Source: https://www.trains-and-cruises.com/en/data-protection/
Timestamp: 2019-04-22 18:56:53+00:00

Document:
With this privacy notice, in accordance with Art. 13 GDPR (General Data Protection Regulation), Lernidee Erlebnisreisen GmbH ("Lernidee Erlebnisreisen") informs you about how your personal data are handled when you submit a request by email / use of our email contact form on this website, or contact us in any other way in writing or by telephone, and the rights of the parties concerned. We will exclusively collect, process and use your personal data insofar as permitted by the Federal Data Protection Act (BDSG) and the General Data Protection Regulation (GDPR).
The data protection officer can be contacted at the above-mentioned address with the supplement "to the attention of the data protection officer" or via email at team@lernidee.de.
The person/party responsible for the processing (controller) has implemented numerous technical and organisational measures to ensure a consistent protection of the personal data processed on this website. However, Internet based data transmission may be subject to security gaps, so that absolute protection cannot be guaranteed. For this reason, you are free to transmit personal data to us via alternative means, e.g. by telephone.
Personal data are any information relating to you personally and identifiable to you by reference to name, address, email address, user behaviour, etc.
If you merely access our website to acquire information, i.e., if you do not register or transmit any other information to us, we shall only collect the personal data your browser automatically transmits to our server. This information is temporarily stored in a so-called log file.
Other similar data and information, which serve to avert danger in the case of attacks on our information technology systems.
The legal basis of data processing is Art. 6 para. 1 page. 1 lit. f GDPR. Our legitimate interest in collection of data lies in the above-mentioned purposes.
When using this general data and information we shall not draw any conclusions regarding the data subject. This anonymously gathered data and information shall therefore be evaluated on the one hand statistically, and furthermore, to increase data protection and data security in our company, and, ultimately, to ensure an optimum level of protection for the personal data processed by us. The anonymised data of the server log files shall not be stored together with other personal data provided by the person concerned.
If you contact us via email, use our contact form or if you contact us in oral or written form with regard to travel arrangements, we collect the personal data required (surname, first name, address, email address, telephone number (landline and/or mobile), as well as the personal data of any guests traveling with you, date of birth or age of all travellers, where applicable authentication information for visa applications (for example, identification card data), data relevant to handling payment (for example, bank data, credit card data) correspondence (for example, written correspondence or email correspondence with you). This data is gathered and stored to identify you as a client, to reply to your questions or to be able to process your catalogue order or travel booking. Data processing for the purpose of contacting us takes place based on your contact request and is required within the meaning of Art. 6 para. 1 page 1 lit. b GDPR for the purposes mentioned for the adequate handling of your nonbinding request, catalogue order or your booking request, and for the fulfilment of obligations arising from the travel contract.
The personal data submitted by the data subject shall only be collected and stored for internal use by those responsible for the processing and for own purposes. The person responsible for the processing may pass these on to one or several order processors, for instance, a parcel service provider, who shall also only use these personal data for internal use, ascribed to the controller.
On request, the controller shall provide every data subject with information, at any given time, about which personal data relating to the data subject have been stored. Furthermore, the controller shall rectify or delete personal data on request or indication of the data subject, insofar as there are no statutory storage obligations for retention. The data subject may contact all the employees responsible for processing as persons to contact within this context at the email address: team@lernidee.de.
We store your personal data only for as long as it is required for the specified purpose (handling or processing of your request) and for the fulfilment of the contract. We delete these data once its storage is no longer necessary, or restrict the processing in the case of legal storage obligations (Art. 6 para. 1 lit. c GDPR). The criterion for the duration of storage of personal data is determined by the respective legal storage obligation. After expiry of this period, the relevant data shall be routinely deleted insofar as they are no longer needed for the fulfilment or initiation of the contract.
You may revoke the use or processing of your data for the purpose of marketing, advertising or opinion surveys by sending an email to team@lernidee.de.
If we have recourse to contracted service providers for individual functions or wish to use your data for promotional purposes, we shall inform you about the respective procedures below as of item 6. In doing so we shall also specify the storage duration criteria determined.
If there is no legal basis for the processing of your personal data we will seek the consent of the data subject.
you have the right to revoke your declaration of consent (Right of revocation) at any time. The revocation must be submitted by email to team@lernidee.de, or to the address specified in item 1 hereinabove. This means that in future we may not continue any data processing based on this consent.
the right to be informed about the existence of automated decision-making, including profiling, and where applicable, demand meaningful information about their details.
the right to request the immediate rectification of incorrect or completion of personal data stored with us.
the right to request the deletion of personal data stored by us, insofar as the processing is not required to exercise the freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to establish, exercise or defend legal claims.
the right to request the limitation of processing of your personal data insofar as you dispute the accuracy of the data, the processing is unlawful, but you refuse to delete the personal data and we no longer need the data, however you need these for the assertion, exercise or defence of legal claims or if you have objected to the processing pursuant to Art. 21 GDPR.
to lodge a complaint with a supervisory authority regarding the processing of your personal data by us. This is usually the supervisory authority where you are residing or your working place or our company headquarters.
If your personal data is processed based on legitimate interests in accordance with Art. 6 para. 1 page 1 lit. f GDPR, you have the right in accordance with Art. 21 GDPR to object to the processing of your personal data if there are reasons for this which arise from your particular situation. If you would like to make use of your right of objection, please send an email to team@lernidee.de, or contact Lernidee Erlebnisreisen at the address stated in No. 1.
If you object to the processing for direct marketing purposes, you have a general right of objection, which we will implement without specifying a particular situation.
To exercise any of the above-mentioned rights, as well as comments, suggestions or requests for information with regard to data protection, please feel free to contact us at the address stated above or at team@lernidee.de.
Your personal data shall not be transmitted to third parties for purposes other than those listed below.
this is legally permissible and in accordance with Art. 6 para. 1 page 1 b GDPR is required for the processing of contractual relationships with you.
The following data in particular shall be shared, for example your name, your address, credit card data, travel data, identification/passport data – in so far as necessary – to manage, process and complete your booking (based of Art. 6 para. 1 page 1 lit. b basis). Within this context we shall share your personal data with airlines, car rental services, hotels, booking platforms, travel agencies, embassies or immigration authorities.
Lernidee Erlebnisreisen informs its clients and business partners at regular intervals by means of a newsletter about new company offers and gives users the opportunity to subscribe to this newsletter. When you register for our newsletter in the input mask, the personal data (name, address, email address) you enter for registration to the newsletter will be transmitted to the controller and stored. The data subject may only receive our company’s newsletter if (1) the data subject has a valid email address and (2) the data subject registers for the newsletter mailing. A confirmation email will be sent to the email address registered by a data subject for the first time for newsletter shipping, for legal reasons, in the double opt-in procedure. This confirmation email is used to prove whether the owner of the email address as the data subject has authorized the newsletter mailing. Lernidee Erlebnisreisen can arrange for the data to be transmitted to an order processor, for example a lettershop, who shall also only use these personal data for internal use, ascribed to the controller. There will be no transfer of personal data collected to unauthorised third parties. During the registration for the newsletter, we also store the IP address of the computer system assigned by the Internet service provider (ISP) and used by the data subject at the time of the registration, as well as the date and time of the registration. The collection of this data is necessary in order to understand the (possible) misuse of the email address of a data subject at a later date, and it therefore serves the aim of the legal protection of the controller.
The legal basis for the processing of the data after registering to the newsletter by the user is Art. 6 para. 1 page 1 lit. f GDPR. The data shall be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. The user’s email address shall be stored for as long as the newsletter subscription is active.
The subscription to our newsletter may be terminated by the data subject at any time. The consent to the storage of personal data, which the data subject has given for mailing the newsletter, may be revoked at any time. For the purpose of revocation of consent, a corresponding link is found in each newsletter. It is also possible to unsubscribe from the newsletter at any time directly on the website of the controller, or to communicate this to the controller in a different way. You may revoke the use or processing of your data for the purpose of marketing, advertising or opinion surveys and unsubscribe from the newsletter at any time, free of charge, by sending an email to team@lernidee.de.

References: Art. 13
 Art. 6
 Art. 6
 Art. 21
 Art. 6
 Art. 21
 Art. 6
 Art. 6
 Art. 6