Verklaring bescherming persoonsgegevens

Welcome to Albatross Reisen GmbH and our online presence, in particular www.albatross-reisen.de .

We are delighted that you are interested in our offers. We take the protection of your privacy and personal data very seriously. Your data is therefore always collected and used in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 (GDPR), the Federal Data Protection Act (BDSG), the Act on Data Protection and Privacy in Telecommunications and Digital Services (TDDDG) and the Digital Services Act (DDG).
As the data controller, we hereby inform you about the data we collect and how we process it.

1. Personal data

Personal data within the meaning of Art. 4 No. 1 GDPR is any information relating to an identified or identifiable natural person.
A natural person is considered identifiable if they can be identified directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special characteristics that express the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.
Personal data is only stored to the extent necessary to provide the booked service, to comply with legal requirements or for the purpose specified below.

2. Responsible entity for data processing

The controller for this online presence within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States as well as other data protection regulations is:

Albatross Reisen GmbH
Marktbreiter Straße 11
97199 Ochsenfurt

The operation of our Facebook fan page constitutes joint processing in accordance with Art. 26 GDPR.

We ourselves have no influence on the processing of data by Facebook. Facebook assumes responsibility for the processing of so-called insights data and the fulfilment of corresponding obligations under the GDPR. Further information is available at:

https://www.facebook.com/legal/terms/page_controller_addendum and at:

https://www.facebook.com/legal/terms/page_controller_addendum

3. Purpose of collecting personal data

a) However, the collection of personal data is essential if you wish to book a trip or other service via our portal, contact us, subscribe to our newsletter or use other offers on our website for which personal data is essential. This includes voucher purchases and participation in competitions. When booking a stay at or any other service, the data collected will be used to process this booking, for advertising purposes within the legal requirements and for statistical purposes.

b) In accordance with the legal regulations and in the interests of data economy, only data that is necessary for the provision of this particular service will be collected. If we ask for further information in our forms, the provision of this information is always voluntary and marked as such.

c) The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. Storage in log files is also carried out to ensure the functionality of the website. In addition, the data serves to optimise the website and to ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context. These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 (1) lit. f GDPR. The data is also stored in our system's log files. This does not affect the user's IP addresses or other data that enables the data to be assigned to a user. This data is not stored together with other personal data of the user.

d) In the case of booking a stay or other service, the data collected in this process will be used for the processing of this booking, within the legal requirements, for advertising purposes and for statistical purposes.

e) If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass on this data without your consent.

This data is processed on the basis of Art. 6 (1) (b) GDPR, provided that your enquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested; consent can be revoked at any time.

To do so, simply send us an informal email. The lawfulness of the data processing operations carried out until revocation remains unaffected by the revocation.

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to its storage, or the purpose for data storage no longer applies (e.g. after your enquiry has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

f) If you subscribe to our newsletter, we also store and use the personal data and details of your stay that you provided when booking on the basis of Art. 6 (1) (f) GDPR in order to provide you with the best possible service as a newsletter subscriber.

g) We also use the personal data we store to maintain customer relationships, for customer service (e.g. information about the course of your stay), to carry out our own advertising and marketing measures (e.g. sending catalogues, other advertising mailings within the scope of the law, customer satisfaction surveys) and for order processing. The legal basis for sending the newsletter as a result of the sale of goods or services is Section 7 (3) UWG (German Unfair Competition Act).

4. Legal basis for the processing of personal data

a) Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis. Your consent ensures the lawfulness of the processing.

You may revoke your consent at any time. Please note that the revocation is effective for the future and does not affect processing that took place before the revocation.

b) When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.

c) Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

d) In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

e) If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing.

This is particularly the case in the following groups of cases:

- Review and optimisation of procedures for needs analysis and direct customer contact,

- Advertising, provided you have not objected to the use of your data,

- Ensuring IT security and IT operations,

- Prevention and investigation of criminal offences,

- Measures for business management and further development of services and products.

f) When you use social media companies, usage profiles are created based on your usage behaviour and used to display advertisements. Cookies are usually stored on your computer for this purpose. If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 (1) lit. f GDPR serves as the legal basis for processing.

5. Transfer of personal data to third parties

Your personal data will only be transferred within the relevant legal requirements, in particular those relating to data protection and competition law.

Insofar as this is necessary for the performance of the contractual services owed by us or for the fulfilment of legal obligations, your data will also be transferred to subcontractors or service providers for the performance of the service on our behalf or on our instructions (e.g. technical processing of postal and e-mail dispatch, payment processing, customer service).

In addition, the data will be passed on to persons or companies for the purpose of processing your booking, in particular to accommodation providers, booking partners, service providers, insurers, airlines, tour operators, hotels, travel agencies, car rental companies, cruise lines, authorities, etc. Please note that the data protection regulations at the registered office of these persons and companies may differ from those in the United Kingdom.

Your data will also be disclosed and transferred to third parties if we are obliged to do so by law or as a result of legally binding court proceedings.

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format. You also have the right to transfer this data to another controller without hindrance from the controller to whom the personal data was provided.

6. Transfer and transmission of data to a third country or to an international organisation

Data will only be transferred to third countries (countries outside the European Economic Area – EEA) if this is necessary for the execution of our offers, if it is required by law or if you have given us your consent. If required by law, we will inform you of the details.

If data is transferred in this sense from our reservation system hosted in the EU to a third country for support purposes, this is secured by appropriate safeguards in accordance with Art. 46 GDPR (in particular by agreeing standard contractual clauses and appropriate technical and organisational measures).

Among other things, we use tools from companies based in the USA or other third countries that do not have a level of data protection comparable to that of the EU. When these tools are active, your personal data may be transferred to these third countries and processed there.

We would like to point out that the USA, as a safe third country, generally has a level of data protection comparable to that of the EU. Data transfer to the USA is permissible if the recipient is certified under the EU-US Data Privacy Framework (DPF) or has appropriate additional safeguards in place.

We would like to point out that a level of data protection comparable to that in the EU cannot be guaranteed in third countries. For example, companies are obliged to disclose personal data to security authorities without you, as the data subject, being able to take legal action against this. It cannot be ruled out that authorities, such as secret services, may process, evaluate and permanently store your data located on servers hosted in third countries for surveillance purposes. We have no influence on this processing activity.

7. Security measures

We take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk within the meaning of Art. 32 GDPR.

8. Storage and deletion of data

Your personal data is stored for the purposes specified under "Purpose of collecting personal data". The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this has been provided for by European or national legislators in EU regulations, laws or other provisions to which the controller is subject.
The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data in accordance with Art. 17 (3) GDPR. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted, i.e. the data will be blocked and not processed for other purposes. This includes data that must be retained for tax reasons.

9. Use of cookies and similar technologies

Our websites use so-called "cookies". Cookies are small text files and do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or your web browser automatically deletes them. In some cases, cookies from third-party companies may also be stored on your device when you use our online services (third-party cookies). These enable us or you to use certain services provided by the third-party company (e.g. cookies for processing payment services).

Cookies have various functions. Numerous cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping basket function or the display of videos). Other cookies are used to evaluate user behaviour or display advertising.

Cookies that are necessary for the electronic communication process, for the provision of certain functions requested by you (e.g. for the shopping basket function) or for the optimisation of the website (e.g. cookies for measuring the web audience) (necessary cookies) are stored on the basis of Art. 6 para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimised provision of its services. If consent to the storage of cookies and similar recognition technologies has been requested, processing is carried out exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG); consent can be revoked at any time.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be restricted.

If cookies are used by third-party companies or for analysis purposes, we will provide separate information about this in this privacy policy and, if necessary, request consent.

In principle, it is possible to use our services without cookies or similar technologies that do not serve technical purposes. By accepting additional functional cookies, we can improve the user-friendliness and personalisation of our services. We therefore recommend that you permanently activate cookies for our website.

10. Newsletter

On our website, you have the option of subscribing to our newsletter. We process the personal data submitted via the registration form in order to send you the individual newsletters. The user's email address is collected for the purpose of delivering the newsletter. For the purpose of measuring reach and evaluating our email marketing campaigns, we collect data on your use of our newsletters, e.g. whether, how often and for how long you read them, and which links you click on, if any. The collection of other personal data during the registration process serves to prevent misuse of the services or the email address used.

The legal basis for the processing of your personal data is Art. 6 (1) sentence 1 lit. a GDPR, in conjunction with § 7 (2) no. 3 UWG (German Unfair Competition Act), if applicable. We may also send you certain information by email on the basis of a legal permission under § 7 (3) UWG. You can revoke your consent at any time with future effect (e.g. via the ‘unsubscribe’ link in the newsletter). If you exercise your right of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

The data you provide us with for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe from the newsletter or after the purpose has ceased to exist. We reserve the right to delete or block email addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest pursuant to Art. 6 (1) lit. f GDPR. You may object to the storage of your data if your interests outweigh our legitimate interest.

Newsletter dispatch via CleverReach

Our email newsletters are sent via the technical service provider CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede (‘CleverReach’), to whom we pass on the data you provided when registering for the newsletter. This transfer is carried out in accordance with Art. 6 (1) lit. f GDPR and serves our legitimate interest in using an effective, secure and user-friendly newsletter system. The data you enter for the purpose of subscribing to the newsletter (e.g. email address) is stored on CleverReach's servers.

CleverReach uses this information to send and statistically evaluate the newsletters on our behalf. For the evaluation, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. This allows us to determine whether a newsletter message has been opened and which links, if any, have been clicked on. With the help of so-called conversion tracking, it is also possible to analyse whether a predefined action (e.g. purchase of a product on our website) has taken place after clicking on the link in the newsletter. Technical information is also collected (e.g. time of retrieval, IP address, browser type and operating system). The data is collected exclusively in pseudonymised form and is not linked to your other personal data, thus ruling out any direct personal reference. This data is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to the interests of the recipients.

If you wish to object to data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.

We have concluded a data processing agreement with CleverReach in which we oblige CleverReach to protect our customers' data and not to pass it on to third parties.

Further information on data protection at CleverReach can be found in CleverReach's privacy policy:

https://www.cleverreach.com/de-de/datenschutz/

11. Automated decision-making in individual cases

A fully automated decision means that decisions are made by technical means without the direct involvement of a person.

Automated decision-making in accordance with Art. 22 GDPR does not take place on our website. In the event that we use this procedure in individual cases, we will inform you separately if required by law.

12. Data use for profiling

Profiling refers to any type of automated processing of personal data that consists of using this personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to the work performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or change of location of this natural person.

We do not process your data for the purpose of evaluating certain personal aspects (profiling).

13. Use of Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics 4 uses ‘cookies’, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the EU. Google will use this information to evaluate your use of the website, to compile reports on website activity for website operators and to provide other services related to website activity and internet usage. This is done using a pseudonymous user identification number to assign analysis information to a terminal device and to recognise which content users have accessed within one or more usage processes, which content you have accessed or, for example, which of our online offerings you have used.

During your visit to the website, the following data, among other things, is transmitted to Google:

your abbreviated Internet address (IP address)
Your approximate location (country and municipality or city)
Technical information about your browser, terminal device, screen resolution and internet provider
Tracking of page views (i.e. which website or link or which advertising medium you used to access this website)
Pages accessed, including access to specific linked subpages (e.g. contact enquiries and newsletter registrations)
Orders, including turnover and products ordered
Your user behaviour on the individual pages (e.g. length of stay, number of clicks, scrolling)
This data is stored by Google together with a randomly generated user ID.

Google processes the website usage data on our behalf and is contractually obliged to take measures to ensure the security and confidentiality of the processed data.

No personal data such as name, address or contact details are transferred to Google Analytics.

This data may also be transferred to Google servers in the USA. Please note that the same level of data protection cannot be guaranteed in the USA as within the EU.

Google Analytics stores cookies in your web browser for a period of two years from your last visit. These cookies contain a randomly generated user ID that can be used to recognise you on future visits to the website.

The recorded data is stored together with the randomly generated user ID, which enables the evaluation of pseudonymous user profiles. This user-related data is automatically deleted after 14 months. Other data remains stored in aggregated form for an indefinite period.

Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google states that it does not associate your IP address with any other data held by Google. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. To ensure the protection of user data in the EU, Google receives and processes all user data via domains and servers within the EU.

The Google tracking codes on this website use the ‘_anonymizeIp()’ function, which means that IP addresses are only processed in truncated form to prevent them from being directly linked to individuals. The IP address is truncated on EU servers for EU users. The collection and storage of data can be revoked at any time with future effect. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plugin available at the following link. The current link is http://tools.google.com/dlpage/gaoptout?hl=de .

Alternatively, you can prevent Google Analytics 4 from collecting data on this website by clicking on the following link. An opt-out cookie will be set via our cookie consent tool, which will prevent your data from being collected in future when you visit this website. The link is: [please insert link to your cookie consent tool here]; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

14. Use of Google Web Fonts

When displaying YouTube videos (see section17 ) on our website or via YouTube, Google Fonts and Google Fonts API are used to visually display fonts and symbols. When using Google Fonts, Google also collects, processes and uses data about the use of font functions by visitors to the websites, unless the data is stored on the local servers of our online presence.

For more information about data processing by Google, please refer to Google's privacy policy at http://www.google.com/privacypolicy.html. There you can also change your settings in the privacy centre so that you can manage and protect your data.

The use of Google Web Fonts is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the uniform presentation of the typeface on its website. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's terminal device within the meaning of the TDDDG. Consent can be revoked at any time.

If your browser does not support web fonts, a standard font from your computer will be used.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:

https://privacy.google.com/businesses/gdprcontrollerterms/ and

https://privacy.google.com/businesses/gdprcontrollerterms/sccs/ .

For more information on how user data is handled, please refer to Google's privacy policy:

https://policies.google.com/privacy?hl=de

15. Use of Google Maps

Our website uses Google Maps and the Google Maps API to visually display a site plan and geographical information. When using Google Maps, Google also collects, processes and uses data about the use of the functions by visitors to the website. The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the locations we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

If consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:

https://privacy.google.com/businesses/gdprcontrollerterms/ and

https://privacy.google.com/businesses/gdprcontrollerterms/sccs/ .

For more information on how user data is handled, please refer to Google's privacy policy:

https://policies.google.com/privacy?hl=de

There you can also change your settings in the privacy centre so that you can manage and protect your data. The terms of use for Google Maps can be found at https://www.google.com/intl/de_de/help/terms_maps.html

16. Use of Google Tag Manager

Our online presence uses Google Tag Manager, a tool for managing website tags from Google Inc. Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’). Google Tag Manager itself does not store any personal data. Tag Manager organises access from other tags, which may themselves collect data. However, Google Tag Manager does not access this data.

The use of Google Tag Manager can be rejected or approved via our cookie consent tool.

If Google Tag Manager has been deactivated at domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager. The use of Google Tag Manager constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.

Transfers to third countries are possible. So-called standard contractual clauses pursuant to Art. 46 GDPR have been concluded as appropriate safeguards. For third countries/companies for which an adequacy decision has been made, the adequacy decision also applies.

In our default settings, the consent status for

Advertisement cookies (ad_storage)
Advertisement performance measurement (ad_user_data)
Personalised advertising (ad_personalisation)
Analysis cookies (analytics_storage)
set to ‘granted’.

For more information on how user data is handled, please refer to Google's privacy policy:

https://policies.google.com/privacy?hl=de

17. Use of YouTube

This website uses a link to YouTube, which is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use the ‘extended data protection mode’ when embedding, so that usage information is only transferred when the video is started. Cidemos (our CMS; see section 17) automatically displays the videos in the no-cookie version. In this case, the specific page of our website that you visit and the video you watch are transmitted. If you are logged into your YouTube account, you enable YouTube to associate your page views directly with your personal profile.

If you want to ensure that no data about you is stored by YouTube, do not click on the embedded videos. The use of YouTube is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's terminal device within the meaning of the TDDDG. Consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:

https://privacy.google.com/businesses/gdprcontrollerterms/ and

https://privacy.google.com/businesses/gdprcontrollerterms/sccs/ .

Further information on the handling of user data can be found in Google's privacy policy at:

https://policies.google.com/privacy?hl=de

18. CMS Cidemos

Our online presence uses the CMS (Content Management System) Cidemos to manage, publish and display our content and websites. This enables the provision, updating and maintenance of the website. The system provider is Cicero Design GmbH, Brauereiweg 1, 06886 Lutherstadt Wittenberg. Cidemos uses so-called ‘cookies’, text files that are stored on your computer and enable an analysis of your use of the website.

The information generated by the cookie about your use of this website is stored on a server in the USA. The IP address is anonymised before it is stored.

You can find the cidemos privacy policy at https://www.cicerodesign.de/datenschutz.html

19. Security, questions and suggestions

Security also depends on your system. You should always treat your access information as confidential, never allow passwords to be stored by your web browser and close the browser window when you finish visiting our website. This will make it more difficult for third parties to access your personal data.

Use an operating system that can manage user rights. Set up multiple users on your system, even within your family, and never use the internet with administrator rights. Use security software such as virus scanners and firewalls and keep your system up to date.

20. Right to information/right of withdrawal; other rights of data subjects

We would like to point out that

pursuant to Art. 15 GDPR, you have the right to information about what data we have stored about you. In particular, you can obtain information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if it was not collected by us, and the existence of automated decision-making, including profiling (in accordance with Art. 22 (1) and (4) GDPR) and, if applicable, meaningful information about its details. You have the right to request information about whether the personal data concerning you is transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer;
pursuant to Art. 16 GDPR, you have the right to rectify inaccurate personal data or to complete your personal data stored by us;
pursuant to Art. 17 GDPR, you have the right to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
pursuant to Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data, unless the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to have it deleted and we no longer need the data, you need it to assert, exercise or defend legal claims, or you have objected to the processing pursuant to Art. 21 GDPR;
pursuant to Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transfer to another controller, provided that the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR and the processing is carried out using automated procedures;
pursuant to Art. 7(3) GDPR, you have the right to revoke your consent at any time. As a result, we may no longer continue the data processing that was based on this consent in the future;
pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose, and
you have a right to object to data collection in special cases and to direct marketing (Art. 21 GDPR):
If data processing is based on Article 6(1)(e) or (f) GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on this provision. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims (objection pursuant to Art. 21(1) GDPR).

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection pursuant to Art. 21(2) GDPR).

These rights are, of course, available to you free of charge. To revoke your consent to the use of your data, to request information or correction, blocking or deletion, or to exercise your other rights as a data subject, please contact:

Albatross Reisen GmbH, Marktbreiter Str. 11, 97199 Ochsenfurt

Email: datenschutz@albatross.de

Please note that the easiest way to exercise your rights as a data subject in connection with your use of social media is to contact the social media companies directly, where you can also adjust your settings to protect your privacy.

Below, we provide you with the contact details of our company's data protection officer. Our data protection officer is:

Yvonne Herrmann, Albatross Reisen GmbH, Email: datenschutz@albatross.de; Phone +49 9331 983040.

To exercise your rights as a data subject, such as the right to information, correction, blocking or deletion of your personal data, please do not contact the data protection officer directly, but first contact the above-mentioned department of the data protection officer, who will process your request without delay.

21. Competent supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the progress and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.

You can contact the supervisory authority responsible for complaints within the meaning of Article 77 GDPR at the following address:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)

Promenade 27

91522 Ansbach

poststelle@lda.bayern.de

22. Newsletter unsubscription

If you no longer wish to receive our newsletter or promotional emails, click on the ‘Unsubscribe newsletter’ link included at the end of all emails we send.

Albatross Reisen GmbH, Marktbreiter Str. 11, D-97199 Ochsenfurt

Tel.: +49 9331 98304-0, Fax: +49 9331 98304-29, Email: info@albatross.de