Data protection

Data protection


I Privacy overview


Who is responsible for collecting your data?

The one responsible, within the meaning of the EU General Data Protection Regulation (GDPR) and other national data protection laws of the member states, as well as, other data protection regulations is:

Kernwasser Wunderland Freizeitpark GmbH
Griether Straße 110-120
D-47546 Kalkar
Telephone: 0049 2824 9100


How do we collect your data?

The collection of your data is primarily done by communicating it to us (for example, on the contact form or booking form). In addition, data is automatically collected when visiting the website through our IT systems. These are primarily technical data (for example, Internet browser, operating system or time of the page request). The collection of this data automatically takes place as soon as you visit our website.


What do we use your data for?

Part of the data gets collected to ensure a flawless provision of the website. Other data may be used to analyse your user behaviour, this data is collected anonymously and will not be traced back to you. Moreover, in principle, the only personal data that gets recorded is data which the user transmits when using the website or the app, for example when booking a room or sending a request via the contact form on the website.

In order to complete a reservation and/or booking, a full name, address and e-mail address are required. This data is necessary for the settlement of the booking. In addition, further information may be required, such as telephone number, company, tax number, account details or credit card information.


What rights do you have regarding your data?

At any time you have the right to obtain free information about the origin, recipient and purpose of your stored personal data. You also have the right to request the correction, blocking or deletion of this data. For this, as well as for further questions about data protection, you can contact us at any time at the address given above. Furthermore, you have a right of appeal to the competent supervisory authority.


II General and mandatory information


Privacy policy

Nevertheless, we point out that the transmission of data on the Internet (for example, when communicating by e-mail) may have security gaps. Full protection of data against access by third parties is not possible.


Disclosure of data

Your personal data will only be passed on to third parties in the following cases that are legally permitted:

If this is necessary for asserting, exercising or defending legal claims, and if there is no reason to believe that you have a major interest in not disclosing your data (Art. 6, Sec. 1, first subparagraph, Lit. F) GDPR),

Insofar as we are legally obliged to make this known (Art. 6, Sec. 1, sentence 1, Lit. C GDPR), and

If this is necessary for the settlement of contractual relations with you (Art. 6, Sec. 1, Lit. B GDPR).


Revocation of your consent to data processing

Many data processing operations are only possible with your explicit consent. At any point in time you can withdraw an existing permission. An informal message to us by e-mail regarding this matter is sufficient. The legality of data processing performed until the withdrawal remains unchanged by the withdrawal.


Right of appeal to the competent supervisory authority

In the case of violations of data protection law, the person concerned has the right to appeal to the competent supervisory authority. The competent supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based: North Rhine-Westphalia. A list of the data protection officers, as well as, their contact data can be downloaded via the following link:


Right to data portability

You have the legal right to automatically transfer data that we automatically process, based on your consent or on the performance of a contract, to you or a third party in a standard, machine-readable format. If you want to hand over the direct transfer of data to another responsible person, this will only be done as far as technically feasible.



SSL and TLS encryption

This website uses either an SSL or TLS encryption for security reasons and to protect the transfer of confidential content, such as payment transactions that you have sent us as website administrator. You can recognise an encrypted connection from the address bar of the browser; a non-encrypted connection uses "http: //", an encrypted connection uses "https: //". Furthermore, you can recognise an encrypted connection by the lock symbol in the address bar.

If an SSL or TLS encryption is enabled, the data you submit to us cannot be read by third parties.


Information, blocking & deletion

Within the scope of the applicable legal provisions, you have the right to receive free information about your stored personal data, their origin and recipient, the purpose of the data processing and, if necessary, a right to correction, blocking or deletion of this data. You can contact us at any time (at the address given in the imprint) for further questions on the subject of personal data.


Data Protection Commissioner

The data protection commissioner can be reached at:

Kernwasser Wunderland Freizeitpark GmbH

Data Protection Commissioner

Griether Straße 110-120

D-47546 Kalkar

Phone: +49 (0) 2824 9100



Server log files

When visiting these pages, your browser automatically sends information to us which is stored in so-called server log files (browser type and browser version, operating system used, referrer, URL hostname of the accessing computer, time of server request, IP address, etc.). There is no merge of this data with other data sources. In the context of the performance of a contract, or for pre-contractual measures, this is in accordance with Art. 1 Sec. Lit F GDPR allowed.



We use cookies on our website. These serve to make our offer more user-friendly, more effective and safer. They are harmless and contain no viruses. Cookies are small text files that are stored on your computer by your browser. Most cookies we use are so-called "session cookies". They automatically get deleted at the end of your visit to the website.

Other cookies remain stored on your device until you delete them. With these cookies we can recognise your browser during your next visit.

You can set up your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, the acceptance of cookies for certain cases generally exclude and enable the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

Cookies that are necessary to carry out the electronic communication process, or certain functions that you wish to use, (e.g. Shopping cart function), are processed and stored on the basis of Art. 6, Sec. 1, Lit. f. The operator of the website has a legitimate interest in the storage of cookies for the technically error-free and optimised delivery of his services. If other cookies (such as cookies for analysing your surfing behaviour) are stored, these are also mentioned in this privacy policy.


Contact Form

When you contact us via our contact form, your details on the application form, including the contact details you have provided there, will be processed and stored in the case of follow-up questions. We will not share this information without your permission.

The processing of the data entered in the contact form is therefore only based on your consent (Art. 6, Sec. 1, Lit a, AVG). You can withdraw this permission at any time. An informal message by e-mail is sufficient for this. The legality of the data processing operations that have been executed until the withdrawal is not affected by the withdrawal.

The information you provide in the contact form remains with us until you ask us to remove it, withdraw your permission for storage or delete the data storage reason (for example, after your request has been processed). Compulsory legal provisions - in particular retention periods - remain unaffected.


Plugins & Social Media

Our pages use features of Google+. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Collect and share information: Use the Google + button to post information worldwide. The Google + button will provide you and other users with personalised content from Google and our partners. Google stores both the information that you +1'd for a piece of content and information about the page you viewed when you clicked +1. Your +1's can appear as recommendations along with your profile name and photo in Google services, such as in search results or in your Google profile, or elsewhere on websites and ads on the web. Google records information about your +1 activity to improve Google's services to you and others. To use the Google+ button, you need a globally visible, public Google profile that must contain at least the name chosen for the profile. This name will be used in all Google services. In some cases, this name may also replace a different name you used when sharing content through your Google Account. The identity of your Google Profile may be displayed to users who know your email address or have other identifying information from you. Use of the information collected: In addition to the uses outlined above, the information you provide will be used in accordance with the applicable Google privacy policy. Google may publish summarised statistics on users' +1 activity or share it with users and partners, such as publishers, advertisers, or affiliate websites.

On our website, Instagram functions are integrated. These functions are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. If you are logged in to your Instagram account, you can link the content of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to link the visit to our pages to your user account. We point out that we, as provider of the pages, do not receive any knowledge of the content of the data sent and their use by Instagram. See the Instagram privacy policy for more information.

On our website social media plugins from Facebook are used to personalise the use of the website. For this we use the "LIKE" or "SHARE" button. It is an offer from Facebook. If you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is directly transmitted to your browser and incorporated into the website by Facebook. By integrating the plugins, Facebook receives information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are currently not logged in to Facebook. This information (including your IP address) is directly transmitted from your browser to a Facebook server in the US and stored there. If you are logged in to Facebook, Facebook can assign the visit to our website directly to your Facebook account. For the purpose and scope of the data collection, the further processing and use of the data by Facebook, as well as your related rights and settings options for the protection of your privacy, please refer to the privacy policy of Facebook.

In this online presence the service "Twitter" is integrated as well. Provider of this service is Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, United States. Purpose and extent of the data collection, the further processing and use of the data by the provider on its pages, as well as your existing rights and settings options for the protection of your privacy, please refer to the privacy policy of Twitter. Twitter's privacy policy can be found by clicking the following link: Information on the opt-out option can be found by clicking the following link:

For the inclusion of video, our website uses YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Usually, when you visit an embedded video page, your IP address will be sent to YouTube and cookies will be installed on your machine. However, we have included our YouTube videos with the enhanced privacy mode (in which case, YouTube will still contact the Google DoubleClick service, but personal data will not be evaluated according to Google's Privacy Policy). As a result, YouTube does not store any information about visitors unless they watch the video. If you click the video, your IP address will be sent to YouTube, and YouTube will know that you've watched the video. If you are logged in to YouTube, this information will also be associated with your user account (you can prevent this by logging out of YouTube before watching the video).



In compliance with the DSGVO in conjunction with the regulations of the KUG, Kernwasser Wunderland Freizeitpark GmbH points out that occasionally film and photo recordings are produced for advertising purposes on our premises, which may also show visitors. The production is carried out by our own employees or by third parties commissioned by us. By entering our premises, you automatically agree to be photographed and recorded.

We will use the recordings made on our website, on social networks and in the press to report on current events and to promote future events. It is also possible that the recorded material will be broadcast by third parties through various advertising channels. The storage of the recordings made will be permanent.


Updating the privacy policy

This data protection declaration is currently valid, as of May 2018. Insofar as changes to the website are made in the future, this may result in an update of the privacy policy.