Learn how we protect your data while you enjoy the best travel content on FinallyHolidays.

 

Privancy Policy

Personal data (hereinafter mostly referred to as “data”) will only be processed by us as necessary and for the purpose of providing a functional and user-friendly website, including its contents and the services offered there.

According to Article 4, No. 1 of Regulation (EU) 2016/679, the General Data Protection Regulation (hereinafter referred to as “GDPR”), “processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

With the following privacy policy, we inform you particularly about the type, scope, purpose, duration, and legal basis of the processing of personal data, to the extent that we either alone or jointly with others decide on the purposes and means of the processing. Furthermore, we inform you about the third-party components we use for optimization purposes as well as to increase the quality of use, insofar as third parties process data under their own responsibility.

Our privacy policy is structured as follows:
I. Information about us as controllers
II. Rights of users and data subjects
III. Information on data processing

**I. Information about us as controllers**

Responsible provider of this website in terms of data protection law is:

Finallyholidays.com
Michael Brinkmann
Harthauser Strasse 8
81545 Munich

Phone: 01778882228
Fax: [Fax number]
Email: info@finallyholidays.com

The data protection officer at the provider is:
[DSB – First Name Last Name]
Phone: [DSB – Phone Number]
Fax: [DSB – Fax Number]
Email: [DSB – Email]
[Additional information to be added if an external data protection officer is appointed]
[DSB-Extern – Street House Number]
[DSB-Extern – Postal Code City]

**II. Rights of users and data subjects**

Regarding the data processing described in more detail below, users and data subjects have the right:
– To confirmation as to whether data concerning them is being processed, to information about the processed data, to further information about the data processing and to copies of the data (see also Article 15 GDPR);
– To the correction or completion of incorrect or incomplete data (see also Article 16 GDPR);
– To the immediate deletion of data concerning them (see also Article 17 GDPR) or, alternatively, if further processing is necessary according to Article 17 (3) GDPR, to restriction of processing in accordance with Article 18 GDPR;
– To receive the data concerning them and provided by them and to transmit this data to other providers/controllers (see also Article 20 GDPR);
– To lodge a complaint with the supervisory authority if they consider that the data concerning them is being processed by the provider in breach of data protection regulations (see also Article 77 GDPR).

Furthermore, the provider is obliged to inform all recipients to whom data has been disclosed by the provider about any correction or deletion of data or restriction of processing in accordance with Articles 16, 17 (1), 18 GDPR. However, this obligation does not exist if this notification is impossible or involves a disproportionate effort. Notwithstanding this, the user has a right to information about these recipients.

Users and data subjects also have the right to object to the future processing of data concerning them, provided that the data is processed by the provider in accordance with Article 6 (1) (f) GDPR (see also Article 21 GDPR). In particular, an objection to data processing for the purpose of direct advertising is permissible.

**III. Information on data processing**

Your data processed when using our website will be deleted or blocked as soon as the purpose of the storage no longer applies, the deletion of the data does not conflict with statutory retention obligations, and no other information on individual processing procedures is provided below.

**Cookie Manager**

The provider uses a cookie manager to obtain consent for the use of technically unnecessary cookies on the website.

When the website is accessed, a cookie with the settings information is placed on the user’s device, so that the query regarding consent does not need to be made again on a subsequent visit.

The cookie is necessary to obtain legally compliant user consent.

The installation of cookies can be prevented or terminated by the user through their browser settings.

**Cookies**

**a) Session Cookies/Session Cookies**

We use cookies with our website. Cookies are small text files or other storage technologies that are placed and stored on your device by your Internet browser. Through these cookies, certain information from you, such as your browser or location data or your IP address, is processed on an individual basis.

This processing makes our website more user-friendly, effective, and secure, as the processing allows, for example, the reproduction of our website in different languages or the use of a shopping cart function.

The legal basis for this processing is Article 6 (1) (b) GDPR, provided that these cookies are used to process data for contract initiation or contract execution.

If the processing does not serve to initiate or execute a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Article 6 (1) (f) GDPR.

When you close your Internet browser, these session cookies are deleted.

**b) Third-party cookies**

Our website may also use cookies from partner companies with whom we collaborate for the purpose of advertising, analysis, or the functionalities of our website.

Please refer to the following information for details, particularly on the purposes and legal bases of processing such third-party cookies.

**c) Elimination option**

You can prevent or restrict the installation of cookies through your Internet browser settings. Also, cookies already stored can be deleted at any time. The steps and measures required for this depend on your specific Internet browser. If you have any questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support. For so-called Flash cookies, the processing cannot be prevented via the browser settings. Instead, you need to change the settings of your Flash player. The steps and measures required for this also depend on your specific Flash player. If you have any questions, please use the help function or documentation of your Flash player or contact its manufacturer or user support.

If you prevent or restrict the installation of cookies, this may result in not all functions of our website being fully usable.

**Contact Inquiries/Contact Options**

If you contact us via the contact form or email, the data you provide will be used to process your request. The data provision is necessary for the processing and answering of your inquiry – without their provision, we cannot answer your inquiry or can only answer it to a limited extent.

The legal basis for this processing is Article 6 (1) (b) GDPR.

Your data will be deleted once your inquiry has been conclusively answered and there are no legal retention obligations to the contrary, such as in the case of a subsequent contract processing.

**Customer Account/Registration Function**

If you create a customer account with us via our website, we will collect and store the data you enter during registration (e.g., your name, address, or email address) exclusively for pre-contractual services, for contract fulfillment, or for customer care (e.g., to provide you with an overview of your previous orders with us or to offer you the notepad function). We also store the IP address and the date and time of your registration. This data will not be disclosed to third parties.

As part of the further registration process, your consent to this processing will be obtained, and this privacy policy will be referenced. The data collected by us in this process will only be used for the provision of the customer account.

If you consent to this processing, Article 6 (1) (a) GDPR is the legal basis for the processing.

If the opening of the customer account also serves pre-contractual measures or contract fulfillment, the legal basis for this processing is also Article 6 (1) (b) GDPR.

You can revoke the consent given to us for the opening and maintenance of the customer account at any time with effect for the future in accordance with Article 7 (3) GDPR. For this, you only need to inform us about your revocation.

The data collected in this context will be deleted once the processing is no longer necessary. However, we must observe tax and commercial law retention periods.

**Facebook**

To advertise our products and services and to communicate with interested parties or customers, we operate a company presence on the Facebook platform.

On this social media platform, we are jointly responsible with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

The Facebook data protection officer can be reached via a contact form at:
https://www.facebook.com/help/contact/540977946302970

We have regulated the joint responsibility in an agreement regarding the respective obligations in terms of the GDPR. This agreement, from which the mutual obligations arise, can be accessed at the following link:
https://www.facebook.com/legal/terms/page_controller_addendum

The legal basis for the processing of personal data resulting from this and reproduced below is Article 6 (1) (f) GDPR. Our legitimate interest lies in the analysis, communication, and marketing of our products and services.

The legal basis may also be the user’s consent in accordance with Article 6 (1) (a) GDPR to the platform operator. The user can revoke this consent at any time by notifying the platform operator in accordance with Article 7 (3) GDPR with effect for the future.

When accessing our online presence on the Facebook platform, data of the user (e.g., personal information, IP address, etc.) is processed by Facebook Ireland Ltd. as the operator of the platform in the EU.