Data protection information according to Art. 13, 14 and 21 of the EU General Data Protection Regulation (EU-DSGVO)

Dear visitors to our Internet portal,

We are pleased about your visit to our website www.wessel.reisen. To ensure that you feel comfortable when visiting this site, we would like to inform you about the handling of your data. The following data protection regulations are intended to inform you about the handling of the collection, use and disclosure of personal data.

Der Schutz Ihrer Privatsphäre ist uns sehr wichtig. Daher haben wir unser Internet­ Angebot grundsätzlich so gestaltet, dass dessen Nutzung anonym erfolgen kann. Wir verwenden Informationen, die wir während Ihres Besuches  unserer  Webseiten erhalten und speichern, ausschließlich für interne Zwecke und zur Verbesserung der Gestaltung der Webseiten. Wir speichern die von Ihrem Webbrowser übermittelte IP­ Adresse für die Dauer von sieben Tagen, um Störungen oder Fehler erkennen, eingrenzen und beseitigen zu können {bspw. Attacken auf unsere Server). Nach Ablauf dieser Zeitspanne löschen bzw. anonymisieren wir die IP-Adresse. Wir verwenden die IP-Adresse ausschließlich streng zweckgebunden für o.g. Sicherheitszwecke.

1.     Wer ist für die Datenverarbeitung verantwortlich und an wen können Sie sich wenden?

Verantwortlicher für die Datenverarbeitung sind wir – Gesundheitsreisen Wessel GmbH, Ulzburger Str. 2, 22850 Norderstedt, E-Mail: info@wessel.reisen

2.     Welche Daten und welche Quellen nutzen wir?

Da wir ständig bestrebt sind, unsere Serviceleistungen für unsere Kunden in einem kontinuierlichen Prozess zu verbessern, z.B. durch Individualisierung, werden die o.g. allgemeinen Daten statistisch anonym ausgewertet. Sofern Sie Service-Leistungen in Anspruch nehmen, werden in der Regel nur solche Daten erhoben, die wir zur Erbringung der Leistungen benötigen. Soweit wir Sie um weitergehende Daten bitten, handelt es sich um freiwillige Informationen (Felder, die nicht als Pflichtfeld gekennzeichnet sind). Die Verarbeitung der persönlichen Daten erfolgt ausschließlich zur Erfüllung des nachgefragten Service und zur Wahrung berechtigter eigener Geschäftsinteressen.

Um Ihre Daten vor unerwünschten Zugriffen zu schützen, setzen wir auf unseren Seiten ein Verschlüsselungsverfahren ein. Ihre Angaben werden dann von Ihrem Rechner zu unserem Server und umgekehrt über das Internet mittels einer 128 Bit TLS-Verschlüsselung (Transport Layer Security) (Hinweis, wir empfehlen mindestens eine TLS 1.2-Verschlüsselung) übertragen. Sie erkennen dies daran, dass auf der Statusleiste Ihres Browsers das Schloss-Symbol geschlossen ist und die Adresszeile mit https:// beginnt. Wir verzichten auf eine Verschlüsselung, wenn sie lediglich allgemein verfügbare Informationen mit uns austauschen.

2.1 Nutzungsdaten/Logfiles

Wenn Sie unsere Webseiten besuchen, werden auf unserem Webserver temporär sogenannte Nutzungsdaten zu statistischen Zwecken als Protokoll gespeichert, um die Qualität unserer Webseiten zu verbessern. Dieser Datensatz besteht aus

  • der Seite, von der aus die Datei angefordert wurde,
  • dem Namen der Datei,
  • dem Datum und der Uhrzeit der Abfrage,
  • der übertragenen Datenmenge,
  • dem Zugriffsstatus (Datei übertragen, Datei nicht gefunden},
  • the description of the type of web browser used,
  • the IP address of the requesting computer, which is shortened in such a way that a personal reference can no longer be established

We use this information to enable you to access our website, to control and administer our systems and to improve the design of the websites. The stored data is anonymised in accordance with applicable legal requirements . The creation of personal user profiles is thus excluded. Data about individuals or their individual behaviour is not collected.

2.2 Permanent and session cookies

Cookies are small files that are stored on a visitor's hard drive. They allow information to be retained for a certain period of time and identify the visitor's computer. We use permanent cookies for better user guidance and individual performance presentation. We also use so-called session cookies, which are automatically deleted when you close your browser. You can set your browser to inform you about the placement of cookies. This makes the use of cookies transparent for you.

2.3 Google Analytics

We create pseudonymous usage profiles with the help of Google Analytics in order to design our website according to your needs. Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, as we have activated IP anonymisation on this website, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and only shortened there. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage.

You can object to the creation of the pseudonymous usage profiles at any time. There are several ways to do this:

  • One way to object to web analytics by Google Analytics is to set an opt-out cookie, which instructs Google not to store or use your data for web analytics purposes. Please note that with this solution, web analytics will only not take place as long as the opt-out cookie is stored by the browser. If you would like to set the opt-out cookie now, please click here
  • You can also prevent the storage of cookies used for profiling by setting your browser software accordingly.
  • Depending on the browser you use, you have the option of installing a browser plug-in that prevents tracking. To do so, please click here https://tools.google.com/dlpage/gaoptout?hl=de and install the browser plugin available there.

3. on what legal basis is your data used (purpose of data processing)?

The following information provides details of what we process your data for and for what purpose.

3.1 For the fulfilment of contractual obligations (Art. 6 para. 1 lit. b EU-DSGVO)

We process your data for the performance of our contracts with you, i.e. in particular for the performance and processing of the booked travel services. The purposes of data processing depend in detail on the specific travel services and the contractual documents (e.g. accommodation, transfers, rental cars, flights).

3.2 In the context of balancing interests (Art. 6 para. 1 lit. f EU-DSGVO)

Your data may be used by us or by third parties to protect legitimate interests. This is done for the following purposes:

  • Supporting our sales organisation with travel advice and support and sales within the framework of travel assistance
  • Further development of travel services and additional products
  • Advertising, market research and opinion polling
  • Assertion of legal claims and defence in legal disputes
  • Prevention and investigation of criminal offences
  • Ensuring IT security and availability of IT operations

Our interest in the respective processing results from the respective purposes and is otherwise of an economic nature (efficient fulfilment of tasks, sales, avoidance of legal risks). As far as the specific purpose allows, we process your data pseudonymously or anonymously.

3.3 Based on your consent (Art. 6 para. 1 lit. a EU-DSGVO)

If you have given us consent to process your personal data, this consent is the legal basis for the processing mentioned there. In addition, you may have consented to being contacted by e-mail, telephone or messenger service. You can revoke your consent at any time with effect for the future. This also applies to declarations of consent that you gave us before the EU GDPR came into force, i.e. before 25 May 2018. The revocation only applies to future processing, not to processing that has already taken place. Please contact us at our contact address.

 3.4 Due to legal requirements (Art. 6 para. 1 lit. c EU-DSGVO)

We are subject to various legal obligations and statutory requirements (e.g. German Civil Code (BGB), German Commercial Code (HGB), GoB, Passenger Data Act, EU Package Travel Directive, tax laws of the Federal Republic of Germany). The purposes of the processing include identity and age verification, fraud prevention, the fulfilment of control and reporting obligations under tax law, and the assessment and management of risks.

Who gets my data?

Your data will only be passed on in compliance with the EU-DSGVO and only insofar as a legal basis permits this. Within our sales organisation, only those offices will receive your data that need it to fulfil our contractual and legal obligations or to perform their respective tasks (e.g. sales, customer service, travel management, tour operators, hotels, rental cars or transfer companies). In addition, the following bodies may receive your data:

  • Order processors used by us (Art. 28 EU-DSGVO), in particular in the area of booking systems and IT services, logistics and printing services, who process your data for us in accordance with your instructions
  • Public bodies and institutions (tax authorities, embassies of the destination country) in the event of a legal or official obligation (retention obligations, VISA procurement, obtaining entry requirements) as well as
  • other bodies for which you have given us your consent to transfer data.

How long will my personal data be stored?

To the extent necessary, we process your personal data for the duration of our business relationship, which also includes the initiation and execution of a contract for the provision of a travel service. In addition, we are subject to various storage and documentation obligations, which result from the German Civil Code (BGB), the German Commercial Code (HGB), the German Fiscal Code (AO) and the EU Package Travel Directive, among others. The periods specified there for storage or documentation are two to a maximum of ten years. Finally, the storage period is also assessed according to the statutory limitation periods, which, for example, according to §§ 195 ff. of the German Civil Code (BGB) are usually three years. Your personal data will be stored on the basis of your consent until revoked.

6. will my data be transferred to a third country?

We only transfer your data to countries outside the European Union if this is necessary for the execution and processing of the travel services or is required by law or if you have given us your consent (e.g. long-distance travel).

Do I have certain rights when dealing with my data?

Subject to the respective legal requirements, you have the right to information (Art. 15 EU Data Protection Regulation, § 34 Federal Data Protection Act (BDSG) in its version valid from 25 May 2018), to correction (Art. 16 EU Data Protection Regulation), to deletion (Art. 17 EU Data Protection Regulation or § 35 BDSG), to restriction of processing (Art. 18 EU Data Protection Regulation) and to data portability (Art. 20 EU Data Protection Regulation). You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 EU-DSGVO or § 19 BDSG).

8. is there an obligation for me to provide my data?

Within the scope of our business relationship, you only have to provide the personal data that is required for the establishment, implementation and termination of a business relationship or which we are legally obliged to collect. Without this data, we will usually have to refuse the conclusion of the contract or the execution of the order or will no longer be able to execute an existing contract and may have to terminate it.

9. is there automated decision-making in individual cases?

For the establishment and implementation of the business relationship, we generally do not use automated decision-making pursuant to Art. 22 EU-DSGVO. Should we use these procedures in individual cases, you will be informed separately, insofar as this is required by law.

10. will my data be used for profiling in any way?

We process your data partly automatically with the aim of evaluating your potential interest in certain products, offers and services (so-called "profiling" according to Art. 4 No. 4 EU-DSGVO). The evaluation is carried out using statistical methods, taking into account the trips and services you have booked with us to date. We use the results of these analyses for a targeted and needs-based customer approach.

What rights do I have as a customer?

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(f) EU-DSGVO (data processing on the basis of a balance of interests). This also applies to profiling based on this provision within the meaning of Art. 4 No. 4 EU-DSGVO, which may take place, for example, for customer advice and support. If you object, we will no longer process your personal data. In addition, according to Art. 15 EU-DSGVO, you have a permanent right to withdraw your consent to data processing for further purposes, should you have given us consent of this form. The objection can in each case be made form-free to the contact address known to you.

Every data subject has the right to lodge a complaint with the supervisory authority if he or she is of the opinion that the processing of data concerning him or her violates the provisions of data protection law. The right of appeal can be made in particular to the supervisory authority in your federal state or at the location of the relevant violation. You can find a current list of the competent supervisory authorities at https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

12. contact form

If you send us enquiries via the contact form, the information you provide in the enquiry form, including the contact details you enter there, will be stored by us for the purpose of processing the enquiry and in case of follow-up enquiries.
processing the enquiry and in the event of follow-up questions. We do not pass on this data without your consent.

13. newsletter data

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data will be collected. We use this data exclusively for sending the requested information and do not pass it on to third parties.

You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time.

14. YouTube

Our website uses plugins from the YouTube site operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile.
You can prevent this by logging out of your YouTube account.

Further information on the handling of user data can be found in YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy

15 Right to information, deletion, blocking

You have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of data processing, as well as the right to correct, block or delete this data. For this purpose as well as for further questions on the subject of personal data, you can contact us at any time at the address given in the imprint.

16. objection to advertising mails

The use of contact data published within the scope of the imprint obligation to send advertising and information material that has not been expressly requested is hereby prohibited. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.