Welcome to the website of www.erf24.de and our online presence
We thank you for your interest in our services. Protecting your privacy and data is very important to us. We only collect and use your data in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 (GDPR) and the applicable provisions. In the following, we as the controller will explain to you what data we collect and how we process these data.
1. Personal data
As defined by the GDPR, personal data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal data will only be saved if it is necessary for providing the booked services, adhering to legal guidelines or for purposes explained in the following.
2. Anonymised data / log files / IP address
You can visit our website without providing any personal data. However, certain anonymous data will be saved each time our website is visited, e.g. which page or which offer was called up. This data is not personal, however, and thus is not subject to the legal guidelines of the GDPR.
The website operator or site provider collects data about visits to the site and stores these as server log files. The following data are logged in this manner:
Website visited, time of access, quantity of data sent in bytes, source/link from which you reached the site, browser used, operating system used, IP address used.
The data collected is used for statistical analysis and to improve the website. The website operator reserves the right to examine the server log files at a later time should there be specific indications of unlawful use.
Anonymous data is only collected for statistical evaluation in order to improve our services. For further information, please take note of the figure "Right to information / revocation rights".
3. Purpose of collecting personal data
Personal data must however be provided if you make a travel booking or other booking via our website, contact us, subscribe to our newsletter or use other services on our website that require personal data to be given. These include the management of your data in a personal customer account with a login function, voucher purchases, participating in competitions or amending existing bookings or orders.
In accordance with legal provisions, we will normally only collect data necessary for the service you require. If our forms ask you to provide further information, this is always voluntary and will be marked as such.
The temporary storage of the IP address by the system is necessary in order to enable the delivery of the website to the user’s computer. To do this, the IP address of the user must be stored for the duration of the session. This is also stored in log files in order to ensure the functionality of the website. The data is also used to optimise the website and to ensure the security of our information technology systems. In this connection, the data will not be analysed for marketing purposes. Our legitimate interests in data processing according to point (f) of Article 6(1) GDPR lie in these purposes.
If a travel booking is made or another service is booked, the data collected will be used to process this booking and used for advertising and statistical purposes, within the scope of legal provisions.
The legal basis for sending the newsletter and e-mail advertising following the sale of goods or services is Section 7(3) of the German Act against Unfair Competition (Gesetz gegen den unlauteren Wettbewerb, UWG).
If you subscribe to our newsletter, we also store and use the data you provided about yourself and your orders and travel services when booking or registering in order to give you optimum service as a newsletter subscriber on the basis of point (f) of Article 6(1) GDPR.
The legal basis for the processing of data after the user registers for the newsletter is point (a) of Article 6(1) GDPR if the user has given consent.
We also use the personal data that we have collected to improve customer relations and to provide better customer care (e.g. information about the trip), to carry out our own advertising and marketing initiatives (e.g. sending out catalogues or other advertising within the scope permitted by law, feedback on customer satisfaction) and to process your order.
4. Legal basis for the processing of personal data
If we obtain the consent of the data subject for all processing of personal data, the legal basis shall be point (a) of Article 6(1) of the General Data Protection Regulation (GDPR).
For the processing of personal data required for the performance of a contract to which the data subject is a party, the legal basis is point (b) of Article 6(1) GDPR. This also applies to processing that is required to perform pre-contractual measures.
If the processing personal data is required in order to fulfil a legal obligation to which our company is subject, the legal basis shall be point (c) of Article 6(1) GDPR.
In the event that vital interests of the data subject or another natural person require the processing of personal data, the legal basis shall be point (d) of Article 6(1) GDPR.
If the processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, the legal basis shall be point (f) of Article 6(1) GDPR.
5. Transfer of personal data to third parties
We will only transfer your personal data in accordance with the applicable competition and data protection regulations.
Your data will also be transferred to our subcontractors or other service providers related to your booking (e.g. processing newsletters to be sent by post or email, payment processing, customer service) if this is necessary for us to fulfil our legal obligations and to provide you with the services we owe you.
Data will also be transferred to persons or companies in order to process your order or booking, particularly for travel services to airlines, tour operators, hotels, travel agencies, incoming agencies, car rental companies, cruise operators, authorities etc. Ensure that the privacy provisions at the domicile of these persons and companies may differ from those in Germany.
Your data will also be disclosed and sent to third parties if we are obliged to do this by law or on the basis of a final court ruling.
You have the right to receive the personal data concerning you which you have provided in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without being hindered by the controller to whom the personal data was provided.
6. Storage and erasure of data
Your personal data will be stored in accordance with the purposes listed under "Purpose of collecting personal data". The personal data of the data subject will be erased or blocked once the purpose ceases to apply. Data may also be stored if this has been provided for by the European or national legislator in Union ordinances, laws or other regulations to which the controller is subject. The government has set down various storage periods for data. The data will also be blocked or erased if the retention period prescribed by the standards mentioned, unless it is necessary to continue storing the data for the conclusion or performance of a contract.
The technical specifications only allow cookies to be read by the server that sent them. We assure you that no personal data will be stored in cookies.
The legal basis for the processing of personal data when using cookies is point (f) of Article 6(1) GDPR.
The legal basis for the processing of personal data when using cookies for analytical purposes is point (a) of Article 6(1) GDPR if the user has given consent.
8. Use of Google Analytics
The Google tracking codes of this website use the _anonymizeIp() function, which means that IP addresses are only processed in a shortened form in order to prevent direct personal identification. You may object to the collection and storage of data at any time for the future. Clicking on the “deactivate” button will completely stop tracking. In order to make a permanent objection, the browser used must accept cookies. Alternatively, the data collection can be refused by using a Google browser plug-in which prevents the information collected by cookies (including your IP address) from being sent to Google Inc. and used by Google Inc. You can find the relevant plug-in on the following link: tools.google.com/dlpage/gaoptout.
9. Web analysis with Adobe Analytics
10. Trusted Shops ratings
If you have given us your express consent during or after your order, by activating the relevant check box or clicking on the button provided for (“Rate later”), we will transmit your email address to Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne, Germany (www.trustedshops.de) so that they may send you a reminder email to rate your order. This consent may be revoked at any time by sending a message to the contact option described below or directly to Trusted Shops.
11. Facebook Social Plugins
This website uses Social Plugins (“Plugins”) of the social website facebook.com, which are operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The plugins can be identified by the Facebook logo (white “f” on a blue tile or a “Like” button), or by the words “Facebook Social Plugin”. The list and appearance of the Facebook social plugins can be viewed here: developers.facebook.com/plugins.
12. Facebook Conversion Pixel
This online presence uses Facebook Pixel of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). This tracks the behaviour of users once they have viewed or clicked on a Facebook advertisement. This procedure serves to analyse the effectiveness of Facebook advertisements for statistical and market research purposes, and can help optimise future advertisement measures.
13. Use of the Google +1 button
If you are a Google Plus member and do not wish Google to collect data about you via our website and link to your member data in Google, you must log out from Google prior to visiting this online presence.
14. Use of Twitter’s tweet button
If you are a Twitter member and do not wish Twitter to collect data about you via our website and link to your member data in Twitter, you must log out from Twitter prior to visiting this online presence.
15. Use of XING social plugins
16. Use of LinkedIn social plugins
This online presence uses plugins of the social network LinkedIn, which is operated by the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (“LinkedIn”). The LinkedIn plugins can be identified by the corresponding logo or the “Recommend button” (“Recommend”). Please note that the plugin will establish a connection between your relevant Internet browser and the LinkedIn server when visiting our Internet page. LinkedIn will be informed that this online presence was visited with your IP address. If you click on the LinkedIn “Recommend button” and you are also logged into your LinkedIn account, you can link content from our Internet pages to your profile page in your LinkedIn profile. This will allow LinkedIn to associate your visit to our Internet page and your user account. You must know that we do not receive any knowledge of the content of the data transmitted and the use thereof by LinkedIn.
You can find further details on the collection of the data and on your legal options and the settings available from LinkedIn at www.linkedin.com
17. Use of the Pinterest button
This online presence uses the “Pin it” interface of the social network Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA (“Pinterest”). The Pinterest plugin can be identified on our site by the “Pin it button” in white lettering on a red background or in red lettering on a white background, alternatively by a red and white “P” on a white background.
If you click on the Pinterest “Pin it button” when you are logged into your Pinterest account, you can link the content of our pages to your Pinterest profile. This allows Pinterest to associate the visit to our pages with your user account. Please note that as the provider of the pages, we do not have any knowledge of the content of the data transmitted and the use thereof by Pinterest. You can find further information on this in Pinterest’s policy privacy at: pinterest.com/about/privacy
18. Use of the Instagram button
This online presence uses social media plugins of the social network Instagram, which are operated by Instagram Inc., 1601 Willow Road, Menlo Park, California, 94025, USA. The Instagram plugin can be identified by the “Instagram button” on our homepage.
If you press the Instagram while you are logged into your Instagram account, you can link content of our Internet presence to your Instagram profile. This allows Instagram to associate the visit to our pages with your user account.
Please note that as the provider of the pages, we do not have any knowledge of the content of the data transmitted and the use thereof by Instagram. You can find further information on this in Instagram’s policy privacy at: instagram.com/about/legal/privacy
19. Use of etracker
This online presence uses technologies of etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg (www.etracker.com). Data is collected and stored for marketing and optimisation purposes. This data can be used to create pseudonymous usage profiles. Cookies may be used for this purpose. Cookies allow the Internet browser to be recognised. The data collected with etracker technologies will not be used to identify the visitor to this online presence personally and will not be combined with personal data on the bearer of the pseudonym.
You may object to the collection and storage of data at any time for the future. In order to refuse the data collection and storage of your visitor data, you can obtain an opt out cookie from etracker on the following link, which will prevent any visitor data being collected from your browser and stored: www.etracker.de/privacy .
20. Use of Clicktripz
21. Use of Criteo
This online presence also uses the Criteo service from Criteo SA, Rue Blanche, 75009 Paris, France (http://criteo.com). By means of this service, users who have already visited our website and taken an interest in our offers will be offered targeted advertisements both on this website and on internet pages which also use the Criteo service. These advertisements appear on the basis of information about visits to the various internet pages which has been stored as cookies, etc., on the user's computer. These text files are read in order to provide targeted product recommendations on subsequent website visits. For this purpose, the cookie stores a randomly generated identification number. Neither this number nor the information about your visit to the internet pages can be personally assigned to you. This data is never used to identify you personally as a visitor to our web pages.
You can prevent information being stored and used by the Criteo service by clicking on the following link (http://www.criteo.com/de/datenschutzrichtlinie) and then setting the “Opt-out" control to “ON”. If you choose “ON”, a new cookie (an Opt-out cookie) will be stored in your browser which signals to the Criteo service that Criteo may no longer acquire and process data about your user behaviour. You may reactivate this function by setting the control to “OFF”. Please note that this setting must be adjusted for each of the browsers you use. If all cookies in your browser are deleted, this will also apply to the “Opt-out” cookie.
22. Use of Travelaudience
This online presence uses tracking pixels from Travel Audience GmbH (“Travel Audience”) to enable us to provide contextual advertising and check users’ interaction with the advertisements, thus allowing us to measure the effect of advertising on our website. For this purpose, Travel Audience stores cookies in your browser. You may at any time prevent the future use of data acquisition by Travel Audience by clicking on the following links: travelaudience.com/cookie-policy/ and travelaudience.com/website-privacy-policy/. An Opt-out cookie will then be stored in your browser which prevents future capture of your data by Travel Audience in the event of a visit to this website. This opt-out will remain in force as long as you do not delete the Opt-out cookie. Further information on how to prevent the storage of cookies can be found in your browser’s Help menu.
23. Use of Ve Interactive
This online presence uses retargeting technology from Ve Interactive Limited, 15-19 Bakers Row, London, EC1R 3DG. This uses Ve Interactive Java snippets, which are implemented on your computer when the website is used and which permit analysis of your use of the website and intermediate storage of form inputs on the internet page. The information so generated about your usage of this website is generally transferred to a Ve Interactive server in London and stored there for a maximum of 30 days. On our behalf, Ve Interactive uses this information in order to transmit the temporarily stored data to you by e-mail if the connection to your computer becomes unstable or breaks up. The data transmitted from your browser by VeApps is not coordinated with other data on the internet site. Having regard to the applicable statutory data protection provisions, fully anonymous data is also stored on your computer in cookies and deleted after 30 days. This data is only used for statistical evaluation. More information about how Ve Interactive Ltd processes your data and how to deactivate tracking can be found on www.ve.com/de/cookies-richtlinie.
24. Use of advertising networks
This online presence makes use of a partnership with the advertising networks mentioned below for capture of your non personally identifiable data by cookies from third party providers. This enables the advertising networks to offer targeted and relevant advertising from selected third-party websites, all on the basis of your viewing behaviour on our online presence and other selected websites.
Generally, providing this is supported by the advertising network in question, via the Network Advertising Initiative (NAI) or the Digital Advertising Alliance’s (DAA) Self-Regulatory Program for Online Behavioral Advertising. Each of these programs provides a deselection page which, from a centralised location, offers you control over the cookies of their members of participants.
- DAA: www.aboutads.info/choices/
In addition you have the following individual options with each advertising network:
25. Software solutions for optimising the online presence
This online presence employs various software solutions for optimising its online offering. By means of these, the use of the website can be evaluated and helpful information about the user's requirements collected in order on this basis to constantly improve the user-friendliness and quality of the online presence. In order to perform these analyses, aggregated and anonymous statistical data is acquired. This data consists of connection and movement data without personal reference, which are connected with the browser used, the number of page views and visits, click behaviour and duration of the individual visitor’s stay on the online presence. During the acquisition and processing, the abbreviated IP address of the user may be used and stored.
The data is especially evaluated for the following purposes:
- Counting the visitors
- Measuring the special areas of demand on the online presence for each visitor
- Evaluation of the origin of the visitor for optimisation of the online presence
- Target-group specific control of recommendations.
In these procedures, so-called permanent cookies are used (see also Section 7 above). Here too, you may at any time reject the storage of these cookies by suitable browser settings, or only allow their storage with your express consent. In addition, you have at any time the option of preventing use of data generally in all solutions employed, by selected the so-called "Opt-out" options offered by the software solution used. However, if you opt out, you will, for example no longer be provided with tailored recommendations.
Our online presence uses the following software solutions as described above (clicking on each provider will take you to its Opt-out option): ,
AT Internet: www.xiti.com/de/optout.aspx
Next Performance: www.nextperf.com/de/privacy
Atlas Solutions, LLC: www.youronlinechoices.com/de/praferenzmanagement/
Note: Opting out is performed by means of a cookie. If this cookie is deleted, a further opt-out will be necessary.
26. Use of Fullstory
This online presence uses Fullstory, a website analysis service from Fullstory Inc., 818 Marietta Street, Atlanta, GA 30318, USA. Fullstory records the user behaviour on our website. The records of user sessions allow the site provider to analyse these and thus improve the website experience for the user. Fullstory stores and collects data in anonymised form by means of cookies. Tracking (i.e. the capture of the data generated by the cookie relating to the use of the website) may be deactivated at any time. Please follow the instructions on www.fullstory.com/output.
27. Use of trbo
This online presence uses the web analysis services of trbo GmbH, Römerstrasse 6, 80801 Munich, Germany (http://www.trbo.com). Data is acquired and stored from which user profiles are created with the use of pseudonyms, in order to offer you personalised customer benefits. For this purpose, cookies may be used which allow recognition of an internet browser. These user profiles are used for analysing visitor behaviour and are evaluated for the purpose of improving our offers and structure according to the demand. The pseudonymised user profiles are not coordinated with personal data of the persons concerned unless with their specifically granted express consent. You may opt out of this at any time by clicking on the following link: track2.trbo.com/optout.php
28. Use of iAdvize
This online presence uses the iAdvize chat function in order to offer you additional support facilities where necessary, for instance, for advice or in connection with the booking form. We do this to increase your satisfaction with our online presence.
Data for the iAdvize service are stored on your computer with cookies. Chat sessions are only temporarily stored on the iAdvize servers and are automatically deleted at the end of the conversation.
In view of the quality level of the advice we strive to provide, it may be necessary to transfer the content of the communication between you and your advisor to other advisors in our company or allow it to be seen by senior personnel. Further notes on the treatment of your data by iAdvize can be found here:
If you would like to ensure that none of your data is stored by YouTube, do not click on the embedded videos.
30. Right of access / revocation; other rights of data subjects
You have the right:
• Pursuant to Art. 15 GDPR, to obtain from us confirmation as to whether or not personal data concerning you are being processed. In particular, you can obtain information on the purposes of the processing, the categories of personal data, categories of recipients to whom your data has been or will be disclosed, the planned duration of storage, the existence of a right to rectification, erasure, restriction of processing or to object, the existence of a right to lodge a complaint, the origin of the data, if this has not been collected by us, and on the existence of automated decision-making including profiling and any meaningful information on the details.
• Pursuant to Art. 16 GDPR, to obtain the immediate rectification or completion of the personal data concerning you stored by us;
• Pursuant to Art. 17 GDPR, to obtain the erasure of personal data concerning you stored by us unless the processing is necessary for exercising the right of freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
• Pursuant to Art. 18 GDPR, to obtain the restriction of processing of your personal data, where the accuracy of the personal data is contested by you, the processing is unlawful but you oppose the erasure of the personal data, or we no longer need the data, but you require them or the establishment, exercise or defence of legal claims or you have objected to the processing pursuant to Art. 21 GDPR.
• Pursuant to Art. 20 GDPR, to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format or request the transmission to another controller;
• Pursuant to Art. 7(3) GDPR, to withdraw the consent you once provided to us at any time... This will mean that we will no longer be able to continue the data processing relating to this consent in the future, and
• Pursuant to Art. 77 GDPR, to lodge a complaint with a supervisory authority. Generally, you may contact the supervisory authority at your usual place of residence or workplace or at our registered office.
In order to withdraw your consent to data usage, to exercise your right of access, or request the rectification, blocking or erasure or to exercise your other rights as a data subject, please contact:
erf24 touristic Services GmbH
Telefon: +49 (361) 380 31 0
These rights are of course available to you free of charge, without you incurring higher transmission costs for your request than for the base rates.
The Data Protection Officer of our company is listed below: Our Data Protection Officer is:
Rechtsanwalt Frank Hütten, Noll & Hütten Rechtsanwälte GbR, c/o FTI Touristik GmbH, Landsbergerstr. 88, 80686 München, Email: firstname.lastname@example.org; Telefon +49 8925250
In order to exercise your rights as a data subject to access, rectification, restriction or erasure of your personal data, please do not contact the Data Protection Officer directly, but initially contact the department of the Data Protection Officer mentioned above, who will process your enquiry immediately.
31. Security, questions and remarks, controller
Security also depends ultimately on your system. You should always treat your access information as confidential, never allow your browser to save passwords and close the browser window when you leave our website. This makes it more difficult for third parties to access your personal data.
Use an operating system that can manage user rights. Always set up different user profiles, including amongst family members, and never use the internet under administrator rights. Use security software such as virus scanners and firewalls and always keep your system up to date.
The controller for this online presence as defined by the General Data Protection Regulation and other national data protection laws of Member States as well as other data protection regulations.
erf24 touristic Services GmbH
Telefon: +49 (361) 380 31 0
32. Newsletter - unsubscribing
If you no longer wish to receive our newsletter or our advertising emails, click on the link: "Unsubscribe from newsletter” appears at the bottom of every email from us.