Privacy statement
HolidayCheck Group AG
This privacy statement provides you with all relevant information on the processing of your personal data (hereinafter also referred to as “data”) by HolidayCheck Group AG. It is extremely important to us that we are as transparent as possible in this regard. If you have questions or comments, please contact us at datenschutz@holidaycheck.com.
Privacy statement contents
Your personal data is processed in compliance with European data protection laws.
You are neither contractually nor legally obligated to make your personal data available. However, if you do not provide this information, the quality of the respective service may be diminished or you may not be able to use it at all.
This privacy statement provides you with information on how we process your data when you access or use our website holidaycheckgroup.com/ (including all subdomains operated as part of this domain).
The Controller for the processing of your personal data within the scope of this privacy statement is HolidayCheck Group AG, Arabellastraße 23, D-81925 Munich.
We have appointed the following person as data protection officer:
Herr Jürgen Kempter
c/o Hubert Burda Media Holding KG
Corporate Data Privacy
Hauptstraße 130
77652 Offenburg
If you have questions for our data protection officer, please use the following e-mail address: datenschutzbeauftragter@holidaycheck.com.
We collect and process your data primarily to provide you the desired services.
When you e-mail us, we process the necessary data to handle your request.
Processed data:
Your email address as well as the data contained in your email.
Legal basis:
The legal basis for the processing is our legitimate interest pursuant to Art. 6 para. 1 letter f GDPR, whereby our legitimate interests are in the provision of a functioning customer service and the processing of requests.
When you apply for a job via our Website, we process the necessary data to conduct the application process.
Processed data:
Name, address, contact information and communications data such as a phone number, email address as well as the contents of your application materials.
Legal basis:
The legal basis for the processing is our legitimate interest pursuant to Art. 6 para. 1 letter f GDPR, whereby our legitimate interests are in the proper conducting of the application process.
When you access one of our websites, available at holidaycheckgroup.com (including all subdomains operated as part of this domain), we process the necessary data to find out how users use our website and to adapt it correspondingly.
For this purpose, we use Google Analytics, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Ireland.
https://policies.google.com/privacy, https://tools.google.com/dlpage/gaoptout?hl=de.
The data processed in connection with the use of our website is not assigned to a natural person but processed pseudonymised using cookie IDs or other identifiers.
You can deactivate/delete the cookies and block the placing of new cookies in the settings of your browser or place an objection cookie (opt-out cookie) with the provider to prevent the provider from storing and processing your data in the future. More information on this can be found by clicking on the hyperlink above. However, please note that your preferences will be lost when you delete the opt-out cookie.
We have integrated various social plug-ins on our website. When you click on these plug-ins, the respective provider will place cookies in your device and collect data on your visit to our website.
Facebook plug-ins
We use plug-ins of the social network facebook.com. These plug-ins are operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. When you click on the integrated Facebook button, your browser will connect to the servers of Facebook. The content of the plug-in is transmitted to your browser straight from Facebook.
That allows Facebook to track your visit to our website, even if you do not have a Facebook account or are not logged in to Facebook, and match it to a Facebook account if you are registered at Facebook or recently visited a Facebook page or a page with content from Facebook. Furthermore, additional information such as your IP address may be transmitted to Facebook from your browser.
More detailed information on the nature, purpose, extent, further processing and use of your data by Facebook as well as additional information on your respective rights and the setting options to protect your privacy is provided in the data protection policy of Facebook.
Link: Facebook’s privacy policy (https://www.facebook.com/about/privacy/)
Twitter plug-ins
We use plug-ins of the Twitter microblogging service. These plug-ins are operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA. When you click on the integrated Twitter button, your browser will connect to the servers of Twitter. The content of the plug-in is transmitted to your browser straight from Twitter.
That allows Twitter to track your visit to our website, even if you do not have a Twitter account or are not logged in to Twitter, and match it to a Twitter account if you are registered at Twitter or recently visited a Twitter page or a page with content from Twitter. Furthermore, additional information such as your IP address may be transmitted to Twitter from your browser.
More detailed information on the nature, purpose, extent, further processing and use of your data by Twitter as well as additional information on your respective rights and the setting options to protect your privacy is provided in the data protection policy of Twitter.
Link: Privacy information from Twitter (https://twitter.com/privacy)
Xing plug-ins
We use plug-ins of the Xing network. These plug-ins are operated by New Work SE Dammtorstraße 30, 20354 Hamburg, Germany. When you click on the integrated Xing button, your browser will connect to the servers of Xing. The content of the plug-in is transmitted to your browser straight from Xing.
That allows Xing to track your visit to our website, even if you do not have a Xing account or are not logged into your Xing account, and match it to a Xing account if you are registered at Xing or recently visited a Xing page or a page with content from Xing. Furthermore, additional information such as your IP address may be transmitted to Xing from your browser.
More detailed information on the nature, purpose, extent, further processing and use of your data by Xing as well as additional information on your respective rights and the setting options to protect your privacy is provided in the data protection policy of Xing.
Link: Privacy information from Xing (https://www.xing.com/app/share?op=data_protection)
LinkedIn plug-Ins
We use plug-ins of the LinkedIn network. These plug-ins are operated by the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. When you click on the integrated LinkedIn button, your browser will connect to the servers of LinkedIn. The content of the plug-in is transmitted to your browser straight from LinkedIn.
That allows LinkedIn to track your visit to our website, even if you do not have a LinkedIn account or are not logged into your LinkedIn account, and match it to a LinkedIn account if you are registered at LinkedIn or recently visited a LinkedIn page or a page with content from LinkedIn. Furthermore, additional information such as your IP address may be transmitted to LinkedIn from your browser.
More detailed information on the nature, purpose, extent, further processing and use of your data by LinkedIn as well as additional information on your respective rights and the setting options to protect your privacy is provided in the data protection policy of LinkedIn.
Link: Privacy information from LinkedIn (https://www.linkedin.com/legal/privacy-policy)
Within the scope of business cooperation with our service providers, suppliers, and other business partners, we also process personal data of contact persons contained in offers, order confirmations, invoices, or general communication. In doing so, we primarily process personal data that the data subjects themselves provide to us within the scope of contractual and business relationships or that we receive from the respective contractual and business partners, for example in the context of processing an inquiry or an order. Processing takes place exclusively in a professional context and only to the extent necessary for the execution of the business relationship.
Data processing within the framework of business cooperation is carried out in particular for the purpose of executing contracts concluded with you or your company or for the purpose of implementing pre-contractual measures. This includes, in particular: the processing of purchase and delivery contracts (e.g., processing of purchase and sales inquiries, authentication of contractual partners, preparation and signing of contract documents, execution of purchases and sales, billing and processing of purchase price payments), processing of service and work contracts, and other contractual relationships (e.g., processing and reviewing relevant offers and inquiries, preparing and signing contract documents, processing payments, and sending information letters).
Further data processing is carried out on the basis of legal requirements, for example, to fulfill tax and other legal control and reporting obligations, as well as for auditing by tax or other authorities and to comply with legal retention periods.
We also process your data to protect our legitimate interests for the following purposes: optimal contact management/relationships, including with regard to our business partners’ employees, optimization of our business processes (including through the use of AI technology), centralization or outsourcing of corporate functions, or the assertion and defense of legal claims.
If you also contact us via video call as part of our business relationship, we occasionally record conversations for quality assurance, training purposes, and to improve our service quality, and then transcribe them (also with the help of AI technologies). However, recording only takes place if you give us your express consent to do so.
We delete your personal data as soon as it is no longer required for the purposes for which we process it. We delete transaction-related information (e.g. relating to a specific contract or order relationship) after completion of the respective transaction, e.g. fulfillment of a delivery contract, with a period of three years after the end of the respective calendar year, unless these are subject to longer statutory retention obligations (such as the six- or eight-year retention period in accordance with Section 257 of the German Commercial Code).
Processed data:
First and last name, further personal details, business contact details (e.g., email address, telephone number, company address if applicable), job title or department name, technical data required for the communication process
Processed data relating to the video call recording
Contents of the conversation, in particular personal master data, contact details
Legal basis:
The processing is carried out primarily for the purpose of executing contracts concluded with you or your company or for the purpose of implementing pre-contractual measures within the meaning of Art. 6 (1) sentence 1 lit. b GDPR.
The relevant emails and their attachments are stored for the purpose of complying with legal retention obligations and thus on the basis of Art. 6 para. 1 sentence 1 lit. c GDPR. Legal obligations to retain data may arise in particular from the provisions of the German Fiscal Code (AO) or the German Commercial Code (HGB).
In addition, processing may also be carried out to safeguard our overriding legitimate interests within the meaning of Art. 6 para. 1 sentence 1 lit. f GDPR.
The legal basis for processing with regard to the processing of video call recordings is your consent in accordance with Art. 6 para. 1 lit. a GDPR.
Transfer within the Group
The companies of the HolidayCheck Group are working closely together in providing their services. Therefore, other HolidayCheck Group companies will also access your data, if necessary, to support HolidayCheck Group AG in providing its services.
Transfer to external service providers
As it provides its services, the HolidayCheck Group AG also makes use of external service providers, such as hosting or software service providers or service providers in the context of the application processes. In this context, data is only processed for the purposes specified by the HolidayCheck Group AG, in accordance with its instructions and under its supervision.
Transfer to other Controllers
We use your personal data exclusively for internal purposes. Data is not forwarded to any third parties.
Transfer to the authorities
If a law or other type of regulation or the decision of an authority or a court compels us to do so, we will transfer data to the necessary extent to the authorities or other third parties.
Transfer to third countries
Data will be transferred to third countries only within the scope of and in compliance with the strict conditions set out in Art. 44 – 49 GDPR. Correspondingly, we will only transfer the data based on an adequacy decision of the EU Commission or, we ensure an adequate level of data protection by means of the EU Standard Contractual Clauses.
We do not store the data longer than required for the respective purpose. If we no longer need your data, then it will be deleted on a regular basis unless we are obligated to retain it. This obligation may arise from commercial and tax law or as part of a legal dispute.
If you submit an application, we will delete the data six months after the application process has ended. Insofar as there are no legal obligations to retain data, we would also be pleased to amend or delete such data at an earlier date upon your request. Please contact our HR department accordingly.
We store data that we collect and process in the context of communication with you for a maximum of 2 years.
If the respective conditions are met, you, as a data subject, have the following rights based on GDPR: Right of access to stored data (Art. 15 GDPR), right of rectification of incorrect data (Art. 16 GDPR), Right to erasure of the data (Art. 17 GDPR), Right to restriction of processing (Art. 18 GDPR), Right to object to unreasonable data processing (21 GDPR), right to data portability (Art. 20 GDPR).
To exercise these rights, please use the contact data listed in I. 2. or send an email to datenschutz@holidaycheck.com.
VII. Changes to this privacy statement
We are continuously working to improve existing services and develop new ones. As a result, or due to regulatory changes, we regularly adapt this privacy statement to new developments in order to always provide you with the necessary information.
In case of significant changes, we will notify you immediately. In addition, we recommend that you read this privacy statement from time to time.