Privacy Statement

The provider (in the following also referred to as “we”) collects, uses, and stores your personal data in accordance with the EU General Data Protection Regulation (GDPR), the German Data Protection Act (“Bundesdatenschutzgesetz”), and the German Telemedia Act (“Telemediengesetz”). Personal data means any information relating to an identified or identifiable natural person. Below we inform you about the type, extent, and purpose of the collection and use of personal data.


1 | Who is responsible for data processing and who can you contact?
The party responsible for data processing is:
Fa. Nextstop24, Owner: Caroline Harsch
Tannenstraße 10a
85764 Oberschleißheim

Telephone: 0049 (0) 160 75 66 808


2 | Which data are being processed and what are the sources of these data?
We process personal data (Art. 4 Nr. 1 GDPR) which we receive in the course of conducting our business as provider of the website (name, addresses, email-addresses, contributed content, further data to technologies or communication content). 


3 | For what purpose and on what legal basis are the data processed?
We process personal data in order to be able to provide our services on and in order to receive and reply to your requests. We process personal data in accordance with the following data protection-related provisions:

a) Processing personal data with your consent (Art. 6 para. 1 a GDPR):

We process data according to Art. 6 para. 1 a GDPR in order to communicate with you and advert for our services.

b) Processing personal data to fulfil contractual obligations (Art. 6 para. 1 b GDPR):

If we enter into a contractual relation (including the initiation of a contractual relation) the processing of personal data takes place for the provision of our services website provider and is based on Art. 6 para. 1 b GDPR. 

c) Processing personal data to fulfil legal requirements (Art. 6 para. 1 c GDPR):

In the event that our company is subject to a legal obligation which requires the processing of personal data, such as for example the fulfilment of tax obligations, the processing of personal data is made pursuant to Art. 6 para. 1 lit. c GDPR. 

d) Processing personal data according to Art. 6 para. 1 d GDPR:

In exceptional cases the processing of personal data may be required in order to protect the vital interests of the data subject or another natural person. This could for example be the case were a visitor will be injured in our premises and in consequence his name, age, health insurance data, or other vital information need to be transmitted to a doctor, hospital, or other third party. In that event the processing will be made pursuant to Art. 6 para. 1 lit. d GDPR.

e) Processing personal data according to Art. 6 para. 1 f GDPR:

Finally, data processing activities can be conducted on the basis of Art. 6 para. 1 lit. f GDPR which covers data processing activities which do not fall under any of the afore mentioned legal provisions and which covers data processing which is necessary for the purposes of the legitimate interests pursued by us or a third party and provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject. 

4 | Legitimate interests of the controller that are being pursued by the controller or a third party
If the processing of personal data is based on Article 6 para. 1I lit. f GDPR our legitimate interest is the conduct of our business and the related communication with you (recital 47 GDPR).


5 | SSL-Encryption
For security reasons and in order to protect confidential information, such as requests submitted via our contact form, we use SSL-encryption. If an encrypted connection has been effected the address-line of your browser will show „https://“ instead of „http://“ and you might notice a locker symbol in your browser. If SSL is activated third parties cannot read data that you send to us.


6 | Server logfiles
We collect and store information on the basis of Art. 6 para 1 lit. f GDPR about your visits of our website in so called log-files on our server. The logfiles contain data that your browser is automatically sending to us, such as:

•    shortened IP address;
•    browser type / browser version;
•    your operating system;
•    referrer URL (or the website visited previously);
•    date and time of the server request;
•    amount of transmitted data;
•    your internet service provider.

These data will be collected and processed only for the purpose of measuring the statistics of our website performance. These data will not be connected with data from other data sources. 

7 | Use of cookies
Our website uses cookies on the basis of Art. 6 para 1 lit. f GDPR. A cookie is a text file that is placed on the device of the user (PC, tablet, smartphone, etc.) and stores certain information referring to the device. If you visit our website from the respective device our server receives information from a cookie. Our server can use this information for different purposes. For example, cookies can be used for tailoring advertising to the user or in order to provide statistics for the use of the website. In your browser settings you can allow or deactivate cookies. In the case of deactivating cookies, however, some functionality of our website might not work.


8 | Reviews / articles
You can visit our website without registration. In order to be able to upload content for reviews or articles you have to provide us the following information:

For reviews:
•    your name;
•    your country of residence;
•    your age;
•    your email-address;
•    your travel destination (continent, country, city/region);
•    your travel dates; 
•    possible travel partners;
•    the content of your review including photos. 

For articles: 
•    your name;
•    your email-address;
•    the content of your article including uploaded photos
•    a short text about you.

In this case we store and process these data. We do not transfer personal data to third parties. Data will be used only in order to provide the agreed services. Storing and processing your personal data in this context is based on Art. 6 para. 1, lit b GDPR.

9 | Period of data storage
We process and store personal data only for the period, which is required to meet the purpose of processing, or as long and to the extent as statutory laws require us to process and/or store such data.

If the purpose of processing does not apply anymore and the applicable statutory retention requirement expires, we will as a matter of routine erase data or restrict the processing of data in accordance with the applicable statutory laws.

10 | Google Analytics
In accordance with Art. 6 para 1 lit. f GDPR, this website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses cookies, text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will normally be transmitted to and stored by Google on servers in the United States.

IP Anonymization
We have activated the functionality IP anonymization. In case of activation of the IP anonymization, Google will shorten the IP address for Member States of the European Union as well as for other parties to the Agreement on the European Economic Area before sending it to the USA. Only in exceptional cases, the full IP address is sent to and shortened by Google servers in the USA. On our behalf Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and internet usage to the website provider.

Google will not associate your IP address with any other data held by Google. 

Browser plugin
You may disable the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do this, you may not be able to use the full functionality of this website. Furthermore, you may prevent Google’s collection and use of cookie generated data and data regarding your use of the website (incl. your IP address) by downloading and installing the browser plug-in available under

Opposition to the data collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set which prevents the collection of your data on future visits to this website: disable Google Analytics.

For more information on how user data are handled on Google Analytics, please refer to the Google Privacy Policy:

11 | Is there an automated decision-making process?
We do not use automated decision-making processes under Art. 22 GDPR for initiating decisions on the establishment or carrying out of the business relationship, which would have legal consequences for the data subject or would have a similar significant negative impact on this person.


12 | Documentation of declared consents
If you have given us a consent under Art. 7 DSGVO, § 7 UWG to contact you via email, then your consent is as follows:

           X  I would like to receive the NextStop24 newsletter with travel tips and news.

You can withdraw a given consent at any time free of charge. A withdrawal can e.g. be done by email, or by post, or by using the unsubscribe function in the respective email.

13 | Rights of data subject
The data subject has according to. Art. 15 GDPR the right to obtain free information on request about the personal data stored about him as well as the purpose of the data processing. The data subject has also according to. Art. 16, 17, and 18 GDPR the right to correct incorrect data, and block, and delete his or her personal data. Moreover, the data subject has, subject to Art. 20 GDPR, the right to receive the personal data concerning him or her, which he or she has provided to us, in a structured, commonly used and machine-readable format, and the right to transmit those data to another controller without hindrance from our part. According to Art. 21 (1) GDPR, the data subject shall also have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Art. 6 (1) GDPR. We will comply with the aforementioned requests if and to the extent such compliance is required by the applicable statutory laws. Requests for access to, and rectification or erasure of personal data, or restriction of processing may be directed to the email or post address stated in our website’s imprint. Each data subject has the right to lodge a complaint with a supervisory authority of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes the GDPR.