Privacy Policy

1) Introduction and contact details

1.1 On this page, we will inform you about how we handle your personal data when you use our website. Personal data is all data that can be used to personally identify you. The protection of your data is very important to us. That is why we do not use countless cookies from third-party providers on our site.

1.2 The controller in charge of data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is 22places Media S.L., Calle Anzuelo 28, 35660 Corralejo, Las Palmas, Spain, E-Mail: hey@22places.de. The controller of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

2) Data collection when you visit our website

2.1 When you simply use our website, i.e. if you do not register or provide us with information, we only collect the data that your browser transmits to the page server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website:

  • Our visited website
  • Date and time of access
  • Amount of data sent in bytes
  • Source/reference from which you came to the page
  • Browser used
  • Operating system used
  • IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 (1) point f GDPR, on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the responsible party). You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser line.

3) Cookies

To make visiting our website more attractive and to enable the use of certain functions, we use cookies, which are small text files placed on your device. Most of these cookies are automatically deleted after closing the browser (so-called “session cookies”), but some of these cookies remain on your device for longer and enable the storage of page settings (so-called “persistent cookies”). In the latter case, you can see the storage period in the cookie settings of your web browser.

We set a cookie that is valid for 90 days when you close our newsletter popup. This cookie stores your decision so that the popup will not be displayed again for the next 90 days.

You can adjust your browser settings so that you are informed when cookies are set and can decide whether to accept them individually or to exclude the acceptance of cookies in certain cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be limited.

4) Contact

When you contact us (e.g. using the contact form or by email), personal data is collected. This data is stored and used solely for the purpose of answering your request or for establishing contact and for the associated technical administration.

The legal basis for processing this data is our legitimate interest in answering your request in accordance with Article 6 (1) (f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after the final processing of your request. This is the case if it can be inferred from the circumstances that the facts in question have been finally clarified and provided that there are no legal storage requirements.

5) Comment function

As part of the comment function on this website, in addition to your comment, information about when the comment was created and the commentator name you have chosen will be stored and published on this website. Furthermore, your IP address will be logged and stored. This storage of the IP address is for security reasons and in case the person concerned violates the rights of third parties or posts illegal content through a submitted comment. We need your email address to contact you if a third party objects to your published content as unlawful.

The legal basis for the storage of your data is Art. 6 para. 1 lit. b and f GDPR. We reserve the right to delete comments if they are objected to by third parties as unlawful.

6) Use of customer data for direct mail

6.1 Registration for our e-mail newsletter

If you register for our e-mail newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your e-mail address. The provision of further data is voluntary and is used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an e-mail newsletter if you have expressly confirmed to us that you agree to receive the newsletter. We will then send you a confirmation e-mail asking you to confirm that you wish to receive the newsletter in the future by clicking on a corresponding link.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 (1) point a GDPR. When you register for the newsletter, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later point in time. The data collected by us when registering for the newsletter will be used exclusively for the purpose of promotional speech by way of the newsletter. You can unsubscribe at any time via the link provided in the newsletter or by sending a message to the responsible persons named above. After you have successfully unsubscribed, your e-mail address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use the data in a manner that goes beyond this, which is permitted by law and about which we inform you in this statement.

6.2 ActiveCampaign

Our e-mail newsletter is sent via this provider: ActiveCampaign, LLC, 150 N. Michigan Ave Suite 1230, Chicago, IL, USA

On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we provide your data provided during newsletter registration in accordance with Art. 6 para. 1 lit. f DSGVO to this provider, so that the newsletter is sent on our behalf.

Subject to your express consent in accordance with Art. 6 (1) point a GDPR, the provider will also carry out a statistical success evaluation of newsletter campaigns using web beacons or tracking pixels in the e-mails sent, which can measure opening rates and specific interactions with the contents of the newsletter. In doing so, end device information (e.g. time of access, IP address, browser type and operating system) is also collected and evaluated, but not merged with other data sets.

You can revoke your consent to newsletter tracking at any time with effect for the future.

We have concluded an order processing contract with the provider that protects the data of our site visitors and prohibits the transfer of such data to third parties.

For data transfers to the US, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

7) Online marketing

We participate in affiliate programs from the following providers:

  • 12Go Asia Pte., Ltd., 135 Cecil Street, 10 – 01 Philippine Airlines Building, 069536, Singapore
  • ADRENALINE HUNTER SAS, 32 rue Paradis 75010 Paris, France
  • Amazon EU S.a.r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg
  • AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany
  • Bergfreunde GmbH, Bahnhofstr. 26, 72138 Kirchentellinsfurt, Germany
  • Booking.com B.V. Herengracht 597, 1017 CE Amsterdam, Netherlands
  • TARIF CHECK24 GmbH, Zollstraße 11b, 21465 Wentorf, Germany
  • financeAds GmbH & Co. KG, Karlstraße 9, 90403 Nuremberg, Germany
  • GetYourGuide Deutschland GmbH, Sonnenburger Straße 73, 10437 Berlin, Germany
  • Globetrotter Ausrüstung GmbH, Neuer Höltigbaum 6, 22143 Hamburg, Germany
  • HELLO TICKET S.L., Paseo de las Delicias 110, 7B, 28045, Madrid, Spain
  • Hifi & Foto Koch, Schadowstr. 60/62, 40212 Düsseldorf, Germany
  • Japan Rail Pass S.L., Avda. Litoral, 12 08005 Barcelona, Spain
  • netzeffekt GmbH, Agnes-Bernauer-Straße, 90 80687 Munich, Germany
  • Performance Horizon Group Limited, Level 8, West One, Forth Banks, Newcastle Upon Tyne, Tyne and Wear, NE1 3PA, United Kingdom
  • Sports Events 365 Ltd., HaEtgar St. 2, Tirat Carmel 3910101, Israel
  • Tiqets International B.V. is located at James Wattstraat 77, 1097 DM Amsterdam, Netherlands
  • Tradedoubler GmbH, Herzog-Wilhelm-Straße 26, 80331 Munich, Germany

In this context, we have placed links on our website that lead to offers on the websites of providers or third parties (“partner sites”).

To measure the success of an affiliate link, to evaluate orders generated via such a link and to bill the corresponding commission payments, the providers use cookies and/or comparable technologies that are generally set on the partner pages and for which we are not responsible in terms of data protection. In doing so, the providers also regularly process the IP address and, if applicable, further end device information.

All of the processing described above, in particular the reading or saving of information on the end device you are using, will only take place if you have given your express consent to do so in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time with effect for the future by using the cookie consent management options on the partner pages.

8) Web analytics services

Plausible

This website uses “Plausible”, a web analytics tool from Plausible Insights OÜ Västriku tn 2, 50403, Tartu, Estonia.

It is used to anonymously record the interactions of randomly selected individual visitors with the website. This creates a protocol of, for example, mouse movements and clicks with the aim of identifying opportunities for improving the respective website. At no time are personal data collected or processed. Plausible only collects non-personal data when using this website, such as information about the browser and the user agent. These are stored in a form that cannot be linked to a particular individual and are evaluated for statistical purposes. They are deleted as soon as the data are no longer needed for our evaluation purposes.

If, in individual cases, personal data is processed, the processing is carried out on the basis of our legitimate interest in the statistical evaluation of user behavior for optimization purposes in accordance with Art. 6 (1) point f GDPR.

Matomo

This website uses the open-source web analytics service Matomo.

With the help of Matomo, we are able to collect and analyze data about the use of our website by visitors. This enables us, among other things, to find out when which pages were viewed and from which region they come. In addition, we collect various log files (e.g. IP address, referrer, browser and operating system used) and can measure whether our website visitors perform certain actions (e.g. clicks, purchases, etc.).

This analysis tool is used on the basis of Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in the analysis of user patterns to optimize both, the services offered online and the operator’s advertising activities. If the appropriate consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. The consent can be revoked at any time.

We use IP anonymization when analyzing with Matomo. This means that your IP address is shortened before the analysis so that it can no longer be clearly assigned to you. We host Matomo on our own servers so that all analysis data remains with us and is not passed on.

9) Site functionalities

Applications for job postings by email

On our website, we advertise currently vacant positions in a separate section, for which interested parties can apply by e-mail to the provided contact address.

Applicants must provide all personal data necessary for a well-founded assessment, including general information such as name, address and contact details, as well as performance-related evidence and, if applicable, health-related information. Details of the application can be found in the job advertisement.

After receipt of the application by e-mail, the data will be stored and evaluated exclusively for the purpose of processing the application. If we have any questions, we will either use the applicant’s e-mail address or telephone number. The processing is carried out on the basis of Art. 6 (1) point b GDPR (or Art. 26 (1) Federal Data Protection Act (BDSG)), in which the completion of the application procedure is considered to be the initiation of an employment contract.

Insofar as special categories of personal data within the meaning of Art. 9 (1) GDPR (e.g. health data such as information on severely disabled status) are requested from applicants as part of the application process, the processing is carried out in accordance with Art. 9 (2) point b. DSGVO, so that we can exercise the rights arising from labor law and the law of social security and social protection and fulfill our obligations in this regard.

If an applicant is not selected or withdraws their application prematurely, the data they have submitted, as well as all electronic correspondence including the application email, will be deleted after a corresponding notification, at the latest after six months. This period is based on our legitimate interest in answering any follow-up questions regarding the application and, if necessary, to be able to fulfil our obligations to provide evidence under the regulations for the equal treatment of applicants.

In the event of a successful application, the data provided will be processed on the basis of Art. 6 para. 1 lit. b DSGVO (in the case of processing in Germany in conjunction with § 26 para. 1 BDSG) for the purpose of implementing the employment relationship.

10) Tools and Miscellaneous

10.1 Scalable Centralized Measurement Method of VG Wort

On our website, we use the “Skalierbares Zentrales Messverfahren” (SZM) of the following provider to determine statistical parameters for determining the copy probability of texts: Verwertungsgesellschaft WORT (VG WORT), Untere Weidenstraße 5, 81543 Munich, Germany

Anonymous measurement data is collected for the aforementioned analysis. The access rate measurement uses either a session cookie or a signature created from various automatically transmitted information from your browser to recognize computer systems. IP addresses that are part of the information used to create the signature are only processed in anonymized form for this purpose.

Session cookies are small pieces of information that a provider stores in the main memory of a visitor’s computer. A randomly generated unique identification number, a so-called session ID, is stored in a session cookie. In addition, a cookie contains information about its origin and the storage period. Session cookies cannot store any other data.

Insofar as personal data is processed in the course of the processing activity described, this is done in accordance with Art. 6 (1) point f GDPR, on the basis of our legitimate interest in determining the copying probability of individual texts in order to substantiate the remuneration claims of authors and publishers.

To prevent cookies from being stored in your browser, you can set your browser so that you are informed when cookies are set and can decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general. If you choose not to accept cookies, the functionality of our website may be limited.

To the extent required by law, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please follow the procedure described above for lodging an objection.

10.2 – DATEV

We use the services of the cloud-based accounting software from the following provider to do our bookkeeping: DATEV eG, Paumgartnerstr. 6-14, 90429 Nuremberg, Germany

The provider processes incoming and outgoing invoices as well as, if applicable, our company’s bank transactions in order to automatically record invoices, match them to the transactions and use them to create the financial accounting in a partially automated process.

Insofar as personal data is also processed in this context, the processing is carried out in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in the efficient organization and documentation of our business transactions.

11) Rights of the data subject

11.1 The applicable data protection law grants you the following rights (rights of information and intervention) vis-à-vis the data controller with regard to the processing of your personal data, whereby reference is made to the legal basis stated for the respective conditions of exercise:

  • Right of access according to Art. 15 GDPR;
  • Right to rectification according to Art. 16 GDPR;
  • right to erasure in accordance with Art. 17 GDPR;
  • Right to restriction of processing in accordance with Art. 18 GDPR;
  • Right to information in accordance with Art. 19 GDPR;
  • Right to data portability in accordance with Art. 20 GDPR;
  • Right to revoke consent granted in accordance with Art. 7 (3) GDPR;
  • Right to lodge a complaint in accordance with Art. 77 GDPR.

11.2 RIGHT TO OBJECT

IF, IN THE CONTEXT OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT OF OBJECTION, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING YOUR DATA IF WE CAN PROVE THAT THERE ARE COMPELLING REASONS FOR PROCESSING IT THAT OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. YOU CAN EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

12) Duration of storage of personal data

The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of the processing and, if relevant, additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).

When processing personal data on the basis of express consent in accordance with Art. 6 (1) point a GDPR, the data concerned will be stored until you revoke your consent.

If there are statutory retention periods for data that is processed in the context of legal or similar obligations on the basis of Art. 6 para. 1 lit. b DSGVO are processed, these data are routinely deleted after the retention periods have expired, provided that they are no longer required for the fulfillment or initiation of the contract and/or there is no longer any legitimate interest on our part in further storage.

When processing personal data on the basis of Art. 6 para. 1 lit. f GDPR, this data is stored until you exercise your right of objection under Art. 21 para. 1 GDPR, unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct marketing on the basis of Art. 6 (1) point f GDPR, this data is stored until you exercise your right of objection under Art. 21 (2) GDPR.

Unless otherwise provided in the other information in this declaration regarding specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary in relation to the purposes for which they were collected or otherwise processed.