Legal

Privacy Policy

Back to homepage

This Privacy Policy informs you about the nature, scope and purpose of the processing of personal data (hereinafter referred to as "data") in connection with the provision of our services, our online offering and the associated websites, functions and content, as well as our external online presences, such as our social media profiles (hereinafter collectively referred to as the "online offering"). With regard to the terminology used, such as "processing" or "controller", we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).

Controller

Wellbeing.Reisen by Exclusive Cruising
Dr. Holger Wirtl
Poschingerstr. 14
81679 Munich, Germany

Types of Data Processed

  • Master data (e.g. personal master data, names or addresses).
  • Contact data (e.g. email, telephone numbers).
  • Content data (e.g. text entries, photographs, videos).
  • Usage data (e.g. websites visited, interest in content, access times).
  • Meta/communication data (e.g. device information, IP addresses).

Categories of Data Subjects

Visitors and users of the online offering (hereinafter we also refer to the data subjects collectively as "users").

Purpose of Processing

  • Provision of the online offering, its functions and content.
  • Responding to contact enquiries and communicating with users.
  • Security measures.

Definitions

"Personal data" means any information relating to an identified or identifiable natural person.

"Processing" means any operation or set of operations which is performed on personal data, whether or not by automated means.

"Pseudonymisation" means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information.

"Profiling" means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person.

"Controller" means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

"Processor" means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Applicable Legal Bases

In accordance with Article 13 GDPR, we inform you of the legal bases for our data processing. Unless stated otherwise in this Privacy Policy, the following applies:

  • The legal basis for obtaining consent is Art. 6(1)(a) and Art. 7 GDPR;
  • The legal basis for processing to fulfil our services is Art. 6(1)(b) GDPR;
  • The legal basis for processing to fulfil our legal obligations is Art. 6(1)(c) GDPR;
  • The legal basis for processing to protect our legitimate interests is Art. 6(1)(f) GDPR.

Security Measures

In accordance with legal requirements, we implement appropriate technical and organisational measures to ensure a level of protection appropriate to the risk. These measures include in particular ensuring the confidentiality, integrity and availability of data.

Collaboration with Processors and Third Parties

Where we disclose data to other persons and companies (processors or third parties) within the scope of our processing, or grant them access to data, this is done only on the basis of a legal permission, user consent, a legal obligation or on the basis of our legitimate interests.

Transfers to Third Countries

Where we process data in a third country, this is done only to fulfil our contractual obligations, on the basis of your consent, a legal obligation or on the basis of our legitimate interests.

Rights of Data Subjects

Right of access: You have the right to request confirmation as to whether data concerning you is being processed and to obtain information about such data.

Right to rectification: You have the right to request the completion or correction of data concerning you.

Right to erasure and restriction of processing: You have the right to request that data concerning you be erased without undue delay.

Right to data portability: You have the right to receive data concerning you in a structured, commonly used and machine-readable format.

Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with the competent supervisory authority.

Right of Withdrawal

You have the right to withdraw any consent given with effect for the future.

Right to Object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.

Cookies and Right to Object to Direct Marketing

"Cookies" are small files stored on users' computers. We may use temporary and permanent cookies and inform you of this within our Privacy Policy. If users do not wish cookies to be stored on their computers, they are asked to disable the relevant option in their browser system settings.

Deletion of Data

The data processed by us is deleted or its processing restricted in accordance with legal requirements. Unless expressly stated otherwise, data stored by us is deleted once it is no longer required for its intended purpose.

Changes and Updates to the Privacy Policy

We ask you to regularly inform yourself about the content of our Privacy Policy. We update the Privacy Policy as soon as changes to the data processing we carry out make this necessary.

Contractual Services

We process the data of our contractual partners and interested parties in accordance with Art. 6(1)(b) GDPR in order to provide them with our contractual or pre-contractual services. The data processed includes master data, contact data and contractual data of our contractual partners.

Contact

When contacting us (e.g. via contact form, email, telephone or social media), the user's details are processed for the purpose of handling the contact enquiry pursuant to Art. 6(1)(b) GDPR. We delete enquiries once they are no longer required. We review the necessity every two years.

Communication via WhatsApp Messenger

We use WhatsApp Messenger for communication purposes. You are not required to use WhatsApp and may contact us through alternative means, such as by telephone or email.

WhatsApp (WhatsApp Inc., 1601 Willow Road, Menlo Park, California 94025, USA) is a US-based service. WhatsApp commits to complying with European data protection law and ensures that communication content is end-to-end encrypted.

We note that WhatsApp may process metadata (when and with whom communication took place, technical device information). Further information: https://www.whatsapp.com/legal.

Hosting and Email Delivery

The hosting services we use serve to provide our online offering. In this context, we process master, contact, content, contractual, usage and communication data on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR.

Google Fonts

We embed fonts ("Google Fonts") from the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Privacy policy: https://www.google.com/policies/privacy/.

Social Media Presences

We maintain online presences on Facebook, Instagram and LinkedIn in order to communicate with customers and interested parties.

Integration of Third-Party Services and Content

Within our online offering, we use content or service offerings from third-party providers on the basis of our legitimate interests in order to integrate their content and services. This requires the third-party providers to be aware of users' IP addresses.

Created with Datenschutz-Generator.de by RA Dr. Thomas Schwenke