Information obligations in accordance with Article 13 GDPR
for data collection during the coronavirus pandemic
For your protection and in order to be able to trace possible chains of infection concerning the new type of COVID-19 virus (‘coronavirus’) as quickly as possible, we are obliged to document your attendance on our premises, Europa-Park and Rulantica. We would like to inform you about this data processing below:
1. Description of the processing activity/data collected
Collection of visitor data during the coronavirus pandemic.
The following personal data is collected: first and last name, Email address, visitor data and planned time of stay.
2. Name and contact information of the controller
Europa-Park GmbH & Co Mack KG
Europa-Park-Str. 2
77977 Rust
+49 (0) 7822-770
Info@europapark.de
3. Contact information of the Data Protection Officer
Europa-Park GmbH & Co Mack KG
datenschutz@europapark.de
+49 (0) 7822-770
4. Purpose and legal basis of data processing
Purpose
Protecting the health of our employees
To contain the pandemic in terms of traceability of infection chains
Legal basis
§ 8 of the Corona Regulation Baden-Württemberg from 15.09.2021 in connection with article 6 paragraph 1 lit. c DSGVO
5. Recipients or categories of recipients of the personal data
The data remains internal and will only be submitted to the health authorities or local police authorities should they request it.
For the purpose of infection protection, the current legislation provides for information obligations on our part towards the relevant health authorities and local police authorities. If your personal data is submitted by us to these authorities, the respective health authorities and local police authorities will be responsible for any further processing.
6. Transfer of personal data to a third country
No transfer of data is made to a third country.
7. Storage period of the personal data
We erase the collected data four weeks after visit.
8. Rights as the data subject
You have the following rights in accordance with the General Data Protection Regulation:
If your personal data is processed, you have the right to access information about the data stored concerning you (Article 15 GDPR).
Should the personal data processed be incorrect, you have the right to rectification (Article 16 GDPR).
If the legal requirements are met, you can demand the erasure or restriction of the processing as well as object to the data being processed (Articles 17, 18 and 21 GDPR). The request for erasure is invalid if a legal provision provides for further storage. Your request for erasure can only be complied with at the end of the statutory storage period.
If you have consented to the data processing or there is an existing contract for data processing and the data processing is carried out using an automated process, you may have a right to data portability regarding the personal data you have provided us with (Article 20 GDPR).
Should you make use of the aforementioned rights, we will check whether the legal conditions to do this have been met.
You also have the right to appeal to a supervisory authority for data protection.
9. Obligation to provide data
If you want to use our services, we are obligated to process your data by current legislation to fight the coronavirus pandemic.
Unfortunately, if you do not provide the requested data, we cannot allow you to visit our establishment.
