1. Name and address of the data controller
2. General information on data processing
3. Data erasure and retention period
The data subject’s personal data shall be erased or blocked from further processing once the purpose for which the data was stored ceases to exist. The personal data may be stored for a longer period where required by Union directives, laws or other provisions enacted by the European or national legislator to which the controller is subject. Data shall also be blocked from further processing or erased upon completion of the retention period prescribed by the aforementioned standards where continued storage of the data is not required to conclude or perform a contract. If and to the extent that you submit your travel voucher to us as part of one of our partnerships with a travel agency, we shall also receive data required to check for fraud from the travel agency in order to validate your voucher. We have ensured that this data is transmitted securely with adequate protection and solely used to check the travel voucher submitted to us by you. The legal bases for this processing are stipulated in Section 2.
3. Rights of the data subject
If your personal data is processed, you are regarded as the data subject in accordance with the GDPR and you are granted the following rights:
5. Right to instruction
If you have asserted your right to rectify, erasure or restrict processing against the controller, it shall be obligated to inform all recipients to whom your personal data was disclosed of this rectification or erasure of the data or the restriction to processing, unless it can prove that this would be impossible or entail a disproportionate amount of work. You remain entitled to request the identity of these recipients at all times from the controller.
8. Right to withdraw consent granted in accordance with data protection provisions
You have the right to withdraw your consent at any time The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
9. Automated individual decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This shall not apply if the decision: is necessary for entering into, or performance of, a contract between you and the data controller;
1. is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
2. is based on your explicit consent.
However, decisions shall not be based on special categories of personal data referred to in Art. 9(1) GDPR, unless point (a) or (g) of Art. 9(2) GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.
In the cases referred to in clauses 1 and 3, the controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.
10. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78.GDPR
4. Provision of the website and creation of log files
1. Description and scope of the data processing
We use cookies on our website. Cookies are small text files stored in or by the browser on the user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookies contains a character string, which enables us to recognise the user when they next visit our website. We use cookies to make our website easier to use. Certain elements of our website require identification of the accessing browser when it visits a new page. Furthermore, we also use cookies that allow us to analyse the user’s surfing behaviour on our website.
The following data may be transmitted in relation hereto:
o Entered search terms
o Site visit frequency
Technical measures are used to pseudonymise user data collected in this manner. As such, it is not possible to assign the data to the accessing user. This data is not stored together with other personal data from the user.
When the user first opens our website, they will receive information on the use of cookies for analytical purposes and their consent will be obtained for the processing
of personal data in this manner. They will also be referred to this Privacy Notice.
The user’s consent is obtained using a tool XXXXXXXXX???. Accordingly, the request for consent takes place in compliance with recent consent requirements (Judgment of the European Court (Grand Chamber) from 01/10/2019 – C-673/17).
3. Legal basis for data processing
The legal basis for the processing of personal data due to the use of technically necessary cookies is Art. 6(1)(1) lit. f GDPR. The legal basis for the processing of personal data due to the use of cookies for analysis purposes where the user’s consent has been granted is Art. 6(1)(1) lit. a GDPR.
4. Retention period, right to object and be forgotten
Cookies are stored on the user’s device, which transmits them to our website. As such, you, as the user, are granted full control over the use of cookies. You can deactivate or limit the use of cookies by changing your browser settings. Cookies that have previously been stored can be deleted at any time. This may also take place automatically. If cookies are deactivated for our website, you may find that certain features will not work properly. Cookies will be automatically deleted after 7 days if you use Safari version 12.1 or newer. This also pertains to opt-out cookies set to prevent tracking.
2. Purpose of the data processing
Contact that is established by email constitutes a necessary legitimate interest for the processing of data.
3. Legal basis for data processing
The legal basis for the processing of data if the user’s consent has been granted is Art. 6(1)(1) lit. a GDPR. The legal basis for the processing of data disclosed when an email is sent is Art. 6(1) lit. f GDPR. If an email concerns the conclusion of a contract, an additional legal basis for the processing is Art. 6(1) lit. b GDPR.
4. Storage duration
Your data is erased as soon as it is no longer required for the purpose for which it was collected. This is deemed the case for personal data sent by email when the respective conversation with the user ends. The conversation is considered over when the circumstances surrounding the matter in question have been conclusively resolved. Any additional personal data collected when the form was submitted will be deleted after a period of seven days at the latest.
5. Right to object and be forgotten
Users can revoke their consent to the processing of their personal data at any time. If the user contacts us by email, they reserve the right to object to the storage of their personal data at any time. The conversation cannot be continued in the above cases. All personal data stored in relation to the user contacting us shall be deleted in this case.
2. Purpose of the data processing
Personal data entered into the input mask will only be processed by us to facilitate communication. Contact that is established by email constitutes a necessary legitimate interest for the processing of data. Other personal data processed when the form is submitted aims to prevent the misuse of the contact form and ensure the security of our IT systems.
3. Legal basis for data processing
The legal basis for the data processing is Art. 6(1)(1) lit. f GDPR, providing the user has granted their consent. The legal basis for processing data transmitted via email is Art. 6(1)(1) lit. f GDPR. If an email concerns the conclusion of a contract, an additional legal basis for the processing is Art. 6(1)(1) lit. b GDPR.
The use of company pages on social networks
We use plugins for a range of purposes. The plugins used on our website are listed below:
2. Use of Google Analytics
3. Use of Google Tag Manager
5. Google Ads Remarketing
6. Use of the Google Marketing platform