Our Privacy Policy

Updated: June 2021

Privacy Policy

The following policy provides information regarding the collection of personal data (A) when

  • Visiting our website (I)
  • Contacting us / Sending a customer enquiry (II)
  • Registering for a user account / Logging in (III)
  • Creating user content (IV)
  • Making a booking (V)
  • Signing up for our newsletter (VI)
  • Taking part in giveaways (VII)
  • Visiting our fan page on Facebook or Instagram (VIII).

It also covers your rights in these contexts (B).

Personal data include any information that personally refers to you, such as your name, address, email address, and user behaviour.

The party responsible according to Art. 4(7) of the EU General Data Protection Regulation (GDPR) is:

Camping.info GmbH

Oranienburger Str. 27

10117 Berlin, Germany

Email: office@camping.info

(For more information, see: Imprint)

Our Data Protection Officer:

Bugl & Kollegen

Gesellschaft für Datenschutz und Informationssicherheit GmbH

Sedanstraße 7, D-93055 Regensburg

E-Mail: kontakt@buglundkollegen.de

This site uses SSL or TLS encryption to protect and secure the transfer of private content, such as bookings or enquiries, that you send to us, the site operators. You will know that the connection is encrypted by the fact that the “http://” in the address field changes to "https://" and a lock symbol appears to the left of the URL.

I. Collection of personal data when using our website / app

1. General

When you use the website purely to gather information, meaning you do not register or submit any further information, we only collect the personal data that your browser sends to our server. If you’d like to look at our website, we collect the following data, which is technically necessary to show our website to you and to guarantee its stability and security:

  • Your device’s IP address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (exact pages)
  • Access status / HTTP status code
  • Amount of data transferred
  • The website, from which the request originated
  • Browser
  • Operating system and its interface
  • Browser software language and version

The legal basis for temporarily saving these data is point (f) of Art.6(1) of the GDPR. These data will be deleted as soon as they are no longer required for the fulfilment of the aforementioned purpose.

In addition to the data mentioned above, cookies are saved on your device when you use our website. Cookies are small text files that are assigned to the browser you are using, saved on your hard drive, and through which certain information flows to the location that sets the cookie (here, by us). Cookies cannot run programmes or infect your computer with viruses. Their purpose is to make the internet more user-friendly and more effective.

Transient cookies are erased automatically when you close the browser. These include session cookies, which save a Session ID, which is assigned to your browser’s different requests throughout the entire session. This means that your device will be recognised when you return to our website. Session cookies are erased when you log out or close the browser.

Persistent cookies are removed after a specified amount of time, and this time period can vary by cookie. You can delete saved cookies in the security settings of your browser at any time.

You can configure your browser settings according to your preferences and, for example, limit or reject cookies. Please note: It is possible that you may not be able to use all functions of this website if you deactivate cookies.

The legal basis for using technically necessary cookies to fulfil the purposes of the user agreement (see Terms of Use) and/or business management (see Terms of Service B2B/B2C) is point (b) of Art. 6(1) of the GDPR or, if you have given your expressed consent, point (a) of Art. 6(1) of the GDPR and, when there are legitimate interests, point (f) of Art. 6(1) of the GDPR. Please also carefully note the following information regarding the use of third-party tools and cookies.

2. Third-Party Tools and Cookies
a) Google Analytics

(1) This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). This service uses cookies, which are text files saved on your computers that make it possible to analyse the way you use the website. The information generated by the cookie about your use of the website is typically transferred to a Google server within the EU and saved there. Google uses this information on behalf of the site operator in order to assess your use of the site, to put together reports about website activity, and to deliver other services relating to the use of the website and the internet in general to the website operator.

(2) The IP address relayed by your browser as part of Google Analytics will not be merged with other Google data.

(3) You can prevent cookies from being saved on your device by changing the settings of your browser. Please note, however, that if you do, you may not be able to use some of the website’s functions in full.

(4) This website uses Google Analytics with the “anonymizeIp()” extension. This means that IP addresses are processed in a shortened form, preventing it from being linked to a particular individual. If the data collected about you is personally identifiable, it will be excluded and deleted immediately.

(5) We use Google Analytics to analyse the way our website is used and to improve it accordingly. Using the statistics gathered, we can improve our offers and make them more appealing to you as a user. In the exceptional case that personal data is transferred to the USA, Google is subject to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework. The legal basis for using Google Analytics is point (a) of Art. 6(1) of the GDPR. ( 6) Contact information of the third-party: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. “For users based in the European Economic Area or Switzerland, the data controller responsible for your information is Google Ireland Limited, unless otherwise stated in a service-specific privacy notice. In other words, Google Ireland Limited is the Google affiliate that is responsible for processing your information and for complying with applicable privacy laws.” (https://policies.google.com/privacy) General privacy information: https://policies.google.com/privacy?#infocollect Terms of Service: https://marketingplatform.google.com/about/analytics/terms/us/

b) Google Tag Manager

We use Google Tag Manager on our website. This is a service provided by Google Dublin Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

By using Google Tag Manager, we can incorporate a variety of codes and services into our website in an orderly and simplified way. Google Tag Manager implements tags or triggers integrated tags. When it triggers a tag, Google may process information, including personally identifying data. This does not preclude the possibility that Google also transfers this information to a server in a third-party country.

Further information about Google’s current Privacy Shield Certification and other relevant information about data processing by Google when using Google services is available in their privacy policy. In particular, Google Tag Manager processes the following pieces of personal data:

  • Online markers (including cookie identifiers)

  • IP address

You can find more detailed information about the Google Tag Manager here: https://www.google.com/analytics/tag-manager/use-policy/, or here: https://policies.google.com/privacy under the paragraph about "Information we collect as you use our services.''

To use Google Tag Manager, we have signed a contract for order processing with Google. This means that Google processes the data on our account in order to trigger stored tags and feature services on our website. Google can transfer this information to third parties if it is legally required to do so, or if they process these data on Google’s behalf.

In the event that you have deactivated individual tracking services (for example, rejecting a cookie), this deactivation applies to all applicable tracking tags implemented by the Google Tag Manager.

We use Google Tag Manager to implement a variety of services simply and clearly. Furthermore, using Google Tag Manager optimises loading times for these different services.

The legal basis for processing personal data as described here is point (a) of Art. 6(1) of the GDPR. By using Google Tag Manager, we can reduce our maintenance costs, the website’s loading times, as well as server and traffic strain. You have the right to object. You can prevent all Google Tag Manager tags from sending. Please note, though, that if you deactivate them, you will not be able to use our website completely. Processed data will only be saved as long as necessary for its intended purpose or as long as legally required.

c) Facebook, Custom Audiences, and Facebook Marketing Services

(1) On the basis of your consent (point (a) of Art. 6(1) of the GDPR), we implement “Facebook Pixel” for the purpose of analysing, optimising, and conducting business operations for our online offers. This is a service provided by the social network, Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are located in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

(2) Facebook is certified under the Privacy Shield framework, thereby guaranteeing that they will comply with European privacy rights (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

(3) By using Facebook Pixel, Facebook is able to determine target audiences for showing advertisements (“Facebook ads”) to visitors of our online offers. We implement Facebook Pixel so that any Facebook ads we have activated are only shown to Facebook users that have indicated an interest in our online offers, or that exhibit any particular characteristics (e.g. interest in certain topics or products, determined on the basis of websites visited) that we have communicated to Facebook (“Custom Audiences”). By using Facebook Pixel, we work to ensure that our Facebook ads meet users’ potential interests and are not seen as an annoyance. With Facebook Pixel, we can also trace the effectiveness of Facebook ads for the purpose of statistics and market research, by seeing whether a user was brought to our website by clicking on a Facebook ad (“conversion”).

(4) Facebook embeds the Facebook Pixel directly when you visit our website, and it allows a cookie, a small text file, to be saved on your device. When you then log in to Facebook or visit Facebook when logged in, your visit to our online service is noted in your profile. The data collected about you is anonymous for us, so we cannot draw any conclusions about the identity of the user. The information is saved and processed by Facebook, however; therefore, it is possible for Facebook to create a connection to the respective user profile, and these data can be used for their own market research or advertising purposes. Should we transfer data to Facebook for comparison’s sake with regard to the process of using Facebook Pixel, this information will be encrypted locally in the browser, and then sent to Facebook through a secure https:// connection. The sole purpose of this is to compare it with the data encrypted by Facebook.

(5) Facebook processes the data in accordance with the Facebook Data Usage Policy. For more general information regarding the presentation of Facebook ads, see their Data Policy: https://www.facebook.com/policy.php. Specific information and details about Facebook Pixel and how it works can be found in the Facebook Ads Help Center: https://www.facebook.com/business/help/651294705016616.

(6) You have the right to object to the collection of your data via Facebook Pixels and the use of your information for showing Facebook Ads. To set which types of ads you are shown on Facebook, you can visit Facebook’s Ad Preferences page and follow the instructions for changing the settings for usage-based advertising there: https://www.facebook.com/settings?tab=ads. Settings are set independently from the platform, meaning they will apply to all devices, including computers and mobile devices.

d) Snowplow

This website uses the open source analysis service Snowplow from Snowplow Analytics Ltd, The Roma Building, 32-38 Scrutton Street EC2A 4RQ London, UK ("Snowplow"). In this connection Snowplow stores cookies on your computer with the functions and contents listed below.

(1) Nature and purpose of the processing This website uses the data collected via the Snowplow cookie to provide authentic coverage measurement. For this purpose it is imperative that the users concerned are recognised during the measurement carried out on our server. On the basis of this coverage measurement, we create an (anonymous) report on the number of users, sessions and page views for our customers (service providers) in order to encourage them to use and continually expand our Internet offering. For this purpose the following cookies are set on your terminal device when you access www.camping.info and its sub-pages:

Identity cookie This stores user information which is created when a user visits a page for the first time, and is updated on subsequent visits. It is used to identify users and track user activity in a domain. This cookie stores a unique identifier for each user, a unique identifier for the user's current session, the number of times a user has visited the site, the timestamp of the user's first visit, the timestamp of the user's previous visit and the timestamp of the user's current visit.

Session cookie Used to determine whether the user is in an active session on a website or whether it is a new session (i.e. the cookie is reset if it is not present or has expired).

(2) Legal basis of the processing Personal data is processed for the above-mentioned purposes on the basis of the legitimate interest of Camping.info (Art. 6 Section 1 f GDPR).

(3) Data categories Whenever www.camping.info and its sub-pages are accessed, as well as during certain user actions, the following data, for example, is transmitted to Snowplow and stored: the current timestamp; URL of the target page ("target URL") and URL of the website from which you were referred ("referrer URL"); content of the cookies; IP address, which is anonymised immediately after reaching the Snowplow server and port of the browser; name, version, language of the browser and operating system as transmitted by the browser of the website visitor, i.e. you; Snowplow user ID, Snowplow session ID (both in the form of a non-refundable random combination number (hash))

In addition, the following usage data is transmitted:

  • Name of the page accessed
  • Version number of the Javascript Snowplow Library
  • Snowplow meta information:
  • The time zone of the user (e.g. "Europe/Berlin")
  • The character set (UTF-8)
  • Information about the user's browser features:
  • screen resolution
  • browser width and height
  • colour depth in bit
  • browser performance timing

For events triggered by certain user actions, event-specific information is also transmitted, e.g. when the user clicks on the Camping.info logo:

  • se_action: click
  • se_category: logo
  • se_label: logo

(4) Recipients The only recipients of personal data are

  • authorised employees of Camping.info
  • contract processors (IT service providers) bound by instructions

Further information about Snowplow and the contract processing relationship with us ("customers") in accordance with Art. 28 GDPR can be found at: : https://snowplowanalytics.com/terms-of-service/data-processing-agreement/

(5) Storage periods In this context, data is only collected by us as long as the corresponding cookies are set and the storage period specified in the cookie tool has not expired. The data collected when you visit our website with the Snowplow cookie will be deleted as soon as it is no longer required for the purpose mentioned under (1), unless there are any further legal retention obligations.

(6) Transfer to non-EU countries Processing may also take place outside the European Union (EU) or the European Economic Area (EEA). In order to guarantee the level of data protection in this non-EU country, we have concluded a contract with Snowplow for contract processing in accordance with Art. 28 GDPR, which contains an obligation to comply with the so-called standard contractual clauses.

(7) Your rights You have the right for reasons arising from your particular situation to object at any time to the processing of personal data concerning you which is carried out on the basis of Art. 6 Section 1 f of the GDPR, including profiling based on these provisions (Art. 21 Section 1 GDPR). You can use the opt-out procedure offered by us for this purpose:

Alternatively, you can prevent the storage of cookies by means of a corresponding setting in your browser software or delete cookies set in your browser settings. For further information about your rights, please refer to B.

(8) Automatic decision-making and profiling Snowplow can be used to analyse the behaviour of visitors to the website. For this purpose we create a pseudonymous user profile. However, the scope of processing is limited to the collection of the above-mentioned data categories for the purpose mentioned under (1). No other purposes are pursued with it. Furthermore, no profiling takes place within the "Snowplow" tool, e.g. for advertising or personalised information purposes. Nor is the usage data subsequently supplemented with interests or associated with specific characteristics.

f) Hotjar

To test and optimize our website we use the service provider: Hotjar Ltd, 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta ; Website: https://www.hotjar.com; Security Measures: IP-Masking (pseudonymization of the IP address); Privacy Policy: https://www.hotjar.com/legal/policies/privacy. Cookie Policy: https://www.hotjar.com/legal/policies/cookie-information; Deletion of data: The cookies that Hotjar uses have different "lifespans"; some last up to 365 days, some last only during the current visit; opt-out: https://www.hotjar.com/legal/compliance/opt-out.

3. Social Media
a) Social Media Plug-ins

(1) We currently use the following social media plug-ins: Facebook, Twitter, Instagram, and Pinterest. For these, we use the two-click solution. That means that when you visit our site, no personal information will be sent to the plug-in providers at first. You will recognize the plug-in provider by the mark on the box above its first letter or logo. We give you the opportunity to communicate with the plug-in provider directly via the button. The plug-in provider only knows that you visited the respective page of our online services if you click on the marked field, thus activating it. The data mentioned under A.I.(1) of this privacy policy will also be transmitted. With regard to Facebook, the IP address is anonymised immediately after collection, according to information provided by the respective provider in Germany. By activating the plug-ins, your personal data will be sent to the respective plug-in provider and saved there (for American providers, this means the data are saved in the USA). Since plug-in providers predominantly gather information via cookies, we recommend going into your browser’s security settings and deleting all cookies before clicking on the greyed-out box.

(2) We have no influence over data collected, the way that data are processed, nor are we aware of the entire scope of data collection, the purpose of processing, nor the set storage periods. We also do not have any information regarding the deletion of data collected by the plug-in providers.

(3) The plug-in provider saves the data collected about you in a usage profile, which is used for the purpose of advertising, conducting market research, and/or tailoring the design of its website. In particular, this type of evaluation is carried out (even for users who are not logged in) in order to display appropriate advertisements and to inform other users of the social network about your activity on our website. You have the right to object to the creation of such a usage profile, though you will have to contact the relevant plug-in provider to do so. By implementing these plug-ins, we give you an opportunity to interact with social networks and other users, so we can improve our services and be more useful and attractive for you as a user. The legal basis for using plug-ins is point (f) of Art. 6(1) of the GDPR.

(4) Data transfer occurs regardless of whether or not you have an account with the plug-in provider and are logged into your account. If you are logged in to an account with the plug-in provider, the information collected about you on our site will be assigned to your existing account with the plug-in provider directly. When you press the active button and link the sites, the plug-in provider also saves this information to your user account and shares it publically with your contacts. We recommend regularly logging out of your social media accounts when you are done using them, especially before you click on the button, in order to avoid having this information associated with your profile.

(5) More information about the purpose and scope of data collection and processing by the plug-in providers can be found in their respective privacy policies, provided below. This is also where you’ll learn about your rights with regard to this specific handling of your data, as well as optional settings that can be used to protect your privacy.

(6) Addresses for the respective plug-in providers and URLs to their privacy policies: a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; more information about data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications as well as http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook is subject to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.

b) Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. Twitter is subject to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.

c) Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA https://help.instagram.com/402411646841720.

d) Pinterest Inc., 651 Brannan Street, San Francisco, CA 94103, USA. https://policy.pinterest.com/de/privacy-policy.

b) Embedded YouTube Videos

(1) We have embedded YouTube videos into our online services. These videos are saved on https://www.youtube.com and can be played right on our website. These are all integrated via an “extended privacy mode,” which means that your personal data will not be shared with YouTube if you do not play these videos. Data listed in Paragraph 2 will only be shared after you provide your consent and play a video. We have no influence over this transfer of data.

(2) When you visit the website, YouTube receives information regarding which subpage you accessed. The personal data listed in Paragraph 3 of this Privacy Policy are also transferred. This occurs whether or not you have a user account and regardless of whether you are logged in at the time. If you are logged into Google, your data will be assigned to your account directly. If you do not want this to be associated with your YouTube profile, you must log out before you click the button. YouTube saves your data to a usage profile, which they use for advertising, conducting market research, and/or tailoring the design of its website. This is carried out in particular (even for users who are not logged in) to provide tailored advertising and to inform other users of the social network about your activity on our website. You have the right to refuse the creation of this user profile, though to exercise it, you must contact YouTube directly. The legal basis for this type of data usage is point (a) of Art.6(1) of the GDPR.

(3) Contact information of the third party: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. “For users based in the European Economic Area or Switzerland, the data controller responsible for your information is Google Ireland Limited, unless otherwise stated in a service-specific privacy notice. In other words, Google Ireland Limited is the Google affiliate that is responsible for processing your information and for complying with applicable privacy laws.” In the exceptional case that personal data is transferred to the USA, Google is subject to the EU-US Privacy Shield. More information about the purpose and scope of data collection and processing by the plug-in providers can be found in the respective privacy policy. This is also where you’ll learn about your rights with regard to this specific handling of your data, as well as optional settings that can be used to protect your privacy: http://www.google.de/intl/de/policies/privacy.

c) Embedded Vimeo Videos

(1) We have embedded Vimeo videos into our online services. These videos are saved on https://www.vimeo.com and can be played right on our website. These are all integrated via an “extended privacy mode”, meaning that none of your personal data will be shared with Vimeo if you do not play these videos. Data listed in Paragraph 2 will only be shared after you provide your consent and play a video. We have no influence over this transfer of data.

(2) When you visit the website, Vimeo receives information regarding which subpage on our website you accessed. The personal data listed in A.I(1) of this Privacy Policy are also transferred. This occurs whether or not you have a Vimeo account and regardless of whether you are logged in at the time. If you do not want this information to be associated with your Vimeo account, you must log out before you click the button. Vimeo saves your data to a usage profile, which they use for advertising, conducting market research, and/or tailoring the design of its website. This is carried out in particular (even for users who are not logged in) to provide tailored advertising and to inform other users of the social network about your activity on our website. You have the right to refuse the creation of this user profile, though to exercise it, you must contact YouTube directly. The legal basis for this type of data usage is point (a) of Art.6(1) of the GDPR.

(3) Contact information of the third party: Vimeo, Inc.: 555 West 18th Street New York, New York 10011, USA. When personal data is transferred to the USA, Vimeo is subject to the EU-US Privacy Shield Framework. More information about the purpose and scope of data collection and processing by the plug-in providers can be found in the respective privacy policy. This is also where you’ll learn about your rights with regard to this specific handling of your data, as well as optional settings that can be used to protect your privacy: https://vimeo.com/privacy.

II. Contact / Customer Queries

When you contact us (via email, contact form, post, telephone, or social media, for example), we save the data you share with us (such as email address, username, or telephone number) so that we can respond and answer your questions. The legal basis for handling this information is our legitimate interest in responding to your request, according to point (f) of Art. 6(1) of the GDPR. If you contact us to enter into or to execute a contract, handling your personal information is also legally covered under point (b) of Art.6(1) of the GDPR. If you send an enquiry to third parties (e.g. campsite operators) via us, we will transfer the data you provide us with in this connection (to fulfil our brokerage contract within the meaning of Art 6 Paragraph 1 S.1 lit. b GDPR) to the intended recipient, so that the latter can answer your enquiry directly. We will delete the data arising in connection with the contact/enquiry after the storage is no longer necessary, or restrict the processing insofar as legal storage obligations (e.g. according to § 257 HGB) exist.

a) Zammad Helpdesk System

We use a help desk system (ticket system) and process your personal data in order to answer your query as quickly as possible. The legal bases for this type of data processing are points (b) and (f) of Art.6(1) of the GDPR. Customer email queries are saved in the Zammad Helpdesk Tool that we use. This tool is provided by Zammad GmbH, Marienstraße 11, 10117 Berlin, Germany. Your query text, reply texts, and any attached files are filed with the responses from our staff. These texts are assigned to your email address as well as your first name and surname, should you have provided these. This information ensures that queries about previous procedures can be handled quickly and more effectively than would be the case by only using an email account. Should you wish that all of your data be removed from our Zammad Helpdesk Tool, please contact service@camping.info, and we will delete your data immediately.

c) Here Maps

This website utilises the map service, HERE Maps. The service provider is HERE Global B.V., Kennedyplein 222 -226 5611, ZT Eindhoven, Netherlands. It is necessary to save your IP address to use HERE Maps. This information is typically transferred to a HERE Maps server and saved there. The use of HERE Maps is in the interest of presenting our online offers in an appealing way and making it easier to find places mentioned on our website. You have the right to object to the creation of a user profile, though to do this, you will have to contact HERE Global B.V. directly. The legal basis for handling your data in this instance is point (a) of Art.6(1) of the GDPR. For more information about how they handle user data, see the HERE Maps Privacy Policy: https://legal.here.com/en-gb/privacy/here-wego-here-application-or-here-maps-privacy-supplement-updated

III. User Registration / Login

Every user has the opportunity to create a user account on Camping.info (in compliance with our Terms of Use) with which they can access personalised and/or paid offers and services. Creating an account requires the user to enter an email address and creating a password. Depending on the respective offers and services, additional personal information may be required. Users can also choose to provide other personal data or create user content of their own accord (which can be revoked at any time) on their account.

In the context of your agreement to our Terms of Use, we use this information to tailor our offers, advertise product information, manage accounts and fulfil a contract with the person in question or to process pre-contractual provisions.

After successfully logging in, you are able to manage the basic data that has been saved. Sensitive data, such as passwords, are hashed and saved on our servers. That means that they are encrypted through a technical process. This prevents unauthorised access to this information.

When you sign up, and whenever you log in, Camping.info saves the IP address and time of each action. Processing data occurs on the basis of our Terms of Use in accordance with point (b) of Art. 6(1) of the GDPR, your consent as per point (a) of Art. 6(1) of the GDPR, as well as the pursuit of our legitimate interests, and the protection of users against misuse and unauthorised use in compliance with point (f) of Art. 6(1) of the GDPR. This information is only transferred to third parties if necessary to carry out the terms of a current contract with you (see our Terms of Use and B2B / B2C Terms of Service) in accordance with point (b) of Art. 6(1) of the GDPR, on the basis of your consent as per point (a) of Art. 6(1) of the GDPR or to fulfil legal obligations in compliance with point (c) of Art. 6(1) of the GDPR.

We use identification markers on individual user accounts in order to connect cross-platform user data so that we can make our market and product analyses as precise and specific as possible. In this process, we may transfer your anonymised user information to a data warehouse, where they are collected, modelled, and connected with usage data. We only work with hosts that guarantee particularly high data protection standards and confirm their commitment to the provisions derived from the GDPR by signing a contract processing agreement with us.

Camping.info deletes these data as long as they are no longer needed to achieve the purpose of their processing. Even after a contract has ended, there may be a contractual or legal necessity to keep personally identifying data relating to the contracted party. There is no right to deletion in this case, but there is possibly a right to limitation of data processing. If you cancel your user account, the data associated with it will be deleted, unless subject to a legal retention obligation. The parties concerned are responsible for securing their data themselves.

IV. Posting User Content

Our portal primarily serves as a place to exchange information about campsites, motorhome stopovers, and other services for camping-related leisure activities. Under consideration of our Terms of Use, registered users have the (voluntary and always revocable) option to submit ratings of specific properties and to post their own comments as well as pictures and videos (hereafter referred to collectively as “user content”). If you make use of this option, you provide us with a licence to use the user content you post to operate and advertise our services in accordance with our Terms of Use. Processing personal data in this context takes place on the basis of fulfilling a contract in accordance with point (b) of Art. 6(1) of the GDPR.

When you post user content, it will be published in connection with the respective property, and your chosen username will be displayed. We publish this user content without prior verification of your public profile or of the campsite’s public profile. Please note that you are responsible for upholding and safeguarding copyrights and rights of publicity. We reserve the right — according to our Terms of Use — to block or to delete user content without providing any reasons for doing so.

We calculate an average based on all submitted ratings and make this public; this is displayed via a rating widget on the campsite's homepages where applicable. We also provide campsite operators the option of showing submitted ratings for their campsite on their website within the context of a content-sharing programme.

We have set up a variety of forums so that our users can discuss specific topics. They can sign up for these forums and write posts. The posts they submit are then made public by us without prior verification. Please note that we do not assume any liability for the content you publish. Please also note that we and visitors to the forum can link the content you post to your user account.

The user data that you upload are on servers from hosting providers, which we have ensured compliance with the regulations resulting from the GDPR by mutually signing a contract processing agreement.

These data are deleted once they are no longer required to achieve the purpose of their processing. Even after a contract has ended, there may be a contractual or legal necessity to keep personally identifying data relating to the contracted party. There is no right to deletion in this case, but there is possibly a right to limitation of data processing.

V. Booking

When booking properties and pitches, you will be sent to the website of the respective provider unless a direct booking is made through us (https://booking.maxcamping.de). The respective providers are then responsible for processing personal data according to Art. 4(7) of the GDPR. In this case, please also take into account the respective privacy policies on the respective websites of the providers.

If you make a direct booking through our services, you will be sent to our booking engine (https://booking.maxcamping.de). The personal data we collect in the context of online booking is processed exclusively for the purpose of contract brokerage and is passed on to the respective contract partner only if necessary for fulfilling the contract. We give campsite operators the option of having booking data transferred to their campsite management system. This transfer of data is automatic and occurs without any notice thereof; it is indispensable for campsite operators to process bookings efficiently. The legal basis for this is point (b) of Art. 6(1) of the GDPR.

During payment, we provide your payment information to the commissioned credit institute if this is necessary for the payment process. If a site operator requires a deposit, which they can set at anywhere between 20% — 100% of the total booking price, payment is handled by our Payment Service Provider (PSP) Adyen, N.V., Amsterdam, NL. The camper (depending on their country and the country where the campsite is located) can pay using the following methods: Visa or MasterCard, American Express, Ideal, or Sofortüberweisung. Your data is only transferred for the purpose of payment and only insofar as it is necessary to do so. The legal basis for transferring these data to the Payment Service Provider is point (b) of Art. 6(1) of the GDPR.

VI. Newsletter

We offer a free newsletter to our customers, so you can be kept up-to-date about news and product recommendations related to camping. You can subscribe to the newsletter when signing up on our website, after the fact on our website, or via our Facebook page. We use your data to send the newsletter to the email address you give to us.

When you subscribe to the newsletter, your email address will be used for our advertising purposes until you unsubscribe from the newsletter. This only occurs with your consent or with legal permission. Sending the newsletter is then covered by the legal basis of consent according to point (a) of Art. 6(1) and Art. 7 of the GDPR as well as § 7(3) of the Act Against Unfair Competition. When you subscribe to the newsletter, data that you enter into the form are transferred to us, or at least your email address is shared with us.

To sign up for our newsletter, we use a double opt-in process. After you subscribe, you receive an email, in which you are asked to verify your registration. This verification is necessary to ensure that no one signs up using false email addresses. Of course, you can revoke your consent at any time: You can email us or click on the link in the footer of our newsletter to be removed from our newsletter mailing list.

In some emails we send, we utilise tools to acquire data automatically. These tools collect information, such as when you open the email or if you click on a link in the email. We use this data in some cases to tailor newsletter content to your preferences. With this personalisation, we aim to make the content we send to you more interesting for you to avoid sending you unnecessary or uninteresting emails. We use commercially available sources to gather information. This information could include name, address, email address, as well as demographic and location-related data. The information we gather from these commercial sources is used in combination with the data we collect when you visit Camping.info website pages. In doing this, we can, for example, compare geographic information from commercial sources with the IP address captured by the automated data collection tools to determine your general geographic area.

We send our newsletter and marketing emails using MailChimp, an email marketing service and marketing automation platform provided by the American operator, Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. The email addresses of our newsletter subscribers, as well as their other data described within the scope of these notes, are saved on MailChimp servers in the USA. MailChimp uses this information to send and analyse the emails on our account. Furthermore, MailChimp can use their own information to determine which countries the recipients come from for optimisation purposes. MailChimp does not use the data of our email recipients to contact them directly, nor do they pass this information on to third parties. We rely on the trustworthiness and the IT and data security of MailChimp: They are certified under the EU-US Privacy Shield, which means that they are committed to upholding the EU data protection requirements. Furthermore, we have a data processing agreement with MailChimp. This is a contract where MailChimp pledges to protect our users’ data, to process them on our behalf in accordance with their data protection regulations, and, in particular, not to pass them on to third parties. You can find MailChimp’s Data Processing Addendum here: https://mailchimp.com/legal/data-processing-addendum/.

This website also uses SuperMailer to send newsletters. The provider of this service is Mirko Böer, Software development, Malachitstraße 16, 04319 Leipzig Germany, VAT ID.: DE 813447565, https://int.supermailer.de/. SuperMailer is a service that, among other things, can be used to organise and analyse the sending of newsletters. When you sign up for the newsletter, entered data are saved on 1&1 (www.1und1.de) servers in Germany. By using SuperMailer, we can analyse our newsletter campaigns. Among other things, we can see if a newsletter has been opened and which links, if any, were clicked. This helps us determine which links are clicked the most. SuperMailer also makes it possible for us to break up newsletter subscribers by different recipient categories (for example, by place of residence). This allows us to tailor the newsletter to the respective audiences more effectively. We also have a data processing agreement with SuperMailer. This is a contract where MailChimp pledges to protect our users’ data, to process them on our behalf in accordance with their data protection regulations. For more information about SuperMailer’s features, please see: https://int.supermailer.de/about-newsletter-software.htm.

VII. Giveaways

We collect contact data and, when necessary, address information in order to conduct giveaways. The legal basis for handling this information is point (b) of Art. 6(1) of the GDPR, since the data processing is necessary for conducting and fulfilling this contractual relationship. We process participants’ personal data exclusively to conduct the giveaway, particularly to determine whether or not you are eligible to participate as well as to ascertain and notify the winners via email. If you do not provide us with the named information, it is not possible to participate in the giveaway, or rather, we will not be able to contact you if you should win. Your personal data are only saved and used to conduct the giveaway. They will be deleted within 14 days of the end of the giveaway, as long as there are no legal obligations to prevent deletion. For additional information about how we process your personal data, see the relevant conditions of participation.

VIII. Facebook / Instagram Fan Pages

Camping.info operates an online presence on Facebook and Instagram, a so-called Facebook fan page and Instagram fan page. Instagram is owned by Facebook, Inc. To visit our fan page, the following additional information on data processing shall apply. Information about the data protection of Facebook products can be found here: https://www.facebook.com/about/privacy/.

1. Joint Responsibility, Contact Details, Company Data Protection Officer:

We share responsibility with Facebook for the operation of our fan page as per Art. 26 of the GDPR. For this reason, we have entered into an agreement with Facebook to determine who fulfils which data protection obligations. This agreement can be accessed here: https://www.facebook.com/legal/terms/page_controller_addendum. According to this, Facebook is primarily responsible for providing the party concerned with information about this joint processing and making it possible for them to exercise their data protection rights. We are informing you about your visit to our fan pages here independently of this agreement.

Our contact data can be found below.

Facebook’s contact data: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland

Facebook can be reached online here: https://www.facebook.com/help/contact/2061665240770586

To contact Facebook’s data protection officer, visit: https://www.facebook.com/help/contact/540977946302970.

2. Collection and Storage of Personal Data as well as Type and Purpose of Their Use
a) Data collected by Facebook:

If you are a registered user, Facebook gathers the data described in the Facebook Data Policy under the section “What kinds of information do we collect?”. If you are not a registered user, cookies, which are small text files with identifiers, may still be stored in your browser to enable tracking of your user behaviour.

Typically, user data collected upon visiting the fan page is processed for market research and advertising purposes. With user behaviour (including visiting our fan page), complex user profiles are created, which Facebook can use to show tailored ads within and outside of Facebook and Instagram. Further information about this can also be found in their Data Policy.

If you are opposed to this, you can opt-out here.

b) Data used by us (“Page Insights”) and legal basis:

Facebook provides us with statistics and usage data, with which we can analyse the use of our fan pages (also known as “Page Insights”). This lets us continually improve our fan page. As an operator, we cannot make any decisions regarding how Insights data are processed and all other information resulting from Art. 13 of the GDPR, such as the storage period of cookies on user devices. According to the GDPR, Facebook is primarily responsible for processing Insights data, and Facebook fulfils all of its GDPR obligations with regard to the processing of Insights data.

As page administrators, we have no other way to assess user behaviour on our fan page, not even via user tracking. It is also not possible for us to identify fan page visitors using Page Insights. In particular, according to the agreement, we have no right to demand Facebook to provide us with individual user data. Identification is only possible if we can assign individual profiles to "like" information for the page, but only if our fan page “liked” or “followed” by the corresponding visitor and the "like" information is set to "public."

You can see what data Facebook uses to generate Page Insights here.

Operating fan pages and using Page Insights serves our legitimate interests in creating an effective public image and communicating efficiently with our customers and interested parties. This interest justifies the operation of these pages in the legitimate interest of both users and the visitors of our fan pages who do not have an account. The legal basis is, therefore, point (f) of Art. 6(1) of the GDPR.

3. Transferring Data to Third Parties:

Data collected by Facebook are shared and processed within all Facebook companies. Companies that belong to Facebook include Instagram, WhatsApp, and Oculus, among others. That means that information collected on Facebook can be used to show tailored advertising on Instagram, or that data from WhatsApp can be used to take action on Facebook against accounts that send spam through WhatsApp. This information can be found in Facebook’s Data Policy under “How do the Facebook Companies work together?”.

When processing data through Facebook, user data may be transferred outside the European Economic Area (EEA), in particular to the USA. For this reason, Facebook has submitted itself to the EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=A….

4. Rights of Parties Concerned:

In principle, you can assert your rights (see below B) with Facebook as well as with us. Since Facebook exclusively has direct access to your user data, you can most effectively assert your rights with Facebook.

VIIII. Amazon affiliate program

a. Nature and purpose of the processing

We are participants in the Amazon EU affiliate program, which is designed to provide a medium for websites to earn advertising revenue by placing advertisements and links to Amazon.co.uk (so-called affiliate system). I.e. as an Amazon partner we earn on qualified purchases. Amazon uses cookies to trace the origin of orders. Among other things, Amazon can recognize that you clicked the affiliate link on this website and then purchased a product from Amazon.

For more information about Amazon's use of data and how to opt-out, please refer to the company's privacy policy: https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010.

Note: Amazon and the Amazon logo are trademarks of Amazon.com, Inc. or one of its affiliates.

b. Legal basis of the processing

The processing of personal data is carried out for the above mentioned purposes on the basis of the legitimate interest of Camping.info (art. 6 par. 1 letter f GDPR)

c. Categories of data

e.g. IP address, location,

d. Recipient

Recipients of the data are internal employees of the {departments} and Amazon as order processor.

e. Storage periods

The data collected in this context will be deleted after the discontinuation of the purpose and the end of our use of Amazon.

f. Transfer to third countries

The processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

g. Your rights

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you, which is carried out on the basis of art. 6 par. 1 letter f GDPR; this also applies to profiling based on these provisions (art. 21, paragraph 1 GDPR)

i. Automated decision making and profiling

As a responsible company, we do not use automatic decision making or profiling in this data processing.

B. Your Rights as the Party Concerned

You have the following rights with regard to your personal data: * Right of access by the data subject, Art. 15 of the GDPR

  • Right to rectification, Art. 16 of the GDPR

  • Right to erasure ('Right to be Forgotten'), Art. 17 of the GDPR

  • Right to restriction of processing, Art. 18 of the GDPR

  • Right to data portability, Art. 20 of the GDPR

  • Right to object, Art. 21 of the GDPR

As long as you have provided us with consent in accordance with point (a) of Art. 6(1) of the GDPR, you have the right to revoke this at any time. A revocation does not affect the legality of the processing carried out on the basis of your consent until receipt of the revocation.

You also have the right to file a complaint with a data privacy supervisory authority regarding the way we process your personal data.

You will find the responsible supervisory authority for data protection issues under the following link: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html