DATA PROTECTION INFORMATION ACCORDING TO ART. 13, 14 AND 21 OF THE EU DATA PROTECTION REGULATION (EU-GDPR)

Dear visitors of our internet portal,

We look forward to your visit to our website cretecycling.com To make you feel comfortable when visiting this site, we would like to inform you about the handling of your data. The following privacy policy is intended to inform you about the handling of the collection, use and disclosure of personal information.

The protection of your privacy is very important to us. Therefore, we have basically designed our Internet offer in such a way that it can be used anonymously. We use information that we receive and store during your visit to our website for internal purposes only and to improve the design of the website. We store the IP address transmitted by your web browser for a period of seven days in order to detect, limit and eliminate faults or errors {eg. Attacks on our servers). After this period, we delete or anonymize the IP address. We use the IP address strictly strictly earmarked for o.g. Security purposes.

 

1. Who is responsible for data processing and who can you contact?

We are responsible for data processing - your specialist for sports travel and more:
Firma Happy Surf&Ski Tours 
Klaus Krawelitzki GbR
Eichenweg 19
14532 Stahnsdorf 
Telefon: +49 (0)30 326 01 733
Fax: +49 (0)30 326 01 735
E-Mail: klaus.krawelitzki@crete-cycling.com

 

 

For all data protection questions and communications, please contact the data protection officerFirma Happy Surf&Ski Tours Klaus Krawelitzki GbR, Mr. Klaus Krawelitzki, Tel +49 (0)30 326 01 733, klaus.krawelitzki@crete-cycling.com

or by mail at the above address.

 

2. Which data and which sources do we use?

As we constantly strive to improve our services to our customers in a continuous process, e.g. through customization, the o.g. general data evaluated statistically anonymously.

If you make use of our services, as a rule, only those data are collected that we need to provide the services. As far as we ask you for more detailed data, it is voluntary information (fields that are not marked as required).

The processing of personal data takes place exclusively for the fulfillment of the requested service and for the preservation of justified own business interests.

In order to protect your data from unwanted access, we use an encryption method on our website. Your information will then be transferred from your computer to our server and vice versa via the Internet using a 128-bit TLS (Transport Layer Security) encryption. You will recognize this by the fact that the status bar of your browser has the lock icon closed and the address line begins with https: //. We do not use encryption if we only exchange generally available information with us.

 

2.1 Usage data / log files

When you visit our web pages, so-called usage data for statistical purposes are temporarily stored on our web server as a protocol in order to improve the quality of our web pages. This record consists of

• ●  the page from which the file was requested,
  ●  the name of the file,
  ● the date and time of the query,
  ● the amount of data transferred,
  ● the access status (transfer file, file not found),
  ● the description of the type of web browser used,
  ● The IP address of the requesting computer, which is shortened so that a personal reference can no longer be produced

We use this information to enable access to our website, to control and administer our systems and to improve the design of websites. The stored data will be stored anonymously in accordance with applicable legal requirements. The creation of personal user profiles is thus excluded. Data about individuals or their individual behavior are not collected here.

 

2.2 Persistent and Session (session) cookies

In order to make the visit of our website attractive and to allow the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages. This serves to safeguard our legitimate interests, which predominate in the context of a weighing up of interests, in an optimized presentation of our offer in accordance with Art. 6 (1) sentence 1 lit. f DSGVO. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, ie after closing your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser the next time you visit it (persistent cookies).

If you want to register with us or book a trip online via our Internet booking engine, we need your customer data. For this purpose, information about the content of your shopping cart may be stored by us in the so-called cookies, which may then be called up on your next visit. The data stored in a cookie will make it unnecessary for you to fill in the forms.

The duration of storage can be found in the overview in the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general. Each browser differs in the way it manages the cookie settings. This is described in the Help menu of each browser, which explains how to change your cookie settings.

 

These can be found for the respective browser under the following links:

Internet Explorer™:
http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies

Safari™:
https://support.apple.com/kb/ph21411?locale=de_DE

Chrome™:
http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647

Firefox™
https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Opera™:
http://help.opera.com/Windows/10.20/de/cookies.html
 

Failure to accept cookies may limit the functionality of our website.

 

2.3 Use of Google (Universal) Analytics for web analytics

Insofar as you consent to this pursuant to Art. 6 para. 1 sentence 1 lit. If you have issued a DSGVO, we will create pseudonymous user profiles using Google (Universal) Analytics, a web analytics service provided by Google LLC (www.google.com), to customize our website. Google (Universal) Analytics uses methods that allow you to analyze the use of the website by you, such as so-called "cookies", which are text files stored on your computer.The information generated by the cookie about your use of this website As a rule, we transfer this information to a Google server in the USA and store it there, but since we have activated IP anonymization on this website, your IP address will be previously used by Google within member states of the European Union or in other states Only in exceptional cases will the full IP address be sent to a Google server in the US before being shortened and Google will use this information to evaluate your use of the website for us to compile and report on website activity others with the use of the website and the Internet ver provide services to us. The anonymized IP address provided by Google Analytics within the framework of Google Analytics will generally not be merged with other data provided by Google. After purpose and end of the use of Google Analytics by us, the data collected in this context will be deleted.

You can contradict the creation of the pseudonymous user profiles at any time. There are several ways to do this:

● One way to opt-out of web analytics through Google Analytics is to set an opt-out cookie that instructs Google not to store or use your information for web analytics purposes. Please note that with this solution, the web analysis will only be made as long as the opt-out cookie is saved by the browser. If you want to set the opt-out cookie now, please deactivate Google Analytics. If you delete your cookies, you will be asked to give your consent again.

● You can also prevent the storage of cookies used for profile creation by setting your browser software accordingly.

● [Depending on the browser you are using, you have the option of installing a browser plug-in that prevents tracking. To do this, please click here https://tools.google.com/dlpage/gaoptout?hl=de und installieren das dort abrufbare Browser-Plugin.

Google LLC is headquartered in the US and is certified under the EU-US Privacy Shield. A current certificate can be viewed here. As a result of this agreement between the US and the European Commission, the latter has established an appropriate level of data protection for companies certified under the Privacy Shield. eingesehen werden.

For more information about Terms of Use and Privacy, please visit http://www.google.com/analytics/terms/de.html or https://www.google.de/intl/de/policies/.

 

2.6 Social Media PlugIns

On our website social buttons are used by social networks.

This serves to safeguard our legitimate interests, which predominate in the context of a weighing up of interests, in the optimal marketing of our offer pursuant to Art. 6 (1) sentence 1 lit. f DSGVO. To increase the protection of your data when visiting our website, these buttons are not fully integrated as plugins, but only by using an HTML link in the page. This integration ensures that when you call up a page of our website that contains such buttons, no connection with the servers of the provider of the respective social network is established.

If you click on one of the buttons, a new window of your browser opens and calls up the page of the respective service provider on which you can enter (for example, after entering your login data). You can press the Like or Share button.

Purpose and extent of the data collection and the further processing and use of the data by the providers on their pages as well as a contact option and your related rights and settings options to protect your privacy, please refer to the privacy policy of the provider.

 

2.6 a Social Media PlugIns Twitter

Functions of the Twitter service are integrated on our sites. These features are provided by Twitter Inc., Twitter, Inc. 1355 Market St., Suite 900, San Francisco, CA 94103, USA. By using Twitter and the "Re-Tweet" feature, the web pages you visit will be linked to your Twitter account and shared with other users. This data is also transmitted to Twitter. We point out that we as the provider of the pages are not aware of the content of the transmitted data and their use by Twitter. For more information, see the Twitter Privacy Policy at http://twitter.com/privacy.
You can change your privacy settings on Twitter in the Account Settings at  http://twitter.com/account/settings ändern.

 

2.6 b Social Media PlugIns Facebook

On our pages plugins of the social network Facebook are integrated (Facebook Inc., 1601 Willow Road, Menlo Park, California, 94025, USA). The Facebook plugins can be recognized by the Facebook logo or the "Like-Button" ("Like") on our site. An overview of the Facebook plugins can be found here: http://developers.facebook.com/docs/plugins/.
When you visit our pages, the plugin establishes a direct connection between your browser and the Facebook server. Facebook receives the information that you have visited our site with your IP address. If you click on the Facebook "Like-Button" while you are logged into your Facebook account, you can link the contents of our pages to your Facebook profile. As a result, Facebook can assign the visit to our pages to your user account. We point out that we as the provider of the pages are not aware of the content of the data transmitted and their use by Facebook. For more information, please see the privacy policy of facebook at http://de-de.facebook.com/policy.php If you do not wish that Facebook can assign the visit of our pages to your Facebook user account, please log out of your Facebook user account.

 

2.6 c Social Media PlugIns  Youtube Video Plugins

On this website content from third party providers are included. This content is provided by Google LLC ("Provider").
Youtube is operated by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google").

For videos from Youtube, which are included on our site, the advanced privacy setting is enabled. This means that no information is collected and stored on Youtube by website visitors, unless they are playing the video. The inclusion of the videos serves the preservation of our legitimate interests, which predominate in the context of a weighing up of interests, for an optimal marketing of our offer in accordance with Art. 6 (1) sentence 1 lit. f DSGVO. For information on the purpose and scope of the data collection and the further processing and use of the data by the providers, as well as their rights and setting options for the protection of your privacy, please refer to the privacy policy of Google http://www.google.com/intl/de/+/policy/+1button.html.

 

2.7 Newsletter

If you would like to receive the newsletter offered on the website, we need an e-mail address, your first and last name and information that allows us to verify that you are the owner of the e-mail address provided and with agree to the receipt of the newsletter. Further data is not collected. We use this data exclusively for the delivery of the requested information and do not pass it on to third parties. The granted consent to the storage of the data, the e-mail address and their use for sending the newsletter can be revoked at any time, for example via the link "unsubscribe newsletter" in the newsletter. Our newsletters contain images (web bugs) that help us identify if and when an email was opened. Even if a link in a newsletter is clicked, we save it. However, we only use this data statistically (that is, without personal reference) to optimize our newsletters and offers and better understand customer interests.

 

2.8 Ordering data

We use the data provided by you in the context of an online travel booking only for the fulfillment and processing of your booking. Your data will be passed on to the respective product manufacturer, licensor or service provider or to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of the order (name, address, possibly telephone number for the coordination of delivery dates). A transfer of your data to other third parties does not occur.

 

3. On which legal basis is your data used (purpose of the data processing)?

The following information provides information on what and for what purpose we process your data.

 

3.1   For the fulfillment of contractual obligations (Article 6 (1) (b) EU GDPR)

We process your data to carry out our contracts with you, i. in particular for the execution and processing of booked travel services. The purpose of the data processing is in detail according to the specific travel services and the contract documents (for example, accommodation, transfer, rental car, flights, sports services, etc.)

 

3.2   In the context of balance of interests (Article 6 (1) (f) EU GDPR)

To safeguard legitimate interests, your information may be used by us or by third parties. This is done for the following purposes:
●   Support of our sales organization in the area of travel consultancy and support and distribution in the context of travel support
●   Further development of travel services and additional products
●   Advertising, market research and opinion polling
●   Asserting legal claims and defense in legal dispu
●   Prevention and investigation of crime
●   [Ensuring IT security and availability of IT operations

Our interest in the respective processing results from the respective purposes and is otherwise of an economic nature (efficient performance of tasks, distribution, avoidance of legal risks). As far as the specific purpose allows, we process your data pseudonymised or anonymized.

 

3.3   On the basis of your consent (Article 6 (1) (a) EU GDPR)

If you have given us consent to the processing of your personal data, this respective consent is the legal basis for the processing mentioned therein. In addition, you may have the promotional address by e-mail, phone or messenger service approved. You can revoke your consent at any time with effect for the future. This also applies to declarations of consent which you have given us before the validity of the EU GDPR, ie before 25 May 2018. The revocation works only for future processing, not for already done. Please contact our contact address.

 

 3.4   Due to legal requirements (Article 6 (1) (c) EU GDPR)

We are subject to various legal obligations and legal requirements (eg Civil Code (BGB), Commercial Code (HGB), GoB, Passenger Information Act, EU Package Travel Directive, Tax Laws of the Federal Republic of Germany). The purposes of the processing include identity and age checks, fraud prevention, the fulfillment of tax control and reporting obligations as well as the assessment and management of risks.

 

4. Who gets my data?

A transfer of your data is only in compliance with the EU GDPR and only to the extent that a legal basis allows. Within our sales organization, only those entities will receive the information they need to fulfill our contractual and regulatory obligations or to perform their respective duties (such as sales, customer service, tour guides, tour operators, hotels, rental cars or transfer companies).
In addition, the following locations can receive your data:
●  Processors employed by us (Article 28 EU GDPR), in particular in the area of booking systems and IT services, logistics and printing services, who process your data according to our instructions
●   Public bodies and institutions (tax authorities, embassies of the destination country) in the presence of a legal or regulatory obligation (retention requirements, obtaining of the VISA, obtaining entry requirements) as well as
●   other entities for which you have given us your consent to the transfer of data..

 

5. How long will my personal information be stored?

If necessary, we process your personal data for the duration of our business relationship, which includes the initiation and execution of a contract for the execution of a travel service. In addition, we are subject to various storage and documentation obligations, which result, among others, from the Civil Code (BGB), the Commercial Code (HGB), the Tax Code (AO) and the EU Package Travel Directive. The deadlines for storage and documentation specified there are two to a maximum of ten years. Finally, the storage period is also judged by the statutory limitation periods, which, for example, according to §§ 195 ff. Of the Civil Code (BGB) usually three years. The storage of your personal data based on your consent takes place until further notice.

 

6. Will my data be transmitted to a third country?

We only transfer your data to countries outside the European Union if this is necessary for the execution and execution of the travel services or if it is required by law or if you have given us your consent (eg long-distance travel).

 

7. Do I have specific rights in handling my data?

Under the respective legal conditions, they have the right to information (Art. 15 EU-DSGVO, § 34 Federal Data Protection Act (BDSG) in its version valid as of 25 May 2018), to rectification (Art. 16 EU-DSGVO), to cancellation (Art. 17 EU-DSGVO or § 35 BDSG), to limitation of processing (Art. 18 EU-DSGVO) and to data portability (Art. 20 EU-GDPR). You also have a right of appeal to a data protection supervisory authority (Art. 77 EU-DSGVO or § 19 BDSG).

 

8. Is there a duty for me to provide my data?

As part of our business relationship, you only need to provide the personally identifiable information necessary to establish, conduct, and terminate a business relationship or that we are required to collect by law. Without this data, we will usually have to refuse to conclude the contract or to execute the order or to be unable to complete an existing contract and to terminate it if necessary.

 

9. Is there automated decision-making in individual cases?

In principle, we do not use automated decision-making pursuant to Art. 22 EU GDPR to establish and conduct the business relationship. If we use these procedures in individual cases, you will be informed separately, if this is required by law.

 

10. Will my data be used in any way for profiling?

We sometimes process your data automatically with the aim of evaluating your potential interest in certain products, offers and services. (so-called "profiling" according to Art. 4 Nr. 4 EU-DSGVO) The evaluation takes place on the basis of statistical procedures considering your previously booked travel and services with us. We use the results of these analyzes for a targeted and needs-based approach to our customers.

 

11. Which rights as a customer do I have?

You have the right at any time, for reasons arising out of your particular situation, to prevent the processing of personal data relating to you which, pursuant to Article 6 (1) lit. f EU-GDPR (data processing on the basis of a balance of interests), an objection is filed. This also applies to a profiling based on this provision within the meaning of Art. 4 No. 4 EU-GDPR, which can be used, for example, as an example. for customer consultation and support. If you object, we will no longer process your personal data. In addition, you have a permanent right of withdrawal to your consent to data processing for further purposes under Art. 15 and Art. 21 EU-GDPR if you have given us consent to this form. The objection can be made free of charge to the contact address known to you. Each data subject has the right to complain to the supervisory authority if it considers that the processing of the data concerning them violates data protection provisions. The right to complain may, in particular, be made by the supervisory authority of your province or asserted at the place of the material breach. An up-to-date list of competent supervisory authorities can be found at https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html (Abruf am 24.05.2018)

12. data security

We secure our website and other systems through technical and organizational measures against loss, destruction, access, modification or dissemination of your data by unauthorized persons. Sensitive data (credit card number or email address) in our registration or order forms are encrypted with SSL. We have set up our security measures in accordance with generally accepted industry standards so that the personal data transmitted to us is protected as well as possible during transmission as well as receipt (eg by redundant line, UPS, alarm system, air conditioning, email virus filter, email spam filter, backups ectr .). Nevertheless, no transmission over the Internet and no storage method is 100% secure.

13. Links

If you click on a link to the website of a third party company, you will leave our website and be redirected to the chosen website. Because we can not control the activities of these third party companies, we do not assume any responsibility for any use of personal information by these third party companies.

 

14. Contact for privacy

For questions about the collection, processing or use of your personal data, information, correction, blocking or deletion of data and revocation of granted consent, please contact the Privacy Officer of Happy Surf & Ski Tours Klaus Krawelitzki GbR, , +49 (0)30 326 01 733, klaus.krawelitzki@crete-cycling.com