Cookie Policy
Book your holiday with confidence! Any personal details you provide will remain private and protected. Here’s how…
We use cookies and other similar technologies (collectively referred to as cookies) when you use our website or app. Cookies are small pieces of data stored on your device. Cookies are used for various purposes, such as to help make our website work, remember your preferences and to analyse how you interact with our services and content. Full details of what cookies we use can be found below.
Services
Necessary
1 Subservice
Description of Service
This is a content delivery and cloud infrastructure service provider that distributes, accelerates and protects online applications.
Processing Company
Akamai Technologies GmbH
Parkring 20–22, 85748 Garching, Germany
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
Data Purposes
This list represents the purposes of the data collection and processing.
- Analytics
- Cloud computing
- Monitoring
Technologies Used
This list represents all technologies this service uses to collect data.
- Cookies
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
- Browser information
- Date and time of visit
- Device information
- Device operating system
- Geographic location
- IP address
- Mouse movements
- Pages visited
- Visited URL
Legal Basis
In the following the required legal basis for the processing of data is listed.
- Art. 6 para. 1 s. 1 lit. f GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider’s privacy policy or contact the provider directly.
- Worldwide
Data Recipients
In the following the recipients of the data collected are listed.
- Akamai Technologies, Inc., Akamai Technologies GmbH
Click here to read the privacy policy of the data processor
https://www.akamai.com/us/en/multimedia/documents/akamai/akamai-privacy-statement.pdf
Storage Information
- Maximum age of cookie storage: 1 hour
Description of Service
This is a collection of fonts for commercial and personal use.
Processing Company
Google Ireland Limited
Gordon House, 4 Barrow St, Dublin 4, Ireland
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://support.google.com/policies/contact/general_privacy_form
Data Purposes
This list represents the purposes of the data collection and processing.
- Providing fonts
- Improvement of service
Technologies Used
This list represents all technologies this service uses to collect data.
- APIs
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
- IP address
- Aggregated usage numbers
- Font file requests
- Referrer URL
- CSS requests
- User agent
- Browser information
Legal Basis
In the following the required legal basis for the processing of data is listed.
- Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider’s privacy policy or contact the provider directly.
- United States of America
- Singapore
- Taiwan
- Chile
Data Recipients
In the following the recipients of the data collected are listed.
- Alphabet Inc., Google LLC, Google Ireland Limited
Click here to read the privacy policy of the data processor
Click here to read the cookie policy of the data processor
Description of Service
This is an integrated map service.
Processing Company
Google LLC
1600 Amphitheatre Parkway Mountain View, CA 94043, United States of America
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://support.google.com/policies/contact/general_privacy_form
Data Purposes
This list represents the purposes of the data collection and processing.
- Displaying Maps
Technologies Used
This list represents all technologies this service uses to collect data.
- APIs
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
- Date and time of visit
- Location information
- IP address
- URL
- Usage data
- Search terms
- Geographic location
Legal Basis
In the following the required legal basis for the processing of data is listed.
- Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider’s privacy policy or contact the provider directly.
- Singapore
- Taiwan
- Chile
- United States of America
Data Recipients
In the following the recipients of the data collected are listed.
- Google Ireland Limited, Google LLC, Alphabet Inc
Click here to read the privacy policy of the data processor
Click here to read the cookie policy of the data processor
Description of Service
This is a tag management system. Via Google Tag Manager, tags can be integrated centrally via a user interface. Tags are small sections of code that can track activities. Script codes of other tools are integrated via the Google Tag Manager. The Tag Manager allows to control when a particular tag is triggered.
Processing Company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://support.google.com/policies/contact/general_privacy_form
Data Purposes
This list represents the purposes of the data collection and processing.
- Tag Management
Technologies Used
This list represents all technologies this service uses to collect data.
- Website tags
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
- Aggregated data about tag firing
Legal Basis
In the following the required legal basis for the processing of data is listed.
- Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider’s privacy policy or contact the provider directly.
- Singapore
- Taiwan
- Chile
- United States of America
Data Recipients
In the following the recipients of the data collected are listed.
- Alphabet Inc., Google LLC, Google Ireland Limited
Click here to read the privacy policy of the data processor
Click here to read the cookie policy of the data processor
Description of Service
This is a content delivery network provided by Amazon. The use of a CDN enables the user to make content available to you for retrieval more quickly with the help of regionally or internationally distributed servers. When you access this content, a connection is established between you and the respective servers of the CDN, whereby personal data may be transmitted.
Processing Company
Amazon Web Services EMEA SARL
38 Avenue John F. Kennedy, L-1855 Luxemburg
Data Purposes
This list represents the purposes of the data collection and processing.
- Content Delivery
Technologies Used
This list represents all technologies this service uses to collect data.
- Scripts
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
- User agent data
- Usage data
- Device operating system
- Device information
- IP address
- Browser information
Legal Basis
In the following the required legal basis for the processing of data is listed.
- Art. 6 para. 1 s. 1 lit. f GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
Worldwide
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider’s privacy policy or contact the provider directly.
- Worldwide
Data Recipients
In the following the recipients of the data collected are listed.
- Amazon Web Services EMEA SARL
Click here to read the privacy policy of the data processor
Click here to read the cookie policy of the data processor
Functional
Description of Service
This is a service providing increased security and performance for websites. Cloudflare offers for example a content delivery network („CDN“) to improve the loading times of the website. The use of a CDN enables the user to make content available for retrieval more quickly with the help of regionally or internationally distributed servers.
Processing Company
Cloudflare Inc.
101 Townsend St., San Francisco, CA 94107, United States of America
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
Data Purposes
This list represents the purposes of the data collection and processing.
- Optimization
- Website security
- Improvement of service
- Reducing bandwidth usage
Technologies Used
This list represents all technologies this service uses to collect data.
- Cookies
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
- IP address
- System configuration information
- Name of website
- Date and time of request
- Name and URL of the accessed file
- Amount of data transferred
- Status Information
- Device operating system
- Referrer URL
- Requesting provider
- Device type
- Time of the server request
Legal Basis
In the following the required legal basis for the processing of data is listed.
- Art. 6 para. 1 s. 1 lit. f GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
United States of America,European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
Data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider’s privacy policy or contact the provider directly.
- United States of America
- Singapore
- Australia
- United Arab Emirates
Data Recipients
In the following the recipients of the data collected are listed.
- Cloudflare Group
Click here to read the privacy policy of the data processor
Click here to read the cookie policy of the data processor
Description of Service
This is a service that checks whether data is entered by a human or by an automated program.
Processing Company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://support.google.com/policies/contact/general_privacy_form
Data Purposes
This list represents the purposes of the data collection and processing.
- Bot Protection
- Spam prevention
- Fraud detection
Technologies Used
This list represents all technologies this service uses to collect data.
- Scripts
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
- Browser language
- Browser plug-ins
- Click path
- Date and time of visit
- IP address
- User behaviour
- Amount of time spent on a page
- User input
- Device information
- Mouse movements
- Geographic location
- Device operating system
Legal Basis
In the following the required legal basis for the processing of data is listed.
- Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
Data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider’s privacy policy or contact the provider directly.
- United States of America
- Singapore
- Taiwan
- Chile
Data Recipients
In the following the recipients of the data collected are listed.
- Alphabet Inc.
- Google LLC
- Google Ireland Limited
Click here to read the privacy policy of the data processor
Click here to read the cookie policy of the data processor
Storage Information
- Maximum age of cookie storage: 5 months, 27 days
Marketing
1 Subservice
Description of Service
This is an advertising service. This service can be used to show personalised or non-personalised advertisement to users.
Processing Company
Google Ireland Limited
Google Building Gordon House, 4 Barrow Street, Dublin D04 E5W5, Ireland
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://support.google.com/policies/contact/general_privacy_form
Data Purposes
This list represents the purposes of the data collection and processing.
- Advertisement
- Analytics
- Providing Service
- Statistics
Technologies Used
This list represents all technologies this service uses to collect data.
- Cookies
- Tracking Pixel
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
- Ads viewed
- Cookie ID
- Date and time of visit
- Device information
- Geographic location
- IP address
- Search terms
- Ads shown
- Client ID
- Impressions
- Online identifiers
- Browser information
- Referrer URL
- Interaction data
Legal Basis
In the following the required legal basis for the processing of data is listed.
- Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes. Log data is anonymized after 9 months and cookie information is anonymized after 18 months.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider’s privacy policy or contact the provider directly.
- Chile
- Singapore
- Taiwan
- United States of America
Data Recipients
In the following the recipients of the data collected are listed.
- Alphabet Inc., Google LLC, Google Ireland Limited
Click here to read the privacy policy of the data processor
Click here to read the cookie policy of the data processor
Click here to opt out from this processor across all domains
Storage Information
- Maximum age of cookie storage: 1 year
Description of Service
This is a Tracking technology offered by Meta and used by other Meta services. It is used to track visitor interactions with websites (“events”) after they click on an ad placed on Facebook or other services provided by Meta (“conversion”).
Processing Company
Meta Platforms Ireland Ltd.
4 Grand Canal Square, Grand Canal Harbour, Dublin, D02, Ireland
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
Data Purposes
This list represents the purposes of the data collection and processing.
- Analytics
- Marketing
- Retargeting
- Advertisement
- Conversion Tracking
- Personalisation
Technologies Used
This list represents all technologies this service uses to collect data.
- Cookies
- Pixel
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
- Ads viewed
- Browser information
- Content viewed
- Device information
- Geographic location
- Interactions with advertisement, services, and products
- IP address
- Pixel ID
- Referrer URL
- Usage data
- User behaviour
- Facebook user ID
- Device operating system
- Device ID
- HTTP-header
- Items clicked
- Pages viewed
- Facebook cookie information
- Usage/click behaviour
- Browser type
- Search terms
Legal Basis
In the following the required legal basis for the processing of data is listed.
- Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted the latest after 720 days.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider’s privacy policy or contact the provider directly.
- Singapore
- United States of America
- United Kingdom
Data Recipients
In the following the recipients of the data collected are listed.
- Meta Platforms Inc., Meta Platforms Ireland Ltd.
Click here to read the privacy policy of the data processor
Click here to read the cookie policy of the data processor
Storage Information
- Maximum age of cookie storage: 1 year
- Non-cookie storage: no
1 Subservice
Description of Service
This is an advertising service.
Processing Company
TikTok Information Technologies UK Limited
Aviation House, 125 Kingsway Holborn, London, WC2B 6NH, United Kingdom
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
Data Purposes
This list represents the purposes of the data collection and processing.
- Analytics
- Advertisement
- Social Media
- Retargeting
- Conversion Tracking
Technologies Used
This list represents all technologies this service uses to collect data.
- Cookies
- Pixel
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
- User agent
- Device information
- Browser information
- IP address
- Country
- Language information
- Websites visited
- Installation data
- Purchase information
- Date and time of visit
Legal Basis
In the following the required legal basis for the processing of data is listed.
- Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
Singapore,United States of America
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider’s privacy policy or contact the provider directly.
- Singapore
- United States of America
Data Recipients
In the following the recipients of the data collected are listed.
- TikTok Inc.
- TikTok Information Technologies UK Limited
- TikTok Pte. Ltd.
Click here to read the privacy policy of the data processor
https://www.tiktok.com/legal/privacy-policy?lang=en#section-1
Subservices
Below you can find all the services that are subordinate to this service. The current consent status of this service applies to all subservices.
Statistical
Description of Service
This is a web analytics service. With this, the user can measure the advertising return on investment “ROI” as well as track user behavior with flash, video, websites and applications.
Processing Company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://support.google.com/policies/contact/general_privacy_form
Data Purposes
This list represents the purposes of the data collection and processing.
- Marketing
- Analytics
Technologies Used
This list represents all technologies this service uses to collect data.
- Cookies
- Pixel
- JavaScript
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
- Click path
- Date and time of visit
- Device information
- Location information
- IP address
- Pages visited
- Referrer URL
- Browser information
- Hostname
- Browser language
- Browser type
- Screen resolution
- Device operating system
- Interaction data
- User behaviour
- Visited URL
- Cookie ID
Legal Basis
In the following the required legal basis for the processing of data is listed.
- Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The Retention Period depends on the type of the saved data. Each user can choose how long Google Analytics retains data before automatically deleting it.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider’s privacy policy or contact the provider directly.
- United States of America
- Singapore
- Chile
- Taiwan
Data Recipients
In the following the recipients of the data collected are listed.
- Google Ireland Limited, Alphabet Inc., Google LLC
Click here to read the privacy policy of the data processor
Click here to read the cookie policy of the data processor
Click here to opt out from this processor across all domains
Storage Information
- Maximum age of cookie storage: 2 years
Description of Service
This is an analytics service. The service makes it possible to measure traffic and engagement on websites and mobile apps across devices using customizable reports.
Processing Company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://support.google.com/policies/contact/general_privacy_form
Data Purposes
This list represents the purposes of the data collection and processing.
- Marketing
- Analytics
Technologies Used
This list represents all technologies this service uses to collect data.
- Tracking code
- Cookies
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
- Device information
- Geographic location
- Browser information
- Device operating system
- Screen resolution
- Referrer URL
- Interaction data
- Date and time of visit
- User behaviour
- Pages visited
- Online identifiers
- Shortened IP Address
- User ID
- Advertising identifier
- Purchase information
Legal Basis
In the following the required legal basis for the processing of data is listed.
- Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The client can choose how long Google Analytics retains data. The maximum amount of retention period is 14 months.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider’s privacy policy or contact the provider directly.
- Singapore
- Taiwan
- Chile
- United States of America
Data Recipients
In the following the recipients of the data collected are listed.
- Alphabet Inc., Google LLC, Google Ireland Limited
Click here to read the privacy policy of the data processor
Click here to read the cookie policy of the data processor
Click here to opt out from this processor across all domains
Storage Information
- Maximum age of cookie storage: 2 years