Privacy policy
§ 1 Information about the collection of personal data
(1) Below, we provide information about the processing of personal data when using our website. Personal data is all data that can be related to you personally, e.g., name, address, email addresses, user behavior.
(2) The controller pursuant to Art. 4 (7) GDPR is:
Kiel-Marketing e.V. / GmbH
Andreas-Gayk-Str. 31B – Neues Rathaus
24103 Kiel, Germany
Tel.: +49 (0)431 - 679100
Email: info@kiel-marketing.de
You can contact our data protection officers at:
datenschutz@kiel-marketing.de
or our postal address with the addition “the data protection officer.”
(3) When you contact us by email or via a contact form, we will store the data you provide (your email address, your name and telephone number, if applicable) in order to answer your questions.
This data is processed on the basis of Art. 6 (1) (b) GDPR, provided that your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of inquiries addressed to us in accordance with Art. 6 (1) (f) GDPR or on your consent in accordance with Art. 6 (1) (a) GDPR, if this has been requested.
The contact details will remain with us until you request us to delete them, revoke your consent to their storage, or the purpose for data storage no longer applies (e.g., after your request has been processed or a purchase contract has been concluded). Mandatory legal provisions—in particular retention periods—remain unaffected.
(4) We use service providers who are exclusively commissioned by us and bound by our instructions to assist in providing the services offered, e.g., hosting our systems or operating our IT. These have been carefully selected by us and are regularly monitored.
As a matter of principle, we only store your data for as long as it is needed for the respective purposes underlying the processing. Beyond that, we only store data if we are legally obliged to do so, e.g., due to statutory retention obligations.
§ 2 Processing of personal data when visiting our website
When you use the website for informational purposes, i.e., simply viewing it without registering or otherwise providing us with information, we process the personal data that your browser transmits to our server. The data described below is technically necessary for us to display our website to you and to ensure stability and security, and must therefore be processed by us. The storage period is 13 months. The legal basis is Art. 6 (1) (f) GDPR:
– IP address
– Date and time of the request
– Time zone difference to Greenwich Mean Time (GMT)
– Content of the request (page visited)
– Access status/HTTP status code
– Amount of data transferred in each case
– Previously visited page
– Browser
– Operating system
– Language and version of the browser software.
§ 3 Processing of data from your devices
(1) In addition to the above-mentioned data, we use technical tools for various functions when you use our website, in particular cookies that can be stored on your device. When you visit our website and at any time thereafter, you have the choice of whether to generally allow cookies to be set or which individual additional functions you would like to select. You can make changes in your browser settings or via our consent manager. Below, we first describe cookies from a technical perspective before going into more detail about your individual options by describing technically necessary cookies and cookies that you can voluntarily select or deselect.
(2) Cookies are text files or pieces of information in a database that are stored on your hard drive and assigned to the browser you are using, so that certain information can be sent to the entity that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer, but primarily serve to make the Internet offering faster and more user-friendly. This website uses the following types of cookies, the functionality and legal basis of which we will explain below:
– Transient cookies: These cookies, in particular session cookies, are automatically deleted when you close your browser or log out. They contain a so-called session ID. This allows various requests from your browser to be assigned to the shared session and your computer can be recognized when you return to our website.
– Persistent cookies: These are automatically deleted after a specified period of time, which varies depending on the cookie. You can view the cookies that have been set and their lifespans at any time in your browser settings and delete the cookies manually.
– Other technologies: These functions are not based on cookies, but on similar technical mechanisms such as Flash cookies, HTML5 objects, or an analysis of your browser settings. The result is that we can also use the techniques described below. Here, too, you can of course give your consent or object.
(3) Mandatory functions necessary for the technical display of the website: The technical structure of the website requires us to use certain technologies, in particular cookies. Without these technologies, our website cannot be displayed (completely correctly) or the support functions may not be available. These are generally transient cookies that are deleted at the end of your visit to the website, at the latest when you close your browser. You cannot deselect these cookies if you wish to use our website. The individual cookies can be viewed in the consent manager.
If cookies are used, data processing is regularly based on your consent in accordance with Section 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR. If we consider the use of cookies to be absolutely necessary, data processing is based on Section 25 (2) No. 2 TDDDG. Further processing is carried out in accordance with Art. 6 (1) (f) GDPR.
(4) Optional cookies with your consent: We only set various cookies with your consent, which you can select on your first visit to our website using the cookie consent tool. The functions are only activated if you give your consent and can be used in particular to enable us to analyze and improve visits to our website, to make it easier for you to use different browsers or end devices, to recognize you when you visit, or to display advertising (including, where applicable, to tailor advertising to your interests, to measure the effectiveness of ads, or to display interest-based advertising).
You can revoke your consent at any time without affecting the lawfulness of the processing until revocation.
The functions we use, which you can select and revoke individually via the consent manager, are described below.
§ 4 Booking accommodation and tourist services
(1) You can book accommodation and tourist offers via booking&more on our website. To do this, we process your name, address, contact details, and payment information. We forward your data to the respective providers of the offers. The legal basis for data processing is the contract concluded with us or the provider of the offers in accordance with Art. 6 (1) (b) GDPR.
(2) We offer hoteliers and private landlords the option of setting the availability and occupancy times of the accommodations listed on our booking platform booking&more, as well as their daily prices. This is done via a so-called partner login in the footer area of our website. The legal basis is Art. 6 (1) lit. b GDPR. Further information is available at https://webclient4.deskline.net/KIE/de/home/cookies.
(3) We use the services of feratel media technologies GmbH to operate our online booking system and display it on our website. The service uses cookies within the meaning of § 3 for the display and functionality of the online services. The legal basis for this is our legitimate interest in offering tourist services via our website in accordance with Art. 6 (1) (f) GDPR and § 25 (2) No. 2 TDDDG.
§ 5 Events
We provide information on our website about various events taking place in Kiel. We use the services of destination.one GmbH to manage, register, and display events on our website. The provider processes the data specified in Sections 2 and 3, which is necessary for displaying the events. The legal basis for this is Art. 6 (1) (f) GDPR in conjunction with Section 25 (2) No. 2 TDDDG.
§ 6 Newsletter
(1) You can subscribe to our newsletter, which informs you about our current interesting offers, via our website and the mein.Kiel app, among other places, by giving us your consent. The advertised goods and services are specified in the declaration of consent. The newsletter is sent using the services of our processor starmate solutions GmbH, Pfarrer-Weiß-Weg 16, 89077 Ulm.
(2) We use the double opt-in procedure for registration for our newsletter. This means that after you register, we will send an email to the email address you provided, asking you to confirm that you are the owner of the email address and that you wish to receive the notifications. If you do not confirm your registration within 30 days, your information will be automatically deleted. In addition, we store your IP addresses and the times of registration and confirmation. The purpose of this procedure is to verify your registration and, if necessary, to investigate any possible misuse of your personal data.
(3) The only mandatory information required for sending the newsletter is your email address. The provision of additional, separately marked data is voluntary and is used to address you personally. After your confirmation, we will store your email address for the purpose of sending the newsletter. The legal basis is Art. 6 (1) (a) GDPR.
(4) You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can revoke your consent by clicking on the link provided in every newsletter email, via the newsletter registration form on this website, by emailing info@kiel-sailing-city.de, or by sending a message to the contact details provided in the legal notice.
(5) In addition, you can also give your consent for us to evaluate your user behavior when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. For the evaluations, we link the data mentioned above [in § 3] and the web beacons to your email address and an individual ID. Links received in the newsletter also contain this ID. We use the data obtained in this way to create a user profile in order to tailor the newsletter to your individual interests. In doing so, we record when you read our newsletters, which links you click on, and deduce your personal interests from this.
(6) You can object to this tracking at any time by filling out and submitting the corresponding online form via the “Change data” link provided in every email or by informing us via another contact method as described above. The information will be stored for as long as you are subscribed to the newsletter. After you unsubscribe, we will store the data purely for statistical and anonymous purposes.
§ 7 Statistical analysis by Matomo Analytics
(1) Kiel Marketing uses the open source software Matomo Analytics for statistical analysis of its websites. Cookies are used for this purpose. The information obtained about website usage is transmitted exclusively to our servers and summarized in pseudonymous usage profiles. We use the data to evaluate website usage. The collected data is not passed on to third parties.
(2) IP addresses are anonymized (IP masking) so that they cannot be assigned to individual users. The data is processed on the basis of Art. 6 (1) (a) GDPR. In doing so, we pursue our legitimate interest in optimizing our website for our external presentation. You can revoke your consent at any time by deleting the cookies in your browser or changing your privacy settings. Please note that if you delete the cookies in your browser settings, this may also result in the opt-out cookie being deleted and you may need to reactivate it.
(3) Further information on data security in connection with Matomo Analytics can be found here: https://matomo.org/privacy/.
§ 8 Meta Pixel
(1) In order to create a profile of your interests and habits, your activities on our website are analyzed using a so-called meta pixel. This service is provided by Meta Platforms Ireland Limited, Block J, Serpentine Avenue, Dublin 4, Ireland. Meta uses the collected data—regardless of whether you have a user account—to create interest profiles that serve as the basis for creating target groups. Meta will add you to such target groups in order to show you personalized advertisements. Data subjects who have been added to a target group (custom audience) will be removed from the target group after 180 days, unless they have been added to it again in the meantime by visiting the site. For us, the data on visitors and target groups is only available in the form of anonymized statistics.
(2) Meta may reuse the data for its own purposes in accordance with the Facebook Data Use Policy (https://de-de.facebook.com/about/privacy/) and the Terms of Use (https://www.facebook.com/legal/terms/businesstools).
(3) We will only carry out the data processing described above with your consent by loading the Meta pixel and associated cookies only with your consent (in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TDDDG). You have the right to revoke your consent for the future.
(4) Insofar as personal data is collected on our website using the tool described here and forwarded to Facebook, we and Meta Platforms Ireland Limited, Block J, Serpentine Avenue, Dublin 4, Ireland, are jointly responsible for this data processing (Art. 26 GDPR). This joint responsibility is limited exclusively to the collection of data and its transfer to Facebook. The processing by Facebook after the transfer is not part of the joint responsibility. The obligations incumbent upon us jointly have been set out in a joint processing agreement. The wording of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing data protection information when using the Facebook tool and for the data protection-compliant implementation of the tool on our website. Facebook is responsible for the data security of Facebook products. You can assert your rights as a data subject (e.g., requests for information) regarding the data processed by Facebook directly with Facebook. If you assert your rights as a data subject with us, we are obliged to forward them to Facebook.
(5) Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum. Further information on the protection of your privacy can be found in Facebook's privacy policy: https://de-de.facebook.com/about/privacy/.
§ 9 The Trade Desk
(1) This website uses retargeting technology from The Trade Desk. This feature is used to present visitors to the website with interest-based advertisements within The Trade Desk advertising network. The browser of website visitors stores cookies within the meaning of § 3, which enable visitors to be recognized when they visit websites that belong to The Trade Desk advertising network. On these pages, visitors can then be presented with advertisements that relate to content they have previously viewed on websites that use The Trade Desk's retargeting technology. According to its own information, The Trade Desk collects pseudonymized data during this process. All IDs we use only enable the recognition of your device, your internet browser, or the app you are using. The data collected will not be used to personally identify you as a user of our website without your separate consent.
(2) The legal basis for the processing of this data is your consent in accordance with Art. 6 (1) (a) GDPR. You can revoke this consent at any time. Further information on The Trade Desk's retargeting technology, The Trade Desk's privacy policy, and opt-out options can be found at: https://www.thetradedesk.com/general/privacy
§ 10 Embedding videos on our website
In order to provide you with an uninterrupted experience and to avoid switching to third-party websites, we have embedded some videos directly on our website. This establishes a connection to the respective video platform so that data can be transmitted to it in accordance with § 2. These are YouTube, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States, and Vimeo (Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001). Data will only be transferred if you have explicitly consented to this, Art. 6 (1) (a) GDPR. A cookie is set in order to maintain and verify the consent status. You can manage cookies in accordance with § 3 via our Consent Manager.
§ 11 Social Media
Types of data processed: Contact details (e.g., email, phone numbers); content data (e.g., entries in online forms); usage data (e.g., websites visited, interest in content, access times); meta/communication data (e.g., device information, IP addresses).
Data subjects: Users (e.g., website visitors, users of social media platforms).
Purposes of processing: Contact requests and communication; feedback (e.g., collecting feedback via online form); marketing.
The legal basis for the processing of your data on social media platforms is Art. 6 (1) lit. f GDPR.
Facebook: Social network; Service provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; Parent company: Meta Platforms Inc., Menlo Park, California, USA.
Facebook Data Policy: https://www.facebook.com/policy
Information about Page Insightshttps://www.facebook.com/legal/terms/information_about_page_insights_data
Privacy policy: https://www.facebook.com/about/privacy Standard contractual clauses: https://www.facebook.com/legal/EU_data_transfer_addendum
Instagram: Social network; Service provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; Parent company: Meta Platforms Inc., Menlo Park, California, USA.
Cookie policy: https://help.instagram.com/1896641480634370?ref=ig
Instagram privacy policy: https://instagram.com/about/legal/privacy.
LinkedIn: Social network; service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland;
Privacy policy:https://www.linkedin.com/legal/privacy-policy Standard contractual clauses: https://legal.linkedin.com/dpa
Opt-out option: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Data processing agreement: https://legal.linkedin.com/dpa
For information on the internal processing of Page Insights at LinkedIn, please refer to the regulations at https://legal.linkedin.com/pages-joint-controller-addendum.
(2) We use the technical platform and services of providers for these information services. We would like to point out that you use our social media platforms and their functions at your own risk. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating). When you visit our pages, the providers of the social media platforms collect, among other things, your IP address and other information stored on your device in the form of cookies. This information is used to provide us, as the operators of the accounts, with statistical information about the interaction with us.
(3) The data collected about you in this context is processed by the platforms and may be transferred to countries outside the European Union, in particular the USA. The USA is considered by the European Court of Justice to be a country with a level of data protection that is currently insufficient according to EU standards. This could pose risks for users, as it may make it more difficult to enforce their rights, for example. According to their own statements, all of the aforementioned providers maintain an adequate level of data protection that corresponds to that of the former EU-US Privacy Shield, and we have concluded standard data protection clauses with the companies. We do not know how social media platforms use the data from your visit to our account and interaction with our posts for their own purposes, how long this data is stored, or whether data is passed on to third parties. Data processing may differ depending on whether you are registered and logged in to the social network or visit the site as an unregistered and/or unlogged-in user. When you access a post or the account, the IP address assigned to your device is transmitted to the social media platform provider. If you are currently logged in as a user, a cookie on your device can be used to track how you have moved around the network. Buttons embedded in websites are used to. When you access a post or account, the IP address assigned to your device is transmitted to the social media platform provider. If you are currently logged in as a user, a cookie on your device can be used to track your movements on the network. Buttons embedded in websites enable the platforms to record your visits to these websites and assign them to your respective profile. This data can be used to tailor content or advertising to you. If you want to avoid this, you should log out or deactivate the “stay logged in” function, delete the cookies on your device, and restart your browser.
(4) As the provider of the information service, we also only process the data from your use of our service that you provide to us and that requires interaction. For example, if you ask a question that we can only answer by email, we will store your information in accordance with the general principles of our data processing, which we describe in this privacy policy.
(5) To exercise your rights as a data subject, you can contact either us or the provider of the social media platform. If one party is not responsible for responding or needs to obtain the information from the other party, we or the provider will forward your request to the respective partner. If you have any questions about profile creation or the processing of your data when using the website, please contact the operator of the social media platform directly. If you have any questions about the processing of your interaction with us on our site, please write to us using the contact details provided above [see § 1 (2)].
(6) The providers describe what information the social media platform receives and how it is used in their privacy policies. There you will also find information about contact options and settings for advertisements.
§ 12 Applications
(1) The controller collects and processes the personal data of applicants for the purpose of handling the application process. This data is processed on the basis of Art. 6 (1) (b) GDPR.
(2) For this purpose, we work with the online service FEL, which distributes the job advertisements of Kiel-Marketing GmbH/e.V. on various application portals. FEL has access to application data and forwards it to Kiel-Marketing. There is a data processing agreement between FEL and Kiel-Marketing.
(3) If the controller does not conclude an employment contract with the applicant, the application documents will be deleted six months after notification of rejection, provided that no other legitimate interests of the controller prevent deletion. Other legitimate interests pursuant to Art. 6 (1) (f) GDPR may include, for example, the obligation to provide evidence in proceedings under the Allgemeines Gleichbehandlungsgesetz (AGG). Please do not send us any photos, information on your marital status, or other sensitive data. If you send your application to us by unencrypted email, it cannot be ruled out that a third party could gain access to the content of your email. If you feel that sending your application by email is too insecure, please send us your application documents by post.
§ 13 Sweepstakes
You can find our privacy policy for sweepstakes here.
§ 14 Your rights
(1) You have the following rights vis-à-vis a controller with regard to personal data concerning you:
– Right to information,
– Right to rectification or erasure,
– Right to restriction of processing,
– Right to object to processing,
– Right to data portability.
(2) You also have the right to complain to a data protection supervisory authority about our processing of your personal data.
The contact details of the data protection supervisory authorities can be found at the following link:
https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html
§ 15 Objecting to the processing of your data or withdrawing your consent
(1) If you have given your consent to the processing of your data, you can revoke this consent at any time by post to Kiel-Marketing e. V. / GmbH, Andreas-Gayk-Str. 31B - Neues Rathaus, 24103 Kiel, Germany, or by email to datenschutz(at)kiel-marketing.de. Such revocation affects the permissibility of processing your personal data after you have notified us of your revocation. The permissibility of processing your data up to the time of your revocation remains unaffected.
(2) If we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if the processing is not necessary to fulfill a contract with you, which is explained in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your objection, we will examine the situation and either stop or adjust the data processing or point out to you our compelling legitimate reasons for continuing the processing.
(3) You may, of course, object to the processing of your personal data for advertising and data analysis purposes at any time. The best way to exercise your right to object to advertising is to use the contact details provided above.
§ 16 Changes to this privacy policy
This privacy policy is current as of January 26, 2026. However, we would like to point out that from time to time, actual or legal changes may necessitate a revision of this privacy policy.