Table of contents
2. Responsible body for data processing
3. Purpose of the collection of personal data
4. Legal basis for the processing of personal data
5. Disclosure of personal data to third parties
6. Transfer of the data to a third country or to an international organisation
8. Storage and deletion of data
9. Use of cookies and similar technologies
11. Automated decision in individual cases
14. Use of the Google Tag Manager
15. Use of the LinkedIn social plug-in
16. Use of the Pinterest button
17. Use of the Instagram button
18 Security, questions and suggestions
19. rRght to information / right of cancellation; other data subject rights
Privacy policy
Welcome to Vintage Tours and our online presence, in particular www.vintage-tours.com
We are pleased that we have aroused your interest in our offers. The protection of your privacy and your personal data is very important to us. Your data is therefore always collected and used in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 (GDPR), the German Federal Data Protection Act (BDSG), the German Act on Data Protection and Privacy in Telecommunications and Digital Services (TDDDG) and the German Digital Services Act (DDG). In the following, we - as the party responsible for data processing - will therefore inform you about which data we collect and how we process this data. Please note that the English version of our Privacy Policy is only for information and is not legally binding. Therefore, in the event of any inconsistency between the German and the English version, only the German version shall apply.
1. Personal data
Personal data within the meaning of Art. 4 No. 1 GDPR means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal data is only stored if this is necessary to provide the booked service, to comply with legal requirements or for the purpose stated below.
2. Responsible body for data processing
The controller for this online presence within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is
Vintage Tours GmbH
Lena-Christ-Weg 13
87439 Kempten
Germany
Contact:
+49 (0) 170 5746502
info@vintage-tours.com
(Hereafter abbreviated as "Vintage Tours")
3. Purpose of the collection of personal data
a) The collection of personal data is essential if you wish to book a trip or other service via our portal, contact us, subscribe to our newsletter or use other offers on our website for which personal data is essential. This also includes voucher purchases and participation in competitions.
b) In accordance with legal regulations and in the interests of data minimisation, we generally only collect data that is required for the provision of this particular service. If we ask you to provide further information in our forms, this information is always voluntary and labelled as such. Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. The data is also stored in log files to ensure the functionality of the website. We also use the data to optimise the website and to ensure the security of our information technology systems. The data is not analysed for marketing purposes in this context. These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f GDPR.
c) If you book a trip or other service, the data collected will be used to process this booking, for advertising purposes and for statistical purposes in accordance with legal requirements.
d) If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass on this data without your consent.
This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; consent can be revoked at any time.
All you need to do is send us an informal notification by e-mail. The legality of the data processing operations carried out until the cancellation remains unaffected by the cancellation.
We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory statutory provisions - in particular retention periods - remain unaffected.
e) If you subscribe to our newsletter, we will also store and use the personal data you provided when booking and your trip on the basis of Art. 6 para. 1 lit. f GDPR in order to provide you with the best possible service as a newsletter subscriber.
f) The legal basis for the processing of data after registration for the newsletter by the user is Art. 6 para. 1 lit. a GDPR if the user has given consent. We also use the personal data stored by us to maintain customer relationships, for customer support (e.g. information on the course of your stay), to carry out our own advertising and marketing measures (e.g. sending catalogues and other advertising mailings within the legally permissible framework, queries on customer satisfaction) and for order processing. The legal basis for sending the newsletter as a result of the sale of goods or services is Section 7 (3) UWG.
4. Legal basis for the processing of personal data
a) Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis. The lawfulness of the processing is given on the basis of your consent.
You can revoke your consent at any time. We would like to point out that the revocation is effective for the future and processing that took place before the revocation is not affected.
b) Art. 6 para. 1 lit. b GDPR serves as the legal basis for the processing of personal data required for the fulfilment of a contract to which the data subject is a party. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
c) Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.
d) In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.
e) If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.
This applies in particular to the following case groups:
- Examination and optimisation of procedures for needs analysis and direct customer contact,
- Advertising, unless you have objected to the use of your data,
- Ensuring IT security and IT operations,
- Prevention and investigation of criminal offences,
- Measures for business management and further development of services and products.
f) Through your use of social media services, usage profiles are created based on your usage behaviour and used to display advertisements. Cookies are usually stored on your computer for this purpose. If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, the processing serves to protect the legitimate interests of the data subject. Art. 6 para. 1 lit. f GDPR as the legal basis for processing.
5. Disclosure of personal data to third parties
Your personal data will only be passed on in accordance with the relevant regulations, in particular those relating to data protection and competition law.
Insofar as this is necessary for the provision of the contractual service owed by us or legal obligations, your data will also be passed on to subcontractors or service providers to provide the service in our name or on our behalf (e.g. technical processing of mail and email dispatch, payment processing, customer service).
In addition, the data will be passed on to persons or companies to process your booking, in particular to airlines, tour operators, hotels, travel agencies, car hire companies, cruise lines, authorities, etc. Please note that the data protection regulations at the registered office of these persons and companies may differ from those in Germany.
Your data will also be disclosed and transferred to third parties if we are obliged to do so by law or on the basis of legally binding court proceedings.
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided.
6. Transfer of the data to a third country or to an international organisation
Data will only be transferred to third countries (countries outside the European Economic Area - EEA) if this is necessary for the execution of our offers, if it is required by law or if you have given us your consent. If required by law, we will inform you of the details.
Among other things, we use tools from companies based in the USA or other third countries that do not have a level of data protection comparable to that in the EU. If these tools are active, your personal data may be transferred to these third countries and processed there.
We would like to point out that the USA, as a safe third country, generally has a level of data protection comparable to that of the EU. Data transfer to the USA is therefore permitted if the recipient is certified under the "EU-US Data Privacy Framework" (DPF) or has suitable additional guarantees.
We would like to point out that a level of data protection comparable to that in the EU cannot be guaranteed in third countries. For example, companies are obliged to hand over personal data to security authorities without you as the data subject being able to take legal action against this. It cannot be ruled out that authorities, such as secret services, may process, analyse and permanently store your data located on servers hosted in third countries for surveillance purposes. We have no influence on this processing activity.
7. Safety measures
We take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk within the meaning of Art. 32 GDPR.
8. Storage and deletion of data
Your personal data will be stored for the purposes stated under "Purpose of collecting personal data". The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The legislator has issued various retention obligations and periods. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data in accordance with Art. 17 para. 3 GDPR. If the data is not deleted because it is required for other and legally permissible purposes, its processing is restricted, i.e. the data is blocked and not processed for other purposes. This includes data that must be retained for tax law reasons.
9. Use of cookies and similar technologies
We use cookies and similar technologies on our website and process your personal data (e.g. IP address), e.g. to personalise content and advertisements, integrate media from third-party providers or analyse access to our website. If cookies are used by third-party companies or for analysis purposes, you will be informed of this separately as part of this privacy policy and we may request separate consent from you.
Data processing may take place with your consent or on the basis of a legitimate interest, which you can object to in the privacy settings. You have the right not to consent and to change or withdraw your consent at a later date.
Cookies that are required to carry out the electronic communication process, to provide certain functions that you have requested (e.g. for the shopping basket function) or to optimise the website (e.g. cookies to measure the web audience) (necessary cookies) are stored on the basis of Art. 6 para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in the storage of necessary cookies for the technically error-free and optimised provision of its services. If consent to the storage of cookies and comparable recognition technologies has been requested, the processing is carried out exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG); the consent can be revoked at any time.
In principle, it is possible to use our website without cookies or similar technologies that do not serve technical purposes. By accepting additional functional cookies, we can improve the user-friendliness and personalisation of our website for you. We therefore recommend that you permanently activate cookies for our website.
Some services process personal data in unsafe third countries. With your consent, you also agree to the data processing of marked services in accordance with Art. 49 para. 1 lit. a GDPR and Art. 17 para. 1 lit. a FADP (Switzerland), with risks such as insufficient legal remedies, unauthorised access by authorities without information or possibility of objection, unauthorised disclosure to third parties and insufficient data security measures.
Note for underage users: Underage users cannot legally consent to optional services if this is not authorised by their legal guardians. As the services offered by Vintage Tours are in any case only aimed at adults with a valid driving licence, it is not advisable for minors to use our services.
We provide a tool on our website for the individual configuration of privacy settings, for which you will find more detailed information in the following paragraph. In general, we differentiate between essential and functional services as well as services for statistical purposes.
a) Essential services
Essential services are required for the basic functionality of the website. They only contain technically necessary services. You cannot object to these services. The following services belong to this category:
i. WooCommerce
Purpose: WooCommerce enables the embedding of an e-commerce shop system with which you can buy products on a website. This requires the processing of the user's IP address and metadata. Cookies or cookie-like technologies can be stored and read. These may contain personal data and technical data such as account data, evaluation data, user ID, the user's shopping basket in the website's database, the last products viewed and cancellation notices. This data can be used to track the download process for downloadable products. WooCommerce can personalise the shopping experience by, for example, redisplaying products that have already been viewed. The legitimate interest in using this service is to offer goods and products in a digital environment.
Use on the legal basis of: Legitimate interest
Provider: Vintage Tours GmbH
e-mail: info@vintage-tours.com
Contact form: https://www.vintage-tours.com/kontakt/
Privacy policy: https://www.vintage-tours.com/datenschutzerklaerung/
ii. WordPress user login
Purpose: WordPress is the content management system for this website and allows registered users to log in to the system. Cookies or cookie-like technologies can be stored and read. These can store a session hash, login status, user ID and user-related settings for the WordPress backend. This data can be used so that the browser can recognise you as a logged-in user.
Use on the legal basis of: Legitimate interest
Provider: Vintage Tours GmbH
e-mail: info@vintage-tours.com,
Contact form: https://www.vintage-tours.com/kontakt/
Privacy policy: https://www.vintage-tours.com/datenschutzerklaerung/
iii. TranslatePress
Purpose: TranslatePress is a multilingual system for WordPress websites. The cookies store the language of the user and can redirect the user to the version of the website that matches with the language of the browser of the user.
Use on the legal basis of: Legitimate interest
Provider: Vintage Tours GmbH
e-mail: info@vintage-tours.com
Contact form: https://www.vintage-tours.com/kontakt/
Privacy policy: https://www.vintage-tours.com/datenschutzerklaerung/
iv. Elementor
Purpose: Elementor allows creating the layout of this website to make it more appealing and user-friendly. The collected data is not used for analysis purposes, but only to ensure that, for example, hidden elements are not displayed again during multiple active sessions. Cookies or cookie-like technologies can be stored and read. These are used to store the number of page views and active sessions of the user. The legitimate interest in using this service is the simple and user-friendly implementation of the layouts used.
Use on the legal basis of: Legitimate interest
Provider: Vintage Tours GmbH
e-mail: info@vintage-tours.com
Contact form: https://www.vintage-tours.com/kontakt/
Privacy policy: https://www.vintage-tours.com/datenschutzerklaerung/
v. Real Cookie Banner
Purpose: Real Cookie Banner asks website visitors to consent to the setting of cookies and the processing of personal data. For this purpose, each website visitor is assigned a UUID (pseudonymous identification of the user), which is valid until the cookie for storing consent expires. Cookies are used to test whether cookies can be set, to store a reference to the documented consent, to store which services from which service groups the visitor has consented to and, if consent is obtained in accordance with the Transparency & Consent Framework (TCF), to store the consents in TCF partners, purposes, special purposes, functions and special functions. The consent obtained is fully documented as part of the duty of disclosure under the GDPR. In addition to the services and service groups to which the visitor has consented, and if consent is obtained according to the TCF standard, to which TCF partners, purposes and functions the visitor has consented, this includes all settings of the cookie banner at the time of consent as well as the technical circumstances (e.g. size of the viewing area at the time of consent) and the user interactions (e.g. clicks on buttons) that led to consent. Consent is collected once per language.
Use on the legal basis of: Fulfilment of a legal obligation
Provider: Vintage Tours GmbH
e-mail: info@vintage-tours.com
Contact form: https://www.vintage-tours.com/kontakt/
Privacy policy: https://www.vintage-tours.com/datenschutzerklaerung/
b) Functional services
Functional services are necessary to provide features that go beyond the essential functionality of the website, such as prettier fonts, video playback or interactive Web 2.0 features. Content from video and social media platforms, for example, is blocked by default. These can be authorised individually. If the service is approved, this content is automatically loaded without further manual consent. This category includes the following services:
i. YouTube
Purpose: YouTube enables the embedding of content on websites that are published on youtube.com in order to improve the website with videos. This requires the processing of the user's IP address and metadata. Cookies or cookie-like technologies can be stored and read. These may contain personal data and technical data such as user IDs, consents, video player settings, connected devices, interactions with the service, push notifications and the account used. This data can be used to record websites visited, to compile detailed statistics on user behaviour and to improve Google's services. It may also be used to create profiles, e.g. to offer you personalised services such as advertising based on your interests or recommendations. This data may be linked by Google with the data of users logged in to Google's websites (e.g. youtube.com and google.com). Google makes personal data available to its affiliated companies, other trusted companies or persons who may process this data on the basis of Google's instructions and in accordance with Google's privacy policy.
Use on the legal basis of: Consent
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Telephone: +1 650 253 0000
e-mail: dpo-google@google.com
Contact form: https://support.google.com/
Privacy policy: https://policies.google.com/privacy
Imprint: https://www.google.de/contact/impressum.html
ii. WordPress comments
Purpose: WordPress is the content management system for this website and offers the possibility to write comments under blog posts and similar content. Cookies or cookie-like technologies can be stored and read. These may contain personal data such as the name, email address and website of a commenter. Your personal data can be used to display it again if you wish to write another comment on this website.
Use on the legal basis of: Consent
Provider: Vintage Tours GmbH
e-mail: info@vintage-tours.com
Contact form: https://www.vintage-tours.com/kontakt/
Privacy policy: https://www.vintage-tours.com/datenschutzerklaerung/
iii. Pinterest
Purpose: Pinterest makes it possible to embed content published on pinterest.com such as pins, posts and user profiles as well as other interaction options such as follow buttons directly into websites. This requires the processing of the user's IP address and metadata. Cookies or cookie-like technologies can be stored and read. These may contain personal data and technical data such as user IDs and security tokens. This data can be used to collect visited websites and detailed statistics on user behaviour and to improve Pinterest's services. It can also be used for profiling, e.g. to offer you personalised services such as advertising based on your interests or recommendations. This data can be linked to the data of users registered on pinterest.com. Pinterest shares personal data with its affiliates, advertisers, partners and other third parties.
Use on the legal basis of: Consent
Provider: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland
Contact form: https://help.pinterest.com/
Privacy policy: https://policy.pinterest.com/en-gb/privacy-policy
Imprint: https://policy.pinterest.com/de/impressum
iv. Gravatar
Purpose: Gravatar enables the display of images of people who have, for example, written a comment or logged into an account. The image is retrieved on the basis of the email address provided by the user if an image has been saved for this email address on gravatar.com. This requires the processing of the user's IP address and metadata. No cookies or cookie-like technologies are set on the user's client. This data can be used to record the websites visited and to improve Aut O'Mattic's services.
Use on the legal basis of: Consent
Provider: Aut O’Mattic A8C Ireland Ltd., Grand Canal Dock, 25 Herbert Pl, Dublin, D02 AY86, Ireland
Telephone: +877 273 3049
Contact form: https://automattic.com/contact/
Privacy policy: https://automattic.com/privacy/
v. Google Maps
Purpose: Google Maps enables the embedding of maps directly into websites to enhance the website. This requires processing the user’s IP-address and metadata. Cookies or cookie-like technologies can be stored and read. These can contain personal data and technical data like user ID, consent, settings of the map viewer and security tokens. This data can be used to collect visited websites, detailed statistics about user behavior, and it can be used to improve the services of Google. This data may be linked by Google to the data of users logged in on the websites of Google (e.g. google.com and youtube.com). Google provides personal information to their affiliates and other trusted businesses or persons to process it for them, based on Google's instructions and in compliance with Google's privacy policy.
Use on the legal basis of: Consent
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Telephone: +1 650 253 0000
e-mail: dpo-google@google.com
Contact form: https://support.google.com/
Privacy policy: https://policies.google.com/privacy
Imprint: https://www.google.de/contact/impressum.html
vi. Google Fonts
Purpose: Google Fonts enables the integration of fonts into websites in order to improve the website without having to install the fonts on your device. This requires the processing of the user's IP address and metadata. No cookies or cookie-like technologies are set on the user's client. The data can be used to record the websites visited and can be used to improve Google's services. It may also be used for profiling, e.g. to offer you personalised services such as advertising based on your interests or recommendations. Google makes personal data available to its affiliated companies and other trusted companies or persons who process this data for them on the basis of Google's instructions and in accordance with Google's privacy policy.
Use on the legal basis of: Consent
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Telephone: +1 650 253 0000
e-mail: dpo-google@google.com
Contact form: https://support.google.com/
Privacy policy: https://policies.google.com/privacy
Imprint: https://www.google.de/contact/impressum.html
c. Services for statistical purposes
Statistical services are required to collect pseudonymised data about visitors to the website. The data enables us to better understand the visitors and optimise the website. This category includes the following services:
i. Woocommerce order allocation
Purpose: WooCommerce order attribution helps us to see which of our marketing measures and channels led to your purchase on our website. This requires the processing of the user's IP address and metadata. Cookies or cookie-like technologies can be stored and read. These may contain personal data and technical data such as the referring source, UTM parameters, the device type (e.g. desktop, tablet or mobile phone) and the page views of the session. The information used to allocate orders is temporarily stored in visitors' browsers using cookies. This data is only read out and stored on the server as order metadata when an order is placed. The cookies in the visitors' browsers expire after each session. The order allocation function of WooCommerce is not suitable for tracking visitors across multiple sessions or creating behavioural visitor profiles. Order tracking is a feature for shop owners who want to gain clarity on the marketing activities, channels or campaigns that lead to orders in their online shops. It allows the website owner to attribute orders to traffic sources, which enables an understanding of the effectiveness of various marketing efforts, and it can be determined what prompted a customer to purchase from the shop and where the customer came from.
Use on the legal basis of: Consent
Provider: Vintage Tours GmbH
e-mail: info@vintage-tours.com
Contact form: https://www.vintage-tours.com/kontakt/
Privacy policy: https://www.vintage-tours.com/datenschutzerklaerung/
ii. Jetpack Stats
Purpose: Jetpack Stats creates detailed statistics about user behaviour on the website in order to obtain analysis information. Cookies or cookie-like technologies can be stored and read. These may contain technical data, such as whether cookies can be set. Jetpack Stats requires the processing of the user's IP address and metadata. This data can be used to collect visited websites and detailed statistics about user behaviour, such as post and page views, country, video views, clicks on outbound links, referring URLs and search engine terms. They can also be used to improve Automattic's services. In addition, this data may be linked by Jetpack Stats to the data of users logged in to Automattic's websites (e.g. wordpress.com, automattic.com). It may also be used for profiling, e.g. to offer you personalised services, such as advertising based on your interests or recommendations. Automattic shares personal data with subsidiaries, independent contractors and third-party providers.
Use on the legal basis of: Consent
Provider: Aut O’Mattic A8C Ireland Ltd., Grand Canal Dock, 25 Herbert Pl, Dublin, D02 AY86, Ireland
Telephone: +877 273 3049
Contact form: https://automattic.com/contact/
Privacy policy: https://automattic.com/privacy/
10. Newsletter
On our website, you have the option of registering for our newsletter. We process the personal data transmitted via the registration form in order to send you the individual newsletters. For the purpose of measuring reach and analysing our email marketing campaigns, we collect data on your use of our newsletters, e.g. whether, how often and for how long you read them and which links you click on.
The legal basis for the processing of your personal data is Art. 6 para. 1 sentence 1 lit. a GDPR, possibly in conjunction with. § Section 7 para. 2 no. 3 UWG. We may also send you certain information by email on the basis of a legal authorisation in accordance with Section 7 (3) UWG. You can revoke your consent at any time with effect for the future (e.g. via the "unsubscribe" link in the newsletter). If you exercise your right of cancellation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
The data you provide us with for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and deleted from the newsletter distribution list after you unsubscribe from the newsletter or after the purpose no longer applies. We reserve the right to delete or block e-mail addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. You can object to the storage if your interests outweigh our legitimate interest.
11. Automated decision in individual cases
A fully automated decision means that decisions are made by technical means without the direct involvement of a person.
Automated decision-making in accordance with Art. 22 GDPR does not take place on our website. In the event that we use this procedure in individual cases, we will inform you of this separately if required by law.
12. Use of data for profiling
Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
We do not process your data with the aim of evaluating certain personal aspects (profiling).
13. Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in Ireland. Google will use this information for the purpose of analysing your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.
The Google tracking codes on this website use the "anonymiseIp()" function, which means that IP addresses are only processed in abbreviated form in order to exclude the possibility of direct personal references. You can object to the collection and storage of data at any time with effect for the future. By clicking the "Deactivate" button, tracking is completely prevented. For the objection to be permanent, the browser used must accept cookies. Alternatively, you can object to the collection of data by using a Google browser plugin to prevent the information collected by cookies (including your IP address) from being sent to Google Ireland Limited and used by Google Ireland Limited. The following link will take you to the corresponding plugin: https://tools.google.com/dlpage/gaoptout?hl=de
The legal basis for the use of Google Analytics is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.
The privacy policy can be found at:
14. Use of the Google Tag Manager
Our online presence uses Google Tag Manager, a tool for managing website tags from Google Inc. Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The Google Tag Manager itself does not store any personal data. The Tag Manager organises access from other tags, which in turn may collect data. However, Google Tag Manager does not access this data. If Google Tag Manager has been deactivated at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager. The use of Google Tag Manager constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
Transfers to third countries are possible. Standard contractual clauses pursuant to Art. 46 GDPR have been concluded as suitable guarantees. For third countries/companies for which an adequacy decision exists, the adequacy decision also applies.
15. Use of the LinkedIn social plug-in
This website uses plugins from the social network LinkedIn, which is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn"). The LinkedIn plugins can be recognised by the corresponding logo or the "Recommend" button. Please note that the plugin establishes a connection between your internet browser and the LinkedIn server when you visit our website. LinkedIn is thus informed that this website has been visited with your IP address. If you click on the LinkedIn "Recommend" button and are logged into your LinkedIn account at the same time, you have the option of linking content from our website to your LinkedIn profile page. In doing so, you enable LinkedIn to associate your visit to our website with you or your user account. You should be aware that we have no knowledge of the content of the transmitted data and its use by LinkedIn.
Further details on the collection of data and your legal options as well as setting options can be found on LinkedIn at https://www.linkedin.com/
We would like to point out that user data may be processed outside the European Union. This may result in risks for users because, for example, it could make it more difficult to enforce users' rights. Furthermore, user data is generally processed within social networks for market research and advertising purposes.
16. Use of the Pinterest button
This website uses the "Pin it" button of the social network Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest"). You can recognise the Pinterest plugin on our website by the "Pin it" button in white letters on a red background or in red letters on a white background, or alternatively by a red and white "P" on a white background.
When you access a page that contains such an element, your browser establishes a direct connection to the Pinterest servers. This social media element transmits log data to the Pinterest server in the USA. This log data may contain your IP address, the address of the websites visited that also contain Pinterest functions, the type and settings of the browser, the date and time of the request, your use of Pinterest and cookies.
If consent has been obtained, the above-mentioned service is used on the basis of Art. 6 para. 1 lit. a GDPR and § 25 TDDDG. Consent can be revoked at any time. If no consent has been obtained, the service is used on the basis of our legitimate interest in the widest possible visibility in social media in accordance with Art. 6 para. 1 lit. f GDPR.
Further information on the purpose, scope and further processing and use of the data by Pinterest as well as your rights and options for protecting your privacy in this regard can be found in Pinterest's privacy policy:
https://policy.pinterest.com/en-gb/privacy-policy
We would like to point out that user data may be processed outside the European Union. This may result in risks for users because, for example, it could make it more difficult to enforce users' rights. Furthermore, user data is generally processed within social networks for market research and advertising purposes.
17. Use of the Instagram button
This website uses social media plug-ins from the social network Instagram, which is operated by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland. The Instagram plugin can be recognised by the "Instagram button" on our homepage.
When the social media element is active, a direct connection is established between your device and the Instagram server. Instagram then receives information about your visit to this website. If you click the Instagram button while you are logged into your Instagram account, content from our website can be linked to your Instagram profile. This allows Instagram to associate your visit to our pages with your user account.
We expressly point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Instagram. Insofar as consent has been obtained, the use of the above-mentioned service is based on Art. 6 para. 1 lit. a GDPR and § 25 TDDDG. Consent can be revoked at any time. If no consent has been obtained, the service is used on the basis of our legitimate interest in the widest possible visibility in social media in accordance with Art. 6 para. 1 lit. f GDPR.
Insofar as personal data is collected on our website with the help of the tool described here and forwarded to Instagram, there is joint responsibility in accordance with Art. 26 GDPR. The joint responsibility is limited exclusively to the collection of the data and its transfer to Instagram. The processing carried out by Instagram after forwarding is not part of the joint responsibility. The obligations incumbent on us jointly have been set out in a joint processing agreement. The agreement, which also applies to Instagram as part of the Meta Group, can be found at
https://de-de.facebook.com/legal/terms/page_controller_addendum
According to this agreement, we are responsible for providing data protection information when using the Instagram tool and for the secure implementation of the tool on our website in accordance with data protection law. Meta Platforms Ireland Ltd. is responsible for the data security of Instagram products. You can assert data subject rights (e.g. requests for information) regarding the data processed by Instagram directly with Instagram. If you assert your data subject rights with us, we are obliged to forward them to Instagram.
Further information on this can be found in Instagram's privacy policy at: http://instagram.com/about/legal/privacy
We would like to point out that user data may be processed outside the European Union. This may result in risks for users because, for example, it could make it more difficult to enforce users' rights. Furthermore, user data is generally processed within social networks for market research and advertising purposes.
18. Security, questions and suggestions
Last but not least, security also depends on your system. You should always treat your access information confidentially, never allow passwords to be saved by the web browser and close the web browser window when you end your visit to our website. This will make it more difficult for third parties to access your personal data.
Use an operating system that can manage user rights. Set up several users on your system, even within the family, and never use the Internet with administrator rights. Use security software such as virus scanners and firewalls and keep your system up to date.
19. rRght to information / right of cancellation; other data subject rights
You have the right:
- to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on its details;
- in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us;
- to demand the erasure of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
- in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;
- in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller;
- in accordance with Art. 7 para. 3 GDPR, to revoke your consent once given to us at any time. As a result, we may no longer continue the data processing that was based on this consent in the future;
- to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters and
- Right to object to the collection of data in special cases and to direct marketing (Art. 21 GDPR):
If data processing is carried out on the basis of Art. 6 para. 1 lit. e or f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on this provision. The respective legal basis on which processing is based can be found in this privacy policy. If you lodge an objection, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defence of legal claims (objection pursuant to Art. 21 (1) GDPR).
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection pursuant to Art. 21 para. 2 GDPR).
You are of course entitled to these rights free of charge. To revoke your consent to the use of data, to request information or the correction, blocking or deletion or to exercise the other rights of data subjects, please contact:
Vintage Tours GmbH
Lena-Christ-Weg 13
87439 Kempten
Germany
Contact:
+49 170 5746502
datenschutz@vintage-tours.com
We would like to point out that you can most easily assert your data subject rights in connection with your social media use against the social media companies and that you can make further settings options there to protect your privacy with the social media companies.
20. Competent supervisory authority
You can contact the supervisory authority responsible for you for complaints within the meaning of Art. 77 GDPR using the following contact details
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Phone: +49 (0) 981 53 1300
Fax: +49 (0) 981 53 98 1300
e-mail: poststelle@lda.bayern.de
21. Newsletter cancellation
If you no longer wish to receive our newsletter or advertising emails, click on the link: "Unsubscribe newsletter", which is included at the end of all emails sent by us.
Note on the English translation of the privacy policy
The English version of this text serves only for information and is not part of this legal transaction. Therefore, in the event of any inconsistency between the German and the English version, only the German version shall apply.
Status: November 2024
English (UK) 
Deutsch 
Français 
Español 
Italiano 
Português