Privacy Policy

General
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory General Data Protection Regulation (GDPR). This applies, among other things, to the collection, processing and use of your personal data.

We require this data in the following cases:
– when you contact us
– when processing orders and bookings
– when processing data on behalf of a controller

The collection, processing and use of personal data takes place exclusively for specified purposes.

Information, deletion, blocking
You have the right at any time to receive free information about your stored personal data, its origin and recipients, and the purpose of the data processing, as well as the right to rectification, blocking or deletion of this data. For this purpose, as well as for any further questions on the subject of personal data, you may contact us at any time at the address given in the legal notice.

Right to object
Users of our websites may exercise their right to object at any time and object to the associated processing of their personal data. In this case, please use the contact details given in the legal notice.

Data security
Access to personal data is restricted to internal and, where applicable, external employees of ConcerTour and to the contractual partners involved in processing booking orders, who handle personal data in accordance with their respective tasks. The contractual partners involved are contracted hotels, and ConcerTour only discloses the first name and last name, together with any title, which are necessary for processing the booking. All employees and contractual partners involved are bound to data secrecy and to the careful handling of data pursuant to Section 53 BDSG (new) and Art. 28 GDPR.
Furthermore, ConcerTour maintains various security measures within the meaning of Art. 32 GDPR to protect your personal data.

Data storage
We process personal data such as title, first name, last name, street, place of residence, postcode, telephone number, email address and, where applicable, further voluntary information from the user's form submitted to us. This data is stored for as long as it is required for the task at hand. However, no data is retained in advance without cause. The user may object to or revoke this at any time. Data that is no longer needed and is stored will be deleted once its purpose is no longer relevant, provided that no statutory obstacles prevent this (data minimisation).

Disclosure of data to third parties
We assure you that we will not pass on your data to unauthorised third parties, unless we are legally obliged to do so. In that case, we will inform you immediately.

Cookies
Some of our web pages use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies serve to make our offering more user-friendly, more effective and more secure. Cookies are small text files that are placed on your computer and stored by your browser.

Most of the cookies we use are so-called “session cookies”. They are deleted automatically at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser on your next visit.

You can set your browser so that you are informed about the placement of cookies and only allow cookies on a case-by-case basis, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be limited.

Contact form
If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in case of follow-up questions. We do not pass on this data without your consent. Once the enquiry has been dealt with and the purpose fulfilled, this data will be deleted.

Data protection with Cloudflare Turnstile – to protect against automated requests and spam, we use Cloudflare Turnstile, a service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When a form is accessed, your IP address and technical data about the browser environment are transmitted to Cloudflare in order to verify that the request comes from a human. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in protection against misuse). Further information: https://www.cloudflare.com/privacypolicy/

Privacy policy for the use of Google Analytics
This website uses functions of the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

You can find more information on how user data is handled by Google Analytics in Google's privacy policy: https://support.google.

Browser plugin
You can prevent the storage of cookies by adjusting your browser software accordingly; however, we would point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of the data generated by the cookie and relating to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout?

Objection to data collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set, which prevents the collection of your data during future visits to this website:

Data processing on behalf of a controller
We have concluded a data processing agreement with Google and implement the requirements of the German and European data protection authorities when using Google Analytics.

IP anonymisation
We use the function “activation of IP anonymisation” on this website. As a result, your IP address is truncated by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this
information to evaluate your use of the website, to compile reports on website activity, and to provide further services relating to website use and internet use
to the website operator. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

Links to other websites – disclaimer
This privacy policy does not extend to linked websites. The respective owner/operator is responsible for compliance with data protection regulations on those sites and for the completeness, accuracy and currency of the information published there.

Advertising & right to object
ConcerTour only uses personal data for advertising purposes if you have expressly consented to this and the legal framework permits it. You may object to the use and processing of this data at any time. An informal message to our contact address, which is given in the legal notice, is sufficient for this purpose.

SSL encryption
For reasons of security and to protect the transmission of confidential content, such as bookings or enquiries that you send to us as the site operator, this site uses SSL encryption. You can recognise an encrypted connection by the fact that the address bar of your browser changes from “http://” to “https://” and by the lock symbol in your browser bar. We would like to point out that the encryption of the transmission path also depends on the technology of your server and the encryption technology it uses.

Public register of processing activities
You can request the register of processing activities pursuant to Section 4e BDSG at the address given in the legal notice.
The “provision is made in a suitable manner” pursuant to Section 4g (2) sentence 2 BDSG.

Objection to advertising emails
We hereby object to the use of contact details published in accordance with the legal notice obligation for sending advertising and information materials that have not been expressly requested. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example through spam emails.

ConcerTour & erecht24.de