In this privacy statement, trouvel tours & travel gmbh (“Tours & Travel”) informs you about how personal data is collected, processed and used on this website and what rights data subjects are entitled to. In any case, we will only collect, process and use your personal data to the extent permitted by the German Federal Data Protection Act (BDSG) and the General Data Protection Regulation (DSGVO).
Responsible according to. Art. 4 No. 7 DSGVO is the managing director of Tours & Travel GmbH, Ms. Ulrike Scholze, Tours & Travel GmbH, An der Strusbek 50, 22926 Ahrensburg, Tel. +49 – 4102 – 2169996, firstname.lastname@example.org, www.tours-and-travel.de (see our imprint – https://www.tours-and-travel.de/footer/impressum.html). A data protection officer has not been appointed and Tours & Travel GmbH is not legally obligated to appoint one.
The controller has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. Nevertheless, internet-based data transmissions can have security gaps, so that absolute protection cannot be guaranteed. For this reason, you are free to transmit personal data to us by alternative means, e.g. by telephone.
§ 1 Personal data
Personal data is all data that can be related to you personally (e.g. name, address, e-mail address, user behavior).
§ 2 Collection and storage of personal data as well as type and purpose of their use
(1) Informational use and visit of the website
In the case of merely informational use of our website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser automatically transmits to our server. This information is only stored temporarily in a so-called log file.
If you wish to view our website, we collect the following data, which is collected without your intervention and stored until automatic deletion:
- IP address of the requesting computer
- Date and time of the request / access
- Website from which the access is made (referrer URL)
- Time zone difference from GMT
- Content of the request (concrete page)
- Access status/http status code
- Data volume transferred in each case
- Website from which the request comes
- Browser used / browser type, if applicable operating system of your computer, its interface as well as the name of your access provider
- Language and version of the browser software
- other similar data and information that serve to avert danger in the event of attacks on our information technology systems.
The data is collected by us for the following purposes:
- Ensuring a smooth connection establishment of the website
- Ensuring a comfortable use of our website
- Evaluation of system security and stability, and
- Ensuring the permanent functionality of our information technology systems and the technology of our website
- To provide law enforcement authorities with the information necessary to prosecute in the event of a cyberattack.
- for other administrative purposes.
The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interest follows from the above-mentioned purposes for data collection.
When using these general data and information, we do not draw any conclusions about the data subject. Therefore, the data and information collected anonymously will be evaluated by us statistically, and moreover, with the aim of increasing the data protection and data security of our enterprise, and ultimately ensuring an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from any personal data provided by a data subject.
(2) Contact via e-mail / contact form
When you contact us by e-mail or via our contact form, we collect the necessary personal data from you via web form (name, first name, address, e-mail address, telephone number (landline and / or mobile). This data is collected and stored in order to identify you as a customer, to answer your questions or to process your booking for the trip. Data processing for the purpose of contacting us is carried out in response to your contact request and is permitted under Art. 6 para. 1 p. 1 lit. b DSGVO for the aforementioned purposes for the appropriate processing of your non-binding inquiry or your booking request and for the mutual fulfillment of obligations arising from the travel contract.
The personal data entered by the data subject shall be collected and stored exclusively for internal use by the controller and for its own purposes. The controller may arrange for the transfer to one or more processors, for example a parcel service provider, who will also use the personal data exclusively for an internal use attributable to the controller.
By registering on the website of the controller, the IP address assigned by the Internet service provider (ISP) of the data subject, the date and the time of registration are also stored. The storage of this data takes place against the background that only in this way can the misuse of our services be prevented and, if necessary, this data makes it possible to clarify crimes that have been committed. In this respect, the storage of this data is necessary for the protection of the controller. As a matter of principle, this data is not passed on to third parties unless there is a legal obligation to pass it on or the passing on serves the purpose of criminal prosecution.
The registration of the data subject by voluntarily providing personal data serves the purpose of the controller to offer the data subject content or services which, due to the nature of the matter, can only be offered to registered users. Registered persons are free to modify the personal data provided during registration at any time or to have it completely deleted from the data stock of the data controller.
The controller shall provide any data subject at any time, upon request, with information about what personal data is stored about the data subject. Furthermore, the data controller shall correct or delete personal data at the request or indication of the data subject, provided that this does not conflict with any statutory retention obligations. The entire staff of the data controller is available to the data subject as a contact person in this context at the e-mail address email@example.com.
This data received from you is collected, processed and used by us to enable you to use the web offer (usage data) and as far as this is necessary for the establishment, execution or termination of the contract (contract fulfillment) and customer service. This data will not be disclosed to third parties without your express consent.
Data deletion and storage period:
All personal data will be stored only as long as necessary for the stated purpose (processing your request or settlement) and the fulfillment of the contract. We delete this data after the storage is no longer necessary or restrict the processing if there are legal retention obligations (Art. 6 para. 1 lit. c DSGVO). The criterion for the duration of the storage of personal data is the respective statutory retention period. After expiry of the deadline, the corresponding data will be routinely deleted, provided that they are no longer required for the fulfillment or initiation of the contract.
By sending a message to firstname.lastname@example.org, you can object to the use or processing of your data for the purposes of advertising, market or opinion research.
If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you about the respective processes below from § 4. In doing so, we also state the specified criteria for the storage period.
If there is no legal basis for processing your personal data, we obtain the consent of the data subject.
§ 3 Your rights as a data subject
You have according to. Art. 7 par. 3 GDPR
- the right to revoke your consent, once given if applicable, at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future (right of revocation);
You have according to. Art. 15 GDPR
- The right to obtain information about the personal data we process and the purposes of processing, the category of personal data, the recipients or categories of recipients to whom such data have been or will be disclosed, the planned storage period, or about
- the right to rectification or deletion (“being forgotten”),
- the right to restrict processing,
- the right to object to the processing,
- the right to data portability (data portability),
- the right to learn the origin of your data, if it was not collected by us,
- the existence of automated decision-making, including profiling, and, where applicable, the right to request meaningful information about its details.
You have according to. Art. 16 GDPR
- the right to demand the immediate correction of incorrect or completion of your personal data stored by us.
You have according to. Art. 17 GDPR
- the right to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims.
You have according to. Art. 18 GDPR
- the right to demand the restriction of the processing of your personal data, insofar as the correctness of the data is disputed by you, the processing is unlawful, but you object to its deletion and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims, or you are entitled to demand the restriction of the processing of your personal data in accordance with Art. 7 of the German Data Protection Act. Art. 21 DSGVO have objected to the processing.
You have according to. Art. 20 GDPR
- The right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller; and
You have the right according to Art. 77 GDPR
- complain to a data protection supervisory authority about the processing of your personal data by us. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters. A list of the state data protection commissioners can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Right to object:
Insofar as your personal data is collected on the basis of legitimate interests pursuant to. Art. 6 par. 1 p. 1 lit. f DSGVO are processed, you have the right, pursuant to. You have the right to object to the processing of your personal data pursuant to Article 21 of the German Data Protection Act (DSGVO), provided that there are grounds for doing so that arise from your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation. You can exercise your right of withdrawal or objection at the address email@example.com.
For the exercise of the aforementioned rights as well as for information, requests or suggestions on the subject of data protection, we are also available to you at the above address or at firstname.lastname@example.org.
§ 4 Disclosure of data to third parties
Your personal data will not be transferred to third parties for purposes other than those listed below.
We will only share your personal information with third parties if:
- You have provided us with your personal data in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO have given express consent to this,
- the disclosure according to Art. 6 para. 1 p. 1 lit. f DSGVO is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data,
- in the event that for the transfer according to Art. 6 para. 1 p. 1 lit. c DSGVO a legal obligation exists, as well as
- in the event that this is legally permissible and in accordance with Art. 6 para. 1 p. 1 lit. b DSGVO is necessary for the processing of contractual relationships with you.
The cookies we use help to determine the frequency of use and the number of users of our website and allow you to fully use the service. Cookies cannot execute programs or transfer viruses to your deputer. They serve to make the Internet offer as a whole more user-friendly and effective.
This website uses transient cookies and persistent cookies.
Transient cookies are automatically deleted when you close the browser. These include, for example, session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
The data processed by cookies are necessary for the aforementioned purposes to protect our legitimate interests as well as those of third parties pursuant to Art. 6 para. 1 p. 1 lit. f DSGVO required.
Most browsers are set to accept cookies automatically. However, you can deactivate the storage of cookies or set your browser to notify you as soon as cookies are sent or to delete them automatically. Furthermore, you have the option to delete the stored cookies from your hard drive at any time afterwards.
Please note that if you delete cookies, you must expect a limited display of the page and a restricted user experience. In principle, however, this limited use of our services is also possible without cookies.
§ 6 Tracking tools
The tracking measure listed below and used by us is carried out on the basis of Art. 6 para. 1 p. 1 lit. f DSGVO carried out. With the tracking measure used, we want to ensure a needs-based design and the ongoing optimization of our website. On the other hand, we use the tracking measure to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you. These interests are to be considered legitimate within the meaning of the said provision.
The respective data processing purposes and data categories can be found in the corresponding tracking tools.
a) Google Analytics
We use Google Analytics, a web analytics service provided by Google, Inc. for the purpose of demand-oriented design and ongoing optimization of our website. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). We use this service as part of a commissioned data processing relationship.
- Browser type/version,
- operating system used,
- Referrer URL (the previously visited page),
- Host name of the accessing computer (IP address),
- Time of the server request,
are transferred to a Google server in the USA and stored there. Since our website uses the anonymization function of Google Analytics, your IP address will be shortened beforehand by Google within the European Union or the European Economic Area. In no case will your IP address be merged with other data from Google. The IP addresses are anonymized so that an assignment is not possible (IP masking).
Google uses this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing us with other services relating to website activity and internet usage. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf.
Google is registered with the U.S. Department of Commerce’s Safe Harbor program.
Google will not combine your IP address transmitted within the scope of Google Analytics with other Google data under any circumstances. The IP addresses are anonymized so that an assignment is not possible (IP masking).
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on:
You can object to the collection and processing of data within the scope of Google Analytics at any time with effect for the future. You can use the plug-in offered by Google for this purpose:
This website uses Google Analytics with the extension “_anonymizeIp ()”. This means that IP addresses are processed in abbreviated form, thus excluding the possibility of direct personal references.
Google Analytics is used in accordance with the conditions agreed with Google by the German data protection authorities. Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics Help:
We use Google Analytics including the functions of Universal Analytics. Universal Analytics allows us to analyze activity on our pages across devices (e.g., when accessed via laptop and later via a tablet). This is made possible by the pseudonymous assignment of a user ID to a user. Such assignment occurs, for example, when you register for a customer account or log in to your customer account. However, no personal data is forwarded to Google. Even if additional functions are added to Google Analytics with Universal Analytics, this does not mean that a restriction of data protection measures, such as IP masking or the browser add-on, is associated with this.
Demographic characteristics in Google Analytics:
This website uses the “demographic characteristics” function of Google Analytics. This allows reports to be generated that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google as well as visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or prevent the collection of your data by Google
b) GA Audiences
download and install the browser plugin available under the item Doubleclick deactivation extension. Alternatively, you can disable the Doubleclick cookies on the Digital Advertising Alliance site at the following link:
§ 7 Social media plug-ins
We use on our website on the basis of Art. 6 para. 1 p. 1 lit. f DSGVO uses social plug-ins of the social networks Facebook and Google+ to make our company better known. The underlying promotional purpose is to be considered a legitimate interest within the meaning of the GDPR. The responsibility for data protection-compliant operation is to be ensured by the respective provider. The integration of these plug-ins by us takes place by way of the so-called purpose-click method in order to protect visitors to our website as best as possible.
a) Facebook Social Plug-Ins
Social plug-ins (“plug-ins”) of the social network facebook.de, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”), are integrated into our website. The plug-ins from Facebook are recognizable by one of the Facebook logos (white “f” on blue tile / “thumbs up” sign) or are marked with the addition “Facebook Social Plug-In”. When you call up a website of our Internet presence that contains such a plug-in, your browser establishes a direct connection with the Facebook servers. The content of the plug-in is transmitted by Facebook directly to your browser, which then integrates it into the website. We therefore have no influence on the scope and content of the data that Facebook collects with the help of this plug-in and therefore inform you according to our state of knowledge (Facebook informs about this under: https://www.facebook.com/help/186325668085084).
By integrating the plug-ins, Facebook receives the information that you or your browser have accessed the corresponding page of our website. If you are logged in to Facebook, Facebook can assign the visit to your Facebook account. If you interact with the plug-ins, for example by clicking the Like or Share button or by leaving a comment, the corresponding information is transmitted directly from your browser to Facebook and stored there. The information will also be published on Facebook and displayed to your Facebook friends.
If you are not a member of Facebook, there is still the possibility that Facebook will learn your IP address and store it there.
Facebook may use this information for the purposes of advertising, market research, and customization of Facebook pages. For this purpose, Facebook creates usage, interest and relationship profiles, e.g. to evaluate your use of our website with regard to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website and to provide other services associated with the use of Facebook.
If you are a Facebook member and do not want Facebook to collect data about you via our website and link it to your membership data stored on Facebook or assign it to your Facebook account, please log out of Facebook before visiting our site and delete any cookies that have been set (see § 5 above).
For the purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your rights in this regard and setting options for protecting your privacy, please refer to the data protection information at https://de-de.facebook.com/about/privacy from Facebook.
b) Google Plus Plug-Ins
Our website includes social plug-ins (“plug-ins”) of the Google Plus social network, which is operated by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
You can recognize the Google Plus plug-in by the “+1” sign on a white or colored background. When you visit a website of our Internet presence that contains such a plug-in, your browser establishes a direct connection with Google’s servers. The content of the plug-in is transmitted by Google directly to your browser and integrated by it into the website.
We therefore have no influence on the scope and content of the data that Google collects with the help of this plug-in. According to Google, no personal data is collected without a click on the button. Such data, including the IP address, is only collected and processed for logged-in members.
The plug-in provider stores your aforementioned data as usage profiles and uses them for purposes of advertising, market research and / or needs-based design of its website. You have the right to object to the creation of these user profiles, whereby you must contact the plug-in provider to exercise this right.
§ 8 Newsletter / Subscription to the newsletter
Tours & Travel informs its customers and business partners at regular intervals by means of a newsletter about offers of the company and gives users the opportunity to subscribe to it. If you register for our newsletter using the input mask, your personal data (name, address, e-mail address), which you provide during newsletter registration, will be transmitted to the controller and stored. The newsletter of our company can generally only be received by the data subject if (1) the data subject has a valid e-mail address and (2) the data subject registers for the newsletter mailing. For legal reasons, a confirmation email is sent to the email address entered by a data subject for the first time for the newsletter mailing using the double opt-in procedure. This confirmation e-mail serves to verify whether the owner of the e-mail address as the data subject has authorized the receipt of the newsletter. Tours & Travel may arrange for the transfer to a processor, e.g. a lettershop, which will also use the personal data exclusively for an internal use attributable to the controller. Your data will not be passed on to unauthorized third parties. When registering for the newsletter, we also store the IP address of the deputer system used by the data subject at the time of registration, as assigned by the Internet service provider (ISP), as well as the date and time of registration. The collection of this data is necessary in order to be able to trace the (possible) misuse of a data subject’s e-mail address at a later point in time and therefore serves as a legal safeguard for the controllers.
The legal basis for the processing of data after registration to the newsletter by the user is Art. 6 para. 1 p. 1 lit. f GDPR. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Accordingly, the user’s e-mail address is stored for as long as the subscription to the newsletter is active.
The personal data collected in the context of a registration for the newsletter will be used exclusively for sending our newsletter. Furthermore, subscribers to the newsletter may be informed by e-mail if this is necessary for the operation of the newsletter service or a registration in this regard, as might be the case in the event of changes to the newsletter offering or changes in the technical circumstances.
The subscription to our newsletter can be cancelled by the data subject at any time. The consent to the storage of personal data that the data subject has given us for the newsletter mailing can be revoked at any time. For the purpose of revoking consent, a corresponding link can be found in each newsletter. Furthermore, it is also possible to unsubscribe from the newsletter mailing at any time directly on the website of the controller or to inform the controller of this in another way. By sending a message to email@example.com, you can cancel the use or processing of your data for the purposes of advertising, market or opinion research and the newsletter at any time free of charge.
§ 9 SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses an SSL or SSL protocol. TLS encryption. You can recognize an encrypted connection by the fact that the browser address bar changes from “http://” to “https://” and by the lock symbol in your browser bar.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.