Privacy Policy

1. Data Protection at a Glance

General Information
The following information provides a simple overview of what happens to your personal data when you visit our website.
Personal data means any data by which you can be personally identified.
Detailed information on the subject of data protection can be found in the privacy policy set out below.
Data Collection on This Website
Data processing on this website is carried out by the website operator.

Controller:

Holidays & more…
Tamara Tsinas
Hermann-Löns-Straße 46
51145 Cologne
Germany
Phone: +49 163 2508660
Email: info@holidays-and-more.de

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

How Do We Collect Your Data?

On the one hand, your data is collected when you provide it to us. This may, for example, include data that you enter into a contact form or send to us by email.
Other data is collected automatically by our IT systems when you visit the website. These are primarily technical data (e.g. internet browser, operating system, or time of page access).
This data is collected automatically as soon as you enter this website.

What Do We Use Your Data For?

Some of the data is collected to ensure that the website is provided without errors.
Other data may be used to process travel inquiries, bookings, or to communicate with you.
What Rights Do You Have Regarding Your Data?
You have the right at any time to:

obtain information about your stored personal data
request the correction of inaccurate data
request the deletion of your data
request restriction of processing
object to processing
request data portability

You also have the right to lodge a complaint with a data protection supervisory authority.
The competent supervisory authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.

2. General Information and Mandatory Information

Data Protection
The operator of these pages takes the protection of your personal data very seriously.
We treat your personal data confidentially and in accordance with the statutory data protection regulations (GDPR) and this privacy policy.
When you use this website, various personal data is collected. This privacy policy explains which data we collect and what we use it for.

SSL or TLS Encryption
For security reasons, this site uses SSL or TLS encryption.
You can recognize an encrypted connection by the fact that the browser’s address line changes from http:// to https:// and by the lock symbol in your browser line.

Withdrawal of Your Consent to Data Processing
Many data processing operations are only possible with your consent.
You may withdraw any consent you have already given at any time. An informal notification by email is sufficient.

Right to Object Pursuant to Art. 21 GDPR
If data processing is based on Art. 6(1)(f) GDPR, you have the right at any time to object to the processing of your personal data.

3. Hosting

This website is hosted by the following provider:
STRATO AG
Otto-Ostrowski-Straße 7
10249 Berlin
Germany

When you visit our website, STRATO collects various log files, including your IP addresses.
Use is based on Art. 6(1)(f) GDPR. We have a legitimate interest in ensuring that our website is displayed as reliably as possible.
Further information can be found in STRATO’s privacy policy:
https://www.strato.de/datenschutz/

4. Data Collection on This Website

Cookies
Our website uses cookies. Cookies are small text files that are stored on your device.
Some cookies are technically necessary in order to display the website correctly. Other cookies may be used to analyse or improve our website. Non-essential cookies are only stored with your consent. You may change your cookie settings at any time via the cookie banner.

Server Log Files
The provider of the website automatically collects and stores information in so-called server log files. These are:

browser type and browser version
operating system used
referrer URL
hostname of the accessing computer
time of the server request
IP address

This data is collected on the basis of Art. 6(1)(f) GDPR.

Contact Form / Travel Inquiries
If you contact us via contact form or email, your details, including the contact data you provide, will be stored by us.
This is done for the purpose of processing your inquiry or preparing a possible travel booking.
Legal basis:
Art. 6(1)(b) GDPR
(contract or pre-contractual measures)
Your data will be deleted as soon as it is no longer required for processing and no statutory retention obligations apply.

5. Analytics Tools

Google Analytics
This website may use Google Analytics.
Provider:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google Analytics uses cookies that enable an analysis of website usage. Use takes place exclusively with your consent in accordance with Art. 6(1)(a) GDPR. The IP address is anonymised.
Data may be transferred to the USA. Google is certified under the EU-US Data Privacy Framework.
Further information:
https://policies.google.com/privacy

6. Plugins and Tools

Bing Maps
The use of Bing Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places indicated on our website.

Provider:
Microsoft Corporation
One Microsoft Way
Redmond, WA 98052-6399
USA

To use the functions of Bing Maps, it is necessary to store your IP address and transmit it to Microsoft servers. This information is generally transferred to servers in the USA and stored there.
Legal basis: Art. 6(1)(a) GDPR (consent)
Bing Maps is therefore only integrated after appropriate consent has been given via the cookie or consent management tool. Microsoft is certified under the EU-US Data Privacy Framework, which ensures an adequate level of data protection.
Further information on the handling of user data can be found in Microsoft’s privacy policy:
https://privacy.microsoft.com/de-de/privacystatement

Google reCAPTCHA
We use Google reCAPTCHA for protection against spam.

Provider:
Google Ireland Limited
Dublin
Ireland

reCAPTCHA analyses the behaviour of the website visitor in order to determine whether an entry is made by a human.
Legal basis: Art. 6(1)(f) GDPR
(legitimate interest in protection against spam and misuse)
Further information:
https://policies.google.com/privacy

Google Reviews
Our website may include content from Google Reviews.

Provider:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

When you access a page on which Google Reviews are embedded, a connection to Google’s servers may be established. In the process, personal data, in particular your IP address, may be transmitted to Google.
If you are logged into your Google account, Google may associate your visit to our website with your user account.
The display of reviews is in the interest of presenting customer opinions transparently and improving our online offering.
Legal basis for processing: Art. 6(1)(a) GDPR (consent)
The integration therefore only takes place after your prior consent via our cookie or consent management tool.
Data may be transferred to the USA. Google is certified under the EU-US Data Privacy Framework.
Further information on the handling of user data can be found in Google’s privacy policy:
https://policies.google.com/privacy