Source: https://www.holidaypirates.com/tourism/providers/about-us/dataprotection/
Timestamp: 2019-04-21 05:17:38+00:00

Document:
On 25 May 2018, the most significant piece of European data protection legislation to be introduced in 20 years will come into force. The EU General Data Protection Regulation (GDPR) replaces the 1995 EU Data Protection Directive. The GDPR strengthens the rights that individuals have regarding personal data relating to them and seeks to unify data protection laws across Europe, regardless of where that data is processed.
Data protection is a matter of trust and your trust is important to us. We respect your personal space and your privacy. Therefore, protecting personal data and collecting, processing and using them in conformity with the law is an important concern to us. So that you feel safe while visiting one of our web pages, we strictly adhere to legal provisions when we process you data and would like to inform you here about our data collection and use of data.
We take appropriate technical and organizational measures which are intended to prevent unauthorized or unlawful processing of personal data and accidental loss or destruction of, or damage to, personal data.
The body responsible for collecting, processing and using your personal data in terms of the Federal Data Protection Laws is HolidayPirates GmbH, Wallstraße 59, 10179 Berlin, Germany.
HolidayPirates must receive or collect some information to operate, provide, improve, understand, customize, support, and market our Services, including when you install, access, or use our Services. The types of information we receive and collect depend on how you use our Services.
Preferences for travel destinations such as departure time, destinations, travel months, travel budgets or travel categories.
Further information which is visible for the public in your Facebook profile.
This data will only be provided on the basis of your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR processed and used only to make your profile. You can delete your user account at any time, just click "delete user account" within your profile.
The collection of the e-mail address serves to deliver the newsletter. Legal basis for sending the newsletter is your consent acc. Art. 6 para. 1 lit. a GDPR. The registration for the newsletter will be logged. Legal basis for logging the application is our legitimate interest in proving that the shipment was made with your consent. You can unsubscribe from our newsletter at any time. The link can be found at the end of each newsletter. As soon as you have unsubscribed from the newsletter, you will no longer receive any further offers from us. Also, your personal data will no longer be used and deleted immediately.
Legal basis for sending the WhatsApp newsletter is your consent in accordance with. Art. 6 (1) lit. a GDPR. Your consent to this data processing is always revocable by entering "STOP" in the respective messenger. The registration for the WhatsApp newsletter is logged. Legal basis for logging the application is our legitimate interest in proving that the shipment was made with your consent.
The processing of personal data serves to process the contact as well as to prevent misuse of the contact form and to ensure the security of our information technology systems. Legal basis for the processing of the data is in the presence of the consent of the user Art. 6 (1) lit. a GDPR.
The collection of the above-mentioned data of the user is intended to allow a commentary function and to prevent misuse of the services or the email address used. Legal basis for the processing of data after writing a comment by the user is due to our legitimate interests within the meaning of Art. 6 (1) lit. f. GDPR and serves the security of us as a website operator.
Usage And Log Information. We collect information about your activity on our Services ("Usage and Log Information" in the app means use of Adjust and Firebase, for details please see our Data Protection Declaration under "Services") like service-related, diagnostic, and performance information. This includes information about your activity (including how you use our Services, your Services settings, how you interact with others using our Services, and the time, frequency, and duration of your activities and interactions), log files, and diagnostic, crash, website, and performance logs and reports. Our legitimate interest in data processing according to Art. 6. (1) lit. GDPR is justified by our economic interest in affiliate marketing.
HolidayPirates Website Tracking is our name for Google Tag Manager, a web analytics service provided by Google LLC will be applied. The Google Tag Manager does not collect personally identifiable information but facilitates the integration and management of our tags. Tags are small pieces of code that can be used, among other things, to measure traffic and visitor behaviour, track the impact of online advertising and social channels, set up remarketing and audience targeting, and test and optimize websites. Google Tag Manager does not access this data. If you deactivated the domain level, it will, however, remain in effect for all tracking tags implemented with Google Tag Manager.
As far as you have your consent, Art. 6 (1) lit. a., Art. 7 GDPR on our website Google Analytics, a web analysis service of Google LLC.
Google Analytics uses "cookies" - text files that are stored on your device and allow an analysis of the use of the website. The information collected by the cookies is usually sent to a Google server in the US and stored there. We have activated IP anonymization. Your IP address will be shortened within the member states of the EU and the European Economic Area and in the other contracting states of the agreement. Only in individual cases, the IP address is initially transferred unabridged to the United States to a Google server and shortened there.
The information collected by Google on our behalf, as part of the Order Data Agreement, is used to evaluate the use of the Website by individual users, such as: For example, to generate activity reports on the website to improve our website. This also makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus to analyze the activities of a user across devices.
The personal data of users will be deleted or anonymized after 38 months. You may revoke your consent at any time with future effect by preventing the storage of cookies by setting your browser software accordingly. However, we point out that in this case you may not be able to use all the features of this website in full. Alternatively, you also have the option to refuse the use of Google Analytics in our tool on the website by simply rejecting the service in the tool.
Furthermore, you can prevent by a browser plugin (https://tools.google.com/dlpage/gaoptout?hl=de), that the information collected by cookies (including your IP address) is sent to Google Inc. and used by Google Inc.
Our legitimate interest in data processing via HolidayPirates Website Tracking according to Art. 6. (1) lit. f GDPR is justified by our economic interest in affiliate marketing.
As far as you have given your consent according to Art. 6. 1 lit. a., Art. 7 GDPR we are using Google Optimize on our website. It is a website optimization tool of Google LLC. You will find it in our overview, described as "demographics".
In order to improve the user experience and content of the website based on the behavior of the users.
Google Optimize is a sub-service of Google Analytics - more information on how it works can be found in the section "Google Analytics"
Measurement and analytics to better understand our users and provide better content.
Custom Audiences are used for advertising campaigns, which allows us to serve more relevant advertising.
Pixel-specific data - This includes the pixel ID and Facebook cookie.
Button click data - This includes any buttons clicked by site visitors, the labels of those buttons and any pages visited as a result of the button clicks.
Other values - Additional information about the visit through custom data events, for example the destination or hotel-name someone checked.
Our legitimate interest in data processing according to Art. 6. (1) lit. f GDPR is justified by our economic interest in running our offer.
Providing the "note" buttons on the website and on images to ensure the use of Pinterest for users and to make the saving of images possible.
Analysis of the user behavior of Pinterest users on our website in order to understand interests, to improve and expand our products.
"Note "-Button collects data on how often the button was clicked by users on our website or the landing page itself.
Log data, such as IP address, landing page URL with Pinterest functions, and the activities performed on it (such as the "Note" button), search history, browser type and settings, the date and time of your request, how you use it Pinterest and cookie and device data automatically shared with Pinterest.
Data is collected to better understand the users that visit our site through our advertisements.
Better understanding the reaction to ads allows us to serve more relevant advertising, and not bother the same users with the same ads continuously.
Outbrain UUID (unique user ID).
Time stamp, pages visited, referring source, conversion events.
Browser, device, and operating system information. An estimate of geographic location associated with IP address, and other information normally transmitted in HTTP requests.
Internet protocol (“IP“) address or other unique identifier (“Device Identifier“) for each computer, mobile device, technology or other device (collectively, “Device“) used to access the site. A Device Identifier is a number that is automatically assigned to a Device and is completely anonymous.
As far as you have given your consent according to Art. 6. 1 lit. a. GDPR we are using Hotjar on our website.
Measurement and analytics to better understand our users and provide better content. Heatmaps, click maps, screen recordings help us to better organise and structure the content of our website to provide a seamless and easy user experience.
You may object to the use of your information at any time and revoke any consent to use your information at any time. You can revoke your consent at any time with effect for the future and disable the tracking. You can switch off the recording of cookies by clicking the "service control" button on the website below. There you have the possibility to deactivate all cookies or only cookies you have selected.
Moreover, you have the right to correct, delete or restrict the processing of your information, as well as the right to object to processing and the right to transfer your data.
For sending out campaigns and offers from our website.
Capturing surfing behaviour of our users through an Pseudonymous Cookie ID, to track behaviour on each blogpost and sending this data to our newsletter database.
Tracking the behaviour in our newsletters newsletters including tracking of opens of emails and clicks on links.
Phone number, Profile Picture, Messages or Questions send to us.
By sending a start message to HolidayPirates (hereinafter referred to as – Sender) I agree with respect to Art. 6 Abs.1 lit. a GDPR that Sender has my permission to use my personal data (e.g. first and last name, phone number, messenger ID, profile image, messages) for direct communication and the required data processing, based on the respective messenger. To use this service, an existing messenger account with the respective provider is required.
I acknowledge that the respective provider might receive personal data (including communication meta data) that might be processed at servers located in countries outside of the EU (e.g. USA) that do not guarantee the same level of data protection as that practiced in the EU. Whatsapp Inc and Facebook Inc are certified under the Privacy Shield Agreement and thus guarantee compliance with European data protection regulations. Additional information is described in the above privacy policies of the respective messengers. Sender has no detailed knowledge about or influence on the respective providers.
Your agreement to this data processing can be revoked at any time by sending “stop” in the respective messenger.
To delete all data that is stored by our technical service provider, please send a message with „delete all data“ through your messenger.
Sender uses the technical service provider MessengerPeople GmbH, Herzog-Heinrich-Str. 9, 80336 Munich, Germany as data processor for this messenger service.
Unterstützung bei der Identifizierung des Verhaltens in der mobilen Anwendung, um Entscheidungen über gezieltes Marketing vorzubereiten; Unterstützung bei der effizienten Handhabung und Optimierung der mobilen Kampagnen für soziale Netzwerke und anderswo im Internet.
Pseudonymous cookie ID, ad ID and device ID used by a particular person, events in the mobile app about the use of the mobile app by a particular user (in particular login, successful completion of the transaction), but no payment and financial data.
Content of the advertisement to be delivered to a particular user and, as appropriate, classified advertising group to which that person belongs.
If you accept Adjust-Tracking in the App (in "Usage And Log Information"), some pseudonymous data will be sent to Facebook Inc.
If you accept Adjust-Tracking in the App (in "Usage And Log Information"), some data will be sent to Google Ireland Limited.
If you apply for a job position at HolidayPirates, personal data will be used for the purpose of carrying out the evaluation process in accordance with § 26 BDSG, Art. 6 (1) lit. a) GDPR. The data you provide will be used only for the purpose of filling the vacancy, examining and processing your application in this context.
After finalization of the application process, these data will be blocked for further use and deleted after expiry of any retention obligations, unless you expressly consent to any other processing. You can revoke your consent at any time by writing to [email protected].
To process your data we cooperate with the provider Personio GmbH. The service provider Personio is used as our data processor. Personio is used for the implementation of a fast and effective application process and based on § 26 BDSG.
All data that you provide in your application documents (CV, cover letter, certificates, etc.).
Our Services. We use the information we have to operate and provide our Services, including providing customer support, and improving, fixing, and customizing our Services. We understand how people use our Services and analyze and use the information we have to evaluate and improve our Services, research, develop, and test new services and features, and conduct troubleshooting activities. We also use your information to respond to you when you contact us.
To communicate with you, for example, on Service-related issues.
For collecting and using information you allow us to receive through the device-based settings when you enable them (such as access to your camera, or photos), so we can provide the features and services described when you enable the settings.
Based on the GDPR art. 6/1f, we will not request nor require consent from a user in order to display advertisements. After having conducted a legitimate interest assessment, we believe that our legitimate interest is appropriate given the value we bring to our users, discovering great travel deals for bargain price. Based on data collected, we will show ads to users that deliver the best user experience. By doing so, we allow users to enjoy the inspiration and the free of charge site browsing while driving revenue for the company to maintain and develop the product. Moreover, we are fully supportive of the digital ad industry consent mechanisms and will continue to test consent mechanisms as potential alternative legal basis for processing.
In the interests of businesses and other partners to help them understand their customers and improve their businesses, validate their pricing models, and evaluate the effectiveness and distribution of their services and messages, and understand how people interact with them on our Services.
To promote and send you, as customer, our last offers.
We will consider several factors when assessing an objection including: our users' reasonable expectations; the benefits and risks to you, us, other users, or third parties; and other available means to achieve the same purpose that may be less invasive and do not require disproportional effort. Your objection will be upheld, and we will cease processing your information, unless the processing is based on compelling legitimate grounds or is needed for legal reasons.
Under the General Data Protection Regulation (GDPR) or other applicable local laws, you have the right to access, rectify, port, and erase your information, as well as the right to restrict and object to certain processing of your information. This includes the right to object to our processing of your information for direct marketing and the right to object to our processing of your information where we are performing a task in the public interest or pursuing our legitimate interests or those of a third party. You can access or port your information using our in-app Request Account Info feature (to be developed). You can access tools to rectify, update, and erase your information directly in-app as described in the Managing and Deleting Your Information section. Where we use your information for direct marketing for our own Services, you can always object and opt out of future marketing messages using the unsubscribe link in such communications (Newsletter), or by removing your Travel Preferences and turning off the Spectacular Deals and Error fares switches.
"Regardless of the explanations above, you may object to the use of your information at any time and revoke any consent to use your information at any time."
Here, the right of objection under Art. 21 para. 1 and 2 GDPR applies to the processing of your data in connection with direct advertisement, if this is done on the basis of a balance of interests.
Moreover, you have the right to correct, delete or restrict the processing of your information, as well as the right to object to processing and the right to transfer your data. Please note that we may require proof from you in the event of a request for information that has not been made in writing, proving that you are the person you are spending yourself on.
If you revoke your consent to data processing or object to the use of the data, this does not affect the lawfulness of the data processing until the time of the revocation.
Further, you have the right to correct, block or delete the data which is collected and stored by us, at any time. We expressly point out that there may be legal obligations to store data.
As of 25.05.2018, you are also entitled to data transferability under Art. 20 GDPR and have the right to complain to the competent supervisory authority within the meaning of Art. 77 GDPR.
If you believe that the processing of your data violates data protection law or your data protection claims have otherwise been violated in a way, you can complain to the relevant regulatory authority.
You have the right to know which data we store about you (right to information). Please note that we may require proof from you in the event of a request for information that has not been made in writing, proving that you are the person for whom you spend yourself.
We store information until your account is deleted.
User Profile. Under User Profile you can manage all the information related to your profile. You can create, edit and delete your Travel Preferences. You can change your username, your profile picture, your email and your password.
Delete Account. Under the User Profile (in-app) you have the right to be forgotten by removing your account from our systems.
Unsubscribe from Newsletter: You can unsubscribe from our newsletter at any time. The link can be found at the end of each newsletter. As soon as you have unsubscribed from the newsletter, you will no longer receive any further offers from us and your personal data will be deleted immediately.
Unsubscribe from our WhatsApp-Service: You can unsubscribe from our WhatsApp service at any time. Simply send a message with "STOP" to our number.
Data-analytics: Under the Settings in-app you can stop being tracked. Notice that turning off the Analytics will restrict how we customize our Services to better suit your preferences. You can turn off the tracking at the website by clicking the button "service control" below.
Art. 6 I lit. a GDPR is the legal basis for our company to processing operations in which we obtain consent for a particular processing purpose. If the processing of personal data is necessary to fulfill a contract of which the data subject is a party, as is the case, for example, in processing operations necessary for the provision of any other service or consideration, the processing is based on Art. 6 I lit , b GDPR. Same applies to processing operations that are necessary to carry out pre-contractual measures, for example in cases of inquiries regarding our products or services. If our company is subject to a legal obligation which requires the processing of personal data, such as the fulfillment of tax obligations, the processing is based on Art. 6 I lit. c GDPR. We collect, use, preserve, and share your information if we have a good-faith belief that it is reasonably necessary to: (a) respond pursuant to applicable law or regulations, to legal process, or to government requests; (b) enforce our Terms and any other applicable terms and policies; (c) detect, investigate, prevent, and address fraud and other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of our users, HolidayPirates GmbH, or others.
The Data Protection Officer for HolidayPirates GmbH can be contacted here ([email protected]).
to simplify the log-in process or to customize our content in line with your interests and preferences.
If you book a trip with one of our business partners via our site, appropriate personal data will be passed to the business partner. This includes cookies used to record the booking process. The cookies enable our business partner to ascertain that you have taken advantage of the offer presented via our website. Our partners may use information about your booking to improve your/their offering.
The legal basis for the processing of personal data using technically necessary cookies is Article 6 (1) lit. f GDPR. Our legitimate interest in data processing is justified by our economic interest in providing technical functionality. The legal basis for the processing of personal data using cookies for analysis purposes is the consent of the user Art. 6 para. (1) lit. a GDPR.
Should you have questions about your personal data, you can contact us via the contact form on our website.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 7
 Art. 6
 Art. 6
 Art. 7
 Art. 6
 Art. 6
 Art. 6
 § 26
 Art. 6
 § 26
 art. 6
 Art. 21
 Art. 20
 Art. 77

Art. 6
 Art. 6
 Art. 6
 Art. 6