Privacy Policy

Information pursuant to our duty to inform

The protection of your personal data is particularly important to us. We therefore process your data exclusively on the basis of the statutory provisions (GDPR). In this privacy policy we inform you about the most important aspects of the data processing carried out on our website.

Contacting us

If you contact us via the form on the website or by email, the data you provide is stored by us in order to process your enquiry and in case of follow-up questions. We do not pass this data on to third parties without your consent. Data submitted through the website is transmitted in encrypted form (SSL). Emails sent with your own mail program are in most cases not encrypted. For that reason you should not send us sensitive data by email.

Data storage

We inform you that, in order to simplify the purchase process and for the subsequent performance of the contract, the operator of the online shop stores the IP address by means of cookies or comparable technologies, together with the buyer's name, address and payment details.

In addition, the following data is stored by us for the performance of the contract: name, email address, payment details. The data you provide is required for the performance of the contract or for taking pre-contractual measures. Without this data we cannot conclude the contract with you. Data is not passed on to third parties, with the exception of the transfer of payment details to the banks and payment service providers engaged by us for the purpose of collecting the purchase price, and to our tax adviser for the fulfilment of our tax obligations.

If the purchase process is cancelled, the data stored by us is deleted or is not stored at all. Where a contract is concluded, all data from the contractual relationship is stored until the expiry of the retention period under tax law (7 years).
Data on name, address, goods or services purchased and the date of purchase is additionally stored until the expiry of the product liability period (10 years). Data processing takes place on the basis of the statutory provisions of Art. 6 (1) (a) (consent) and/or (b) (necessary for the performance of the contract) GDPR.

Messages between guest and provider

Once a booking is confirmed, the guest and the provider can exchange messages about it through TourBookers. We store these messages with the booking so the two parties can communicate about carrying out the tour (Art. 6 (1) (b) GDPR). We notify the other party of new messages by email. Our staff can read the messages only to handle a support request, and every such access is logged. The messages are deleted automatically 12 months after the tour date.

Reviews

After a completed tour we invite you once by e-mail to review it. A review is voluntary. If you write one, we publish your first name, the country you gave when booking or in your profile, the month of the tour, the stars, your text and the language you wrote it in on the tour's page. The tour provider can reply publicly. We keep the review with your booking and show it for as long as the tour is offered, at the longest until you ask for it to be deleted. If your text is not written in English, we have it machine-translated into English; for this we send the text, without your name, to a translation service. The legal basis is our legitimate interest in showing genuine guest experiences (Art. 6 (1) (f) GDPR). We may hide a review, for example when it breaks the law or our terms; we record the reason internally. You can ask for your review to be deleted at any time at the address in the legal notice. You can object to the e-mail invitation at any time, at no cost other than the transmission costs at basic rates. If you report a review, we store your reason and, if you give it, your e-mail address in order to handle the report (Art. 6 (1) (f) GDPR).

Push notifications

If you turn on push notifications for a device in your account, we store the push address your browser creates for it, together with the keys that belong to it, the browser identifier (user agent) and the time of the last successful delivery. Through it we inform you about your bookings in addition to the email, for example about new requests, confirmations, reminders and messages. The notification is delivered in encrypted form through the push service of your browser's vendor (Google Firebase Cloud Messaging, Apple Push Notification Service, Mozilla Push Service or Microsoft Windows Push Notification Services). That service cannot read the content, but learns that and when a notification is sent to your device, and may be based outside the EU. The legal basis is your consent (Art. 6 (1) (a) GDPR). You can withdraw it at any time in your account or in your browser's settings; the push address is then deleted, as it is as soon as the push service reports it as invalid.

Cookies

Our website uses so-called cookies and comparable technologies (HTML5 local storage). These are small text files that are stored on your device by means of your browser. They do no harm.

We use cookies to make our service easier to use. Some cookies remain stored on your device until you delete them. They allow us to recognise your browser on your next visit. That way you stay signed in, for example, or your cart, not yet submitted, remains stored in your browser.

If you do not want this, you can set your browser so that it informs you when cookies are set and you allow them only in individual cases.

If cookies are disabled, the functionality of our website may be limited.

Web analytics

To understand how our website is used and to improve it, we use the web analytics service Matomo. We run Matomo ourselves on our own servers; the data collected is not passed on to third parties.

Matomo is loaded only once you have given your consent in the cookie banner (Art. 6 (1) (a) GDPR). Without your consent no analytics data is collected and no analytics cookies are set. If your browser sends a “Do Not Track” signal, Matomo collects nothing either.

Matomo records the pages you visit and their titles, the page you came from, the time of the visit, and your browser, operating system, screen resolution and language. For this it sets the cookies _pk_id (13 months) and _pk_ses (30 minutes).

Your IP address is shortened by its last two bytes before it is stored (for example 192.168.0.0) and is used only in this shortened form, for an approximate location.

The data of individual visits is deleted automatically after 13 months. What remains are aggregated statistics that allow no conclusions about individual visitors.

You can withdraw your consent at any time through the “Cookie settings” link at the bottom of every page; this deletes the Matomo cookies. The provider area of our website is analysed separately in Matomo, on the same terms and likewise only with your consent.

Newsletter

You have the option of subscribing to our newsletter via our website. For this we need your email address and your declaration that you agree to receive the newsletter.

As soon as you have subscribed to the newsletter, we send you a confirmation email with a link to confirm the subscription.

You can cancel your newsletter subscription at any time. Please send your cancellation to the following email address: privacy@tourbookers.com. We will then delete your data relating to the sending of the newsletter without delay.

Your rights

You are in principle entitled to the rights of access, rectification, erasure, restriction, data portability, withdrawal of consent and objection.

You can reach us at the following contact details:

tourbookers GmbH
Zielstattstr. 19
81379 Munich
Germany

info@tourbookers.com

You can reach our data protection officer at:
privacy@tourbookers.com