TourOnline AG privacy policy for the online booking tool DIRS21
This website is provided to you by TourOnline AG, Borsigstrasse 26, 73249 Wernau, Germany (www.dirs21.de), hereinafter referred to as “TOAG.” The collection and use of your data is carried out always in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 (GDPR), the German Federal Data Protection Act (BDSG) and the German Telemedia Act (TMG). Therefore, as the data controller, we would like to inform you what kind of data we collect and how we process this data.
1. Personal data
Personal data within the meaning of the GDPR means any information relating to an identified or identifiable natural person. An identifiable natural person is any person who can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal data will only be stored if this is necessary to provide the booked service, to comply with legal requirements or for the purpose stated below.
2. Anonymized data / log files
You can access this online booking tool (“OBT”) without the need for the collection of personal data. However, certain anonymized data is stored each time you access the tool, for example, data concerning which offer was accessed. However, this data is not personal and is therefore not subject to the legal provisions of the GDPR or the BDSG.
TOAG collects data on visits to the OBT and stores it as “server log files.” The following data is logged as follows:
The website visited, the time of access, the amount of data sent in bytes, the source/reference from which you reached the website, the browser used, the operating system used, the IP address used.
The collected data is used only for statistical purposes and to improve the website. However, the website operator reserves the right to subsequently check the server log files if there are specific indications of illegal use.
The collection of anonymous data takes place solely for statistical evaluation in order to improve our website. For more information please read / refer to the section on “Right of access / Right to object.”
3. The purpose for collecting personal data
However, the collection of personal data is essential if you book a trip or another service via our OBT, for which the processing of personal data is necessary.
In accordance with the legal regulations and for the purpose of data minimization, generally speaking, only the data necessary for the provision these services is collected. When we ask for additional information on our forms, the provision of this information is always voluntary and is indicated as such.
The temporary storage of IP addresses by the system is necessary in order to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must be stored for the duration of the session. The IP address is also stored in log files to ensure the correct operation of the website. The data is also used to optimize the website and to ensure the security of our information technology systems. Analysis of data for marketing purposes does not take place in this context. These purposes also include our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f GDPR.
If you wish to directly contact a host via the contact form displayed on the website, the data you provide will be stored and processed by us for this purpose and transmitted to the respective host for the purpose of contacting you. Your data will not be passed on to third parties.
If you book a trip or other service, the data collected will be used to process this booking, within the legal requirements for advertising purposes and for statistical purposes.
4. Legal basis for the processing of personal data
Art. 6 para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis for obtaining the data subject’s consent for the processing of personal data.
Art. 6 para. 1 lit. b of the EU Data General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data required for the performance of a contract to which the data subject is a party. This also applies to processing operations which are necessary before entering into a contract.
Art. 6 para. 1 lit. c GDPR serves a legal basis when the processing of personal data is necessary to fulfill a legal obligation to which our company is subject.
Art. 6 para. 1 lit. d GDPR serves a legal basis when the vital interests of the data subject or another natural person require the processing of personal data.
Art. 6 para. 1 lit. f GDPR serves as the legal basis if processing is necessary to safeguard a legitimate interest of our company or that of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the above-mentioned interest.
5. Transfer of personal data to third parties
The transfer of your personal data will take place exclusively within the relevant data protection and competition law guidelines.
Insofar as this is necessary for the provision of the contractual service owed by us or statutory obligations, your data will also passed on to sub-contractors or service providers for the provision of the service in our name or on our behalf (for example, technical processing of postal and email dispatches, processing of payments, customer service).
In addition, data is passed on to persons or companies for the purpose of processing your booking, including to airlines, tour operators, hotels, travel agencies, rental car companies, cruise lines, authorities, etc. Please note that the applicable data protection regulations at the location of the headquarters of these persons and companies may be different than the regulations in Germany.
In addition, your data will be disclosed and transmitted to third parties if we are obliged to do so by law or as a result of a legally enforceable legal procedure.
You have the right to receive, in a structured, common and machine-readable format, the personal data concerning you which you have provided to us. In addition, you have the right to transfer this data to another data controller without hindrance fromthe data controller to whom the personal data was provided.
6. Storage and erasure of data
Your personal data will be stored within the scope of the purposes mentioned under “The purpose for collecting personal data.” The data subject’s personal data will be erased or blocked as soon as the purpose of storage no longer applies. The data may be also stored if the European or national legislator has provided for this in Union regulations, laws or other provisions to which the data controller is subject. The legislator has enacted a variety of storage obligations and periods. The data will also be blocked or erased if a storage period prescribed by the above-mentioned standards expires, unless further storage of the data is necessary for the conclusion or performance of a contract.
7. Cookies
We use cookies (small computer files with text information that the web server sends to your Internet browser) to improve your experience when you visit our website. For example, some notices may appear only once if you allow us to place a cookie on your computer. Furthermore, our cookies have an expiration date. If you manually delete your cookies before they expire, you will receive a new cookie the next time you visit the website, unless you block the storage of the cookies.
The technical specifications specify that only the server can read a cookie sent by it. We assure you that we will not store any personal data in cookies.
Unfortunately, without accepting cookies, it is only possible to use our services to a limited extent. Therefore, we recommend that you permanently enable cookies for our website. Most Internet browsers are configured to automatically accept cookies. However, you can disable the storage of cookies and set your Internet browser so that it notifies you whenever cookies are sent.
The legal basis for the processing of personal data by using cookies is Art. 6 para. 1 lit. f GDPR.
The legal basis for the processing of personal data for the purpose of analysis by using cookies is Art. 6 para. 1 lit. f GDPR if the user has given his/her consent.
8. Google Analytics
We use Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses “cookies,” which are text files placed on your computer, in order to help analyze how users use the website. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of analyzing your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process this information on Google’s behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use all the functions of this website. By using this website, you consent to the processing of your personal data by Google in the manner and for the purposes decribed above.
The Google tracking codes for this website use the “_anonymizeIp()” function, thus IP addresses are only processed in abbreviated form in order to exclude direct personal references. You have the right to object to the collection and storage of your data any time with effect for the future. Click the “Deactivate” button to completely disable tracking. Your browser must be set to accept cookies in order for the objection to be permanent. Alternatively, you can object to the collection of your data by using a Google browser plug-in to prevent the information collected by cookies (including your IP address) from being sent to and used by Google Inc. The following link is for the corresponding plugin: https://tools.google.com/dlpage/gaoptout?hl=de
9. Google reCAPTCHA
Our website uses the Google Inc. reCAPTCHA service to protect the orders you place via the Internet form. (Google). The query is used to differentiate whether information has been entered by a human being or whether it has been fraudulently entered by automated, mechanical means. The query includes the transmission to Google of your IP address and any other data which Google needs to operate the reCAPTCHA service. The data you enter will be transmitted to and used by Google for this purpose. By using reCAPTCHA, you agree that the identification you provide will be incorporated into the digitization of older works. However, if IP anonymization is activated on this website, your IP address will be truncated in advance by Google within Member States of the European Union or in other states which have signed the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to and truncated by Google on servers in the United States. On behalf of the operator of this website, Google will use this information to analyze your use of this service. The IP address transmitted by your browser as part of reCAPTCHA is not merged with other data from Google. This data is subject to Google’s own data protection regulations. You can find more information about Google’s Privacy Policy at: https://www.google.com/intl/de/policies/privacy/.
10. Google AdSense
This website uses Google AdSense, a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, to display advertisements. Google AdSense uses cookies and web beacons, which are non-visible graphics that allow Google to analyze clicks on this website, traffic on this website and similar information.
The information obtained via cookies and web beacons, as well as your IP address and the delivery of advertising formats, are transmitted to a Google server located in the United States and stored there. You can find more information about how Google processes data at: https://www.google.com/privacypolicy.html.
You can prevent cookies from being stored on your PC by choosing the appropriate settings in your Internet browser. However, this may prevent the full use of the contents of this website.
11. Google Fonts
We use Google Fonts and the Google Fonts API to visually display fonts and symbols When Google Fonts is used, Google also collects, processes and uses data about the use of the Fonts functions by website visitors, unless the data is stored on our website’s local servers. For more information about how Google processess data, please refer to Google’s Privacy Policy at: http://www.google.com/privacypolicy.html. You can also change your settings in the Google Privacy Center so that you can manage and protect your data. You can find the terms of use of Google Fonts at: https://fonts.google.com/about# and https://policies.google.com/terms?hl=en
12. Right to access / right to object; additional rights of data subjects
You have the right:
- under Art. 15 GDPR to request access to your personal data processed by us. In particular, you may request information about the purposes of the processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right of rectification, erasure, restrictionor objection to processing, the existence of a right to lodge a complaint, the source of your data if it has not been collected by us, as well as the existence of an automated decision making process including profiling and, if applicable, meaningful information on the details of this process;
- under Art. 16 GDPR to demand the immediate rectification of inaccurate or incomplete personal data stored by us;
- under Art. 17 GDPR to request the erasure of your personal data stored with us, unless processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
- under Art. 18 GDPR to request the restriction of the processing of your personal data if you dispute the accuracy of the data, if the processing is unlawful, but you oppose its erasure and we no longer need the data, but you need it for the establishment, exercise or defense of legal claims or if you have lodged an objection against processing pursuant to Art. 21 DSGVO;
- under Art. 20 GDPR to receive your personal data, which you have provided to us, in a structured, common and machine-readable format or to request the transfer of your personal data to another data controller;
- under Art. 7 para. 3 GDPR to withdraw your consent which you have given to us at any time. The consequence of this is that we may no longer continue to process your data based on your consent in the future, and
- under Art. 77 GDPR to lodge a complaint with a supervisory authority. As a general rule, you can contact the supervisory authority at your usual place of residence or workplace or at our company headquarters.
To withdraw your consent to the use of data, to request access to or rectification, restriction or erasure of your data or to exercise the other rights of data subjects, please contact us at:
TourOnline AG
Borsigstrasse 26
73249 Wernau, Germany
Email: info@dirs21.de
Telephone: +49 (0) 7153 9250 0
Fax: +49 (0) 7153 9254 0
You are, of course, entitled to these rights free of charge without incurring transmission costs which are higher than the basic rates.
The contact address of our company’s data protection officer is provided below. Our data protection officer is
Frank Hütten, Attorney
Noll & Hütten Attorneys GbR
c/o TourOnline AG
Borsigstrasse 26
73249 Wernau, Germany
Email: datenschutzbeauftragter@dirs21.de
Telephone: +49 (0) 7153 9250 0;
Fax: +49 (0) 7153 9254 0
Please do not directly contact the data controller in order to exercise your rights such as access, correction, restriction or erasure of your personal data, but first contact the above-mentioned data protection officer directly, who will process your request immediately.
13. Security, questions and suggestions, responsibly party
Security also depends on your system. You should always keep your access information confidential, never store passwords on your browser, and close your browser window when you leave our website. This will make it more difficult for third parties to access your personal data.
Use an operating system that can manage user rights. Set up multiple users for your family on your system and never use the Internet under administrator rights. Use security software, such as anti-virus programs and firewalls, and keep your system up to date.
The party responsible for this online booking tool (“OBT”) within the meaning of the General Data Protection Regulation and the other national data protection laws of the member states and other data protection provisions is:
TourOnline AG
Borsigstrasse 26
73249 Wernau, Germany
Email: info@dirs21.de
Telephone: +49 (0) 7153 9250 0
Fax: +49 (0) 7153 9254 0