The provider (in the following also referred to as “we”) collects, uses, and stores your personal data in accordance with the EU General Data Protection Regulation (GDPR), the German Data Protection Act (“Bundesdatenschutzgesetz”), and the German Telemedia Act (“Telemediengesetz”). Personal data means any information relating to an identified or identifiable natural person. Below we inform you about the type, extent, and purpose of the collection and use of personal data.
1 | Who is responsible for data processing and who can you contact?
The party responsible for data processing is:
Fa. Nextstop24, Owner: Caroline Harsch
Telephone: 0049 (0) 160 75 66 808
2 | Which data are being processed and what are the sources of these data?
We process personal data (Art. 4 Nr. 1 GDPR) which we receive in the course of conducting our business as provider of the website nextstop24.com (name, addresses, email-addresses, contributed content, further data to technologies or communication content).
3 | For what purpose and on what legal basis are the data processed?
We process personal data in order to be able to provide our services on nextstop24.com and in order to receive and reply to your requests. We process personal data in accordance with the following data protection-related provisions:
a) Processing personal data with your consent (Art. 6 para. 1 a GDPR):
We process data according to Art. 6 para. 1 a GDPR in order to communicate with you and advert for our services.
b) Processing personal data to fulfil contractual obligations (Art. 6 para. 1 b GDPR):
If we enter into a contractual relation (including the initiation of a contractual relation) the processing of personal data takes place for the provision of our services website provider and is based on Art. 6 para. 1 b GDPR.
c) Processing personal data to fulfil legal requirements (Art. 6 para. 1 c GDPR):
In the event that our company is subject to a legal obligation which requires the processing of personal data, such as for example the fulfilment of tax obligations, the processing of personal data is made pursuant to Art. 6 para. 1 lit. c GDPR.
d) Processing personal data according to Art. 6 para. 1 d GDPR:
In exceptional cases the processing of personal data may be required in order to protect the vital interests of the data subject or another natural person. This could for example be the case were a visitor will be injured in our premises and in consequence his name, age, health insurance data, or other vital information need to be transmitted to a doctor, hospital, or other third party. In that event the processing will be made pursuant to Art. 6 para. 1 lit. d GDPR.
e) Processing personal data according to Art. 6 para. 1 f GDPR:
Finally, data processing activities can be conducted on the basis of Art. 6 para. 1 lit. f GDPR which covers data processing activities which do not fall under any of the afore mentioned legal provisions and which covers data processing which is necessary for the purposes of the legitimate interests pursued by us or a third party and provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject.
4 | Legitimate interests of the controller that are being pursued by the controller or a third party
If the processing of personal data is based on Article 6 para. 1I lit. f GDPR our legitimate interest is the conduct of our business and the related communication with you (recital 47 GDPR).
5 | SSL-Encryption
For security reasons and in order to protect confidential information, such as requests submitted via our contact form, we use SSL-encryption. If an encrypted connection has been effected the address-line of your browser will show „https://“ instead of „http://“ and you might notice a locker symbol in your browser. If SSL is activated third parties cannot read data that you send to us.
6 | Server logfiles
We collect and store information on the basis of Art. 6 para 1 lit. f GDPR about your visits of our website in so called log-files on our server. The logfiles contain data that your browser is automatically sending to us, such as:
• shortened IP address;
• browser type / browser version;
• your operating system;
• referrer URL (or the website visited previously);
• date and time of the server request;
• amount of transmitted data;
• your internet service provider.
These data will be collected and processed only for the purpose of measuring the statistics of our website performance. These data will not be connected with data from other data sources.
8 | Reviews / articles
You can visit our website without registration. In order to be able to upload content for reviews or articles you have to provide us the following information:
• your name;
• your country of residence;
• your age;
• your email-address;
• your travel destination (continent, country, city/region);
• your travel dates;
• possible travel partners;
• the content of your review including photos.
• your name;
• your email-address;
• the content of your article including uploaded photos
• a short text about you.
In this case we store and process these data. We do not transfer personal data to third parties. Data will be used only in order to provide the agreed services. Storing and processing your personal data in this context is based on Art. 6 para. 1, lit b GDPR.
9 | Period of data storage
We process and store personal data only for the period, which is required to meet the purpose of processing, or as long and to the extent as statutory laws require us to process and/or store such data.
If the purpose of processing does not apply anymore and the applicable statutory retention requirement expires, we will as a matter of routine erase data or restrict the processing of data in accordance with the applicable statutory laws.
10 | Google Analytics
We have activated the functionality IP anonymization. In case of activation of the IP anonymization, Google will shorten the IP address for Member States of the European Union as well as for other parties to the Agreement on the European Economic Area before sending it to the USA. Only in exceptional cases, the full IP address is sent to and shortened by Google servers in the USA. On our behalf Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and internet usage to the website provider.
Google will not associate your IP address with any other data held by Google.
Opposition to the data collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set which prevents the collection of your data on future visits to this website: disable Google Analytics.
11 | Is there an automated decision-making process?
We do not use automated decision-making processes under Art. 22 GDPR for initiating decisions on the establishment or carrying out of the business relationship, which would have legal consequences for the data subject or would have a similar significant negative impact on this person.
12 | Documentation of declared consents
If you have given us a consent under Art. 7 DSGVO, § 7 UWG to contact you via email, then your consent is as follows:
X I would like to receive the NextStop24 newsletter with travel tips and news.
You can withdraw a given consent at any time free of charge. A withdrawal can e.g. be done by email, or by post, or by using the unsubscribe function in the respective email.
13 | Rights of data subject
The data subject has according to. Art. 15 GDPR the right to obtain free information on request about the personal data stored about him as well as the purpose of the data processing. The data subject has also according to. Art. 16, 17, and 18 GDPR the right to correct incorrect data, and block, and delete his or her personal data. Moreover, the data subject has, subject to Art. 20 GDPR, the right to receive the personal data concerning him or her, which he or she has provided to us, in a structured, commonly used and machine-readable format, and the right to transmit those data to another controller without hindrance from our part. According to Art. 21 (1) GDPR, the data subject shall also have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Art. 6 (1) GDPR. We will comply with the aforementioned requests if and to the extent such compliance is required by the applicable statutory laws. Requests for access to, and rectification or erasure of personal data, or restriction of processing may be directed to the email or post address stated in our website’s imprint. Each data subject has the right to lodge a complaint with a supervisory authority of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes the GDPR.