Source: https://www.himalaya-adventure.com/en/privacy-policy/
Timestamp: 2019-04-23 20:16:13+00:00

Document:
contact data (e.g. e-mail address, telephone number).
usage data (e.g. visited pages, interest in content, access time).
meta-/communication data (e.g. computer information, IP addresses).
We attach the greatest importance to the protection of your data entrusted to us. The collection, processing and use of personal data is subject to the provisions of current legislation and data protection regulation (GDPR).
In accordance with Art. 13 GDPR, we inform you about the legal basis of our data processing. Unless the legal basis in the data protection declaration is mentioned, the following applies: The legal basis for obtaining consent is Article 6 (1) lit. a and Art. 7 GDPR, the legal basis for the processing of our services and the execution of contractual measures as well as the response to inquiries is Art. 6 (1) lit. b GDPR, the legal basis for processing in order to fulfill our legal obligations is Art. 6 (1) lit. c GDPR, and the legal basis for processing in order to safeguard our legitimate interests is Article 6 (1) lit. f GDPR. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR as legal basis.
We meet organisational, contractual and technical security measures in accordance with the state of the art, in order to ensure that the provisions of the data protection laws are complied with, and to ensure protection of the data processed by us against accidental or intentional manipulation, loss, destruction or access by unauthorised persons.
Disclosure of data to third parties only takes place within the framework of the legal guidelines. We give the data of users to third parties only if required, for example, on the basis of Art. 6 para. 1 lit. b. GDPR for contractual purposes or on the basis of legitimate interests according to Art. 6 para. 1 lit. f. GDPR for economic and effective operation of our business activities.
If we use subcontractors in order to provide our services, we will take appropriate legal measures and appropriate technical and organisational measures for the protection of personal data in accordance with the relevant statutory provisions. In as far as content, tools or other resources from other suppliers (hereinafter jointly referred to as “third parties”) can be used within the scope of this privacy statement, and their named location is in a third country, it is assumed that a data transfer takes place in the country of domicile of the third party.
Third countries are understood to be countries in which the GDPR is not a directly applicable law, that is, in principle, countries outside the EU or the European Economic Area. The transfer of data to third countries is carried out if an adequate level of protection for the data, a user consent or other legal permission is present.
You have the right to withdraw your granted consent in accordance with. Art. 7 para. 3 GDPR with effect for the future.
We utilize cookies (small files containing configuration information) which are stored by the browser on your computer or mobile device. We typically use session cookies to provide easier site navigation and access to forms. Those are erased when the user closes the browser.
Cookies also help us to determine the usage frequency and the number of users of our web site. We do not capture personal data by cookies.
Our services can also be used without cookies. The most browsers are configured to automatically accept cookies. You may deactive the storage of cookies though, or configure your browser to notify you as soon as cookies are sent. Cookies that are already stored may be deleted at any time.
According to legal requirements, the storage takes place in particular for 6 years in accordance with § 257 paragraph 1 HGB (trading books, inventories, opening balance sheets, annual accounts, trade letters, accounting documents, etc.) and for 10 years in accordance with § 147 Abs. 1 AO (books, records, management reports, accounting documents, commercial and business letters, documents relevant to taxation, etc.).
When contacting us (via the contact form or E-mail), the information of the user to edit the contact request and their settlement is processed in accordance with Art. 6 para. 1 lit. b GDPR.
The information provided by the users might be stored in our in-house customer relationship management system. We use the CRM system on the basis of our legitimate interests (efficient and quick processing of user requests).
We collect information for each access to the server on which this service is located (so-called server log files) on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. F. GDPR. Access data includes the name of the retrieved page, file, date and time of access, data volume transferred, notification of successful retrieval, browser type with version, the operating system of the user, referrer URL (the page previously visited), IP address, and the requesting provider.
Log file information is stored for a maximum period of seven days for security reasons (e.g. for the elucidation of abuse or fraud) and then deleted. Data whose further retention is required for evidential purposes is excluded from deletion up to the final clarification of the respective incident.

References: Art. 13
 Art. 7
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 7
 § 257
 § 147
 Art. 6
 Art. 6