Source: https://mycaucasus.com/en/privacy
Timestamp: 2019-04-23 15:52:01+00:00

Document:
The protection of your data is very important to us. We only collect as little data as necessary and pass on as little data as is really necessary to process your booking. We only pass on the following personal data from you to our local partners: First name, surname, gender, age, nationality and country. We will not pass on further information and data to third parties without your consent. Furthermore, we do not create comprehensive customer profiles. We comply with the basic EU data protection regulation (EU-GDPR).
We only process personal data of our users if this is necessary to provide a functional website as well as our contents and services. The processing of our users' personal data takes place regularly and only with the user's consent. An exception applies in those cases where prior consent cannot be obtained for real reasons and the processing of the data is permitted by law.
You can visit our website without giving any personal information. Each time a website is called up, the web server merely automatically saves a so-called server log file which, for example, contains the name of the requested file, your IP address, date and time of the call, the amount of data transmitted and the requesting provider (access data) and documents the call. These access data are evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our services. Pursuant to Art. 6 para. 1 sentence 1 f GDPR, this serves to safeguard our legitimate interests in a correct presentation of our offer, which predominate within the scope of a balancing of interests. All access data will be deleted no later than seven days after the end of your visit to the site.
Your personal data will be deleted or blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
This data is not stored together with other personal data of the user. The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.
Temporary storage of the IP address is necessary to enable delivery of the website to the user's computer. The IP address of the user must remain stored for the duration of the session. The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
We undertake not to sell your personal data to third parties or pass them on to uninvolved third parties, and we undertake to treat your data confidentially.
We use the data provided by you to fulfil and process your booking. We pass on your data to the contractual partner (e.g. local partner) for the fulfilment of the contract, as far as this is necessary for the provision of the service. For the processing of payments we pass on the payment data required for this to the credit institution commissioned with the payment and, if applicable, the payment service provider commissioned by us or to the payment service selected by you during the order process. All information and data will be treated absolutely confidentially and will not be passed on to uninvolved third parties.
You can request confirmation from MyCaucasus GmbH or the data protection officer at any time as to whether personal data concerning you will be processed by us.
- the existence of automated decision-making, including profiling in accordance with Art. 22 para. 1 and 4 GDPR and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.
You have the right to correct and/or complete your data vis-à-vis MyCaucasus if the personal data processed concerning you is incorrect or incomplete. MyCaucasus GmbH must make the correction immediately.
- if you dispute the accuracy of the personal data concerning you for a period of time that allows MyCaucasus to verify the accuracy of the personal data.
- if the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted.
- if MyCaucasus no longer needs the personal data for the purposes of processing, but you do need them to assert, exercise or defend legal claims.
- if you have filed an objection to the processing pursuant to Art. 21 para. 1 GDPR and it is not yet clear whether the legitimate reasons of MyCaucasus outweigh your reasons.
If the restriction on processing has been restricted under the above conditions, you will be informed by our data protection officer before the restriction is lifted.
If MyCaucasus GmbH has made the personal data concerning you public and is obliged to delete it pursuant to Art. 17 para. 1 GDPR, it shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform those responsible for data processing who process the personal data, that you as the person concerned have requested the deletion of all links to this personal data or of copies or replications of this personal data.
You have the right vis-à-vis MyCaucasus to be informed of these recipients.
In exercising this right, you also have the right to request that the personal data concerning you be transferred directly by a person in charge to another person in charge, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.
You have the right to object at any time to the processing of personal data concerning you on the basis of Article 6(1)(e) or (f) GDPR for reasons arising from their specific situation; this also applies to profiling based on these provisions.
The MyCaucasus Data Protection Officer no longer processes the personal data concerning you, unless he can prove compelling reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If you register for our newsletter, we use the data required for this or separately communicated by you in order to regularly send you our e-mail newsletter on the basis of your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.
You can unsubscribe from the newsletter at any time and either by sending a message to the contact option described below or via a link provided for this purpose in the newsletter. After logging off, we will delete your e-mail address unless you have expressly consented to further use of your data or we reserve the right to use data in excess thereof, which is permitted by law and about which we inform you in this declaration.
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. The user's e-mail address will therefore be stored for as long as the subscription to the newsletter is active. The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose, there is a corresponding link in every newsletter.
If cookies are not accepted, the functionality of our website may be limited. The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f GDPR. The legal basis for the processing of personal data using cookies for analytical purposes is Art. 6 para. 1 lit. a GDPR.
For website analysis, our website uses Google (Universal) Analytics, a web analysis service of Google LLC (www.google.com). This serves to safeguard our legitimate interests in an optimised presentation of our offer in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR which predominate in the context of a balancing of interests. Google (Universal) Analytics uses methods that enable an analysis of your use of the website; these include cookies. The automatically collected information about your use of this website is usually transferred to a Google server in the USA and stored there. By activating IP anonymization on this website, the IP address is reduced prior to transmission within the Member States of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The anonymous IP address transmitted by your browser within the scope of Google Analytics will not be merged with other Google data. After the end of the use of Google Analytics by us the data collected in this context will be deleted.
Google LLC is headquartered in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed under the following link: https://www.privacyshield.gov/list. As a result of this agreement between the US and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.
As an alternative to the browser plugin, you can click on this link to prevent Google Analytics from collecting data on this website in the future. An opt-out cookie is stored on your mobile device. If you delete your cookies, you must click the link again.
Our website does not use social plugins from providers such as Facebook, Google+ or Twitter.
Credit card data is encrypted with SSL technology. Every transaction is authorized online at the responsible credit card companies. We do not store credit card numbers or data.
This website contains links to other sites. MyCaucasus assumes no responsibility for the data protection practised on other sites and the contents published there.

References: Art. 6
 Art. 6
 Art. 22
 Art. 21
 Art. 17
 Art. 6
 Art. 6
 Art. 6
 Art. 6