Source: https://www.fincallorca.com/html/data-policy.html
Timestamp: 2019-04-25 04:36:44+00:00

Document:
With the following notice, we inform you about the processing of your personal data by us, Fincallorca GmbH, and the rights to which you are entitled according to data protection law.
You can reach our data protection officer by post at the above address with the addition "Data Protection Officer" or by e-mail under: datenschutz@fincallorca.de.
We process your personal data in compliance with the provisions of the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), and all other relevant laws.
If you request information about, for example, our company, properties, or services of our company, we require the information provided by you to process your request. If you place a binding booking, we need the information provided by you for brokerage purposes and the creation of the rental contract; naturally, we will additionally transfer this information to the finca owner, as our contract partner. If you make a booking request, we need the information provided by you to submit the request to the owner. If a rental agreement is concluded, we process these data to carry out the contractual relationship.
The processing of your request, the booking, and the conclusion of the rental agreement is not possible without the processing of your personal data.
In addition, we need your personal data in order to arrange a rental car or travel insurance. The same applies to the development of new quality standards and the compliance with legal obligations. We use these for an examination of the entire customer relationship, for example to advise on contract adjustments or amendments, for goodwill decisions, or to provide comprehensive information.
The legal basis for the processing of personal data for pre-contractual and contractual purposes is Art. 6 para. 1 lit b GDPR. If special categories of personal data (such as health data) are required for this purpose, we will obtain your consent in accordance with Art. 9 para. 2. lit a in conjunction with Art. 7 GDPR. If we compile statistics with these data categories, this is done on the basis of Art. 9 para. 2 lit j GDPR in conjunction with § 27 of the Federal Data Protection Act [BDSG].
to prevent and investigate criminal offences.
In addition, we process your personal data to fulfil legal obligations such as regulatory requirements, police orders, as well as commercial and tax data retention obligations. In this case, the legal basis for the processing is the respective legal regulations in connection with Art. 6 para. 1 lit c GDPR.
In addition, we process your personal information for the purpose of examining whether any reductions of the service fee charged for Fincallorca bookings can be granted to repeat bookers. For the correct calculation and presentation of the prices during the online booking process, we therefore check whether there exists a match with an earlier booking made via Fincallorca after the e-mail address and postal address are entered into the online form. The legal basis for data processing in this case is Art. 6 para. 1 lit b GDPR. If you, however, object thereto, you can contact us via our free booking hotline.
In the context of arranging a rental agreement for a holiday home, the landlord and the owner of the concerned property receive all the necessary data. The same applies if a property manager offers on-site services in connection to your rental agreement, insofar as this information is required for this.
Car dealers will receive the request and agreement data required to perform the rental agreement.
Travel insurers will receive the request and agreement data required to perform the insurance agreement.
In order to fulfil our contractual and legal obligations, we partly use external service providers.
In addition, we may transfer your personal data to other recipients such as authorities to comply with statutory notification obligations (e.g. tourist regulation authorities, tax and social authorities, law enforcement authorities, courts, etc.).
We delete your personal data as soon as they are no longer required for the above-mentioned purposes. In exceptional cases, personal data may be kept for the period in which claims can be asserted against us or the lessor (statutory limitation period of three or up to thirty years). In addition, we store your personal data insofar as we are legally obliged to do so. The German Commercial Code and the Tax Code, among others, impose corresponding duties of proof and retention. They stipulate storage periods of up to ten years.
You have the right to request information on the personal data stored on your person at the above address. In addition, under certain circumstances, you may request the correction or deletion of your data. You can furthermore have a right to restrict the processing of your data and a right to have the data provided by you published in a structured, common, and machine-readable format.
You have the right to object to the processing of your personal data for direct marketing purposes. If we process your data to protect legitimate interests, you may object to such processing if your particular situation gives rise to reasons against data processing.
If we transmit personal data to service providers outside the European Economic Area (EEA), the transmission will only take place if the third country has been confirmed an appropriate level of data protection by the EU Commission or if other appropriate data protection guarantees (e.g. binding internal company data protection regulations or EU standard contract clauses) are available.
We also attach great importance to the protection of your privacy and the security of your personal data when you visit our websites. Our applications comply with the provisions of the European General Data Protection Regulation, the Federal Data Protection Act, and other industry-specific data protection regulations for the online sphere (such as the Telecommunications Act and the Telemedia Act). All our employees are obliged to observe the EU General Data Protection Regulation and the Federal Data Protection Act.
You can visit our website without disclosing any personal information. We only store data without reference to individuals. These data are analysed exclusively for the improvement of our offer and do not permit any conclusions as to your identity. We collect, store, and process your data for the processing of your reservation or booking, as well as for advertising purposes. Personal data are collected if you provide them of your own accord when submitting a request or making a booking, or when registering for our newsletter. You can object to the use of your data in the context of consulting, advertising, market research, quality assurance, and property ratings at any time, also by electronic means. Your personal data are only passed on by us in the context of the processing of the reservation of the relevant holiday property, i.e. to the lessor or their representative.
We solely use your personal information (such as your name, address, phone, and email) to complete your reservations, execute your bookings, and to communicate with you.
Your personal data are not disclosed (to third parties) for purposes that reach beyond the contractual scope.
These data protection principles are adapted and further developed in accordance with general developments in data protection and security technology.
Further details can be found in our information on data protection information below.
A visit to our website is possible without the need for collecting personal information. However, each time you visit our website, some anonymous data are stored, for example which pages or offers have been accessed. These data are not personal in nature and are therefore not subject to the statutory provisions of the GDPR.
The visited page, date and time of access, transmitted data quantity in bytes, the source/reference from which you entered the website, the browser, operating system, and IP address used.
The collected data are solely used for statistical evaluations and to improve the website. Nevertheless, the website operator reserves the right to subsequently check the server log files for concrete indications of illegal use.
Anonymous data are only collected for purposes of statistical evaluation to improve our offer. Please also take note of "Right to information / right of withdrawal".
A cookie is a small data file that a website may send to your browser and which may then be stored on your system for later use.
Session cookies will be deleted when you close the browser.
We do not use any cookies which are stored permanently on your hard drive. The expiry time is set to a date in the future for your convenience. When you visit our site again, we will automatically detect that you have visited us before and will know which inputs and settings you prefer.
Note: Our website uses Google Analytics with the new, data-protection compliant extension "_anonymizeIp()". The IP addresses are only processed in their truncated form, in order to prevent them from being directly linked to a particular person.
If you access our website via a Microsoft Bing ad, a cookie will be stored in your browser software. These cookies are not used for personal identification. The information generated by the cookie will solely be used to compile statistics on the use of the website. This will allow us to evaluate and improve our marketing activities.
If you refuse to participate in this process, you can reject the setting of cookies by configuring your browser software accordingly. You can for example change your browser settings to automatically deactivate the setting of cookies. Alternatively, you can install a corresponding browser plug-in to prevent the cookie from sending information. You can directly reject the use of such a cookie with Microsoft through the following website: http://choice.microsoft.com/opt-out.
For more information about Microsoft Bing's privacy practices and cookies, please visit the Microsoft website: https://privacy.microsoft.com/en-gb/privacystatement/.
How objection or deactivation of the feature works using the link: by clicking on the link, a so-called opt-out cookie is set. Please note that if you delete all cookies from your end device, this opt-out cookie will also be deleted; if you still want to prevent anonymous data collection, you must set the opt-out cookie again. The opt-out cookie is set individually for each browser and for each end device. If you visit our website from your home or work or if you use different browsers, you must activate the opt-out cookie for the different browsers or different end devices you use.
We use the retargeting functions of Google AdWords (Google Remarketing) (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), Bing (Bing - Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA), and Facebook (Facebook Inc., 1601 Willow Road, Menlo Park, CA 94025, USA). Again, you have options to place an opt-pit cookie to prevent data collection.
We may publish aggregated statistics about the +1 activities of users and/or pass these statistics on to users and partners such as publishers, advertisers, or affiliated websites.
You can subscribe to a free newsletter through our website. The data from the contact entry fields are transmitted to us when you subscribe to the newsletter. This comprises the name or a synonym and the specified e-mail address.
In addition, we also store the IP address of the accessing computer and the date and time of registration.
During the subscription process, your consent is obtained for processing data and reference is made to this data protection statement.
Fincallorca will additionally distribute a newsletter to all persons who have made a booking request with us and while doing so, have indicated their e-mail address, as well as to all persons with whom a booking has been completed (existing customers). In such a case, only direct marketing of our own products or services will be sent via the newsletter.
The legal basis for processing data after the user subscribes to the newsletter is, if the user's consent to this has been obtained, Art. 6 para. 1 lit. a GDPR.
The legal basis for sending the newsletter to existing customers based on a previous booking is Art. 7 para. 3 UWG (German Fair Trade Practices Act).
The data processing purpose of collecting the user's email address lies in delivering the newsletter. The collection of other personal data as part of the subscription process ensures the prevention of misuse of the services or of the used email address.
The data will be deleted as soon as they are no longer necessary to fulfil the purpose for which they had been collected. The user's email address will therefore only be stored for as long as the subscription is active. The other personal data collected during the subscription process will generally be deleted after a period of seven days.
The newsletter subscription can be cancelled by the user at any time. A relevant unsubscribe link can be found in every newsletter for this purpose.
Fincallorca uses the list provider MailChimp to distribute its newsletter. MailChimp is a service provided by The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318.
When you register for our newsletter, the data you provide during registration will be transmitted to MailChimp and stored there. After your registration, you will receive an e-mail with a link to confirm your registration ("double opt-in”).
MailChimp offers extensive analysis possibilities about how newsletters are opened and used. These analyses are solely group-related and are not used by us for individual evaluation. MailChimp also uses the analytics tool Google Analytics and might integrate it in the newsletters. Further details on Google Analytics can be found in this data protection statement under "Web analysis using Google Analytics”.
If you access web pages within our Internet offer which provide the opportunity to enter data, and are requested to enter and submit your personal data, we use the encryption technology SSL (Secure Socket Layer) with a key length of at least 128 bits when sending these data over the Internet. To date, no possibilities to analytically decrypt such 128-bit encryption are known. You can recognise the use of the SSL encryption by the address format (which in this case starts with HTTPS) or the lock symbol in the status bar of your web browser.
We do not send any messages containing personal data via unencrypted e-mail. If you send us unencrypted e-mails, please note that these are not protected against the disclosure to or manipulation by unauthorised third parties during transmission over the Internet. Before sending us an email, please do keep in mind that content sent via e-mail is not protected against unauthorised access, falsification, etc. This is why we recommend using a contact form if you want to send a message to Fincallorca.
Our data processing systems are protected from outside environments by firewall systems. With our registration procedures and authorisation systems, we make sure that internal applications are only accessible to authorised users.
Fincallorca GmbH provides a free live chat function on the website www.fincallorca.de. Using the chat function, customers and visitors who are interested in holiday homes at Fincallorca can directly get in touch with employees of our company for consultation purposes or to ask questions in real time. Chats are always limited to two parties; other users cannot read the conversation. No costs are incurred beyond the cost of using an Internet connection.
The live chat function has the form of a text chat, with communication via the computer keyboard. Users must verify their identity by answering certain questions before any information about contract data is disclosed.
In order to ensure a secure, fair, and trusted exchange of information, Fincallorca expects users of the live chat to comply with certain standards on appropriate manners, openness, courtesy, and respect. Chats that violate these principles are terminated; users can be blocked in case of very serious violations. The chat function is available to users at the times specified at www.fincallorca.de. Fincallorca reserves the right to at all time change the live chat times without prior notice, or to completely discontinue the offer.
The live chat serves the purpose of a general information exchange. The information which is exchanged via the chat is not legally binding. Any legal statements such as binding contract offers, declarations on termination or cancellation, or the presentation of goodwill claims are neither declared not received via the live chat. If the user has a request which is not suitable for handling over live chat, for example because it is too complex, it will be passed on to the staff of the responsible team.
With electronic data transmission, any corruption of the original content cannot be ruled out. Therefore, Fincallorca does not assume any liability for instances when live chat messages by Fincallorca employees are not displayed or not fully legible due to technical problems on the side of the user. No liability is assumed for erroneously sent information either. All responsibility for statements made by a chat participant is also excluded.
Users are not allowed to use the Fincallorca live chat function for advertising purposes or other irrelevant content. Fincallorca will not answer any live chat messages which violate German criminal and press law, proper morals, good manners, or politeness and reserves the right to temporarily or permanently exclude users from participating in the "Fincallorca live chat" function.
Fincallorca assumes no liability for any damages resulting from the use of the live chat, unless said damages are culpably attributable to Fincallorca.
The chat history is stored in a log file for a maximum of six months and then deleted. If there exist special grounds, such as the suspicion of criminal acts or the utterance of threats, Fincallorca can store the chat history to preserve evidence. Users can store and print the chat history in a file format at the end of the chat.
The service is handled using an encrypted SSL connection which protects it against unauthorised access. The staff who work with the live chat function do so in an environment which is closed off from the public, ensuring discretion and privacy. When using the service, users must take appropriate measures to ensure that their personal data such as a passport/ID card number or their date of birth cannot be read by unauthorised third parties. This is especially relevant if users use the service in a public environment or on end devices which are used by several people.
If any security concerns are detected, such as a virus attack, manipulation by a third party, or hardware and/or software errors, Fincallorca reserves the right to suspend the Fincallorca live chat function.

References: Art. 6
 Art. 9
 Art. 7
 Art. 9
 § 27
 Art. 6
 Art. 6
 Art. 6
 Art. 7