Source: https://impax-tours.com/info/privacy
Timestamp: 2019-04-24 04:02:31+00:00

Document:
Here you find further detailed information about cookies.
This website (hereinafter the "website", "Online Presence") is provided by the controller IMPAX Tours UG IMPAX Tours (haftungsbeschränkt). (hereinafter "us" or "we").
We process the personal data of our users insofar as this is necessary to provide a functioning website as well as our content and services. The processing of personal data of our users takes place regularly only with the consent of the user. An exception applies in those cases in which it is not possible to obtain prior consent for actual reasons and the processing of the data is permitted by legal provisions.
Insofar as we obtain the consent of the data subject for processing personal data, Art. 6 (1 a) GDPR serves as the legal basis.
Art. 6 (1 b) GDPR serves as the legal basis for the processing of personal data necessary for the performance of a contract to which the data subject is a party. This also applies to processing operations that are necessary to implement pre-contractual measures.
Insofar as the processing of personal data is necessary for compliance with a legal obligation to which our enterprise is subject, Art. 6 (1 c) GDPR serves as the legal basis.
If vital interests of the data subject or another natural person necessitate the processing of personal data, Art. 6 (1 d) GDPR serves as the legal basis.
If processing is necessary for safeguarding the legitimate interests of our enterprise or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, Art. 6 (1 f) GDPR serves as the legal basis for processing this data.
- The transfer is necessary and permissible to safeguard our legitimate interests, and it cannot be assumed that you have an overwhelming legitimate interest in not transferring the data [Art. 6 (1 f) GDPR].
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. In addition, the data can be stored if the European or national legislator has provided for this in Union regulations, laws or other provisions to which the data subject is subject. The data will also be blocked or deleted if a storage period prescribed by the mentioned regulations expires, unless it is necessary for the further storage of the data for the conclusion or fulfilment of a contract.
We use a TSL or SSL encryption with the security algorithm SHA-256 bit with RSA encryption to protect your transmitted data. While you can recognize such encrypted connections by the prefix "https://" in the page link in the address line of your browser, unencrypted pages are identified by "http://". The data that you transmit to this website cannot be read by third parties if TSL or SSL encryption is used.
In addition, we make use of suitable technical security measures. In this way we want to protect your data against loss, destruction, manipulation or other unauthorised access.
IV. User is at least 16 years old.
You must be at least 16 years old to use the booking request form, the contact form or the newsletter registration form. If you are under the age of 16, you must obtain prior permission from your parents or legal guardians to complete and submit these forms.
Every time you call up our website, our system automatically collects data and information from the computer system of the calling computer or terminal.
Name and URL of the retrieved file; date and time of access; transferred data volume; notification of successful access (HTTP response code); browser type and browser version; operating system; referrer URL (i.e. the previously visited page); Internet service provider of the user; IP address in shortened form and the requesting provider (no clear assignment possible); information about the number of accesses to our website as well as use of individual functions of our Internet presence.
The legal basis for the temporary storage of data and log files is Art. 6 (1 f) GDPR.
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.
The data is stored in log files to ensure the functionality of the website and user-friendly use. The data is also used to optimise the website and to ensure the security of our information technology systems and their stability. An evaluation of the data for marketing purposes does not take place in this context.
These purposes also include our legitimate interest in data processing pursuant to Art. 6 (1 f) GDPR.
If the data is stored in log files, this is the case after seven days at the latest. A storage going beyond this is possible. In this case the IP addresses of the users are deleted or altered so that an assignment of the requesting client is no longer possible.
The collection of data for the provision of the website and the storage of data in log files is necessary for the functioning of the website. Therefore, there is no possibility for the user to object.
You can subscribe to a free newsletter on our website. When registering for the newsletter, the data from the input mask is transmitted to us, i.e. the e-mail address of the user.
IP address of the calling computer; date and time of registration; confirmation by the user that he has read the data protection declaration and consent to data processing.
No data will be transferred to third parties in connection with data processing for the dispatch of newsletters. The data will be used exclusively for the dispatch of the newsletter.
The legal basis for the processing of the data by the user after registration for the newsletter is Art. 6 (1 a) GDPR if the user has given his consent.
The data will be deleted as soon as they are no longer required for the purpose for which they were collected. The user's e-mail address will therefore be stored as long as the newsletter subscription is active.
The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose, there is a corresponding link in every newsletter. Alternatively, you can also send us an e-mail to privacy@impax-tours.com to this effect.
This will also enable you to withdraw your consent to the storage of personal data collected during the registration process.
The following data is stored and transmitted in the cookies: Token per page view; language settings; screen display resolution.
The legal basis for the processing of personal data using cookies is Art. 6 (1 f) GDPR.
We require cookies for the following applications: ensuring the security of the website; adopting language settings; displaying the website in the correct format.
Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that all functions of the website can no longer be used to their full extent.
The analysis cookies are used for the purpose of improving the quality of our website and its content. The analysis cookies tell us how the website is used and enable us to constantly optimise our services. In this way, we want to ensure that our online presence is designed to meet the needs of our users. Advertising cookies are used for the purpose of displaying interest-related advertising on other websites to the users of our website. The respective processing purposes and categories of the data are described in more detail in the explanations of this data protection declaration for the different analysis services (Sections VIII. a-c).
Our legitimate interest in the processing of personal data pursuant to Art. 6 (1 f) GDPR also lies in these purposes.
The user data collected in this way are pseudonymised by technical means. It is therefore no longer possible to relate the data to the calling user. The data are not stored together with other personal data of the user.
This website uses the service "Google Analytics", which is offered by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA, https://www.google.de/intl/en/about/ ), for the analysis of website usage by users of our website. The service uses "cookies" - text files that are stored on your device. The information collected by the cookies is usually sent to a Google server in the USA and stored there. This data might be transferred to third parties if this is legally necessary or if this data is processed on behalf of third parties. With Google's "EU-US Privacy Shield" certification, Google has committed itself to comply with the standards and regulations of European data protection law. Further information can be found at: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI .
IP anonymisation is used on this website. The IP address of the users is shortened within the member states of the EU and the European Economic Area. This shortening eliminates the personal reference of your IP address. Only in special cases is the IP address shortened after transmission to a Google server in the USA. As part of the agreement on commissioned data processing, which the website operator has concluded with Google Inc., Google uses the information collected to create an evaluation of website usage and analysis of website activity, as well as to provide services associated with Internet usage to ensure a user-friendly and demand-oriented design of the online presence. These purposes also include our legitimate interest in processing the data pursuant to Art. 6 (1 f) GDPR. The following data is collected in this context: Technical information about the user's client device (browser, device terminal, Internet provider, display resolution, language settings); time of access; entered search terms; use of website functions; used operating system; information on how the user came to our website; IP address in shortened form. Your IP address will not be combined with any other data held by Google. You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR.
You have the option of preventing cookies from being stored on your device by selecting the appropriate settings in your browser. It is not guaranteed that you can access all functions of this website without restrictions if your browser does not permit cookies.
You can also use a browser plug-in to prevent the information collected by cookies (including your IP address) from being sent to Google Inc. and used by Google Inc. The following link leads you to the corresponding plugin: https://tools.google.com/dlpage/gaoptout?hl=en .
. An opt-out cookie may be used instead of the browser plug-in or for browsers on mobile devices in order not to be tracked by Google Analytics within this website in the future. This applies only to this browser and only to this domain, as long as the opt-out cookie has not been deleted.
This website uses the service "Google AdWords" and the "Google Conversion Tracking" ("visit action evaluation"), which is provided by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) for the purpose of analyzing website usage by users. With Google's "EU-US Privacy Shield" certification, Google has committed itself to complying with the standards and regulations of European data protection law. For more information, please visit: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI . If you access this website via a Google ad, Google AdWords places a cookie on your computer or terminal device. These cookies are not personally identifiable and are valid for a limited period of time (30 days). If the cookie is valid and you visit certain pages on our site, both Google and we can verify that you clicked on an ad and were directed to this page. Each Google AdWords customer receives a different cookie. These cookies cannot be tracked through AdWords customer websites. AdWords Conversion Tracking customers (like us) receive conversion statistics. The information from these statistics is collected via the conversion cookies. In this way, we receive the total number of users who clicked on one of our ads and were directed to a page with a conversion tracking tag. We cannot personally identify users based on the information provided to us. This enables us to analyse and optimise our advertising measures in terms of their efficiency and to advertise in a targeted manner. These purposes also include our legitimate interest in processing the data in accordance with Art. 6 (1 f) GDPR. You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR.
This website uses the service "Google AdWords Remarketing", which is provided by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) to present interest-based advertisements on third-party websites or in Google search results. Google sets cookies in the browser of your terminal device to ensure the relevance of the advertisement to your interests. For this purpose, the cookies record the visit to the website as well as anonymous data about the website visitor's use of the website.
If you later visit websites of the Google advertising network, advertisements can be placed that refer to the content of previously visited websites. This processing is based on our legitimate interest pursuant to Art. 6 (1) sentence 1 lit. f GDPR in the placement of interest-related advertisements for visitors of our website on the website of the Google advertising network. In this way, we want to analyse and optimise the marketing of our online presence. You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR.
The following data will also be stored at the time the message is sent: The IP address of the user; date and time.
Alternatively, you can contact us via the given e-mail address. In this case, the personal data of the user transmitted with the e-mail will be stored.
In this context, the personal data will not be passed on to third parties. The data will be used exclusively for the processing of the conversation.
The legal basis for the processing of the data is Art. 6 (1 f) GDPR if the user has given his consent.
The legal basis for processing the data transmitted as part of an e-mail is Art. 6 (1 f) GDPR. If the purpose of the e-mail contact is to conclude a contract, the additional legal basis for the processing is Art. 6 (1 b) GDPR. The processing of personal data from the input mask serves us only to process the contact. In the case of contact by e-mail, this also implies the necessary legitimate interest in the processing of the data.
The data are deleted as soon as they are no longer required for the purpose of their collection. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user is finished. The conversation is finished when it can be seen from the circumstances that the matter in question has been completely clarified.
The user has the possibility to withdraw his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.
The withdrawal of the consent and the objection of the storage take place via a corresponding message. Please send an e-mail to privacy@impax-tours.com or write to the contact data mentioned under I.
In this case, all personal data stored during the contact will be deleted.
At the time the message is sent, the following data will also be stored: the user's IP address; date and time.
The data will only be used to process your booking request. The travel data (accommodation, room category, arrival and departure dates, number of guests, choice of further services and their number per guest) must be forwarded to the travel operator in order to check the availability of corresponding travel requests and to prepare a corresponding offer. These data will be communicated to the travel operator anonymously.
The legal basis for processing the data is Art. 6 (1 a) GDPR if the user has given his consent. The sending of a booking request via the booking request form generally aims at the conclusion of a contract, so that Art. 6 (1 b) GDPR is basically an additional legal basis for the processing.
The processing of personal data from the input mask serves us only to process the booking request. In the case of a booking request by e-mail, this also constitutes the necessary legitimate interest in the processing of the data. Only the travel data (accommodation, room category, arrival and departure dates, number of guests, choice of further services and their number per guest) will be forwarded to the tour operator. In this way, a travel request can be checked for availability and, if necessary, a corresponding offer can be made.
The data are deleted as soon as they are no longer required for the purpose of their collection. For the personal data from the input mask of the booking request form (and those sent by e-mail), this is the case when the conversation with the user about a booking request finish. The conversation is finished when it can be seen under the circumstances that the relevant issue, i.e. the booking request, has been conclusively clarified.
The user can withdraw his consent to the processing of personal data at any time. The user can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.
The withdrawal of the consent and the objection of the storage occur via a corresponding message. You can send an e-mail to privacy@impax-tours.com or write to the contact details mentioned under I. In this case, all personal data stored during contact will be deleted.
You have the right to obtain from the controller confirmation as to whether personal data concerning you are being processed by us.
You have the right to request information as to whether the personal data concerning you will be transferred to a third country or to an international organisation. In this context, you have the right to request to be informed of the appropriate guarantees pursuant to Art. 46 GDPR in connection with the transfer. The data subject has the right to be informed of the appropriate safeguards pursuant to Article 46 relating to the transfer.
4) you have objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.
Where the processing of personal data concerning you has been restricted, such data may not be processed, with the exception of their storage, without your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If the processing has been restricted in accordance with the above conditions, you are informed by the controller before the restriction of processing is lifted.
6) the personal data concerning you have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.
Where the controller has made the personal data concerning you public and is obliged pursuant to Art. 17 (1) GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, has to take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
5) for the establishment, exercise or defence of legal claims.
If you have exercised your right to rectify, erase or restrict the processing of your personal data against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been made available of this rectification, erasure or restriction, unless this appears impossible or involves a disproportionate effort.
In exercising this right, you have the right to have the personal data transmitted directly from one controller to another, where technically feasible. Freedoms and rights of others must not be affected adversely by this right.
The controller no longer processes the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
Where you object to processing for direct marketing purposes, the personal data are no longer be processed for such purposes.
You have the right to withdraw your data protection consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
These decisions must not be based on special categories of personal data referred to in Article 9(1) GDPR, unless point (a) or (g) of Article 9(2) GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.
In the cases referred to in sectors (1) and (3), the data controller implements suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express the own point of view and to contest the decision.
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant.
The data protection officer of the controller is Andre Baumunk, Tel.: +49 241 41 250 221 and can be contacted at the address given under I. or via privcacy@impax-tours.com.

References: Art. 6

Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 46
 Art. 17