Data protection information in accordance with Art. 13 and 14 of the EU Data Protection Regulation (EU GDPR)

Thank you for visiting our website. With this data protection declaration, we inform you about the processing of your personal data by us and about the rights to which you are entitled when booking a travel service from our tour operator brands.

The privacy policy for business partners and customers of DER Deutsches Reisebüro GmbH & Co. OHG or the respective affiliated company* can be found at here.

(as at: January 2026)

1. WHO IS RESPONSIBLE FOR DATA PROCESSING AND WHO CAN YOU CONTACT?

The controller responsible for data processing is DER Deutsches Reisebüro GmbH & Co. OHG, Emil-von-Behring-Str. 6, 60439 Frankfurt or the respective affiliated company*. If you have any questions about data protection, please contact the following e-mail address: datenschutz@dertour.com.

2. WHICH DATA AND WHICH SOURCES DO WE USE?

We process data that we receive as part of our contractual relationship with you or on the basis of your consent. We receive the data directly from you, e.g. as part of the travel booking or other order placement, e.g. via a travel agent, advertising co-operation partner.

If you provide us with the personal data of other persons (e.g. fellow travellers) as a travel applicant, you must ensure that they agree to this and that you are permitted to transmit the data. You must ensure that these persons know how their personal data can be processed by us and what rights they have.

Where necessary, we process the following categories of data:

  • Identification/authentication data (e.g. surname, first name of all travellers, transaction number, user name, passwords, passport data)
  • Demographic data (e.g. age, date of birth of all travellers)
  • Physical characteristics (e.g. salutation, gender of all travellers)
  • Communication data (e.g. address, e-mail address, telephone number, correspondence, e-mail correspondence)
  • Account details (e.g. IBAN number, credit card number)
  • Travel data (e.g. booked products, travel history)
  • special personal data pursuant to Art. 9 para. 1 GDPR (e.g. mobility aids, meal requests)
  • Advertising and sales data (e.g. history of our advertising offers)
  • Preferences (e.g. your preferences, your ratings with regard to your trips, if arranged through us/carried out by us)
  • Behaviour (e.g. behaviour on our websites/app, location)
  • Family relationship (e.g. children travelling with you)
  • Data in the context of complaints and crisis cases

3. ON WHAT LEGAL BASIS AND FOR WHAT PURPOSE IS YOUR DATA USED?

3.1 FOR THE PERFORMANCE OF PRE-CONTRACTUAL MEASURES TAKEN AT YOUR REQUEST OR FOR THE FULFILMENT OF CONTRACTUAL OBLIGATIONS WITH YOU (ART. 6 PARA. 1 LIT. B EU GDPR

We process your data to prepare offers and execute our contracts with you, i.e. in particular to organise, arrange and execute the booked travel services, including complaints and crisis management (agency/travel contract) by us or by authorised third parties. Further purposes are

  • To support our sales organisation with travel support
  • For the provision of customer portals/apps (licence agreement)
  • For the provision of contact options to us (e.g. contact form, appointment arrangements for counselling) (agency/travel contract)
  • To participate in competitions, contests or similar promotions (competition contract):
  • From time to time we offer you the opportunity to take part in competitions or contests and similar promotions.
  • Personal data such as title, first name, surname, address, email address and any other data required for the promotion may be processed in order to process these promotions. All personal data provided in the context of such a campaign will be used exclusively for the processing of the campaign, e.g. for determining and notifying the winner or sending the prize. The data will be deleted after the end of the promotion if overriding retention periods have expired. The legal basis for the processing of the campaign is Art. 6 para. 1 lit. b GDPR (competition contract).

3.2 ON THE BASIS OF LEGAL REQUIREMENTS (ART. 6 PARA. 1 LIT. C EU GDPR)

We are subject to various legal obligations and statutory requirements (e.g. German Civil Code (BGB), EU travel law, German Commercial Code (HGB), GoB, Passenger Name Record Act, tax laws of the Federal Republic of Germany). Your data may be processed by us or authorised third parties for the purposes of identity and age verification, the prevention of criminal offences (e.g. fraud), the fulfilment of tax law/official control and reporting obligations, the assessment and management of risks as well as financial and tax law retention.

3.3 DATA PROCESSING FOR THE PROTECTION OF VITAL INTERESTS (ART. 6 PARA. 1 LIT. D EU GDPR)

In order to protect the vital interests of you or another natural person, e.g. to be able to provide emergency services with an evacuation list in emergency situations, your data may be processed by us or authorised third parties.

3.4 FOR THE PROTECTION OF LEGITIMATE INTERESTS (ART. 6 PARA. 1 LIT. F EU GDPR)

Your data may be processed by us or by authorised third parties as part of a balancing of interests to protect legitimate interests. This is done for the following purposes:

  • Function, availability and security of business operations (e.g. IT, other services)
  • Further development of services/travel services and additional products (e.g. quality management)
  • Advertising, market and opinion research, new customer acquisition
  • Assertion, exercise or defence of legal claims
  • Prevention and investigation of criminal offences (e.g. fraud)
  • Processing of enquiries and provision of necessary information (e.g. contact form)

Our interest in the respective processing results from the respective purposes (profit generation, avoidance of legal risks, assertion, exercise or defence of legal claims, provision and security of our business operations, efficient task fulfilment, process optimisation).

As far as the specific purpose allows, we process your data pseudonymised.

3.4.1 DATA PROCESSING FOR DIRECT MARKETING (ART. 6 PARA. 1 LIT. F EU GDPR IN CONJUNCTION WITH SECTION 7 PARA. 3 UWG)

We process your data for the purpose of direct advertising, in particular for sending emails customised to your trips with information and offers relating to your trips. The data processing is carried out on the basis of Art. 6 para. 1 lit. f EU GDPR in conjunction with. § Section 7 (3) UWG and in the interest of informing you about new products and services. Each customer has their own right to object to this processing in accordance with Art. 21 EU GDPR, the exercise of which leads to the termination of processing for the purpose of direct advertising. Your data will be blocked for advertising purposes. Your data will be deleted when priority retention periods have expired.

You can unsubscribe from existing customer mailings at any time with effect for the future. You can do this by contacting us directly via datenschutz@dertour.com or, if applicable, via a link for existing customer e-mailings, without incurring any costs other than the transmission costs according to the basic tariffs.

3.5 ON THE BASIS OF YOUR CONSENT (ART. 6 PARA. 1 LIT. A EU GDPR)

If you have given us your consent to process your personal data, this consent is the legal basis for the processing mentioned there. In particular, you may have consented to being contacted for advertising purposes by email, post, telephone or messenger service. You can revoke your consent at any time with effect for the future. To do so, please contact us at our contact address. The cancellation only applies to future processing, not to processing that has already taken place.

Separate consents can be granted for the following services:

NEWSLETTER DISPATCH

You have the option of registering for our free newsletter on some of our websites. The newsletter contains current offers on travel services, attractive specials and competitions. If you subscribe to the newsletter, we will process the data listed below. We only process this data to the extent that it is actually collected by us.

  • Data that you provide to us when subscribing to the newsletter (e-mail address, title, first name, surname, date of birth if applicable, content preferences)
  • Data to prove your consent to receive the newsletter (IP address, time stamp of consent)
  • Data on the use of the newsletter (openings, clicks on links contained therein, accessibility of the e-mail address, data of the end device used)
  • Data that is collected when you use our website (e.g. IDs, pages viewed, booking of a service, shopping basket abandonment); this information is used temporarily to personalise the newsletter content to your profile and then deleted.
  • We work with the so-called double opt-in registration procedure. To ensure that the newsletter registration was actually made by the owner of the e-mail address, an e-mail is sent to the registered e-mail address. Only when the registration is confirmed by clicking on the link contained in the e-mail will you receive the newsletter in your e-mail inbox in future.

We work together with empaction GmbH, Marktstraße 33-35, 60388 Frankfurt am Main, Germany, to send newsletters. For these purposes, empaction stores your e-mail address and the date of registration. A corresponding order processing contract has been concluded.

You can unsubscribe from the newsletter at any time with effect for the future. You can do this by contacting us directly and using the „Unsubscribe from newsletter“ link contained in every newsletter or, if applicable, via a link in the email for existing customer emails, without incurring any costs other than the transmission costs according to the basic rates. Your data will be blocked for advertising purposes. Your data will be deleted when priority retention periods have expired.

4. WHO GETS MY DATA?

Your personal data will only be passed on in compliance with the provisions of the EU GDPR and only insofar as a legal basis permits this. Your data will only be received by those bodies that need it to fulfil our contractual and legal obligations or to fulfil their respective tasks, e.g.

  • Internal departments responsible for organising the event, arranging and carrying out the trip/processing your enquiry
  • Printing and dispatch service providers (e.g. printing and dispatch of invoices/travel confirmation/travel documents)
  • Destination agency (e.g. tour guide, hotel reservation, transfer and possibly excursion services)
  • Transport service provider (airline, rail if applicable)
  • Accommodation operator (hotel management)
  • Insurer
  • Service provider of other booked services
  • Partner for the realisation of advertising, market and opinion research, new customer acquisition
  • Public authorities (tax authorities, embassies of the destination country) if there is a legal or official obligation (e.g. retention obligations, VISA procurement, obtaining entry requirements)
  • other bodies for which you have given us your consent to data processing

5. HOW LONG WILL MY PERSONAL DATA BE STORED?

Where necessary, we process your personal data for the duration of our business relationship, which also includes the initiation and fulfilment of a contract. In addition, we are subject to various retention and documentation obligations arising from the German Civil Code (BGB) and EU travel law, the German Commercial Code (HGB) and the German Fiscal Code (AO), among others.

STORAGE FOR 3 YEARS ACC. §§ 195 FF. BGB

  • starting from the following year after the claim has arisen and the creditor becomes aware of the circumstances giving rise to the claim and the person of the debtor or should have become aware of them without gross negligence for the assertion, exercise or defence of legal claims in accordance with Section 199 (1) of the German Civil Code (BGB)

STORAGE FOR 6 YEARS

  • begins at the end of the calendar year in which the last entry was made in the trading book, the inventory was prepared, the opening balance sheet or the annual financial statements were adopted, the individual financial statements pursuant to Section 325 (2a) or the consolidated financial statements were prepared, the commercial letter was received or sent or the accounting voucher was created in accordance with the statutory retention periods under Section 257 (5) HGB for commercial letters and begins at the end of the calendar year in which the last entry was made in the trading book, the inventory, the opening balance sheet, the annual financial statements or the management report were prepared, the commercial or management report was prepared or the annual financial statements were adopted. 5 HGB for commercial letters and begins at the end of the calendar year in which the last entry was made in the book, the inventory, the opening balance sheet, the annual financial statements or the management report was prepared, the commercial or business letter was received or sent or the accounting voucher was created, the record was made or the other documents were created in accordance with Section 147 (4) AO for commercial and business letters, other documents, insofar as they are relevant for taxation purposes

STORAGE FOR 10 YEARS

  • begins at the end of the calendar year in which the last entry was made in the trading book, the inventory was prepared, the opening balance sheet or the annual financial statements were adopted, the individual financial statements pursuant to Section 325 (2a) or the consolidated financial statements were prepared, the commercial letter was received or sent or the accounting document was created in accordance with the statutory retention periods from Section 257 (5) HGB for trading books, inventories, opening balance sheets, annual financial statements, individual financial statements pursuant to Section 325 (2a), management reports, consolidated financial statements, group management reports and the working instructions required to understand them. 5 HGB for trading books, inventories, opening balance sheets, annual financial statements, individual financial statements in accordance with Section 325 (2a), management reports, consolidated financial statements, group management reports and the work instructions and other organisational documents required to understand them, supporting documents for entries in books to be kept in accordance with Section 238 (1) HGB (accounting records). 1 (accounting vouchers) and begins at the end of the calendar year in which the last entry was made in the book, the inventory, the opening balance sheet, the annual financial statements or the management report was prepared, the commercial or business letter was received or sent or the accounting voucher was created, the record was made or the other documents were created in accordance with Section 147 para. 4 AO for books and records, inventories, annual financial statements, management reports, the opening balance sheet and the work instructions and other organisational documents necessary for their understanding, accounting vouchers, documents pursuant to Article 15 (1) and Article 163 of the Union Customs Code
  • in the case of other claims for damages pursuant to Section 199 (3) BGB after ten years from the time they arise

STORAGE FOR 30 YEARS

  • in the case of claims for damages based on injury to life, limb, health or freedom 30 years from the commission of the act, the breach of duty or the other event causing the damage (e.g. judgements, default summonses, court files, notarial deeds)

Processing for advertising purposes can be objected to free of charge at any time upon informal request in accordance with Art. 21 EU GDPR; in this case, the data will be blocked for advertising purposes. Your data will be deleted when priority retention periods have expired.

Your personal data will be deleted on the basis of your consent as soon as the purpose has been fulfilled or until revocation and when priority retention periods have expired.

6. WILL MY DATA BE TRANSFERRED TO A THIRD COUNTRY?

We only transfer your data to recipients outside the scope of the EU GDPR and if there is neither an adequacy decision pursuant to Article 45(3) nor suitable guarantees pursuant to Article 46, including binding internal data protection regulations, insofar as the transfer is necessary:

  • for the conclusion or fulfilment of the contract with you or for the implementation of pre-contractual measures at your request
  • for the fulfilment of a contract concluded in your interest by the controller with another natural or legal person
  • for the assertion, exercise or defence of legal claims
  • to protect the vital interests of the data subject or other persons, if the data subject is physically or legally unable to give consent
  • You have given us your consent

These data processing operations are permissible derogations from Art. 49 EU GDPR.

If a data transfer outside the scope of the EU GDPR is necessary due to our predominantly legitimate interest or if you have given us your consent, this is secured, among other things, by EU standard contractual clauses in accordance with Art. 46 para. 2 lit. c EU GDPR. If necessary, the EU standard contractual clauses are supplemented by further contractual assurances. You can obtain information on this via the contact details provided.

7. DO I HAVE CERTAIN RIGHTS WHEN HANDLING MY DATA?

You have the right to information (Art. 15 EU GDPR, Section 34 BDSG), to rectification (Art. 16 EU GDPR), to erasure (Art. 17 EU GDPR, Section 35 BDSG), to restriction of processing (Art. 18 EU GDPR) and to data portability (Art. 20 EU GDPR) under the respective legal requirements.

You also have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) of the GDPR pursuant to Article 21 of the GDPR. This also applies to profiling based on this provision within the meaning of Art. 4 No. 4 EU GDPR. If a justified objection is made, we will no longer process this personal data for these purposes. An objection can be made informally to our contact address. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 EU GDPR, Section 19 BDSG).

You can find a current list of the responsible supervisory authorities at www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

8. AM I OBLIGED TO PROVIDE MY DATA?

As part of our business relationship, you only need to provide the personal data that is required for the establishment, execution and termination of a business relationship or that we are legally obliged to collect. Without this data, we will generally have to refuse to conclude the contract or execute the order or will no longer be able to fulfil an existing contract and may have to terminate it.

9. IS THERE AUTOMATED DECISION MAKING IN INDIVIDUAL CASES?

In principle, we do not use automated decision-making in accordance with Art. 22 EU GDPR to establish and conduct the business relationship. If we use these procedures in individual cases, you will be informed separately if this is required by law.

10. USAGE DATA/LOGFILES

We use and store information that we receive during your visit to our website for security purposes and to improve the functionality of the website.

This data set consists of:

  • the page from which the file was requested
  • the name of the file
  • the date and time of the query
  • the amount of data transferred
  • the access status
  • the description of the type of web browser used
  • the IP address of the requesting computer (see above anonymised according to the period specified below).

We use this information to enable you to access our website, to control and administer our systems and to improve the design and function of the website.

We only store the IP address transmitted by your web browser, including the above-mentioned data record, for a period of time in order to be able to recognise, limit and eliminate faults or errors (e.g. attacks on our servers). Storage ends after one month at the latest. After this period, we delete or anonymise the IP address.

This is done on the basis of our predominantly legitimate interest in the security and functionality of our website § 25 para. 2 no. 2 TTDSG in conjunction with. Art. 6 para. 1 lit. f GDPR.

11. CONTACT DETAILS OF THE DATA PROTECTION OFFICER

If you have any questions about data protection, please contact:

DER Deutsches Reisebüro GmbH & Co OHG or the respective affiliated company*
Data Protection Officer
Emil-von-Behring-Strasse 6
60424 Frankfurt am Main

E-Mail: datenschutz@dertour.com

* DER Reisebüro Göbel GmbH, Roßmarkt 4, 97421 Schweinfurt; DER Reisebüro OTTO GmbH, Ludwigstraße 79, 95028 Hof; DER Reisecenter TUI GmbH, Enderstraße 59, Seidnitz-Center Haus-D, 01277 Dresden; GO!Reisen GmbH, Konsul-Smidt-Str. 8s, 28217 Bremen; Reisebüro Rominger Bodenseereisebüro GmbH, Alte Poststraße 8, 70173 Stuttgart; Reisebüro ROMINGER SÜDLAND GmbH, Karpfengasse 11, 88400 Biberach an der Riß; Württ. Reisebüro Otto Schmid GmbH & Co. KG, Glöcklerstraße 1-3, 89073 Ulm; Reisebüro Rade GmbH, Hauptstrasse 46 77652 Offenburg

12. USAGE DATA / LOGFILES

We use information that we receive and store during your visit to our website for security purposes and to improve the functionality of the website.

This data set consists of:

  • the page from which the file was requested
  • the name of the file
  • the date and time of the query
  • the amount of data transferred
  • the access status
  • the description of the type of web browser used
  • the IP address of the requesting computer (see above anonymised according to the period specified below).

We use this information to enable you to access our website, to control and administer our systems and to improve the design and function of the website.

We only store the IP address transmitted by your web browser, including the above-mentioned data record, for a period of time in order to be able to recognise, limit and eliminate faults or errors (e.g. attacks on our servers). Storage ends after one month at the latest. After this period, we delete or anonymise the IP address.

This is done on the basis of our predominantly legitimate interest in the security and functionality of our website § 25 para. 2 no. 2 TTDSG in conjunction with. Art. 6 para. 1 lit. f GDPR.

CONSENT MANAGEMENT SYSTEM

USE OF CONSENT MANAGEMENT SYSTEM TO MANAGE AND DOCUMENT CONSENT AND SETTINGS FOR DATA COLLECTION AND COOKIES

As a user, you can decide for yourself on the use of cookie-based services/technologies and the data collection by these on our portal and adjust or revoke them at any time with effect for the future. This is possible via an information and consent banner, which is displayed on first visits and when changing services, as well as via the cookie settings, which can be accessed at any time via a link at the bottom of each page. As part of a GDPR-compliant approach, we only use services requiring consent after you have given your prior consent. You can also use our website without this consent.

We use a so-called Consent Management System from Usercentrics, GmbH, Rosental 4, 80331 Munich, Germany, to provide this setting and consent function within the meaning of the GDPR and to inform you about the use of cookie-based technologies. In addition, this system is used to document your decisions for your browser, which enables us to fulfil the data protection requirements of the documentation and verification obligation.

Usercentrics uses cookies and records the date and time of the visit, browser and device information, the anonymised IP address and opt-in and opt-out data exclusively to store your consent and to comply with legal obligations on the legal basis of Section 25 (2) No. 2 TTDSG in conjunction with Art. 6 (1) (c) GDPR. GDPR Art. 6 (1) (c). The data processing takes place within the European Union.

Further information on the data protection provisions of the data processor can be found at https://usercentrics.com/de/datenschutzerklaerung/

As a user, you have other, alternative ways such as browser extensions, settings, adblockers or opt-out links of individual tools to prevent the setting of cookies or data collection by services. We would like to point out that these methods are not equivalent to the use of a consent / consent management system.
Browser extensions, settings and adblockers can prevent cookies and, where applicable, data collection by services. However, you cannot always decide for yourself what you want to allow or prevent. It is possible that your decisions made via the consent management system may be overridden or even prevent the necessary use of the consent management system. In addition, extensions and adblockers can cause unexpected problems with the basic functions of the portal.
Many marketing services provide their own opt-out options via opt-out links or cookies. We list these in the privacy policy, if available. The opt-out often applies to the basic portal-independent use of the service, but only takes place subsequently and on a page of the provider, independent of the consent management of our portal. Opt-out cookies are often set, which in turn can be cancelled by the cookie settings of your browser or by deleting cookies.
If you use the alternative methods mentioned, it is not possible for us to document your settings and decisions.

WEBSITE ANALYSIS AND TRACKING

USE OF COOKIES

When you visit our website, information may be stored on your computer in the form of cookies, for example to recognise visitor preferences and optimise the design of the website accordingly. This helps us, for example, to make navigation easier and to achieve a high level of user-friendliness.
Cookies are text files that are stored on the user's hard drive when they visit a website. They are harmless to your computer and cannot be viewed by third parties. They make it possible to store information for a certain period of time and to identify the user's computer.
If you accept our cookies, they will remain on your computer for a period of 30 days unless you delete them beforehand. During an online booking, cookies are temporarily stored for the duration of the booking. These are automatically deleted after 30 minutes of inactivity or after closing the website.
You can object to the collection and storage of your data via this service at any time. If you wish to avoid the activation of cookies, deactivate them in your browser. Please note, however, that disabling cookies may restrict the use of the website and the services offered.

GOOGLE ANALYTICS

Subject to your consent, this website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "Google"). Google Analytics uses cookies, which are stored on your computer and enable your use of this website to be analysed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

We would like to point out that on this website Google Analytics has been extended by the code "gat._anonymizeIp();" in order to ensure anonymised collection of IP addresses (so-called IP masking). If IP anonymisation is activated on our websites, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand.

Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information to analyse your use of our website, to compile reports on website activity for us and to provide us with other services relating to website activity and internet usage.

The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. A transfer of this data by Google to third parties only takes place on the basis of legal regulations or in the context of order data processing. Under no circumstances will Google combine your data with other data collected by Google.

We only use this cookie-based service on our portal with your prior consent, on the legal basis of Section 25 (2) no. 2 TTDSG in conjunction with Art. 6 (1) sentence 1 lit. a GDPR (consent for the data processing based on this). Art. 6 para. 1 sentence 1 lit. a) GDPR (consent for the data processing based on this). You can give this consent in our Consent Management System either on your first visit to the portal via the consent banner or at any time in the cookie settings, which can be accessed via a link at the bottom of every page of the portal, and adjust or revoke it with effect for the future. Your choice is documented for your browser, which means that we fulfil the data protection requirements of the documentation obligation.

You can also prevent the collection and processing by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. Please note that when using this option, it is not possible to document your decision and your settings may conflict with your decisions in the Consent Management System.

Further information on terms of use and data protection can be found at http://www.google.com/analytics/terms/de.html or under https://www.google.de/intl/de/policies/.

ADOBE ANALYTICS

We use the web analytics tool Adobe Analytics to measure the reach, usage and performance data of our website in order to improve the design, functionality and offering of our website. Anonymous information is collected about the content accessed, the type of browser and device used as well as product searches, calls and bookings in order to understand product demand and recognise attempted fraud and artificial traffic from bots or crawlers. We also record technical performance data and functional errors.

Cookies (text files) are also used, which are stored on your computer. The information collected is transferred to an Adobe server in Ireland and stored there in strict compliance with EU directives. Under no circumstances can conclusions be drawn about specific natural persons. We also ensure that the IP address is anonymised before geolocalisation. For this purpose, IP anonymisation is carried out by default in the server settings. Once geolocalisation has been recorded, the IP address is rendered unrecognisable by (x.x.x.x.) and is no longer available. The IP address is not used in any other way or passed on to third parties.

Data protection information on Adobe Analytics can be found here: https://marketing.adobe.com/resources/help/en_US/whitepapers/cookies/cookies_privacy.html or under http://www.adobe.com/de/privacy.html

Adobe Analytics is used on the legal basis of Section 25 para. 2 no. 2 TTDSG in conjunction with Art. 6 para. 1 lit. f GDPR. Art. 6 para. 1 lit. f GDPR due to the overriding legitimate interest in preventing fraud, monitoring errors in website functions and evaluating the reach of the portal. You can object to the use of cookies at any time with effect for the future via the cookie settings or the consent management system, which can be accessed via a link at the bottom of every page of the portal. Your choice is documented for your browser, which means that we fulfil the data protection requirements of the documentation obligation.

Another way to object to web analysis by Adobe Analytics is to set an opt-out cookie. This informs Adobe that your data may not be stored or used for web analysis purposes. Please note that with this solution, the web analysis will only not take place as long as the opt-out cookie is stored by the browser. If the cookie is no longer stored by the browser, your objection will expire. There is also no documentation of your decision and the opt-out cookie may contradict your decision in the consent management system.

If you would like to set the opt-out cookie now, please click here: https://metrics.der.com/optout.html?locale=en_US&popup=true

If you give us your consent in each case via the cookie setting, we can merge the data collected via Adobe Analytics on this portal with that of the other tour operator websites of DERTOUR Deutschland GmbH (cross-domain analysis), use it to create user segments and interest profiles in Adobe Audience Manager or use it to display content and offers on the website and in the newsletter (see also section Newsletter dispatch) that match your interests. The purpose of this is to optimise your visitor experience and to show you even more relevant offers.

ADOBE LAUNCH TAG MANAGEMENT SYSTEM

We use a tag management system from Adobe to control the use of analysis and online marketing software on our website and to improve the technical performance of our website. The tag management system uses definable rules to control which and in what form the software components (tags) used on the website, as explained in this privacy policy, are used. In this way, we ensure that only the specified tags are used and that they only collect data to the extent explained here.

The tag management system is used to forward data to the aforementioned tags and in the form explained. Cookies may also be used. However, the data is not stored in the tag management system.

The Adobe Launch Tag Management System is used on the legal basis of GDPR Art. 6 para. 1 lit. b and c and can therefore not be deactivated via our Consent Management System.

However, you have the option of using the Consent Management System to object to the collection of data via the tools provided by the Tag Management System.

Further data protection information on the Adobe Launch Tag Management System can be found here: https://www.adobe.com/de/privacy/experience-cloud.html

PERFORMANCE MEASUREMENT AND OPTIMISATION OF MARKETING MEASURES

The technologies listed below are used for the purpose of analysing and optimising the performance of marketing channels and campaigns. Their use on our portal is based on the legal basis of Section 25 (1) TTDSG (consent to the setting or reading of cookies) in conjunction with Art. 6 para. 1 sentence 1 lit. a) GDPR (consent for the data processing based on this) only after your prior consent. You can give this consent either during your first visit to the portal via the consent banner or at any time in the cookie settings, which can be accessed via a link at the bottom of each page of the portal, and adjust or revoke it with effect for the future. Your choice is documented for your browser, which means that we fulfil the data protection requirements of the documentation obligation. This cannot be documented for other forms of opt-out or the prevention of cookies, which are listed below.

MICROSOFT BING ADS

This website uses conversion tracking from Bing Ads (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). If you have clicked on a Bing advert, a cookie will be placed on your computer. This enables both Bing and the website operator to recognise that someone has been redirected to the website via the Bing ads and has reached a previously defined target page (conversion page). We would like to point out that this process also records your IP address.

In addition to the consent options via our Consent Management System (consent banner and cookie settings link at the bottom of each page), Microsoft Bing Ads offers an opt-out option via the following link: http://choice.microsoft.com/de/opt-out 

Please note that it is not possible to document your decision when using this option.

Further information on data protection and the cookies used by Microsoft Bing can be found on the Microsoft website: https://privacy.microsoft.com/de-de/privacystatement

GOOGLE ADS WITH CONVERSION TRACKING

On our website we use the advertising component Google Ads and the so-called conversion tracking. This is a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as „Google“.

If you click on an advert placed by Google, the conversion tracking we use stores a cookie on your end device. These so-called conversion cookies lose their validity after 30 days and are not used for your personal identification.

If the cookie is still valid and you visit a specific page on our website, both we and Google can analyse that you have clicked on one of our ads placed on Google and that you have subsequently been redirected to our website.

Google uses the information obtained in this way to compile statistics for us about visits to our website. This also provides us with information about the number of users who have clicked on our advert(s) and the pages of our website subsequently accessed and enables us to check the figures for plausibility with regard to ad fraud. However, neither we nor third parties who also use Google Ads will be able to identify you in this way.

We use conversion tracking to advertise our website in a targeted manner.

You can consent to or object to the collection and storage of data by Google Ads at any time with effect for the future via our Consent Management System in the cookie settings, which can be accessed via a link at the bottom of every page of the portal.

Google also offers

https://services.google.com/sitestats/de.html 

http://www.google.com/policies/technologies/ads/ 

http://www.google.de/policies/privacy/ 

provides further information on this topic and in particular on the options for preventing the use of data.

USAGE-BASED ONLINE ADVERTISING

This website collects and processes anonymous information about your user behaviour (e.g. which subpages you accessed during your visit). We use this data to display interest-based advertising and thus offer you added value. A cookie is stored on your computer to record your usage behaviour. In order to optimise advertising based on your user interests, we use the tools listed below and work together with the providers mentioned. This information is stored using a pseudonym so that personal identification is generally excluded.
We only use the tools used for online advertising on our portal with your prior consent on the basis of the legal basis of Section 25 (1) TTDSG (consent to the setting or reading of cookies) in conjunction with Art. 6 (1) sentence 1 lit. a) GDPR (consent for the data processing based on this). Art. 6 para. 1 sentence 1 lit. a) GDPR (consent for the data processing based on this). You can give this consent either during your first visit to the portal via the consent banner or at any time in the cookie settings, which can be accessed via a link at the bottom of each page of the portal, and adjust or revoke it with effect for the future. Your choice is documented for your browser, which means that we fulfil the data protection requirements of the documentation obligation. This cannot be documented for other forms of opt-out or the prevention of cookies, which are listed below.

You can also prevent the storage of cookies by selecting „Do not accept cookies“ in your browser settings. You can also set your browser so that it asks you whether you agree before setting cookies. Finally, you can also delete cookies once they have been set at any time. However, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent. You may have to reactivate opt-out cookies that have already been set after deleting them.
Please note that when using this option, it is also not possible to document your decision and your settings may conflict with your decisions in the Consent Management System.

FACEBOOK CUSTOM AUDIENCES

In the area of usage-based online advertising, we also use communication tools from the social media network Facebook. In particular, we use the Custom Audiences and Website Custom Audiences products.

A non-reversible and non-personalised checksum (hash value) is generated from your usage data, which can be transmitted to Facebook for analysis and marketing purposes.

The Facebook privacy policy can be found at https://www.facebook.com/privacy/explanation You can find further information about the purpose and scope of data collection and the further processing and use of the data by Facebook as well as your setting options for protecting your privacy in the Facebook privacy policy.

We only use this cookie-based service on our portal with your prior consent.

You can also find another opt-out option for the use of Facebook Website Custom Audiences here: https://www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Fsettings%2F%3Ftab%3Dads.

Please note that if you use this option, it is not possible to document your decision and your settings may conflict with your decisions in the Consent Management System.

RE-TARGETING

We work together with advertising partners on the basis of retargeting technologies. We use these technologies to make our website more interesting for you. This technology makes it possible to target Internet users who have already shown an interest in our shop and our products with adverts on our partners' websites. We are convinced that the display of interest-related advertising is generally more interesting for the Internet user than advertising that has no such connection. These advertisements are displayed on our partners' websites on the basis of cookie technology or other anonymous user identifiers and an analysis of previous user behaviour. This form of advertising is always anonymous, no personal data is stored without your consent and no user profiles are merged with your personal data.

GOOGLE

In order to draw attention to our offers, we use (dynamic) remarketing or „similar target groups“, remarketing lists for search network adverts from Google Inc. We can place interest-related adverts for products and services that you have viewed on our site with individual adverts. For such personalised advertising, Google analyses your user behaviour using cookies that are set when you click on ads or visit our website. The statistics provided by Google are anonymous, only include the number of users who clicked on one of our adverts and show which of our pages you were redirected to. The information is only used for statistical analyses to optimise advertising. No personal data of visitors to the website is stored.

Cross-device marketing allows Google to track your usage behaviour across multiple devices, so that you may be shown interest-based, personalised advertising even if you switch devices. However, this assumes that you have agreed to the linking of your browsing history with your existing Google account.

Further information on Google Remarketing and Google's privacy policy can be found at http://www.google.com/privacy/ads/ view.

We only use this cookie-based service on our portal with your prior consent. You can give this consent either on your first visit to the portal via the consent banner or at any time in the cookie settings, which can be accessed via a link at the bottom of every page of the portal, and adjust or revoke it with effect for the future. Your choice is documented for your browser, which means that we fulfil the data protection requirements of the documentation obligation. This cannot be documented for other forms of opt-out or the prevention of cookies, which are listed below.
To permanently deactivate this function, Google offers the following options for the most common Internet browsers via https://www.google.com/settings/ads/plugin a browser plugin. The use of cookies from certain providers can also be deactivated, e.g. via http://www.youronlinechoices.com/uk/your-ad-choices or http://www.networkadvertising.org/choices/ can be deactivated via opt-out. Please note that it is not possible to document your decision when using these options.

ADITION TECHNOLOGIES AG

This website uses ADITION adserving technology from ADITION technologies AG to process data with cookies as follows and to collect and store it for marketing and optimisation purposes:

Cookie nameDescription of theExpiry date
UserID1Unique user ID. Is used, among other things, to deliver interest-based adverts90 days
lc_${campaign_id}Is used for the assignment for PostTracking and the control of the underlying container tag30 minutes
lv_${campaign_id}Is used for the assignment for PostTracking and the control of the underlying container tag30 minutes
LogID1_${content_unid_id}Used for redirection on click (image banner only)After the end of the session
fc${farm_id}Frequency capping (no longer used) 
ooOpt-Out19-Jan-2038 01:00:00 GMT
coIs no longer written by ADITION, only read. Predecessor of the oo cookie. If a UserID is not available, a redirect is made to the same URL and an attempt is made to set a UserID cookie (avoidance of endless loops).Wed, 01 Jan 2025 00:00:00 GMT
_autuserid2General 1st party cookie for the AditionID90 days
_autaclidsFirst party cookie in which the ClickID is stored90 days
_pmclidStatic 1st party cookie for the AditionID90 days
pm_counterMeasurement of dwell timeUntil the end of the month
pm_spotMeasurement of dwell timeUntil the end of the month
_pm3pcCheck whether 3rd party functionality is available or notAfter the end of the session

Pseudonymised user profiles can be created from this data, which are used to display personalised advertising and to track the interaction of our users with advertisements and thus measure the impact of advertisements on our website. The order ID may also be transmitted for these purposes. In addition, information on the browser type and end device and IP address, as well as the approximate geographical location can be collected or derived.

ADITION technologies AG stores technical information such as the browser used or the operating system installed. The data is stored in Europe. Performance Media Deutschland GmbH and ADITION TECHNOLOGIES AG, based in Europe, have access to the data.

The privacy policy and the opt-out link can be viewed here: https://www.adition.com/datenschutz/

Opt-out link: https://adfarm1.adition.com/opt?n=all&m=optout&cbu=http%3A%2F%2Fwww.adition.com%2Fdatenschutz-opted-out%2F

REFERRAL AND LINKING TO SOCIAL MEDIA NETWORKS

You will find links to social media networks on our website. These are not plugins provided by the provider, which already transmit data to the provider when the page is loaded without the user having any influence. The integrated logos of the social media networks merely conceal a link to the social media network.

The way in which the operators of the social networks use the data from visits to the respective pages for their own purposes, the extent to which activities on the pages are assigned to individual users, how long this data is stored and whether data from a visit to the respective page is passed on to third parties is not conclusively and clearly stated by the operators and is not known to us.

Link to XING
We link to the XING network via a logo graphic. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. When you click on the logo graphic, your browser establishes a direct connection to the XING servers. Further information on data protection can be found in the Privacy policy of Xing.

Link to LinkedIn
 We link to the LinkedIn network via a logo graphic. The provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. When you click on the logo graphic, your browser establishes a direct connection to the LinkedIn servers. Further information on data protection can be found in the LinkedIn privacy policy.

INTEGRATION OF YOUTUBE

Our website uses plugins from the YouTube website operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.

Such integration takes place exclusively in YouTube's extended data protection mode (more information at https://support.google.com/youtube/answer/171780?hl=de), which does not use cookies. As long as there is no interaction with the video, no data is collected by the service. If a user clicks on an embedded YouTube video, data collection and further data processing for analysis purposes is carried out by Google LLC and its affiliated companies. The extended data protection mode prevents YouTube from connecting to Google's DoubleClick advertising network. When videos are played, the service collects browser and device settings, IP address, browser ID, date, time and reference URL of the request to play the video, name of the video and playback duration as well as system activities and crash reports for the purposes of providing, maintaining and improving the services and measuring performance.

If you have a Google account and are logged into it at the time you use a video, the usage data may be merged with your profile data. This depends on the data protection settings you have made in your account.

If you have a YouTube account and are logged in, YouTube will be able to assign your user behaviour to your personal profile. You can prevent this by logging out of your YouTube account. The information is usually transferred to Google servers in the USA and stored there.

As the website operator, we have no influence on these processes. You can find Google's privacy policy and terms of use here:
https://policies.google.com/privacy?hl=de&gl=de

We use YouTube on our websites to display and present our offers in an appealing way.

This data processing may also take place outside the EU or the EEA. As a suitable guarantee for the legality of these data transfers, we have concluded EU standard contracts with the processor in accordance with Art. 46 para. 2 lit. c GDPR.

Nevertheless, there is a risk that state authorities may access this data for control and monitoring purposes and that no effective legal remedies are available against this.

The service will only be used with your prior consent. You can give this consent via our Consent Management System either on your first visit to the portal via the consent banner or via the layer that is displayed above a YouTube integration without consent. In addition, you can give your consent at any time via the cookie settings, which can be accessed via a link at the bottom of every page of the portal, and adjust or revoke your consent with effect for the future. Your choice is documented for your browser, which means that we fulfil the data protection requirements of the documentation obligation.

INTEGRATION OF GOOGLE MAPS

The Google Maps map service is integrated into our website via an API. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In order to use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to and stored on Google servers in the USA. As the provider of this site, we have no influence on data transmission.
We use Google Maps on our website to present our offers in an appealing way and to show you the exact location of our products and travel agencies.

The use is based on the legal basis § 25 para. 1 TTDSG (consent for the setting or reading of cookies) i.V.m. Art. 6 para. 1 sentence 1 lit. a) GDPR (consent for the data processing based on this). You can revoke your consent with effect for the future at any time in the cookie settings in the footer of the website.

Further information on the handling of your data can be found in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/
This data processing may also take place outside the EU/EEA. The level of data protection may not be comparable to that in the EU/EEA. If data is transferred outside the scope of the EU GDPR when using processors, this is secured, among other things, by EU standard contractual clauses in accordance with Art. 46 para. 2 lit. c EU GDPR. Where necessary and possible, the EU standard contractual clauses are supplemented by further contractual assurances. There is nevertheless a risk that state authorities may access this data for control and monitoring purposes and that no effective legal remedies are available against this.

INTEGRATION OF GOOGLE WEB FONTS

Web fonts are used on our website to ensure the uniform display of fonts. To display fonts and texts correctly, your web browser loads the required fonts into the cache.

To ensure this, your web browser must establish a connection to Google servers. This tells Google that our website has been accessed via your IP address. We use Google Web Fonts on our websites in order to display and present our offers in an appealing manner (legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR).

If your browser does not support web fonts, a standard font of your computer will be used.

Further information on Google Web Fonts can be found here: https://developers.google.com/fonts/faq or in Google's privacy policy: https://www.google.com/policies/privacy/.

WEBPUSH / FOXPUSH

Foxpush offers users the opportunity to be notified of offers and promotions via push notifications. If the user agrees to the notification, this push message appears automatically in the browser window. An anonymous cookie is set during registration. Registration takes place directly via Foxpush and is not connected to the Consent Management System. The user has the option to unsubscribe from the notification at any time. You can delete or block the authorisation for notifications from our website at any time in your browser settings.

DYNAMIC CONTROL OF CONTENT IN E-MAILS

We use the kickdynamic tool from Kickdynamic Ltd to provide you with up-to-the-minute content and appropriate offers in our mailings, such as the newsletter. kickdynamic allows the content of the e-mail to be determined dynamically at the time the e-mail is opened.

We take the following factors into account for dynamic content control:

  • Location of the visitor (e.g. for the display of corresponding maps, weather forecast and weather-dependent offers/info)
  • End device of the visitor
  • Day or time of day (e.g. animated countdown clock for limited discount promotions)

In order to be able to send you even more suitable offers by e-mail in the future, transaction data on the site and the information you provide will be merged. You can object to this use at any time without incurring any costs other than the transmission costs according to the basic tariffs.

FORM PAGES

Our website also offers the opportunity to get in touch with us on a wide range of topics. Examples of this are contact enquiry forms, etc. Depending on the background of the contact, various data is requested in the form. Personal details such as title, first name, surname and email address are usually mandatory for the purpose of establishing contact and addressing you personally. If you use a form to request a call-back or an appointment, you may also be asked to provide data such as your telephone number. For travel enquiries or questions about existing transactions, you also have the option of providing your booking or invoice number.

DATA SECURITY

To protect your data from unauthorised access, we use an encryption process on our website. Your data is then transmitted from your computer to our server and vice versa via the Internet using TLS 1.2 encryption. You can recognise this by the fact that the lock symbol in the status bar of your browser is closed and the address line begins with https://.

RIGHTS OF THE DATA SUBJECT

Data subjects have the right to obtain information from the controller about the personal data concerning them and to have incorrect data corrected or deleted if one of the reasons stated in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued. There is also the right to restriction of processing if one of the conditions specified in Art. 18 GDPR applies and, in the cases of Art. 20 GDPR, the right to data portability. If data is collected on the basis of Art. 6 para. 1 lit. e or lit. f, the data subject has the right to object to the processing at any time for reasons arising from their particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defence of legal claims.

RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY

Every data subject has the right to lodge a complaint with a supervisory authority if he or she considers that the processing of data relating to him or her infringes data protection regulations. The right to lodge a complaint may be exercised in particular with a supervisory authority in the Member State of the data subject's habitual residence or place of the alleged infringement.

CONTACT DETAILS OF THE DATA PROTECTION OFFICER

If you have any questions about data protection, please contact our
Data Protection Officer:

DERTOUR travel agency*
DER Deutsches Reisebüro GmbH & Co OHG
Data Protection Officer
Emil-von-Behring-Strasse 6
60424 Frankfurt am Main
E-Mail: datenschutz@dertour.com

* The travel agencies of DERTOUR Reisebüros operate with the following companies:

Amtliches Allgäuer Reisebüro GmbH, DERTOUR Reisebüro Südwest GmbH, DER Reisebüro Göbel GmbH, DER Reisebüro OTTO GmbH, DER Reisebüro Service GmbH, DER Reisecenter TUI GmbH, Go!Reisen GmbH, Reisebüro Rominger Bodenseereisebüro GmbH, Reisebüro Rominger Südland GmbH, Württembergisches Reisebüro Otto Schmid GmbH&Co.KG, DERPART Reisevertrieb GmbH

OVERVIEW OF OPT-OUT OPTIONS

With this data protection declaration, we inform you about the processing of your personal data by us and about the rights to which you are entitled when booking a travel service.

(Status: December 2023)

1. WHO IS RESPONSIBLE FOR DATA PROCESSING AND WHO CAN YOU CONTACT?

The following company is responsible for data collection and processing:

DER Deutsches Reisebüro GmbH & Co. OHG
Data protection
Emil-von-Behring-Str. 6
60439 Frankfurt
E-Mail: datenschutz@dertouristik.com

2. WHICH DATA AND WHICH SOURCES DO WE USE?

We process data that we receive as part of our contractual relationship with you or on the basis of your consent. We receive the data directly from you, e.g. as part of the travel booking or other order placement, e.g. via a travel agent, advertising co-operation partner.

If you provide us with the personal data of other persons (e.g. fellow travellers) as a travel applicant, you must ensure that they agree to this and that you are permitted to transmit the data. You must ensure that these persons know how their personal data can be processed by us and what rights they have.

Where necessary, we process the following categories of data:

  • Identification/authentication data (e.g. surname, first name of all travellers, transaction number, user name, passwords, passport data)
  • Demographic data (e.g. age, date of birth of all travellers)
  • Physical characteristics (e.g. salutation, gender of all travellers)
  • Communication data (e.g. address, e-mail address, telephone number, correspondence, e-mail correspondence)
  • Account details (e.g. IBAN number, credit card number)
  • Travel data (e.g. booked products, travel history)
  • special personal data pursuant to Art. 9 para. 1 GDPR (e.g. mobility aids, meal requests)
  • Advertising and sales data (e.g. history of our advertising offers)
  • Preferences (e.g. your preferences, your ratings with regard to your trips, if arranged through us/carried out by us)
  • Behaviour (e.g. behaviour on our websites/app, location)
  • Family relationship (e.g. children travelling with you)
  • Data in the context of complaints and crisis cases

3. ON WHAT LEGAL BASIS AND FOR WHAT PURPOSE IS YOUR DATA USED?

3.1 FOR THE PERFORMANCE OF PRE-CONTRACTUAL MEASURES TAKEN AT YOUR REQUEST OR FOR THE FULFILMENT OF CONTRACTUAL OBLIGATIONS WITH YOU (ART. 6 PARA. 1 LIT. B EU GDPR)

We process your data to prepare offers and execute our contracts with you, i.e. in particular to arrange travel services, including complaint and complaint management (agency contract) by us or by authorised third parties. Further purposes are

  • For the provision of customer portals/apps (licence agreement)
  • For the provision of contact options to us (e.g. contact form, arranging appointments for counselling) (agency/travel contract)
  • To participate in competitions, contests or similar promotions (competition contract):
    • From time to time we offer you the opportunity to take part in competitions or contests and similar promotions.
    • Personal data such as title, first name, surname, address, email address and any other data required for the promotion may be processed in order to process these promotions. All personal data provided in the context of such a campaign will be used exclusively for the processing of the campaign, e.g. for determining and notifying the winner or sending the prize. The data will be deleted after the end of the promotion if overriding retention periods have expired. The legal basis for the processing of the campaign is Art. 6 para. 1 lit. b GDPR (competition contract).

3.2 ON THE BASIS OF LEGAL REQUIREMENTS (ART. 6 PARA. 1 LIT. C EU GDPR)

We are subject to various legal obligations and statutory requirements (e.g. German Civil Code (BGB), EU travel law, German Commercial Code (HGB), GoB, Passenger Name Record Act, tax laws of the Federal Republic of Germany). Your data may be processed by us or authorised third parties for the purposes of identity and age verification, the prevention of criminal offences (e.g. fraud), the fulfilment of tax law/official control and reporting obligations, the assessment and management of risks as well as financial and tax law retention.

3.3 DATA PROCESSING FOR THE PROTECTION OF VITAL INTERESTS (ART. 6 PARA. 1 LIT. D EU GDPR)

In order to protect the vital interests of you or another natural person, e.g. to be able to provide emergency services with an evacuation list in emergency situations, your data may be processed by us or authorised third parties.

3.4 FOR THE PROTECTION OF LEGITIMATE INTERESTS (ART. 6 PARA. 1 LIT. F EU GDPR)

Your data may be processed by us or by authorised third parties as part of a balancing of interests to protect legitimate interests. This is done for the following purposes:

  • Function, availability and security of business operations (e.g. IT, other services)
  • Further development of services/travel services and additional products (e.g. quality management)
  • Advertising, market and opinion research, new customer acquisition
  • Assertion, exercise or defence of legal claims
  • Prevention and investigation of criminal offences (e.g. fraud)
  • Processing of enquiries and provision of necessary information (e.g. contact form)

Our interest in the respective processing results from the respective purposes (profit generation, avoidance of legal risks, assertion, exercise or defence of legal claims, provision and security of our business operations, efficient task fulfilment, process optimisation).

As far as the specific purpose allows, we process your data pseudonymised.

3.5 ON THE BASIS OF YOUR CONSENT (ART. 6 PARA. 1 LIT. A EU GDPR)

If you have given us your consent to process your personal data, this consent is the legal basis for the processing mentioned there. In particular, you may have consented to being contacted for advertising purposes by email, post, telephone or messenger service. You can revoke your consent at any time with effect for the future. To do so, please contact us at our contact address. The cancellation only applies to future processing, not to processing that has already taken place.

Separate consents can be granted for the following services:

NEWSLETTER DISPATCH

You have the option of registering for our free newsletter on some of our websites. The newsletter contains current offers on travel services, attractive specials and competitions. If you subscribe to the newsletter, we will process the data listed below. We only process this data to the extent that it is actually collected by us.

  • Data that you provide to us when subscribing to the newsletter (e-mail address, title, first name, surname, date of birth if applicable, content preferences)
  • Data to prove your consent to receive the newsletter (IP address, time stamp of consent)
  • Data on the use of the newsletter (openings, clicks on links contained therein, accessibility of the e-mail address, data of the end device used)
  • Data that is collected when you use our website (e.g. IDs, pages viewed, booking of a service, shopping basket abandonment); this information is used temporarily to personalise the newsletter content to your profile and then deleted.
  • We work with the so-called double opt-in registration procedure. To ensure that the newsletter registration was actually made by the owner of the e-mail address, an e-mail is sent to the registered e-mail address. Only when the registration is confirmed by clicking on the link contained in the e-mail will you receive the newsletter in your e-mail inbox in future.

We work together with empaction GmbH, Marktstraße 33-35, 60388 Frankfurt am Main, Germany, to send newsletters. For these purposes, empaction stores your e-mail address and the date of registration. A corresponding order processing contract has been concluded.

You can unsubscribe from the newsletter at any time with effect for the future. You can do this by contacting us directly and using the "Unsubscribe from newsletter" link contained in every newsletter or, if applicable, via a link in the email for existing customer emails, without incurring any costs other than the transmission costs according to the basic rates. Your data will be blocked for advertising purposes. Your data will be deleted when priority retention periods have expired.

4. WHO GETS MY DATA?

Your personal data will only be passed on in compliance with the provisions of the EU GDPR and only insofar as a legal basis permits this. Your data will only be received by those bodies that need it to fulfil our contractual and legal obligations or to fulfil their respective tasks, e.g.

  • Internal departments responsible for organising the event, arranging and carrying out the trip/processing your enquiry
  • Printing and dispatch service providers (e.g. printing and dispatch of invoices/travel confirmation/travel documents)
  • Destination agency (e.g. tour guide, hotel reservation, transfer and possibly excursion services)
  • Transport service provider (airline, rail if applicable)
  • Accommodation operator (hotel management)
  • Insurer
  • Service provider of other booked services
  • Partner for the realisation of advertising, market and opinion research, new customer acquisition
  • Public authorities (tax authorities, embassies of the destination country) if there is a legal or official obligation (e.g. retention obligations, VISA procurement, obtaining entry requirements)
  • other bodies for which you have given us your consent to data processing

5. HOW LONG WILL MY PERSONAL DATA BE STORED?

Where necessary, we process your personal data for the duration of our business relationship, which also includes the initiation and fulfilment of a contract. In addition, we are subject to various retention and documentation obligations arising from the German Civil Code (BGB) and EU travel law, the German Commercial Code (HGB) and the German Fiscal Code (AO), among others.

  • STORAGE FOR 3 YEARS ACC. §§ 195 FF. BGB
    starting from the following year after the claim has arisen and the creditor becomes aware of the circumstances giving rise to the claim and the person of the debtor or should have become aware of them without gross negligence for the assertion, exercise or defence of legal claims in accordance with Section 199 (1) of the German Civil Code (BGB)
  • STORAGE FOR 6 YEARS
    begins at the end of the calendar year in which the last entry was made in the trading book, the inventory was prepared, the opening balance sheet or the annual financial statements were adopted, the individual financial statements pursuant to Section 325 (2a) or the consolidated financial statements were prepared, the commercial letter was received or sent or the accounting voucher was created in accordance with the statutory retention periods under Section 257 (5) HGB for commercial letters and begins at the end of the calendar year in which the last entry was made in the trading book, the inventory, the opening balance sheet, the annual financial statements or the management report were prepared, the commercial or management report was prepared or the annual financial statements were adopted. 5 HGB for commercial letters and begins at the end of the calendar year in which the last entry was made in the book, the inventory, the opening balance sheet, the annual financial statements or the management report was prepared, the commercial or business letter was received or sent or the accounting voucher was created, the record was made or the other documents were created in accordance with Section 147 (4) AO for commercial and business letters, other documents, insofar as they are relevant for taxation purposes
  • STORAGE FOR 10 YEARS
    begins at the end of the calendar year in which the last entry was made in the trading book, the inventory was prepared, the opening balance sheet or the annual financial statements were adopted, the individual financial statements pursuant to Section 325 (2a) or the consolidated financial statements were prepared, the commercial letter was received or sent or the accounting document was created in accordance with the statutory retention periods from Section 257 (5) HGB for trading books, inventories, opening balance sheets, annual financial statements, individual financial statements pursuant to Section 325 (2a), management reports, consolidated financial statements, group management reports and the working instructions required to understand them. 5 HGB for trading books, inventories, opening balance sheets, annual financial statements, individual financial statements in accordance with Section 325 (2a), management reports, consolidated financial statements, group management reports and the work instructions and other organisational documents required to understand them, supporting documents for entries in books to be kept in accordance with Section 238 (1) HGB (accounting records). 1 (accounting vouchers) and begins at the end of the calendar year in which the last entry was made in the book, the inventory, the opening balance sheet, the annual financial statements or the management report was prepared, the commercial or business letter was received or sent or the accounting voucher was created, the record was made or the other documents were created in accordance with Section 147 para. 4 AO for books and records, inventories, annual financial statements, management reports, the opening balance sheet and the work instructions and other organisational documents necessary for their understanding, accounting vouchers, documents pursuant to Article 15 (1) and Article 163 of the Union Customs Code

    in the case of other claims for damages pursuant to Section 199 (3) BGB after ten years from the time they arise

  • STORAGE FOR 30 YEARS
    in the case of claims for damages based on injury to life, limb, health or freedom 30 years from the commission of the act, the breach of duty or the other event causing the damage (e.g. judgements, default summonses, court files, notarial deeds)

    Processing for advertising purposes can be objected to free of charge at any time upon informal request in accordance with Art. 21 EU GDPR; in this case, the data will be blocked for advertising purposes. Your data will be deleted when priority retention periods have expired.

    Your personal data will be deleted on the basis of your consent as soon as the purpose has been fulfilled or until revocation and when priority retention periods have expired.

6. WILL MY DATA BE TRANSFERRED TO A THIRD COUNTRY?

We only transfer your data to recipients outside the scope of the EU GDPR and if there is neither an adequacy decision pursuant to Article 45(3) nor suitable guarantees pursuant to Article 46, including binding internal data protection regulations, insofar as the transfer is necessary:

  • for the conclusion or fulfilment of the contract with you or for the implementation of pre-contractual measures at your request
  • for the fulfilment of a contract concluded in your interest by the controller with another natural or legal person
  • for the assertion, exercise or defence of legal claims
  • to protect the vital interests of the data subject or other persons, if the data subject is physically or legally unable to give consent
  • You have given us your consent

These data processing operations are permissible derogations from Art. 49 EU GDPR.

If a data transfer outside the scope of the EU GDPR is necessary due to our predominantly legitimate interest or if you have given us your consent, this is secured, among other things, by EU standard contractual clauses in accordance with Art. 46 para. 2 lit. c EU GDPR. If necessary, the EU standard contractual clauses are supplemented by further contractual assurances. You can obtain information on this via the contact details provided.

7. DO I HAVE CERTAIN RIGHTS WHEN HANDLING MY DATA?

You have the right to information (Art. 15 EU GDPR, Section 34 BDSG), to rectification (Art. 16 EU GDPR), to erasure (Art. 17 EU GDPR, Section 35 BDSG), to restriction of processing (Art. 18 EU GDPR) and to data portability (Art. 20 EU GDPR) under the respective legal requirements.

You also have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) of the GDPR pursuant to Article 21 of the GDPR. This also applies to profiling based on this provision within the meaning of Art. 4 No. 4 EU GDPR. If a justified objection is made, we will no longer process this personal data for these purposes. An objection can be made informally to our contact address. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 EU GDPR, Section 19 BDSG).

You can find a current list of the responsible supervisory authorities at www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

8. AM I OBLIGED TO PROVIDE MY DATA?

As part of our business relationship, you only need to provide the personal data that is required for the establishment, execution and termination of a business relationship or that we are legally obliged to collect. Without this data, we will generally have to refuse to conclude the contract or execute the order or will no longer be able to fulfil an existing contract and may have to terminate it.

9. IS THERE AUTOMATED DECISION MAKING IN INDIVIDUAL CASES?

In principle, we do not use automated decision-making in accordance with Art. 22 EU GDPR to establish and conduct the business relationship. If we use these procedures in individual cases, you will be informed separately if this is required by law.

10. USAGE DATA/LOGFILES

We use and store information that we receive during your visit to our website for security purposes and to improve the functionality of the website.

This data set consists of:

  • the page from which the file was requested
  • the name of the file
  • the date and time of the query
  • the amount of data transferred
  • the access status
  • the description of the type of web browser used
  • the IP address of the requesting computer (see above anonymised according to the period specified below).

We use this information to enable you to access our website, to control and administer our systems and to improve the design and function of the website.

We only store the IP address transmitted by your web browser, including the above-mentioned data record, for a period of time in order to be able to recognise, limit and eliminate faults or errors (e.g. attacks on our servers). Storage ends after one month at the latest. After this period, we delete or anonymise the IP address.

This is done on the basis of our predominantly legitimate interest in the security and functionality of our website § 25 para. 2 no. 2 TTDSG in conjunction with. Art. 6 para. 1 lit. f GDPR.

11. CONTACT DETAILS OF THE DATA PROTECTION OFFICER

If you have any questions about data protection, please contact:

DERPART Travel Sales GmbH
Data protection
Emil-von-Behring-Str. 6
60439 Frankfurt
E-Mail: datenschutz@dertouristik.com

CONSENT MANAGEMENT SYSTEM

USE OF CONSENT MANAGEMENT SYSTEM TO MANAGE AND DOCUMENT CONSENT AND SETTINGS FOR DATA COLLECTION AND COOKIES

As a user, you can decide for yourself on the use of cookie-based services/technologies and the data collection by these on our portal and adjust or revoke them at any time with effect for the future. This is possible via an information and consent banner, which is displayed on first visits and when changing services, as well as via the cookie settings, which can be accessed at any time via a link at the bottom of each page. As part of a GDPR-compliant approach, we only use services requiring consent after you have given your prior consent. You can also use our website without this consent.

We use a so-called Consent Management System from Usercentrics, GmbH, Rosental 4, 80331 Munich, Germany, to provide this setting and consent function within the meaning of the GDPR and to inform you about the use of cookie-based technologies. In addition, this system is used to document your decisions for your browser, which enables us to fulfil the data protection requirements of the documentation and verification obligation.

Usercentrics uses cookies and records the date and time of the visit, browser and device information, the anonymised IP address and opt-in and opt-out data exclusively to store your consent and to comply with legal obligations on the legal basis of Section 25 (2) No. 2 TTDSG in conjunction with Art. 6 (1) (c) GDPR. GDPR Art. 6 (1) (c). The data processing takes place within the European Union.

Your data will be stored for 3 years in accordance with section 5 of the retention period of 3 years pursuant to §§ 195 ff. BGB.

Further information on the data protection provisions of the data processor can be found at https://usercentrics.com/de/datenschutzerklaerung/

As a user, you have other, alternative ways such as browser extensions, settings, adblockers or opt-out links of individual tools to prevent the setting of cookies or data collection by services. We would like to point out that these methods are not equivalent to the use of a consent / consent management system.
Browser extensions, settings and adblockers can prevent cookies and, where applicable, data collection by services. However, you cannot always decide for yourself what you want to allow or prevent. It is possible that your decisions made via the consent management system may be overridden or even prevent the necessary use of the consent management system. In addition, extensions and adblockers can cause unexpected problems with the basic functions of the portal.

Many marketing services provide their own opt-out options via opt-out links or cookies. We list these in the privacy policy, if available. The opt-out often applies to the basic portal-independent use of the service, but only takes place subsequently and on a page of the provider, independent of the consent management of our portal. Opt-out cookies are often set, which in turn can be cancelled by the cookie settings of your browser or by deleting cookies.
If you use the alternative methods mentioned, it is not possible for us to document your settings and decisions.

WEBSITE ANALYSIS AND TRACKING

USE OF COOKIES

When you visit our website, information may be stored on your computer in the form of cookies, for example to recognise visitor preferences and optimise the design of the website accordingly. This helps us, for example, to make navigation easier and to achieve a high level of user-friendliness. Cookies that are not technically necessary are only set if you have actively consented to this.

Cookies are text files that are stored on the user's hard drive when they visit a website. They are harmless to your computer and cannot be viewed by third parties. They make it possible to store information for a certain period of time and to identify the user's computer.

If you accept our cookies, they will remain on your computer for a period of 30 days unless you delete them beforehand. During an online booking, cookies are temporarily stored for the duration of the booking. These are automatically deleted after 30 minutes of inactivity or after closing the website.

You can object to the collection and storage of your data via this service at any time. If you wish to avoid the activation of cookies, deactivate them in your browser. Please note, however, that disabling cookies may restrict the use of the website and the services offered.

GOOGLE ANALYTICS

Subject to your consent, this website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "Google"). Google Analytics uses cookies, which are stored on your computer and enable your use of this website to be analysed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

We would like to point out that on this website Google Analytics has been extended by the code "gat._anonymizeIp();" in order to ensure anonymised collection of IP addresses (so-called IP masking). If IP anonymisation is activated on our websites, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand.

Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information to analyse your use of our website, to compile reports on website activity for us and to provide us with other services relating to website activity and internet usage.

The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. A transfer of this data by Google to third parties only takes place on the basis of legal regulations or in the context of order data processing. Under no circumstances will Google combine your data with other data collected by Google.

We only use this cookie-based service on our portal with your prior consent, on the legal basis of Section 25 (2) no. 2 TTDSG in conjunction with Art. 6 (1) sentence 1 lit. a GDPR (consent for the data processing based on this). Art. 6 para. 1 sentence 1 lit. a) GDPR (consent for the data processing based on this). You can give this consent in our Consent Management System either on your first visit to the portal via the consent banner or at any time in the cookie settings, which can be accessed via a link at the bottom of every page of the portal, and adjust or revoke it with effect for the future. Your choice is documented for your browser, which means that we fulfil the data protection requirements of the documentation obligation.

You can also prevent the collection and processing by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. Please note that when using this option, it is not possible to document your decision and your settings may conflict with your decisions in the Consent Management System.

Further information on terms of use and data protection can be found at http://www.google.com/analytics/terms/de.html or under https://www.google.de/intl/de/policies/.

REFERRAL AND LINKING TO SOCIAL MEDIA NETWORKS

You will find links to social media networks on our website. These are not plugins provided by the provider, which already transmit data to the provider when the page is loaded without the user having any influence. The integrated logos of the social media networks merely conceal a link to the social media network.

The way in which the operators of the social networks use the data from visits to the respective pages for their own purposes, the extent to which activities on the pages are assigned to individual users, how long this data is stored and whether data from a visit to the respective page is passed on to third parties is not conclusively and clearly stated by the operators and is not known to us.

Link to XING
We link to the XING network via a logo graphic. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. When you click on the logo graphic, your browser establishes a direct connection to the XING servers. Further information on data protection can be found in the Privacy policy of Xing.

Link to LinkedIn
 We link to the LinkedIn network via a logo graphic. The provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. When you click on the logo graphic, your browser establishes a direct connection to the LinkedIn servers. Further information on data protection can be found in the LinkedIn privacy policy.

INTEGRATION OF YOUTUBE

Our website uses plugins from the YouTube website operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.

Such integration takes place exclusively in YouTube's extended data protection mode (more information at https://support.google.com/youtube/answer/171780?hl=de), which does not use cookies. As long as there is no interaction with the video, no data is collected by the service. If a user clicks on an embedded YouTube video, data collection and further data processing for analysis purposes is carried out by Google LLC and its affiliated companies. The extended data protection mode prevents YouTube from connecting to Google's DoubleClick advertising network. When videos are played, the service collects browser and device settings, IP address, browser ID, date, time and reference URL of the request to play the video, name of the video and playback duration as well as system activities and crash reports for the purposes of providing, maintaining and improving the services and measuring performance.

If you have a Google account and are logged into it at the time you use a video, the usage data may be merged with your profile data. This depends on the data protection settings you have made in your account.

If you have a YouTube account and are logged in, YouTube will be able to assign your user behaviour to your personal profile. You can prevent this by logging out of your YouTube account. The information is usually transferred to Google servers in the USA and stored there.

As the website operator, we have no influence on these processes. You can find Google's privacy policy and terms of use here:
https://policies.google.com/privacy?hl=de&gl=de

We use YouTube on our websites to display and present our offers in an appealing way.

This data processing may also take place outside the EU or the EEA. As a suitable guarantee for the legality of these data transfers, we have concluded EU standard contracts with the processor in accordance with Art. 46 para. 2 lit. c GDPR.

Nevertheless, there is a risk that state authorities may access this data for control and monitoring purposes and that no effective legal remedies are available against this.

The service will only be used with your prior consent. You can give this consent via our Consent Management System either on your first visit to the portal via the consent banner or via the layer that is displayed above a YouTube integration without consent. In addition, you can give your consent at any time via the cookie settings, which can be accessed via a link at the bottom of every page of the portal, and adjust or revoke your consent with effect for the future. Your choice is documented for your browser, which means that we fulfil the data protection requirements of the documentation obligation.

INTEGRATION OF GOOGLE MAPS

The Google Maps map service is integrated into our website via an API. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In order to use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to and stored on Google servers in the USA. As the provider of this site, we have no influence on data transmission.
We use Google Maps on our website to present our offers in an appealing way and to show you the exact location of our products and travel agencies.

The use is based on the legal basis § 25 para. 1 TTDSG (consent for the setting or reading of cookies) i.V.m. Art. 6 para. 1 sentence 1 lit. a) GDPR (consent for the data processing based on this). You can revoke your consent with effect for the future at any time in the cookie settings in the footer of the website.

Further information on the handling of your data can be found in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/
This data processing may also take place outside the EU/EEA. The level of data protection may not be comparable to that in the EU/EEA. If data is transferred outside the scope of the EU GDPR when using processors, this is secured, among other things, by EU standard contractual clauses in accordance with Art. 46 para. 2 lit. c EU GDPR. Where necessary and possible, the EU standard contractual clauses are supplemented by further contractual assurances. There is nevertheless a risk that state authorities may access this data for control and monitoring purposes and that no effective legal remedies are available against this.

DATA SECURITY

To protect your data from unauthorised access, we use an encryption process on our website. Your data is then transmitted from your computer to our server and vice versa via the Internet using TLS 1.2 encryption. You can recognise this by the fact that the lock symbol in the status bar of your browser is closed and the address line begins with https://.

 

Always informed

Register now for our newsletter and receive exciting insights, trends and information on our corporate client services.
DSGVO-Erklärung

We use rapidmail to send our newsletter. By registering, you agree that the data you enter will be transmitted to rapidmail. Please also note the GTC and Data protection regulations .