Privacy Policy

In this notice on data protection, Jassu Reisen GmbH (‘Jassu Reisen’) informs you how personal data are collected, processed and used when you contact as via our website / via email, and about the rights data subjects have. As a rule, we will only collect, process and use your personal data where this is allowed under the German Law on Data Protection (Bundesdatenschutzgesetz -BDSG) and the General Data Protection Regulation (GDPR) and national data protection regulations.

§ 1 Name und Contact Details of the Controllers; No In-house Data Protection Officer

Responsible under Art. 4 no. 7 of the GDPR are the Managing Directors of Jassu Reisen GmbH, Mr. Jan Hürter and Mr. Ulrich Hürter, Adrianstr. 107, 53227 Bonn, info@jassu.de, www.jassu.de, Telephone: +49 (0)228 92626-0, Fax: +49 (0)228 92626-23 (see the imprint).

A data protection officer has not been appointed, and Jassu Reisen is not obliged under the law to appoint a data protection officer.

The data processing controllers have implemented various technical and organisational measures to guarantee, to the extent possible, consistent protection of the personal data processed on this site. However, there may always be security gaps when data is transferred on the web, and therefore it is not possible to guarantee absolute security. For this reason, you may give us your personal data otherwise, for instance via telephone.

§ 2 Collection and Storage of Personal Data and the Nature and Purpose of its Use

We use cookies and analytics software (tracking tools) on our website. Please find details on cookies and tracking tools in the Data Protection Policy on our website.

When you contact us via email or by completing the contact form, we will collect from you the required personal data (name, first name, address, email address, telephone number (fixed-line and / or mobile number)) on the web form. We collect and retain these data so that we can identify you as a customer, answer your questions or process your order of a catalogue or your travel booking. Data processing for the purpose of contacting us is prompted by your contact request and is required as per Art. 6(1) sentence 1 (b) of the GDPR for the specified purposes to properly process your non-binding inquiry, order of a catalogue or your booking request and for the mutual performance of obligations under the agency’s agreement.

The personal data entered by the data subject are collected and stored exclusively for internal use by the controller and for own purposes. The controller may request transfer to one or more contract processors that also use personal data exclusively for internal purposes which is attributable to the controller.

By registering on the website of the controller, the IP address, assigned by the Internet service provider (ISP) and used by the data subject, date and time of the registration are also stored. The storage of this data takes place against the background that this is the only way to prevent the misuse of our services, and, if necessary, to make it possible to investigate committed offenses. Insofar, the storage of this data is necessary to secure the controller. These data are not passed on to third parties unless there is a statutory obligation to pass on the data, or if the transfer serves the aim of criminal prosecution.

The registration of the data subject, with the voluntary indication of personal data, is intended to enable the controller to offer the data subject content or services that may only be offered to registered users due to the nature of the matter in question. Registered users are free to change the personal data specified during their registration at any time, or to have them completely deleted from the data stock of the controller.

The data controller will, at any time, provide information upon request to each data subject as to what personal data are stored about the data subject. In addition, the data controller will correct or erase personal data at the request or indication of the data subject, insofar as there are no statutory obligations to retain the data. The entirety of the controller’s employees are available to the data subject in this respect as contact persons at info@jassu-reisen.de.

We collect, process and use the data you give us to enable you to use our web offer (usage data) and insofar as is necessary for the conclusion, implementation or termination of the contract (performance of contract) and for providing customer support. The data are not passed on to third parties without your explicit consent.

Live chat tool Userlike

You can use Userlike on our site. Userlike is a live chat software. The chat is integrated in the source code. This is done using a script. When you use the chat, you automatically use Userlike services. The data collected include: chat history, IP address at the time of the chat and country of origin. These data are not passed on to third parties and are for security and internal statistics only. The data do not serve to identify you as a person. They are not kept. They are deleted after the chat. Please read the Userlike privacy policy to find information on the purpose and scope of the collection of data and on how Userlike processes and uses the data and your rights and privacy settings:

https://www.userlike.com/de/terms.

§ 3 Deletion of Data and Storage Period:

We will store your personal data only for as long as this is necessary for the specified purpose (processing your request or contract handling) and for performing the contract. We will delete the data when it is no longer necessary to retain them, or restrict the processing of the data should there be a statutory obligation (Art. 6(1) (c) of the GDPR) to retain the data. The criterion for the duration of storage of personal data is the statutory retention period applicable in the specific case. Upon the expiration of that period, the relevant data are routinely erased, provided they are no longer necessary for contract performance or initiation.

You can object to your data being used or processed for purposes of advertising, market research or opinion polling by sending an email to: info@jassu-reisen.de.

In § 5 and below, you will find information on how we may use the services offered by external service providers for individual features of the range of services we offer or use your data for advertising purposes. We also specify the criteria we use to determine retention periods.

Where there is no legal basis for the processing of personal data, we will obtain the consent of the data subject.

§ 4 Your Rights as Data Subject

According to Art. 7(3) of the GDPR, you have

the right to withdraw your consent to us, wherever you gave consent to data processing, at any time. As a result, we will no longer be authorised to continue the processing of data that was carried out on the basis of your consent (right of withdrawal).

According to Art. 15 of the GDPR, you have

the right to be informed about your personal data we process and the purposes of processing, the category of personal data, the recipients or categories of recipients vis-à-vis whom such data have been or will be disclosed, the projected storage period, or about
the right to rectification or erasure (‘right to be forgotten’);
the right to restriction of the processing;
the right to object to the processing;
the right to data portability;
the right to know where your data come from if not collected by us;
the implementation of automated decision-making including profiling and, where appropriate, the right to request detailed information on its features.

According to Art. 16 of the GDPR, you have

the right to request that any inaccurate personal data held by us is rectified immediately or incomplete personal data is completed immediately.

According to Art. 17 of the GDPR, you have

the right to request that personal data held by us is erased unless the processing of the data is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of the public interest or for the establishment, exercise or defence of legal claims.

According to Art. 18 of the GDPR, you have

the right to request that we restrict the processing of your personal data where you challenge the accuracy of the data, where the processing is unlawful but you do not want the data erased while we no longer need the data but you need the data for the establishment, exercise or defence of legal claims, or where you have objected to the processing under Art. 21 of the GDPR.

According to Art. 20 of the GDPR, you have

the right to receive your personal data you have provided to us in a structured, commonly used and machine-readable format, or to request that it is transmitted to another controller; and

you have the right according to Art. 77 of the GDPR

to complain to a data protection supervisory authority about our processing of your personal data. Usually, you can contact the supervisory authority at your usual place of residence or place of work or at the place of our company’s registered office.

Right to object:

Where your personal data are processed on the basis of legitimate interests within the meaning of Art. 6(1) sentence 1 (f) of the GDPR, you are entitled according to Art. 21 of the GDPR to object to the processing of your personal data where the reasons for your objection are related to your individual circumstances. You may assert your right to withdraw or your right to object by sending an email to info@jassu-reisen.de.

To exercise the rights listed above, or for information requests, other requests or suggestions on the topic of data protection, please contact us at the address given above or at info@jassu-reisen.de.

§ 5 Transfer of Data to Third Parties

Your personal data are not passed on to third parties for purposes other than those listed below.

We will only pass on your personal data to third parties if:

you have given your explicit prior consent under Art. 6(1) sentence 1 (a) of the GDPR;
transfer of the data is necessary for the establishment, exercise or defence of legal claims as set forth in Art. 6(1) sentence 1 (f) of the GDPR and there is no reason to assume that you have an overriding legitimate interest that your data is not transferred;
there is a legal obligation to transfer the data under Art. 6(1) sentence 1 (c) of the GDPR;
it is permitted under the law and it is necessary pursuant to Art. 6(1) sentence 1 (b) of the GDPR to handle contracts with you.

§ 6 Social Media Plug-Ins

Our website uses social plugins (‘plugins’) for the social network facebook.com, operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, United States (‘Facebook’). The plugins can be recognized by one of the Facebook logos (white ‘f’ on blue tile / ‘thumb up’ sign) or the words ‘Facebook Social Plugin’. When you access a page of our website that contains such a plugin, your browser will create a direct connection to the Facebook servers. Facebook will directly transfer the content of the plugin to your browser and embed the content into the website. Therefore, we do not have control over the scope and content of the data Facebook collects using the plugin and inform you to the best of our knowledge (Facebook provides information here: https://www.facebook.com/help/186325668085084).

In the process of embedding the plugin, Facebook will be informed that you or your browser accessed the corresponding page of our website. If you are logged into Facebook, Facebook can associate your visit with your Facebook account. If you interact with the plugins, for example by clicking on the like or share button or by leaving a comment, the corresponding information will be transferred directly by your browser to Facebook and stored there. Furthermore, the information will be published on Facebook and made visible to your Facebook friends.

Facebook may obtain your IP address and save it there even if you are not a Facebook

Facebook can use this information for advertising purposes, market research and for making improvements to Facebook pages. To this end, Facebook will create profiles based on usage, interests and relations, for instance to analyse how you use our website regarding the ads that you see on Facebook, to inform other Facebook users about your activities on our website and to provide other services associated with the use of Facebook.

If you are a member of Facebook and you do not want Facebook to collect data about you on our website and match it with your data stored at Facebook or with your Facebook account, then be sure to log out of Facebook before visiting our website and delete any cookies (see § 5 above).

Please read Facebook’s privacy policy to find information about the purpose and scope of the collection of data and on how Facebook processes and uses the data and your rights and privacy settings: https://de-de.facebook.com/about/privacy.

b) YouTube

This website uses at least one plugin from YouTube, which is part of Google Inc., located at 1600 Amphitheatre Parkway, Mountain View, CA, United States. If you visit one of our website pages featuring a YouTube plugin, a connection to the YouTube servers is established. Here the YouTube server is informed about which of our pages you have visited. Should you be logged in to your YouTube account, you would allow YouTube to associate your browsing behaviour directly with your personal pro You can prevent this by first logging out of your YouTube account. For more information about the collection and use of your data by YouTube, please read their privacy policy:

https://www.google.de/intl/de/policies/privacy/

§ 7 Newsletter / Newsletter Subscription

Jassu Reisen regularly informs customers and partners about company offers in a newsletter that users may subscribe to. When you subscribe to our newsletter using the input mask, the personal data (name, address, email address) you have provided during your subscription is transmitted to the controller and stored. To receive our newsletter, you must (1) have a valid email address and (2) have subscribed to our newsletter. For legal reasons, we will send you a confirmation email to the email address you have given us on your subscription as we use the double opt-in method. With the confirmation email we can verify whether the holder of the email address has authorised the receipt of the newsletter. Jassu Reisen may have data transferred to a contract processor, for instance a lettershop, who also uses the personal data exclusively for internal purposes, for which the controller will be responsible. Your data will not be passed on to unauthorized third parties. When you subscribe to our newsletter, we also save the IP address assigned by the Internet Service Provider (ISP) of the computer system at the time of registration as well as the date and time of your registration. We collect this data so that we will be able to investigate a (possible) misuse of your email address in the future. The collection of the data serves as a legal protection for the processing controller.

The legal basis for the processing of the data following your subscription to our newsletter is Art. 6(1) sentence 1 (f) of the GDPR. The data will be deleted as soon as they are no longer required to fulfil the purpose of their collection. Therefore, your email address will be saved for the time your subscription to our newsletter is valid.

The personal data we collect on the subscription to our newsletter are used only to send our newsletter. Moreover, newsletter subscribers may receive information via email where this is required for the operation of our newsletter service or registration, as may be the case when we change our newsletter offer or make any technical changes.

You as the data subject are entitled to unsubscribe from our newsletter at any time. You may at any time withdraw your consent to the storage of personal data you have given us for the subscription to our newsletter. Each newsletter has a link you can use to withdraw your consent. Moreover, you can unsubscribe from the newsletter at any time on the website of the processing controllers or otherwise notify the processing controllers that you want to unsubscribe from the newsletter. You may object to your data being used or processed for purposes of advertising, market research or opinion polling and unsubscribe from the newsletter at any time free of charge by sending an email to: info@jassu-reisen.de.

§ 8 Contract Data Processing

We have concluded a contract on the process of contract data processing with our email marketing service provider CleverReach. This contract guarantees that our service provider will comply with all aspects of the strict German data protection law on the sending of the newsletter. This also serves to guarantee that your data will be stored only within the EU and with a high level of protection. Your data will not be stored on servers outside the EU.