Cookies
We use cookies. Cookies are text files which are filed and stored on a computer system via an internet browser.
Many cookies contain what is known as a cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters by which websites and servers can be assigned to the specific internet browser that the cookie has been stored in. This allows the websites and servers visited to differentiate between your individual browsers from other internet browsers that contain other cookies. A specific internet browser can be recognised and identified via the unique cookie ID.
Through the use of cookies, we can provide the users of this website with more user-friendly services. Information and offers on our website in the interests of the user are optimised, for example by recognising the website user. This means that access data does not need to be re-entered every time the website is visited, as this is taken care of by the website and the cookie stored on the user's computer system. However, a distinction must be made in the use of cookies with regard to different earmarkings. Insofar as these small files are absolutely necessary to display the website properly, there is no voluntary aspect in their use. The legal basis for the integration of cookies in this case is Art. 6 (1) lit. f GDPR.
Furthermore, however, cookies are also used for the purpose of analysing user behaviour or for marketing purposes. However, this use only occurs if you have given us your consent when you first visit the website. You can, however, prevent the use of cookies through our website at any time by selecting the appropriate setting in the used internet browser and thus permanently object to the use of cookies.
You can prevent the use of cookies through our website at any time by selecting the appropriate setting in the used internet browser and thus permanently object to the use of cookies. In addition, cookies that have already been set can be deleted at any time via an internet browser or other software programs. This is possible in all common internet browsers. If the data subject deactivates the use of cookies in the internet browser used, it is possible that not all functions of our website will be fully usable.
Server log files
Our website provider automatically gathers and stores information in what are known as server log files, which are transferred to us automatically from your browser. The following can be collected:
(1)used browser types and versions,
(2)the operating system used by the accessing system,
(3)the website from which an accessing system reaches our website (called a referrer),
(4)subpages that are accessed via an accessing system on our website,
(5)the date and time that a website is accessed,
(6) an internet protocol address (IP address),
(7)the internet service provider of the accessing system and
(8)other similar data and information that serves to avert danger in the event of attacks on our information technology systems.
We do not draw any conclusions about you in the use of this general data and information. On the contrary, this information is required to
(1)correctly deliver our website content,
(2)to optimise the content of our website as well as the advertising for this,
(3)to ensure the lasting functionality of our information technology systems and the technology our website as well as
(4)to provide law enforcement authorities with information necessary for the prosecution in the event of a cyberattack.
This data and information is therefore evaluated by us statistically, with the goal of also increasing the data protection and data security in our company, ultimately to ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files is stored separately from all of your personal data specified. This data is not merged with other data sources. However, if there are indications of illegal usage of our internet offer, it is possible for us to check this data retrospectively.
Customers can register with us
You have the option of registering as a customer on our website by providing personal data. Which personal data is transmitted to us here arises as a result of the respective input mask used for the registration. The personal data entered by you is gathered and stored exclusively for the creation of a customer account as well as for the processing of possible bookings. However, we can initiate the transfer to one or several data processors, for example a parcel service, which then also uses the personal data exclusively for an internal use.
Through a registration on our website, the IP address assigned to you, as well as the date and time of the registration, are also stored.
The storage of this data occurs in view of the fact that the misuse of our services can only be prevented in this way and, if necessary, this data makes it possible to clarify crimes that have been committed. In this respect, the storage of this data is necessary for our protection. In principle, this data is only transferred to third parties if there is a legal obligation to transfer it or if transferring is conducive to criminal prosecution.
For data processing in the context of customer accounts, we use the external service provider INCERT eTourismus Gmbh & Co KG,
Leonfeldner Straße 328, 4040 Linz, Austria, with whom we have concluded a data processing agreement in accordance with Art. 28 GDPR. We and the data processor are both obliged to comply with the technical organisational measures in accordance with Art. 32 GDPR and the external service provider is also obliged to maintain confidentiality. Processing is carried out exclusively on our behalf and on our instructions.
Your registration takes place by voluntarily specifying personal data and it helps us to provide you with content or services which, due to the nature of the issue, can only be offered to registered users. In principle, registered persons are free to alter personal data specified during the registration at any time or to have it completely deleted from our database, unless the right to deletion is restricted by law.
Google Maps
As part of our internet offer, for example to find branches and/or locations of our company, interactive maps of the map service “Google Maps API” by Google LLC are used.
The operating company is Google LLC; 1600 Amphitheatre Parkway; Mountain View, CA 94043, USA. In the use of this service, information about the use of the source website as well as your IP address is transmitted to and stored by Google LLC servers in the USA. The implementing decision of the EU Commission 2016/1250 determines an adequate level of data protection for the USA on the basis of the EU-US privacy shield.
In principle, Google pledges in its own privacy policy not to pass on any information to third parties, though exceptions are possible. A transfer of your data to third parties cannot be excluded by us, for example in the event of legally required transfers or the processing of data by third parties on behalf of Google LLC. You can find Google's privacy policy here: http://www.google.com/policies/privacy/.
If you do not want to data to be transferred, the map service can be deactivated and thus the data transfer to Google LLC can be avoided. To do this, you need to deactivate JavaScript in the browser.
Analysis Tools
Google Analytics (with anonymisation function)
We have integrated the Google Analytics (with anonymisation function) on our website, among other things we have implemented Google Optimize as a testing tool. The data processing takes place with your prior consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can withdraw your consent at any time.
Google Analytics is a web analysis service. Web analysis is the collection, compilation, and evaluation of data on the behaviour of visitors to websites. A web analysis service collects, among other things, data about the website from which a data subject came to a website (referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed.
The operating company is Google LLC; 1600 Amphitheatre Parkway; Mountain View, CA 94043; USA, represented in the EU by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.
The aim of the Google Analytics component is to analyse the flow of visitors to our website. Among other things, Google uses the data and information obtained to evaluate the use of our website, to compile online reports for us showing the activity on our website, and to provide other services linked to the use of our website.
Google Analytics puts a cookie in your system. Every time you visit an individual page of this website on which a Google Analytics component has been integrated, your internet browser is automatically triggered by the respective Google Analytics component to transfer data to Google for the purposes of online analysis. As part of this technical procedure, Google obtains knowledge of personal data, such as your IP address, in order to trace the origin of visitors and clicks. Through the cookie, personal information such as access time, the location from which the access originated, and the frequency at which you visit our website, is stored. Each time you visit our website, this personal data, including the IP address you used, is transferred to Google LLC. In some circumstances, Google passes this personal data collected via the technical process onto third parties.
According to COMMISSION IMPLEMENTING DECISION (EU) 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council, data transfers to the USA are based on standard contractual clauses. Google has appointed us a representative in Ireland. We have concluded contracts which regulate data processing within the EU. If Google does not store your data within the EU, Google Ireland Ltd. is responsible concluding standard contractual clauses with the respective partner. You can prevent the use of cookies at any time by selecting the appropriate setting in the used internet browser and thus permanently object to the use of cookies.
In addition, you have the option to object to the collection of data generated by Google Analytics and related to the use of this website, as well as the processing of this data by Google, and to prevent such processing. To do this, you need to download and install a browser add-on via the link: https://tools.google.com/dlpage/gaoptout.
You can get more information and Google's applicable privacy policy at https://www.google.de/intl/de/policies/privacy/. Google Analytics is explained in more detail at https://www.google.com/intl/de_de/analytics/.
Online advertising
Google Remarketing
We have integrated components of Google Remarketing on our website.
Google Remarketing is a function of Google Ads that enables a company to display advertisements to internet users who have previously visited the company's website. The integration of Google Remarketing thus allows a company to create user-related advertising and the website user can consequently be shown advertisements relevant to their interests.
The operating company is Google LLC; 1600 Amphitheatre Parkway; Mountain View, CA 94043; USA, represented in the EU by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.
The aim of Google Remarketing is the insertion of advertising relevant to interests. Google Remarketing enables us to display advertisements via the Google advertising network or to have them displayed on other websites which are tailored to the individual needs and interests of internet users.
Google Remarketing puts a cookie in your system. As a result, the visitors to our website can be recognised if they then visit websites which are also members of the Google advertising network. Each time a website is visited on which the Google Remarketing service has been integrated, your internet browser automatically identifies itself to Google. Through a cookie, personal information, such as the websites you have visited, is stored. Each time you visit our website - provided that you have given us your consent to store information on your terminal device (pursuant to Section 25 TTDSG - Teleservices Data Protection Act) and to display interest-relevant advertising pursuant to Art. 6 (1)a GDPR - personal data, including your IP address, is transferred to Google. This personal data is stored by Google. In some circumstances, Google passes this personal data collected via the technical process onto third parties.
You can prevent the use of cookies at any time by selecting the appropriate settings in the used internet browser and thus permanently object to the use of cookies.
According to COMMISSION IMPLEMENTING DECISION (EU) 2021/914 of 04.06.2021 on standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation 2016/679 of the European Parliament and of the Council, data transfers to the USA are based on standard contractual clauses. Google has appointed us a representative in Ireland. We have concluded contracts which regulate data processing within the EU. If Google does not store your data within the EU, Google Ireland Ltd. is responsible concluding standard contractual clauses with the respective partner.
Furthermore, the data subject has the option to object to interest-based advertising by Google. To do this, please use the following link: www.google.de/settings/ads.
You can get more information and Google's applicable privacy policy at https://www.google.de/intl/de/policies/privacy/.
Online marketing
DoubleClick
We have integrated components of the company DoubleClick by Google on our website.
DoubleClick is a brand of Google under which mainly special online marketing solutions are marketed to advertising agencies and publishers.
The use of this component is based on Art. 6 (1) a GDPR. The processing is only legally possible on the basis of consent granted by you. We obtain this consent by means of what is known as a consent banner, which appears immediately after you access our website. You can prevent the use of cookies at any time by selecting the appropriate setting on the internet browser used and thus permanently object to the use of cookies. The operating company of DoubleClick by Google is Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA represented in the EU by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.
DoubleClick by Google transmits data to the DoubleClick server with each impression as well as with clicks or other activities. Each of these data transfers triggers a cookie request to your browser. If the browser accepts this request, DoubleClick puts a cookie in your system. The purpose of the cookie is to optimise and display advertising. Among other things, the cookie is used to place and show user-relevant advertising as well as to create reports on advertising campaigns or to improve them. Furthermore, the cookie serves to avoid multiple displays of the same advertisement.
DoubleClick uses a cookie ID which is required to handle the technical process. For example, the cookie ID is required to display an advertisement in a browser. DoubleClick can also record which advertisements have already been displayed in a browser by using the cookie ID, in order to avoid duplicate placements. In addition, the cookie ID allows DoubleClick to record conversions. For example, conversions are recorded if a DoubleClick advertisement has previously been displayed to a user and the user subsequently makes a purchase on the advertiser’s website using the same internet browser.
A DoubleClick cookie does not contain any personal data. However, a DoubleClick cookie can contain additional campaign identifiers. A campaign identifier serves to identify the campaigns with which the user has already been in contact.
Every time you visit an individual page of this website on which a DoubleClick component has been integrated, your internet browser is automatically triggered by the respective DoubleClick component to transfer data to Google for the purposes of online advertising and the settlement of commissions. As part of this technical process, Google obtains knowledge of data that Google also uses to generate commission settlements. Among other things, Google can track that you have clicked on certain links on our website.
You can prevent the use of cookies at any time by selecting the appropriate settings in the used internet browser and thus permanently object to the use of cookies. In addition, cookies that have already been set by Google can be deleted at any time via an internet browser or other software programs.
You can get more information and DoubleClick by Google's applicable privacy policy at https://www.google.com/intl/de/policies/.
Interest-based advertising – Sojern
We use components on our website that allow us to track your activity on our website and provide you with relevant advertisements from us and other advertisers on unrelated websites.
The provider of this component is Sojern INC. 225 California Street, 94111 San Francisco.
This advertising service used pixel tags (web beacons), cookies, and other tracking technologies in order to collect and store non-personal information about your visit to our website. When you visit our website using your mobile device, an advertising service can also collect the unique identifier or location of your device and try to synchronise your visit to a mobile website with other website visits.
Sojern INC. puts a cookie in your system. The cookie placed does not tell Sojern who you are as a person and where you live. The information in cookies is used to tailor online advertisements to individuals who share certain interests or preferences with members of a pooled group, for reports and analyses or services and more.
Through Sojern, personal data and information is processed, which can be information associated with a unique online identifier such as a cookie ID, mobile device ID, hashed email address, advertising ID, and customer ID numbers assigned by companies, information associated with an individual's device, such as IP address, device type, browser type, date and time stamp of clicks and web visits, visited URLs and other technical information; information associated with an individual's travel, such as number and type of travellers, currency/tariffs/prices/fees, search and booking information (e.g. departure and arrival dates and destination country or city), information on rewards or loyalty programme and accommodation or service preferences (e.g. room, aircraft seat, or car type as well as preferences for facilities and amenities).
If you are provided with a relevant advertisement on another website based on the data collected on our site, this is called an “interest-based” advertisement and has a blue “AdChoices” icon in the top right corner. If you click on this icon, you will discover more about the interest-based advertising service and the option to deactivate interest-based advertisements.
We do not have access to these advertising services nor any control over how these cookies are used in placing interest-based advertisements. However, you can reject the use of this information by clicking here: https://www.aboutads.info/choices
Please note that if you deactivate this you will continue to see advertisements, but they may not be geared towards your travel interests.
The use of this component is based on Art. 6 (1) a GDPR. The processing is only legally possible on the basis of consent granted by you. We obtain this consent by means of what is known as a consent banner, which appears immediately after you access our website. You can prevent the use of cookies at any time by selecting the appropriate setting in the used internet browser and thus permanently object to the use of cookies.
You can revoke your consent at any time with effect for the future without the previous data processing becoming unlawful.
For data processing, we use the external service provider Sojern INC. According to COMMISSION IMPLEMENTING DECISION (EU) 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council, data transfers to the USA are currently based on standard contractual clauses. We have agreed the standard contractual clauses with the provider of the component.
The services of Sojern INC. are explained in more detail at https://www.sojern.com/privacy/product-privacy-policy/
Plugins
Flickr
We use plugins from the photo service Flickr on our website. This is a service by Flickr Inc., 67 E Evelyn Ave #200, Mountain View, CA 94041, USA. Flickr images are loaded by our server from Flickr. By clicking on an image, the Flickr website opens; Flickr can then record and use your IP address as well as information about the end device used. It also cannot be ruled out that Flickr tries to store cookies on the end devices used. As a result, Flickr can be informed about the visit to certain sites on the internet. Users who are simultaneously registered with Flickr can be identified by Flickr. According to COMMISSION IMPLEMENTING DECISION (EU) 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council, data transfers to the USA are based on standard contractual clauses, see here https://www.flickr.com/help/dpa.
Vimeo
On some of our webpages we use plugins from the provider Vimeo, through which we can display videos to you directly on our website. When you visit the webpages of our internet presence provided with such a plugin, a connection to the Vimeo servers is established. Through this, your personal data is transmitted to the Vimeo server: IP address, browser type, operating system, websites visited, device information, session duration, bounce rate.
Vimeo is a video platform operated by Vimeo, LLC with headquarters in 555 West 18th Street, New York, New York 10011.
Data processing by Vimeo on our website takes place with your consent pursuant to Art. 6 Para. 1 lit. a GDPR. You can withdraw your consent at any time.
According to COMMISSION IMPLEMENTING DECISION (EU) 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council, data transfers to the USA are based on standard contractual clauses.
If you are logged in as a member of Vimeo, Vimeo assigns this information to your personal user account. When using the plugin, e.g. clicking on the start button of a video, this information is also assigned to your user account. You can prevent this assignment by logging out of your Vimeo user account before using our website and deleting the respective Vimeo cookies.
You can find more information on data processing and information on data protection by Vimeo here: https://vimeo.com/privacy, https://vimeo.com/cookie_policy, https://vimeo.com/privacy#international_data_transfers_and_certain_user_rights.
Payment options
Klarna
We have integrated components of the company Klarna on our website.
Klarna is an online payment service provider which enables purchase on account or flexible instalments. Furthermore, additional services such as buyer protection or an identity or credit check are offered.
The operating company of Klarna is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden.
If you select either “purchase on account” or “instalment purchase” as a payment option during the ordering process in our online shop, your data will be automatically transmitted to Klarna. By selecting one of these payment options, you consent to the transmission of personal data required for the processing of the purchase on account or instalment purchase or for the identity and credit check.
The personal data transmitted to Klarna is generally forename, surname, address, date of birth, gender, email address, IP address, telephone number, mobile number, as well as other information which is necessary for the processing of a purchase on account or instalment purchase. Personal data associated with the respective order is also necessary for the processing of the purchase contract. In particular, there may be a mutual exchange of payment information such as bank details, card number, expiry date and CVC code, number of articles, information on goods and services, price and tax information, information on previous buying behaviour or other information concerning your financial situation.
The aim of the data transmission is, in particular, to verify identity, payment administration and fraud prevention. We will transfer personal data to Klarna in particular if there is a legitimate interest for the transfer. The personal data exchanged between Klarna and us is transmitted by Klarna to credit agencies. The purpose of this transmission is to verify identity and credit.
Klarna also passes on the personal data to affiliated companies (Klarna Group) and service providers or subcontractors, provided that this is necessary for the fulfilment of contractual obligations, or the data is to be processed on behalf of Klarna.
In order to decide on the establishment, implementation, or termination of a contractual relationship, Klarna collects and uses data and information about your previous payment behaviour as well as probability values for your future behaviour (known as scoring). The scoring is calculated on the basis of scientifically recognised mathematical-statistical methods.
You have the option to revoke consent for the handling of personal data at any time vis-à-vis Klarna. A revocation does not affect personal data that has to be processed, used or transmitted for (contractual) payment processing.
The applicable data privacy policy of Klarna can be found at https://www.klarna.com/de/datenschutz/.
Sofortüberweisung
We have integrated components of the company Sofortüberweisung on our website.
Sofortüberweisung is a payment service which enables a cashless payment of products and services on the internet. Sofortüberweisung represents a technical procedure through which the online retailer immediately receives payment confirmation. This allows the retailer to deliver goods, services, or downloads to the customer immediately after the order has been placed.
The operating company of Sofortüberweisung is SOFORT GmbH, Fußbergstraße 1, 82131 Gauting, Germany.
If you select “Sofortüberweisung” (Pay Now) as a payment option during the ordering process in our online shop, your data will be automatically transmitted to Sofortüberweisung. By selecting this payment option, you consent to the transmission of personal data required for the processing of payment.
For the purchase transaction via Sofortüberweisung, the buyer transmits the PIN and TAN to Sofort GmbH. Sofortüberweisung then performs a transfer to the online retailer after technical verification of the account balance and retrieval of further data to check the account coverage. The online retailer is then automatically notified of the execution of the financial transaction.
The personal data exchanged with Sofortüberweisung includes forename, surname, address, email address, IP address, telephone number, mobile number, or other information which is necessary for the processing of the payment. The aim of the data transmission is payment processing and fraud prevention. The controller will also then transmit other personal data to Sofortüberweisung if there is a legitimate interest for the transmission. The personal data exchanged between the controller and Sofortüberweisung may be transmitted by Sofortüberweisung to credit agencies in some circumstances. The purpose of this transmission is to verify identity and credit.
If necessary, Sofortüberweisung passes on the personal data to affiliated companies and service providers or subcontractors, provided that this is necessary for the fulfilment of contractual obligations or the data is to be processed on behalf of Sofortüberweisung.
You have the option to revoke consent for the handling of personal data at any time vis-à-vis Sofortüberweisung. A revocation does not affect personal data that has to be processed, used or transmitted for (contractual) payment processing.
The applicable data privacy policy of Sofortüberweisung can be found at https://www.sofort.com/de/datenschutzhinweise/abgerufen