Data Protection Policy

Name and address of the controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection regulations of the Member States and other regulations relating to data protection is:

Europa-Park GmbH & Co. Mack KG
Europa-Park-Str. 2
77977 Rust
Germany

Tel.: +49 (0)7822-770
Email: info@europapark.de
Website: https://www.europapark.de/en

Name and address of the Data Protection Officer

The controller’s Data Protection Officer is:
Sina Krenz
Tel.: +49 (0)7822-770
Email: datenschutz@europapark.de

Newsletter

Description and scope of data processing

You have the option of subscribing to a free Europa-Park newsletter on our website. When registering for the newsletter, the details stated on the input screen are transmitted to us. This data usually includes your email address as well as your first name and surname. Your language, interests, etc. may also be gathered.

The following data is also collected upon registration:

• IP address of the requesting computer
• Date and time of registration
• Language setting

During the registration process, we obtain your consent for processing of the data and we advise you of our Privacy Policy. Further information is available under the option personalisation.

Where you state your email address when purchasing goods or services on our website, this address may be used by us for sending newsletters if separate reference to this is made. In such cases, we shall only use the newsletter to advertise our own goods and services that are similar to those purchased.

No data processed for the purpose of sending newsletters shall be passed on to third parties. The data is used solely for tailoring the newsletter to you and sending it to you.

Emarsys eMarketing System AG, Hansischer-Straße 10, 80339 München and Widas ID GmbH Maybachstraße 2 71299 Wimsheim, Germany, have been commissioned as the processor in charge of distributing, personalising and analysing Europa-Park newsletters.

Further information on newsletter personalisation is provided in the following.

Legal basis for data processing

Art. 6 (1) a) GDPR provides the legal basis for processing the data following the user’s registration for the newsletter, where consent has been given by the user to do so.

Section 7 (3) UWG [German Law Against Unfair Competition] provides the legal basis for sending the newsletter as a result of purchasing goods or services.

Purpose of data processing

The user’s email address is stored for the purpose of sending the newsletter.

The purpose of collecting other personal data during the registration process is to prevent misuse of the services or the email address used and to tailor offers to you.

Retention period

The data is erased as soon as it is no longer required to achieve the purpose for which it was collected. In connection with distributing the newsletter, the user’s email address is therefore retained until the newsletter subscription is terminated; in the case of revocation, the data shall be erased after a short processing period, insofar that there is no further purpose for it to be retained.

Other personal data collected during the registration process is usually deleted after a period of seven days.

Cancellation option

The user may cancel their subscription to the newsletter at any time. Each newsletter contains a corresponding link for this purpose.

You may cancel your newsletter subscription by posting your cancellation notification to Europa-Park GmbH & Co Mack KG, Europa-Park-Str. 2, 77977 Rust, Germany or emailing newsletter-service@europapark.de.

This link also provides an option for you to withdraw your consent to the storage of the personal data collected during the registration process after a short processing period.

Personalisation

Description and scope of data processing

We use the data that has been gathered in the scope of you using Europa-Park’s offers (among others website, apps, newsletter) to send you a personalised newsletter (if you have subscribed to it) as well as other personalised advertising campaigns and for consultancy services, maintenance of further customer relations, market research and analysis. Europa-Park offers include Europa-Park, Rulantica water world, Europa-Park Hotels, Camp Resort, Europa-Park Camping, Europa-Park Events, YULLBE and the online shop, ticket shop, hotel booking engine, etc.

When provided in addition to your email address, the following data is usually processed in this regard:

Salutation, gender, first and surname, date of birth, postcode, country of residence, language. Clubcard membership status, Clubcard number, email history, interests regarding newsletter topics and purchases, hotel reservations and stays, including room category and number, as well as the category of overnight guests, ticket purchases and stays, other orders, additional purchases and reservations, voucher redemption, event participation, usage behaviour during a stay, consent status for cookies, user ID, language, device information. Opening and interaction rate for emails.

If the controller of Europa-Park GmbH & Co. Mack KG did not directly collect these data, other companies with a direct relation to Europa-Park shall transmit the data:

• Europa-Park GmbH & Co - Shopping KG regarding registration and purchases in the online shop
• Rulantica - GmbH & Co Mack KG regarding a visit to Rulantica
• Europa-Park GmbH & Co - Hotelbetriebe KG regarding hotel stays
• Mack One Deutschland GmbH & Co KG in regards to special offers such as YULLBE.

Snowflake Inc., Munich, Mies-van-der-Rohe-Straße 8, 80807 Munich, Germany, Emarsys eMarketing System AG, Hansischer-Straße 10, 80339 Munich, Germany and the service provider Cidaas, of Widas ID GmbH Maybachstraße 2 71299 Wimsheim, Germany, shall act as the processor for analysing the data.

Legal basis and purpose of data processing

The legal basis for data processing is our legitimate interest (Art. 6 (1) f) GDPR) in getting to know our customers better and being able to address them in a personalised manner. This is necessary for promoting sales and supporting customers.

Retention period

The data is erased as soon as it is no longer required to achieve the purpose for which it was collected. This shall occur, among other things, if we have not been able to detect you acting on any Europa-Park offer for a long time, and there is no further purpose for storing your information.

If you object to the processing of data, the data shall be erased after a short processing time, unless the data must be saved for another purpose.

Objection and deletion options

You the option of objecting to the processing of data. To do this, please contact newsletter-service@europapark.de.

You can configure cookies in the cookie settings to prevent marketing campaigns from being personalised.

Contact form and email contact

Description and scope of data processing

Contact forms, which can be used to contact us electronically, are readily available on our website. If the user makes use of this option, the data entered on the input screen will be transmitted to us and stored by us. This data includes:

• First name and surname
• Address details
• Email address
• Content of the message
• Where provided, telephone number

At the time the message is sent, the following data is also temporarily stored:

• The user’s IP address
• Date and time of registration

Before the contact form is transmitted, we obtain your consent for the processing of the data and refer you to this Privacy Policy.

Alternatively, you may contact us using the email address provided. In such cases, the user’s personal data transmitted in the email is stored.

The data is not passed on to third parties in this connection. The data is used solely for processing the conversation.

Legal basis for data processing

Art. 6 (1) a) GDPR provides the legal basis for processing data, where consent has been given by the user to do so.

Art. 6 (1) f) GDPR provides the legal basis for processing the personal data that is transmitted in an email or using the contact form. Art. 6 (1) b) GDPR provides the legal basis for processing data where the purpose of the email contact is to conclude a contract.

Purpose of data processing

We process the personal data entered on the input screen solely for the purpose of processing the request. If contact is made by email, this also constitutes the legitimate interest required for processing of the data.

The purpose of the other personal data processed during the transmission of the contact form is to prevent misuse of the contact form and to ensure the safety of our information technology systems.

Retention period

The data is erased as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data entered on the input screen of the contact form and the personal data sent by email, this is the case when the conversation with the user has ended. The conversation is deemed to have ended when the circumstances suggest that the issue has been conclusively resolved.

Additional personal data collected during the transmission of the contact form is usually deleted after a period of seven days.

Objection and deletion options

The user has the right at any time to withdraw their consent to processing of the personal data. If the user contacts us by email, they may object to the storage of their personal data at any time. In such cases, the conversation cannot be continued.

The data can be deleted at any time by logging in to the user profile or by sending an email to datenschutz@europapark.de.

In this case, all personal data stored when contacting us is deleted.

Cookies for analysis and marketing purposes

You may change your settings for cookies used on our website in the ‘Cookie settings’ section located in the website’s footer. You can manage your consent status for individual cookies and entire categories there. Unless otherwise stated, the legal basis for processing is your consent in accordance with Article 6 (1) a) GDPR. Further details on the services integrated on our website are provided in the following.

Web analysis by Matomo (formerly PIWIK)

We use the open-source software tool Matomo (formerly PIWIK) on our website to analyse the surfing habits of our users. The software places a cookie on the user’s computer (see above for a description of cookies). If individual pages of our website are accessed, we store the following data:

• Two bytes of the IP address of the calling system of the user
• The accessed website
• The website from which the user was referred to the accessed website (referrer)
• The sub-pages called up from the accessed website
• The amount of time spent browsing the website
• The frequency of visits to the website

The software runs exclusively on our website’s servers. The users’ personal data is stored there only. The data is not passed on to third parties.

The software is configured in such a way that it prevents the full IP addresses from being stored; 2 bytes of the IP address are blanked out (e.g. 192.168.xxx.xxx). This means that the truncated IP address can no longer be linked to the requesting computer.

You can find more information on the privacy settings of the Matomo software at the following link: https://matomo.org/docs/privacy/.

Web analysis by Amazon Pixel

This website uses the web analysis services Amazon Conversion Pixel and Amazon Remarketing Pixel developed by Amazon.com, Inc., 410 Terry Ave. North Seattle, WA, USA.

When you visit this website, Amazon receives the information that you have accessed our website. For this purpose, Amazon downloads a so-called web beacon (invisible graphics), thereby setting a cookie on your computer. The data specified under the ‘Data processing on this website’ section of this Policy is then transmitted to Amazon. The IP address communicated by your browser in this respect is not combined with other Amazon data.

Amazon uses the cookie placed on your computer to recognise you on other websites, in apps and within Amazon services, and to provide you with personalised advertising, where appropriate.

You can prevent cookies from being stored on your computer by adjusting your browser settings accordingly. We must point out, however, that in this case not all functions of this website, such as the shopping cart, may be available to you to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website for Amazon, as well as the processing of this data by Amazon, by clicking on this link and selecting the setting ‘Do not personalise ads from Amazon for this Internet browser’: https://www.amazon.de/adprefs. Alternatively, you can select the appropriate settings at: http://www.youronlinechoices.com.

An opt-out cookie is then activated in your browser, which prevents your data from being collected by Amazon Pixel when you visit our website in future. This applies until such time as you delete the opt-out cookie.

You can find further information from Amazon on the collection of data at: https://www.amazon.de/gp/help/customer/display.html/?ie=UTF8&nodeId=3312401&ref_=a20m_us_fnav_l_prvcy_de

We have no influence over the data collected, nor are we aware of the full scope of data collection. This data is transferred to the USA and evaluated there.

Further information on the purpose and scope of data collection and processing and further information on your rights in this connection and the setting options to protect your privacy is set out in the above Privacy Policy and is available from: Amazon EU S.à.r.l, Amazon Services Europe S.à.r. l. and Amazon Media EU S.à.r. l., all located at 5, Rue Plaetis, 2338 Luxembourg; email: ad-feedback@amazon.de. Amazon.de GmbH, Marcel-Breuer-Str. 12, 80807 Munich is commissioned as the data processor.

Web analysis by Google Analytics with anonymisation function

We use Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter referred to as ‘Google’, on our website. Google Analytics uses so-called cookies; these are text files that are stored on your computer and enable an analysis of how you use the website.

The information collected by the cookies, for example, the time, place and frequency of your website visits, including your IP address, is transmitted to a Google server in the USA and stored there.

On our website, we use Google Analytics with the suffix ‘_gat._anonymizeIp’. In this case, your IP address will be truncated by Google within the Member States of the European Union or in other countries that are party to the Agreement on the European Economic Area and thereby anonymised.

Google will use this information to evaluate how you use our website, to compile reports on website activities for us, and to provide further services connected with the use of the website and the Internet. Google will also pass this information on to third parties if necessary, insofar as this is legally stipulated or insofar as third parties process this data on behalf of Google.

Google claims that it will not link your IP address with other Google data under any circumstances. You can prevent the installation of cookies by adjusting your browser settings accordingly; in this case, however, we must point out that not all functions of this website may be available to you to their full extent.

Google also offers a deactivation add-on for the most common browsers, which gives you more control over what data is collected by Google on the websites visited by you. The add-on informs Google Analytics JavaScript (ga.js) that no information about the website visit should be sent to Google Analytics. However, the Google Analytics deactivation add-on for browsers does not prevent information from being transmitted to us or to any other web analysis services used by us. You can find further information on the installation of the browser add-on at this link: https://tools.google.com/dlpage/gaoptout?hl=en

Google Ads

We also use Google Analytics to analyse data from Double-Click cookies and AdWords for statistical purposes. If you do not wish this to take place, you can disable it through the Ads Preferences Manager (https://www.google.com/settings/ads/onweb/?hl=en).

Web analysis by Facebook Pixel

This website uses the ‘Custom Audiences’ remarketing function of Facebook Inc. (‘Facebook’). The purpose of this function is to display interest-related ads (‘Facebook ads’) to visitors to this website when logged on to the social network Facebook. To this end, the Facebook remarketing tag has been implemented on this website. This tag makes it possible to establish a direct connection to the Facebook servers when the website is accessed. The information that you have visited this website is sent to the Facebook server, and Facebook links this information to your personal Facebook user account. You can find more information on the collection and use of data by Facebook, your rights with regard to the above and settings to protect your privacy can be found in Facebook’s Data Policy: https://www.facebook.com/about/privacy/. Alternatively, you may disable the ‘Custom Audiences’ remarketing function at https://www.facebook.com/settings/?tab=ads#_=_. You need to be logged into Facebook to do so.

Web analysis by Hotjar

To improve the user experience on our website, we use the Hotjar software (http://www.hotjar.com, 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta, Europe). Hotjar makes it possible to record and evaluate user behaviour (mouse movements, clicks, scrolling, etc.). To this end, Hotjar sets cookies on the user’s end device, enabling it to store user data (e.g. browser information, operating system, time spent on the website, etc.) in anonymised form. You can prevent your data from being processed by Hotjar by disabling cookies in your web browser settings and deleting cookies that are already enabled. You can find out more about data processing by Hotjar here: https://www.hotjar.com/privacy.

If you do not wish website analysis to be carried out by Hotjar, you can opt out from this on all websites that use Hotjar by setting a DoNotTrack header in your browser. You can find information about this on the following website: https://www.hotjar.com/opt-out.

Web analysis by Optimizely

This website uses Optimizely, a web analysis service provided by Optimizely, Inc. (‘Optimizely’). Optimizely uses cookies which are stored on your computer and enable an analysis of how you use the website. The information generated by the cookies about your use of this website is normally sent to an Optimizely server in the USA and stored there.

If IP anonymisation is enabled on this website, your IP address will, however, first be truncated by Optimizely within the Member States of the European Union or in other countries that are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to an Optimizely server in the USA and truncated there. On behalf of this website operator, Optimizely will use this information to assess your use of the website and to compile reports on website activity.

The IP address communicated by your browser as part of Optimizely will not be combined with other Optimizely data. You can prevent the installation of cookies by adjusting your browser settings accordingly; in this case, however, we must point out that not all functions of this website may be available to you to their full extent. You can also disable Optimizely tracking at any time (thus preventing data generated by the cookie relating to your use of the website – including your IP address – from being collected and processed by Optimizely) by following the instructions at http://www.optimizely.com/opt_out.

You can find more information on the terms and conditions of use and data protection at https://www.optimizely.com/terms/ and https://www.optimizely.com/privacy/.

Please note that we have enabled IP anonymisation on this website to ensure that IP addresses are collected anonymously.

Web analysis by Local Measure

We also use the social media aggregation tool https://www.localmeasure.com on our website. This tool enables us to filter, curate and compile galleries of content that is publicly available on Facebook, Twitter and Instagram and to reproduce such content on our websites. If you do not want your posts to be used in this manner, please send an email objecting to such use to datenschutz@europapark.de.

Art. 6 (1) f) GDPR provides the legal basis for processing the personal data of users.

Processing the users’ personal data enables us to analyse the surfing habits of our users. Evaluating the data obtained in this way enables us to compile information on how the individual elements of our website are used. This helps us to optimise our website and to continually make it more user-friendly. These purposes also constitute our legitimate interests in data processing pursuant to Art. 6 (1) f) GDPR. Anonymising the IP address ensures that the users’ interest in the protection of their personal data is adequately taken into account.

The data is deleted as soon as it is no longer required for record-keeping purposes. If possible, this is restricted to 38 months in the tools used.

Web analysis by Google Fonts

A JavaScript code is loaded on our website. If you have activated JavaScript in your browser and have not installed a JavaScript blocker, your browser will transmit your personal data where applicable. We are not aware of what data is linked to the received data and for what purposes this data is used. In order to fully prevent the execution of JavaScript code, you can install a JavaScript blocker (e.g. https://www.noscript.net).

We use the following web fonts on our website: Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043 US (you can find more information in Google’s Privacy Policy: https://policies.google.com/privacy?hl=en).

External content

You can change your data processing setting for external content in the cookie settings, which can be found either in the footer of the website or via a privacy button. Some of our website offerings have directly integrated external content, e.g. via iFrames. If you have agreed to this, it means that the providers of this external content can set cookies directly for you and can process data. We do not have any direct influence over this data processing. For more information about this, please refer to the respective data privacy statement issued by the provider of the external content.

Web analysis by YouTube

This website contains at least one plug-in from YouTube, a company owned by Google Inc., based in San Bruno, California, USA. As soon as you visit any pages of our website that contain a YouTube plug-in, a connection is established to the YouTube servers. The YouTube server is informed of what specific page of our website you visited. Should you be logged in to your YouTube account at the same time, this would enable YouTube to establish a direct link between your personal profile and your surfing habits. You can prevent this link from being established by logging out of your account beforehand. Further information on the collection and use of your data by YouTube is available in YouTube’s Privacy Policy at https://www.youtube.com.

Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR, and you have the following rights vis-à-vis the controller:

Right to information

You have the right to obtain information about your personal data that we process. In the case of a request for information that is not made in writing, we ask for your understanding that we may require you to provide evidence proving that you are the person you claim to be. (Art. 15 GDPR)

Right to rectification, erasure and restriction

Furthermore, you have a right to rectification or erasure of data or restriction of processing insofar as you are so entitled by law. (Art. 16, 17 and 18 GDPR). In such cases, we are obliged to notify any recipients of the rectification, erasure or restriction of processing of data (Art. 19 GDPR).

Right to data portability

You also have a right to data portability within the framework of the data protection regulations (Art. 20 GDPR). This applies to data that you have provided to us.

Right of objection

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data that is performed based on Art. 6 (1) e) or f) GDPR; this shall also apply for any profiling based on these provisions.

In particular, you have the right to object in accordance with Art. 21 (1) and (2) GDPR to the processing of your data, in particular in connection with direct advertising (newsletter), if this is based on a legitimate interest or a weighing of interests.

Right to withdrawal of the declaration of consent under data protection law

You have the right to withdraw your declaration of consent under data protection law at any time and with effect for the future. The withdrawal of consent shall not affect the lawfulness of any processing for which consent was given and which was carried out prior to the withdrawal thereof.

Automated individual decision-making process (including profiling)

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects on you or significantly affects you in a similar manner.

Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual place of residence, place of work or place of the alleged infringement, where it is your opinion that the processing of your personal data is in breach of GDPR regulations (Art. 77 GDPR).

The supervisory authority with which the complaint was lodged shall inform the complainant on the progress and the outcome of the complaint, including the possibility of judicial remedy pursuant to Article 78 GDPR.