We process the data of our contractual and business partners, e.g. customers and interested parties (collectively referred to as "contractual partners") within the framework of contractual and comparable legal relationships and related measures and within the framework of communication with the contractual partners (or precontractual), e.g respond.
We process this data to fulfill our contractual obligations. This includes in particular the oblications to provide the agreed services, any updating obligations and remedy in the case of warranty and other service disruptions. In addition, we process the data to protect our rights and for the purpose of the administrative tasks associated with these obligations and the corporate organization. In addition, we process the data on the basis of our legitimate interests in proper and economical business management and security measures to protect our contractual partners and our business operations from misuse, endangerment of their data, secrets, information and rights (e.g. to involve telecommunications, transport and other auxiliary services as well as subcontractors, banks, tax and legal advisors, payment service providers or financial authorities). Within the framework of the applicable law, we only pass on the data of contractual partners to third parties to the extent that this is necessary for the aforementioned purposes or to fulfill legal obligations. The contractual partners will be informed about other forms of processing, e.g. for marketing purposes, within the scope of this data protection declaration.
We inform the contractual partners which data is required for the aforementioned purposes before or during data collection, e.g. in online forms, by means of special markings (e.g. colours) or symbols (e.g. asterisks or similar), or personally.
We delete the data after statutory warranty and comparable obligations have expired, ie, in principle after 4 years, unless the data is stored in a customer account, e.g. for as long as it must be kept for legal archiving reasons. The statutory retention period is ten years for documents relevant to tax law and for trading books, inventories, opening balance sheets, annual financial statements, the work instructions and other organizational documents and accounting documents required to understand these documents, and six years for received commercial and business letters and reproductions of the commercial and business letters sent. The period begins at the end of the calendar year in which the last entry was made in the book, the inventory, the opening balance sheet, the annual financial statements or the management report were drawn up, the commercial or business letter was received or sent or the accounting document was created, the recording was made or the other documents were created.
Insofar as we use third-party providers or platforms to provide our services, the terms and conditions and data protection notices of the respective third-party providers or platforms apply in the relationship between the users and the providers.
- Types of data processed: Inventory data (e.g. names, addresses); payment data (e.g. bank details, invoices, payment history); Contact information (e.g. email, phone numbers); Contract data (e.g,Subject of the contract, term, customer category); Usage data (e.g. websites visited, interest in content, access times); Meta, communication and procedural data (e.g. IP addresses, times, identification numbers, consent status).
- Affected persons: customers, interested persons, business and contractual partners.
- Purposes of processing: provision of contractual services and customer service; Safety measures; contact requests and communication; office and organizational procedures; Management and response to inquiries.
- Legal basis: Fulfillment of contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b) DSGVO); Legal obligation (Art. 6 para. 1 sentence 1 lit. c) Subject of the contract, term, customer category); Usage data (e.g. websites visited, interest in content, access times); Meta, communication and procedural data (e.g. IP addresses, times, identification numbers, consent status). GDPR); Legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR).
Further information on processing processes, procedures and services:
- Customer account: Contractual partners can create an account within our online offer (e.g. customer or user account, "customer account" for short). Types of data processed: Inventory data (e.g. names, addresses); payment data (e.g. bank details, invoices, payment history); Contact information (e.g. email, phone numbers); Contract data (e.g If it is necessary to register a customer account, contractual partners will be informed of this as well as of the information required for registration. Customer accounts are not public and cannot be indexed by search engines. As part of the registration and subsequent registrations and uses of the customer account, we store the IP addresses of the customers together with the access times in order to be able to prove the registration and to prevent any misuse of the customer account. If customers have terminated their customer account, the data relating to the customer account will be deleted, subject to their retention being required for legal reasons. Customers are responsible for backing up their data upon termination of the customer account; Legal basis: Fulfillment of contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b) DSGVO).
- Customer loyalty program/ customer card: We process customer data as part of our customer loyalty program for the purpose of fulfilling the services that are provided to the participating customers as part of the customer loyalty program. For this purpose, the information collected from the customer and, if necessary, marked as such is stored in a customer profile. Information about the use of the customer loyalty program and the use of the associated services and advantages is also processed in the profile and only passed on to third parties (e.g. executing service providers) if necessary for the aforementioned purposes. The customer profiles will be deleted after the end of participation and only archived with the respective data to the extent that this is necessary for legal storage purposes or the fulfillment of legal (up to 11 years for tax information from the end of the year in which it was created) or contractual claims (up to three years from the end of the year of termination) may be required; Legal basis: Fulfillment of contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b) DSGVO).
- Shop and e-commerce: We process the data of our customers in order to enable them to select, purchase or order the selected products, goods and associated services, as well as their payment and delivery or execution. If necessary for the execution of an order, we use service providers, in particular postal, forwarding and shipping companies, to carry out the delivery or execution for our customers. We use the services of banks and payment service providers to process payment transactions. The required information is marked as such in the context of the ordering or comparable acquisition process and includes the delivery or Provision and billing required information and contact information in order to be able to hold any consultation; Legal basis: Fulfillment of contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b) DSGVO).
- Brokerage and brokerage services: We process the data of our customers, clients and interested parties (uniformly referred to as "customers) in accordance with the underlying order of the customer. We can also process the information on the characteristics and circumstances of persons or their belongings if this is necessary for The subject of our order. This can be, for example, information on personal circumstances, mobile or immovable property and the financial situation. If required for the fulfillment of the contract or by law or approved by the customer or based on our legitimate interests, we disclose or transmit the Customer data in the context of coverage requests, transactions and the processing of Contracts with providers of mediated services/objects, insurers, reinsurers, broker pools, technical service providers, other service providers, such as cooperating associations, as well as financial service providers, credit institutions and capital investment companies as well as social security institutions, tax authorities, tax consultants, legal consultants, auditors, insurance ombudsmen and the Federal Agency for Financial Services Authority (BaFin). Furthermore, subject to other agreements, we can commission subcontractors, such as subagents; Legal basis: Fulfillment of contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b) DSGVO).
- Hotel and accommodation services: We process the details of our guests, visitors and interested parties (uniformly referred to as "guests") in order to provide our accommodation and related services of a tourist or gastronomic nature and to bill for the services provided. As part of our assignment, it may be necessary that we process special categories of data within the meaning of Art. 9 Para. 1 DSGVO, in particular information on the health of a person or information related to their religious belief.
The processing takes place in order to protect the health interests of visitors (e.g. in the case of information on allergies) or otherwise to meet their physical or mental needs upon request and with their consent. If necessary for the fulfillment of the contract or by law, or if consented by guests or if it is based on our legitimate interests, we disclose or transmit the data of the guests, e.g , office or similar services; Legal basis: Fulfillment of contract and precontractual inquiries (Art. 6 Para. 1 S. 1 lit. b) GDPR). For the request/booking of accommodation process as part of the online booking within the booking platform "booking&more", the processing of the data takes place in joint responsibility in accordance with Art. 26 GDPR with the respective requested accommodation.
- Events: We process the data of the participants of the events, events and similar activities offered or organized by us (hereinafter referred to as "participants" and events) in order to enable them to participate in the events and use the services associated with participation or to enable actions. If we process health-related data, religious, political or other special categories of data in this context, then this is done within the scope of obviousness (e.g. in the case of thematically oriented events or is used for health care, security or with the consent of those affected). The required information is marked as such in the context of the contract, order or comparable contract conclusion and include the information required for the provision of services and billing as well as contact information in order to be able to hold any consultations. Insofar as we receive access to information from end customers, employees or other persons, we process this in accordance with the legal and contractual requirements; Legal basis: Fulfillment of contract and precontractual inquiries (Art. 6 Para. 1 S. 1 lit. b) GDPR)
- Travel-related services: We process the data of our customers and prospects (uniformly referred to as "customers) in accordance with the underlying contractual relationship. We can also process information on the characteristics and circumstances of people or their belongings if this is necessary within the framework of the contractual relationship. This can be, for example, information on personal living conditions, mobile property and the financial situation.As part of our assignment, it may be necessary for us to process special categories of data within the meaning of Article 9 (1) GDPR, in particular information on a person's health The processing takes place in order to protect the health interests of the customers and otherwise only with the consent of the customers.If required for the fulfillment of the contract or by law, or consented by customers or on the basis of our legitimate interests, we disclose or transmit the data of the customer en eg to the service providers involved in the fulfillment of the travel services; Legal basis: Fulfillment of contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b) DSGVO). For the request/booking of accommodation process as part of the online booking within the booking platform "booking&more", the processing of the data takes place in joint responsibility in accordance with Art. 26 GDPR with the respective requested accommodation.