Privacy Policy
of RevierTouristik GmbH
– hereinafter ‘RT’ –
Date: Essen, March 2026
1. Data Controller
The data controller within the meaning of the General Data Protection Regulation (GDPR) is:
RevierTouristik GmbH
Zeche Ernestine 37
45141 Essen
Germany
Tel.: 02 01 / 47 58 86 70
Email: Datenschutz@RevierTouristik.de
2. General Information on Data Processing
RT processes personal data exclusively in accordance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).
Personal data is any information relating to an identified or identifiable natural person.
3. Purposes and legal bases for processing
3.1 Conclusion and performance of transport contracts
In the context of booking and operating scheduled, event or charter services, RT processes the following data in particular:
First name and surname
Contact details (email address, telephone number)
Payment details
Booking and contract details
Legal basis: Article 6(1)(b) of the GDPR (performance of a contract)
3.2 Payment processing
Payment processing is carried out via:
Debit/credit card providers
Girocard payment service providers
Sparkasse Essen
PayPal
Apple Pay
Google Pay
Data is disclosed solely for the purpose of payment processing.
Legal basis:
Article 6(1)(b) of the GDPR (performance of a contract)
Article 6(1)(f) of the GDPR (legitimate interest in efficient payment processing)
3.3 Invoicing and retention for tax purposes
RT stores data relevant to invoicing in order to fulfil its obligations under commercial and tax law.
Legal basis:
Article 6(1)(c) of the GDPR (legal obligation)
in particular in accordance with the German Commercial Code (HGB) and the German Fiscal Code (AO)
Retention period: generally 6 or 10 years.
3.4 Contact
When you contact us by email, telephone or via the contact form, the data provided is processed to handle your enquiry.
Legal basis:
Article 6(1)(b) of the GDPR (pre-contractual measures)
or Article 6(1)(f) of the GDPR (legitimate interest in customer communication)
3.5 Image and audio recordings during public journeys
During public journeys (e.g. event journeys), image and audio recordings may be made for the purposes of public relations, documentation or reporting.
This will be indicated on site.
Where individuals are recognisably depicted, the processing is carried out on the basis of:
Article 6(1)(f) of the GDPR (legitimate interest in public relations)
Data subjects have the right to object to the processing at any time.
3.6 IT security and website use
When you access the website, technically necessary data is processed (e.g. IP address, browser type, time of access).
Legal basis:
Article 6(1)(f) of the GDPR (legitimate interest in IT security and stability)
4. Disclosure of data
Personal data is disclosed exclusively:
to payment service providers
to IT service providers (e.g. hosting providers)
to tax advisers or auditors
to public authorities, where required by law
Data is only transferred to third countries if an adequate level of data protection within the meaning of the GDPR is guaranteed.
5. Retention period
Personal data is stored only for as long as is necessary for the respective purposes or as required by statutory retention periods.
Once the purpose of processing no longer applies and statutory retention periods have expired, the data will be deleted.
6. Rights of data subjects
Data subjects have the following rights:
Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
To exercise these rights, simply notify RT.
7. Right to lodge a complaint
Data subjects have the right to lodge a complaint with a data protection supervisory authority.
The competent supervisory authority is generally:
State Commissioner for Data Protection and Freedom of Information, North Rhine-Westphalia
8. Obligation to provide data
The provision of personal data is necessary for the conclusion and performance of a contract of carriage. Without this data, it is not possible to fulfil the contract.
9. Automated decision-making
No automated decision-making or profiling within the meaning of Article 22 of the GDPR takes place.
10. Amendments to this privacy policy
RT reserves the right to amend this privacy policy in the event of legal or technical changes.