Rulantica – Our information obligation

Information obligations in accordance with Article 13 of the GDPR when collecting data from guests due to the coronavirus pandemic

For your protection and to ensure that potential chains of infection for the novel COVID-19 virus (‘coronavirus’) are traced as fast as possible, we are obliged to document your visit to our facilities. We would like to inform you of this data processing below:

1. Specification of processing activity/data collected

Collection of visitor data with respect to the coronavirus pandemic. The following personal data is collected in doing so:

• First name and last name
• Telephone number or address
• Date and time of visit or duration of stay

2. Controller name and contact details

Rulantica GmbH & Co Mack KG
Roland-Mack-Ring 1
77977 Rust
Germany
+49 7822-770
Info [at] rulantica.de (Info[at]rulantica[dot]de)

3. Data protection officer contact details

Europa-Park GmbH & Co Mack KG
datenschutz [at] europapark.de (datenschutz[at]europapark[dot]de )
+49 7822-770

4. Purposes and legal bases of processing

Purposes

• To protect the health of our employees
• To stop the spread of the pandemic with respect to tracing chains of infection

Legal bases

Section 2 (3) of the Coronavirus Regulation for Restaurants dated 16/05/2020 in conjunction with Article 6 (1) (c) of the GDPR

5. Recipients or categories of recipients of personal data

The data stays internal and is only transmitted to health authorities or local police authorities on request.

For the purpose of protecting against infection, the currently applicable legal provisions stipulate that we are permitted to provide information to the responsible health authorities and local police authorities. If we transmit your personal data to such authorities, the respective health authorities and local police authorities are responsible for further processing.

6. Transmission of personal data to third countries

Data is not transmitted to third countries.

7. Storage period for personal data

We erase the data we collect four weeks after collection.

8. Data subject rights

In accordance with the General Data Protection Regulation, you have the following rights:
If your personal data is processed, you have the right to access information concerning the data relating to you which we store (Article 15 of the GDPR).

If inaccurate personal data is processed, you have a right to rectification (Article 16 of the GDPR).

If the legal requirements are met, you can request that data is erased or that processing is restricted and you can lodge an objection to processing (Articles 17, 18 and 21 of the GDPR). The right to erasure is invalid if a legal provision provides for further storage. Your request for erasure can then only be met at the end of the statutory retention period.

If you have consented to data processing or if there is a contract for data processing and data processing is carried out using automated processes, you may have the right to data portability with respect to the personal data that you have provided to us (Article 20 of the GDPR). If you exercise your above rights, we will check whether the legal requirements for this are met.

There is also a right to lodge a complaint with data protection supervisory authorities.

9. Obligation to provide data

If you want to use our services, we are obliged under current legislation to process your data in order to fight the coronavirus pandemic.

Unfortunately, if you do not want to provide the necessary data, we will be unable to allow you to visit our facilities.