Provision and use of the Website
When you access and use our Website, we collect personal data that your browser and/or application automatically sends to our server. This information is temporarily saved in a log file. When you use our website, we collect the following information,
which we need for technical reasons in order to display our Website to you and ensure stability and security:
Every time a User accesses the Website or the app and every time a file is accessed, access data related to this action is stored in a log file on our server. This data includes:
- Browser type/version
- Operating system used
- Referring URL (the site previously visited)
- Host name of the accessing computer (IP address)
- Time and date of the server request
- Volume of data transmitted and access status (file transmitted, file not found,
This data is used to generate pseudonymised internal statistics that help us to analyse the use of the Website, correct errors and improve our services. It is not used for any other purpose related to you individually. In particular, this data is not merged with other data sources. This data is automatically deleted after the statistical assessment. You can prevent your pseudonymised data being used for
statistical purposes at any time by changing the settings in your browser to prevent cookies from being stored on your computer (see section 7).
The legal basis for the specified data processing is Article 6(1)(f) GDPR. The processing of the specified personal data is necessary to provide the Website and therefore serves to safeguard a legitimate interest of our company.
The temporary storage of an IP address by the system is necessary for the purpose of transmitting the Website to the computer of the User. The IP address of the user has to be stored for the duration of the session.
As soon as the specified data is no longer necessary to display the Website, it will be deleted. The collection of data to provide the Website and the storage of data in log files is necessary for the operation of the Website. Consequently, the User does not have the right to object to such use. The data may be stored for longer periods in individual cases if such storage is legally required.
Reservations and bookings
You can make a booking on our Website. When you do this, the following personal data will be entered into a form and processed by us:
- Name and surname
- Email address
- Phone number (if provided)
- Company name (if provided)
- Tax number (if provided)
- Bank details or credit card information (if provided)
In order to process payments, we will share your payment details with the financial institution that has been engaged to process the payment and to any payment service provider we have engaged or the payment service you choose when you place the order. These companies may only use your personal data to execute the contract and not for any other purposes.
For payment settlement it is necessary that our payment service provider processes personal data for 3D Secure 2.0 protocol. 3D Secure 2.0 is a protocol for safer and stronger customer authentication carried out in compliance with EU Directive 2015/2366 (on payment services in the internal market 2, PSD 23).
For this purpose, further personal data will be processed, in particular:
- Transaction data
- Browser information, e.g. IP address and/or browser language
- Billing and/or delivery address
- Customer account data (e.g. length of existence of the customer account)
The above personal data are processed in connection with a booking or reservation in order to execute a contract between you and us in accordance with Article 6(1)(b) GDPR. This also applies to data processing that is necessary to take steps prior to entering into a contract.
As soon as the processed personal data is no longer necessary to execute the contract, it will be erased. After the conclusion of the contract, it may be necessary to store personal data concerning you in order to comply with contractual or statutory obligations. The data may be stored for longer periods in individual cases if such storage is legally required.
Contact form and email correspondence
We offer a possibility to contact us via electronic contact form. The personal data you enter in the form will be transferred to us. If you use the contact form, the following personal data concerning you will be processed:
- Email address
- First name and surname
- Any other personal data included in the message
Additionally, the following personal data will be stored when the message is sent:
- IP address
- Date and time of your message
Alternatively, you can contact us at the email address provided. In this case, your personal data that is transmitted along with the email will be stored. The personal data will not be disclosed to third parties in this context. The personal data will only be used to process your enquiry.
The legal basis for the processing of personal data is Article 6(1)(f) GDPR. We have a legitimate interest in responding to enquiries that you email or send via contact form to us. Additionally, pursuant to Article 6(1)(f) GDPR, we have a legitimate interest in processing personal data during the sending process in order to prevent misuse of the contact form and protect our IT systems.
After we have processed your enquiry, the personal data will be erased unless the erasure is prevented by contractual or statutory retention periods. You have the right to withdraw your consent to the processing of personal data at any time. If you contact us by email, you can object to the processing of your personal data at any time. In this case, it will not be possible to process your enquiry any further. All personal data collected as part of your contacting us will be erased in this case unless the erasure is prevented by contractual or statutory retention periods.
Persons under the age of 18 should not provide us with any personal data without the consent of their parents or guardians. We do not request personal data from children and adolescents, nor do we collect such data or forward it to third parties.