I.

§ 1 INFORMATION ON COLLECTION OF PERSONAL DATA

(1) In the following we would like to give some information on the collection of personal data when using our website. Personal data are defined as any information referring to you personally, for example name, address, e-mail addresses, user’s behaviour.

(2) Responsible according to Article 4, paragraph 7 of the EU Basic Regulation on Data Protection (GDPR) is Tourisim GmbH, Fabian Scholz, Pflanzstr. 40, 45359 Essen (please see our imprint).

(3) When contacting us via email or via a contact form, the data provided by you (your email address, if necessary your name and your telephone number) are stored in order to be able to respond to your questions. All of the data being concerned in this context will be deleted by us after their storage is no longer required or we restrict their processing in case there are legal duties to preserve records.

(4) If we like to involve contracted providers or if we like to use your data for advertising purposes you will be informed in detail about the respective activities, as described below. There, we also name the criteria laid down concerning storage time.

§ 2 YOUR RIGHTS

(1) You have the following rights against us concerning the personal data concerning yourself:
– Right to information,
– Right to correction and deletion,
– Right to restriction of processing,
– Right to objection to the processing,
– Right to data portability.

(2) Furthermore, you have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

§ 3 COLLECTION OF PERSONAL DATA WHEN VISITING OUR WEBSITE

(1) If you only use the website for information, that means if you do not register on the website or transfer any other information to us, we will only collect the personal date being transmitted from your browser to our server. If you like to view our website, we will collect the following data being technically necessary for us in order to be able to display our website to you and to guarantee stability and security (legal basis is Article 6, paragraph 1, Sentence 1. lit. f GDPR):
– IP-address
– Date and time of the inquiry
– Time zone difference to Greenwich Mean Time (GMT)
– Contents of the request (concrete site)
– Access status/HTTP status code
– Quantity of data transmitted in each case
– Website from which the request is sent
– Browser
– Operating system and its interface
– Language and version of the browser software.

(2) In addition to the aforementioned data, cookies will be stored on your computer if you use our website. Cookies are small text files that are saved on your hard disk assigned to the browser used by you and by which the location setting the cookie (here us) receives certain information. Cookies cannot execute programs or infect your computer with a virus. They aim at ensuring that, in general, the Internet sites become increasingly user-friendly and more effective.

(3) Use of cookies:
a) This website uses the following kinds of cookies. Their scope and functioning of cookies will be explained in the following:
– Transient cookies (see b)
– Persistent cookies (see c).
b) Transient cookies will be automatically deleted as soon as you close the browser. In particular, these include session cookies. They store a so-called session ID with which various requests of your browser can be assigned for the joint session. As a result, your computer can be recognized when you return to our website. The session cookies will be deleted as soon as you log out or close the browser.
c) Persistent cookies will be deleted automatically after a specified time period varying depending on the kind of cookie. You can delete the cookies in the security settings of your browser at any time.
d) You may configure your browser settings according to your requirements and, for example, refuse to accept cookies from third parties or any other cookies. Please note that you may probably not be able to use all functions of this website.
e) We use cookies in order to be able to remember who you are, in case you have an account with us. Otherwise you would have to log in again every time you visit the website.
f) The flash cookies used are not captured via your browser, but via your Flash plugin. Furthermore, we use HTML5 storage objects placed on your terminal equipment. These objects store the necessary data independent of the browser you are using and have no automatic expiry date. If you do not want any processing of the flash cookies, you will have to install an appropriate add-on, for example the Adobe-Flash-Killer-Cookie for Google Chrome. You can block the use of HTML5 storage objects by using private browsing. We also recommend that you delete your cookies and the browsing history regularly manually.

(4) Data collection on this website:

II.

USING OUR ONLINE SHOP

(1) If you wish to place an order via our online shop, it will be necessary for the conclusion of contract to supply your personal data needed in order to process the order. All information being required for processing the transactions will be marked separately, any additional information is voluntary. We process the data you have provided in order to process the order. For this, we can pass your payment data to our house bank. Legal basis of this is Article 6, paragraph 1, Sentence 1 lit. b GDPR.
You may establish a customer account on a voluntary basis. This customer account allows us to store your data for further future purchases. When you establish an account under „My account“, the data provided by you will be revocably stored. You may always delete any additional data, including your user account, using the customer area.
We can also process the data provided by you in order to inform you about other interesting products from our portfolio or to send you e-mails with technical information.

(2) On the basis of commercial rules and tax laws we are obliged to store your address data, payment details and order data for a period of ten years. However, we limit processing after two years, which means that your data will only be used in compliance with the statutory obligations.

(3) The ordering process is encrypted using TLS in order to prevent unauthorized access to your data, especially your financial details, by third parties.

III.

PAYMENT SERVICE PROVIDERS

We offer various payment methods for using our online shop and select from a variety of different payment service providers. Depending on the payment method you may choose, different data will be submitted to the respective payment service provider. Legal basis for the transfer of data is Article 6 paragraph 1 Sentence 1 lit. a GDPR. In the following you will find a list of our payment service providers.

(1) PayPal
If you choose PayPal as your payment type, your personal data will be transmitted to PayPal. The prerequisite for the use of PayPal is opening a PayPal account. Using respectively opening a PayPal account requires, among other things, the provision of name, address, telephone number and e-mail address to PayPal. Legal basis for the transfer of data is Article 6 paragraph 1 lit. a GDPR (consent) and Article 6 paragraph 1 lit. b GDPR (processing for the performance of a contract).

Provider of the payment service PayPal is:

PayPal (Europe) S.à r.l. et Cie, S.C.A.
22-24 Boulevard Royal
L-2449 Luxembourg
E-Mail: impressum@paypal.com

With the payment option PayPal you agree to transmit personal data such as name, address, telephone number and e-mail address to PayPal. The respective information on collection of personal data issued by PayPal will give you an overview of which further data PayPal collects. This can be found under: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=en_DE

(2) Klarna
If you choose Klarna as your payment type, your personal data will be transmitted to the provider of Klarna. Legal basis for the transfer of data is Article 6 paragraph 1 lit. a GDPR (consent) and Article 6 paragraph 1 lit. b GDPR (processing for the performance of a contract).

Provider of the payment service Klarna is:

Klarna Bank AB (publ)
Sveavägen 46
111 34 Stockholm
Sweden
Telephone: 0046 8-120 120 00
Fax: 0046 8-120 120 99
Contact: info@klarna.de

Klarna requests the following data:
– Name, date of birth, title, billing and delivery address, e-mail address,
mobile phone number
– Details of ordered products
– Details of income, credit obligations, and payment injunctions
– Site-related information
– IP address

Detailed information on the data protection regulations of Klarna Bank AB (publ) can be found under https://www.klarna.com/uk/privacy-policy/

(3) PayPal / Braintree
If you decide to use a method of payment that is processed by payment service provider Braintree, this payment will be processed by the payment service provider PayPal (Europe) S.á.r.l. et Cie, S.C.A. („Braintree“), 22-24 Boulevard Royal, L-2449 Luxembourg, einer Tochter der Paypal Inc., 2211 North First Street, San Jose, CA 95131, USA, to which we shall pass on the information that you provided us during the order process as well as the details relating to your order (name, address, account number, BIC, credit card number if applicable, invoice amount, currency and transaction number) in accordance with Article 6 (1) lit. b GDPR. Your data shall be passed on exclusively for the purpose of payment processing by the payment service provider Braintree and only insofar as passing on such data is necessary in order to process the payment. More information about data protection by Braintree can be found at https://www.braintreepayments.com/de/legal/braintree-privacy-policy.

IV.

1. USE OF GOOGLE ANALYTICS

(1) This website uses Google Analytics, a web analysis service of Google Inc. („Google“). Google Analytics uses so-called „cookies“, text files that are stored on your computer and which allow analysis of your use of the website. The information about your usage of this website generated by the cookie will generally be transmitted to a Google server in the USA and stored there. In the case of activation of the IP anonymisation on this website, your IP address will be abbreviated by Google previously though within the member states of the European Union or in other countries which are contracting parties to the Agreement on the European Economic Area. It is only in exceptional cases that the complete IP address will be transmitted to a Google server in the USA and abbreviated there. Google will use this information – by order of the website operators – to evaluate your use of the website, to compile reports on website activities and to provide other services related to the use of the website and of the Internet for the website operators.

(2) The IP address transmitted by your browser in the frame of Google Analytics will not be combined with other Google data.

(3) You can prevent installation of the cookies by selecting the appropriate settings on your browser, however please note that if you do this you might not be able to make full use of all the functions of this website. You can also prevent data capture for Google and processing of these data by Google generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the web browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en

(4) This website uses Google Analytics with the „_anonymizeIp()“ function. This ensures that IP addresses will be processed in truncated form only and prevents them from being traced to a specific user. Therefore, in the event that a personal reference is established via your personal data, this personal reference will be excluded at once and all personal information will be immediately deleted.

(5) We use Google Analytics to analyse the use of our website and to be able to improve its quality. We are able to improve our service and to make our offers even more interesting for you, the user, by the statistics obtained. With regard to the exceptional cases that personal data are transferred into the USA, Google has submitted to the EU-US Privacy Shield,
https://www.privacyshield.gov/EU-US-Framework
Legal basis is Article 6 paragraph 1 sentence 1 lit. a GDPR.

(6) Information on third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: https://www.google.com/analytics/terms/us.html
Overview on data protection:
http://www.google.com/intl/en/analytics/learn/privacy.html
Plus the privacy statement:
http://www.google.de/intl/en/policies/privacy

(7) This website uses Google Analytics also in order to carry out a cross-device analysis concerning the flow of visitors with the help of a user ID. You can disable the cross-device analysis regarding your website under „my account“, „personal details“.

(8) Alternatively to the browser add-on or within browsers of mobile devices, please click on this link in order to prevent collection of data by Google Analytics within this website in the future.

Here, an opt-out cookie has been stored on your device. If you delete your cookies, you will have to click on the link again.

2. USE OF HOTJAR

This website uses the Hotjar web analysis service of Hotjar Ltd. Hotjar Ltd. is a European company based in Malta (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe Tel.: +1 (855) 464-6788)

This tool enables us to retrace movements on our websites, on which Hotjar is deployed (so-called heatmaps). For example, it explains how far users scroll and which buttons they click how often. Furthermore, it is possible, when using this tool, to directly get feedback from our website users.

We are so provided with valuable information to make our websites even faster and more customer-friendly. The above analysis is carried out on the basis of our legitimate interests in optimization and marketing purposes and in interest-based design of our website in accordance with art. 6 (1) f GDPR. We pay particular attention to the protection of your personal data when using this tool. Therefore, we only can retrace which buttons you click and how far you scroll. Areas of sites that may contain personal information about you or third parties are automatically hidden by Hotjar and cannot be retraced at any time.

With the help of a "Do Not Track Headers", Hotjar gives every user the opportunity to prevent the Hotjar tool from being used, so that no data about the visit of the respective website is recorded. It is a setting that all common browsers in up-dated versions support. To this end, your browser sends a request to Hotjar, demanding the tracking of the respective user to be deactivated. If you visit our website with different browsers/computers, you must use the "Do Not Track Header" for each browser/computer separately.

For more detailed instructions and information about your browser, please refer to: https://www.hotjar.com/opt-out
For more information about Hotjar Ltd. and the Hotjar tool, please refer to: https://www.hotjar.com
The privacy policy of Hotjar Ltd. can be found at: https://www.hotjar.com/privacy

V.

1. AWIN

On the basis of our legitimate interest (i.e. interest in the economic operation of our online service in accordance with Article 6 paragraph 1 lit. f. GDPR), we participate in the partner program of AWIN AG, Eichhornstrasse 3, 10785 Berlin, Deutschland, which designed to provide a medium for websites through which advertising cost compensation could be gained by placing advertisements and links to AWIN (so-called affiliate system). AWIN uses cookies in order to trace the source of the conclusion of the contract. AWIN can see, among other things, that you clicked on the partner link on this website and subsequently concluded the contract with or via AWIN.

More details regarding the use of data by AWIN and possibilities to object are contained in the company’s privacy statement: https://www.awin.com/gb/legal.

VI.

USE OF GOOGLE ADWORDS CONVERSION

(1) We use the service of Google AdWords in order to draw attention to our attractive offers on external websites by means of advertising material (so-called Google AdWords. We are able to evaluate how successful the single advertising measures are in relation to the data of the advertising campaigns. In doing so, we are pursuing the aim of displaying advertisements you are interested in, to make our website more attractive for you and to achieve fair calculation of advertising costs.

(2) This advertising material is forwarded by Google via so-called „ad servers“. Here, we use ad server cookies that make it possible to measure specific parameters regarding performance measurement, like flash of the adverts or clicks by the user. In case you reach our website through an advertisement on Google, Google AdWork will leave a cookie on your computer. These cookies generally become invalid after 30 days and are not intended to identify you personally. As a rule, the unique cookie ID, number of ad impressions per placement (frequency), final impression (relevant for post view conversions) and opt-out details (mark that the user does not want to be addressed any more) are stored as analytical parameters together with this cookie.
(3) These cookies enable Google to recognize your Internet browser. Whenever a user visits certain pages of a website of an AdWork customer and the cookie installed on his or her computer has not expired yet, Google and the customer can see that the user has clicked on the advertisement and has been forwarded to this site. A different cookie is assigned to each AdWork customer. Thus, cookies cannot be traced via the websites of AdWork customers. We do not collect and process personal data concerning the aforementioned advertising measures ourselves. Google only provides us with statistical evaluations. These evaluations help us to determine which of the advertising campaigns employed are particularly effective. We do not receive any further data concerning the employment of the advertising measures and, in particular, we cannot identify the user on the basis of this information.

(4) With the help of the employed marketing tool your browser will automatically establish a direct connection to the Google server. We have no influence on the amount and the further usage of the data collected by Google using this tool and we would like to inform you according to the state of our knowledge: By employing AdWords Conversion Google receives the information that you have called up the relevant part of our Internet website or that you have clicked on one of our advertisements. Provided that you are registered with a Google service, Google is able to assign your visit to your account. Even if you are not registered with Google respectively if you are not logged in, it may be possible that the provider finds out your IP address and stores it.

(5) You can prevent participation in this tracking process in a number of ways:
(a) By selecting the appropriate adjustment of your browser software, in particular the suppression of third-party cookies helps not to receive any advertisements from third-party providers;
(b) By deactivating the cookies for conversion tracking – if you reset your browser to refuse cookies from the domain „www.googleadservices.com“,
https://www.google.com/settings/ads, whereby these settings are deleted if you delete the cookies;
(c) By deactivating the interest-based advertising of the suppliers being a part of the self-regulatory campaign „About Ads“ via the link http://www.aboutads.info/choices, whereby these settings are deleted if you delete the cookies;
(d) By permanent deactivating in your browsers Firefox, Internet Explorer or Google Chrome via the link http://www.google.com/settings/ads/plugin. Please note that if you do so, you may not be able to use the full functionality of this offer.

(6) Legal basis is Article 6 paragraph1 sentence 1 lit. a GDPR. More details about Google data protection can be found here: http://www.google.com/intl/en/policies/privacy and https://services.google.com/sitestats/en.html. Alternatively you may visit the website of Network Advertising Initiative (NAI) under http://www.networkadvertising.org . Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

VII.

USE OF THE REMARKETING – OR „AUDIENCE TARGETING“ – FUNCTION OF GOOGLE INC.

On our website we use the remarketing – or „similar target groups“ – function of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; „Google“). This function serves the purpose of analysing visitor behaviour and visitor interest.
Google uses cookies in order to carry out an analysis of web site usage being the basis of creating interest-related advertisements. With the help of the cookies the visits to the website as well as anonymised data about the usage of the website are collected. Personal data of the website’s visitors are not stored. If you subsequently visit another website within the Google Display network, you will be shown advertising flashes which are highly likely to reflect previously accessed product and information areas.
Your data are also transferred to the USA. An adequacy decision of the European Commission For data transfers to the USA is available.
Processing is carried out on the basis of Article 6 (1) lit. f GDPR because of the legitimate interest to deliver targeted advertising to visitors of the supplier’s website by placing personalized, interest-related advertising while they are visiting other websites within the Google Display Network.
You have the right to object to the processing of personal data concerning yourself based on Article 6 (1) f GDPR at any time on grounds relating to your particular situation.
Therefore you might permanently deactivate the use of cookies by Google by clicking on the following link and by downloading and installing the plug-in available there: https://support.google.com/ads/answer/7395996?hl=en
Alternatively you can deactivate the usage of cookies by third-party providers by going to the opt-out page of the Network Advertising Initiative under https://www.networkadvertising.org/choices/ and follow the further information concerning opt-out given there.
For further information concerning Google Remarketing and the relevant privacy statement please contact: https://www.google.com/privacy/ads/

VIII.

DOUBLECLICK BY GOOGLE

(1) This website keeps on using the online marketing tool DoubleClick by Google. DoubleClick uses cookies to place user-relevant advertisements, to improve the reports concerning campaign performance or to avoid that a user sees the same advertisements several times. Google collects information via a cookie ID about which advertisements are placed in which browser and can thus avoid that these will be displayed multiple times. Additionally, DoubleClick is capable of collecting so-called conversions being related to ad requests with the help of cookie ID’s. That is the case, for example, if the user sees a DoubleClick ad and later visits the advertiser’s website and buys something there using the same browser. According to Google DoubleCLick, cookies do not contain any personal information.

(2) By means of the employed marketing tool, your browser automatically creates a direct connection with the Google server. We have no influence on the amount and the further usage of the data collected by Google using this tool and we would like to inform you according to the state of our knowledge: By employing DoubleClick Google receives the information that you have called up the relevant part of our Internet website or that you have clicked on one of our advertisements. Provided that you are registered with a Google service, Google is able to assign your visit to your account. Even if you are not registered with Google respectively if you are not logged in, it may be possible that the provider finds out your IP address and stores it.

(3) You can prevent participation in this tracking process in a number of ways:
(a) By selecting the appropriate adjustment of your browser software, in particular the suppression of third-party cookies helps not to receive any advertisements from third-party providers;
(b) By deactivating the cookies for conversion tracking – if you reset your browser to refuse cookies from the domain „www.googleadservices.com“,
https://www.google.com/settings/ads, whereby these settings are deleted if you delete the cookies;
(c) By deactivating the interest-based advertising of the suppliers being a part of the self-regulatory campaign „About Ads“ via the link http://www.aboutads.info/choices, whereby these settings are deleted if you delete the cookies;
(d) By permanent deactivating in your browsers Firefox, Internet Explorer or Google Chrome via the link http://www.google.com/settings/ads/plugin. Please note that if you do so, you may not be able to use the full functionality of this offer.

(4) Legal basis is Article 6 paragraph1 sentence 1 lit. f GDPR. More details about DoubleClick can be found here: https://www.google.com/doubleclick as well as about Google data protection in general: https://www.google.de/intl/en/policies/privacy. Alternatively you may visit the website of Network Advertising Initiative (NAI) under http://www.networkadvertising.org . Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

X.

TRUSTED SHOPS

For displaying our „Trusted Shops“ quality label and the possible collected reviews as well as for offering the Trusted Shops products for buyers after an order, the Trusted Shop Trustbadge is integrated in the website. It serves to safeguard our predominantly legitimate interests in an optimal marketing of our service offer within the framework of balancing the various interests in accordance with Article 6 Paragraph 1 sentence1 lit. f GDPR. The Trustbadge and the services promoted by it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Köln. When retrieving the Trustbadge, the web server automatically stores a so-called server log file containing, for example, your IP address, date and time of the retrieval, data volume transferred and the requesting provider (access data) and documents the retrieval. These access data will not be evaluated and will be automatically overwritten seven days after the end of your visit of the site at the latest. Any additional personal details will only be transferred to Trusted Shops if you have expressively consented to this, if you decide to use Trusted Shops products after having placed an order or if you have already registered as a user. In this case the relevant contractual agreement between yourself and Trusted Shops applies.

GOOGLE CUSTOMER REVIEWS

We work together with Google LLC under the „Google customer reviews“ programme, the provider is Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA („Google“). The programme gives us the opportunity to get customer reviews from users of our website. Here, they will be asked after their purchase on our website if they like to participate in an e-mail Google survey. If they give their consent, in accordance with Article 6 paragraph 1 lit. a GDPR, we forward their e-mail address to Google. They will receive an e-mail from Google customer reviews asking them to evaluate their shopping experience on our website. The review given by them will subsequently be collected together with our other reviews and will be displayed in our logo of Google customer reviews as well as in our merchant centre and, in addition, it will be used for Google vendor evaluation.
You may withdraw your consent at any time by sending a message to the data controller or to Google.
Google LLC based in the USA is certified for the US-European Agreement on Data Protection „Privacy Shield“ guaranteeing compliance with the applicable EU level of data protection.
The link below gives you further information regarding Google data protection in connection with the programme Google customer reviews: https://support.google.com/merchants/answer/7188525
For further details regarding Google vendor evaluation please read the following link: https://support.google.com/adwords/answer/2375474