Source: https://portugalsurfcamp.com/en/data-protection/
Timestamp: 2019-04-24 18:15:40+00:00

Document:
Action Sports Travel GmbH takes the protection of your personal data very seriously. Therefore, compliance with the applicable data protection regulations and the other legal requirements (e.g. the European General Data Protection Regulation – EU-GDPR, the Federal Data Protection Act – BDSG and the Telemedia Act -TMG) is a matter of course for us.
In the following, we would like to inform you about what personal data we collect and what we use it for. In addition, we explain how we protect the data, whom we share it with, and how you can change your data if necessary.
The legal basis for the data processing is Art. 6 (1) (f) GDPR. Our legitimate interest follows from the data collection purposes listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.
Personal data is information that can be used to discover your identity. This includes information such as your name, address, mailing address, IP address, telephone number or your email address. Personal data may also include images that you submit to us.
Personal data is required to process the offers and services you have selected.
The processing and forwarding of the data is required for the settlement of pre-contractual/contractual relationships according to Art.6 (1) (b) GDPR.
We offer you the opportunity to contact us by email and/or via our website contact form. In this case, the information provided by the user will be stored for the purpose of processing their contact. Transfer to third does not take place. A comparison of the data collected with data which may be collected by other components of our site also does not occur.
Please note that if bookings are made for more than one person, personal data of fellow travellers can also be collected. You should therefore ensure that all information relating to third parties is entered by you only with the consent of such persons.
When reserving or booking a tourism service, we use your personal data in the context of the purpose of the contractual relationship to broker the product and to process the associated services.
In the collection, processing and use of your personal data for advertising or market research purposes, of course, we comply with the statutory provisions (legitimate interest Art.6 (1) (f) GDPR). You may object to such use of your data at any time. Whenever we use your data for advertising, market or opinion-research purposes, we will point out to you that you have the opportunity to object at any time or we will provide a simple way to unsubscribe (e.g. as a link).
We will forward your personal data to the respective contractual partner for the execution and processing of the tourism services provided by us. The legal basis here is Art. 6 91) (f) GDPR.
If we do not carry out our own trips, but instead broker them to other companies, we transmit the data required for the contract execution with these companies.
If travel insurance is taken out as part of the booking, we will send the necessary data to the insurance company.
If you participate in contests, we will pass on your data to the respective contest partners, as far as this is necessary for the redemption of a win.
If you subscribe to a newsletter, we forward personal data to our service provider (Mail-Chimp).
When you use the online services, we pass on your data to our online system service providers (Hetzner Online GmbH), web analytics service providers (google-analytics) and marketing service providers (morefire GmbH), so that we can constantly improve our offers and services for you.
In accordance with the statutory provisions, we will only forward personal data in cases when and to the extent that this is necessary for the processing of your booking or the related payment process.
We only forward personal data to state institutions and authorities if there are compulsory legal requirements in this regard. The transfer of personal data, in particular addresses, to third parties expressly does not take place.
In order to process your personal data as securely as possible, we generally use the SSL (Secure Socket Layer) security software for the transfer of data between your computer and our server, especially when booking a tourism service provided by us.
The widespread SSL (Secure Socket Layer) method combined with the highest encryption level supported by your browser ensures a high degree of data security. In general, this is a 256-bit encryption. If your browser does not support 256-bit encryption, 128-bit v3 technology is used instead. This leads to the fact that the data transmission takes place in each case in encrypted form. Whether a single page of our website is transmitted in encrypted form is indicated by the representation of the closed key or lock symbol in the lower status bar of your browser.
In addition, the website uses appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss or destruction, or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.
The storage of your personal data takes place exclusively in compliance with the legal regulations within the Federal Republic of Germany. Insofar as pseudonymised data is processed and stored in the USA, this is done on the basis of approved contractual regulations (see point 8).
Insofar as we forward data to our service providers within the framework of the services described here, they are bound to contractual requirements with us in addition to the mandatory statutory provisions with regard to data protection.
The use of our website is possible without provision of personal data. Different regulations may apply to the use of individual services on our site, which will be explained separately in this case below. Your personal data (e.g. name, address, email, telephone number, IP address, etc.) is processed by us only in accordance with the provisions of German and EU data protection law.
We offer you the opportunity to register on our site. The data entered in the course of this registration, which can be seen from the input mask of the registration form (name, email address, gender, street, country, zip code, city, telephone, mobile, date of birth, surfskill) is collected and stored exclusively for the use of our offer. When you register on our site, we will also store your IP address and the date and time of your registration. In the event that a third party abuses your data and registers on our site with this data without your knowledge this serves as security on our part. Transfer to third does not take place. A comparison of the data collected with data which may be collected by other components of our site also does not occur.
We offer you the opportunity to register on our site for our newsletter. We provide information about our offers in regular intervals with this newsletter. To receive our newsletter you need a valid email address. We will check the email address you entered to verify that you are the owner of the specified email address or the owner authorises reception of the newsletter. When you register for our newsletter, we will save your IP address and the date and time of your registration. In the event that a third party abuses your email address and registers for our newsletter without your knowledge, this serves as security on our part. Further data will not be collected on our part. The data collected in this way will be used exclusively to obtain our newsletter. Transfer to third does not take place. A comparison of the data collected with data which may be collected by other components of our site also does not occur. You can cancel the subscription to this newsletter at any time. Details can be found in the confirmation email as well as in each individual newsletter.
According to § 7 (3) UWG (GDPR) the email address will be transferred directly into the newsletter list after booking in order to provide information about booking relevant contents or similar products. If this is not desired there is the possibility to deselect this.
The data processed by cookies is required for the purposes mentioned in order to safeguard our legitimate interests as well as those of third parties pursuant to Art. 6 (1) (f) GDPR. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a notice always appears before a new cookie is stored. However, disabling cookies completely may mean that you cannot use all features of our website.
We use Google Analytics, a web analysis service of Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereafter “Google”. Google Analytics uses so-called “cookies”, which are text files that are stored on your computer and that allow an analysis of the use of the website by you.
We use Google Analytics on our website with an IP anonymisation feature. In this case, your IP address will already be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and thereby anonymised.
Google will use this information to evaluate your use of our site, to compile reports on website activity for us, and to provide other services related to website activity and internet usage. Google may also transfer this information to third parties if required by law or as far as third parties process this data on behalf of Google.
According to Google’s own statements, Google does not link your IP address to other Google data. You can prevent the installation of cookies by setting your browser software accordingly; however, we point out that in this case you may not be able to fully use all functions of our website.
On our website, we use the component “Google Maps” of the company Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereinafter “Google”.
Each time Google Maps is called up, Google sets a cookie to process user settings and data when viewing the page that has the Google Maps component integrated. This cookie is usually not deleted by closing the browser, but expires after a certain time, unless it is manually deleted by you.
If you disagree with the processing of your data, you may disable the “Google Maps” service and prevent the transmission of data to Google. To do this, you must disable the Java Script feature in your browser. Please be aware that in this case you will not be able to use “Google Maps” or may only do so to a limited extent.
On our website uses components (videos) of the company YouTube, LLC 901 Cherry Ave., 94066 San Bruno, CA, a company of Google Inc., Amphitheater Parkway, Mountain View, CA 94043, USA.
Here we use the “advanced privacy mode” option provided by YouTube.
According to information provided by YouTube, in the “extended privacy mode” data is only transmitted to the YouTube server, in particular which of our web pages you have visited, when watching the video. If you are logged in to YouTube at the same time, this information will be associated with your Membership Account on YouTube. You can prevent this by logging out of your member account before visiting our website.
Our website uses components of the supplier Vimeo. Vimeo is a service of Vimeo LCC, 555 West 18th Street, NY, New York 10011, USA. Each time you visit our website, which has such a component, this component causes the browser you are using to download a corresponding representation of the component from Vimeo. If you visit our page and you are logged in to Vimeo, Vimeo recognises, through the information collected by the component, which specific page you are visiting and assigns this information to your personal account on Vimeo. For example, if you click on the “Play” button or leave a comment, this information will be transmitted to your personal user account at Vimeo and stored there. In addition, the information that you have visited our site is passed on to Vimeo. This happens regardless of whether you click on the component / leave comments or not.
We provide information about our offers in regular intervals with the newsletter. To receive our newsletter you need a valid email address. We will check the email address you entered to verify that you are the owner of the specified email address or the owner authorises reception of the newsletter. When you register for our newsletter, we will save your IP address and the date and time of your registration. In the event that a third party abuses your email address and registers for our newsletter without your knowledge, this serves as security on our part.
A comparison of the data collected with data which may be collected by other components of our site also does not occur.
Your data stored in the newsletter registration (email address, name if necessary, IP address, date and time of your registration) will be transferred to a server of The Rocket Science Group in the US and stored there under consideration of the “EU -US Privacy Shield”.
Subscribing to this newsletter and consenting to the storage of your data may be terminated or revoked at any time in the future. Details can be found in the confirmation email as well as in each individual newsletter.
Our newsletters contain so-called “web bugs”, which allow us to detect if and when an email was opened and which links in the email were followed by the personalised recipient.
This data is stored by us, so that we can optimally align our newsletter to the wishes and interests of our subscribers. Accordingly, the data thus collected is used to send personalised newsletters to the respective recipient.
By revoking the consent to receive the newsletter, the consent to the aforementioned tracking will also be revoked.
Should you choose to pay with the online payment service provider as part of your order process PayPal, as part of the order so triggered, your contact information will be transmitted to PayPal. PayPal is an offer of PayPal (Europe) S.à.r.l. & Cie. SCA, 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal assumes the role of an online payment service provider as well as a trustee and offers buyer protection services.
The personal data transmitted to PayPal is usually first name, last name, address, telephone number, IP address, email address, or other data required for order processing, as well as data related to the order such as number of articles, article number, invoice amount and tax percentages, billing information, etc.
Please note, however: Personal data may be passed on by PayPal also to service providers, subcontractors or other affiliated companies, as far as this is required to fulfil the contractual obligations of your order or the personal data to be processed in the order.
We also use the Google Advertising Tool “Google Adwords” to promote our website. As part of this, we use the “Conversion Tracking” analytics service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, “Google”, on our website. If you have reached our website via a Google ad, a cookie will be stored on your computer. Cookies are small text files that your Internet browser stores and saves on your computer. These so-called “conversion cookies” lose their validity after 30 days and are not used for your personal identification. If you visit certain pages on our website and the cookie has not expired yet, we and Google may recognise that you, as a user, clicked on one of our Google ads and were redirected to our site.
The information obtained through the “conversion cookies” is used by Google to create visitor statistics for our website. These statistics tell us the total number of users who clicked on our ad, and which pages on our site were subsequently viewed by their respective users. However, we and others who advertise via “Google Adwords” do not receive any information that personally identifies users.
g) In accordance with Art. 77 GDPR, you can complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or our place of business.

References: Art. 6
 Art.6
 Art.6
 Art. 6
 § 7
 Art. 6
 Art. 77