Call us

Questions about booking your package holiday?

Find answers in our FAQs or contact us at:

+49 (0) 6966 7795 61

Mon - Fri:

8:00 a.m. – 8:00 p.m.

Sat, Sun und public holidays:

8:00 a.m. – 8:00 p.m.

Can't find what you need? We're here to help

Help Center

0
Favorites0
  • Legal: Privacy Policy

Privacy Policy

 

A. General Privacy Information

I. Data Collection, Legal Basis for Processing, and Your Rights

  1. Data Collection and Storage / Use and Disclosure

  2. Legal Basis for Processing

  3. Your Rights

  4. Your Right to Object

  5. Disclosure of Your Data / Export and Processing Outside the European Economic Area

II. Changes in the Purpose of Processing and Data Use

B. Specific Information Regarding Our Website

I. Booking Systems and Links

  1. Booking Systems (“IBE”)

  2. Links to Other Websites

II. Use of Cookies

  1. General Information on Cookies

  2. Avoiding Cookies

III. Contact Form

  1. Our Contact Form

IV. Use of Other Third-Party Tools and Social Media on Our Website

  1. Use of Google Analytics with Anonymization Function

  2. Use of Google AdWords Conversion Tracking

  3. Use of Google Tag Manager

  4. Use of Google Maps

  5. Use of Facebook

  6. Use of the Facebook Conversion Pixel

  7. Use of the Facebook Custom Audiences Pixel

  8. Use of X (formerly Twitter)

  9. Use of Instagram

  10. Use of YouTube

V. Disclosure of Data to SunExpress

A. General Data Protection

This Privacy Policy provides information about how we process your personal data in the context of our business relationship and your use of our website.

As the provider of this website and the data controller within the meaning of data protection regulations (detailed information can be found in the legal notice), we take our data protection obligations very seriously and design our services so that only necessary personal data is collected, processed, and used. Under no circumstances will personal data be rented or sold to third parties for advertising purposes.

Access to personal data is restricted to those individuals who require this data to perform their duties, who are informed of the legal provisions regarding data protection, and who have committed to complying with the applicable legal provisions of the EU General Data Protection Regulation (“GDPR”).

When using our website, please note the explanations provided in Section B and following sections of this privacy policy.

I. Data Collection, Legal Basis for Processing, and Your Rights

1. Data Collection and Storage / Use and Disclosure a. We process the personal data we receive from you in the course of our business relationship and that we need to fulfill our obligations, in particular to process your (travel) inquiries and (travel) bookings. b. Relevant personal data generally includes your booking and contact information (last name, first name, address, email address, phone number), as well as, where applicable, the information in your travel documents (passport number, passport details, date of birth), information regarding your payment method, and any other data you provide to enable us to fulfill our contractual obligations and process your trips or other booked services. c. Within the scope of our business relationship, you are only required to provide the personal data necessary for establishing and carrying out a business relationship or that we are legally obligated to collect. Without this data, we will generally have to refuse to carry out the order or will no longer be able to fulfill an existing contract and may have to terminate it; This means that in order to use a service or feature, you must provide the specified data.

2. The Legal Bases for Processing a. The personal data collected from you is collected and processed for various purposes. The specific purposes of the processing are determined by the respective services commissioned. b. The legal basis for the processing of your data is set forth in Articles 6 and 9 of the GDPR:

  • Article 6(1)(a) of the GDPR serves as the legal basis for our company’s processing activities in which we obtain or are required to obtain your consent for a specific processing purpose.

  • If the processing of personal data is necessary for the performance of a contract—as is the case, for example, when processing your (travel) bookings—the processing is based on Article 6(1)(b) of the GDPR. The same applies to processing operations necessary for the implementation of pre-contractual measures, such as in cases of inquiries regarding our products or services.

  • If our company is subject to a legal obligation that requires the processing of personal data—such as to fulfill tax obligations or due to specific requirements for entry into the United States—the processing of your data is based on Article 6(1)(c) of the GDPR in conjunction with the relevant legal provision.

  • In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were injured on our premises and their name, age, health insurance information, or other vital information had to be disclosed to a doctor, a hospital, or other third parties. In such cases, the processing would be based on Article 6(1)(d) of the GDPR.

  • Finally, processing operations may be based on Article 6(1)(f) of the GDPR. This legal basis applies to processing operations not covered by any of the aforementioned legal bases, where the processing is necessary to safeguard a legitimate interest of our company or a third party and your interests, fundamental rights, and fundamental freedoms do not override those interests.

c. If, in exceptional cases, we process special categories of personal data (data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as the processing of genetic data, biometric data for the unique identification of an individual, health data, or data concerning sex life or sexual orientation), one of the following legal bases must also apply:

  • You have given your explicit consent (Art. 9(2)(a) GDPR);

  • The processing is necessary to protect your vital interests or those of another person, and the data subject is physically or legally incapable of giving consent (Art. 9(2)(c) GDPR);

  • The processing relates to personal data that you have manifestly made public (Art. 9(2)(e) GDPR);

  • The processing is necessary for the establishment, exercise, or defense of legal claims (Art. 9(2)(f) GDPR);

  • The processing is necessary for reasons of substantial public interest on the basis of EU law or the law of an EU Member State, which is proportionate to the objective pursued, respects the essence of the right to data protection, and provides for appropriate and specific measures to safeguard your fundamental rights and interests (Art. 9(2)(g) GDPR).

d. Your personal data will be used for advertising and market research purposes only if you have previously given your consent or if the processing is necessary to safeguard a legitimate interest of our company or a third party and your interests, fundamental rights, and fundamental freedoms do not override those interests.

3. Your Rights a. As a data subject, you have the right to request information about the data stored about you and the scope of the data processing and disclosure that has taken place, and to receive a copy of the personal data stored about you. b. You also have the right to request the immediate correction of inaccurate personal data stored about you and the completion of incomplete personal data stored about you. c. You also have the right to request the immediate erasure of the personal data stored about you if the legal requirements are met. Please note that your right to erasure may be subject to restrictions. For example, we are not required—or permitted—to erase data that we are still required to retain due to statutory retention periods. Data that we need to assert, exercise, or defend legal claims is also exempt from your right to erasure. d. Please direct all requests to us as the data controller (see Legal Notice). e. Under certain conditions, you have the right to request the restriction of processing (i.e., the marking of stored personal data with the aim of limiting its future processing). f. Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority—in particular in the Member State of your residence, your workplace, or the location of the alleged infringement—if you believe that the processing of your personal data violates the GDPR. The supervisory authority to which the complaint was submitted shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.

4. Your Right to Object a. If we process your personal data to perform a task carried out in the public interest or in the exercise of official authority, or to protect our legitimate interests, you have the right to object to the processing of your data on grounds relating to your particular situation. You also have an unrestricted right to object if we process your data for our direct marketing purposes. b. In the event of an objection, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing of this data that override your interests, rights, and freedoms, or your personal data is necessary for the establishment, exercise, or defense of legal claims. c. The objection may be submitted in any form.

5. Disclosure of Your Data / Export and Processing Outside the European Economic Area a. Due to the scale and complexity of our data processing activities, it is not possible for us to list every recipient of your personal data individually in this Privacy Notice; therefore, we generally specify only categories of recipients. b. We generally disclose your personal data to third parties only to the extent necessary to fulfill a contract, where we or the third party have a legitimate interest in the disclosure, or where we have obtained your consent. In addition, data may be transferred to third parties if we are required to do so by law or by an enforceable official or court order. Third parties to whom we disclose your personal data, regardless of our provision of services, include:

  • Booked service providers such as tour operators, airlines, car rental companies, hotels, visa service providers, insurance companies, etc.

  • External consultants (e.g., attorneys, tax advisors, auditors),

  • Government agencies within the scope of their jurisdiction (e.g., tax authorities, police, public prosecutor’s office),

  • Courts,

  • Other third parties, provided that you instruct us to disclose data or give your consent.

c. Service providers we engage and who act on our behalf (so-called “data processors”) may also receive data for the purposes mentioned above. For example, when booking through providers of tourism booking systems, such as Amadeus Germany GmbH or Schmetterling International GmbH Co. KG, your booking data may be shared with them so that they can forward the booking to the service provider you booked with, such as a tour operator. Service providers may also be commissioned to provide server capacity. d. Your personal data may be transferred to countries outside the European Economic Area if it is necessary to transfer the specified data to third parties located in third countries, e.g., to fulfill a contract (Art. 49 GDPR) or due to official or national legal requirements. For example, when traveling to the United States, government agencies such as the Department of Homeland Security receive your passenger data from the airline through which you booked your flight.

II. Changes in the Purpose of Processing and Data Use

Since the processing methods we use may change or evolve due to technological advancements and organizational changes, we reserve the right to update this Privacy Policy in accordance with new technical and organizational conditions. We therefore ask that you review this Privacy Policy from time to time. The updated Privacy Policy will then apply to your subsequent visits to our company or our websites.

B. Specific Information Regarding Our Website

I. Booking Systems and Links

1. Booking Systems (“IBE”) a. Our company’s website, as well as the IBE systems integrated into our site (e.g., via iFrame), collect a range of general data and information each time the website or the integrated IBE is accessed. This general data and information is stored in the log files of the servers used. The following may be collected:

  • browser types and versions used,

  • the operating system used by the accessing system,

  • the website from which an accessing system reaches our website (so-called referrer),

  • the subpages of our website accessed via the accessing system,

  • the date and time of access to the website,

  • an Internet Protocol address (IP address),

  • the Internet service provider of the accessing system, and

  • other similar data and information used for security purposes in the event of attacks on our information technology systems.

b. When using this general data and information, our company does not draw any conclusions about the data subject. Rather, this information is needed to:

  • deliver the content of our website correctly,

  • optimize the content of our website and the advertising on it,

  • ensure the ongoing functionality of our information technology systems and the technology of our website, and

  • provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyberattack.

c. This data and information, which we collect anonymously or in pseudonymized form, is therefore evaluated by our company both for statistical purposes and with the aim of enhancing data protection and data security within our company, ultimately to ensure an optimal level of protection for the personal data we process. The anonymous data from the server log files is stored separately from any personal data provided by a data subject. d. The transmission of sensitive personal data between your computer and our servers or the servers of our partners and service providers is encrypted using the SSL (Secure Socket Layer) protocol when you make reservations and payments. This ensures that third parties cannot access your data during transmission. In addition to secure transmission between your computer and our servers, access to our servers by third parties is also protected by a variety of security mechanisms. e. Furthermore, we have implemented organizational and technical safeguards—which we continuously evaluate and adjust as needed—to protect the personal data we store and process.

2. Links to Other Websites We use external links on our website and would like to point out that we have no influence whatsoever on the content and design of these third-party websites. This privacy policy therefore does not apply to linked websites operated by third parties.

II. Use of Cookies

1. General Information on Cookies We use so-called “cookies” to customize and optimize our customers’ online experience and time spent online. A cookie is a text file that is either temporarily stored in the computer’s RAM (“session cookie”) or saved to the hard drive (“persistent” cookie). Cookies contain, for example, information about the user’s previous visits to the relevant server or information about which pages have been accessed so far. Cookies are not used to run programs or download viruses onto your computer. Rather, the main purpose of cookies is to provide an offering tailored specifically to the customer and to make using the service as convenient as possible.

2. Avoiding Cookies Visitors have the option to refuse cookies at any time. This is typically done by selecting the appropriate option in the browser settings or by making a selection when accessing our site. Further details can be found in the help function of the browser used by the customer or in the corresponding cookie banner. If the customer chooses to disable cookies, this may reduce the scope of the service and have a negative impact on the use of the services provided by the controller.

III. Contact Form

1. Our Contact Form a. On our company’s website, you are also given the option to contact us via a contact form, for example, to request a travel quote. The personal data transmitted for this contact request is determined by the input form used for this purpose. The data you provide will be used solely for the purpose of contacting you. No further use will be made of this data unless you provide additional consent. b. The processing of data entered into the contact form is therefore carried out exclusively to respond to your contact request.

IV. Use of Additional Third-Party Programs and Social Media on Our Website

We conduct analyses of our customers’ behavior when using our service, or have such analyses conducted on our behalf. For this purpose, we primarily create anonymized or pseudonymized usage profiles. These usage profiles are created for the sole purpose of continuously improving our service. We also use features provided by social networks.

1. Use of Google Analytics with Anonymization Function a. We use the Google Analytics component on this website. The operator of the Google Analytics component is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics is a web analytics service. Web analytics refers to the collection, gathering, and evaluation of data regarding the behavior of website visitors. Among other things, a web analytics service collects data on which website a data subject came from to access a website (known as a “referrer”), which subpages of the website were accessed, and how often and for how long a subpage was viewed. Web analytics is primarily used to optimize a website and to conduct a cost-benefit analysis of online advertising. b. We use the parameter “_gat._anonymizeIp” for web analytics via Google Analytics. This parameter causes Google to truncate and anonymize the IP address of the data subject’s Internet connection when our website is accessed from a member state of the European Union or from another signatory state to the Agreement on the European Economic Area. c. The purpose of the Google Analytics component is to analyze visitor traffic on our website. Google uses the data and information collected, among other things, to evaluate the use of our website, to compile online reports for us that illustrate activity on our website, and to provide other services related to the use of our website. d. Google Analytics places a cookie on the data subject’s information technology system. What cookies are has already been explained above. Placing the cookie enables Google to analyze the use of our website. Each time a user visits one of the individual pages of this website—which is operated by the data controller and on which a Google Analytics component has been integrated—the web browser on the data subject’s IT system is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. As part of this technical process, Google obtains personal data, such as the data subject’s IP address, which Google uses, among other things, to track the origin of visitors and clicks and, consequently, to enable commission settlements. e. Cookies are used to store personal information, such as the time of access, the location from which access originated, and the frequency of the data subject’s visits to our website. Each time our website is visited, this personal data—including the IP address of the internet connection used by the data subject—is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may, under certain circumstances, disclose this personal data—collected through technical means—to third parties. f. As described above, the data subject may prevent our website from setting cookies at any time by adjusting the settings of the web browser being used, thereby permanently objecting to the setting of cookies. Such a setting in the web browser would also prevent Google from setting a cookie on the data subject’s computer system. In addition, a cookie already set by Google Analytics can be deleted at any time via the web browser or other software programs. g. Furthermore, the data subject has the option to object to the collection of data generated by Google Analytics relating to the use of this website, as well as to the processing of this data by Google, and to prevent such collection and processing. To do so, the data subject must download and install a browser add-on from the link https://tools.google.com/dlpage/gaoptout. This browser add-on uses JavaScript to instruct Google Analytics that no data or information regarding website visits may be transmitted to Google Analytics. Google considers the installation of the browser add-on to be an objection. If the data subject’s computer system is subsequently deleted, formatted, or reinstalled, the data subject must reinstall the browser add-on to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by the data subject or another person within their control, it is possible to reinstall or reactivate the browser add-on. h. Further information and Google’s applicable privacy policy can be found at https://www.google.de/intl/de/policies/privacy/ and at http://www.google.com/analytics/terms/de.html.

2. Use of Google AdWords Conversion Tracking a. This website uses the online advertising service Google AdWords and, as part of Google AdWords, conversion tracking. Google Conversion Tracking is an analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you click on an ad placed by Google, a conversion tracking cookie is stored on your computer. This allows Google to recognize when users click on a Google ad and are subsequently redirected to the website. The cookies expire after 30 days, do not contain any personal data, and therefore cannot be used to identify individuals. b. Each Google AdWords customer receives a different cookie. Consequently, it is not possible to track cookies across the websites of AdWords customers. The information generated by the conversion cookie is used to compile conversion statistics for AdWords customers who use conversion tracking. This information includes data on the number of website visits and redirects. c. To prevent tracking, you can disable cookies by adjusting your browser settings. The data will then not be included in the conversion tracking statistics. For more information and Google’s privacy policy, visit: http://www.google.de/policies/privacy/.

3. Use of Google Tag Manager We use Google Tag Manager on this website. This service allows website tags to be managed through a single interface. Google Tag Manager is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager merely implements tags. This means that no cookies are used and no personal data is collected. Google Tag Manager triggers other tags, which in turn may collect data. However, Google Tag Manager does not access this data. If deactivation has been performed at the domain or cookie level, it remains in effect for all tracking tags, provided they are implemented using Google Tag Manager.

4. Use of Google Maps We use the Google Maps API on this website to visually display geographic information. Google Maps is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When using Google Maps, Google also collects, processes, and uses data regarding visitors’ use of the Maps features. For more information about Google’s data processing, please refer to Google’s Privacy Policy, which is available at www.google.com/privacypolicy.html.

5. Use of Facebook a. We have integrated components from Facebook into this website. Facebook is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject resides outside the United States or Canada, the controller responsible for the processing of personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. b. Each time a user visits one of the individual pages of this website operated by us that includes a Facebook component (Facebook plug-in), the web browser on the data subject’s computer is automatically prompted by the respective Facebook component to download a representation of that Facebook component from Facebook. A complete overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=de_DE. As part of this technical process, Facebook learns which specific subpage of our website the data subject is visiting. c. If the data subject is logged into Facebook at the same time, Facebook recognizes which specific subpage of our website the data subject is visiting each time the data subject accesses our website and throughout the entire duration of the data subject’s visit to our website. This information is collected by the Facebook component and assigned by Facebook to the data subject’s respective Facebook account. If the data subject clicks on one of the Facebook buttons integrated into our website—for example, the “Like” button—or posts a comment, Facebook associates this information with the data subject’s personal Facebook user account and stores this personal data. d. Facebook receives information via the Facebook component that the data subject has visited our website whenever the data subject is logged into Facebook at the same time as accessing our website; this occurs regardless of whether the data subject clicks on the Facebook component or not. If the data subject does not wish for this information to be transmitted to Facebook, they can prevent the transmission by logging out of their Facebook account before visiting our website. e. Facebook’s Privacy Policy, available at https://de-de.facebook.com/about/privacy/, provides information about Facebook’s collection, processing, and use of personal data. It also explains the settings options Facebook offers to protect the data subject’s privacy. In addition, various applications are available that allow users to prevent data from being transmitted to Facebook. Data subjects may use such applications to prevent data from being transmitted to Facebook.

6. Use of Facebook’s Conversion Pixel a. We use the “Conversion Pixel” or visitor action pixel provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). When this pixel is loaded by your browser, Facebook can subsequently determine whether a Facebook ad was successful—for example, whether it led to the completion of an online purchase. We receive only statistical data from Facebook for this purpose, with no reference to a specific individual. This allows us to measure the effectiveness of Facebook ads for statistical and market research purposes. In particular, if you are logged into Facebook, we also refer you to Facebook’s privacy policy at https://www.facebook.com/about/privacy/. b. Please visit www.facebook.com/settings?tab=ads if you wish to revoke your consent to the Conversion Pixel.

7. Use of the Facebook Custom Audiences Pixel a. We use the “Custom Audiences Pixel” from Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”) on our website. This is used to display interest-based advertisements to visitors to our website when they visit the Facebook social network. To this end, a Facebook pixel has been implemented on our website. When you visit our website, this pixel establishes a direct connection to Facebook’s servers. In the process, information is transmitted to Facebook’s servers indicating that you have visited our website, and Facebook associates this information with your personal Facebook user account. For more information on Facebook’s collection and use of data, as well as your rights and options for protecting your privacy, please see Facebook’s Privacy Policy at https://www.facebook.com/about/privacy/. You can opt out of interest-based advertising on Facebook at https://www.facebook.com/settings/?tab=ads#_=_. To do so, you must be logged in to Facebook. You can also opt out of the Custom Audience Pixel with a single click.

8. Use of X (formerly Twitter) a. We use components from X (formerly Twitter) on this website. X is operated by Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. X is a multilingual, publicly accessible microblogging service where users can publish and share so-called tweets—short messages limited to 140 characters. These short messages are accessible to everyone, including people who are not registered with X. However, the tweets are also displayed to the user’s so-called followers. Followers are other X users who follow a user’s tweets. Furthermore, X enables users to reach a broad audience through hashtags, links, or retweets. b. Each time a user accesses one of the individual pages of this website—which is operated by us and on which an X component (X button) has been integrated—the web browser on the data subject’s IT system is automatically prompted by the respective X component to download a representation of the corresponding X component from X. Further information about the X buttons is available at https://about.twitter.com/de/resources/buttons. As part of this technical process, Twitter learns which specific subpage of our website the data subject is visiting. The purpose of integrating the X component is to enable our users to share the content of this website, to promote this website in the digital world, and to increase our visitor numbers. c. If the data subject is simultaneously logged in to X (formerly Twitter), X detects which specific subpage of our website the data subject is visiting each time the data subject accesses our website and throughout the entire duration of the data subject’s visit to our website. This information is collected by the X component and assigned by X to the data subject’s respective X account. If the data subject clicks one of the X buttons integrated into our website, the data and information transmitted thereby are associated with the data subject’s personal X user account and are stored and processed by X. d. X (formerly Twitter) receives information via the X component that the data subject has visited our website whenever the data subject is logged into X at the same time as accessing our website; this occurs regardless of whether the data subject clicks on the X component or not. If the data subject does not wish for this information to be transmitted to X, they can prevent the transmission by logging out of their X account before visiting our website. e. X’s applicable privacy policy is available at https://twitter.com/privacy?lang=de.

9. Use of Instagram a. We use features of the Instagram service. The operator of Instagram’s services is Instagram LLC, 1 Hacker Way, Building 14, First Floor, Menlo Park, CA, USA. Instagram is a service that qualifies as an audiovisual platform and enables users to share photos and videos, as well as to repost such content on other social networks. b. Each time a user visits one of the individual pages of this website—which is operated by the data controller and on which an Instagram component (Instagram button) has been integrated—the web browser on the data subject’s computer system is automatically prompted by the respective Instagram component to download a display of the corresponding Instagram component. As part of this technical process, Instagram learns which specific subpage of our website the data subject is visiting. c. If the data subject is logged into Instagram at the same time, Instagram recognizes which specific subpage the data subject is visiting each time the data subject accesses our website and throughout the entire duration of the data subject’s visit to our website. This information is collected by the Instagram component and assigned by Instagram to the data subject’s respective Instagram account. If the data subject clicks one of the Instagram buttons integrated into our website, the data and information transmitted thereby are associated with the data subject’s personal Instagram user account and are stored and processed by Instagram. d. Instagram receives information via the Instagram component that the data subject has visited our website whenever the data subject is logged into Instagram at the same time as accessing our website; this occurs regardless of whether the data subject clicks on the Instagram component or not. If the data subject does not wish for this information to be transmitted to Instagram, they can prevent the transmission by logging out of their Instagram account before visiting our website. e. Further information and Instagram’s applicable privacy policy can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.

10. Use of YouTube a. We use YouTube components on this website. YouTube is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. YouTube is an online video portal that allows video publishers to upload video clips free of charge and enables other users to view, rate, and comment on them, also free of charge. YouTube permits the publication of all types of videos, which is why complete movies and television programs, as well as music videos, trailers, and user-generated videos, are available via the portal. b. Each time a user accesses one of the individual pages of this website—which is operated by the data controller and on which a YouTube component (YouTube video) has been integrated—the web browser on the data subject’s computer is automatically prompted by the respective YouTube component to download a representation of that YouTube component from YouTube. Further information about YouTube is available at https://www.youtube.com/yt/about/de/. As part of this technical process, YouTube and Google learn which specific subpage of our website the data subject is visiting. c. If the data subject is logged into YouTube at the same time, YouTube recognizes which specific subpage of our website the data subject is visiting when a subpage containing a YouTube video is accessed. This information is collected by YouTube and Google and associated with the data subject’s respective YouTube account. d. YouTube and Google receive information via the YouTube component that the data subject has visited our website whenever the data subject is logged into YouTube at the same time as accessing our website; this occurs regardless of whether the data subject clicks on a YouTube video or not. If the data subject does not wish for this information to be transmitted to YouTube and Google, they can prevent the transmission by logging out of their YouTube account before visiting our website. e. The privacy policy published by YouTube, which is available at https://www.google.de/intl/de/policies/privacy/, provides information about the collection, processing, and use of personal data by YouTube and Google.

V. Disclosure of Data to SunExpress

We pass certain data (customer and contact data, trip and service data, financial/transaction/booking/report data, PNR data, IDs, communication data, and marketing, marketing data) to SunExpress Güneş Ekspres Havacılık A.Ş., P.O. Box 28, Yenigöl Mahallesi Nergiz Sokak No: 84, 07230 Muratpaşa/Antalya, Türkiye ("SXS"), which processes this data as an independent controller.

SXS uses the data, on the basis of your consent, for the performance of a contract to which you are subject to or in order to take steps at your request prior to entering into a contract and/or legitimate interests (legitimate interests in ensuring the proper and efficient performance of business operations, customer relationship management, and marketing activities), for the following purposes:

  • Performance of any contract between the SXS and us or in order to take steps prior to entering into a contract

  • Provision of services / fulfilment of bookings and purchases (e.g., flight services)

  • Communications, reportings and revenue analysis, marketing campaigns, compliance, data commercialization and strategies

  • Matching of customer data between SXS and us so that SXS knows its customers and their bookings

  • Verification of the commission paid by SXS to us, including but not limited to matching/comparing the data provided by us against SXS's own data, audits and inspections

  • Reporting and revenue analysis by SXS

  • Marketing, including but not limited to conversion from customers into SXS marketing leads, marketing activities, profiling and segmentation as well as marketing analytics carried out by SXS for its own marketing purposes

  • Transfer of holiday package data schemas into SXS's Salesforce Core Cloud system for use by the Service, Loyalty, and Data Cloud modules for SXS's own respective purposes

SXS retains the data for up to ten years. For further information such as data recipients or your rights, please see SXS's privacy notice.