiries and firm bookings of accommodation. Thüringer Tourismus GmbH acts as a travel agent and collects, processes and uses only the data that is required to provide its services and to ensure the use and operation of the services offered on the reservation and booking portal. On no account will the agent sell data to third parties. Data will only be transmitted to third parties to the extent that is necessary for the booking/reservation with the provider chosen by the customer. This explicitly includes transmission to companies affiliated with the agent in order to perform the booking. Your data is saved in accordance with tax and commercial law. You have the right to information, correction, deletion or restriction of processing as well as the right to data transferability.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on the user’s computer and enable an analysis of your use of the website. The information generated by the cookie about your use of the website is usually transmitted to and stored by a Google server in the USA. The IP address transferred by your browser in the Google Analytics process will not be merged with other Google data. In addition, we have extended Google Analytics by the code ‘anonymizeIP’ at this website. This guarantees the masking of your IP address and ensures that all data is collected anonymously. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there.

Commissioned by the operator of this website, Google will use this data to evaluate your use of the website, to compile reports about website activity and to provide further services for this website’s operator, related to website and internet usage. You can prevent the storage of cookies by using a relevant setting in your browser software. However, please note that in this case you may not be able to use all the functions of this website in full.

You can also prevent the collection by Google of the data generated by the cookie and relating to the use of the website (including your IP address) and the processing of this data by Google, by downloading and installing the browser plugin from the following link: As an alternative to the browser add-on, particularly for browsers on mobile end devices, you can also prevent collection by Google Analytics by clicking on this link. An opt-out cookie will be placed in order to prevent collection of your data when you access this website in future. The opt-out cookie only applies in this browser and only for our website and will be placed on your device. If you delete the cookies on this browser, you must place the opt-out cookie again. [Please note: You will find information on integrating the opt-out cookie at:]

We also use Google Analytics to analyse data from Double-Click cookies and AdWords for statistical purposes. If you do not want this, you can disable it through the Ads Preferences Manager (


Use of Facebook Social Plugins

This website uses social plugins (‘plugins’) from the social network, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). The plugins are recognisable by one of the Facebook logos (white ‘f’ on blue tile or ‘thumbs-up’ sign) or they are marked with the addition ‘Facebook Social Plugin’. The list and appearance of Facebook social plugins can be viewed here:

If a user opens a web page that contains such a plugin, his/her browser will establish a direct connection with the Facebook servers. The content of the plugin will be directly transmitted by Facebook to your browser and incorporated into the website. The provider therefore has no influence on the amount of data collected by Facebook with the help of this plugin and is thus informing the user according to its best knowledge at present:

By integrating the plugins, Facebook receives the information that a user has accessed the respective page of the website. If the user is logged in to Facebook, Facebook can assign the visit to his or her Facebook account. If users interact with the plugins, for example, click the Like button or leave a comment, the corresponding information is transmitted from their browser directly to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook may learn and save his/her IP address. According to Facebook, only an anonymised IP address is stored in Germany.

Users will find the purpose and scope of data collection and further processing and use of data by Facebook as well as the related rights and setting options to protect the privacy of users  in the Facebook privacy policy:

If users are Facebook members and do not want Facebook to collect data about them via this website and link it to their member data stored on Facebook, they must log out of Facebook before visiting the website.

Applicant data

We process applicant data in accordance with legal requirements solely for the purpose of and as part of the application process. The processing of applicant data shall take place for the fulfilment of our (pre)contractual obligations as part of the application process within the meaning of Article 6 Paragraph 1 of the GDPR provided the data processing is necessary for us e.g. as part of legal proceedings (in Germany Article 26 of the Federal Data Protection Act (BDSG) also applies). By sending an application to us, the applicants declare that they agree to the processing of their data for purposes regarding the application process in accordance with the type and extent stated in this data protection declaration. If special categories of personal data within the meaning of Article 9 Paragraph 1 of the GDPR (e.g. health details such as serious disability status or ethnic origin) are disclosed voluntarily during the application process, their processing shall take place additionally in accordance with Article 9 Paragraph 2 letter b of the GDPR. Applicants can also send us their applications via email. However, we ask you to be aware that emails are not generally encrypted and the applicants must arrange the encryption themselves. Therefore, we cannot assume responsibility for the transmission of the application between the sender and the recipient on our server. Instead of sending the application via email applicants also have the opportunity of sending us the application by post. In the event of a successful application the data made available by the applicants can be processed by us for employment relationship purposes. If the application for a job vacancy is not successful, the data of the applicants shall be deleted. The data of the applicants shall also be deleted if an application is withdrawn, which the applicants are entitled to do at any time. The deletion shall take place, subject to a justified revocation of the applicant, following the expiry of a duration of a maximum of 2 years, so that we are able to answer any possible follow-up questions regarding the application and comply with our duty to provide evidence in accordance with the Equal Treatment Act (Gleichbehandlungsgesetz) as well as to our funding agencies.

Use of the Webshop

Your personal data will be collected, stored, processed and used by us if required, and to the extent and for as long as this is required for the establishment, implementation or termination of this contract. Collection, storage, processing and use of your personal data beyond this shall only take place if a legal requirement demands or allows this or you, as a customer, have consented to this. You are aware that for the implementation of pre-contractual measures and the fulfilment of this contract the collection, processing and use of, among other aspects, the name, status as a consumer or entrepreneur and address is required on the basis of Article 6 Paragraph 1 letter b) of the GDPR. We are entitled – to the extent permitted by law – to investigate the risk of payment default by customers for the purpose of the decision regarding the establishment, implementation or termination of the contract. The collection, processing and use of data for this purpose shall take place on the basis of Article 6 Paragraph 1 letter b) of the GDPR. We are entitled in particular to send your data to third parties, if and to the extent this is required for the implementation of pre-contractual measures and the fulfilment of this contract (e.g. for shipping, billing or customer support) in accordance with Article 6 Paragraph 1 letter b) of the GDPR or for the fulfilment of a legal obligation within the meaning of Article 6 Paragraph 1 letter c) of the GDPR. We shall also pass on this data to third parties (e.g. collection agencies) – to the extent permitted by law – for the purpose of the enforcement of debt in accordance with Article 6 Paragraph 1 letter b) and/or f) of the GDPR.


Revocation, alterations, corrections and updates

Users have the right to receive free of charge information about the personal data stored about them. In addition, users have the right to correction of incorrect data and blockage and deletion of their personal data, provided no legal obligation to retain data applies.

If you feel that we do not process your data in accordance with data protection laws, you can contact the Thuringian Data Protection Authority (Thüringer Datenschutz-Aufsichtsbehörde) on +49 361 37 71 900.