Privacy Policy
Name and address of the data controller
The data controller within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States, as well as other data protection provisions, is:
Mondiani Group GmbH
Walter-Köhn-Strasse 4D
04356 Leipzig
Germany
Tel.: +49 (341) 909 87 46
Email: info@mondiani.travel
Website: www.mondiani.travel
Name and address of the Data Protection Officer
The data protection officer of the data controller is:
Wolfgang Schneider
Wolfgang Schneider data-protection-hannover
Lange Weihe 39A
30880 Laatzen
Germany
Email: data-protection-hannover [at] t-online.de
Mondiani Group GmbH (hereinafter: ‘we’) is the controller responsible for the personal data of users (hereinafter: ‘you’) of this website within the meaning of the GDPR.
We protect your privacy and your personal data. We collect, process and use your personal data in accordance with the provisions of this privacy policy, as well as the applicable data protection laws and the Telemedia Act. We have implemented technical and organisational measures to ensure that we comply with data protection regulations.
This Privacy Policy sets out what personal data we collect, process and use about you. Below, we explain what data we store, why we store it, how we use it and what right of withdrawal you have. We therefore ask you to read the following information carefully.
In principle, you can use our online services without disclosing your identity.
1. Collection of personal data
We only collect personal data via our website if you voluntarily provide us with such data, for example when making an enquiry, registering or submitting other entries via contact forms. Unless the collection and storage of personal data is already permitted by law, this will only take place with your prior consent. If you complete a contact form on our website, your details will be stored on specially secured servers. Access is restricted to a small number of specifically authorised individuals.
1.1. Personal data, as defined in this privacy policy, refers to specific details regarding the personal or factual circumstances of an identified or identifiable individual. This includes information such as your name, address, postal address, telephone number or email address.
1.2. Personal data also includes information about your use of our website. In this context, we collect personal data from you as follows: information about your visits to our website, such as the volume of data transferred, the location from which you access data from our website, and other connection data and sources that you access. This is usually done through the use of log files and cookies. Further information on log files and cookies is provided below.
2. Purpose of use
We use your personal data for the following purposes:
- To provide the services you have requested, such as contacting us, download functions or newsletter deliveries. You can find detailed information on these services in section 3;
- To ensure that our website is presented to you in the most effective and engaging way possible;
- To fulfil our obligations arising from any contracts concluded between you and us, such as registrations for Academy events;
- To establish, define the terms of and amend any contractual relationships between you and us;
- To enable you to take part in interactive features, should you wish to do so;
- To inform you of changes to our services.
3. Services
3.1. Contact form
If you send us enquiries via the contact form – such as a request for a callback or a request for information material – we will store the details you provide in the enquiry form, including the contact details you have provided there, for the purpose of processing your enquiry and in case of any follow-up questions. We will not pass on this data without your consent. Please refer to sections 1, 2 and 6 in this regard.
3.2. Newsletter subscription
If you would like to subscribe to the newsletter offered on the website, we require your email address and information that enables us to verify that you are the owner of the email address provided and that you consent to receiving the newsletter (double opt-in).
No further data is collected unless provided on an expressly voluntary basis, e.g. to tailor the content to your interests. We store this data and use it exclusively for sending the requested information and for personalising the newsletter. We also carry out link tracking to analyse and continuously improve the newsletter content.
3.2.1. Newsletter tracking
Our newsletters contain what are known as web beacons. A web beacon is a tiny graphic embedded in emails sent in HTML format to enable log file recording and analysis. This allows us to carry out a statistical evaluation of the success or failure of online marketing campaigns. The embedded web beacon enables us to determine whether and when you have opened an email, and which links contained within the email you have clicked on.
Such personal data collected via the tracking pixels contained in the newsletters is stored and analysed by us, as the data controller, in order to optimise the distribution of the newsletter and to tailor the content of future newsletters even better to your interests. This personal data is not passed on to third parties. You are entitled at any time to withdraw the separate declaration of consent given via the double opt-in procedure. Following withdrawal, we will delete this personal data. We automatically interpret unsubscribing from the newsletter as a withdrawal of consent.
3.2.2. Unsubscribe from the newsletter
If at any point you no longer wish to receive the newsletter, you can easily unsubscribe using the link at the end of each newsletter. Please refer to section 2 for further details.
3.3. Downloads
You can download content from our website. Depending on the content, a download may be freely available or registration may be required. If registration is required, this is done via a contact form. Please refer to sections 1, 2 and 3.1.
3.4. Online bookings
On our website, you can register for our offers via our online booking system. Registration takes place as part of the booking process within our IBE (Internet Booking Engine). Please refer to sections 1, 2 and 3.1, as well as our travel and payment terms and conditions.
3.5. Interactive activities
On our website, you have the option to contact us interactively, for example via the chat function. Here, too, you can send us enquiries. To this end, we will store your details – including, where applicable, the contact details you have provided – for the purpose of processing your enquiry and in case of any follow-up questions. We will not pass on this data without your consent.
3.6. Data protection in relation to job applications and the recruitment process
The data controller collects and processes applicants’ personal data for the purpose of handling the application process. Processing may also take place electronically. This is particularly the case where an applicant submits the relevant application documents to the data controller electronically, for example by email or via a web form on the website. If the data controller enters into an employment contract with an applicant, the data provided will be stored for the purpose of managing the employment relationship in accordance with the relevant legal provisions. If the data controller does not enter into an employment contract with the applicant, the application documents will be automatically deleted six months after notification of the rejection decision, provided that no other legitimate interests of the data controller preclude such deletion. Other legitimate interests in this context include, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).
4. Information about your computer, cookies and targeting
4.1. Every time you access our website, we collect the following information about your computer: your computer’s IP address, the request made by your browser, the referring domain, and the date and time of that request. We also record the status and the volume of data transferred as part of this request. We also collect product and version information about the browser and operating system used on your computer. We also record the website from which you accessed our site. Your computer’s IP address is stored only for the duration of your use of the website and is subsequently anonymised by truncation. The remaining data is stored for a limited period. We use this data to operate our website, in particular to identify and rectify website errors, to determine website traffic levels, and to make adjustments or improvements.
4.2. In some circumstances, we may also collect information about your use of our website through the use of so-called browser cookies. These are small text files that are stored on your device and which record certain settings and data for exchange with our system via your browser. Cookies do not cause any damage to your computer and do not contain viruses. A cookie usually contains the name of the domain from which the cookie data was sent, as well as information about the age of the cookie and an alphanumeric identifier. Cookies enable our systems to recognise the user’s device and make any preferences immediately available. As soon as a user accesses the platform, a cookie is sent to the hard drive of that user’s computer. Cookies help us to improve our website and to offer you a better and even more personalised service. Most of the cookies we use are so-called ‘session cookies’. They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your computer when you return to our website, thereby:
- To store information about your preferred activities on the website and thus tailor our website to your individual interests. This includes, for example, offers that match your personal interests;
- To speed up the processing of your enquiries.
4.3. The cookies we use store only the data described above regarding your use of the website. This is not done by linking the data to you personally, but by assigning an identification number to the cookie (‘cookie ID’). The cookie ID is not linked to your name, your IP address or any similar data that would enable the cookie to be linked to you. You can find out how to prevent the use of browser cookies in section 4.6.
4.4. Our website uses so-called tracking technologies. We use these technologies to make our website more interesting for you. This technology enables us to target internet users who have already shown an interest in our website on our partners’ websites. The display of these advertisements on our partners’ websites is based on cookie technology and an analysis of previous usage behaviour. This analysis is carried out under a pseudonym, and no usage profiles are linked to your personal data. If you do not consent to the creation of usage profiles, you may object to this by sending us a message. A special opt-out cookie will then be stored on your computer, which must be retained permanently. If you delete this cookie or if it is automatically deleted via your browser settings, you will need to reinstall this cookie the next time you visit our site.
4.5. We work with the business partners listed below, who help us to make our online offering and website more interesting for you. Consequently, when you visit the website, cookies from these partner companies are also stored on your hard drive. These are cookies that are automatically deleted after a specified period of time. The cookies from our partner companies also collect data solely under a cookie ID, which enables our partners to target you with offers that might actually be of interest to you. You can find out how to prevent the use of such cookies below and in section 4.6.
4.5.1. Google Analytics
This website uses features of Google Analytics, a web analytics service provided by Google Inc. (‘Google’). The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called ‘cookies’, which are text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including your IP address) is usually transmitted to a Google server in the USA and stored there. Further information on how Google Analytics handles user data can be found in Google’s privacy policy:
https://support.google.com/analytics/answer/6004245?hl=de
Google will use this information to evaluate your use of the website, to compile reports on website activity for the website operators, and to provide other services relating to website and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the data on Google’s behalf. Google will under no circumstances associate your IP address with any other data held by Google.
By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.
4.5.1.1. Browser Plugin
You can prevent cookies from being stored by adjusting the settings in your browser software; however, please note that, in this case, you may not be able to make full use of all the features of this website. You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de
4.5.1.2. Objection to data collection by Google
You can also prevent Google Analytics from collecting data by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected in future when you visit this website:
This opt-out cookie must be stored permanently on your computer. If you delete this cookie or if it is automatically deleted via your browser settings, you will need to re-install it the next time you visit our site.
4.5.1.3. IP anonymisation
In light of the debate surrounding the use of analytics tools that process full IP addresses, we would like to point out that this website uses Google Analytics with the ‘IP anonymisation’ feature [_anonymizeIp()] enabled; as a result, IP addresses are only processed in truncated form to prevent direct personal identification. Your IP address is truncated by Google within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data held by Google.
4.5.1.4. Data processing on behalf of a client
We have entered into a data processing agreement with Google and fully comply with the strict requirements of the German data protection authorities when using Google Analytics.
4.5.2. Google AdWords
We use Google Conversion Tracking. This involves Google AdWords placing a cookie on your computer if you have arrived at our website via a Google advert. These cookies expire after 30 days and are not used to identify you personally. If you visit our website whilst the cookie is still valid, both Google and we can recognise that you clicked on the Google advert and were redirected to this page. Each AdWords customer is assigned a different cookie. Cookies cannot therefore be tracked across the websites of AdWords customers. The information collected via the conversion cookie is used to generate conversion statistics for AdWords customers who have opted in to conversion tracking. This enables us to determine the total number of users who clicked on an advert and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users.
If you do not wish to participate in the tracking process, you can also refuse the setting of the cookie required for this – for example, via a browser setting that generally disables the automatic setting of cookies. You can also disable cookies for conversion tracking by configuring your browser to block cookies from the domain ‘www.googleadservices.com’.
Further information on Google’s privacy policy and the cookies used can be found here: https://services.google.com/sitestats/de.html
4.5.3. Google AdWords retargeting technology
This website uses retargeting technology online. This enables us to target internet users who have already shown an interest in our products with advertising. Studies have shown that personalised, interest-based advertising is more appealing to internet users than advertising that lacks such a personal connection. In retargeting, adverts are displayed on the basis of a cookie-based analysis of previous user behaviour. Naturally, no personal data is stored in this process, and, equally naturally, the use of retargeting technology complies with the applicable statutory data protection regulations. If you do not wish to have your data collected and used in this way via Google Inc.’s technologies, you can manage your ad preferences and disable interest-based adverts via the following link:
http://www.google.de/policies/technologies/ads/
4.5.4. Microsoft Bing Ads
We use Microsoft’s conversion tracking (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). Microsoft Bing Ads sets a cookie when a user accesses our website via a Microsoft Bing advert. This enables Microsoft Bing and us to recognise that someone has clicked on an advert, been redirected to our website and reached a pre-defined landing page (conversion page). We are only informed of the total number of users who clicked on a Bing advert and were then redirected to the conversion page. No personal information regarding the user’s identity is disclosed.
If you do not wish to participate in this tracking process, you can also refuse the setting of the necessary cookie via your browser settings – for example, by enabling a setting that generally disables the automatic setting of cookies. If you do not wish to have your data collected and used in this way using Microsoft technologies, you can manage cookies for ad preferences and disable interest-based adverts via the following link: http://choice.microsoft.com/de-DE/opt-out
You can opt out of the Bing Ads optimisation programme via the following link: https://ads.bingads.microsoft.com/de-de/optout-optimization
Further information on Microsoft’s data protection practices and the cookies used can be found here: http://privacy.microsoft.com/DE-DE/fullnotice.mspx
4.5.5. Facebook Remarketing / Retargeting
Auf unseren Seiten sind Remarketing-Tags des sozialen Netzwerks Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA integriert. Wenn Sie unsere Seiten besuchen, wird über die Remarketing-Tags eine direkte Verbindung zwischen Ihrem Browser und dem Facebook-Server hergestellt. Facebook erhält dadurch die Information, dass Sie mit Ihrer IP-Adresse unsere Seite besucht haben. Dadurch kann Facebook den Besuch unserer Seiten Ihrem Benutzerkonto zuordnen. Die so erhaltenen Informationen können wir für die Anzeige von Facebook Ads nutzen. Wir weisen darauf hin, dass wir als Anbieter der Seiten keine Kenntnis vom Inhalt der übermittelten Daten sowie deren Nutzung durch Facebook erhalten. Weitere Informationen hierzu finden Sie in der Datenschutz-Erklärung von Facebook unter https://www.facebook.com/about/privacy/ . Falls Sie keine Datenerfassung via Custom Audience wünschen, können Sie Custom Audiences hier deaktivieren (https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen).
4.5.6. Conversion tracking using Facebook’s visitor action pixel
With your consent, we use the “visitor action pixel” provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) on our website. This enables us to track users’ actions after they have viewed or clicked on a Facebook advert. This enables us to measure the effectiveness of Facebook adverts for statistical and market research purposes. The data collected in this way is anonymous to us; in other words, we do not see the personal data of individual users. However, this data is stored and processed by Facebook, and we are informing you of this to the best of our knowledge. Facebook may link this data to your Facebook account and also use it for its own advertising purposes, in accordance with Facebook’s Data Use Policy https://www.facebook.com/about/privacy/. You can allow Facebook and its partners to display adverts on and off Facebook. A cookie may also be stored on your computer for these purposes.
4.5.7. Privacy policy regarding the use of Facebook plugins (Like button):
Our website incorporates plugins from the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA. You can recognise the Facebook plugins by the Facebook logo or the ‘Like’ button on our website. You can find an overview of the Facebook plugins here: http://developers.facebook.com/docs/plugins/ When you visit our website, the plugin establishes a direct connection between your browser and the Facebook server. This informs Facebook that you have visited our site using your IP address. If you click the Facebook ‘Like’ button whilst logged into your Facebook account, you can link the content of our pages to your Facebook profile. This enables Facebook to associate your visit to our pages with your user account. Please note that, as the provider of these pages, we have no knowledge of the content of the data transmitted or how it is used by Facebook. Further information on this can be found in Facebook’s privacy policy at http://de-de.facebook.com/policy.php. If you do not wish Facebook to be able to associate your visit to our pages with your Facebook user account, please log out of your Facebook account.
4.5.8. Browser-Cookies
Sollten Sie eine Verwendung von Browser-Cookies nicht wünschen, können Sie Ihren Browser so einstellen, dass Sie über das Setzen von Cookies informiert werden und Cookies nur im Einzelfall erlauben, die Annahme von Cookies für bestimmte Fälle oder generell ausschließen sowie das automatische Löschen der Cookies beim Schließen des Browsers aktivieren. Bitte beachten Sie, dass Sie unsere Website bei der Deaktivierung von Cookies ggf. nur eingeschränkt oder gar nicht nutzen können.
Wenn Sie nur unsere eigenen Cookies, nicht aber die Cookies unserer Dienstleister und Partner akzeptieren wollen, können Sie die Einstellung in Ihrem Browser „Cookies von Drittanbietern blockieren“ wählen.
4.5.9. Log files
The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
This data cannot be attributed to specific individuals. This data is not combined with other data sources. We reserve the right to review this data retrospectively should we become aware of specific indications of unlawful use.
4.5.10 Use of SalesViewer® technologyThis website uses SalesViewer® technology from SalesViewer® GmbH on the basis of the website operator’s legitimate interests (Section 6 paragraph 1 lit.f GDPR) in order to collect and save data on marketing, market research and optimisation purposes.
In order to do this, a javascript based code, which serves to capture company-related data and according website usage. The data captured using this technology are encrypted in a non-retrievable one-way function (so-called hashing). The data is immediately pseudonymised and is not used to identify website visitors personally
The data stored by SalesViewer® will be deleted as soon as they are no longer required for their intended purpose and there are no legal obligations to retain them.
The data recording and storage can be repealed at any time with immediate effect for the future, by clicking on www.salesviewer.com/opt-out in order to prevent SalesViewer® from recording your data. In this case, an opt-out cookie for this website is saved on your device. If you delete the cookies in the browser, you will need to click on this link again.
5. Data security
All information you provide to us is stored on servers within the European Union. Unfortunately, the transmission of information over the internet is not entirely secure, which is why we cannot guarantee the security of data transmitted to our website via the internet. However, we protect our website and other systems against the loss, destruction, unauthorised access, alteration or disclosure of your data by unauthorised persons through technical and organisational measures. In particular, your personal data is transmitted to us in encrypted form. We use the TLS (Transport Layer Security) encryption system for this purpose. You can recognise an encrypted connection by the fact that the address bar of your browser changes from ‘http://’ to ‘https://’ and by the padlock symbol in your browser bar. When TLS encryption is enabled, the data you send to us cannot be read by third parties.
We cannot guarantee complete data security when communicating by email; therefore, we recommend that you send confidential information by post:
Mondiani Group GmbH
Walter-Köhn-Straße 4D
04356 Leipzig
6. We will not pass on your personal data
We do not disclose your personal data to third parties unless you have consented to such disclosure or we are entitled or obliged to do so under statutory provisions and/or official or court orders. This may, in particular, involve the provision of information for the purposes of criminal prosecution, to avert danger or to enforce intellectual property rights.
7. Opting out of promotional emails
We hereby object to the use of contact details published in accordance with the legal requirement to provide an imprint for the purpose of sending unsolicited advertising and information material. The operators of this website expressly reserve the right to take legal action in the event of unsolicited advertising being sent, for example via spam emails.
8. Changes to this Privacy Policy
We reserve the right to amend this privacy policy at any time with future effect. The latest version is available on the website. Please visit the website regularly to keep up to date with the current privacy policy. If you have registered on our website using your email address, we will also notify you of any changes to the privacy policy by email.
9. Routine erasure and restriction of personal data
As the data controller, we process and store your personal data only for the period necessary to fulfil the purpose of storage, or insofar as this is provided for by the European legislative authorities or by another legislative authority in laws or regulations to which we, as the data controller, are subject.
If the purpose of storage no longer applies or if a retention period prescribed by the European legislative and regulatory authorities or another competent legislative body expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.
10. Rights of the data subject
10.1. Right to confirmation
You have the right to request confirmation from us as to whether personal data relating to you is being processed. If you wish to exercise this right to confirmation, you may contact our Data Protection Officer at any time.
10.2. Right of access
You have the right to receive, at any time and free of charge, information from us regarding the personal data we hold about you, and a copy of that information. Furthermore, the European legislators and regulators have granted you the following rights:
- the right of access
- regarding the purposes of processing
- regarding the categories of personal data being processed
- regarding the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular where recipients are in third countries or are international organisations
- where possible, the envisaged period for which the personal data will be stored, or, if that is not possible, the criteria used to determine that period
on the existence of automated decision-making, including profiling, in accordance with Article 22(1) and (4) of the GDPR and — at least in such cases — meaningful information about the logic involved, as well as the significance and the intended consequences of such processing for you - if the personal data were not collected from you
- information on all available details regarding the origin of the data
You also have the right to be informed as to whether personal data has been transferred to a third country or to an international organisation. If this is the case, you are also entitled to receive information about the appropriate safeguards in connection with the transfer.
If you wish to exercise this right, you may contact our Data Protection Officer at any time.
10.3. Right to rectification
You have the right to request the immediate rectification of any inaccurate personal data concerning you. Furthermore, you have the right to request that incomplete personal data be completed — including by means of a supplementary statement — taking into account the purposes of the processing.
If you wish to exercise this right to rectification, you may contact our Data Protection Officer at any time.
10.4. Right to erasure (the right to be forgotten)
You have the right to request that we erase your personal data without delay, provided that one of the following grounds applies and insofar as the processing is not necessary:
- The personal data was collected or otherwise processed for purposes for which it is no longer necessary.
- The data subject withdraws their consent on which the processing was based in accordance with Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, and there is no other legal basis for the processing.
- The data subject objects to the processing in accordance with Article 21(1) of the GDPR, and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing in accordance with Article 21(2) of the GDPR.
- The personal data was processed unlawfully.
- The erasure of personal data is necessary for compliance with a legal obligation under Union law or the law of the Member States to which the controller is subject.
- Personal data was collected in connection with the information society services offered, in accordance with Article 8(1) of the GDPR.
If any of the above reasons apply and you wish to request the erasure of personal data held by us, you may contact our Data Protection Officer at any time. Our Data Protection Officer, or a member of staff appointed by them, will ensure that the request for erasure is complied with without delay.
If the personal data has been made public by us and our company, as the data controller, is obliged to delete the personal data in accordance with Article 17(1) of the GDPR, we shall take appropriate measures, including technical measures, taking into account the available technology and the costs of implementation, to inform other data controllers who are processing the published personal data that you have requested those other data controllers to delete all links to your personal data or any copies or replicas of your personal data, insofar as the processing is not necessary. Our Data Protection Officer or a member of staff designated by them will take the necessary steps on a case-by-case basis.
10.5. Right to restriction of processing
You have the right to request that we restrict the processing of your personal data if any of the following conditions apply:
- You are disputing the accuracy of the personal data for a period that allows us, as the data controller, to verify the accuracy of the personal data.
- The processing is unlawful; you object to the erasure of the personal data and instead request that the use of the personal data be restricted.
- We, as the data controller, no longer require the personal data for the purposes of processing; however, you, as the data subject, require it in order to establish, exercise or defend legal claims.
- You have lodged an objection to the processing in accordance with Article 21(1) of the GDPR, and it has not yet been determined whether our legitimate grounds override your interests as the data subject.
If any of the above conditions apply and you wish to request the restriction of the processing of personal data held by us, you may contact our Data Protection Officer at any time. Our Data Protection Officer, or a member of staff appointed by him, will arrange for the processing to be restricted.
10.6. Right to data portability
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us, as the controller to whom the personal data was provided, provided that the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR, and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us as the controller.
Furthermore, when exercising your right to data portability under Article 20(1) of the GDPR, you have the right to have the personal data transferred directly from one controller to another, provided this is technically feasible and does not adversely affect the rights and freedoms of others.
To exercise your right to data portability, you may contact our Data Protection Officer at any time.
10.7. Right to object
You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) of the GDPR. This also applies to profiling based on these provisions.
In the event of an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.
If we process personal data for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purposes of such marketing. This also applies to profiling, insofar as it is related to such direct marketing. If you object to the processing of your personal data for direct marketing purposes, we will no longer process your personal data for these purposes. If you wish to exercise this right to object, please contact: info@mondiani.travel
Furthermore, you have the right to object, on grounds relating to your particular situation, to the processing of your personal data carried out by us for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) of the GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.
To exercise your right to object, you may contact our Data Protection Officer. You are also free, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object by means of automated procedures using technical specifications.
10.8. Automated decision-making in individual cases, including profiling
You have the right not to be subject to a decision based solely on automated processing — including profiling — which produces legal effects concerning you or similarly significantly affects you, provided that the decision (1) is not necessary for the conclusion or performance of a contract between you and us, or (2) is authorised by Union or Member State legislation to which we are subject, and that legislation provides for appropriate measures to safeguard your rights and freedoms as well as your legitimate interests; or (3) is based on your explicit consent.
If the decision is (1) necessary for the conclusion or performance of a contract between you and us, or (2) is made with the data subject’s explicit consent, we will take appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, including, at a minimum, the right to request human intervention on our part, to set out your own point of view, and to challenge the decision.
If you wish to exercise your rights in relation to automated decisions, you may contact our Data Protection Officer at any time.
10.9. Right to withdraw consent under data protection law
You have the right to withdraw your consent to the processing of personal data at any time.
If you wish to exercise your right to withdraw your consent, you may contact our Data Protection Officer at any time.
11. Legal basis for processing
Article 6(1)(a) of the GDPR serves as the legal basis for our company’s processing operations where we obtain consent for a specific purpose of processing. Where the processing of personal data is necessary for the performance of a contract to which you are a party – as is the case, for example, with processing operations required to fulfil a travel contract or to provide any other service or consideration – the processing is based on Article 6(1)(b) of the GDPR. The same applies to processing operations necessary for the implementation of pre-contractual measures, such as in cases of enquiries regarding our products or services. Where our company is subject to a legal obligation requiring the processing of personal data, such as to fulfil tax obligations, the processing is based on Article 6(1)(c) of the GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our premises or a participant on one of our trips were to be injured and, as a result, their name, age, health insurance details or other vital information had to be disclosed to a doctor, a hospital or other third parties. In such cases, the processing would be based on Article 6(1)(d) of the GDPR. Finally, processing operations may be based on Article 6(1)(f) of the GDPR. This legal basis applies to processing operations not covered by any of the aforementioned legal bases, where the processing is necessary to safeguard a legitimate interest of our company or a third party, provided that your interests, fundamental rights and freedoms do not override those interests. We are permitted to carry out such processing operations in particular because they have been specifically mentioned by the European legislator. In this regard, the legislator took the view that a legitimate interest could be assumed if you are a customer of ours (Recital 47, second sentence, of the GDPR).
12. Legitimate interests in processing pursued by the controller or a third party
Where the processing of personal data is based on Article 6(1)(f) of the GDPR, our legitimate interest is the conduct of our business activities for the benefit of the well-being of all our employees and shareholders.
13. Legal or contractual requirements regarding the provision of personal data; necessity for the conclusion of the contract; the data subject’s obligation to provide personal data; possible consequences of failure to provide such data
We would like to inform you that the provision of personal data is, in some cases, required by law (e.g. tax regulations) or may also arise from contractual provisions (e.g. details of the contracting party). In some cases, it may be necessary for you to provide us with personal data in order to conclude a contract, which we must then process. For example, you are obliged to provide us with personal data if our company enters into a contract with you. Failure to provide this personal data would mean that the contract with you could not be concluded. Before you provide any personal data, you may contact our Data Protection Officer. Our Data Protection Officer will advise you on a case-by-case basis as to whether the provision of personal data is required by law or contract, or is necessary for the conclusion of the contract; whether there is an obligation to provide the personal data; and what the consequences would be if the personal data were not provided.
14. The existence of automated decision-making
As a responsible company, we do not use automated decision-making or profiling.
15. Contact
If you wish to exercise any of the above rights, please contact our Data Protection Officer. Data held for billing and accounting purposes is not affected by any cancellation or deletion. Should you have any comments or suggestions regarding our collection, processing and use of your personal data, please also contact us by email at: info@mondiani.travel
As at September 2026
Legal Notice
Mondiani Group GmbH
Walter-Köhn-Str. 4D
D-04356 Leipzig
GERMANY
Phone: (+49) 0341 909 87 46
Email: info@mondiani.travel