Source: https://www.exclusiveholidays.de/en-gb/data
Timestamp: 2019-04-20 04:22:36+00:00

Document:
In the following we would like to inform you about our handling of your data when using our website http://www.exclusiveholidays.de/en-gb and the associated sub-pages (hereinafter: "website") in accordance with Art. 13 of the Basic Data Protection Ordinance (hereinafter: "DSGVO"). You can view, print or download this data protection declaration permanently and at any time on our website.
HAG uses technical and organisational security measures to protect the data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons, taking into account the state of the art, implementation costs and the type, scope, circumstances and purposes of processing as well as the different probability of occurrence and severity of the risk. The transmission of personal data between your terminal and our server is always encrypted (TLS encryption).
· and the size of the files transferred during the connection.
The listed personal data is also stored in the log files of the server. A combination of this stored data with further data of yours does not take place.
The legal basis for storage is Art. 6 Para.1 f) DSGVO.
Temporary storage of the data in log files is absolutely necessary to enable a correct presentation of the website, to ensure the permanent functionality of the information technology systems and the technology of the website and to optimise the website.
In addition, the data is stored in the interest of recognizing, limiting and eliminating attacks on our website.
Stored log files are deleted or made anonymous if they are no longer required. They are usually deleted or made anonymous after 3 months, provided that no legal retention obligations exist or longer storage is necessary, for example to ward off or clarify an attack on our website (e.g. fraudulent booking, cyber attacks).
The processing of your personal data for the provision and optimisation as well as analysis of the website is also carried out by contract processors (e.g. web analysis service providers). These shall be included exclusively on the basis of an agreement to an order agreement in accordance with Art. 28 para. 3 DSGVO.
Session cookies: These are automatically deleted at the end of the browser session. The following data is collected: Browser type, operating system, country of origin of the accessing computer.
Permanent cookies: These can be stored over the individual browser session.
Processing is carried out on the basis of Art. 6 para. 1 lit. f DSGVO.
The use of technically conditioned cookies and the associated data processing takes place due to our legitimate interest in a technically objection-free and comfortable use of our website.
Technically conditioned cookies are usually deleted automatically when you close your browser (session cookies), in other cases only after some time (permanent cookies). The duration of storage of permanent cookies is determined by the provider and can be viewed by you in your browser, for example.
Only in selected cases will personal data be transmitted to external service providers within the framework of order processing in accordance with Art. 28 DSGVO. Further information can be found in Section V.5 ("Tracking-tools/Web analysis services").
Website analysis services used by HAG are used on the basis of Art. 6 para. 1 sentence 1 f) DSGVO. These services ensure a demand-oriented design and the continuous optimization of our website and marketing measures. In addition, these services are used to statistically record and evaluate the use of the website (e.g. number of visits by different users) for the purpose of optimization. These interests are to be regarded as legitimate within the meaning of the aforementioned provisions.
However, your IP address will be reduced before Google transfers it within member states of the European Union or in other signatory states to the Agreement on the European Economic Area and thus made anonymous. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. IP anonymisation is active on our websites. On behalf of HAG, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide HAG with further services related to website and Internet use. We have concluded an order processing agreement with Google in accordance with Art. 28 DSGVO.
On our site, trbo GmbH, Römerstrasse 6, 80801 München (http://www.trbo.com/) collects and stores data from which user profiles are created using pseudonyms to provide you with personalised customer benefits. For this purpose, cookies may be used that enable the recognition of an Internet browser. These usage profiles serve the analysis of visitor behaviour and are evaluated for the improvement and demand-oriented design of our offer. The pseudo-nymised user profiles are not combined with personal data about the bearer of the pseudonym without the express consent of the data subject to be given separately. You can object at any time by clicking on the following links: activate trbo and deactivate trbo.
The processing of your personal data in the context of tracking tools and web analysis services is also carried out by contract processors. These are exclusively included on the basis of an agreement to an order agreement in accordance with Art. 28 para. 3 DSGVO.
When using Google Analytics, in the exceptional cases described above, your IP address may be transmitted to Google LLC in full and only shortened there. Google LLC is domiciled in the USA and thus in a so-called "third country" according to Art. 44 DSGVO. At Google Analytics, the appropriate level of data protection follows from participation in the Privacy Shield Agreement (Art. 54 Para. 1 DSGVO).
If you would like to know more about the protection of the data transmitted, please contact our data protection officer.
The legal basis for data processing is Art. 6 para. 1 lit. b DSGVO, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.
We store and use this data to process your travel booking (contract processing).
The data will be deleted if it is no longer required to process the contractual relationship/your rice booking. As a rule, they are deleted after 3 years, unless there is a legal obligation to store them.
We transfer personal data, which you enter when booking rice, for the fulfilment of our contractual obligations as a travel agent to your respective tour operator.
We transfer personal data to third countries outside the EU. This transmission is based on Art. 49 para. 1 lit. c DSGVO.
They are only subject to automated decision making in exceptional cases (see Art. 22 DSGVO) if you again specify a means of payment for which a payment has already failed, or if there are otherwise actual grounds for suspecting that it is a fraudulent booking. In these cases your request for a travel booking will be rejected by HAG. Such an automatic decision is required for the conclusion of the contract (Art. 22 para. 2 lit. a DSGVO). The person concerned has the option of contacting us via the contact data mentioned above (see item I.) in order to request an explanation or the intervention of a person or to inform us of their position.
If you contact HAG (e.g. by phone, mail or e-mail), the data you provide will be processed to process your request and to answer your question.
The legal basis for data processing is Art. 6 para. 1 lit. a DSGVO (consent) and Art. 6 para. 1 lit. b DSGVO (performance and initiation of contracts).
Your data will be deleted after your request has been processed and the questions have been answered, unless there is a legal obligation to retain your data. Data stored with us for other purposes (e.g. for travel bookings) remain unaffected by this.
If you communicate with us by e-mail, access by third parties cannot be ruled out. HAG therefore recommends sending confidential information by post or encrypted e-mail communication (PGP). Please let us know if you wish to correspond with us by e-mail in encrypted form, so that we can provide you with information on the relevant addresses and public keys.
The newsletters also contain so-called tracking pixels. These are files that are retrieved from the server when the newsletter is opened and collect technical information about the browser or your terminal device. Furthermore, HAG can recognize whether and when e-mails have been opened and links contained have been clicked on.
For the newsletter registration we use the so-called double opt-in procedure. After your registration an e-mail will be sent to the specified e-mail address containing a confirmation link to receive the newsletter.
The legal basis for data processing is your consent pursuant to Art. 6 para. 1 lit. a DSGVO and otherwise Art. 6 para. 1 lit. f DSGVO (justified interest of HAG) in conjunction with § 7 para.
HAG is entitled, within the scope of the legal permission according to § 7 Abs. 3 UWG, to use the e-mail address you have provided in connection with a chargeable booking for direct advertising for its own, similar products or services.
HAG informs interested parties at regular intervals by newsletter about current offers, voucher campaigns, competitions and general travel news. The data provided by you for this purpose will be processed exclusively for the purpose of sending you the newsletter. We only collect the additional data required for registration in order to prevent misuse of the newslet-ter service and, in particular, your e-mail address. The registration procedure is recorded in order to preserve evidence. The statistical evaluation of the newsletter e-mails is carried out for the purpose of optimizing the content of the newsletter.
Your newsletter data will be stored for as long as the subscription to the newsletter is used. The data will be deleted if they are no longer required. They are usually deleted or made anonymous after 6 months, provided that there are no legal storage obligations or longer storage is required, for example in order to log the registration procedure. Data stored by us for other purposes (e.g. for travel bookings) remain unaffected by this.
The processing of your personal data in the context of the newsletter dispatch, takes place also via contract processors. These are included exclusively on the basis of an agreement to an order agreement in accordance with Art. 28 para. 3 DSGVO.
You have the right to correct and complete inaccurate personal data without delay.
You have the right to request the deletion of your personal data if one of the reasons mentioned in Art. 17 DSGVO intervenes, in particular if there is no longer a legal basis for the processing.
You have the right to demand the restriction of the processing of your personal data if one of the reasons mentioned in Art. 18 DSGVO intervenes, in particular at your request instead of deletion of the data.
You have the right to request all personal data stored by us about you in a structured, current and machine-readable format and to transmit this data to another person in charge without obstruction by the person responsible to whom the personal data was provided.
If data are collected on the basis of Art. 6 Para. 1 letter f DSGVO (data processing to protect legitimate interests), you have the right to object to the processing at any time for reasons arising from your particular situation. If you object to processing on the basis of our legitimate interest, we may nevertheless continue processing if we can prove compelling reasons worthy of protection for the processing which outweigh your interests, your rights and freedoms.
According to Art. 77 DSGVO, you have the right to file a complaint with the supervisory authority responsible for you.

References: Art. 13
 Art. 6
 Art. 28
 Art. 6
 Art. 28
 Art. 6
 Art. 28
 Art. 28
 Art. 44
 Art. 6
 Art. 49
 Art. 22
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 § 7
 § 7
 Art. 28
 Art. 17
 Art. 18
 Art. 6
 Art. 77