Privacy Policy (GDPR) | Askania Travel

The protection of your personal data is of particular concern to us. We therefore process your personal data exclusively on the basis of the statutory provisions (GDPR, BDSG, TMG/DDG). Below we inform you comprehensively about how we handle your data.

1. Controller

The controller responsible for data processing on this website is:

Askania Travel – André Spengler
Maxim-Gorki-Straße 11
06333 Hettstedt
Germany

Phone: +49 (0) 3476 8099822
Email: [email protected]

(Note: The business address is not a stationary travel agency. Customer visits take place virtually or in the field.)

2. General and Legal Bases

We treat your personal data confidentially and in accordance with the statutory data protection regulations. Protecting your privacy is very important to us; therefore, the use of our website is generally possible without providing personal data.

Legal bases for processing:

Art. 6 (1) lit. b GDPR: Processing for the performance of contracts (e.g. travel bookings).
Art. 6 (1) lit. a GDPR: Processing based on consent (e.g. newsletter, tracking).
Art. 6 (1) lit. c GDPR: Processing for compliance with legal obligations (e.g. tax retention periods).
Art. 6 (1) lit. f GDPR: Processing to protect legitimate interests (e.g. IT security, direct marketing), provided your interests do not override.

Encryption:
To protect your data from unauthorised access, this website uses TLS encryption (Transport Layer Security). You can recognise this by the padlock symbol in your browser's address bar (https://).

3. Server Log Files & Security

When you visit our website, information is automatically stored in server log files (e.g. IP address, date, time, browser type, page accessed).

Storage duration: The IP address is stored for 7 days to detect faults and ensure IT security (Art. 6 (1) lit. f GDPR). It is then deleted or anonymised.

Cloudflare (CDN): We use Cloudflare to optimise the security and loading time of the website. Cloudflare routes traffic through a global network. Legal basis is Art. 6 (1) lit. f GDPR.

4. Cookies & Consent Management

Our website uses cookies. These are small text files that are stored on your device.

Strictly necessary cookies: These are absolutely necessary for the functioning of the page (e.g. session cookies, consent tool settings).
Functional / performance / marketing cookies: These are only set with your explicit consent (opt-in via our cookie banner).

You can withdraw your consent at any time or deactivate cookies in your browser. Detailed information on the cookies used can be found in our separate cookie policy.

5. Third-Party Services & Tracking

Note: All analysis and marketing tools listed below are only loaded after your active consent via our consent tool.

5.1 Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited.

Function: Analysis of website usage using cookies. The data is pseudonymised.
IP anonymisation: The IP address is truncated within the EU. Only in exceptional cases is the full IP address transmitted to servers in the USA.
Objection: You can prevent the storage of cookies via your browser or install Google's opt-out plugin.

Legal basis: Art. 6 (1) lit. a GDPR (consent).

5.2 Google Fonts (Local Integration)

For the uniform display of fonts, we use Google Fonts. These are integrated locally on our server. No connection is made to Google's servers; your IP address is not transmitted to Google.

5.3 Google reCAPTCHA

To protect our forms (e.g. contact form), we use reCAPTCHA from Google. The service checks whether the input is made by a human or a bot. Data (IP, dwell time) is transmitted to Google. Legal basis is Art. 6 (1) lit. f GDPR (protection against misuse).

5.4 Google Maps

We use Google Maps to display our catchment area. Use only takes place after your consent. By calling up the map, data is transmitted to Google. Legal basis: Art. 6 (1) lit. a GDPR.

5.5 YouTube Videos

We embed YouTube videos. The videos are embedded in "extended data protection mode", but are only loaded after your explicit consent via the consent tool. Legal basis: Art. 6 (1) lit. a GDPR.

5.6 Social Media Plugins (Facebook / Meta, Twitter / X)

Plugins from social networks are integrated on our site. We use a two-click solution / consent solution: No direct connection to Facebook or Twitter servers is established before you actively consent. Only after consent are data transmitted to the providers.

5.7 Facebook Pixel (Meta)

For conversion measurement, we use the Facebook Pixel. This tool measures how users react to our ads. The data is only transmitted to Meta (Ireland/USA) after consent (Art. 6 (1) lit. a GDPR).

5.8 Matomo (formerly Piwik)

Alternatively or additionally, we use Matomo for anonymised web analysis. The IP address is anonymised before storage. No data is passed on to third parties.

5.9 Microsoft Bing Ads & Tag Management

We use Bing Ads (Microsoft) for conversion tracking and the Signal Tag Management System to control marketing tools. Here, too, data is only collected after your consent.

6. Newsletter

If you would like to receive our newsletter, we need your email address and a declaration that you agree to receive it (double opt-in procedure).

Tracking: Our newsletters contain web beacons (tracking pixels) to recognise whether and when an email was opened and which links were clicked. This data is used for statistical evaluation and optimisation.

Withdrawal: You can unsubscribe from the newsletter at any time via the unsubscribe link at the end of each email. Legal basis: Art. 6 (1) lit. a GDPR.

7. Storage Duration

We store personal data only as long as necessary to fulfil our contractual and legal obligations.

Contract data: Stored for the duration of the business relationship.
Legal periods: Due to commercial and tax regulations (HGB, AO, BGB), retention periods of 2 to 10 years apply.
Limitation: After termination of the contract, data is stored for the duration of the statutory limitation periods (usually 3 years, in exceptional cases up to 30 years) and then deleted.

8. Data Transfer to Third Parties & Third Countries

Within the EU/EEA: Data is only passed on to service providers (processors according to Art. 28 GDPR) that we need to process your trip (e.g. tour operators, airlines, hotels, insurance companies) or for IT services.

Third countries (e.g. USA): If data is transferred to third countries (e.g. Google, Meta), we ensure an adequate level of data protection (e.g. through EU standard contractual clauses / SCCs or adequacy decisions).

9. Profiling & Automated Decisions

For customer advice and needs-based offer creation, we partly use automated procedures (profiling according to Art. 4 No. 4 GDPR) to assess your potential interest in travel destinations. No automated decision-making within the meaning of Art. 22 GDPR takes place that has legal effect on you. You have the right to object to this profiling at any time.

10. Your Rights as a Data Subject

Under the GDPR, you have the following rights:

Access (Art. 15): Right to information about your processed data.
Rectification (Art. 16): Right to correction of inaccurate data.
Erasure (Art. 17): Right to deletion ("right to be forgotten"), provided no legal retention obligations conflict.
Restriction of processing (Art. 18): Right to restrict processing.
Data portability (Art. 20): Right to receive the data in a structured format.
Withdrawal of consent (Art. 7 (3)): You can withdraw consent at any time with future effect.
Complaint (Art. 77): Right to lodge a complaint with a data protection supervisory authority. A list of the responsible authorities can be found at: www.bfdi.bund.de.

11. Right to Object (Art. 21 GDPR)

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, insofar as there are grounds arising from your particular situation.

To exercise your right of withdrawal or objection, simply send an email to: [email protected]

12. Changes to this Policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services (e.g. when introducing new services).

Askania Travel – André Spengler
Last updated: 10 September 2026