Data protection information
for business contact
Data protection information for business contact
The English version is only for better understanding. The German version is the legally valid document.
The respective responsible company of the DERTOUR Group (hereinafter referred to as “DER” or “we”) processes your data in order to contact you. This information therefore applies in particular to personal data provided to DER in the course of its business or other activities by post, telephone, fax, e-mail or online. With this data protection information, we would like to inform you about the scope and purpose of the processing as well as your rights as a data subject.
Persons who transmit personal data of others to us must ensure that the data subjects agree to this and that this data may be transmitted to us as well as be informed about how personal data may be processed by us and what rights data subjects have.
(Status: March 2024).
1. Purposes and legal basis of the processing of personal data
1.1 Establishing contact within the scope of a business relationship
For the initiation or implementation of a business relationship, we will process in particular your contact data (name, address, telephone number and e-mail address), communication data (e.g. correspondence by e-mail), if applicable location data (IP address).
The legal basis for this processing of your personal data is Art. 6 para. 1 lit. a GDPR (your consent) and lit. b GDPR (pre-contractual measures, performance of contract) if we receive the data directly from you or we enter into a direct contractual relationship with you.
If you are not an existing or potential business partner yourself, we have usually received your contact details from our business partner who has named you as a contact person. In this case, the processing of your data is based on Art. 6 para. 1 lit. f GDPR (balancing of interests, based on our legitimate interest in contacting existing or potential business partners).
The provision of personal data about you for the purpose of contacting you in the context of a business relationship is on a voluntary basis. Insofar as your contact data is absolutely necessary for the initiation and fulfilment of a contract, you and must disclose your contact data, as otherwise the contract with you cannot be concluded.
1.2 Establishing contact within the framework of our public relations work
We also maintain databases with contact details of political, media and press representatives, among others, in order to be able to contact them on relevant issues, events, etc. as part of our public relations work.
The processing of your personal data is based on your consent (Article 6 paragraph 1 lit. a GDPR), which you can give us in personal contact (e.g. by handing over your business card or via online form). For your right to withdraw consent, please see point 5.8.
We also collect contact details from public sources and enter them in our databases. The legal basis for the data processing described is Art. 6 para. 1 lit. f GDPR. (Weighing of interests, based on our legitimate interest in contacting political, media and press representatives, among others, as part of our public relations work).
2. Recipients of personal data
As a general rule, your data collected by us will not be disclosed to unauthorised persons.
However, in some cases we use service providers to process personal data, including for sending emails, chats and video telephony. Your data (contact data, communication data, location data (IP address) is stored in a secure data centre and databases.
All service providers have been carefully selected and are subject to data protection agreements with. The service providers are only given access to your data to the extent and for the period required to provide the services or to the extent that you have consented to the data processing and use.
We also use service providers located in third countries outside the European Union to process your data. Countries outside the European Union handle the protection of personal data differently than countries within the European Union. There is currently no decision by the EU Commission that these third countries generally offer an adequate level of protection. We have therefore taken special measures to ensure that your data is processed in the third countries as securely as within the European Union. With service providers in third countries, we conclude the data protection contract (standard contractual clauses) provided by the Commission of the European Union for the processing of personal data in third countries or implement other permissible guarantees. This provides appropriate safeguards for the protection of your data with service providers in the third country. You can request a copy of these guarantees using the contact details above.
3. Storage period; deletion periods
We store the data processed by you for as long as it is required to achieve the purpose and a legal basis exists. When this ceases to apply, your data will generally be deleted within 1 month. In addition, your data will be stored/not deleted for as long as contractual or statutory retention periods exist for them.
4. Automated decision-making; profiling
We do not use your personal data for automated decision-making or profiling.
5. Your data subject rights
Insofar as DER processes your personal data, you as the data subject are entitled to the following data subject rights in particular, subject to the requirements of data protection law.
5.1 Information
You can request information about your personal data processed by us (Art. 15 GDPR).
5.2 Correction
If your information is not (or no longer) accurate, you can request that your data be corrected. If your data is incomplete, you can request that it be completed (Art. 16 GDPR).
5.3 Deletion
You have the right to request the deletion of your data. Please note that a right to erasure depends on the existence of a legitimate purpose. In addition, there must be no regulations that oblige us to retain your data (Art. 17 GDPR).
5.4 Restriction of processing
You have the right to request the restriction of the processing of your data. Please note that a claim to restriction of processing depends on the existence of a legitimate purpose (Art. 18 GDPR).
5.5 Objection
If data is collected on the basis of Art. 6(1)(f) GDPR (data processing to protect overriding legitimate interests), you have the right to object to the processing of your data on grounds relating to your particular situation. In the event of an objection, we will no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the assertion, exercise or defence of legal claims (Art. 21 GDPR).
5.6 Right of appeal
You have the right to lodge a complaint with the competent data protection supervisory authority if you do not agree with the processing of your data (Art. 77 GDPR).
5.7 Data portability
You have the right to receive personal data that you have provided to us in an electronic format (Art. 20 GDPR).
5.8 Withdrawal of your consent
You have the right to revoke consent (Art. 6(1)(a) GDPR) to the processing of your data which you have given to us at any time. This also applies to the revocation of declarations of consent that you gave to us before the GDPR came into force, i.e. before 25.05.2018.
The easiest way to revoke consent you have given is to send an email to the contact details below. The revocation of consent does not affect the lawfulness of the processing of your data carried out until the revocation.
6. Contact details of the data protection officer
Data protection officer of DERTOUR Group
Emil-von-Behring-Straße 6
60424 Frankfurt am Main
E-Mail: datenschutz@dertouristik.com
7. Responsible companies of the DERTOUR Group
In the following, the companies are listed as responsible for data protection. The data processing controller refers to the legal entity where the processing takes place.
Amtliches Allgäuer Reisebüro, Gesellschaft mit beschränkter Haftung, Kaiser-Max-Straße 20, 87600 Kaufbeuren
clevertours.com GmbH, Humboldtstraße 140 – 144, 51149 Köln
DER Deutsches Reisebüro GmbH & Co. OHG, Emil-von-Behring-Str. 6 60439 Frankfurt
DER Reisebüro Beteiligungs GmbH, Humboldtstraße 140 – 144, 51149 Köln
DER Reisebüro Göbel GmbH, Roßmarkt 4, 97421 Schweinfurt
DER Reisebüro OTTO GmbH, Ludwigstraße 79, 95028 Hof
DER Reisebüro Service GmbH, Humboldtstraße 140-144, 51149 Köln
DER Reisecenter TUI GmbH, Enderstraße 59, Seidnitz-Center Haus-D, 01277 Dresden
DERTOUR Central Europe GmbH, Humboldtstraße 140-144, 51149 Köln
DERTOUR Deutschland GmbH, Humboldtstraße 140-144, 51149 Köln
DERTOUR DMC GmbH, Humboldtstraße 140-144, 51149 Köln
DERTOUR Group GmbH, Humboldtstraße 140-144, 51149 Köln
DERTOUR Online GmbH, Emil-von-Behring-Str. 6 60439 Frankfurt
DER Touristik Partner-Service Verwaltungs GmbH, Humboldtstraße 140-144, 51149 Köln
Topfit GmbH, Wernerwerkstraße 4, 93049 Regensburg
GO!Reisen GmbH, Konsul-Smidt-Str. 8 s, 28217 Bremen
Pro Tours GmbH, Humboldtstraße 140-144, 51149 Köln
Reisebüro Rominger actionade GmbH, Alte Poststraße 8, 70173 Stuttgart
Reisebüro Rominger Bodenseereisebüro GmbH, Alte Poststraße 8, 70173 Stuttgart
Reisebüro ROMINGER SÜDLAND GmbH, Karpfengasse 11, 88400 Biberach an der Riß
Schwarzwald Reisebüro Freiburg, Gesellschaft mit beschränkter Haftung, Merianstraße 8, 79104 Freiburg im Breisgau
TourContact Reisebüro Cooperation Verwaltung GmbH, Charlottenstraße 61, 51149 Köln
DER Reisebüro Südwest GmbH, Alte Poststraße 8, 70173 Stuttgart
Württ. Reisebüro Otto Schmid GmbH & Co. KG., Glöcklerstraße 1-3, 89073 Ulm
DERTOUR Hotels & Resorts GmbH, Humboldtstraße 140-144, 51149 Köln
DERTOUR Immobilien GmbH, Humboldtstraße 140-144, 51149 Köln
DER Touristik Foundation e.V., Emil-von-Behring-Str. 6 60439 Frankfurt
Reisewelt GmbH, Humboldtstraße 140-144, 51149 Köln
DERPART Reisevertrieb GmbH Emil-von.-Behring-Str. 6 60439 Frankfurt
DERPART Reisebüro Service GmbH, Emil-von.-Behring-Str. 6 60439 Frankfurt
Reisebüro Rade GmbH, Hauptstrasse 46 77652 Offenburg