Privacy Policy

1. Name and contact details of the controller 

This privacy policy applies to data processing by: 

Controller: Mediengruppe Neuer Weg GmbH Managing Directors: Carsten Zimmer and Alexander-Renee Schroeter 
Alte Bottroper Straße 42 45356 Essen, Germany 
Email: vertrieb@neuerweg.de 
Phone: +49 (0)201 25915 

as well as 

Controller: People to People Reisen Owner: Marlies Schumann (hereinafter: “People to People Reisen”) 
Hauptstr. 40 45879 Gelsenkirchen, Germany 
Email: reisen@people-to-people.de 
Phone: +49 (0)209 1776560 

2. Collection and storage of personal data and the nature and purpose of their use 

a) When visiting the website 

When you visit our website www.people-to-people.de, the browser used on your device automatically sends information to our website server. This information is temporarily stored in a log file. The following information is collected without your intervention and stored until it is automatically deleted: 

• IP address of the requesting computer, 
  
• date and time of access, 
  
• name and URL of the file accessed, 
  
• website from which access is made (referrer URL), 
  
• browser used and, if applicable, the operating system of your computer and the name of your access provider. 
  

We process the aforementioned data for the following purposes: 

• To ensure smooth connection to the website, 
  
• To ensure convenient use of our website, 
  
• To evaluate system security and stability, and for other administrative purposes. 

The legal basis for data processing is Art. 6(1)(f) GDPR. Our legitimate interest follows from the purposes listed above for data collection. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person. 

In addition, we use cookies and analysis services when you visit our website. You can find more detailed information on this in sections 4 and 5 of this privacy policy. 

b) When registering for our newsletter 

If you have expressly consented in accordance with Art. 6 (1) (a) GDPR, we will use your email address to send you our newsletter on a regular basis. To receive the newsletter, you only need to provide your email address. 

You can unsubscribe at any time, for example via a link at the end of each newsletter. Alternatively, you can also send your unsubscribe request at any time by email to zentrale@people-to-people.de. 

c) When using our contact form 

If you have any questions, you can contact us using the form provided on the website. You must provide a valid email address so that we know who the enquiry comes from and can respond to it. Further details can be provided voluntarily. 

Data processing for the purpose of contacting us is carried out in accordance with Art. 6 (1) (a) GDPR on the basis of your voluntary consent.  

The personal data collected by us for the use of the contact form will be automatically deleted after your enquiry has been processed. 

d) When using our online shop 

If you place an order in our online shop, the data you provide, such as address or contact details, will be processed. The products or services you order will also be processed, as will data relating to payment processing. This data will be passed on to service providers, such as logistics companies or payment processors, if necessary for the execution of the contract. 

Data processing for the purpose of contract fulfilment is carried out in accordance with Art. 6 (1) (b) GDPR for the purpose of processing an existing contractual relationship with you. 

The personal data collected by us for the order will be automatically deleted after completion of the order, unless other storage obligations prevent this.  

Unused customer accounts are deleted after 3 years. 

3. Disclosure of data 

Your personal data will not be transferred to third parties for purposes other than those listed below. 

We will only disclose your personal data to third parties if: 

• You have given your express consent in accordance with Art. 6 (1) (a) GDPR,
 
  
• the transfer is necessary for the establishment, exercise or defence of legal claims pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data, 

  
• 
in the event that there is a legal obligation to disclose information pursuant to Art. 6(1)(c) GDPR, and

  
• this is legally permissible and necessary for the performance of contractual relationships with you in accordance with Art. 6(1)(b) GDPR.
  

4. Export and processing of data in countries outside the European Economic Area 
 

Your personal data will not be exported to countries outside the European Economic Area (hereinafter referred to as EEA), unless it is apparent from the booking that it is necessary to transfer the data provided to third parties located in third countries, e.g. for the purpose of fulfilling the contract (Art. 49 EU GDPR), and this is indicated in this privacy policy. 
 

5. What are the special features of travel to the USA? 

Due to a US federal law on internal security and counter-terrorism, airlines are required to provide the US immigration authorities with the flight and reservation details of each individual passenger prior to entry. Without this data transfer, entry into the USA is not possible. This data is collected by the US Customs and Border Protection (CBP) and may only be forwarded to other authorities in individual cases. 

6. What security standards do we use (SSL technology)? 

The transfer of sensitive personal data between your computer and our servers or the servers of our partners and service providers is encrypted using SSL (Secure Socket Layer) technology for bookings and payments. This means that third parties have no way of reading your data during transmission. In addition to secure transmission between your computer and our servers, access to our servers by third parties is also protected by a variety of security mechanisms. 

7. Cookies 

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your device and do not contain viruses, Trojans or other malware. 

The cookie stores information that is related to the specific device used. However, this does not mean that we immediately become aware of your identity. 

The use of cookies serves to make the use of our website more pleasant for you. We use so-called session cookies to recognise that you have already visited individual pages on our website. These are automatically deleted when you leave our website.
 

In addition, we also use temporary cookies to optimise user-friendliness, which are stored on your device for a specific period of time. If you visit our site again to use our services, it will automatically recognise that you have already been with us and what entries and settings you have made, so that you do not have to enter them again.
 

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you (see section 5). These cookies enable us to automatically recognise that you have already visited our site when you visit it again. These cookies are automatically deleted after a defined period of time.


The data processed by cookies is necessary for the purposes mentioned above in order to protect our legitimate interests and those of third parties in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.
 

Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or so that a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website. 

8. Analysis tools 

a) Tracking tools The tracking measures listed below and used by us are carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR. With the tracking measures used, we want to ensure a needs-based design and the continuous optimisation of our website. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision.
 

The respective data processing purposes and data categories can be found in the corresponding tracking tools. 


I) Google Adwords Conversion Tracking
 

We also use Google Conversion Tracking to statistically record the use of our website and to evaluate it for the purpose of optimising our website for you. Google Adwords places a cookie (see section 4) on your computer if you have reached our website via a Google advertisement. 

These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of the AdWords customer's website and the cookie has not yet expired, Google and the customer can recognise that the user clicked on the advertisement and was redirected to this page.
 

Each AdWords customer receives a different cookie. Cookies cannot therefore be tracked across the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.
 

If you do not wish to participate in the tracking process, you can also refuse the necessary cookie setting – for example, by changing your browser settings to disable the automatic setting of cookies in general. You can also disable cookies for conversion tracking by setting your browser to block cookies from the domain ‘www.googleadservices.com’. Google's privacy policy on conversion tracking can be found here (https://services.google.com/sitestats/de.html). 

9. Social media plug-ins
 

We do not use social media plug-ins on our website. 

10. Rights of data subjects
 

You have the right:
 

pursuant to Art. 15 GDPR, to request information about your personal data processed by us. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it was not collected by us, and the existence of automated decision-making, including profiling and, if applicable, meaningful information about its details;


pursuant to Art. 16 GDPR, to request the immediate correction of inaccurate or incomplete personal data stored by us;


pursuant to Art. 17 GDPR, to request the erasure of your personal data stored by us, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defence of legal claims;


pursuant to Art. 18 GDPR, to request the restriction of the processing of your personal data if you dispute the accuracy of the data, the processing is unlawful but you oppose its erasure and we no longer need the data, but you need it to assert, exercise or defend legal claims, or you have objected to the processing pursuant to Art. 21 GDPR;


pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transfer to another controller;


pursuant to Art. 7(3) GDPR, to withdraw your consent from us at any time. As a result, we will no longer be permitted to continue processing data based on this consent in the future and


to lodge a complaint with a supervisory authority in accordance with Article 77 of the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office for this purpose.

11. Right to object
 

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will implement without you having to specify a particular situation. 

If you wish to exercise your right of revocation or objection, simply send an email to zentrale@people-to-people.de. 

12. Data security 

When you visit our website, we use the widely used SSL (Secure Socket Layer) procedure in conjunction with the highest level of encryption supported by your browser. This is usually 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is being transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.
 

We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments. 

13. Up-to-dateness and changes to this privacy policy 


This privacy policy is currently valid and was last updated in May 2018.
 

Due to the further development of our website and offers on it, or due to changes in legal or regulatory requirements, it may be necessary to amend this privacy policy. 

You can access and print out the current privacy policy at any time on our website at www.people-to-people.de.