Privacy Policy

Protecting your data is important to us. Here you can find details on how your information is used.

1. Privacy at a Glance

General Information
The following notes provide a simple overview of what happens to your personal data when you visit our website. Personal data is any information that can be used to identify you personally. For detailed information on data protection, please refer to our full Privacy Policy listed below.

Data Collection on Our Website
Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. You can find their contact details in the imprint of this website.

How do we collect your data?
Some of your data is collected when you provide it to us—for example, when you fill out a contact form.

Other data is automatically collected by our IT systems when you visit the website. This primarily includes technical data such as your web browser, operating system, or the time of your visit. This data is collected automatically as soon as you access our website.

What do we use your data for?
Some of the data is collected to ensure error-free operation of the website. Other data may be used to analyze user behavior.

What rights do you have regarding your data?
You have the right at any time to request free information about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction, blocking, or deletion of this data. For this purpose, or for any other questions concerning data protection, you can contact us at the address provided in the imprint. Additionally, you have the right to lodge a complaint with the relevant supervisory authority.

Analysis Tools and Third-Party Tools
When you visit our website, your browsing behavior may be analyzed statistically. This mainly happens through cookies and so-called analysis programs. The analysis of your browsing behavior is usually anonymous; it cannot be traced back to you personally. You can object to this analysis or prevent it by not using certain tools. Detailed information is provided in the full Privacy Policy below.

You have the right to object to this analysis. The ways to object will be explained in this Privacy Policy.

2. General Information and Mandatory Disclosures

Data Protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with legal data protection regulations as well as this Privacy Policy.

When you use this website, various personal data is collected. Personal data is any information that can identify you personally. This Privacy Policy explains which data we collect and how we use it, as well as the purposes for which it is processed.

Please note that data transmission over the internet (e.g., via email communication) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Responsible Entity
The responsible entity for data processing on this website is:

TourCert gGmbH
Blumenstr. 19
70182 Stuttgart
Phone: +49 711 248397-0
E-Mail: info@tourcert.org 

The responsible party is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g., names, email addresses, or similar information).

Revocation of Consent for Data Processing
Many data processing activities are only possible with your explicit consent. You can revoke any consent you have previously given at any time. A simple notification by email to us is sufficient. The lawfulness of any data processing carried out prior to the revocation remains unaffected.

Right to Lodge a Complaint with the Supervisory Authority
In the event of data protection violations, you have the right to file a complaint with the relevant supervisory authority. The competent authority for data protection matters is the State Data Protection Officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Right to Data Portability
You have the right to receive data that we process automatically based on your consent or in fulfillment of a contract, in a commonly used, machine-readable format, either for yourself or for transfer to a third party. If you request direct transfer of the data to another responsible party, this will only be carried out to the extent technically feasible.

SSL or TLS Encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the website operator, this site uses SSL or TLS encryption. You can recognize a secure connection when the browser address changes from “http://” to “https://” and by the lock symbol in your browser’s address bar.

When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

Access, Blocking, Deletion
Under applicable legal provisions, you have the right at any time to receive free information about your stored personal data, its origin, recipients, and the purpose of processing. You also have the right, if necessary, to request the correction, blocking, or deletion of this data. For this purpose, or for any other questions regarding personal data, you can contact us at the address provided in the imprint.

3. Data Collection on Our Website

Cookies

Our websites use so-called cookies. Cookies do not cause any harm to your computer and do not contain viruses. They are used to make our offerings more user-friendly, effective, and secure. Cookies are small text files stored on your device by your browser.

Most of the cookies we use are “session cookies,” which are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These persistent cookies allow us to recognize your browser on your next visit.

You can configure your browser to be informed about cookie settings, to allow cookies only on a case-by-case basis, to block cookies in general, or to automatically delete cookies when closing the browser. Please note that disabling cookies may limit the functionality of this website.

Cookies that are necessary for carrying out electronic communication or for providing certain functions you request are stored based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. Other cookies (e.g., for analyzing your browsing behavior) are handled separately in this Privacy Policy.

Server Log Files
The provider of the website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:

• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

These data are not merged with other data sources.

The collection of these data is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free display and optimization of its website, which requires the collection of server log files.

Contact Form
When you send inquiries via our contact form, the information you provide, including the contact details you enter, is stored for the purpose of handling your request and for possible follow-up questions. We do not share this data without your consent.

Processing of data entered into the contact form is therefore solely based on your consent (Article 6(1)(a) GDPR). You may revoke this consent at any time by sending an informal email to us. The legality of the data processing carried out prior to the revocation remains unaffected.

The data you provide in the contact form will remain with us until you request its deletion, revoke your consent for storage, or the purpose of data storage no longer applies (e.g., after your request has been processed). Mandatory legal retention periods remain unaffected.

Data Transmission for Contract Conclusion of Services and Digital Content
We only transmit personal data to third parties if this is necessary for the processing of a contract, for example, to the financial institution handling the payment.

Further transmission of your data does not occur unless you have explicitly consented to it. Your data will not be shared with third parties without your express consent, for example for advertising purposes.

The legal basis for data processing is Article 6(1)(b) GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

4. Social Media

5. Analytics Tools and Advertising

Google Analytics
This website uses functions from the web analytics service Google Analytics, provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called “cookies,” which are text files stored on your computer that enable the analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

The storage of Google Analytics cookies is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its web offering and its advertising.

IP Anonymization
We have activated IP anonymization on this website. Your IP address will be shortened by Google within member states of the European Union or other states party to the European Economic Area before transmission to the USA. Only in exceptional cases is the full IP address sent to a Google server in the USA and shortened there. On behalf of the website operator, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide further services related to website and internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

Browser Plugi
You can prevent the storage of cookies by adjusting the settings of your browser software. Please note, however, that in this case you may not be able to use all functions of this website fully. You can also prevent the collection of data generated by the cookie about your use of the website (including your IP address) and its processing by Google by downloading and installing the browser plugin available at: https://tools.google.com/dlpage/gaoptout?hl=de.

Opt-Out from Data Collection
You can prevent the collection of your data by Google Analytics by clicking the following link. An opt-out cookie will be set, preventing your data from being collected during future visits to this website: Disable Google Analytics.

More information on how Google Analytics handles user data can be found in Google’s Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=de

Data Processing Agreement
We have concluded a data processing agreement with Google and fully implement the strict requirements of German data protection authorities when using Google Analytics.

Demographic Features in Google Analytics
This website uses the “demographic features” function of Google Analytics, allowing reports to be generated containing information about the age, gender, and interests of website visitors. These data come from interest-based advertising by Google and visitor data from third parties. The data cannot be assigned to any specific person. You can disable this function at any time in your Google account ad settings or generally prohibit the collection of your data by Google Analytics as described under “Opt-Out from Data Collection.”

Google AdWords and Google Conversion Tracking
This website uses Google AdWords, an online advertising program provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

As part of Google AdWords, we use so-called conversion tracking. When you click on an ad placed by Google, a conversion tracking cookie is set. These cookies are small text files stored by your browser on your computer. They expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page.

Each Google AdWords customer receives a different cookie. The cookies cannot be tracked across websites of AdWords customers. The information collected using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers receive the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that would personally identify users. If you do not want to participate in tracking, you can disable the Google conversion tracking cookie in your browser settings. You will then not be included in the conversion tracking statistics.

The storage of “conversion cookies” is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its web offering and advertising.

More information on Google AdWords and conversion tracking can be found in Google’s Privacy Policy: https://www.google.de/policies/privacy.

Browser Settings
You can configure your browser to be informed about cookie settings, to allow cookies only on a case-by-case basis, to block cookies in general, or to automatically delete cookies when closing the browser. Please note that disabling cookies may limit the functionality of this website.

6. Newsletter

Newsletter Data
If you wish to subscribe to the newsletter offered on this website, we require your email address and information that allows us to verify that you are the owner of the email address and consent to receiving the newsletter. No additional data is collected, except on a voluntary basis. These data are used exclusively to send the requested information and are not shared with third parties.

Processing of the data entered in the newsletter subscription form is based solely on your consent (Art. 6(1)(a) GDPR). You can revoke your consent for the storage of data, the use of your email address, and receipt of the newsletter at any time, for example via the “Unsubscribe” link in the newsletter. The lawfulness of any data processing carried out prior to the revocation remains unaffected.

The data you provide for newsletter subscription will be stored until you unsubscribe and deleted after cancellation. Data stored for other purposes (e.g., email addresses for the members’ area) remain unaffected.

Newsletter2Go
This website uses Newsletter2Go for sending newsletters. The provider is Newsletter2Go GmbH, Nürnberger Straße 8, 10787 Berlin, Germany.

Newsletter2Go is a service that organizes and analyzes newsletter distribution. The data you provide for newsletter subscription are stored on Newsletter2Go servers in Germany.

If you do not wish your data to be analyzed by Newsletter2Go, you must unsubscribe from the newsletter. A corresponding link is provided in every newsletter message.

Data Analysis by Newsletter2Go
Newsletter2Go enables us to analyze our newsletter campaigns. For example, we can see whether a newsletter message has been opened and which links have been clicked. This allows us to determine which links are clicked most frequently.

We can also track whether specific predefined actions were carried out after opening or clicking a link (conversion rate), such as whether a purchase was made following a newsletter click.

Newsletter2Go also allows us to segment newsletter recipients into different categories (“clustering”), for example by age, gender, or location. This helps tailor newsletters to specific target groups.

For detailed information on Newsletter2Go features, see: https://www.newsletter2go.de/features/newsletter-software

Legal Basis
Data processing is based on your consent (Art. 6(1)(a) GDPR). You may revoke your consent at any time. The lawfulness of processing carried out prior to revocation remains unaffected.

Storage Period
Data provided for newsletter subscription are stored until you unsubscribe. After cancellation, data are deleted both from our servers and from Newsletter2Go servers. Data stored for other purposes (e.g., email addresses for the members’ area) remain unaffected.

Detailed information can be found in the Newsletter2Go Privacy Policy: https://www.newsletter2go.de/features/datenschutz-2

Data Processing Agreement
We have concluded a contract with Newsletter2Go, obliging them to protect our customers’ data and not share it with third parties. This agreement can be viewed here: https://www.newsletter2go.de/docs/datenschutz/ADV_Muster_Newsletter2Go_GmbH_latest_Form.pdf?x48278

7. Plugins and Tools

YouTube
Our website uses plugins from the Google-operated platform YouTube. The provider of the site is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

When you visit a page on our website that contains a YouTube plugin, a connection is established to YouTube servers. This informs the YouTube server which pages you have visited on our website.

If you are logged into your YouTube account, you allow YouTube to directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account.

The use of YouTube is in the interest of providing an appealing presentation of our online offerings. This constitutes a legitimate interest under Article 6(1)(f) GDPR.

For more information on how YouTube handles user data, please refer to YouTube’s Privacy Policy: https://www.google.de/intl/de/policies/privacy

Google Maps
This website uses the Google Maps service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the features of Google Maps, it is necessary to store your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this website has no influence over this data transmission.

The use of Google Maps is in the interest of presenting our online offerings attractively and making the locations listed on our website easy to find. This constitutes a legitimate interest under Article 6(1)(f) GDPR.

More information on how Google handles user data can be found in Google’s Privacy Policy: https://www.google.de/intl/de/policies/privacy/

Sources: eRecht24, Internet Law Portal by Attorney Sören Siebert, https://www.e-recht24.de

8. Data Collection for Webinars

Data Protection Regarding Zoom
We use Zoom to conduct conference calls, online meetings, and video conferences. Zoom is a service provided by Zoom Video Communications, Inc., based in the USA.

The responsible entity for data processing directly related to the conduct of online meetings is TourCert gGmbH.

Types and Scope of Data Processed
The types of data processed depend on the information you provide before or during participation in an online meeting.

Personal Data of Participants:
First name, last name, email address, password (if Single Sign-On is not used), phone number, department, and profile picture (optional).

Meeting Metadata:
Meeting topic, participant IP addresses, device/hardware information, meeting description (optional).

Recorded Meetings:

MP4 files of all video, audio, and presentation recordings, M4A files of audio recordings, text files of the chat.

Telephone Dial-In:
Incoming and outgoing phone numbers, country, start and end times, and potentially additional connection data (e.g., device IP address).

Text, Audio, and Video Data:
Chat, Q&A, and survey entries are processed to display them during the meeting and, if necessary, record them. Microphone and camera data are processed during the meeting to enable video display and audio playback. You may mute the microphone or turn off the camera at any time.

To enter the meeting room, at minimum, you must provide your name.

Note: When visiting Zoom’s website, Zoom Video Communications, Inc. is responsible for data processing. Accessing the site is only required to download the Zoom software.

Scope of Processing
If online meetings are recorded, we will inform you transparently in advance and request consent if required. The recording status is also displayed in the Zoom app.

Chat content may be logged if necessary to document meeting results, though this is generally not the case. For webinars, questions asked by participants may be processed for recording and follow-up purposes.

For registered Zoom users, reports on online meetings (meeting metadata, phone dial-in data, Q&A in webinars, survey results) may be stored by Zoom for up to one month.

No automated decision-making under Art. 22 GDPR takes place.

Legal Basis for Data Processing

For TourCert employees, data processing is based on § 26 BDSG.

If personal data processed during Zoom use is not required for employment purposes but is essential for using Zoom, processing is based on Art. 6(1)(f) GDPR (legitimate interest in effective online meetings).

For contractual meetings, Art. 6(1)(b) GDPR applies.

Without a contractual relationship, Art. 6(1)(f) GDPR applies, again based on our legitimate interest in conducting online meetings effectively.

Data Sharing
Personal data processed during online meetings are generally not shared with third parties, except where intended for sharing (e.g., communicating meeting content to clients or third parties).

Other Recipients: Zoom Video Communications, Inc. necessarily accesses the data under our data processing agreement.

Transfers to Third Countries:
If personal data is processed outside the EU, EEA, or Switzerland, it occurs only with your consent or based on our legitimate interests, and only to countries with recognized data protection standards, e.g., Privacy Shield–certified US processors. Processing may also rely on standard contractual clauses or other recognized safeguards.

Zoom, as a US-based service, involves processing in a third country. We have concluded a data processing agreement with Zoom in compliance with Art. 28 GDPR.

Your Rights as a Data Subject

• Right to access your personal data.
• Right to rectification, deletion, or restriction of processing, where legally applicable.
• Right to object to processing within legal limits.
• Right to data portability under applicable law.
• Right to lodge a complaint with a data protection authority.

Data Deletion
We delete personal data when it is no longer needed. Exceptions include: fulfilling contractual obligations, warranty claims, or legal retention periods. Deletion occurs after these requirements expire.

We update this privacy notice whenever changes to data processing occur or for other relevant reasons.

9. Eventbrite

We use Eventbrite to sell tickets for our webinars and in-person seminars. Eventbrite is a ticketing and registration platform provided by Eventbrite, Inc., based in Delaware, USA.

For detailed information on Eventbrite’s data protection practices, please refer to their Privacy Policy here.