Protecting your privacy and data is very important to us. We only collect and use your data in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 (GDPR) and the applicable provisions. In the following, we as the controller will explain to you what data we collect and how we process these data. Updated: September 2018.
As defined by the GDPR, personal data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal data will only be saved if it is necessary for providing the booked services, adhering to legal guidelines or for purposes explained in the following.
You can visit our website without providing any personal data. However, certain anonymous data will be saved each time our website is visited, e.g. which page or which offer was called up. This data is not personal, however, and thus is not subject to the legal guidelines of the GDPR.
The website operator or site provider collects data about visits to the site and stores these as server log files. The following data are logged in this manner:
Website visited, time of access, quantity of data sent in bytes, source/link from which you reached the site, browser used, operating system used, IP address used.
The data collected is used for statistical analysis and to improve the website. The website operator reserves the right to examine the server log files at a later time should there be specific indications of unlawful use.
Anonymous data is only collected for statistical evaluation in order to improve our services. For further information, please take note of the figure “Right to information / revocation rights”.
Personal data must however be provided if you contact us, subscribe to our newsletter or use other services on our website that require personal data to be given.
In accordance with legal provisions, we will normally only collect data necessary for the service you require. If our forms ask you to provide further information, this is always voluntary and will be marked as such.
The temporary storage of the IP address by the system is necessary in order to enable the delivery of the website to the user’s computer. To do this, the IP address of the user must be stored for the duration of the session. This is also stored in log files in order to ensure the functionality of the website. The data is also used to optimise the website and to ensure the security of our information technology systems. In this connection, the data will not be analysed for marketing purposes. Our legitimate interests in data processing according to point (f) of Article 6(1) GDPR lie in these purposes.
We also use the personal data that we have collected to improve customer relations and carry out our own advertising and marketing initiatives.
If we obtain the consent of the data subject for all processing of personal data, the legal basis shall be point (a) of Article 6(1) of the General Data Protection Regulation (GDPR).
For the processing of personal data required for the performance of a contract to which the data subject is a party, the legal basis is point (b) of Article 6(1) GDPR. This also applies to processing that is required to perform pre-contractual measures.
If the processing of personal data is required in order to fulfil a legal obligation to which our company is subject, the legal basis shall be point (c) of Article 6(1) GDPR.
In the event that vital interests of the data subject or another natural person require the processing of personal data, the legal basis shall be point (d) of Article 6(1) GDPR.
If the processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, the legal basis shall be point (f) of Article 6(1) GDPR.
We will only transfer your personal data in accordance with the applicable competition regulations and data protection regulations.
Your data will also be transferred to our subcontractors or other service providers related to your requests (e.g. processing information to be sent by post or email or customer service) if this is necessary for us to fulfil our legal obligations and to provide you with the services we owe you.
Your data will also be disclosed and sent to third parties if we are obliged to do this by law or on the basis of a final court ruling.
You have the right to receive the personal data concerning you which you have provided in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without being hindered by the controller to whom the personal data was provided.
Your personal data will be stored in accordance with the purposes listed under “Purpose of collecting personal data”. The personal data of the data subject will be erased or blocked once the purpose ceases to apply. Data may also be stored if this has been provided for by the European or national legislator in Union ordinances, laws or other regulations to which the controller is subject. The government has set down various storage periods for data. The data will also be blocked or erased if the retention period prescribed by the standards mentioned, unless it is necessary to continue storing the data for the conclusion or performance of a contract.
The technical specifications only allow cookies to be read by the server that sent them. We assure you that no personal data will be stored in cookies.
The legal basis for the processing of personal data when using cookies is point (f) of Article 6(1) GDPR.
The legal basis for the processing of personal data when using cookies for analytical purposes is point (a) of Article 6(1) GDPR if the user has given consent.
The Google tracking codes of this website use the _anonymizeIp() function, which means that IP addresses are only processed in a shortened form in order to prevent direct personal identification. You may object to the collection and storage of data at any time for the future. Clicking on the “deactivate” button will completely stop tracking. In order to make a permanent objection, the browser used must accept cookies. Alternatively, the data collection can be refused by using a Google browser plug-in which prevents the information collected by cookies (including your IP address) from being sent to Google Inc. and used by Google Inc. You can find the relevant plug-in under the following link: https://tools.google.com/dlpage/gaoptout?hl=en
This website uses Social Plug-ins (“Plug-ins”) of the social website facebook.com, which are operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The plug-ins can be identified by the Facebook logo (white “f” on a blue tile or a “Like” button), or by the words “Facebook Social Plugin”. The list and appearance of the Facebook social plug-ins can be viewed here: https://developers.facebook.com/docs/plugins
If you are a Facebook member and do not wish Facebook to collect data about you via our website and link to your member data in Facebook, you must log out from Facebook prior to visiting this online presence. It is also possible to block Facebook Social Plugins with add-ons for the browser used, such as the Facebook Blocker.
This online presence uses Facebook Pixel of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). This tracks the behaviour of users once they have viewed or clicked on a Facebook advertisement. This procedure serves to analyse the effectiveness of Facebook advertisements for statistical and market research purposes, and can help optimise future advertisement measures.
If you are a Google Plus user and do not wish Google to collect data about you via our website and link to your member data in Google, you must log off from Google prior to visiting this online presence.
If you are a Twitter user and do not wish Twitter to collect data about you via our website and link to your member data in Twitter, you must log off from Twitter prior to visiting this online presence.
This online presence uses plug-ins of the social network LinkedIn, which is operated by the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (“LinkedIn”). The LinkedIn plugins can be identified by the corresponding logo or the “Recommend button” (“Recommend”). Please note that the plug-in will establish a connection between your relevant internet browser and the LinkedIn server when visiting our Internet page. LinkedIn will be informed that this online presence was visited with your IP address. If you click on the LinkedIn “Recommend button” and you are also logged into your LinkedIn account, you can link content from our internet pages to your profile page in your LinkedIn profile. This will allow LinkedIn to associate your visit with our internet page and your user account. You must know that we do not receive any knowledge of the content of the data transmitted and the use thereof by LinkedIn.
You can find further details on the collection of the data and on your legal options and the settings available from LinkedIn at http://www.linkedin.com/
This online presence uses the “Pin it” interface of the social network Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA (“Pinterest”). The Pinterest plug-in can be identified on our site by the “Pin it button” in white lettering on a red background or in red lettering on a white background, alternatively by a red and white “P” on a white background.
If you click on the Pinterest “Pin it button” when you are logged onto your Pinterest account, you can link the content of our pages to your Pinterest profile. This allows Pinterest to associate the visit to our pages with your user account. Please note that as the provider of the pages, we do not have any knowledge of the content of the data transmitted and the use thereof by Pinterest. You can find further information on this in Pinterest’s policy privacy at: http://pinterest.com/about/privacy
This online presence uses social media plug-ins of the social network Instagram, which are operated by Instagram Inc., 1601 Willow Road, Menlo Park, California, 94025, USA. The Instagram plug-in can be identified by the “Instagram button” on our homepage.
If you press the Instagram button while you are logged into your Instagram account, you can link content of our internet presence to your Instagram profile. This allows Instagram to associate the visit of our pages with your user account.
Please note that as the provider of the pages, we do not have any knowledge of the content of the data transmitted and the use thereof by Instagram. You can find further information on this in Instagram’s policy privacy at: http://instagram.com/about/legal/privacy
This online presence employs various software solutions for optimising its online offering. By means of these, the use of the website can be evaluated and helpful information about the user’s requirements collected in order on this basis to constantly improve the user-friendliness and quality of the online presence. In order to perform these analyses, aggregated and anonymous statistical data is acquired. This data consists of connection and movement data without personal reference, which are connected with the browser used, the number of page views and visits, click behaviour and duration of the individual visitor’s stay on the online presence. During the acquisition and processing, the abbreviated IP address of the user may be used and stored.
The data is especially evaluated for the following purposes:
In these procedures, so-called permanent cookies are used (see also Section 7 above). Here too, you may at any time reject the storage of these cookies by suitable browser settings, or only allow their storage with your explicit consent. In addition, you have the option of preventing use of data generally in all solutions employed at any time, by selected the so-called “Opt-out” options offered by the software solution used. However, if you opt out, you will, for example no longer be provided with tailored recommendations.
Our online presence uses the following software solutions as described above (clicking on each provider will take you to its Opt-out option):
Atlas Solutions, LLC:
Note: Opting out is performed by means of a cookie. If this cookie is deleted, a further opt-out will be necessary.
This online presence uses Fullstory, a website analysis service from Fullstory Inc., 818 Marietta Street, Atlanta, GA 30318, USA. Fullstory records the user behaviour on our website. The records of user sessions allow the site provider to analyse these and thus improve the website experience for the user. Fullstory stores and collects data in anonymised form by means of cookies. Tracking (i.e. the capture of the data generated by the cookie relating to the use of the website) may be deactivated at any time. Please follow the instructions on https://www.fullstory.com/optout
This online presence uses the web analysis services of trbo GmbH, Römerstrasse 6, 80801 Munich, Germany (http://www.trbo.com). Data is acquired and stored from which user profiles are created with the use of pseudonyms, in order to offer you personalised customer benefits. For this purpose, cookies may be used which allow recognition of an internet browser. These user profiles are used for analysing visitor behaviour and are evaluated for the purpose of improving our offers and structure according to the demand. The pseudonymised user profiles are not coordinated with personal data of the persons concerned unless with their specifically granted explicit consent. You may opt out of this at any time by clicking on the following link: https://track2.trbo.com/optout.php
This online presence uses the iAdvize chat function in order to offer you additional support facilities where necessary, for instance, for advice. We do this to increase your satisfaction with our online presence.
Data for the iAdvize service are stored on your computer with cookies. Chat sessions are only temporarily stored on the iAdvize servers and are automatically deleted at the end of the conversation.
In view of the quality level of the advice we strive to provide, it may be necessary to transfer the content of the communication between you and your advisor to other advisors in our company or allow it to be seen by senior personnel. Further notes on the treatment of your data by iAdvize can be found here:
If you would like to ensure that none of your data is stored by YouTube, do not click on the embedded videos.
You have the right:
In order to withdraw your consent to data usage, to exercise your right of access, or request the rectification, blocking or erasure or to exercise your other rights as a data subject, please contact:
FTI Touristik GmbH
Department of Data Protection
Landsberger Straße 88
80339 Munich, Germany
These rights are of course available to you free of charge, without you incurring higher transmission costs for your request than for the base rates.
The Data Protection Officer of our company can be contacted as follows:
Rechtsanwalt Frank Hütten, Noll & Hütten Rechtsanwälte GbR, c/o FTI Touristik GmbH, Landsberger Straße 88, 80686 Munich, Germany. Email: firstname.lastname@example.org, telephone +49 (0)89 / 25 25 - 0
In order to exercise your rights as a data subject to access, rectification, restriction or erasure of your personal data, please do not contact the Data Protection Officer directly, but initially contact the department of the Data Protection Officer mentioned above, who will process your inquiry immediately.
Security also depends ultimately on your system. You should always treat your access information as confidential, never allow your browser to save passwords and close the browser window when you leave our website. This makes it more difficult for third parties to access your personal data.
Use an operating system that can manage user rights. Always set up different user profiles, including amongst family members, and never use the internet under administrator rights. Use security software such as virus scanners and firewalls and always keep your system up to date.
The controller for this online presence as defined by the General Data Protection Regulation and other national data protection laws of member states as well as other data protection regulations.
FTI Touristik GmbH
Landsberger Straße 88
80339 Munich, Germany