Privacy Policy - Umfulana.com

Privacy Policy

With the following notices, we would like to and must comply with the information requirements under the General Data Protection Regulation (GDPR). We try to make this as short, precise and understandable as possible.

If you have any further questions or suggestions, please do not hesitate to contact our data protection officer.

Who is responsible for data processing on this website?

Umfulana GmbH
Karlheinz-Stockhausen-Platz 7
51515 Kürten

Managing director authorized to represent: Tobias Garstka

Phone: +49 (0)2268 92298-0
Email: info@umfulana.com
Web: www.umfulana.com

Who is the contact person for privacy issues?

We have appointed an external data protection officer:

Five Consulting
Dipl.-Ing. Klaus Pampuch
Web: www.five.consulting
Email: umfulana@five.consulting

You can contact him directly at any time with any questions or suggestions regarding data protection.

What data is processed and for what purposes?

Calling up the website

The website is hosted by BERGNET GmbH in the EU. BERGNET stores so-called log files when the website is visited. These include the call (request), the IP address, browser type and language, and the date and time of the call.

The information is used to analyze and maintain the technical operation of the servers and the network, as well as to combat abuse, and is automatically deleted after 7 days. The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of legitimate interest in improving stability and functionality. A transfer or other use of the data does not take place.

Contact form

In the context of contacting us (e.g. via contact form or e-mail), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 (1) lit. f DSGVO. Your data will be deleted after final processing of your request, this is the case if it can be inferred from the circumstances that the matter concerned has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

Request for a trip

We offer an inquiry form on our website, through which you can request a trip from us. We have marked the data mandatorily required by you to respond to an inquiry as mandatory fields. Information on other data fields are voluntary.

We need this information to process your request, to address you correctly and to send you a reply. The data processing is carried out for the fulfillment of a contract or the initiation of a contract (Art. 6 para. 1 lit. b DSGVO).

Inquiries received via the form on our website are processed electronically by us in order to respond to your inquiry. In this context, other persons or departments and possibly third parties may also become aware of the content that you have sent.

Your data will be deleted as soon as the legal retention periods have expired. If it comes to a booking, this is usually 10 years.

Newsletter

You can also subscribe to an e-mail newsletter on our website. For this purpose, we process your e-mail address, title, and first and last name. This data is mandatory in order to send you the newsletter.

You can unsubscribe from the newsletter at any time. Alternatively, you will find a link to unsubscribe in every newsletter email.

In order to be able to analyze the popularity of our newsletter mailings and optimize them, we log when emails are opened and links are clicked. This usage analysis is based on a balance of interests. You can object to this processing by unsubscribing from the newsletter.

These processing operations are carried out exclusively when explicit consent is given in accordance with Art. 6 (1) lit. a DSGVO.

Direct advertising

We use your e-mail address, which we have received in the context of a travel booking, for the electronic sending of advertising for other trips similar to those you have already booked with us, unless you have objected to this use. The processing is based on Art. 6 (1) lit. f DSGVO from our overriding legitimate interest in direct advertising. You can object to this use of your e-mail address at any time by notifying us. The contact details for exercising the objection can be found in the imprint. You can also use the link provided for this purpose in the advertising e-mail.

Data processing when opening a "My Umfulana" customer account

Pursuant to Art. 6 (1) lit. b DSGVO, personal data is collected and processed if you provide it to us for the performance of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to the above address of the person responsible. We store and use the data provided by you for the purpose of processing the contract. After complete processing of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial law retention periods and deleted after the expiry of these periods, unless you have expressly consented to further use of your data or a legally permitted further use of data was reserved by our side, about which we inform you accordingly below.

Data processing when using the Mein-Umfulana app

The My Umfulana app uses plugins provided by Mapbox (https://www.mapbox.com/). When you visit one of our pages equipped with a Mapbox plugin, a connection to the Mapbox servers is established. The Mapbox server is thereby informed which pages you have visited. For more information on the handling of user data, please refer to Mapbox's privacy policy.

The legal basis for the processing of data is Art. 6 para. 1 lit. f DSGVO. Legitimate interest is provision of map material for the display of waypoints (hotels, carpool stations, sights ) of the respective trip.

Data processing for order processing in the online shop

The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary to deliver the goods.

Payment processing is carried out via the payment service provider Stripe Payments Europe Ltd, Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland, to whom we pass on the information you provided during the ordering process, along with information about your order. Your data will only be passed on for the purpose of processing payments with the payment service provider Stripe Payments Europe Ltd. You can find more information about Stripe's data protection at the URL https://stripe.com/de/legal

Cookies

We use cookies on our site. These are small files that are automatically created by your browser and stored on your terminal device (laptop, tablet, smartphone or similar) when you visit our site. Cookies do not cause any damage to your terminal device, do not contain viruses, Trojans or other malware.

In the cookie, information is stored that arises in each case in connection with the specific end device used. However, this does not mean that we thereby obtain direct knowledge of your identity. The following data is stored and transmitted in the cookies:

  • PHP Session ID (PHPSESSID)
  • Cookie Consent (cookie-consent)
  • Login token for My Umfulana (MY_AUTH, MY_AUTH_2)
  • Show more/less trips (umlaMehrButton_*)
  • Modal for enjoyment boxes (modalGenussboxen)

The use of cookies serves on the one hand to make the use of our offer more pleasant for you. So we use so-called session cookies to recognize that you have already visited individual pages of our website.

In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your terminal device for a certain specified period of time. If you visit our site again to use our services, it is automatically recognized that you have already been with us and what entries and settings they have made, so that they do not have to be entered again.

In this way, the following data can be transmitted:

  • Cookie-Consent (cookie-consent)
  • Show more/less trips (umlaMehrButton_*)
  • Modal for enjoyment boxes (modalGenussboxen)

On the other hand, we use cookies to statistically record the use of our website and evaluate it for the purpose of optimizing our offer for you. These cookies allow us to automatically recognize that you have already been with us when you visit our site again. In this way, the following data can be transmitted:

  • Login token for My Umfulana
  • Show more/less trips

These cookies are automatically deleted after a defined time in each case.

The data processed by cookies are necessary for the aforementioned purposes to protect our legitimate interests and those of third parties in accordance with Art. 6 (1) lit. f DSGVO. If you have given us consent, the legal basis is Art. 6 para. 1 lit. a DSGVO.

The user data collected by means of cookies are pseudonymized by technical precautions. Therefore, an assignment of the data to the calling user is no longer possible. The data is not stored together with other personal data of the users.

When calling up our website, users are informed by an info banner about the use of cookies for analysis purposes and referred to this data protection declaration. In this context, there is also an indication of how the storage of cookies can be prevented in the browser settings.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a notice always appears before a new cookie is created. However, completely disabling cookies may prevent you from using all of the features of our website.

Web analytics

We have integrated the Matomo component on this website. Matomo is an open source software tool for web analysis. Web analysis is the collection, collation and analysis of data about the behavior of visitors to websites. Among other things, a web analysis tool collects data about the website from which a data subject came to a website (so-called referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. A web analysis is predominantly used for the optimization of a website and for the cost-benefit analysis of Internet advertising.

The software is operated on the server of the controller, and the log files, which are sensitive under data protection law, are stored exclusively on this server.

The purpose of the Matomo component is to analyze the flow of visitors to our website. We use the data and information obtained, among other things, to evaluate the use of this website in order to compile online reports that show the activities on our Internet pages.

Furthermore, you have the option to object to and prevent the collection of data generated by Matomo related to a use of this website. To do this, you must set an opt-out cookie. If your IT system is deleted, formatted or reinstalled at a later time, the data subject must set an opt-out cookie again. With the setting of the opt-out cookie, however, there is the possibility that our Internet pages are no longer fully usable for you.

The use of Matomo is carried out on the basis of Art. 6 para. 1 lit. f DSGVO. With the tracking measures used, we want to ensure a needs-oriented design and continuous optimization of our website. These interests are to be regarded as legitimate within the meaning of the aforementioned provision.

Further information and the applicable privacy policy of Matomo can be found at https://matomo.org/privacy/.

 

Google Adwords Conversion Tracking

In order to statistically record the use of our website and to evaluate it for the purpose of optimizing our website for you, we further use Google Conversion Tracking. In doing so, Google Adwords sets a cookie (see number 4) on your computer, provided that you have reached our website via a Google ad.

These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of the Adwords customer's website and the cookie has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to that page.

Each Adwords customer receives a different cookie. Cookies can therefore not be tracked across Adwords customers' websites. The information obtained using the conversion cookie is used to create conversion statistics for Adwords customers who have opted in to conversion tracking. The Adwords customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive information that personally identifies users.

If you do not wish to participate in the tracking process, you can also refuse the setting of a cookie required for this - for example, via browser settings that generally disable the automatic setting of cookies. You can also disable cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com". Google's conversion tracking privacy policy can be found here (https://services.google.com/sitestats/de.html).

Google reCAPTCHA

On this website, we also use the reCAPTCHA feature of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). This function is primarily used to distinguish whether an input is made by a natural person or is abused by machine and automated processing. The service also includes the sending of the IP address and possibly other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 (1) lit. f DSGVO on the basis of our legitimate interest in determining the individual willfulness of actions on the Internet and the prevention of abuse and spam.

Further information on Google reCAPTCHA as well as Google's privacy policy can be found at: https://policies.google.com/privacy

Matomo Heatmap

This website uses Heatmap & Session Recording, a web analytics tool. This is used to anonymously record visitor interactions with the website. This creates a log of, for example, mouse clicks and use of individual page elements (no keyboard activity) with the aim of identifying optimization opportunities for this website. In addition, information on the operating system and browser, as well as the resolution and type of device, references to domains, the geographical location, pages visited and the date and time at which the website was accessed are recorded for statistical purposes. This information is not personal and will not be disclosed to third parties. An evaluation of the data is carried out only on a statistical basis.

If you do not want any recording, you can set it here:

 

Google Maps

On this website we use the offer of Google Maps. This allows us to show you interactive maps directly in the website and enables you to use the map function conveniently.

By visiting the website, Google receives the information that you have called up the corresponding sub-page of our website. This occurs regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.

These processing operations are carried out exclusively upon the granting of explicit consent pursuant to Article 6 (1) (a) DSGVO.

For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the provider's privacy policy. There you will also find further information on your rights in this regard and setting options for protecting your privacy: https://policies.google.com/privacy. Google also processes your personal data in the United States and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Google Fonts

This site uses so-called WebFonts, which are provided by Google, for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display text and fonts correctly.

By visiting the website, Google receives the information that you have called up the corresponding sub-page of our website. This occurs regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.

For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the provider's privacy policy. There you will also find further information on your rights in this regard and setting options for protecting your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the U.S. and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

YouTube (videos)

We have integrated components from YouTube on this website. YouTube is an Internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment on them, also free of charge. YouTube allows the publication of all types of videos, which is why complete film and television shows, but also music videos, trailers or videos made by users themselves are available via the Internet portal.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. The YouTube, LLC is a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Each time you call up one of the individual pages of this website operated by us on which a YouTube component (YouTube video) has been integrated, the Internet browser on your IT system is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information about YouTube can be found at https://www.youtube.com/yt/about/de/. Within the framework of this technical procedure, YouTube and Google receive knowledge of which specific sub-page of our website is visited by you.

If the data subject is logged in to YouTube at the same time, YouTube recognizes which specific sub-page of our website you are visiting when you call up a sub-page that contains a YouTube video. This information is collected by YouTube and Google and assigned to your YouTube account.

YouTube and Google always receive information via the YouTube component that you have visited our website if you are simultaneously logged into YouTube at the time of calling up our website; this takes place regardless of whether you click on a YouTube video or not. If such a transmission of this information to YouTube and Google is not desired by you, you can prevent the transmission by logging out of your YouTube account before calling up our website.

These processing operations are carried out exclusively when explicit consent is given in accordance with Article 6 (1) (a) DSGVO.

The privacy policy published by YouTube, which can be accessed at https://www.google.de/intl/de/policies/privacy/, provides information on the collection, processing and use of personal data by YouTube and Google.

Who are the recipients of data?

There is no transfer of your personal data to third parties for purposes other than those listed below.

We will only disclose your personal information to third parties if:

  • you have given your express consent to do so in accordance with Art. 6 para. 1 lit. a DSGVO,
  • the disclosure according to Art. 6 para. 1 lit. f DSGVO is necessary for the assertion, exercise or defense of legal claims and there is no reason to believe that you have an overriding legitimate interest in not disclosing your data,
  • in the event that a legal obligation exists for the disclosure pursuant to Art. 6 (1) lit. c DSGVO, as well as
  • this is legally permissible and required under Art. 6 para 1 lit. b DSGVO for the processing of contractual relationships with you.

What rights do you have?

You have the right:

  • to request information about your personal data processed by us in accordance with Art. 15 DSGVO. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if it was not collected by us, as well as the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details;
  • in accordance with Art. 16 DSGVO to immediately request the correction of inaccurate or incomplete your personal data stored by us;
  • pursuant to Art. 17 DSGVO to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
  • in accordance with Art. 18 DSGVO to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer need the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 DSGVO;
  • in accordance with Art. 20 DSGVO to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller;
  • in accordance with Art. 7 (3) DSGVO to revoke your consent once given to us at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future and according to Art. 77 DSGVO to complain to a supervisory authority.

Right to object

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) p. 1 lit. f DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DSGVO, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.

If you wish to exercise your right of revocation or objection, an e-mail to datenschutz@umfulana.de suffices.

Timeliness and amendment of this privacy policy

This privacy policy is currently valid and is as of 05/05/2021

Due to the further development of our website and offers on it or due to changed legal or regulatory requirements, it may become necessary to change this privacy policy. The current privacy policy can be accessed by you at any time on the website at www.umfulana.com/privacy-policy