Data privacy


1. Data privacy at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is all data that allows you to be personally identified. You can find detailed information on the subject of data privacy in our data privacy statement below this text.

Analysis tools and tools of third party providers

When you visit our website, your surfing behaviour may be subjected to a statistical analysis. This is primarily done by cookies and so-called analysis programs. Your surfing behaviour is generally analysed anonymously; the surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. You will find detailed information on this in the following data privacy statement.

You can object to this analysis. We will inform you of the options for raising objections in this data privacy statement.

2. General information and mandatory information

Data privacy

The operators of these pages take the protection of your personal data very seriously. We handle your personal data confidentially and in accordance with the statutory data protection regulations as well as this data privacy statement.

When you use this website, various items of personal data are collected. Personal data is data that allows you to be personally identified. This data privacy statement explains which data we collect and what we use it for. It also explains how and for what reason this is done.

Please be advised that data transmission on the internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities. A complete protection of the data from third party access is not possible.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke consent that has been granted at any time. An informal communication by e-mail is sufficient for this. The lawfulness of the data processing that has taken place before the revocation remains unaffected by the revocation.

SSL or TLS encryption

For security reasons and to protect the transfer of confidential contents, for example orders or enquiries that you send to us as the website operator, our website uses an SSL or TLS encryption. You can recognise an encrypted link by the address line of the browser changing from “http://” to “https://” and by the padlock symbol in your browser line.

If the SSL or TLS encryption is activated, the data that you submit to us cannot be read by third parties.

Access, blocking, deletion

Within the framework of the statutory provisions, you have the right to access your saved personal data, its origin and recipients and the purpose of the data processing, free of charge, and, if applicable, a right to correct, block or delete this data. You can contact us at any time under the address provided in the legal notice if you have further questions on the subject of personal data.

Objection to advertising emails

We hereby expressly object to the use of contact details that have been published in the context of our legal obligation to provide publication details for the purpose of sending advertising and information materials which have not expressly been requested. The operators of the pages expressly reserve the right to take legal steps in the event of the unsolicited mailing of advertising information, for example through spam e-mails.

3. Data recording on our website

Cookies
Server log files

The provider of the web pages collects information and automatically saves it in so-called server log files, which your browser transmits to us automatically. The information saved in these server log files includes:

  • The browser type and browser version
  • The operating system used
  • The referrer URL
  • The host name of the accessing computer
  • The time of the server request
  • The IP address

This data is not merged with other data sources.

The basis for the data processing is Art. 6 (1) f GDPR, which permits the processing of data for the fulfilment of a contract or precontractual measures.

Contact form

If you send us enquiries via the contact form, your enquiries from the enquiry form, including the contact details provided there, will be saved for the purpose of processing the enquiry and for the event of follow-up questions. We will not pass this data on without your consent.

Thus, the data entered in the contact form is processed exclusively on the basis of your consent (Art. 6 (1) a GDPR). You can revoke this consent at any time. An informal communication by e-mail is sufficient for this. The lawfulness of the data processing that has taken place before the revocation remains unaffected by the revocation.

We will retain the data entered by you in the contact form until you request us to delete it, you revoke your consent to the storage of the data or the purpose for the data storage lapses (e.g. after the processing of your enquiry is completed). Mandatory statutory provisions – especially storage periods – shall remain unaffected.

4. Analysis tools and advertising

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called “cookies”, text files that are stored on your computer and enable your use of the website to be analysed. The information about your use of this website generated by the cookie is usually transferred to a Google server in the USA, where it is stored.

Google Analytics cookies are stored on the basis of Art. 6 (1) f GDPR. The website operator has a legitimate interest in the analysis of the user behaviour, in order to optimise its website and its advertising.

IP anonymisation

We have activated the IP anonymisation function on this website. Your IP-address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before transmission to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website, in order to analyse your use of the website, to compile reports on the website activities and to provide other services associated with the website use and internet use to the website operator. The IP address transmitted from your browser within the scope of Google Analytics will not be merged with other Google data.

Browser plugin

You can prevent the storage of cookies by making a corresponding setting in your browser software. However, we would like to point out that you may not be able to make full use of all the functions of this website in this case. You can also prevent the recording of the data generated by the cookie and related to your use of the website (incl. your IP address) and its transmission to Google as well as processing of this data by Google, by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to the recording of your data

You can prevent the recording of your data by Google Analytics by clicking on the following link. An opt-out cookie is set, which prevents the recording of your data during future visits to this website: opt out of Google Analytics.

You can find more information on the handling of user data by Google Analytics in the Google data privacy statement: https://support.google.com/analytics/answer/6004245?hl=de.

Contract data processing

We have concluded a contract data processing agreement with Google and implement the strict requirements laid down by the German data protection authorities with regard to the use of Google Analytics.

Demographics and interests in Google Analytics

This website uses the Google Analytics “Demographics and interests” function. This function can create reports that include statements on the age, gender and interests of the visitors to the website. This data comes from Google’s interest-based advertising and from visitor data from third party providers. This data cannot be assigned to a particular person. You can opt out of this function at any time via the ad settings in your Google account and you can prevent the recording of your data by Google Analytics in general as presented under “Objection to the recording of your data”.

ONLINE BOOKING

Data processing (customer and contract data)

We collect, process and use personal data only to the extent that it is necessary for the establishment, the arrangement of the content or the amendment of the legal relationship (inventory data). This is done on the basis of Art. 6 (1) b GDPR, which permits the processing of data for the fulfilment of a contract or precontractual measures. We only collect, process and use personal data regarding the use of our webpages (usage data) to the extent that this is necessary to enable the user to use the service or to invoice him/her for this.

The customer data collected is deleted after the completion of the order or the end of the business relationship. Statutory storage periods remain unaffected by this.

Data transmission upon conclusion of a contract for online shops, merchants and the dispatch of goods

We only pass on personal data to third parties if this is necessary in the context of the execution of the contract, for example to the company entrusted with delivering the goods or bank commissioned with processing the payments. A further transmission of data shall not take place or shall only take place if consent has expressly been granted to the data transmission. Your data is not passed on to third parties, for example for advertising purposes, without your express consent.

The basis for the data processing is Art. 6 (1) b GDPR, which permits the processing of data for the fulfilment of a contract or precontractual measures.

Data transmission upon conclusion of a contract for services and digital contents

We only pass on personal data to third parties if this is necessary in the context of the execution of the contract, for example to the bank commissioned with processing the payments.

A further transmission of data shall not take place or shall only take place if consent has expressly been granted to the data transmission. Your data is not passed on to third parties, for example for advertising purposes, without your express consent.

The basis for the data processing is Art. 6 (1) b GDPR, which permits the processing of data for the fulfilment of a contract or precontractual measures.

Use of TourOnline AG’s online booking tool DIRS21

Our website uses the online booking tool DIRS21 (hereinafter “OBT”) of the company TourOnline AG, Borsigstrasse 26, 73249 Wernau, Germany (www.dirs21.de, hereinafter „TOAG“) to make online bookings of accommodation services and other travel services possible and to process enquiries.  Within the framework of the OBT, TOAG processes the data as the data controller. You can find information about the data privacy and the data privacy regulations in TOAG’s data privacy statement for the OBT, which you can retrieve from the OBT or view at http://www.dirs21.de/datenschutz at any time.

APPLICATIONS

Data privacy for applications and during the application process

The data controller collects and processes the applicants’ personal data for the purpose of the execution of the application procedure. The data can also be processed electronically. This is particularly the case when an applicant transmits corresponding application documents to the data controller electronically, for example by e-mail. If the data controller concludes a contract of employment with an applicant, the transmitted data is stored for the purpose of the execution of the employment relationship, in compliance with the statutory provisions. If the data controller does not conclude a contract of employment with the applicant, the application documents are deleted automatically six months after the negative decision is disclosed, provided that the deletion of these documents does not obstruct any other legitimate interest of the data controller. Another legitimate interest in this sense is, for example, a burden of proof in proceedings under the German General Equal Treatment Act (AGG).