With this privacy notice, the Cilentano GmbH („Cilentano“) informs you about the ways personal data are processed on its website and about the rights the persons concerned have got. What applies in any case is the following: We process your personal data only insofar as is allowed according to the 'Bundesdatenschutzgesetz' (BDSG; Federal Data Protection Act) and the 'Datenschutzgrundverordnung' (DSGVO; General Data Protection Regulation).
Responsible controller, see Art. 4 no. 7 of the EU-Datenschutzgrundverordnung (DSGVO), is the Cilentano GmbH, Adlergasse 1, 93047 Regensburg (see our 'Legal notice'). A data protection officer is not appointed and Cilentano is not legally obligated to appoint one.
The controller has taken and implemented several technical and organizational measures to ensure as complete a protection as possible of the personal data processed via this website. Nevertheless, Internet-based data transfer might hold security gaps and complete protection can therefore not be guaranteed. For this reason you are free to transfer personal data to us by other means, e.g. by phone.
§ 1 Personal data
Personal data are all data relating to your person and which you can be identified by (e.g. name, address, e-mail address, user behavior).
§ 2 Collection and storage of personal data as well as manner and purpose of their use
When you contact us by e-mail or by using our contact form, we collect necessary personal data (name, first name, address, e-mail address, phone number (landline and/or mobile)), information required for your journey. Collecting and storing these data enables us to identify you as a customer, to answer your questions and to deal with the booking concerning your journey. The processing of these data for the purpose of establishing contact with us follows your contact inquiry; pursuant to Art. 6 Abs. 2 S. 1 lit. b DSGVO it is required for the purposes mentioned in order to deal adequately with your non-binding inquiry or your booking request and with regard to both parties’ performance of obligations arising from the travel contract.
The personal data given by the person concerned are collected and stored by the controller for internal use only and for appropriate purposes. The controller might pass them on to one or several processors, e.g. a parcel service, who, on their part, deal with the personal data only on an internal basis and on behalf of the controller.
When registering on the website of the controller, the concerned person’s IP address, assigned by his/her Internet service provider (ISP), as well as the date and time of registration are also stored. Storage of these data is based on the fact that it is the only way to prevent abuse of our services and that, in the case of a criminal offense, these data might help solve it. Thus, storage of these data is required for the security of the controller. These data are not passed on to third parties, unless there is a legal obligation to pass them on or unless they are needed for legal prosecution.
Registration of the person concerned by stating personal data by his/her own choice is necessary for the controller to offer to the person concerned contents or services which, as a matter of course, can be offered only to registered users. Registered persons are free to change the personal data they have stated when registering at any time or to have them erased from the controller’s data file.
Upon request of any person concerned, the controller provides information, at any time, about the personal data which have been stored of the person concerned. Furthermore, the controller changes or erases personal data upon request or if indicated to do so by the person concerned, but for any legal obligations to retain the data. In this regard, all the controller’s employees are available as contact persons for the person concerned under email@example.com.
The data we have received from you are collected, processed and used in order to enable you to use the web offer (usage data) and insofar as is required for entering, performing or terminating the contract (fulfillment of contract) and for customer service. These data are not passed on to third parties without your explicit consent. All the personal data are stored only as long as is necessary for the purpose mentioned (dealing with your inquiry or completing your request) and for the fulfillment of the contract. We erase these data as soon as storage is no longer required, or restrict the processing in case of legal obligations to retain the data. Storage time of personal data is based on the respective statutory retention period. After expiry of this period it is a standard procedure to erase the appropriate data, if they are no longer required for the fulfillment or the preparation of a contract.
By sending a message to firstname.lastname@example.org you can object to the use or processing of your data for the purposes of promotion, market or opinion research.
For actions/operations taking place should we need to resort to appointed service providers for individual functions of our offer or want to use your data for promotional purposes see the information as of § 6 below. The criteria used to determine the period for which the data will be stored are also mentioned.
Should there be no legal basis for the processing of your personal data, we will ask for consent of the person concerned.
§ 3 Your rights as a user
Right of withdrawal: Pursuant to Art. 7 Abs. 3 DSGVO (GDPR) you have
- the right to withdraw the consent you have given to us at any time. As a consequence, we are not allowed to continue the processing of the data, which is based on this consent (right of withdrawal).
Right to information / further rights: Pursuant to Art. 15 DSGVO you have
- the right to obtain information about the personal data we process and the purposes of the processing, the category of the personal data, the recipients or categories of recipients these data are shared or will be shared with, the envisaged period for which the data will be stored,
- the right to rectification or erasure (“right to be forgotten”)
- the right to restriction of processing,
- the right to object to processing,
- the right to transfer data (data portability)
- the right to information about the source of your data, if they were not collected by us,
- the right to information about the existence of automated decision-making, including profiling and, where applicable, significant information about the details.
Right to rectification of inaccurate data: Pursuant to Art. 16 DSGVO you have
- the right to obtain immediate rectification of any inaccuracy in your personal data we have stored and to have incomplete personal data completed.
Right to erasure: Pursuant to Art. 17 DSGVO you have
- the right to erasure of your personal data we have stored, unless processing of the data is necessary for exercising the right of freedom of expression and information, for the performance of a legal obligation, for reasons of public interest or in order to establish, exercise or defend legal claims.
Right to obtain restriction: Pursuant to Art. 18 DSGVO you have
- the right to obtain restriction of the processing of your personal data, if you contest the accuracy of the data, if the processing is unlawful, you however oppose the erasure of the data, and if we no longer need them, you however need them to establish, exercise or defend legal claims, or if have objected to processing pursuant to Art. 21 DSGVO.
Right to receive personal data: Pursuant to Art. 20 DSGVO you have
- the right to receive your personal data, which you have provided us with, in a structured, commonly used and machine readable format or to transmit them to another controller.
Right to lodge a complaint: Pursuant to Art. 77 DSGVO you have
- the right to lodge a complaint with a data protection authority about our processing of your personal data. In general, you can complain to the supervisory authority at your habitual place of residence or employment or to the one at the seat of our agency.
Right to object:
Should your personal data be processed on the basis of legitimate interests as defined by Art. 6 Abs. 1 S. 1 lit. f DSGVO, you have got the right pursuant to Art. 21 DSGVO to object, on grounds relating to your particular situation, to the processing of your personal data. - You can exercise your right of withdrawal by contacting us at email@example.com or the address mentioned below. We then no longer process the personal data, unless it is verified that for processing there are essential reasons warranting protection and outweighing the interests, rights and liberties of the person concerned or unless processing serves to establish, exercise or defend legal claims.
Right to withdraw consent:
You have the right to withdraw the consent, along the lines of data privacy, which you have given concerning the processing of your personal data at any time with immediate effect. You also have the right to object to the processing of your data for promotional purposes and for market research. In these cases contact us under firstname.lastname@example.org.
As to exercising the rights mentioned as well as information, requests or suggestions concerning data protection feel free to contact us under the address mentioned above or email@example.com.
§ 4 Transfer of data to third parties
Your personal data are disclosed to third parties only for the following, specified purposes.
We disclose your personal data to a third party, if:
- you have given explicit consent pursuant to Art. 6 Abs. 1 S. 1 lit. a DSGVO,
- disclosure is required, pursuant to Art. 6 Abs. 1 S. 1 lit. f DSGVO, to establish, exercise or defend legal claims and if there is no reason to assume that your interests in not having your data transferred are legitimate and warrant protection,
- disclosure is necessary, pursuant to Art. 6 Abs. 1 S. 1 lit. c DSGVO, for compliance with a legal obligation, and
- disclosure is lawful and, pursuant to Art. 6 Abs. 1 S. 1 lit. b DSGVO, required for the performance of contracts to which you are a party.
Apart from the collection of the above-mentioned data, information in the form of cookies passes to your web browser and is stored on your computer when you visit our website. Cookies make it easier for you to use the website, because we recognize your computer when you visit again and reentry of your data becomes easier. Cookies are small text files with configuration information, which are assigned to the browser you use and stored on your hard disk and via which the website the cookie has been 'sent' from (in this case from us) is provided with certain information.
The cookies we use help to assess the frequency of use and the number of users of our website and to offer you the complete use of the service. Cookies cannot run programs or infect your computer with viruses. They serve to make Internet offers in general more user-friendly and more efficient.
This website uses transient cookies and persistent cookies.
Transient cookies are automatically deleted once you close the browser. Transient cookies include session cookies, for example. They store a so-called session ID, with which related browser requests are assigned to one session. This way, our website can identify your computer when you return to our website. Session cookies are deleted once you log out or close the browser.
Persistent cookies are automatically deleted after a specific length of time, which might differ depending on the cookie. You can delete cookies at any time in the security settings of your browser.
The data processed with the help of cookies are necessary for the purposes mentioned in order to ensure our legitimate interests as well as those of third parties, pursuant to Art. 6 Abs. 1 S. 1 lit. f DSGVO.
Most browsers are set in such a way that they accept cookies automatically. You can, however, deactivate the storing of cookies or set your browser to inform you as soon as cookies are sent or to delete them automatically. Moreover, you can delete the stored cookies from your hard disk later at any time.
Please note that the display of the website and the user guide might be 'limited' when cookies are deleted. This limited use of our services is, in general, possible without cookies, too.
§ 6 Social Media Plugins and Tools
On the basis of Art. 6 Abs. 1 S. 1 lit. f DSGVO we use Social Plugins of the social networks Facebook, Twitter and Pinterest on our website to make our agency more widely known. The underlying promotional purpose is to be regarded as a legitimate interest as defined by the DSGVO. Responsibility for complying with data protection regulations is to be taken by the respective provider. We integrate these plugins by way of the so-called purpose-click method in order to offer visitors to our website the highest possible protection.
a) Facebook Social Plugins
Social Plugins („Plugins“) of the social network facebook.com, which is offered by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”), have been placed on our website. The Facebook plugins can be identified by one of the Facebook logos (white „f“ on blue tile / „Thumbs up“-sign) or are marked by the add “Facebook Social Plugin”.
If you access a page of our website which includes such a plugin, your browser establishes direct connection with the servers of Facebook. The content of the plugin is transmitted by Facebook straight to your browser, which integrates it into the website. We, therefore, have no influence on the amount and content of the data Facebook collects with the help of these plugins, but pass on to you the information available to us (for the information Facebook offers go to https://www.facebook.com/help/186325668085084 .
By placing the plugins, Facebook gets to know about your / your browser’s access of the corresponding page of our website. Should you then be logged in at Facebook, Facebook can link your visit to your Facebook account. Should you interact with the plugins, e.g. click the 'like' or 'share' button or make a comment, the corresponding information is transmitted from your browser to Facebook and stored there. Furthermore, the information is released on Facebook and accessible for your Facebook friends.
Even if you are not a Facebook member, Facebook might find out your IP address and store it.
Facebook can use this information for purposes of advertisement, market research and tailoring its websites to the needs of the market. Facebook creates usage, interest and relationship profiles, for example to evaluate your use of our website with regard to the ads you are shown on Facebook, to inform other Facebook users about your activities on our website and to provide other services linked to the use of Facebook.
If you are Facebook member, but do not want Facebook to collect data about you via our website and link them with the membership data stored with Facebook or to your Facebook account, log out of Facebook and delete cookies that have been placed before visiting our website (see above § 5).
b) Twitter Plugins
Social Plugins („Plugins“) of the social network of Twitter, which is offered by Twitter Inc. at 795 Folsom St., Suite 600, San Francisco, CA 94107, USA, have been placed on our website. The Twitter plugin can be identified by the symbol of the bird and the wording „Tweet“. See the survey:
If you access a page of our website which includes such a plugin, your browser establishes direct connection with the servers of Twitter. Twitter then receives the information that you have visited our website with your IP address. Should you be logged in at Twitter at that time by clicking / using one of the plugins („Tweet Button“), Twitter can link the visit to your account. If you interact with the plugins, e.g. by clicking a „tweet“ button, the corresponding information is transmitted from your browser to Twitter and stored there. Even if you are not a member of Twitter or have logged out of Twitter before visiting our website, Twitter might still find out your IP address and store it. We, the owners of this website, ask you to note that we receive no information about the contents of the transmitted data or their processing by Twitter.
The plug-in provider stores your given data as user profiles and uses these for purposes of advertisement, market research and /or tailoring his website to the needs of the market. You have the right to object to these user profiles being generated and in order to exercise this right you have to turn to the plug-in provider.
If you are a Twitter member, but do not want Twitter to collect data about you via our website and link them to your data stored with Twitter, you have to log out of Twitter and delete cookies that have been placed before visiting our website. More information about cookies is found in this data privacy statement (see above § 5 and https://twitter.com/privacy)
c) Pinterest („Pin-it-button“)
We use the social network Pinterest of Pinterest Inc., 808 Brannan St., San Francisco, CA 94103, USA (henceforth called „Pinterest“). By your clicking the „Pin-it“ button Pinterest receives the information that you have accessed the corresponding page of our website. If you are logged in at Pinterest, Pinterest can link your visit to your Pinterest account. Pinterest stores the data transferred by clicking the „Pin-it“ button in the USA. If you do not agree with this, you have to log out of your Pinterest account before clicking the „Pin-it“ button.
d) Font Awesome
Concerning uniform representation of fonts, this site uses so-called web fonts supplied by Fonticons Inc. When visiting a site, your browser stores the necessary web fonts in your browser cache in order to represent text and type of font correctly.
For this purpose, the browser you use has to link with the servers of Fonticons Inc. This way Fonticons Inc. gets to know that your IP-address has visited our website. Our use of web fonts serves to guarantee a uniform and attractive representation of our online offer. This is a legitimate interest according to Art. 6 Abs. 1 S. 1 lit. f DSGVO.
Should your browser not support web fonts, your computer will use a standard font.
Further information about Font Awesome is found at fontawesome.com/help and in the data privacy statement of Fonticons, Inc.: fontawesome.com/privacy.
§ 7 Trustpilot
Should you not agree, you need only send us an e-mail.
§ 8 Newsletter / Newsletter subscription
Cilentano informs its customers and business partners about the agency’s offers by newsletter at regular intervals. Users have got the possibility to sign up for the newsletter. If you register for our newsletter by using the sign-up mask, the personal data (name, address, e-mail address) you have put down when registering are transmitted to the controller and stored. A person concerned can receive our newsletter only (1) if the person concerned has got a valid e-mail address and (2) if the person concerned signs up for the newsletter. For legal reasons and using the double opt-in process, a confirmation e-mail is sent to the e-mail address a concerned person has for the first time submitted in the subscription form. The confirmation e-mail serves to confirm whether the owner of the e-mail address is the person concerned and has authorized the sign-up for the newsletter. Cilentano can pass on the personal data to a processor, e.g. a lettershop, where they are also dealt with only internally and on behalf of the controller. Your data are not passed on to unauthorized third parties. When someone subscribes for our newsletter, we also store the IP address assigned by the Internet service provider (ISP) to the computer system the person concerned uses at the time of registration as well as the date and time of registration. Collecting these data is necessary in order to be able to retrace the (possible) abuse of the e-mail address of a person concerned later on and is therefore required to ensure legal protection of the controller.
The personal data collected when someone signs up for the newsletter are used only for mailing our newsletters. Furthermore, newsletter subscribers can be informed by e-mail, if this is required for the operation of the newsletter service or a related registration, which could be the case if changes occur regarding the newsletter offer or technical conditions.
A person concerned can cancel subscription to our newsletter at any time. The person concerned can withdraw consent to the storage of the personal data passed on for the newsletter sign up at any time. If you want to withdraw consent, you need only click the link which is included in each newsletter. You can also unsubscribe from the newsletter on the website of the controller or inform the controller in a different way. You can object to the use and processing of your data for the purposes of advertising, market or opinion research by sending a message to firstname.lastname@example.org and you can unsubscribe from the newsletter at any time free of charge (at basic rates) by contacting email@example.com.