Privacy notice of Geotoura GmbH

Geotoura GmbH (“Geotoura”) informs you as a user (m/f/d, “user”) in this privacy policy about how personal data is collected, processed and used on this website and what rights data subjects are entitled to. In any case, we only collect, process and use your personal data to the extent permitted by the Federal Data Protection Act (BDSG) and the General Data Protection Regulation (GDPR).

The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is Geotoura GmbH, represented by the Managing Director of Geotoura, Mr Volker Hensel (see our legal notice . You can contact our data protection officer at datenschutz@geotoura.com or via our postal address (see our imprint with the addition “an den Datenschutzbeauftragten”). Any data subject can contact our data protection officer directly at any time with any questions relating to data protection.

The data controller has implemented numerous technical and organisational measures to ensure that the personal data processed via this website is protected as completely as possible. Nevertheless, Internet-based data transmissions may have security gaps, so that absolute protection cannot be guaranteed. For this reason, you are free to transmit personal data to us by alternative means, e.g. by telephone.

Personal data is all data that can be related to you personally and that can identify you (e.g. name, address, email address, user behaviour).

If you use our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser automatically transmits to our server. This information is temporarily stored in a so-called log file.

If you wish to view our website, we collect the following data, which is recorded without any action on your part and stored until it is automatically deleted:

• Internet Protocol address (IP address) of the requesting computer
• Date and time of the request/access, name and URL of the retrieved file
• Website from which the access is made (referrer URL)
• Time zone difference to GMT
• Content of the request (specific page)
• Access status/http status code
• Amount of data transferred in each case
• Website from which the request comes
• the sub-websites which are accessed via an accessing system on our website
• browser used / browser type, possibly your computer's operating system, its interface and the name of your access provider
• Language and version of the browser software
• other similar data and information used for security purposes in the event of attacks on our information technology systems

The data is collected by us for the following purposes:

• Ensuring a smooth connection to the website
• Ensuring a comfortable use of our website
• Analysing system security and stability and
• Ensuring the long-term functionality of our information technology systems and the technology of our website
• to provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber attack
• for other administrative purposes.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the above-mentioned purposes for data collection.

When using this general data and information, we do not draw any conclusions about the data subject. This anonymously collected data and information is therefore analysed by us both statistically and with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimal level of protection for the personal data processed by us. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.

We also use cookies and analysis services when you visit our website. You will find more detailed explanations on this from § 5 of this privacy policy.

When you contact us by e-mail or via our contact form, we collect the necessary personal data from you via the web form (surname, first name, address, e-mail address, telephone number (landline and/or mobile) or, if you contact us via social media, the name, user name or other contact details. This data is collected and stored in order to identify you as a customer, to answer your questions and provide you with personalised advice or to process your travel booking. Data processing for the purpose of contacting us is carried out at your request and is required in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR for the purposes mentioned for the appropriate processing of your non-binding enquiry, catalogue order or booking request and for the mutual fulfilment of obligations arising from the travel contract or for the implementation of pre-contractual measures.

The personal data entered by the data subject is collected and stored exclusively for internal use by the controller and for its own purposes. The controller may arrange for the data to be passed on to one or more processors, such as a parcel service provider, who will also use the personal data exclusively for internal use attributable to the controller.

By registering on the controller’s website, the IP address assigned by the data subject’s Internet service provider (ISP), the date and time of registration are also stored. This data is stored against the background that this is the only way to prevent misuse of our services and, if necessary, to enable criminal offences to be investigated. In this respect, the storage of this data is necessary to safeguard the data controller. This data is not passed on to third parties unless there is a legal obligation to pass it on or it serves the purpose of criminal prosecution.

The registration of the data subject with voluntary provision of personal data serves the controller to offer the data subject content or services which, due to the nature of the matter, can only be offered to registered users. Registered persons are free to change the personal data provided during registration at any time or to have it completely deleted from the controller’s database.

The controller shall provide any data subject at any time upon request with information about which personal data relating to the data subject is stored. Furthermore, the controller shall rectify or erase personal data at the request or indication of the data subject, insofar as this does not conflict with any statutory retention obligations. All of the controller’s employees are available to the data subject as contact persons in this context, in particular Geotoura’s data protection officer, who can be contacted at datenschutz@geotoura.com .

This data received from you is collected, processed and used by us to enable you to make use of the website (usage data) and insofar as this is necessary for the establishment, execution or termination of the contract (contract fulfilment) and customer service. This data will not be passed on to third parties without your express consent.

Data deletion and storage duration

All personal data will only be stored for as long as is necessary for the stated purpose (processing your enquiry or handling) and the fulfilment of the contract. We delete this data after storage is no longer necessary or restrict processing if there are statutory retention obligations (Art. 7 para. 6 lit. c GDPR). The criterion for the duration of the storage of personal data is the respective statutory retention period. After this period has expired, the corresponding data is routinely deleted if it is no longer required to fulfil or initiate a contract.

If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you below from § 5 onwards about the respective processes. We also state the specified criteria for the storage period.

If there is no legal basis for the processing of your personal data, we will obtain the consent of the data subject.

• the right to revoke any consent you have given us at any time. The consequence of this is that we may no longer continue the data processing based on this consent in the future (right of cancellation).

Right to information / further rights: You have the following rights pursuant to Art. 15 GDPR

• the right to information about the personal data processed by us and the processing purposes, the category of personal data, the recipients or categories of recipients to whom this data has been or will be disclosed, the planned storage period, or about
• the right to restriction of processing,
• the right to object to processing,
• the right to data portability (data portability),
• the right to know the origin of your data if it was not collected by us,
• the right to know the existence of automated decision-making including profiling and, where applicable, the right to request meaningful information about its details.

Right to rectification of data: In accordance with Art. 16 GDPR, you have the right to

• the right to demand the immediate correction of incorrect or the completion of your personal data stored by us.

Right to erasure: You have the following rights pursuant to Art. 17 GDPR

• the right to request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.

Right to restriction of processing: Pursuant to Art. 18 GDPR, you have the right to

• the right to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR.

Right to data portability: You have the following rights pursuant to Art. 20 GDPR

• the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller.

Right to lodge a complaint: You have the right pursuant to Art. 77 GDPR

• the right to complain to a data protection supervisory authority about the processing of your personal data by us. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or the registered office of our company.

Furthermore, as a data subject, you have the right to obtain information as to whether personal data has been transferred to a third country or to an international organisation. If this is the case, the data subject also has the right to obtain information about the appropriate safeguards in connection with the transfer. If a data subject wishes to avail himself of this right of access, he or she may, at any time, contact any employee of the controller.

Your personal data will not be transferred to third parties for purposes other than those listed below.

We only pass on your personal data to third parties if:

• you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
• the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
• in the event that a legal obligation exists for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, as well as
• in the event that this is legally permissible and necessary for the processing of contractual relationships with you pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR.

In addition to the data mentioned in § 2, information is stored on your computer in the form of a cookie within your browser software when you visit our website. The use of cookies makes it easier for you to use the website, as we recognise your computer when you visit again, making it easier for you to enter data repeatedly. Cookies are small text files with configuration information that are stored on your hard drive and assigned to the browser you are using and through which certain information flows to the organisation that sets the cookie (in this case us).

The cookies we use help us to determine the frequency of use and the number of users of our website and to enable you to make full use of the service. Cookies cannot execute programmes or transfer viruses to your computer. They serve to make the website more user-friendly and effective overall.

This website uses transient cookies and persistent cookies.

Transient cookies are automatically deleted when you close the browser. These include session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.

Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in your browser’s security settings.

The data processed by cookies is required for the purposes mentioned to protect our legitimate interests and those of third parties in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

Most browsers are set to accept cookies automatically. However, you can deactivate the storage of cookies or set your browser to notify you as soon as cookies are sent or to delete them automatically. You also have the option of deleting the stored cookies from your hard drive at any time.

Please note that if you delete cookies, you must expect a restricted display of the site and limited user guidance. In principle, however, this limited use of our services is also possible without cookies.

If you put together a trip with the Geotoura trip planner on https://www.geotoura.com/up/ , Geotoura saves the settings you have made (travel stops, number of overnight stays, selected hotel categories, etc.) in the local storage of your browser so that your route can be restored when you call up the trip planner again, e.g. after closing or crashing the browser.

Functional cookies: These cookies allow the website to improve functionality and personalisation. They may be set by us or by third parties whose services we have added to our pages. The purpose of these cookies is to provide you with a more personalised experience on our website based on your previous visits. If you do not allow these cookies, some or all of these services may not function properly.

How can you set the cookies? When you access the website for the first time, a pop-up window (“Cookie settings”) will inform you about cookies and ask you to accept them, manage your settings or reject the cookies. In addition, you can change your selection at any time and revoke your consent to optional cookies via the “Cookie settings” button. Cookie settings are likely to affect the conditions for accessing the website. Rejecting all cookies can have a significant impact on access to and use of the website.

Cookie settings from your browser: Your browser can also be set to notify you about cookies placed on your device and prompt you to accept them or not. This configuration is described in the browser’s help menu, which allows you to change your cookie selection.

Cookies that we use via our partners:

Google

Dienst: Google Analytics 4

Cookie: _ga

Scope: 1st Party

Category: Statistics

Purpose: This cookie stores a randomly generated user ID that allows Google Analytics to recognise returning users and merge data from previous visits.

Storage duration: 2 years

Cookie: _ga_ABCDEF

Scope: 1st Party

Category: Statistics

Purpose: This cookie contains a randomly generated user ID that allows Google Analytics to identify returning users and integrate data from previous visits.

Storage duration: 2 years

Cookie: IDE

Scope: double-click.net(3rd Party)

Category: Statistics

Purpose: This cookie stores a randomly generated user ID that enables Google to recognise users across domains and to serve personalised advertising.

Storage period: 1 year

Google Ads

Cookie: _gcl_au

Scope: 1st Party

Category: Marketing

Purpose: Generates a randomly generated user ID.

Storage duration: 90 days

Cookie: _gcl_aw and _gcl_dc

Scope: 1st Party

Category: Marketing

Purpose: This cookie is activated when a user visits the website by clicking on a Google advert. It stores data on the clicked advert in order to allocate associated successes such as travel or contact enquiries.

Storage period: 90 days

Microsoft

Dienst: Microsoft Advertising / Bing Ads

Cookie: _uetsid

Scope: 1st Party

Category: Marketing

Purpose: This cookie contains a randomly generated session ID that allows Microsoft to track various actions such as page views, clicks and orders as part of a single website session.

Storage duration: 24 hours

Cookie: _uetvid

Scope: 1st Party

Category: Marketing

Purpose: This cookie stores a randomly generated user ID that allows Microsoft to recognise returning users and merge data from previous visits.

Storage duration: 4 weeks

Cookie: _uetmsclkid

Scope: 1st Party

Category: Marketing

Purpose: This cookie is activated when a user reaches the website by clicking on a Microsoft Bing advert. It stores information about the selection criteria of the advert, such as the search term used, and allocates advertising successes to specific Bing campaigns.

Storage period: 3 months

Meta

Dienst: Facebook Ads

Cookie:_fbp

Scope: 1st Party

Category: Marketing; Facebook is operated by Meta Platforms Ireland Ltd, based in Dublin, as the owner of the social network Facebook, the photo and video sharing app Instagram, the messaging service WhatsApp and Oculus BR, a manufacturer of virtual reality devices.

Purpose: Contains a randomly generated user ID and the time of your first visit. Facebook can use this ID to recognise returning users on this website and merge data from previous visits.

Storage duration: 90 days

Cookie:_fbc

Scope: 1st Party

Category: Marketing

Purpose: This cookie stores a randomly generated user ID and the time of the first visit. This allows Facebook to recognise returning users and merge data from previous visits.

Storage duration: 90 days

This website uses so-called web fonts from the following provider for the standardised display of fonts: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly and establishes a direct connection to the provider’s servers. During this process, certain browser information, including your IP address, is transmitted to the provider. If your browser does not support web fonts, a standard font will be used by your computer.

The processing of personal data in the course of establishing a connection with the font provider is only carried out if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service via the “Cookie settings” tool provided on the website (see also the button on our website). Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/”

For data transfers to the USA, the provider has signed up to the EU-US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission. Transfers to third countries are possible. Data may also be transferred to: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For third countries/companies for which an adequacy decision exists, the adequacy decision also applies. You can deactivate this tool via the cookie settings. Legal basis: Art. 6 para. 1 lit. a GDPR.

With the tracking measures mentioned below and used on our website, we want to ensure that our website is designed to meet your needs and is continuously optimised. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you. The respective data processing purposes and data categories as well as the legal basis can be found in the description of the corresponding tracking tool.

This website uses Google Analytics 4, a web analysis service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables your use of our website to be analysed.

By default, Google Analytics sets 4 cookies when you visit the website, which are stored as small text modules on your end device and collect certain information. The scope of this information also includes your IP address, which, however, is shortened by Google by the last digits in order to exclude a direct personal reference.

The information is transferred to Google servers and processed there. Transmission to Google LLC based in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) is also possible.

Google uses the information collected on our behalf to analyse your use of the website, to compile reports on website activity for us and to provide other services relating to website activity and internet usage. The abbreviated IP address transmitted by your browser as part of Google Analytics 4 will not be merged with other Google data. The data collected as part of the use of Google Analytics 4 is stored for a period of two months and then deleted.

All processing described above, in particular the setting of cookies on the terminal device used, will only take place if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. Without your consent, Google Analytics 4 will not be used during your visit to our website. You can revoke your consent at any time with effect for the future. To exercise your right of cancellation, please deactivate this service using the “Cookie settings” tool provided on our website (see also the button on our website).

We have concluded an order processing contract with Google, which ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.

Further legal information on Google Analytics 4 can be found at https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites

Demographic characteristics

Google Analytics 4 uses the special function “demographic characteristics” and can use it to create statistics that make statements about the age, gender and interests of site visitors. This is done by analysing advertising and information from third-party providers. This allows target groups to be identified for marketing activities. However, the data collected cannot be assigned to a specific person and is deleted after being stored for a period of two months.

Cookies used: see § 5.

Transfers to Google Ireland Ltd. and to third countries are possible. For third countries/companies for which an adequacy decision exists, the adequacy decision also applies. For data transfers to the USA, the provider Google has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

Deletion/revocation: You can deactivate this tool via the “Cookie settings” button on our website. Legal basis: Art. 6 para. 1 lit. a GDPR.

This website uses the Google Ads Conversion service of Google Ireland Ltd. to draw attention to our attractive offers with the help of advertising material (so-called Google Ads) on external websites. We can determine how successful the individual advertising measures are in relation to the advertising campaign data. We are interested in showing you adverts that are of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.

These adverts are delivered by Google via so-called “ad servers”. For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as the display of adverts or clicks by users, can be measured. If you access our website via a Google advert, Google Ads will store a cookie on your end device. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that a user no longer wishes to be addressed) are usually stored as analysis values for this cookie.

These cookies enable Google to recognise your internet browser. If a user visits certain pages of the website of Ads customers and the cookie stored on their computer has not yet expired, Google and the customers can recognise that a user has clicked on the ad and has been redirected to this page. Each Ads customer receives a different cookie. Cookies can therefore not be tracked via the websites of Ads customers. We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical analyses from Google. These analyses allow us to identify which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material; in particular, we cannot identify users on the basis of this information.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: Through the integration of Ads Conversion, Google receives the information that you have accessed the corresponding part of our website or clicked on an advert from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that Google will find out your IP address and store it.

Google Ads Remarketing

We use the remarketing function within the Google Ads service. With the remarketing function, we can present users of our website with adverts based on their interests on websites within the Google advertising network (in Google Search or on YouTube, so-called “Google Ads” or on other websites). For this purpose, the interaction of users on our website is analysed, e.g. which offers a user was interested in, in order to be able to display targeted advertising to users on other sites even after they have visited our website. For this purpose, Google stores cookies on the end devices of users who visit certain Google services or websites in the Google Display Network. These cookies are used to record the visits of this user. The cookies are used to uniquely identify a web browser on a specific end device and not to identify a person.

Cookies used: see § 5.

Transfers to Google Ireland Ltd. and to third countries are possible. The adequacy decision also applies to third countries/companies for which an adequacy decision exists. For data transfers to the USA, the provider Google has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

Deletion/revocation: You can deactivate this tool via the “Cookie settings” button on our website. Legal basis: Art. 6 para. 1 lit. a GDPR.

This website uses the “Google Tag Manager”, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”).

Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analysis services, and calibrating, controlling and linking them to conditions via a standardised user interface. Google Tag Manager itself does not store or read any information on user devices. The service also does not carry out any independent data analyses. However, Google Tag Manager transmits your IP address to Google when you access a page and may store it there. It may also be transmitted to servers of Google LLC. in the USA is possible.

This processing will only be carried out if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, Google Tag Manager will not be used during your visit to our website. You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the “cookie settings” provided on our website (see button at the bottom of page 1).

We have concluded an order processing contract with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider has signed up to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

Doubleclick by Google is a service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Doubleclick by Google uses cookies to present you with adverts that are relevant to you. A pseudonymous identification number (ID) is assigned to your browser in order to check which adverts have been displayed in your browser and which adverts have been viewed. The cookies do not contain any personal information. The use of DoubleClick cookies only enables Google and its partner websites to display adverts based on previous visits to our or other websites on the Internet. The information generated by the cookies is transmitted by Google to a server in the USA for analysis and stored there. A transfer of data by Google to third parties only takes place on the basis of legal regulations or in the context of order data processing. Under no circumstances will Google combine your data with other data collected by Google.

By using our websites, you consent to the processing of the data collected about you by Google and the manner of data processing described above as well as the stated purpose. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of our website. You can also prevent Google from collecting the data generated by the cookies and relating to your use of the websites and from processing this data by Google by clicking on the following link: https://adssettings.google.com/u/0/authenticated?hl=en-GB by downloading and installing the browser plugin available under the DoubleClick deactivation extension. Alternatively, you can deactivate the DoubleClick cookies on the Digital Advertising Alliance website at the following link https://optout.aboutads.info/?c=2#!/ .

Data is collected and stored on our website using Bing Ads technologies, from which user profiles are created using pseudonyms. This is a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. The main service provider is Microsoft Ireland Operations Limited, Ireland.

This service enables us to track the activities of users on our website if they have reached our website via adverts from Bing Ads. If you reach our website via such an advert, a cookie is placed on your computer. A Bing UET tag is integrated on our website. This is a code that is used to store data about the use of the website. This includes, among other things, the time spent on the website, which areas of the website were accessed and which ad the user used to access the website. Information about your identity is not recorded.

In addition, Microsoft may be able to track your usage behaviour across several of your electronic devices through so-called cross-device tracking and is therefore able to display personalised advertising on or in Microsoft websites and apps. You can deactivate this behaviour at https://choice.microsoft.com/de-de/opt-out .

You can find more information about Bing’s analytics services on the Bing Ads website https://help.bingads.microsoft.com/#apex/3/de/53056/2 You can find more information on data protection at Microsoft and Bing in Microsoft’s privacy policy https://privacy.microsoft.com/de-de/privacystatement . Microsoft uses this cookie to understand the content you have interacted with on our websites in order to be able to send you targeted advertising later. Microsoft may then be able to track your usage behaviour across several of your electronic devices through so-called cross-device tracking and is thus able to display personalised advertising on or in Microsoft websites and apps. You can deactivate this behaviour at https://choice.microsoft.com/de-de/opt-out.

Platform/hosting service providers receive access to personal data from a third country (countries outside the European Economic Area). You can deactivate the tool via the cookie settings here.

Lifetime of cookies: up to 3 months after the last interaction (this only applies to cookies set via this website, see § 5.

You can find more information about Bing’s analytics services on the Bing Ads website https://help.ads.microsoft.com/#apex/3/de/53056/2

Deletion/revocation: You can deactivate this tool via the “Cookie settings” button on our website. Legal basis: Art. 6 para. 1 lit. a GDPR.

Our website uses the so-called “Facebook Pixel” and the Conversions API of the social network “Facebook” from Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (Meta). However, according to Facebook, the data collected is also transferred to the USA and other third countries.

Facebook (Website) Custom Audiences: We use the Facebook Pixel and the Conversions API for remarketing purposes in order to be able to address you again within 180 days. This allows users of the website to be shown interest-based adverts (“Facebook Ads”) when they visit the social network “Facebook” or other websites that also use the process. We are interested in showing you adverts that are of interest to you in order to make our website and offers more interesting for you.

Facebook Conversion: With the help of the Facebook pixel and the Conversions API, we want to ensure that our Facebook ads correspond to the potential interest of users and are not annoying. With the help of the Facebook pixel, we can track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called “conversion”).

Due to the marketing tools used (Facebook Pixel and Conversions API), your browser automatically establishes a direct connection with the Facebook server as soon as you have consented to the use of cookies requiring consent. By integrating the Facebook pixel and using the Conversions API, Facebook receives the information that you have accessed the corresponding website of our Internet presence or have clicked on an advert from us. If you are registered with a Facebook service, Facebook can assign the visit to your account.

The processing of data by Facebook takes place within the framework of Facebook’s privacy policy. Specific information and details about the Facebook pixel and the Conversions API and how it works can also be found in the Facebook help section.

The cookies used can be found in § 5 of this privacy policy.

Further information on how Meta processes personal data, including its legal basis and further information on the rights of data subjects can be found here: https://www.facebook.com/about/privacy. We transfer the data within the scope of joint responsibility on the basis of legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.

You can deactivate the tool via the cookie settings here and for logged-in users at https://www.facebook.com/settings/?tab=ads#.

Lifetime of cookies: see § 5.

This processing only takes place if you have consented to the use of cookies (meta pixels) in the cookie settings in the cookie banner on our website. The use of this service is therefore only based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent can be revoked at any time.

The data collected is anonymous for us as the operator of this website; we cannot draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Usage Policy (https://de-de.facebook.com/about/privacy/). This enables Facebook to place adverts on Facebook pages and outside of Facebook. This use of the data cannot be influenced by us as the site operator.

If personal data is collected on our website with the help of the tool described here and forwarded to Facebook, we and Meta Platforms Ireland Limi-ted, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook. The processing carried out by Facebook after forwarding is not part of the joint responsibility. The obligations incumbent on us jointly have been set out in an agreement on joint processing. The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing the data protection information when using the Facebook tool and for the secure implementation of the tool on our website in accordance with data protection law. Facebook is responsible for the data security of Facebook products. You can assert data subject rights (e.g. requests for information) regarding the data processed by Facebook directly with Facebook. If you assert your data subject rights with us, we are obliged to forward them to Facebook.

Joint responsibility: The creation of individualised or suitable advertisements, as well as for their optimisation, delivery of commercial and transaction-related messages (e.g. via Messenger). The following processing operations are therefore not covered by joint processing: The processing that takes place after collection and transmission is the sole responsibility of Meta. The creation of reports and analyses in aggregated and anonymised form is carried out as part of commissioned processing and is therefore our responsibility.

The contact details of the responsible company and Facebook’s data protection officer can be found here: https://www.facebook.com/about/privacy/

You can also deactivate the remarketing function “Custom Audiences” in the settings for adverts at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be logged in to Facebook to do this.

If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

Geotoura informs its customers and business partners at regular intervals by means of a newsletter about company offers and gives users the opportunity to subscribe to it. If you register for our newsletter using the input mask, the personal data (e-mail address) you provide when registering for the newsletter will be transmitted to the data controller and stored. Our company’s newsletter can only be received by the data subject if (1) the data subject has a valid e-mail address and (2) the data subject registers to receive the newsletter. For legal reasons, a confirmation e-mail is sent to the e-mail address entered by a data subject for the first time for the newsletter dispatch using the double opt-in procedure. This confirmation email is used to check whether the owner of the email address as the data subject has authorised the receipt of the newsletter. Geotoura may arrange for the data to be passed on to a processor, e.g. a lettershop, which will also use the personal data exclusively for internal use attributable to the controller. Your data will not be passed on to unauthorised third parties. When registering for the newsletter, we also store the IP address assigned by the Internet service provider (ISP) of the computer system used by the data subject at the time of registration, as well as the date and time of registration. The collection of this data is necessary in order to be able to trace the (possible) misuse of a data subject’s e-mail address at a later date and therefore serves as legal protection for the controller.

We use rapidmail to send our newsletter. Your data will therefore be transmitted to rapidmail GmbH. In doing so, rapidmail GmbH is prohibited from using your data for purposes other than sending the newsletter. rapidmail GmbH is not permitted to pass on or sell your data. rapidmail is a German, certified newsletter software provider that has been carefully selected in accordance with the requirements of the GDPR and the BDSG. Further information on data protection can be found in rapidmail’s privacy policy: https://www.rapidmail.de/datensicherheit

The personal data collected as part of a registration for the newsletter is used exclusively to send our newsletter. Furthermore, subscribers to the newsletter may be informed by e-mail if this is necessary for the operation of the newsletter service or a registration in this regard, as could be the case in the event of changes to the newsletter offer or changes to the technical circumstances.

The subscription to our newsletter can be cancelled by the data subject at any time. The consent to the storage of personal data, which the data subject has given us for the newsletter dispatch, can be revoked at any time. There is a corresponding link in every newsletter for the purpose of revoking consent. It is also possible to unsubscribe from the newsletter at any time directly on the controller’s website or to inform the controller of this in another way. By sending a message to datenschutz@geotoura.com , you can object to the use or processing of your data for advertising, market or opinion research purposes at any time and unsubscribe from the newsletter free of charge (at basic rates).