Name and address of the controller
The controller (“we”) within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States and other data protection provisions is:
Scan Travel Services GmbH
Sülldorfer Landstraße 56
Phone.: +49 (0) 40 389 21 27
Data protection officer
The controller’s data protection officer can be contacted at the above address, for the attention of the data protection officer, or at email@example.com.
Information on the collection of personal data
We provide you below with information on the collection of personal data when using our website. Personal data are all data which concern you personally e.g. name, address, email addresses, user behaviour.
When you contact us by email or using a contact form, the data provided by you (your email address, your name and telephone number, if applicable) are stored by us in order for us to answer your questions. We erase the resulting data in this context when storage is no longer required or we restrict the processing if legal obligations to keep and retain records exist. The legal basis is Art. 6 (1) sentence 1 f) GDPR or, if it serves the performance of a contract or to take steps prior to entering into a contract, Art. 6 (1) sentence 1 b) GDPR.
If we have recourse to the resources of engaged service providers for individual functions of our website or wish to use your data for advertising purposes, you will be informed of the respective processes in detail below. We also state the criteria determined for the storage period.
You have the following rights vis-à-vis ourselves regarding personal data concerning yourself:
- right of access
- right to rectification or erasure
- right to restriction of the processing
- right to object to the processing
- right to data portability
You also have the right to lodge a complaint with a supervisory authority on data protection concerning the processing of your personal data by us.
Collection of personal data when visiting our website
When using the website merely for informational purposes i.e. if you do not register or otherwise transmit information to us, we will collect only the personal data which your browser transmits to our server. If you wish to view our website, we will collect the following data which are technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 (1) sentence 1 f) GDPR):
- Information concerning the browser type and the version used
- User’s operating system and its interface
- User’s internet service provider
- User’s IP address
- Date and time of access
- Websites from which the user’s system accesses our website
- Websites which are accessed by the user’s system via our website
- Volume of data transmitted
- Access status/HTTP status code
In addition to the above-mentioned data, cookies are stored on your computer when you use our website. Cookies are small text files which are stored on your hard drive, allocated to the browser you use, and through which the party setting the cookie (in this case by us) receives certain information. Cookies cannot be used to run programs or deliver viruses to your computer. Their purpose is to make the website overall more user friendly and efficient.
- a) This website uses the following types of cookies. Their scope and functioning are explained below:
- transient cookies (see b)
- persistent cookies (see c).
- b) Transient cookies are automatically deleted when you close your browser. They include in particular session cookies. They store a so-called session ID that can be used to assign various inquiries from your browser during the shared session. This enables your computer to be recognised when you return to our website. Session cookies are deleted when you log out or close your browser.
- c) Persistent cookies are automatically deleted after a prescribed period, which can vary depending on the cookie. You can delete these cookies in the security settings of your browser at any time.
In our blog, where we publish different articles on subjects relating to our activities, you can make public comments. Your comments on the article are published with your specified user name. We recommend that you use a pseudonym instead of your real name. Indication of user name and email address is required, all other information is voluntary. If you make a comment, we will continue to store your IP address which we will erase after one week. Storage is necessary for us to enable us to defend ourselves against liability claims in cases of possible publication of illegal content. We need your email address to contact you if a third party challenges your comment as illegal. The legal bases are Art. 6 (1) sentence 1 b) and f) GDPR. Comments are not reviewed before publication. We reserve the right to delete comments if they are challenged by third parties as illegal.
Our website provides you with the possibility of applying for job vacancies at our company. To apply, you can use the application form. We use data requested via this form (name, address, date of birth and other data on professional qualifications e.g. certificates, curriculum vitae ) solely to process your application and to make a selection decision concerning the vacancy to be filled. If you are then employed, we will store the data provided in your personnel file. The legal basis for processing is Art. 6 (1) sentence 1 b) GDPR.
If you are not employed, we will erase your data at the latest after six months. If you have consented, we will store your data for correspondingly longer in order to consider you for future job vacancies and contact you for such job vacancies. In such case, the legal basis for processing is Art. 6 (1) sentence 1 a) GDPR.
You can object to the use of your data at any time by sending a message to the contact data indicated above. Please note, however, that you will no longer be considered for our job vacancies in such case.
By giving your consent, you can subscribe to our newsletter which provides information on our current events and other news relating to our company. The services covered are stated in the declaration of consent.
We use the so-called double opt-in procedure to register for our newsletter. This means that we send an email to the specified email address after your registration, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically erased after one month. Furthermore, we store your IP addresses used and the time of registration and confirmation. The purpose of the procedure is to prove your registration and to enable clarification of any possible misuse of your data, if applicable.
Providing your email address is the only compulsory information required for sending the newsletter. Providing other separately marked data is voluntary and will be used to enable us to speak to you personally. After your confirmation, we will store your email address for the purpose of sending the newsletter. The legal basis is Art. 6 (1) sentence 1 a) GDPR.
Your consent to the sending of the newsletter can be withdrawn and you can unsubscribe to the newsletter at any time. You can withdraw your consent by clicking on the link provided in every newsletter email, by sending an email to firstname.lastname@example.org or by notifying the contact data provided in the legal notice.
We draw your attention to the fact that we evaluate your user behaviour when sending the newsletter. For this evaluation, emails sent include so-called web beacons or tracking pixels which are single-pixel image files stored on our website. To do so, we link the data automatically collected when visiting the website (see above) and the web beacons to your email address and a unique ID. Data are collected exclusively in pseudonymised form. The IDs are, therefore, not linked to your other personal data. Direct tracking to a specific user is excluded. The legal basis is Art. 6 (1) sentence 1 f) GDPR.
You can object to this tracking at any time by clicking on the separate link provided in each email or informing us by other means of contact. The information will be stored as long as you subscribe to the newsletter. After deregistration, we store data purely for statistical purposes and anonymously.
We use the Matomo open source software tool (formerly PIWIK) on our website to analyse internet behaviour of our users.
When individual pages are accessed on our website, the following data are stored:
(1) three bytes of the IP address of the user’s accessing system
(2) the website accessed
(3) the website from which the user has reached the accessed website (referrer)
(4) the sub-pages visited from the accessed website
(5) the session length on the website
(6) how often the website is accessed
The software runs exclusively on our website servers. Personal data of users is only stored there. Data are not disclosed to third parties. The software is set so that the IP addresses are not stored in full but 1 bytes of the IP address is masked (e.g.: 192.0.2.xxx). In this way, identification of the truncated IP address with the accessing computer is no longer possible. The legal basis for the processing of the personal data of users is Art. 6 (1) f) DSGVO.
Processing of the personal data of users enables us to analyse the internet behaviour of our users. By evaluating the data obtained we are able to compile information on the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness. Anonymisation of the IP address sufficiently takes into account the interest of users in the protection of personal data.
Data will be erased as soon as they are no longer required for our recording purposes. In our case, this is after six months.
Further information on privacy settings for the Matomo software is available under the following link: https://matomo.org/docs/privacy/.
Data are stored exclusively on the servers of ALL-INKL.COM Neue Medien Münnich which also operates this web server. Data are accessible neither to third parties nor are they disclosed to third parties for commercial or non-commercial purposes.
We use the services of Google Adwords to draw attention to our attractive offers by means of advertising media (so-called Google Adwords) on external websites. We can determine the success of individual advertising measures in relation to the data of advertising campaigns. In so doing, our aim is to display advertisements to you which are of interest to you, to design our website in a way which is more interesting for you and to achieve a fair calculation of advertising costs.
Such advertising media are supplied by Google via so-called “ad servers”. For this purpose, we use ad server cookies which enable the measurement of certain performance metrics such as the display of ads or user clicks. If you access our website through a Google ad, Google Adwords will store a cookie on your PC. As a rule, these cookies lose their validity after 30 days and are not intended to identify you personally. Linked to this cookie, the unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions), as well as opt-out information (a note that the user no longer wants to be addressed) are typically saved as analysis values.
These cookies allow Google to recognise your Internet browser. If a user visits certain pages of the website of an Adwords customer and the cookie stored on his/her computer has not yet expired, Google and the customer will be able to detect that the user clicked on the ad and was redirected to that page. Each Adwords customer is assigned a different cookie. Cookies cannot, therefore, be tracked via the websites of Adwords customers. We ourselves do not collect and process any personal data in the above-mentioned advertising measures. We merely receive statistical evaluations provided by Google. Based on these evaluations, we can identify which of the advertising measures used is particularly effective. We do not receive any further data from the use of the advertising media, in particular we cannot identify the users based on this information.
By reason of the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no control over the extent and the further use of the data collected by Google through using this tool and, therefore, inform you according to the status of our knowledge: By incorporating AdWords conversion, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our ads. Provided that you are registered with a service provided by Google, Google can associate the visit with your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will ascertain and store your IP address.
You can prevent participation in this tracking process in several ways: a) by adjusting your browser software accordingly, in particular, the suppression of third-party cookies will prevent you from receiving any third-party ads, b) by disabling the cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com”, https://www.google.de/settings/ads, whereby this setting will be deleted when you delete your cookies; c) by deactivating the interest-based advertisements of the providers that are part of the “About Ads” self-regulation campaign via the link http://www.aboutads.info/choices, whereby this setting will be deleted when you delete your cookies, d) by permanent deactivation in your browsers Firefox, Internet Explorer or Google Chrome via the link http://www.google.com/settings/ads/plugin. Please be aware that this may prevent the full use of all features of this website.
The legal basis for the processing of your data is Art. 6 (1) sentence 1 f) GDPR. Further information on data privacy at Google is available here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org. Google has joined the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.