We are very pleased about your interest in our website. With this privacy policy, we inform you about the nature, scope, and purpose of the personal data we process and your rights as a data subject.
I. General Information
1. Data Controller
Responsible for the data processing in accordance with Art. 4 No. 7 GDPR, unless otherwise specified in this privacy policy, is Axel Springer Deutschland GmbH, Axel-Springer-Str. 65, 10888 Berlin, Phone: +49 30 2591 0, Email: information@axelspringer.de (hereinafter also referred to as “we” or “us”).
2. Contact Details
Please contact our data protection officer at any time for questions and suggestions regarding data protection and to enforce your rights as a data subject:
Axel Springer Deutschland GmbH
Data Protection
Axel-Springer-Str. 65
10888 Berlin
Insofar as data processing is carried out in connection with joint controllers pursuant to Art. 26 GDPR, both controllers act as a common point of contact.
3. Use of this Website
When you use our website, necessary cookies are automatically set and the following information is collected and processed to enable the usability of the provided functions and to ensure the security and stability of our website:
- Information about the used device and software
- Date and time of request
- Websites from which users are referred to our website and websites accessed by users via our website
- IP address
The temporary storage of the IP address is technically necessary to enable delivery of our offer to your end device. The legal basis for data processing is Art. 6 para. 1 lit. b GDPR. Our servers also store your IP address for up to 14 days for security purposes, in particular to ensure security, prevent and detect fraud and and fix errors (Art. 6 para. 1 lit. f GDPR). In addition, we process your unabridged IP address or your pseudonymous ID when you use our website for the purpose and in our interest of measuring the efficiency and performance of our website. Your IP address or pseudonymous ID is automatically anonymized immediately after the respective session is closed. The legal basis for data processing is Art. 6 para. 1 lit. f GDPR.
4. Location of Processing
We also process personal data in countries outside the European Economic Area (“EEA”), including the USA. If there is no adequacy decision by the European Commission for the respective third country, we have concluded the EU Commission’s standard contractual clauses pursuant to Art. 46 para. 2 lit. c GDPR with the services used in third countries to ensure an adequate level of data protection: Standard Contractual Clauses.
5. Storage Duration
We process personal data only as long as it is necessary for the respective purpose mentioned in this privacy policy. The personal data will subsequently be deleted unless there are statutory retention periods to the contrary.
II. Your Rights as a Data Subject
1. Access and Rectification
At any time, and free of charge (a maximum of per year), you can obtain information from us about whether or not personal data about you is being processed by us. You can also request specific details about the data being stored and obtain a copy of this stored data. You have the right to correct incorrect data and to have incomplete personal data completed.
2. Deletion, Restriction and the Right to be Forgotten
You have the right to request the deletion of your personal data or the restriction of its processing. Please keep in mind that legal storage obligations exist in respect of (e.g.) paid contracts and that we may not be able to delete your data fully anyway. In this case, your data will be marked with the aim of restricting its future processing.
3. Data Portability
Where applicable, you also have the right to have personal information concerning you trans-mitted to you or another person in a structured, common and machine-readable format, pro-vided the processing is based on your consent or on a contract and occurs in an automated fashion. Please note that this does not apply insofar as processing is not necessary for the performance of a task in the public interest or for the exercise of the official authority afforded to the controller. You also have the right to obtain the personal data that is transmitted directly from one data controller to another, insofar as this is technically feasible and it does not affect the rights and freedoms of other persons.
4. Withdrawal / Objection
The consent you provide can be withdrawn at any time with effect for the future by contacting the address provided above. In particular, you may object to the use of your email address for the purpose of sending the newsletter at any time by sending an email or letter to datenschutz@axelspringer.com or TRAVELBOOK – Axel Springer Deutschland GmbH, Axel Springer Str. 65, 10888 Berlin. You may do this with effect for the future and without incurring any costs other than transmission costs in accordance with the basic tariffs. You also have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you that is based on a legitimate or public interest. This also applies to profiling activities based on the same provisions. We will cease the processing of personal data in the event of such an objection, unless we can establish compelling and worthwhile grounds for processing that outweigh the interests, rights and freedoms of the data subject, or unless the processing is for the purpose of asserting, exercising or defending legal claims.
Insofar we process personal data for the purpose of carrying out direct advertising, you have the right, at any time, to object to the processing of personal data for the purpose of such advertising by contacting the address provided above. This also applies to profiling activities, insofar as they occur in connection with direct advertising. You also have the right, for reasons arising from your particular situation, to object to the processing of personal data concerning you for scientific or historical research purposes or for statistical purposes, unless such processing is necessary to fulfil a task in the public interest.
5. Right to Complain
Further to the abovementioned right of objection, you have a right to complain to the responsible supervisory authority and to appeal a decision. The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of judicial remedy.
6. Automated Decision-Making
We do not engage in automated decision-making or profiling as defined in Art. 22 GDPR.
III. Use of Our Services with Tracking and Cookies
1. General
Depending on your consent in our Privacy Manager to the use of our services with tracking and cookies, not only our own content or those displayed on our behalf (Art. 28 GDPR) will be shown, but also content from third parties. This can include editorial content, recommendations for external content, but also product advertising, such as in the form of banners at the edge of the page or ads under articles. The legal basis for processing personal data is Art. 6 para. 1 lit. a GDPR.
When such content is loaded, it is done from the servers of the respective third-party vendors. This always involves the transmission of certain data to the third-party vendors, in many cases including personal data. Moreover, cookies are set or similar technologies are used for most services of the third-party vendors through which the content is loaded. The purposes for which these data are processed by the third-party vendors, either in their own responsibility or partly under our legal responsibility, are diverse.
Below we inform you about the use of cookies or comparable technologies and the processing of personal data by third-party vendors.
You can withdraw your previous consent at any time by clicking on the “Tracking Withdrawal Button” link in the footer of the website and then clicking the tracking withdrawal button. This will re-display the Privacy Manager, where you will be asked again about how you wish to use our website.
Cookies that have already been set can also be deleted at any time via an internet browser or other software programs. This is possible in all common internet browsers. Please note that in this case, your consent to the use of our services with trackers and cookies will also be deleted and you will be asked again by our Privacy Manager upon a new visit to our website about how you wish to use our services. The duration of the cookies used is limited to a maximum of one year unless otherwise specified.
2. Third-Party Vendors
The third-party vendors whose services or content we integrate help us improve and finance our services. A list of all possible third-party vendors can be found in the Privacy Manager. The term “third-party vendor” is not to be understood in the sense of Art. 4 No. 10 GDPR (third party). The third-party venndors listed in the Privacy Manager also include our processors within the meaning of Art. 28 GDPR, who are not named individually in this privacy policy, as we remain responsible for data processing according to Art. 4 No. 7 GDPR in these cases. You can recognize our processors by the corresponding designation in the Privacy Manager under the link “Third-Party vendors”. Moreover, among the third-party vendors listed in the Privacy Manager, there are also third parties and processors (subcontractors) used by our contract partners and marketers. For these reasons, more third-party vendors are regularly named in the Privacy Manager than in this privacy policy.
3. TC String (IAB Standard)
If you consent to the use of our services with tracking and cookies, we store your chosen preference and transmit this preference in the form of an encoded character string (so-called TC String) to the third-party vendors named in the Privacy Manager. This transmission is based on your consent (Art. 6 para. 1 lit. a GDPR). Partners or third-party vendors outside the IAB standard are marked as such in the Privacy Manager (*third-party vendors outside the IAB standard).
4. Auctioning of Ad Spaces to Advertisers (Real-Time Bidding)
In marketing our services, we also use the so-called “Real-Time Bidding” (RTB) process. In RTB, our ad spaces are auctioned off to advertisers automatically and in real-time. During the auction, your usage profiles and interests are transmitted to and considered by the auction participants. We use the OpenRTB protocol, which enables these real-time bids and represents a recognized industry standard for the communication and interoperability of auction participants.
More information about the usage profiles and interests can be found in the following sections of the privacy policy.
5. Store and/or access information on a device / Special Purpose Essential
Cookies are small files that your browser stores on your device in a designated directory. Among other things, they can be used to determine whether you have visited a website before. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string through which websites and servers can be assigned to the specific internet browser in which the cookie was stored. This allows the visited websites and servers to distinguish the individual browser from other internet browsers that contain other cookies. A specific internet browser can be recognized and identified using the unique cookie ID. Cookies cannot identify you as a person without additional information.
Cookies and similar technologies are partly required to collect or store personal data on your device in order to process personal data subsequently, including for the purpose of:
- Use limited data to select advertisement
- Create profiles for personalised advertising
- Use profiles to select personalised advertising
- Create profiles for personalised content
- Use profiles to select personalised content
- Measure ad performance
- Measure content performance
- Understand audiences through statistics or combinations of data from different sources
- Develope and improve services
- Use limited data to select content
(so-called “IAB processing purposes”).
Further information on the IAB processing purposes and the individual third-party vendors can be found below at the corresponding place in this privacy policy or in the Privacy Manager.
6. Use limited data to select advertisement
If you have consented to the use of our services with tracking and cookies, we or the relevant third-party vendors process real-time information about the context in which the ad is displayed, including information about the content environment and the device used, such as device type and features, browser identifier, URL, IP address, and your approximate location data for the purpose of optimizing the selection and display of ads used to refinance our services, controlling the frequency and order of ad impressions, and preventing an ad from being displayed in an unsuitable editorial environment (brand-unsafe).
The legal basis for data processing is Art. 6 para. 1 lit. a GDPR.
For the aforementioned purposes, we also use the services of the third parties listed below, who are responsible for data processing through their respective service in accordance with Art. 4 No. 7 GDPR. Further information on data processing by these vendors and your rights as a data subject can be found in the linked privacy policies of the vendors:
- AWIN (AWIN AG, Landsberger Allee 104 BC, 10249 Berlin, Germany) https://www.awin.com/de/rechtliches/privacy-policy
- Idealo (idealo internet GmbH, Ritterstraße 11 in 10969 Berlin) https://www.idealo.de/preisvergleich/Datenschutz.html
- Google Advertising Products (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) https://www.google.de/intl/de/policies/privacy/
- Microsoft Advertising (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA) https://privacy.microsoft.com/de-de/privacystatement
- Outbrain (Outbrain UK Limited, 100 New Bridge Street, London, EC4V 6JA, United Kingdom) https://www.outbrain.com/privacy/
- Xandr (formerly AppNexus – Xandr Inc., 28 W. 23rd Street, New York, New York, 10010, USA) https://www.xandr.com/privacy/platform-privacy-policy/#choices
- YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) https://support.google.com/youtube/answer/7671399?p=privacy_guidelines&hl=de&visit_id=0-636644030056539000-341535836&rd=1
To display ads in the correct size and in a format supported by your device and to direct you to the appropriate target page when you click on the ad, the respective third-party vendor also processes your IP address and information about your device type. This is the special purpose “Deliver and display advertising and content”.
7. Create profiles for personalised advertising
If you have given us your consent to use our services with tracking and cookies, we use services to align the ads displayed for the refinancing of our website to your interests based on your usage behavior. For this purpose, a profile of your usage is created with information about your activities, interests, visits to websites, demographic information, or location.
The legal basis for data processing is Art. 6 para. 1 lit. a GDPR. For the aforementioned purposes, we also use the services of the third-party vendors listed below, who are responsible for data processing via the service in accordance with Art. 4 No. 7 GDPR. Further information on data processing by these third-party vendors and your rights as a data subject can be found in the linked privacy policies of the vendors:
- AWIN (AWIN AG, Landsberger Allee 104 BC, 10249 Berlin, Germany) https://www.awin.com/de/rechtliches/privacy-policy
- Idealo (idealo internet GmbH, Ritterstraße 11 in 10969 Berlin) https://www.idealo.de/preisvergleich/Datenschutz.html
- Google Advertising Products (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) https://www.google.de/intl/de/policies/privacy/
- Microsoft Advertising (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA) https://privacy.microsoft.com/de-de/privacystatement
- Outbrain (Outbrain UK Limited, 100 New Bridge Street, London, EC4V 6JA, United Kingdom) https://www.outbrain.com/privacy/
- YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) https://support.google.com/youtube/answer/7671399?p=privacy_guidelines&hl=de&visit_id=0-636644030056539000-341535836&rd=1
8. Use profiles to select personalised advertising
If you have given us your consent to use our services with tracking and cookies, we use services to display advertising that is interesting to you based on a profile created from your data for personalised advertising.
The legal basis for data processing is Art. 6 para. 1 lit. a GDPR. For this purpose, we also use the services of the following third-party vendors, who are responsible for data processing via the service in accordance with Art. 4 No. 7 GDPR.
Further information on data processing by the vendors and your rights as a data subject can be found in the linked privacy policies of these vendors:
- AWIN (AWIN AG, Landsberger Allee 104 BC, 10249 Berlin, Germany) https://www.awin.com/de/rechtliches/privacy-policy
- Idealo (idealo internet GmbH, Ritterstraße 11 in 10969 Berlin) https://www.idealo.de/preisvergleich/Datenschutz.html
- Google Advertising Products (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) https://www.google.de/intl/de/policies/privacy/
- Microsoft Advertising (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA) https://privacy.microsoft.com/de-de/privacystatement
- Outbrain (Outbrain UK Limited, 100 New Bridge Street, London, EC4V 6JA, United Kingdom) https://www.outbrain.com/privacy/
- YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) https://support.google.com/youtube/answer/7671399?p=privacy_guidelines&hl=de&visit_id=0-636644030056539000-341535836&rd=1
To display personalized advertising on our website in the correct size and format supported by your device and to redirect you to the appropriate target page when you click on the ad, the respective third-party vendor also processes your IP address and information about your device type. This falls under the special purpose “Deliver and display advertising and content”.
9. Create profiles for personalised content
If you have given your consent to use our services with tracking and cookies, we create a profile of your usage with information about your activities, interests, visits to websites, demographic information, or location to tailor the selection of content (not advertising) in our services to your usage behavior and, therefore, to your presumed interests. The legal basis for data processing is Art. 6 para. 1 lit. a GDPR.
Additionally, we use the services of the following third-party vendors, who are responsible for data processing via the service in accordance with Art. 4 No. 7 GDPR.
Further information on data processing by the third-party vendors and your rights as a data subject can be found in the linked privacy policies of these third-party vendors:
- C3 Metrics (C3 Metrics, Inc., 75 Portsmouth Blvd, Suite 130, Portsmouth, NH 03801) https://c3metrics.com/privacy/
- Google Advertising Products (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) https://www.google.de/intl/de/policies/privacy/
- Instagram (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) https://www.instagram.com/legal/privacy/
- Outbrain (Outbrain UK Limited, 100 New Bridge Street, London, EC4V 6JA, United Kingdom) https://www.outbrain.com/privacy/
- Pinterest (Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland) https://policy.pinterest.com/de/privacy-policy
- Soundcloud (SoundCloud Limited, Rheinsberger Str. 76/77, 10115 Berlin, Germany) https://soundcloud.com/pages/privacy
- YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) https://support.google.com/youtube/answer/7671399?p=privacy_guidelines&hl=de&visit_id=0-636644030056539000-341535836&rd=1
10. Use profiles to select personalised content
If you have given your consent to the use of our services with tracking and cookies, we process information about your usage behavior or other historical usage data, including previous activities, interests, visits to websites, location, or demographic information to make our website more interesting for you and to be able to provide selected content based on this information. The legal basis for data processing is Art. 6 para. 1 lit. a GDPR.
Additionally, we use the services of the third-party vendors listed below, who are responsible for data processing via the service in accordance with Art. 4 No. 7 GDPR.
Further information on data processing by these third-party vendors and your rights as a data subject can be found in the linked privacy policies of the vendors:
- C3 Metrics (C3 Metrics, Inc. 75 Portsmouth Blvd, Suite 130 Portsmouth, NH 03801) https://c3metrics.com/privacy/
- Google Advertising Products (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) https://www.google.de/intl/de/policies/privacy/
- Google Content Embeds (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) https://www.google.de/intl/de/policies/privacy/
- Instagram (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) https://www.instagram.com/legal/privacy/
- maps4news (Mapcreator Bogert 31-06 5612 LX Eindhoven, Netherlands) https://mapcreator.io/privacy-policy/
- Outbrain (Outbrain UK Limited, 100 New Bridge Street, London, EC4V 6JA, United Kingdom) https://www.outbrain.com/privacy/
- Pinterest (Pinterest Europe Ltd. Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland) https://policy.pinterest.com/de/privacy-policy
- Soundcloud (SoundCloud Limited, Rheinsberger Str. 76/77, 10115 Berlin, Germany) https://soundcloud.com/pages/privacy
- Vimeo (Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA) https://vimeo.com/privacy
- Wetterkontor (WetterKontor GmbH, Gartenfeldstraße 2, D-55218 Ingelheim, Germany) https://www.wetterkontor.de/de/datenschutzhinweise.asp
- X Corp. (X Corp., 1355 Market Street, Suite 900 San Francisco, CA 94103, USA) https://twitter.com/de/privacy
- YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) https://support.google.com/youtube/answer/7671399?p=privacy_guidelines&hl=de&visit_id=0-636644030056539000-341535836&rd=1
To display the personalised content on our website in the correct size and format supported by your device, the respective third-party vendor also processes your IP address and information about your device type. This falls under the special purpose “Deliver and present advertising and content”.
11. Measure advertising performance
If you have given your consent to use our services with tracking and cookies, we use services to measure advertising performance. These services measure, among other things, whether and how advertisements were displayed to a user and how the user interacted with them, whether an advertisement was displayed in an unsuitable editorial environment (brand-unsafe) and determine the percentage to which the advertisement could have been perceived, including the duration (advertising perception chance). They also create reports on advertising, including its effectiveness and performance, based on user interaction data measured during the interaction with the advertisement.
The legal basis for data processing is Art. 6 para. 1 lit. a GDPR. We also use the services of the following third parties, who are responsible for data processing via the service according to Art. 4 No. 7 GDPR. Further information on data processing by these vendors and your rights as a data subject can be found in the linked privacy policies of these vendors:
- AWIN (AWIN AG, Landsberger Allee 104 BC, 10249 Berlin, Germany) https://www.awin.com/de/rechtliches/privacy-policy
- Bitmovin (Player) (Bitmovin GmbH, Schleppeplatz 7, 9020 Klagenfurt am Wörthersee, Austria) https://bitmovin.com/privacy/
- Microsoft Advertising (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA) https://privacy.microsoft.com/de-de/privacystatement
- C3 Metrics (C3 Metrics, Inc., 75 Portsmouth Blvd, Suite 130, Portsmouth, NH 03801) https://c3metrics.com/privacy/
- Facebook Conversion Tracking* (Facebook Custom Audiences via the Pixel Process*, Facebook Business Tools) (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) https://www.facebook.com/about/privacy/
- Idealo (idealo internet GmbH, Ritterstraße 11 in 10969 Berlin) https://www.idealo.de/preisvergleich/Datenschutz.html
- Google Advertising Products (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) https://www.google.de/intl/de/policies/privacy/
- Outbrain (Outbrain UK Limited, 100 New Bridge Street, London, EC4V 6JA, United Kingdom) https://www.outbrain.com/privacy/
- Xandr (formerly AppNexus) (Xandr Inc., 28 W. 23rd Street, New York, New York, 10010, USA) https://www.xandr.com/privacy/platform-privacy-policy/#choices
- YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) https://support.google.com/youtube/answer/7671399?p=privacy_guidelines&hl=de&visit_id=0-636644030056539000-341535836&rd=1
*Using Facebook Conversion Tracking as an example: If we have received your consent, we use the “Custom Audiences” pixel of the social network Facebook within our website. Counting pixels are integrated into our pages. When you visit our pages, a direct connection is established between your browser and the Facebook server via the counting pixel. Facebook thus receives information from your browser, among other things, that our site was accessed from your device. If you are a Facebook user, Facebook can associate the visit to our pages with your user account. Facebook can then measure the performance of content and ads and display targeted advertisements on Facebook. We point out that we, as the vendor of the pages, do not receive knowledge of the content of the transmitted data as well as their use by Facebook. We can only select which segments of Facebook users (such as age, interests) our advertising should be shown to. This does not involve the “Facebook Custom Audiences via customer list” service. We do not transmit customer data to Facebook, especially no email addresses, either encrypted or unencrypted. The “enhanced matching” function is disabled. The use of “Facebook Custom Audiences via the pixel process” also requires your consent to access and/or store information on a device for the third-party vendor “Facebook Conversion Tracking.”
For information collected through Facebook Business Tools of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”), we are jointly responsible with Facebook. Information about Facebook and the contact details of the data protection officer, as well as further information on how Facebook processes personal data, including the legal basis and options for exercising your rights as a data subject against Facebook, can be found in Facebook’s data policy. We have concluded an agreement with Facebook on joint responsibility (Art. 26 GDPR), in which we have determined the respective responsibilities for fulfilling the obligations under the GDPR regarding joint processing. Accordingly, we are responsible for providing the above information, and Facebook has assumed responsibility for further data subject rights according to Art.
12. Measure content performance
If you have granted us your consent to use our services with tracking and cookies, we employ services to measure the performance of content within our websites. This involves measuring and presenting in a report how content is delivered to users and how they interact with it. The legal basis for data processing is Art. 6 para. 1 lit. a GDPR.
We also utilize the services of the third parties listed below, who are responsible for data processing taking place through the service, as defined in Art. 4 No. 7 GDPR. Further information on data processing by these vendors and your rights as a data subject can be found in the privacy policies linked below:
- Bitmovin (Player) (Bitmovin GmbH, Schleppeplatz 7, 9020 Klagenfurt am Wörthersee, Austria) https://bitmovin.com/privacy/
- DAK-Gesundheit (DAK-Gesundheit, Zentrale Nagelsweg 27 – 31, 20097 Hamburg, Germany) https://www.dak.de/dak/unternehmen/datenschutz-2371594.html#/ Facebook Content Feeds (Facebook Business Tool) (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) https://www.facebook.com/about/privacy/
- Facebook Conversion Tracking (Facebook Custom Audiences via Pixel Method*, Facebook Business Tools) (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) https://www.facebook.com/about/privacy/
- Google Content Embeds (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) google.de/intl/de/policies/privacy/ • Instagram (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) https://www.instagram.com/legal/privacy/
- maps4news (Mapcreator Bogert 31-06, 5612 LX Eindhoven, Netherlands) https://mapcreator.io/privacy-policy/
- LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland) https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv
- Outbrain (Outbrain UK Limited, 100 New Bridge Street, London, EC4V 6JA, United Kingdom) https://www.outbrain.com/privacy/
- Soundcloud (SoundCloud Limited, Rheinsberger Str. 76/77, 10115 Berlin, Germany) https://soundcloud.com/pages/privacy
- Wetterkontor (WetterKontor GmbH, Gartenfeldstraße 2, D-55218 Ingelheim, Germany) https://www.wetterkontor.de/de/datenschutzhinweise.asp
- X Corp. (X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) https://twitter.com/de/privacy
- YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) https://support.google.com/youtube/answer/7671399?p=privacy_guidelines&hl=de&visit_id=0-636644030056539000-341535836&rd=1
*For example, Facebook Conversion Tracking: If we have obtained your consent for this, we use the “Custom Audiences” pixel of the Facebook social network within our website. Counting pixels are integrated on our pages. When you visit our pages, a direct connection is established between your browser and the Facebook server via the counting pixel. Facebook thus receives, among other things, information from your browser that our page has been accessed from your device. If you are a Facebook user, Facebook can assign the visit to our pages to your user account. Facebook can then measure the performance of content and advertisements and play targeted advertisements on Facebook. We would like to point out that as the vendor of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook. We can only select which segments of Facebook users (such as age, interests) should be shown our advertising. This is not the “Facebook Custom Audiences via the customer list” service. We do not transmit any customer data to Facebook, especially no email addresses – neither encrypted nor unencrypted. The “enhanced matching” function is deactivated. The use of “Facebook Custom Audiences via the Pixel Method” also requires your additional consent in privacy to access and/or store information on a device for the third-party “Facebook Conversion Tracking”.
For information collected through Facebook Business Tools of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”), we share joint responsibility with Facebook. Information about Facebook and the contact details of the data protection officer, as well as further information on how Facebook processes personal data, including the legal basis and the options for exercising your rights as a data subject against Facebook, can be found in Facebook’s data policy. We have entered into an agreement with Facebook on joint responsibility (Art. 26 GDPR), in which we have defined the respective responsibilities for fulfilling the obligations under the GDPR regarding joint processing. Accordingly, we are obliged to provide the above information, and Facebook has taken responsibility for the other data subject rights pursuant to Art. 15-20 GDPR.
13. Understand audiences through statistics or combinations of data from different sources
If you have granted us your consent to use our services with tracking and cookies, we employ services to gain insights into the target audiences for advertising and content. This involves creating aggregated reports for advertisers or their representatives about the target audiences reached by their ads, obtained based on survey panels or similar methods. Additionally, aggregated reports are created for service vendors about the target audiences reached or interacted with through the content and/or ads on their services, obtained through survey panels or similar methods. These reports do not allow conclusions about a specific or identifiable person. However, information about your usage behavior is processed to create these reports. Furthermore, for the purposes of market research, offline data is attributed to an online user to gain insights into target audiences, to the extent vendors have declared their intention to match and merge offline data sources. The legal basis for data processing is Art. 6 para. 1 lit. a GDPR.
We also utilize the services of the third parties listed below, who are responsible for data processing taking place through the service, as defined in Art. 4 No. 7 GDPR. Further information on data processing by these vendors and your rights as a data subject can be found in the privacy policies linked below:
- C3 Metrics (C3 Metrics, Inc., 75 Portsmouth Blvd, Suite 130, Portsmouth, NH 03801, USA) https://c3metrics.com/privacy/
- Google Advertising Products (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) https://www.google.de/intl/de/policies/privacy/
- Microsoft Advertising (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA) https://privacy.microsoft.com/de-de/privacystatement
- Outbrain (Outbrain UK Limited, 100 New Bridge Street, London, EC4V 6JA, United Kingdom) https://www.outbrain.com/privacy/
- YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) https://support.google.com/youtube/answer/7671399?p=privacy_guidelines&hl=de&visit_id
13. Develop and improve services
If you have granted us your consent to use our services with tracking and cookies, we employ services for the purpose of developing and improving services, such as through new features. For this purpose, information about your usage behavior is processed. The legal basis for data processing is Art. 6 para. 1 lit. a GDPR.
We also utilize the services of the third parties listed below, who are responsible for data processing taking place through the service, as defined in Art. 4 No. 7 GDPR. Further information on data processing by these vendors and your rights as a data subject can be found in the privacy policies linked below:
- C3 Metrics (C3 Metrics, Inc. 75 Portsmouth Blvd, Suite 130 Portsmouth, NH 03801) https://c3metrics.com/privacy/
- Google Advertising Products (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) https://www.google.de/intl/de/policies/privacy/
- Microsoft Advertising (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA) https://privacy.microsoft.com/de-de/privacystatement
- Outbrain (Outbrain UK Limited, 100 New Bridge Street, London, EC4V 6JA, United Kingdom) https://www.outbrain.com/privacy/
- Xandr (Xandr Inc., 28 W. 23rd Street, New York, New York, 10010, USA) https://www.xandr.com/privacy/platform-privacy-policy/#choices
- YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) https://support.google.com/youtube/answer/7671399?p=privacy_guidelines&hl=de&visit_id=0-636644030056539000-341535836&rd=1
15. Use limited data to select content
If you have granted us your consent for this purpose, we or the relevant third-party vendors process, for the purpose of optimizing the selection and display of content and controlling the frequency and sequence of content displays, real-time information about the content environment, your interaction, and the device used, such as device type and features, browser identifier, URL, IP address, and your approximate location data. The legal basis for data processing is Art. 6 para. 1 lit. a GDPR. You have the option to revoke any consent you have given for the future in privacy at any time.
For the aforementioned purposes, we also utilize the services of the third parties listed below, who are responsible for data processing taking place through their respective services. Further information on data processing by these vendors and your rights as a data subject can be found in the privacy policies linked below:
Facebook Content Feed (Facebook Business Tools) (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) https://www.facebook.com/about/privacy/ Google Content Embeds (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) www.google.de/intl/de/policies/privacy/
- Google Custom Search Widget CSE (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) www.google.de/intl/de/policies/privacy/
- Instagram (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) https://www.instagram.com/legal/privacy/
- maps4news (Mapcreator, Bogert 31-06, 5612 LX Eindhoven, Netherlands) https://mapcreator.io/privacy-policy/
- Outbrain Custom Audience Pixel (Outbrain Inc., 39 West 13th Street, 3rd floor, New York, NY 10011, USA) https://www.outbrain.com/legal/privacy
- Pinterest Inc. (Pinterest Europe Ltd. Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland) https://policy.pinterest.com/de/privacy-policy
- Soundcloud Limited (SoundCloud Limited, Rheinsberger Str. 76/77, 10115 Berlin, Germany) https://soundcloud.com/pages/privacy
- Wetterkontor (WetterKontor GmbH, Gartenfeldstraße 2, D-55218 Ingelheim, Germany) https://www.wetterkontor.de/de/datenschutzhinweise.asp
- X Corp. (X Corp., 1355 Market Street, Suite 900 San Francisco, CA 94103, USA) https://twitter.com/de/privacy
- Youtube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) https://support.google.com/youtube/answer/7671399?p=privacy_guidelines&hl=de&visit_id=0-636644030056539000-341535836&rd=1
16. Ensure security, prevent and detection fraud, and fix errors (Special Purpose)
If you have granted us your consent to use our services with tracking and cookies, third-party vendors listed under the corresponding special purpose in privacy process information for the purpose of ensuring security, preventing fraud, and resolving errors, to ensure that data is transmitted securely, identify and prevent harmful, fraudulent, invalid, or illegal activities, and ensure the correct and efficient operation of systems and processes – including monitoring and improving system and process performance – within the permitted processing purposes. This is necessary to ensure the security of the respective data processing, prevent fraud, and resolve errors. The information processed for this purpose may include automatically transmitted device characteristics for identification, precise geolocation data, and data obtained by reading device characteristics for identification without separate disclosure and/or opt-in. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR.
17. Marketing of Online Advertising Spaces
If you have granted us your consent to use our services with tracking and cookies, we allow our advertising spaces, for the purpose of refinancing our services and targeting advertising displayed on our website to your interests, to be marketed by our advertising marketer Media Impact GmbH & Co KG (Media Impact).
As part of the marketing process, personal data is also processed by third-party vendors employed by Media Impact for the IAB processing purposes mentioned above. These third-party vendors are partly processors engaged by Media Impact and partly third parties within the meaning of Art. 4 No. 10 GDPR, with whom we are jointly responsible in accordance with Art. 26 GDPR, to the extent that we enable the respective third party, through the integration of online advertising technology into our website, to process personal data for the IAB processing purposes jointly defined in privacy, also for its own purposes.
We have entered into an agreement in accordance with Art. 26 GDPR with Media Impact and the third-party vendors employed by Media Impact as defined in Art. 4 No. 10 GDPR, in which we have defined the respective responsibilities for fulfilling the obligations under the GDPR regarding joint processing. Accordingly, we are obliged to enable you to grant privacy-related consents. Furthermore, we are the central point of contact for you as the data subject. We promptly forward data subject requests concerning joint processing that are received by us to Media Impact for response. Nevertheless, you can exercise your rights as a data subject under the GDPR against us and against each controller. Further information about Media Impact and the third-party vendors employed by it can be found at https://www.mediaimpact.de/de/ueber-unsere-werb
18. Affiliate Marketing
If you have granted us your consent to use our services with tracking and cookies, and if you have arrived at our website via an advertising banner from an external website, we receive information from the operator of the external website (“Affiliate”) that a user has accessed our websiffering through the external site. This includes the product ID associated with the advertised offer, as well as the Affiliate’s identification number (Affiliate ID) and a user ID created from any sequence of numbers. We store this information in a cookie on your device. If you order the offer on our website within 30 days, this information is automatically and encryptedly transmitted to the Affiliate upon completion of the ordering process. The cookie is automatically deleted upon completion of the ordering process, but no later than after 30 days. If you purchase the advertised product and do not exercise your distance selling right of withdrawal, the Affiliate receives a commission from the Advertiser. For this purpose, the order number assigned to you is processed. The processing of this data is for the purpose of settling commission payments between us and the Affiliate. The legal basis is Art. 6 para. 1 lit. a GDPR. Based on the information, the Affiliate can only recognize that a user has accessed our website through the advertising banner on the external website and has ordered the advertised product without exercising their distance selling right of withdrawal.
The same applies in reverse if you are directed from a third-party advertiser’s advertising banner placed on our website (“Advertiser”) to the Advertiser’s website.
Furthermore, we also make use of services called affiliate networks. Affiliate networks act as intermediaries between advertisers and publishers. When clicking on the advertising material, the affiliate network processes information about the advertiser’s campaign, the affiliate, the user action (e.g., click or “view”), and in which country it occurred, as well as the device used, for the purpose of processing commission payments between the advertiser and the affiliate.
For further information on the individual affiliate networks and your rights as a data subject, please refer to their respective privacy policies:
AWIN (AWIN AG, Landsberger Allee 104 BC, 10249 Berlin, Germany) https://www.awin.com/de/rechtliches/privacy-policy
Idealo (idealo internet GmbH, Ritterstraße 11, 10969 Berlin) https://www.idealo.de/preisvergleich/Datenschutz.html
Secret Escapes (Secret Escapes GmbH, Reichenberger Strasse 124, 10999 Berlin) https://www.secretescapes.de/datenschutzerklaerung
Travelzoo (Travelzoo (Europe) Ltd., 151 Shaftesbury Avenue, WC2H 8AL London) https://www.travelzoo.com/de/datenschutz/
Tradedoubler (Tradedoubler GmbH, Herzog-Wilhem-Straße 26, 80331 München, Germany) https://www.tradedoubler.com/de/privacy-policy/
V. Social Media and Partner Offers
1. Facebook Fanpages
We use Facebook Fanpages, a service provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). In joint responsibility with Facebook, we analyze how you use our fan page (page insights). The information required under the GDPR for data processing in the context of page insights is available from Facebook; currently specifically in Facebook’s privacy policy at https://www.facebook.com/legal/terms/information_about_page_insights_data.
Facebook also provides you with the relevant content of the contract concluded between Facebook and us regarding joint processing under Art. 26 GDPR; currently under the following link: https://www.facebook.com/legal/terms/page_controller_addendum. You can exercise your right to lodge a complaint with any supervisory authority responsible for you and bring legal action there. According to the GDPR, you have the right to object to the processing of your data. In the privacy policy linked above by Facebook, you can learn more about these and other data subject rights. For page insights on our Facebook fan pages, Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, serves as the central contact point and processes all requests to exercise data subject rights. In the context of page insights, we only receive anonymized statistics ourselves – we do not have access to personal data processed by Facebook. The processing of anonymized data by us is based on legal regulations that allow us to process personal data because we have a predominant legitimate interest in gaining a better understanding of the interests of visitors to our fan page (Art. 6 para. 1 f) GDPR). We offer various community functions on our fan pages, with which you can interact with other users, such as posting on our wall, leaving comments, or liking and sharing posts. We would like to point out that these areas are publicly accessible, and any personal information you post or provide during registration can be viewed by others. We cannot control how other users of our fan page use this information. In particular, we cannot prevent unwanted messages from being sent to you. Facebook offers various community functions on the fan pages, with which you can interact with other users, such as posting there, leaving comments, or liking and sharing posts. We would like to point out that these areas are publicly accessible, and any personal information you post or provide during registration can be viewed by others. We cannot control how other users of the fan pages use this information. In particular, we cannot prevent unwanted messages from being sent to you.
2. Social Plugins
No social media plugins that directly load data from the servers of the respective social media vendors are integrated on this website. Instead, the integrated “plugins” are simple links to the respective third-party pages, which we illustrate with corresponding graphics. Therefore, personal data is not transmitted to the operator of the social media service through the known plugins.
3. Contextual Content
In certain areas of our website, you will find content and advertising selected and delivered by Outbrain UK Limited, 100 New Bridge Street, London, EC4V 6JA, United Kingdom (“Outbrain”). The legal basis for this data processing is Art. 6 para. 1 lit. f GDPR.
We have ensured in an agreement with Outbrain in accordance with Art. 26 GDPR that your rights regarding your personal data are respected. In this agreement, it is essentially regulated that Outbrain:
- processes only the IP address for the connection to deliver content and advertising without your consent;
- sets cookies and performs other data processing only if you have previously given your consent in the Privacy Manager;
- may transfer data to the USA only under the relevant EU standard contractual clauses;
- provides you with the information listed above;
- allows you to exercise requests in accordance with Art. 12 and 15-22 GDPR directly with Outbrain (here, see also Outbrain’s privacy policy), but if you want to exercise your rights directly with us, Outbrain supports us with the corresponding information, etc.
Further information on Outbrain and your rights as a data subject to Outbrain can be found in Outbrain’s privacy policy. Information about any data processing performed by Outbrain and its purposes, if you have given your consent to the use of our website with tracking and cookies, can be found in the privacy policy and in this privacy policy at the appropriate place.
4. Partner Offers
In the interest and for the purpose of displaying interesting offers from selected partners, offers from partners are integrated into our website (“partner offers”). You can recognize these by the corresponding labeling (e.g., “An offer from”). The partner offers are provided by the partner indicated there. To play the partner offers, it is necessary for your browser to establish a direct connection to the partner’s servers. For this purpose, the processing of your IP address is required. The legal basis for data processing is Art. 6 para. 1 lit. f GDPR. The partner is responsible for the data processing operations taking place via the partner offer in accordance with Art. 4 No. 7 GDPR. Please refer to the privacy policy of the partner linked in the respective partner offer for information on the data processing operations taking place via the partner offer and your rights as a data subject.
5. Partner Service Pages
Service pages of partners are integrated into our website (“partner service page”). You can recognize these by the corresponding labeling (e.g., “A service from”). The partner service page is provided by the partner indicated there. Except for the header and footer of the website, the partner is responsible for the content of the partner service page and the data processing operations taking place there in accordance with Art. 4 No. 7 GDPR. Information about the partner can be found in the imprint of the partner linked in the partner service page. Please refer to the privacy policy of the partner linked there for information on the data processing operations taking place via the partner service page and your rights as a data subject.
Displaying third-party content (social networks, videos) If you have given your consent to the use of the website with tracking and cookies, we also embed services of the vendors listed below for the purpose of enhancing the user experience in our website, each of which is responsible for data processing in accordance with Art. 4 No. 7 GDPR. In doing so, the vendor will always process your IP address, which is necessary for establishing the connection to the vendor’s server and for playing the content. The legal basis for the integration of these services is Art. 6 para. 1 lit. a GDPR. Information about the data processing by the respective vendor can be found in the privacy policy of the respective vendor.
- Facebook Content Feeds (Facebook Business Tool) * (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2,
- Flight comparison (via idealo) (idealo Internet GmbH, Ritterstraße 11, 10969 Berlin) idealo Privacy Policy
- Getty Images International (1st Floor, The Herbert Building, The Park, Carrickmines, Dublin 18, Ireland) Getty Images Privacy Policy
- Giphy (Giphy, Inc., 416 W 13th Street Suite 207, New York 10014, USA) Giphy Privacy Policy
- Google Content Embeds (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) Google Privacy Policy
- Instagram (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) Instagram Privacy Policy
- Pinterest (Pinterest Europe Ltd. Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland) Pinterest Privacy Policy
- Soundcloud (SoundCloud Limited, Rheinsberger Str. 76/77, 10115 Berlin, Germany) Soundcloud Privacy Policy
- X Corp. (X Corp., Inc. 1355 Market Street, Suite 900 San Francisco, CA 94103, USA) Twitter Privacy Policy
- Vimeo (Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA) Vimeo Privacy Policy
- Wetterkontor (WetterKontor GmbH, Gartenfeldstraße 2, D-55218 Ingelheim, Germany) Wetterkontor Privacy Policy
- YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) YouTube Privacy Policy
For information collected via Facebook Business Tools of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”), we are jointly responsible with Facebook. For information about Facebook, the contact details of the data protection officer, and further information on how Facebook processes personal data, including the legal basis and options for exercising your rights as a data subject with Facebook, please refer to Facebook’s data policy. We have entered into an agreement with Facebook on joint responsibility (Art. 26 GDPR), in which we have defined the respective responsibilities for fulfilling the obligations under the GDPR regarding joint processing. Accordingly, we are obliged to provide the above information, and Facebook is responsible for the other data subject rights under Art. 15-20 GDPR.
VI. Special Services
Your Contact
When you contact us, e.g., by email, the data you provide (your email address, if applicable, your name and your telephone number) will be processed by us in the interest and for the purpose of processing your request. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Occasionally, we also provide contact forms from vendors for the purpose and in the interest of enabling you to contact the vendor specified in the contact form directly. The personal data you enter in the contact form is transmitted directly to the vendor via an interface. We do not have access to the data, and (intermediate) storage of the data does not take place. Please refer to the data processing information in the privacy policy of the vendor linked in the respective contact form for information on data processing. The legal basis for data transmission is Art. 6 para. 1 lit. b or Art. 6 para. 1 lit. f GDPR.
VII. Supplemental Information for Certain Regions
1. Children’s Privacy
Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from anyone under the age of 13 without verification of parental consent, we take steps to remove that information from our servers. If we need to rely on consent as a legal basis for processing your information and your country requires consent from a parent, we may require your parent’s consent before we collect and use that information.
2. California Residents
This Statement applies solely to residents of California or individuals whose information has been collected in California. We have adopted and included this notice to comply with the California Consumer Privacy Act of 2018 (“CCPA”). Any terms used in this Statement that are defined in the CCPA have the same meaning given therein.
Information we collect:
Category | Collected? | Disclosed? | |
1 | Identifiers. Name, alias, postal address, unique personal identifier, online identifier, Internet Protocol (IP) address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers | YES | YES |
2 | Personal information categories under the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories. | NO | NO |
3 | Protected classification characteristics under California or federal law. Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). | NO | NO |
4 | Commercial information. Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. | NO | NO |
5 | Biometric information. Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. | NO | NO |
6 | Internet or other similar network activity. Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement. | YES | YES |
7 | Geolocation data. Physical location or movements. | NO | NO |
8 | Sensory data. Audio, electronic, visual, thermal, olfactory, or similar information. | NO | NO |
9 | Professional or employment-related information. Current or past employment history or performance evaluations. | NO | NO |
10 | Education Information under California Family Educational Rights and Privacy Act (20 U.S.C. section 1232g, 34 C.F.R. Part 99) Information that is not “publicly available personally identifiable information” as defined in the California Family Educational Rights and Privacy Act (20 U.S.C. section 1232g, 34 C.F.R. Part 99). Includes education records directly related to a student maintained by an educational institution or party acting on its behalf, like grades, transcripts, class lists and student schedules, identification codes, financial information, or disciplinary records. | NO | NO |
11 | Inferences Conclusions that could be used to create a profile reflecting an individual’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, aptitude. | YES. | YES |
We do not sell your personal information, as defined under CCPA. If in the future we do sell your personal information, we will notify you and you may have the right to opt-out of such sale.
The CCPA provides individuals residing in California or whose personal information was collected in California with specific rights regarding their Personal information.
You have the right to request that We disclose certain information to you about our collection and use of your Personal Information over the past twelve (12) months. Once we receive and confirms your verifiable information access request, we must disclose to you: (i) the categories of Personal Information we collected about you; (ii) the categories of sources for the Personal Information we collected about you; (iii) our business or commercial purpose for collecting or, if applicable, selling that Personal Information; (iv) the categories of third parties with whom we share that Personal Information; (v) the specific data points or pieces of Personal Information we collected about you. If we disclosed for a business purpose or sold your Personal Information, we must also provide separate lists that: (x) identify the personal information categories that were sold to each category of recipient in connection with sales of your Personal Information; and (y) identify the personal information categories that were provided to each category of recipient in connection with business purposes disclosures of your Personal Information.
You have the right to request that we delete any of your Personal Information that we collected from you and/or retained. Unless subject to a certain limited exception, once we receive and confirms your verifiable data deletion request, we will delete (and direct our service providers to delete) your personal information from our records. We will notify you promptly if it determines it must deny your deletion request.
You have the right to opt-out of any sales, as defined by the CCPA, of Personal Information by us. However, we do not sell your information.
To exercise your access, data portability, and deletion or do not sell opt-out rights described above, you may submit a verifiable consumer request by any of the above contact options.
You may only make a verifiable consumer request for access or data portability up to two times within a 12-month period. You may make a verifiable do not sell opt-out request at any time. Any such request must: (i) provide sufficient information that allows Us to reasonably verify that you are the person about whom we collected personal information or an authorized representative thereof; and (ii) describe your request with sufficient detail such that we may understand, evaluate, and respond to it. we cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request. Only you or a person registered with the California Secretary of State that you authorize to act on your behalf may make a verifiable consumer request related to your Personal Information. You may also make a verifiable consumer request on behalf of your minor child.
We endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you in writing of the extension period and the reason for it. We will deliver any required or requested responses or other communications in writing to you by email. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. If applicable, the response we provide will also explain any reasons we cannot comply with a request. For data portability requests, we will provide your personal information in a format that is readily usable and transferable. We do not charge a fee to process or respond to your verifiable consumer request unless such requests become excessive, repetitive, or manifestly unfounded or as otherwise permitted by the CCPA. If we determine that a request warrants charging a fee, we will notify you and provide you with a cost estimate before completing your request.
_____________________________________________________________________________
In case you wish to have this data privacy policy sent to you vial postal mail, please contact us at Axel Springer Deutschland GmbH, Data Protection – TRAVELBOOK, Axel-Springer-Str. 65, 10888 Berlin, datenschutz@axelspringer.de.