Privacy Policy

This data protection declaration informs users about the nature, scope and purpose of the collection and use of personal data by the responsible provider, Thüringer Tourismus GmbH.

Thueringer Tourismus GmbH
Willy-Brandt-Platz 1, 99084 Erfurt, Germany

Telephone: +49(0)361/37420


on this website (hereinafter referred to as "offer").

Data Protection Officer:

Dr. jur. Steffen Böhm
Böhm Matthes Vent
Peterstraße 3
99084 Erfurt
T 0361 213011-0
F 0361 213011-90  

The legal basis can be found in the German Telemedia Act (TMG) and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data, on the free movement of such data and repealing Directive 95/46/EC (EU-DSGVO).

Access data/ Server log files

The provider (or his web space provider) collects data on every access to the offer (so-called server log files). The access data includes:

Name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.

The provider uses the log data only for statistical evaluations for the purpose of the operation, security and optimisation of the offer. However, the provider reserves the right to check the log data subsequently if there is a justified suspicion of unlawful use on the basis of concrete indications.

Handling of personal data

Personal data is information that can be used to identify a person, i.e. information that can be traced back to a person. This includes the name, email address or telephone number. But also data about preferences, hobbies, memberships or which websites were viewed by someone count as personal data.

Personal data is only collected, used and passed on by the provider if this is permitted by law or the user consents to the collection of data.


When contacting the provider (for example via contact form or e-mail), the user's details are stored for the purpose of processing the enquiry and in the event that follow-up questions arise.

Applicant data

We process applicant data in accordance with the legal requirements only for the purpose of and within the scope of the application procedure. Applicant data is processed in order to fulfil our (pre-)contractual obligations within the scope of the application procedure in accordance with Art. 6 Para. 1 DSGVO insofar as data processing becomes necessary for us, e.g. within the scope of legal procedures (in Germany, § 26 BDSG also applies). By submitting their application to us, applicants consent to the processing of their data for the purposes of the application procedure in accordance with the type and scope set out in this data protection declaration. Insofar as special categories of personal data within the meaning of Art. 9 (1) DSGVO are voluntarily disclosed during the application process (e.g. health data, such as severely disabled status or ethnic origin), their processing is additionally carried out in accordance with Art. 9 (2) lit. b DSGVO. Applicants can send us their applications by e-mail. Please note, however, that e-mails are generally not sent in encrypted form and applicants must ensure that they are encrypted themselves. We can therefore not assume any responsibility for the transmission path of the application between the sender and receipt on our server. Instead of applying by e-mail, applicants still have the option of sending us their application by post. In the event of a successful application, the data provided by applicants may be processed by us for the purposes of the employment relationship. Otherwise, if the application for a vacancy is unsuccessful, the applicants' data will be deleted. Applicants' data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time. Subject to a justified withdrawal by the applicant, the deletion will take place after the expiry of a maximum period of 2 years so that we can answer any follow-up questions about the application and meet our obligations to provide evidence under the Equal Treatment Act and to our funder.

Comments and contributions

When users leave comments on the blog or other posts, their IP addresses are stored. This is done for the provider's security in case someone writes illegal content in comments and posts (insults, forbidden political propaganda, etc.). In this case, the provider itself can be prosecuted for the comment or post and is therefore interested in the identity of the author.

Comment subscriptions

Follow-up comments can be subscribed to by users. Users will receive a confirmation email to verify that they are the owner of the email address entered. Users may unsubscribe from ongoing comment subscriptions at any time. The confirmation email will contain instructions on how to do so.


With the newsletter we inform you about us and our offers.

If you would like to receive the newsletter, we require a valid email address from you as well as information that allows us to verify that you are the owner of the email address provided or that the owner agrees to receive the newsletter. No further data will be collected. This data is only used for sending the newsletter and will not be passed on to third parties.

When you register for the newsletter, we store your IP address and the date of registration. This storage serves solely as evidence in the event that a third party misuses an e-mail address and registers to receive the newsletter without the knowledge of the authorised person.

You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time. The revocation can be made via a link in the newsletters themselves, in your profile area or by sending a message to the contact options above.

Integration of third-party services and content

It may happen that third-party content, such as videos from YouTube, maps from Google Maps, RSS feeds or graphics from other websites, are integrated within this online offer. This always assumes that the providers of this content (hereinafter referred to as "third-party providers") are aware of the IP address of the user. Without the IP address, they could not send the content to the browser of the respective user. The IP address is therefore necessary for the presentation of this content. We endeavour to only use content whose respective providers only use the IP address to deliver the content. However, we have no influence if the third-party providers store the IP address, e.g. for statistical purposes. Insofar as this is known to us, we inform the users about it.


Cookies are small files that make it possible to store specific, device-related information on the user's access device (PC, smartphone or similar). On the one hand, they serve the user-friendliness of websites and thus the users (e.g. storage of login data). On the other hand, they serve to collect statistical data on website use and to be able to analyse it for the purpose of improving the offer. Users can influence the use of cookies. Most browsers have an option to restrict or completely prevent the storage of cookies. However, it is pointed out that the use and in particular the user comfort will be limited without cookies.

You can check many online ad cookies from companies via the US site

or the EU site


Registration function

The data entered during registration is used for the purposes of using the offer. Users may be informed by e-mail about information relevant to the offer or registration, such as changes to the scope of the offer or technical circumstances. The data collected can be seen from the input mask within the scope of registration. This includes salutation, first name, last name, e-mail and interest.

Use of the reservation and booking mask (Thüringen-buchen)

The purpose of data collection and processing is the preparation and implementation of reservation enquiries as well as the binding booking of accommodation. Thüringer Tourismus GmbH acts as a travel agent and only collects, processes and uses the data required for the provision of its services as well as the use and operation of the reservation and booking portal. Under no circumstances will data be sold by the agent to third parties. Data is only transferred to third parties to the extent necessary for a booking/reservation with the provider selected by the customer. This expressly includes the transfer to companies associated with the agent for the purpose of carrying out the booking. We store their data in accordance with the requirements of tax and commercial law. You have the right to information, correction, deletion or restriction of processing and the right to data portability.

Use of Webshop

Your personal data will be collected, stored, processed and used by us if, as far as and as long as this is necessary for the establishment, execution or termination of this contract. Further collection, storage, processing and use of your personal data will only take place if required or permitted by law or if you as a customer have consented to it. You are aware that, in order to carry out pre-contractual measures and fulfil this contract, the collection, processing and use on the basis of Art. 6 Para. 1 lit. b) DSGVO of, among other things, your name, consumer or business status and address are necessary. We are entitled - within the scope of what is legally permissible - to check the risk of payment defaults on the part of the customer for the purpose of deciding on the establishment, execution or termination of the contract. The collection, processing and use of data for this purpose is based on Art. 6 para. 1 lit. b) DSGVO. In particular, we are entitled to transfer your data to third parties if and insofar as this is necessary for the implementation of pre-contractual measures and fulfilment of this contract (e.g. for shipping, invoicing or customer support) in accordance with Art. 6 para. 1 lit. b) DSGVO or fulfilment of a legal obligation in the sense of Art. 6 para. 1 lit. c) DSGVO. We may also forward this data - to the extent permitted by law - to third parties (e.g. debt collection companies) for the purpose of enforcing claims in accordance with Art. 6 (1) b) and/or f) DSGVO.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website is usually transmitted to a Google server in the USA and stored there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. We have also extended Google Analytics on this website with the code "anonymizeIP". This guarantees the masking of your IP address so that all data is collected anonymously. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on this link. An opt-out cookie will be set, which prevents the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again. You can find information on how to integrate the opt-out cookie at:].

We continue to use Google Analytics to analyse data from Double-Click-Cookies and also AdWords for statistical purposes. If you do not wish this, you can deactivate it via the Ads Preferences Manager (

Use of Facebook social plugins

This website uses social plugins ("plugins") of the social network, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). The plugins are recognisable by one of the Facebook logos (white "f" on a blue tile or a "thumbs up" sign) or are marked with the addition "Facebook Social Plugin". The list and appearance of the Facebook social plugins can be viewed here:

When a user calls up a website of this offer that contains such a plugin, his browser establishes a direct connection with the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser, which then integrates it into the website. The provider therefore has no influence on the scope of the data that Facebook collects with the help of this plugin and therefore informs users according to its level of knowledge:

By integrating the plugins, Facebook receives the information that a user has called up the corresponding page of the offer. If the user is logged in to Facebook, Facebook can assign the visit to his or her Facebook account. If users interact with the plugins, for example by clicking the Like button or posting a comment, the corresponding information is transmitted directly from their browser to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook will find out and store his or her IP address. According to Facebook, only an anonymised IP address is stored in Germany.

The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the related rights and settings options for protecting the privacy of users, can be found in Facebook's privacy policy:

If a user is a Facebook member and does not want Facebook to collect data about him or her via this offer and link it to his or her membership data stored on Facebook, he or she must log out of Facebook before visiting the website.