Privacy policy statement for the online booking tool DIRS21

This website is provided to you by TourOnline AG, Borsigstraße 26, 73249 Wernau, Germany (www.dirs21.de), hereinafter abbreviated as "TOAG", provided. The collection and use of your data always takes place in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 (GDPR), the Federal Data Protection Act (BDSG), and the Telemedia Act (TMG). In the following, we – as the data controller – inform you about which data is collected by us and how we process this data.

1) Personal data

Personal data within the meaning of the GDPR are all information that relates to an identified or identifiable natural person; an identifiable natural person is one who can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more special characteristics that express the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person. Personal data is only stored to the extent necessary for the provision of the booked service, compliance with legal requirements, or for the purpose specified thereafter.

2) Anonymized Data / Logfiles

You can access this online booking tool ("OBT") without the collection of personal data being required. However, certain anonymized data is stored with each access, such as which offer was accessed. This data is not personal and therefore does not fall under the legal regulations of the GDPR or the BDSG.

The TOAG collects data on accesses to the OBT and stores them as "server log files". The following data is logged:

Visited website, time of access, amount of data sent in bytes, source/referral, how you accessed the page, browser used, operating system used, IP address used

The collected data is used solely for statistical evaluations and to improve the website. However, the website operator reserves the right to subsequently check the server log files if there are specific indications of unlawful use.

The collection of anonymous data is solely for statistical evaluation to improve our services. Please refer to the section "Right to Information / Right of Withdrawal".“

Purpose of collecting personal data

The collection of personal data is essential when booking a trip or other service via our OBT, for which the processing of personal data is essential.

In accordance with legal regulations and in the spirit of data minimization, only data that is specifically required for the provision of these services is usually collected. If we ask for additional information in our forms, providing this information is always voluntary and clearly marked as such.

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must be stored for the duration of the session. The storage in log files is also carried out to ensure the functionality of the website. In addition, the data is used for optimizing the website and ensuring the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. These purposes also constitute our legitimate interest in data processing according to Art. 6 para. 1 lit. f GDPR.

If you would like to contact a host directly via the contact form displayed on their profile, the data you provide for this purpose will be stored and processed by us and transmitted to the respective host for the purpose of contacting you. No data will be shared with third parties.

In the event of booking a trip or other service, the data collected for this booking will be used within legal requirements for advertising and statistical purposes.

4) Legal basis for the processing of personal data

If we obtain the consent of the data subject for processing personal data, Art. 6 para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

When processing personal data necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations required for the performance of pre-contractual measures.

If processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

If the processing is necessary to protect a legitimate interest of our company or a third party, and if the interests, fundamental rights, and freedoms of the data subject do not override the first-mentioned interest, Article 6(1)(f) GDPR serves as the legal basis for the processing.

5) Disclosure of personal data to third parties

The transfer of your personal data is carried out exclusively within the relevant, in particular data protection and competition law requirements.

If this is necessary for the provision of the contractual service owed by us or legal obligations, your data may also be disclosed to subcontractors or service providers to provide the service on behalf of us (e.g. technical processing of postal and email dispatch, payment processing, customer service).

In addition, the data will be shared with individuals or companies to process your booking, especially with airlines, tour operators, hotels, travel agencies, car rental companies, cruise lines, authorities, etc. Please note that the data protection regulations at the location of these individuals and companies may differ from those in Germany.

Disclosure and transmission of your data to third parties will also take place to the extent that we are required to do so by law or as a result of a legally concluded judicial proceeding.

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data have been provided.

6) Storage and deletion of data

Your personal data will be stored for the purposes mentioned under the section "Purpose of collecting personal data". The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may also occur if provided for by the European or national legislator in Union regulations, laws, or other provisions to which the controller is subject. The legislator has enacted various retention obligations and periods. Data will also be blocked or deleted when a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for concluding a contract or fulfilling a contract

7) Use of cookies

We use cookies (small computer files with text information that the web server sends to your internet browser) to improve your experience when visiting our online offerings. For example, some notices only appear once if you allow us to set a cookie. Our cookies also have an expiration date. If you manually delete your cookies before they expire, you will receive a new one on your next visit to the site, unless you block the storage of the cookie.

The technical specifications stipulate that only the server can read a cookie sent by it. We assure you that we do not store any personal data in cookies.

The use of our services is only possible to a limited extent without accepting cookies. We therefore recommend enabling cookies permanently for our website. Most internet browsers are set to accept cookies automatically. However, you can disable the storage of cookies and configure your internet browser to notify you when cookies are being sent.

The legal basis for processing personal data using cookies is Art. 6 para. 1 lit. f GDPR.

The legal basis for processing personal data using cookies for analytical purposes is Art. 6 para. 1 lit. a GDPR if the user has given consent.

8) Use of Google Analytics

We use Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses so-called "cookies", which are text files stored on your computer and allow an analysis of your website usage. The information generated by the cookie about your use of this website (including your IP address) is transmitted to a Google server in the USA and stored there. Google will use this information to evaluate your use of the website, compile reports on website activity for website operators, and provide other services related to website usage and internet usage. Google may also transfer this information to third parties where required by law or where third parties process this data on behalf of Google. Google will never associate your IP address with other Google data. You can prevent the installation of cookies by adjusting your browser settings; however, please note that in this case you may not be able to fully utilize all functions of this website. By using this website, you consent to Google processing the data collected about you in the manner and for the purposes described above.

Die Google Trackingcodes dieser Website verwenden die Funktion „_anonymizeIp()“, somit werden IP-Adressen nur gekürzt weiterverarbeitet, um eine direkte Personenbeziehbarkeit auszuschließen. Der Datenerhebung und -speicherung kann jederzeit mit Wirkung für die Zukunft widersprochen werden. Durch Klicken des Buttons „Deaktivieren“ wird das Tracking vollständig unterbunden. Damit der Widerspruch dauerhaft vorgenommen wird, muss der verwendete Browser Cookies akzeptieren. Alternativ kann der Datenerhebung durch den Einsatz eines Google Browser-Plugins widersprochen werden, um zu verhindern, dass die durch Cookies gesammelten Informationen (inklusive Ihrer IP-Adresse) an die Google Inc. gesendet und von der Google Inc. genutzt werden. Folgender Link führt Sie zu dem entsprechenden Plugin: https://tools.google.com/dlpage/gaoptout?hl=de

9) Use of Google reCAPTCHA

Unsere Onlinepräsenz verwendet zum Schutz ihrer Aufträge per Internetformular den Dienst reCAPTCHA des Unternehmens Google Inc. (Google). Die Abfrage dient der Unterscheidung, ob die Eingabe durch einen Menschen oder missbräuchlich durch automatisierte, maschinelle Verarbeitung erfolgt. Die Abfrage schließt den Versand der IP-Adresse und ggf. weiterer von Google für den Dienst reCAPTCHA benötigter Daten an Google ein. Zu diesem Zweck wird Ihre Eingabe an Google übermittelt und dort weiterverwendet. Durch die Nutzung von reCAPTCHA erklären Sie sich damit einverstanden, dass die von Ihnen geleistete Erkennung in die Digitalisierung alter Werke einfließt. Im Falle der Aktivierung der IP-Anonymisierung auf dieser Webseite wird Ihre IP-Adresse von Google jedoch innerhalb von Mitgliedstaaten der Europäischen Union oder in anderen Vertragsstaaten des Abkommens über den Europäischen Wirtschaftsraum zuvor gekürzt. Nur in Ausnahmefällen wird die volle IP-Adresse an einen Server von Google in den USA übertragen und dort gekürzt. Im Auftrag des Betreibers dieser Website wird Google diese Informationen benutzen, um Ihre Nutzung dieses Dienstes auszuwerten. Die im Rahmen von reCAPTCHA von Ihrem Browser übermittelte IP-Adresse wird nicht mit anderen Daten von Google zusammengeführt. Für diese Daten gelten die abweichenden Datenschutzbestimmungen des Unternehmens Google. Weitere Informationen zu den Datenschutzrichtlinien von Google finden Sie unter: https://www.google.com/intl/de/policies/privacy/.

10) Use of Google AdSense

This website uses Google AdSense, a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, to integrate advertisements. Google AdSense uses cookies and web beacons, invisible graphics that allow Google to analyze clicks on this website, traffic on this site, and similar information.

Die über Cookies und Web Beacons erhaltenen Informationen, Ihre IP-Adresse sowie die Auslieferung von Werbeformaten werden an einen Server von Google mit Standort in den USA übermittelt und dort gespeichert. Nähere Informationen über die Datenverarbeitung durch Google finden Sie unter https://www.google.com/privacypolicy.html.

By making appropriate settings in your internet browser, you can prevent the mentioned cookies from being stored on your PC. However, this may result in the content of this website not being able to be used to the same extent.

11) Use of Google Fonts

Wir verwenden Google Fonts und die Google Fonts API, um Schriften und Symbole visuell darzustellen. Bei der Nutzung von Google Fonts werden, soweit die Daten nicht auf den lokalen Servern unserer Onlinepräsenz gespeichert sind, von Google auch Daten über die Nutzung der Fonts-Funktionen durch Besucher der Webseiten erhoben, verarbeitet und genutzt. Nähere Informationen über die Datenverarbeitung durch Google können Sie den Datenschutzhinweisen von Google unter http://www.google.com/privacypolicy.html entnehmen. Dort können Sie im Datenschutzcenter auch Ihre Einstellungen verändern, so dass Sie Ihre Daten verwalten und schützen können. Die Nutzungsbedingungen von Google Fonts finden sie unter https://fonts.google.com/about# and https://policies.google.com/terms?hl=en

12) Right to information / right of withdrawal; other data subject rights

You have the right:

• According to Art. 15 GDPR, you have the right to request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the categories of personal data, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected from us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details
• to request the correction of inaccurate or completion of your personal data stored with us without delay in accordance with Art. 16 GDPR;
• to request the deletion of your personal data stored with us in accordance with Art. 17 GDPR, unless processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
• to request the restriction of processing your personal data in accordance with Art. 18 GDPR, to the extent that the accuracy of the data is disputed by you, the processing is unlawful, but you refuse their deletion and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
• pursuant to Art. 20 GDPR to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request transmission to another controller;
• to revoke at any time the consent you have given us in accordance with Art. 7 para. 3 GDPR. This means that we may no longer continue the data processing based on this consent for the future and
• According to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. In general, you can contact the supervisory authority at your usual place of residence or work or our company headquarters.

To revoke your consent for data usage, request information or correction, blocking or deletion, or exercise other data subject rights, please contact:

TourOnline AG

Borsigstraße 26

73249 Wernau

Email: info@dirs21.de

Phone: +49 (0) 7153 9250 0

Fax: +49 (0) 7153 9254 0

These rights are of course free of charge to you, without incurring higher transmission costs than for the basic rates.

Here is the translation for "Below we provide you with the contact address of the data protection officer of our company. Our data protection officer is:":

Lawyer Frank Hütten

Noll & Hütten Lawyers Partnership

c/o TourOnline AG

Borsigstraße 26

73249 Wernau

Email: datenschutzbeauftragter@dirs21.de

Phone: +49 (0) 7153 9250 0

Fax: +49 (0) 7153 9254 0

Please contact the data protection officers directly for the exercise of your data subject rights such as information, correction, blocking or deletion of your personal data, who will process your request immediately.

13) Security, Questions and Suggestions, Responsible

Security also depends on your system. You should always treat your access information confidentially, never allow passwords to be saved by the web browser, and close the internet browser window when you finish visiting our website. This way, you prevent third parties from accessing your personal data.

Use an operating system that can manage user rights. Also set up multiple users on your system within the family and never use the Internet with administrator rights. Use security software such as antivirus programs and firewalls and keep your system up to date.

The controller for this online booking tool ("OBT") within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States as well as other data protection provisions is:

TourOnline AG

Borsigstraße 26

73249 Wernau

Email: info@dirs21.de

Phone: +49 (0) 7153 9250 0

Fax: +49 (0) 7153 9254 0