Skip to main content

Data protection statement

You can use our website without providing any personal data. If a data subject wants to use services of our enterprise via our website, processing of personal data could become necessary. If this is necessary and if there is no legal basis for such processing, we will always obtain the consent of the data subject.

The processing of personal data (e.g. the name, address, e-mail address, or telephone number of a data subject) shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to us.

With the following data protection declaration, we would like to inform you about the type, scope and purpose of the personal data collected, used and processed by us. Likewise, data subjects are informed by this privacy policy about the rights to which they are entitled.

As the controller, we have implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through our website. However, data transmissions via the Internet can always contain security vulnerabilities. One hundred percent protection can therefore not be guaranteed. Alternatively, any data subject can, of course, also transmit personal data to us, e.g. by telephone.

1. Definitions

This data protection statement is based on the definitions used by the GDPR (Article 4). This privacy statement should be both easy to read and easy to understand for any person. To ensure this, we would first like to explain the terminology used. In this privacy statement, these definitions are used, among others:

  • "personal data" means any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
  • "data subject" means any identified or identifiable natural person whose personal data are processed by the controller.
  • "processing" means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
  •  "restriction of processing" the marking of stored personal data with the aim of limiting their future processing;
  • "profiling" means any automated processing of personal data consisting in using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location;
  • "controller" means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for by Union or Member State law;
  • "recipient" means a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not a third party. However, public authorities that may receive personal data in the context of a specific investigative task under Union or Member State law shall not be considered as recipients; the processing of such data by the aforementioned authorities shall be carried out in accordance with the applicable data protection rules in accordance with the purposes of the processing;
  •  "third party" means a natural or legal person, public authority, agency or other body, other than the data subject, the controller, the processor and the persons who, under the direct responsibility of the controller or the processor, are authorized to process the personal data;
  •  "consent" of the data subject means any freely given specific, informed and unambiguous indication of his or her wishes in the form of a statement or other unambiguous affirmative act by which the data subject signifies his or her agreement to the processing of personal data relating to him or her.

2. Name and contact details of the controller

The controller pursuant to Art. 4(7) GDPR is:

Wilhelma - Zoological-Botanical Garden Stuttgart
Wilhelma 13
70376 Stuttgart
Germany

Tel.: +49 (0)711 / 54 02 0
E-mail: info@wilhelma.de
Website: www.wilhelma.de

The data protection officer of the responsible party is:

Konrad Armbruster
Wilhelma 13
70376 Stuttgart
Germany

E-mail: datenschutz@wilhelma.de

3. Collection and storage of personal data and the nature and purpose of their use

a) When visiting the website

In principle, you can use our website without disclosing your identity. When you call up our website, information is automatically sent to the server of our website by the browser used on your end device. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automated deletion:

  • IP address of the requesting computer
  • Date and time of access
  • Websites that the user calls up on the Wilhelma website
  • Web browser of the user with version number and operating system

The aforementioned data are processed by us for the following purposes:

  • Ensuring a smooth connection setup of the website
  • Ensuring comfortable use of our website
  • evaluation of system security and stability as well as
  • for further administrative purposes.

The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person. An evaluation of the data for marketing purposes does not take place in this context.

In addition, we use cookies and analysis services when you visit my website. You can find more detailed explanations of this under sections 5 and 7 of this data protection declaration.

b) When using our contact form

For questions of any kind, we offer you the opportunity to contact us via a form provided on our website. In doing so, it is necessary to provide your name as well as a valid e-mail address so that we know from whom the inquiry originates and in order to be able to answer it. Further information can be provided voluntarily. It is your free decision whether you want to enter this data in the contact form.

Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 p. 1 lit. a GDPR on the basis of your voluntarily given consent.

Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored. In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation.

The personal data collected by us for this purpose will be deleted after we have dealt with your inquiry.

c) When ordering via our webshop

You can place orders via our website without registering.

The webshop is provided by:

Bauer + Kirch GmbH
Pascalstraße 57
52076 Aachen, Germany

info@bauer-kirch.de

Your personal data is entered into an input mask and transmitted to us and stored. If you place an order via our website, we collect the following data:

  • First name, last name
  • a valid e-mail address
  • address
  • telephone number (landline and/or mobile)
  • company name, if applicable

The collection of this data is done

  • to be able to identify you as our customer
  • to be able to process, fulfill and handle your order
  • to correspond with you
  • for invoicing
  • to process any liability claims that may exist, as well as to assert any claims against you
  • to ensure the technical administration of our website
  • to manage our customer data.

As part of the ordering process, we obtain your consent to process this data.

The data processing is carried out in response to your order and is necessary for the aforementioned purposes for the appropriate processing of your order and for the mutual fulfillment of obligations arising from the purchase contract in accordance with Art. 6 para. 1 p. 1 lit. b GDPR.

The personal data collected by us for the processing of your order will be stored until the expiry of the legal obligation to keep records and then deleted, unless we are obliged to store data for a longer period of time in accordance with Article 6 (1) sentence 1 lit. c GDPR due to tax and commercial law storage and documentation obligations (from HGB, StGB or AO) or you have consented to storage beyond this in accordance with Article 6 (1) sentence 1 lit. a GDPR.

As a payment service provider in the webshop, we use the service TeleCash, offered by:

First Data GmbH
Marienbader Platz 1
61348 Bad Homburg v. d. Höhe, Germany

Your details regarding the respective payment method are required in order to be able to invoice you correctly. Further information on the handling of the personal information collected from you can also be found at http://www.telecash.de/datenschutz/.

d) for registrations for guided tours, animal encounters and children's birthday parties

You can register for various guided tours or make appointment requests via our website.

Your personal data is entered in an input mask and transmitted to us and stored. We collect the following data:

Free guided tours

  • First name, last name
  • a valid e-mail address

Exclusive guided tours

  • first name, last name
  • a valid e-mail address
  • address
  • company name, if any

Vouchers for animal encounters:

  • First name, last name
  • a valid e-mail address
  • address
  • company name, if applicable
  • name of the recipient

Children's birthdays:

  • First name, last name
  • a valid e-mail address
  • address
  • company name, if applicable

Further information can be given voluntarily. It is your free decision whether you want to enter this data in the respective contact form.

The collection of this data is done,

  • to be able to identify you as our customer
  • to be able to process, fulfill and handle your request;
  • to correspond with you;
  • for invoicing purposes;
  • to process any liability claims that may exist, as well as to assert any claims against you;
  • to ensure the technical administration of our website;
  • to manage our customer data.

As part of the request, we will obtain your consent to process this data.

The data processing is carried out in response to your request and is necessary for the appropriate processing of your request in accordance with Art. 6 (1) p. 1 lit. b GDPR for the purposes stated.

The personal data collected by us for the processing will be stored until the expiry of the legal obligation to retain data and then deleted, unless we are obliged to store data for a longer period of time in accordance with Article 6 (1) sentence 1 lit. c GDPR due to tax and commercial law retention and documentation obligations (from HGB, StGB or AO) or you have consented to storage beyond this in accordance with Article 6 (1) sentence 1 lit. a D GDPR.

e) when registering for a sponsorship

Via our website you can submit a request for the adoption of an animal or plant.

Your personal data will be entered in an input mask and transmitted to us and stored. We collect the following data:

  • First name, last name
  • a valid e-mail address
  • your address
  • company name, if applicable
  • name of the recipient

The processing, collection and storage of your data is carried out in accordance with Art. 6 Para. 1 GDPR. This data is used to create a certificate, a donation receipt and a sponsorship plaque at the entrance or on the website, as well as to send the invitation to the sponsorship day and, if necessary, to contact you in case of queries on the part of Wilhelma.

If your sponsorship includes a sponsor plaque, the name or company name as well as the company logo will be passed on to our graphic designer exclusively for the creation of the plaque. Beyond that, no data will be passed on to third parties.

If no explicit storage period is specified when collecting your data, we will only process your data for as long as is necessary to fulfill the stated purposes and to maintain our relationship. Otherwise, your data will be blocked for further processing or deleted after expiration of any tax, commercial and other legal retention periods.

4. Ticket purchase via an external service provider

We work with an external provider for the sale of online tickets for Wilhelma:

bookingkit GmbH
represented by the managing directors Christoph Kruse and Lukas C.C. Hempel
Sonnenallee 223
12059 Berlin
Germany

Personal data will only be collected by bookingkit if and only to the extent and for the purpose for which you provide your data of your own accord, e.g. in the context of a booking.

For more information on the purpose and scope of the data collection and its processing by Bookingkit, please refer to the provider's privacy policy: https://eu5.bookingkit.de/checkout2/privacy/6896ed1a7fe8514b9c830dc0f45dbf2e

5. Passing on of data

Your personal data will only be passed on to third parties by us to the service partners involved in the processing of the contract, such as the logistics company commissioned with the delivery and the credit institution commissioned with payment matters. In cases where your personal data is passed on to third parties, however, the scope of the transmitted data is limited to the necessary minimum.

In the case of payment via PayPal, credit card via PayPal, direct debit via PayPal or "purchase on account" via PayPal, we will pass on your payment data to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal or "purchase on account" via PayPal. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. Among other things, address data is included in the calculation of the score values. Further information on data protection can be found in the PayPal data protection principles: www.paypal.com/de/webapps/mpp/ua/privacy-full.

Your personal data will not be transferred to third parties for purposes other than those mentioned above.

We also only pass on your personal data to third parties if:

  • you have given your express consent to this in accordance with Art. 6 para. 1 p. 1 lit. a GDPR,
  • the disclosure is required under Art. 6 (1) p. 1 lit. f GDPR for the assertion, exercise or defense of legal claims and there is no reason to believe that you have an overriding legitimate interest in not disclosing your data,
  • in the event that there is a legal obligation for disclosure pursuant to Art. 6 (1) p. 1 lit. c GDPR, as well as
  • this is legally permissible and necessary according to Art. 6 para. 1 p. 1 lit. b GDPR for the processing of contractual relationships with you.

As part of the ordering process, consent is obtained from you for the transfer of your data to third parties.

6. Use of cookies

We use cookies on our site. These are small files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone or similar) when you visit our website. Cookies do not cause any damage to your end device, do not contain viruses, Trojans or other malware.

In the cookie, information is stored that arises in each case in connection with the specific end device used. This does not mean, however, that we gain direct knowledge of your identity.

The use of cookies serves on the one hand to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your terminal device for a certain fixed period of time. If you visit our site again to make use of our services, it is automatically recognized that you have already been with us and which entries and settings you have made so that you do not have to enter them again.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you (see section 7). These cookies enable us to automatically recognize that you have already been to our site when you visit it again. These cookies are automatically deleted after a defined period of time.

The data processed by cookies is necessary for the aforementioned purposes to protect our legitimate interests and those of third parties in accordance with Art. 6 (1) p. 1 lit. f GDPR.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a notice always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot use all the functions of our website.

8. Analysis and tracking tools

The tracking measures listed below and used by us are carried out on the basis of Art. 6 (1) p. 1 lit. f GDPR. With the tracking measures used, we would like to ensure a needs-based design and the ongoing optimization of our website. On the other hand, we use the tracking measures to statistically record the use of our website and evaluate it for the purpose of optimizing our offer for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision.

The respective data processing purposes and data categories can be found in the corresponding tracking tools.

Google Analytics

For the purpose of demand-oriented design and ongoing optimization of our pages, we use Google Analytics, a web analytics service provided by Google Inc (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google"). In this context, pseudonymized usage profiles are created and cookies (see under item 6) are used. The information generated by the cookie about your use of this website such as

  • Browser type/version,
  • operating system used,
  • Referrer URL (the previously visited page),
  • Host name of the accessing computer (IP address),
  • time of the server request,

are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to the use of the website and the Internet for the purposes of market research and demand-oriented design of these Internet pages. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized so that an assignment is not possible (IP masking).

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).

As an alternative to the browser add-on, especially with browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on the aforementioned link. An opt-out cookie will be set, which prevents the future collection of your data when visiting our website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

Further information on data protection in connection with Google Analytics can be found under the following link in the Google Analytics help: https://support.google.com/analytics/answer/6004245?hl=de

9. Instagram

Wilhelma operates an Instagram page at www.instagram.com/wilhelma_stuttgart and accesses the technical platform and services of the

Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Ireland

back.

Please carefully consider what personal data you share with us through Instagram. Instagram is part of the Meta group of companies and shares infrastructure, systems and technology with Facebook and other Meta companies.

We expressly point out that Meta stores the data of the users of its services (e.g. personal information, IP address, etc.) and may also use this data for business purposes. For more information about Meta's data processing on Instagram, please see Instagram's privacy policy at (http://instagram.com/legal/privacy/) and Instagram's terms of use (https://help.instagram.com/581066165581870/?helpref=hc_fnav).

We have no influence on the data collection and further processing by Meta. Furthermore, it is not apparent to us to what extent, where and for how long the data is stored, to what extent Meta complies with existing deletion obligations, what evaluations and links are made with the data and to whom the data is passed on. If you wish to avoid Meta processing personal data that you have transmitted to us, please contact us by other means.

We use the data you provide when contacting or interacting with us or that is publicly viewable on your profile only to process your request. We process your data only as long as it is necessary to fulfill the stated purposes as well as to maintain our relationship. Otherwise, your data will be blocked for further processing or deleted after expiration of any tax, commercial and other legal retention periods.

The data collected about you in this context will also be processed by Meta Platforms Ireland Limited and, where applicable, transferred to countries outside the European Union.

Facebook's data usage policy can be found at de-de.facebook.com/privacy/policy. Facebook provides an online contact form for contacting us regarding data protection issues: https://de-de.facebook.com/privacy/policy/?section_id=13-HowToContactMeta

10. Data subject rights

You have the right

  • In accordance with Art. 15 GDPR, to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
  • pursuant to Art. 16 GDPR, to request the correction of incorrect or incomplete personal data stored by us without undue delay;
  • pursuant to Art. 17 GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
  • pursuant to Art. 18 GDPR, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 GDPR;
  • pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller;
  • in accordance with Art. 7 (3) GDPR, to revoke your consent once given to us at any time. This has the consequence that we may no longer continue the data processing, which was based on this consent, for the future; and
  • complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.

11. Right of revocation

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) p. 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which will be implemented by us without specifying a particular situation.

If you wish to exercise your right of revocation or objection, an e-mail to datenschutz@wilhelma.de is sufficient.

12. Data security

Within the website visit, we use the widespread SSL procedure (Secure Socket Layer) in conjunction with the highest encryption level supported by your browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is encrypted by the closed key or lock symbol in the lower status bar of your browser.

We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

13.Topicality and change of this data protection explanation

This data protection declaration is currently valid (as of July 2022).

Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration. The current data protection declaration can be called up and printed out at any time on our website under the following link: www.wilhelma.de/datenschutz.

Data protection officer

Konrad Armbruster
Wilhelma 13
70376 Stuttgart
Germany
datenschutz@wilhelma.de