Privacy Policy
Welcome to überland Reisen Berlin GmbH and our website www.ueberland.berlin.
Thank you for your interest in our services. Protection of your privacy and personal data is very important to us. As a result, your data is always collected and processed in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) and the German Telemedia Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz (TDDDG). In the following sections, we, as the Data Controller, will explain what data we collect and how we process this data.
Personal Data
“Personal data” under the GDPR includes all information relating to an identified or identifiable natural person; an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online ID or to one or more factors specific to his/her physical, physiological, genetic, mental, economic, cultural or social identity. Personal data is stored only as far as this is necessary for provision of the booked service, for compliance with legal provisions, or for purposes stated below.
Anonymized Data / Log Files
You can visit our website without collection of personal data being necessary. Nevertheless, certain anonymous data is stored with each visit you make to our site, e.g. which page or offer you access. However, this data is not personal data and is therefore not subject to the legal regulations of the GDPR or BDSG.
The website operator or site provider collects data about access to the site and saves this as "server log files". The following data is logged in this way:
website visited, time of access, amount of data sent in bytes, source/link from which the site was accessed, browser used, operating system, IP address.
Data collected is used solely for statistical analysis and to improve the website. However, the website operator reserves the right to subsequently check the server log files if there is concrete evidence of illegal use.
Anonymous data is collected solely for statistical analysis in order to improve our services. Please note the section of "Right to Information / Right of Withdrawal" in this regard.
Purpose of Collection of Personal Data
Collection of personal data does, however, become essential if you book a trip or other service through our portal, if you contact us, subscribe to our newsletter or wish to use other services on our site for which personal data are essential. This also includes purchases of vouchers and participation in competitions.
In accordance with legal provisions and in line with data minimization principles, only the data required for provision of the specific service in question will normally be collected. Where we ask for additional information on our forms, provision of such data is always voluntary and marked as such.
Temporary storage of the IP address by the system is necessary to enable the website to be provided on the user's computer. This requires the user's IP address to be stored for the duration of the session. The data is additionally stored in log files to ensure the website's functionality. The data is also used to optimize the website and to ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context. These purposes also include our legitimate interest in data processing under the GDPR article 6, section 1, subsection F.
When a trip or other service is booked, the data collected in doing so are used for fulfilling this booking, and in accordance with statutory provisions for promotional and statistical purposes.
The legal basis for sending newsletters due to the sale of goods or services is the UWG, section 7.3.
If you subscribe to our newsletter, we additionally store and use the data about you and your trip given by you at the time of booking to provide you with the best possible service as a subscriber to our newsletter, on the basis of the GDPR, article 6, section 1, subsection F.
The legal basis for processing data after the user registers for the newsletter is the GDPR, article 6, section 1, subsection A if the user's consent has been obtained.
In addition, we use your personal data stored by us for maintaining customer relations, for customer service (e.g. information on the end of your stay), for carrying out our own advertising and marketing activities (e.g. sending of catalogues or other advertising mail as permitted by the law, questions on customer satisfaction), and for processing your order.
Legal Basis for Processing of Personal Data
Where we obtain the consent of the Data Subject to processing their personal data, article 6, section 1, subsection A of the GDPR forms the legal basis.
For processing of personal data required to fulfil a contract to which the Data Subject is a party, article 6, section 1, subsection B of the GDPR forms the legal basis. This also applies to processing which is necessary for carrying out pre-contractual tasks.
Where processing of personal data is necessary to fulfil a legal obligation to which our company is subject, article 6, section 1, subsection C of the GDPR forms the legal basis.
In the event that vital interests of the Data Subject or another natural person make the processing of personal data necessary, article 6, section 1, subsection D of the GDPR forms the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or of a third party, and the interests, fundamental rights and freedoms of the Data Subject do not outweigh the aforementioned interest, article 6, section 1, subsection F of the GDPR forms the legal basis.
Transfer of Personal Data to Third Parties
Your personal data will only be passed on as permitted by relevant statutory provisions, particularly the provisions of data protection law and competition law.
Where necessary for providing contractual services due from us or to fulfil legal obligations, disclosure of your data to subcontractors or service providers for the provision of services is made in our name or on our behalf (e.g. technical processing for post and email sending, payment processing, customer service).
Moreover, data will be transferred to people or companies for processing your booking, particularly to airlines, tour operators, hotels, travel agencies, car rental companies, cruise lines, authorities, etc. Please note that data protection regulations at the locations where these people and companies are based may differ from those in Germany.
Your data will also be disclosed and transferred to third parties where we are obliged to do so by law or by legally binding court proceedings.
You have the right to obtain, in a structured, common, and machine-readable format, the personal data which you have provided to us. You additionally have the right to transmit this data to another Data Controller without obstruction by the Data Controller to which the personal data was provided.
Storage and Deletion of Data
Your personal data is stored within the limits of the purposes given under the section "Purpose of Collection of Personal Data". The Data Subject's personal data will be deleted or made inaccessible as soon as the purpose of storage ceases to apply. Data may be stored beyond this point if this has been provided for by European or national lawmakers in EU regulations, laws or other rules to which the Data Controller is subject. The law imposes a variety of retention obligations and periods. Data will still be made inaccessible or deleted when a storage period prescribed by the aforementioned rules expires, unless continued data storage is necessary for concluding or performing a contract.
Use of Cookies
We use cookies (small computer files containing text information that the web server sends to your internet browser) to improve your experience when you visit us online. For example, some notices will only appear once if you allow us to place a cookie on your computer. Our cookies also have an expiry date. If you manually delete your cookies before the expiry date, you will receive a new one the next time you visit the site, unless you block storage of cookies.
The technical specifications stipulate that a cookie sent by the server can only be read by the server. We hereby affirm that we do not store any personal data in cookies.
You can only make limited use of our services if you do not accept cookies. Therefore, we recommend that you permanently enable cookies for our website. Most internet browsers are set to accept cookies automatically. However, you can deactivate storage of cookies and set your browser to notify you when cookies are sent.
GDPR, article 6, section 1, subsection F forms the legal basis for processing of personal data using cookies.
GDPR, article 6, section 1, subsection A forms the legal basis for processing of personal data using cookies for analytical purposes where the user has given consent to this.
Use of Google Analytics
This website uses Google Analytics, a web analysis service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses "cookies" – text files that are stored on your computer and which enable analysis of your use of the website. Information generated by cookies about your use of this website (including your IP address) is transmitted to a Google server in the USA and stored there. Google will use this information to evaluate your use of the website, to compile reports on website activity for the operator of the website, and to provide other services regarding website usage and internet usage. Google may also transfer this information to third parties, if this is provided for by law or if the data is to be processed by third parties on behalf of Google. Google will not, under any circumstances, associate your IP address with any other data held by Google. You can prevent these cookies being stored by selecting the appropriate settings in your browser; however, please note that doing so may make you unable to use the full functionality of this website. By using this website, you agree that the data that Google collects about you may be processed as described above and for the purpose described above.
The Google tracking codes on this website use the "_anonymizeIp()" function; this means that IP addresses are only processed in a shortened form, to prevent them being directly linked to a particular individual. Permission to collect and store data may be revoked at any time with future effect. Clicking the "deactivate" button will completely disable tracking. To make this revocation permanent, cookies must be accepted on the browser used. Alternatively, permission for data collection may be revoked by use of a Google browser plug-in to prevent the information collected by cookies (including your IP address) being sent to and used by Google Inc.. The appropriate plugin is available from the following link: https://tools.google.com/dlpage/gaoptout?hl=en
□ Deactivate Google Analytics: https://tools.google.com/dlpage/gaoptout/eula.html?hl=en
YouTube
This website uses a link to YouTube from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We use "Advanced Privacy Mode" with embedded videos, so that no usage information is transferred until the video is started. In this case, information on which specific page of our website you visited and which video you viewed will be transmitted. If you are logged in to your YouTube account, YouTube allows you to directly associate your site visits with your personal profile. You can find more information about collection and processing of your data by YouTube in the corresponding privacy notices on www.youtube.com.
If you want to be sure that none of your data is stored by YouTube, do not click on the embedded videos.
Security, Questions and Suggestions, Data Controller
Security is dependent, not least, upon your system. Always keep your login data confidential, never let your web browser save your passwords, and close the browser window after you have visited our website. This ensures that access to your personal data is made more difficult for third parties.
Use an operating system that can manage user privileges. Set up multiple users for your family on your system, and never use the internet with administrator privileges. Use security software such as virus scanners and firewalls, and always keep your system updated.
The Data Controller for our website under the GDPR and other national data protection laws of Member States, as well as other data protection regulations, is:
überland Reisen Berlin GmbH
Ines Fuhlmann
Arndtstrasse 34, D-10965 Berlin
+49 (0) 30 69 53 17 21
InesFuhlmann@ueberland.berlin
www.ueberland.berlin
Right to Information / Right of Withdrawal; Other Rights of the Data Subject
You have the right:
• to request information on your personal data processed by us, under the GDPR, article 15. In particular, you may request information on the purposes of processing; the category of personal data; the categories of recipients to whom your data has been or is being disclosed; the planned storage period; the existence of a right to correction, deletion, restriction of processing or objection; the existence of a right of appeal; the origin of your data if not collected by us; the existence of automated decision-making, including profiling, and, where appropriate, meaningful information on the details of this;
• to request the immediate correction of incorrect personal data or completion of incomplete personal data stored by us, under the GDPR, article 16;
• to request the deletion of your personal data stored by us, under the GDPR, article 17, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest, or to assert, exercise or defend legal claims;
• to request the restriction of processing of your personal data, under the GDPR, article 18, insofar as: you dispute the accuracy of the data; processing is unlawful, and you decline to have the data deleted and we no longer need it, but you do need the data to assert, exercise or defend legal claims; or you have objected to processing under the GDPR, article 21;
• to receive your personal data that you have provided to us in a structured, common and machine-readable format, or to request transfer of this data to another Data Controller under the GDPR, article 20;
• to revoke your consent provided to us at any time under the GDPR, article 7, section 3. This will result in us no longer being allowed to continue data processing based on this consent, and;
• to complain to a supervisory authority under the GDPR, article 77. If you wish to do this, you can generally contact the supervisory authority for your usual place of residence, your workplace, or our headquarters.
You are, of course, entitled to these rights free of charge. To revoke your consent to data usage, to request information, to request that data be corrected, made inaccessible or deleted, or to exercise the other rights of Data Subjects, please contact:
überland Reisen Berlin GmbH
Arndtstrasse 34, D-10965 Berlin
+49 (0) 30 69 53 17 0
info@ueberland.berlin
www.ueberland.berlin
Unsubscribing from the Newsletter
If you no longer wish to receive our newsletter or promotional emails, please click the "unsubscribe" link, which can be found at the end of all emails we send.
Berlin, May 2018
