1) Introduction and contact details of the controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data means any information relating to an identified or identifiable natural person.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Franziska Griethe, FG Content Creation, Scheiblerstr. 24, 12437 Berlin, Germany, Tel.: +49 176 93127871, Email: francesca@franceandtheworld.com. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
2) Data collection when visiting our website
2.1 When you use our website for informational purposes only, i.e., if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to the server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website:
- Website visited
- Date and time of access
- Amount of data sent in bytes
- Referrer/source from which you reached the page
- Browser used
- Operating system used
- IP address used (where applicable, in anonymized form)
Processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or otherwise used. However, we reserve the right to check the server log files retrospectively if there are specific indications of unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser’s address bar.
3) Hosting & content delivery network
We use a service provider for hosting our website and displaying its content. The provider performs its services either directly or through selected subcontractors exclusively on servers located within the European Union.
All data collected on our website is processed on these servers.
We have concluded a data processing agreement with the provider to ensure the protection of our website visitors’ data and to prohibit unauthorized disclosure to third parties.
4) Cookies
To make visiting our website attractive and to enable the use of certain functions, we use cookies—small text files that are stored on your device. Some of these cookies are automatically deleted after closing your browser (“session cookies”), while others remain on your device for a longer period and enable the storage of site settings (“persistent cookies”). The storage duration of persistent cookies can be found in your browser’s cookie settings.
Where personal data is also processed by individual cookies we use, the processing takes place either pursuant to Art. 6(1)(b) GDPR for contract performance, pursuant to Art. 6(1)(a) GDPR if consent has been given, or pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and a customer-friendly and effective design of the website experience.
You can configure your browser to notify you when cookies are set, to decide individually whether to accept them, or to exclude the acceptance of cookies for specific cases or in general.
Please note that disabling cookies may limit the functionality of our website.
5) Contact
When contacting us (e.g., via contact form or email), personal data is collected. The specific data collected in the case of using a contact form is evident from the respective form. This data is stored and used solely for the purpose of responding to your inquiry or for contacting you and the associated technical administration.
The legal basis for processing this data is our legitimate interest in responding to your request pursuant to Art. 6(1)(f) GDPR. If your inquiry is aimed at the conclusion of a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted once your request has been fully processed, provided that there are no statutory retention obligations to the contrary.
6) Comment function
Within the comment function on this website, information you provide, such as your comment, the time it was created, and the username you chose, will be stored and published on the website. Additionally, your IP address will be logged and stored. This storage of the IP address is necessary for security reasons and in the event that the person concerned violates the rights of third parties or posts unlawful content. Your email address is required in order to contact you if a third party objects to your published content as unlawful.
The legal bases for storing your data are Art. 6(1)(b) and (f) GDPR. We reserve the right to delete comments if they are objected to as unlawful by third parties.
7) Use of customer data for direct advertising
Subscription to Our Email Newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. The provision of further data is voluntary and will be used to address you personally. For the newsletter distribution, we use the double opt-in procedure. This means we will only send you an email newsletter once you have expressly confirmed that you agree to receive newsletters. We will then send you a confirmation email asking you to confirm your subscription by clicking on a corresponding link.
By activating the confirmation link, you give us your consent to the use of your personal data pursuant to Art. 6(1)(a) GDPR. When registering for the newsletter, we store your IP address as provided by your internet service provider (ISP), as well as the date and time of registration, in order to trace possible misuse of your email address at a later time. The data collected during newsletter registration will be used exclusively for the purpose of promotional communication via the newsletter. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a message to the controller named above. Upon unsubscribing, your email address will be deleted from our mailing list without delay unless you have expressly consented to further use of your data or we reserve the right to use data beyond this scope where legally permitted and as explained in this privacy policy.
8) Online-Marketing
GetYourGuide Affiliate Program
We participate in the affiliate program of the following provider: GetYourGuide Deutschland GmbH, Sonnenburger Straße 73, 10437 Berlin, Germany.
In this context, we have placed links on our website that lead to offers on the provider’s or third-party (“partner”) websites.
To measure the success of an affiliate link, evaluate orders generated via such links, and calculate commission payments, the provider uses cookies and/or comparable technologies, which are generally set on the partner websites and for which we are not responsible under data protection law. In this process, the provider may also regularly process the IP address and possibly other device information.
All processing described above, in particular the reading out or saving of information on your device, only takes place if you have given your express consent pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time with effect for the future by using the consent management options on the partner websites.
9) Tools and Miscellaneous
Cookie Consent Tool
This website uses a so-called “cookie consent tool” to obtain valid user consents for cookies and cookie-based applications requiring consent. The cookie consent tool is displayed to users upon visiting the site in the form of an interactive user interface, where consents can be given for specific cookies and/or cookie-based applications by ticking boxes. By using the tool, all cookies/services requiring consent are only loaded when the respective user gives consent by ticking the box. This ensures that such cookies are only set on the user’s device if consent has been given.
The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed in this context.
Where, in exceptional cases, personal data (such as the IP address) is processed for the purpose of storing, assigning, or logging cookie settings, this processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in a legally compliant, user-specific, and user-friendly consent management for cookies and therefore in a legally compliant design of our online presence.
Another legal basis for the processing is Art. 6(1)(c) GDPR. As the controller, we are legally obliged to make the use of technically unnecessary cookies dependent on the respective user consent.
If necessary, we have concluded a data processing agreement with the provider to ensure the protection of our website visitors’ data and to prohibit unauthorized disclosure to third parties.
Further information about the operator and the settings of the cookie consent tool can be found directly in the corresponding user interface on our website.
10) Rights of the Data Subject
10.1 Under applicable data protection law, you have the following rights vis-à-vis the controller regarding the processing of your personal data (rights of access and intervention), with reference to the legal basis for exercising them:
- Right of access pursuant to Art. 15 GDPR
- Right to rectification pursuant to Art. 16 GDPR
- Right to erasure pursuant to Art. 17 GDPR
- Right to restriction of processing pursuant to Art. 18 GDPR
- Right to notification pursuant to Art. 19 GDPR
- Right to data portability pursuant to Art. 20 GDPR
- Right to withdraw consent granted pursuant to Art. 7 para. 3 GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR
10.2 Right to Object
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST AS PART OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU CAN EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
11) Duration of Storage of Personal Data
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing, and—if applicable—statutory retention periods (e.g., commercial and tax retention periods).
When processing personal data on the basis of an express consent pursuant to Art. 6(1)(a) GDPR, the data concerned will be stored until you revoke your consent.
If statutory retention periods apply to data processed in the context of legal or quasi-legal obligations on the basis of Art. 6(1)(b) GDPR, such data will be routinely deleted after expiry of the retention periods, provided that it is no longer required for contract performance or contract initiation and/or there is no legitimate interest on our part in continued storage.
When processing personal data on the basis of Art. 6(1)(f) GDPR, such data will be stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
When processing personal data for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, such data will be stored until you exercise your right to object pursuant to Art. 21(2) GDPR.
Unless otherwise stated in the specific information of this declaration, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.
