Data Protection Declaration

Fundamentals

We process and use personal data that is collated during visits to our website solely to the extent necessary for the specified purpose or to such extent as you have provided us with more extensive authorization, taking into account the applicable statutory stipulations on data protection. The General Terms and Conditions of Business must also be complied with in addition to these data protection provisions.

Data collation, processing and use

Visiting our website

You may use certain areas of Travelpirates.com without communicating your identity to us. In terms of using certain functions such as online booking or subscribing to a newsletter, we require additional information from you that enables us to identify you. We collate this information to perform the action requested by you in a specific case, or permanently if you are registered as a user on Travelpirates.com. In your profile you can specify which offers are of particular interest to you.

We automatically collect some data from your computer when you surf our pages. This includes for instance your IP address, browser type and version or the page you were referred from. This data is used for statistical or technical purposes (optimizing the offer, rectifying errors) without specific reference to your personal identity. If there is a suspicion that security is impaired or unlawful use has occurred, we reserve the right to evaluate the data collated in order to analyse the incident.

Registration

If you log on to Travelpirates.com as a user, you can leave comments and launch travel queries via the trip finder. For this purpose we ask you for an e-mail address, a user name and a password. We only use your e-mail address for account maintenance or to send you messages that you have subscribed to. All other information about your personal identity in your profile and our community is provided voluntarily. You need to verify your registration by clicking a confirmation link sent to the e-mail address provided.

Alternatively, you can log in using your Facebook login. This provides us with automatic access to your account data, such as your public profile, your e-mail address and the name you use to log in. Your e-mail address is used for administrative purposes, e.g. if you ask us to reset your password. The data transmitted by Facebook is not analyzed any further. For further information refer to Facebook Inc.’s Datapolicy and Terms of use.

If you use our app, you can tell us which destinations are of particular interest to you via your profile, enabling us to send you suitable offers.

Travelpirates.com thrives on your participation and the exchange of views in our community. All comments you post and the profile information and photos you create are published on Travelpirates.com and can thus be viewed by third parties. Please read our Terms of use.

You can delete your account on Travelpirates.com at any time. To do so all you need to do is click the “Delete” button in the profile settings under “User account”. If you delete your account or revoke your consent to your data being used, your personal data is deleted provided no statutory or contractual retention periods apply that preclude deletion. Your comments and posts will be retained for technical reasons, although your user name will be removed.

Newsletter

We require your e-mail address if you wish to subscribe to our newsletter. We also collect your IP address if you subscribe through the Wisepops pop-up. If you so wish, you may provide further personal information so that we can select suitable information for you. We will only use your e-mail address for the purpose of sending our newsletter.

When you register we send you an e-mail with a confirmation link. The newsletter is not activated until you click this link. You may unsubscribe from the newsletter at any time. To do so use the link provided in the newsletter.

Contact form

In our contact form we ask for your name and e-mail address. We only use this information to handle your query.

Cookies and analysis tools

Cookies are small text files that are transferred from our website to your computer when you are surfing our pages. The cookies may be stored briefly in your computer’s RAM (“session cookies”) or more permanently on your hard drive (“permanent cookies”). This enables us for example to simplify the log-in process or to customize our content in line with your interests and preferences.

Google Analytics

We use the analysis tool and the cookie from Google Analytics to improve our offering. The information about your usage of our website generated in this way is usually transferred to a Google server in the USA and stored there. If IP anonymization is activated on this website, Google will shorten your IP address within the Member States of the European Union or another signatory state of the Treaty on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, compile reports about the website activities and perform further services connected to website use and Internet use for the website operator. The IP address of your browser transmitted in the scope of Google Analytics is not merged with other data by Google. You may prevent the saving of cookies by making corresponding settings in your browser software; however, please note that in this case you may not be able to use all functions of this website in full.

Cookies from our partners

If you book a trip with one of our business partners via our site, we enable this business partner to record the booking process using cookies. This enables our business partner to ascertain that you have taken advantage of the offer presented via our website. Our partners may use information about your booking to improve your/their offering.

GetYourGuide Activity Widget

GetYourGuide Activity Widget is only used if you have provided your consent pursuant to Art. 6 para. 1 (a) GDPR in the Cookie Banner on our website. If you do so, your personal data will be collected by our partner GetYourGuide.

Address: GetYourGuide Deutschland GmbH, Sonnenburger Strasse 71-75, 10437 Berlin

Purpose and collected data: When you interact with GetYourGuide’s widget, GetYourGuide may collect information about you including personal data such as IP addresses, browsing activity, or other identifiers to provide you GetYourGuide’s services and to monitor the effectiveness of GetYourGuides marketing campaigns.

GetYourGuide is solely responsible for processing this data. You can read more in GetYourGuide’s privacy policy: https://www.getyourguide.de/c/privacy-policy

ReferralHero

Address: ReferralHero by LD Innovations LLC, 8 Rocky Hill Rd. Chadds Ford, PA 19317 USA

Purpose: This supports the purpose to fulfill campaign obligations created by HolidayPirates GmbH, to detect fraudulent activity in campaigns and invalidate entries, to send out campaign emails

Processed Data: Email-address, Name, Cookie-ID, IP-address, general location, Browser Identification

ReferralHero is only used if you have provided your consent pursuant to Art. 6 para. 1 (a) GDPR in Manage Services on our website.

Wisepops

Address: Head office: 87 Boulevard Suchet 75016 Paris, France.

Purpose: Wisepops offers a pop-up window to sign up for our WhatsApp channel, our newsletter, or our app, or we use it to promote special offers.Processed data: For internal targeting purposes, we collect certain details about your browsing history on websites where Wisepops is implemented.

The details include:

• Your last visit to the website

• IP address

• The campaigns you have interacted with

• Any additional information that our client has linked to your visit (e.g. the date of your last purchase)

• Any additional information you provide via the pop-up, e.g. your email address, your name

The data will only be transmitted to WisePops if you have given your consent per Art. 6 para. 1 (a) GDPR has given.

AWS Personalize

To provide a more personalised experience, our website and applications uses AWS Personalize, a service provided by Amazon Web Services, Inc. ("AWS"). This service helps us deliver content and recommendations tailored to your interests based on your interactions with our website, mobile website and applications (iOS / Android). 

Address: Amazon Web Services, Inc. 410 Terry Avenue North, Seattle, WA 98109-5210, U.S.A.

Processed Data: 

• Analysis of user behaviour in the App to receive personalized offers

• User Unique ID

AWS Personalize is only used if you have provided your consent pursuant to Art. 6 para. 1 (a) GDPR in the Manage Services section on our website or applications. You have the option to deactivate the use of AWS Personalize on the website or applications at any time; simply reject the service by clicking below on the Manage Services button and rejecting it there.

HolidayPirates App

1. Notifications

We use so-called App notifications for the provision of the App and services.The legal basis for sending app notifications is your consent pursuant to Art. 6 para. 1 lit. a) GDPR. Consent can be revoked at any time in the device settings. 

The technical service provider Braze is our processor for sending push notifications.

Address : Braze Inc., 318 West 39th Street, New York, NY 10018

Purpose: Advertising campaigns, sending offers from our website; onboarding tour and helpful tips for those who use our website to improve their user experience.

Processed data:

• Analysis of user behaviour in the App to receive personalised offers.

• If you are a registered user, information about your profile is shared (email, username, profile picture and notification settings).

• Braze also only stores basic non-identifiable information from the device (country, language, time zone, operating system, App version and device ID).

• We also store and process information about the offers you have placed on the favourites list.

In cases where the user is logged in – we can identify them as the same user (on the web and in the App) and correlate data across platforms to send more targeted messages.

Braze is only used if you gave your consent when you opened the app for the first time, according to Art. 6 para. 1 (a) GDPR. Your consent can be revoked at any time in the app settings.

These data are stored until you unsubscribe from App notifications which you can do at any time in the App settings. As soon as you have unsubscribed, you shall no longer receive any offers from us, and your personal data will no longer be used and are deleted immediately.

2. Analytical & Performance Cookies

We collect user data to improve the performance of the app and perform business-related analytics. Analytical cookies are used to understand how customers use the app, to improve the website, apps and communications. The company uses information about previous actions and interactions to display personalised content and relevant advertising on third-party websites and apps. This data also helps to measure the effectiveness of ads and to facilitate the billing of advertising. Recent searches are stored to facilitate the use of the apps. The legal basis for the processing of the data is your consent pursuant to Art. 6 (1) a) GDPR. Your consent can be revoked at any time in the app settings.

a. Firebase and Google Analytics SDK

These services collect analytics data to track and monitor user behaviour during sessions.

Address : 188 King St., San Francisco, CA 94107, USA

Purpose of processing: Analyse user behaviour in the App to:

• Develop new products and services

• Optimise existing products or services

• Find and fix error messages on the blog

• Measure and plan marketing campaigns

Firebase is a sub-service from Google Analytics. When Firebase is used in the App, the data are forwarded to Google Analytics via Google Tag Manager. The data are then read through Adjust. You can find more information on the operating principle in the section entitled ‘Google Analytics’ and ‘Adjust’.

Firebase is only used if you gave your consent when you opened the app for the first time, according to Art. 6 para. 1(a) GDPR. Your consent can be revoked at any time in the app settings.

Personal data relating to the user are deleted after 38 months.

b. Braze Analytics SDK

This is a mobile engagement and messaging system. It collects analytics data to track and monitor the behaviour of user sessions in our mobile app.

3. Essential Cookies 

The data collected through these services is used to ensure the technical performance of the application and to provide the most basic content to users. Functional cookies enable a smooth use of our application by allowing the creation of an account, logging in and viewing content. These cookies must always be enabled in order to use our mobile app and therefore cannot be disabled.  The data processing according to Art. 6 (1) lit. f) DSGVO is justified by our economic interest in providing technical functionality, optimisation and development of services.

a. Facebook Login SDK

This integration allows you to log in to your account using your Facebook account details. 

b. Google SignIn SDK

This integration allows you to log in to your account using your Google account details. 

c. Firebase AuthSDK

This integration allows you to offer login options to users and store their login information in Firebase.

d. Firebase Crashlytics SDK

This service collects error messages and crash reports in the app.

e. Braze SDK

This is a mobile engagement and messaging system that collects mobile app usage data to enable targeting and delivery of push notifications and in-app messages to our mobile app users. For technical reasons, we need to enable the tool when you launch the app, but no personal data is collected until you give us your consent. 

f. Adjust

Address : Adjust GmbH, Saarbrücker Str. 37A, 10405 Berlin, Germany

Purpose: Assisting in identifying behaviour in the mobile application to support decisions about targeted marketing; assisting in the efficient management and optimisation of mobile campaigns for social networks and elsewhere on the Internet.

Processed data:

• Cookie ID, display ID and the device ID used by a specified person, events in the mobile App concerning the use of the mobile App by a particular user (especially login, successful completion of transaction, country, language, local settings, app version) but no payment or financial data.

• The content of the advertising to be delivered to a particular user and the advertising group to which that person belongs.

• HTTP headers, IP address, MAC address (Media Access Control address is a hardware address of each individual network adapter, which serves as a unique identifier of device in a computer network), user's device and web activity information.

Integration of social networks

Plugins from Facebook, Google+ and Twitter are integrated into Travelpirates.com via which cookies may be installed. If you visit a page of Travelpirates.com, this causes direct connections to the servers of the respective networks to be set up. This means that information about your visit to our website is transmitted to the operators of the networks.

We refer to the fact that we do not have any precise information about the way in which this information is used by these social networks. For further information please refer to the data protection notices of the respective service providers:

• facebook

• twitter

Google Tag Manager

This website uses Google Tag Manager. This service from Google Inc. enables website tags to be managed via an interface. Google Tag Manager triggers other tags that may record data. For further information click here.

Facebook Website Custom Audiences

In order to present advertising to you that corresponds to your interests, we use the Facebook tool Website Custom Audiences. This generates a non-reversible checksum (hash value) from your profile data that is transferred to Facebook for analysis and marketing purposes.

For further information on the purpose and scope of data collation and the further processing and use of the data by Facebook and the settings you can make to protect your privacy, please refer to Facebook’s data protection policy, which can be found at facebook.com/ads/website_custom_audiences and www.facebook.com/privacy/explanation. If you would like to raise an objection to the use of Facebook Website Custom Audiences, you can do so at facebook.com/ads/website_custom_audiences.

Integration of third-party services and content

It may be the case that we display third-party content on our platform, such as videos or mapping material from sites such as YouTube or Google Maps. In this case you will receive cookies from these third-party providers. When you access the page, data relating to you, such as your IP address, will be automatically transferred to the provider. Unfortunately, not all providers supply information about the form in which they utilize this data. If we are provided with such information, we will forward it to you.

Other forwarding of data

We will only ever forward your data if this is permitted by law or you have provided your consent for us to do so.

iFrames of other providers on our page

In order to expand your booking options, we also display content from other travel operators on our website using what is termed an iFrame. When you complete a booking form, your information is thereby also transmitted to the respective partner. You can find further information about our partners by clicking the “Providers” button.

Right to information and right of revocation

You have the right to revoke your consent to the use of your data at any time without complying with any specific formal requirements, for example by e-mail to [email protected] You also have the right to free, written information about the data we have stored about you and how it is used as well as, under certain circumstances, a right to correction, blocking or deletion of this data.

If you have further questions on data protection, please contact [email protected].