Skip to content Skip to footer

Privacy Policy

We hereby inform you in accordance with the legal requirements of data protection law (in particular the BDSG n.F. and the European General Data Protection Regulation “GDPR”) about the type, scope, and purpose of the processing of personal data by our company. This privacy policy also applies to our websites and social media profiles. For definitions of terms such as “personal data” or “processing,” we refer to Article 4 GDPR.

Name and Contact Information of the Controller
The controller within the meaning of Article 4 No. 7 GDPR is:

Pierre Pienaar finest travel AFRICA 79A Bellairs Dr Südafrika Glenvista, Johannesburg 2091 Kontakt Telefon: +49 40 882 155 362 E-Mail: info@finesttravelafrica.com

Types of Data, Purposes of Processing, and Categories of Data Subjects

Below, we inform you about the type, scope, and purpose of the collection, processing, and use of personal data.

1. Types of Data Processed
Usage data (access times, visited websites, etc.), master data (name, address, etc.), contact data (telephone number, email, fax, etc.), payment data (bank account details, payment history, etc.), contract data (contract subject, duration, etc.), content data (text entries, videos, photos, etc.), communication data (IP address, etc.).

2. Purposes of Processing under Article 13 Paragraph 1(c) GDPR
Contract execution, evidence purposes/evidence preservation, technical and economic optimization of the website, enabling easy access to the website, fulfillment of contractual obligations, compliance with legal retention obligations, optimization and statistical evaluation of our services, supporting the commercial use of the website, improving user experience, creating a user-friendly website, economic operation of advertising and website, marketing/sales/advertising, creating statistics, spam and abuse prevention, handling an application process, customer service and care, processing contact requests, providing websites with functions and content, ensuring security measures, uninterrupted, secure operation of our website.

3. Categories of Data Subjects under Article 13 Paragraph 1(e) GDPR
Visitors/users of the website, customers, interested parties, applicants, employees.

The affected individuals are collectively referred to as “users.”

Legal Basis for Processing Personal Data

Below, we inform you about the legal bases for processing personal data:

  • If we obtain your consent for processing personal data, the legal basis is Article 6 Paragraph 1 Sentence 1(a) GDPR.
  • If the processing is necessary for the fulfillment of a contract or for the implementation of pre-contractual measures at your request, the legal basis is Article 6 Paragraph 1 Sentence 1(b) GDPR.
  • If processing is necessary for compliance with a legal obligation to which we are subject (e.g., statutory retention obligations), the legal basis is Article 6 Paragraph 1 Sentence 1(c) GDPR.
  • If processing is necessary to protect the vital interests of the data subject or another natural person, the legal basis is Article 6 Paragraph 1 Sentence 1(d) GDPR.
  • If processing is necessary for the purposes of the legitimate interests pursued by us or a third party, and such interests are not overridden by your interests or fundamental rights and freedoms, the legal basis is Article 6 Paragraph 1 Sentence 1(f) GDPR.

Transfer of Personal Data to Third Parties and Data Processors

As a rule, we do not transfer your data to third parties without your consent. If this is necessary, the transfer will occur based on the above-mentioned legal bases, e.g., in the case of passing data to online payment providers for contract fulfillment or due to a court order or a legal obligation to disclose data for law enforcement, security, or intellectual property enforcement purposes.

We also use data processors (external service providers, e.g., for hosting our websites and databases) to process your data. If data is transferred to processors within the scope of a processing agreement, it always occurs in accordance with Article 28 GDPR. We select our processors carefully, monitor them regularly, and reserve the right to issue instructions regarding the data. Additionally, processors are required to implement appropriate technical and organizational measures and comply with data protection regulations under the BDSG n.F. and GDPR.

Data Transfers to Third Countries

The European General Data Protection Regulation (GDPR) provides a unified framework for data protection in Europe. Therefore, your data is primarily processed by companies for which GDPR applies. Should processing occur by third-party providers outside the European Union or the European Economic Area, these providers must comply with the special conditions of Articles 44 ff. GDPR. This means that processing is based on specific guarantees, such as the EU Commission’s officially recognized decision on an appropriate level of data protection or adherence to officially recognized contractual obligations, known as “Standard Contractual Clauses.”

If we request your explicit consent for data transfer to the USA under Article 49 Paragraph 1 Sentence 1(a) GDPR due to the invalidity of the so-called “Privacy Shield,” we draw your attention to the risk of potential secret access by US authorities and data use for surveillance purposes, possibly without legal recourse for EU citizens.

Deletion of Data and Retention Period

Unless expressly stated otherwise in this privacy policy, your personal data will be deleted or blocked as soon as the consent granted by you is revoked, the purpose for the storage ceases to apply, or the data is no longer necessary for that purpose. Exceptions include situations where further storage is required for evidentiary purposes or where statutory retention obligations exist, such as commercial retention obligations for business correspondence under § 257 Paragraph 1 HGB (6 years) or fiscal retention obligations for records under § 147 Paragraph 1 AO (10 years). Once the prescribed retention period expires, your data will be blocked or deleted unless continued storage is necessary for contract execution or fulfillment.

Existence of Automated Decision-Making

We do not use automated decision-making or profiling.

For additional sections (e.g., website logs, cookies), please let me know if you want a full translation!
Newsletter

You can subscribe to our newsletter by voluntarily providing your consent through the registration of your email address. Only this is mandatory. Providing additional information is optional and is solely intended for personal communication. We use the so-called “Double-Opt-in” procedure for registration. After signing up with your email, you will receive an email from us to confirm your registration with a confirmation link. When you click this confirmation link, your email will be added to the newsletter distribution list and stored for the purpose of sending emails. If you do not click on the confirmation link within 365 hours, your registration data will be locked and automatically deleted after 365 days.

Additionally, we log the IP address you used for registration, as well as the date and time of the Double-Opt-in (registration and confirmation). The purpose of storing this information is to meet legal requirements regarding the proof of your registration and to prevent misuse of your email.

As part of your consent statement, the contents (e.g., advertised products/services, offers, promotions, and topics) of the newsletter are specifically described.

We use the following email service provider to send the newsletter: Mailchimp (The Rocket Science Group, LLC 675 Ponce de Leon Ave NE Suite 5000 Atlanta, GA 30308 USA), whose privacy policy can be found here https://mailchimp.com/de/help/about-the-general-data-protection-regulation/. We have concluded a data processing agreement with the service provider in accordance with Art. 28 GDPR.

When sending the newsletter, we analyze your user behavior. The newsletters contain “web beacons” or “tracking pixels,” which are called when the newsletter is opened. For evaluations, we link the web beacons to your email address and a unique ID. Links in the newsletter also contain this ID. The data is collected exclusively in pseudonymized form, meaning the IDs are not linked to your other personal data, ensuring that no direct identification is possible. This data helps us determine if and when you opened the newsletter and which links in the newsletter were clicked. This serves the purpose of optimizing and statistically evaluating our newsletter.

We create a user profile with the above data to identify the reading habits and interests of our users and thus personalize the newsletter. If you have also taken further actions on our website, we link this data as well to adjust the content of our newsletter to your interests.

The legal basis for sending the newsletter, measuring success, and storing the email is your consent according to Art. 6 (1) sentence 1 lit. a) GDPR in conjunction with § 7 (2) no. 3 UWG and for the logging of the consent, Art. 6 (1) sentence 1 lit. f) GDPR, as it serves our legitimate interest in legal proof.

You can object to the tracking at any time by clicking the unsubscribe link at the end of the newsletter. In this case, the newsletter subscription would also be terminated. If you deactivate the display of images in your email software, tracking will also not be possible. However, this may limit some of the newsletter’s functions, and embedded images will not be displayed.

You can withdraw your consent to receive the newsletter at any time. You can revoke it by clicking the unsubscribe link at the end of the newsletter, sending an email, or notifying us using our contact details above. We store your data as long as you subscribe to the newsletter. After unsubscribing, your data will only be stored anonymously for statistical purposes.

Contests

For conducting contests, the email address will be stored for contacting the winner, and in the case of winning, address details will be needed to send the prize. The address details may be forwarded to a shipping service provider. No further disclosure of data to third parties will take place. Participation in the contest is allowed from the age of 18.

The legal basis is Art. 6 (1) sentence 1 lit. b) GDPR.

The data will be deleted 2 months after the determination of the winner.

Google AdWords with Conversion Tracking

We use the “Google Ads with Conversion Tracking” service (service provider: Google Ireland Limited, registration no.: 368047, Gordon House, Barrow Street, Dublin 4, Ireland) to attract attention to our website by displaying ads on third-party websites.

Data categories and description of data processing: Usage data/communication data. When you click on a Google ad from us, a cookie is stored in your browser, valid for about 30 days. If you visit our website afterward, both we and Google can evaluate via the cookie whether you have visited our website and which page you visited. Google creates statistics based on this. The data is also transferred to the USA and analyzed there. If you are logged into a Google account, the data can be associated with your account through AdWords. If you do not wish this, you must log out of your Google account before visiting our website.

Purpose of data processing: This conversion tracking serves the purpose of analyzing/success measurement, optimizing, and the economic operation of our advertising and website.

Legal basis: If you have given your consent for processing your personal data via “Google Ads with Conversion Tracking” (“Opt-in”), the legal basis is Art. 6 (1) sentence 1 lit. a) GDPR. If not, the legal basis for processing your data is our legitimate interest in analyzing, optimizing, and economically operating our advertising and website according to Art. 6 (1) sentence 1 lit. f) GDPR.

Data transmission/recipient category: Google Ireland.

Storage duration: Up to 540 days.

Objection and removal options (“Opt-Out”): You can object to the installation of cookies by Google in several ways or prevent them:

  • You can prevent cookies in your browser by setting “Do not accept cookies,” which includes third-party cookies.
  • You can deactivate conversion tracking directly with Google via the link https://adssettings.google.com, which remains until you delete your cookies.
  • You can deactivate personalized ads from third-party vendors participating in the “About Ads” self-regulation initiative via the link https://optout.aboutads.info for US sites or for EU sites under http://www.youronlinechoices.com/de/praferenzmanagement/ until you delete all your cookies.
  • You can permanently deactivate cookies using a browser plug-in for Chrome, Firefox, or Internet Explorer via the link https://support.google.com/ads/answer/7395996. This deactivation may result in you being unable to use all features of our website.

Further information can be found in Google’s privacy policy at https://policies.google.com/privacy?hl=en&gl=en and https://services.google.com/sitestats/en.html.

Facebook Custom Audiences

We use the remarketing function “Custom Audiences” from Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, on our website.

Data categories and description of data processing: IP address, cookie ID, location information. When you visit the social network Facebook or other websites that use this remarketing function, interest-based ads (“Facebook Ads”) can be displayed to you. We use the remarketing function to optimize and economically operate our website and to show you ads that interest you, thereby making our website more user-friendly. When you visit our website, your browser establishes a connection to Facebook’s servers. Facebook receives information that you have viewed or clicked on a corresponding ad. If you are logged into Facebook, Facebook can assign this information to your account. For Facebook’s processing, please read Facebook’s privacy policy at https://www.facebook.com/policy.php. Specific information and details about the Facebook Pixel and its functionality can be found in Facebook’s help section: https://www.facebook.com/business/help/651294705016616.

Purpose of processing: Display of personalized ads, measurement and evaluation of ads, billing of ads, analysis of viewing behavior.

Legal basis: If you have given your consent for the processing of your personal data via “Custom Audiences” from a third-party provider, the legal basis is Art. 6 (1) sentence 1 lit. a) GDPR. The legal basis is also our legitimate interest in data processing for the purposes stated above according to Art. 6 (1) sentence 1 lit. f) GDPR.

Storage duration: Facebook provides us access to the data for 180 days.

Data transmission/recipient category: Facebook Ireland.

Objection (“Opt-Out”): The deactivation of the “Facebook Custom Audiences” function is possible for non-logged-in users here [borlabs-cookie type=”btn-cookie-preference” title=”cookie settings” element=”link”/] and for logged-in users under this link: https://www.facebook.com/settings/?tab=ads#.

Google Analytics

Purpose of Processing:
The use of Google Analytics serves the purpose of analyzing, optimizing, and improving our website.

Legal Basis:
The legal basis for processing personal data through “Google Analytics” is your consent (Art. 6(1)(a) GDPR). Additionally, we have a legitimate interest in analyzing, optimizing, and improving our website under Art. 6(1)(f) GDPR. If services are provided in connection with a contract, processing also occurs under Art. 6(1)(b) GDPR to improve website use and offer optimized services.

Retention Period:
The data we send, linked with cookies or user identifiers (e.g., User ID), will be automatically deleted after 14 months.

Data Transfer/Recipient Category:
Data is transferred to Google in Ireland and the USA. We have entered into a data processing agreement with Google according to Art. 28 GDPR.

Objection and Removal Options (Opt-Out):
You can prevent the storage of cookies by selecting “Do not accept cookies” in your browser settings, which may limit the functionality of our services. You can also prevent the collection of data generated by cookies through Google by downloading the Google Analytics Opt-Out Plugin. Alternatively, you can activate the Opt-Out directly here: [borlabs-cookie type=”btn-cookie-preference” title=”cookie settings” element=”link”/] Cross-device user analysis can be disabled under “My Data > Personal Data” in your Google Account.


YouTube Videos

Data Category and Description of Data Processing:
When viewing an embedded YouTube video on our website, usage data such as the accessed page and access times are collected. The videos are embedded in extended data protection mode, so no cookies are set that personalize the usage behavior.

Purpose of Processing:
Providing a user-friendly service, improving and optimizing our content.

Legal Basis:
Processing is based on your consent (Art. 6(1)(a) GDPR).

Data Transfer/Recipient Category:
Data is transmitted to third parties in the USA.

Retention Period:
Cookies may be stored for up to 2 years unless deleted earlier.

Objection:
If you do not want Google to collect this data, you can adjust your cookie settings in your Google account: Google Ads Settings.


Google reCAPTCHA

Data Category and Description of Data Processing:
The “reCAPTCHA” technology is used to verify whether an input on our site comes from a human or a bot. This is done by analyzing usage data, particularly the IP address.

Purpose of Processing:
Prevention of spam and abuse.

Legal Basis:
Processing is based on your consent (Art. 6(1)(a) GDPR) as well as our legitimate interest (Art. 6(1)(f) GDPR).

Data Transfer/Recipient Category:
Data may be transferred to Google servers in the USA.

Retention Period:
Cookies are stored until you delete them.

Additional Information:
For more information on the data protection of reCAPTCHA, please visit the Google reCAPTCHA Privacy Policy.


Google Maps

Data Category and Description of Data Processing:
By integrating Google Maps on our website, we can provide you with interactive maps and directions. Data such as your IP address and location is transmitted to Google when you visit the website.

Purpose of Processing:
Providing a user-friendly and optimized web application.

Legal Basis:
Processing is based on your consent (Art. 6(1)(a) GDPR) and our legitimate interest in a better user experience (Art. 6(1)(f) GDPR).

Data Transfer/Recipient Category:
Data is transmitted to Google in the USA.

Retention Period:
Cookies are stored for up to 6 months or until you delete them.

Objection and Removal Options:
You can object to the creation of user profiles at Google. For further information, please refer to the Google Privacy Policy and the Google Maps Terms of Use.

Data Protection in Job Applications and the Recruitment Process

Applications sent electronically or by post to the responsible party will be processed electronically or manually for the purpose of managing the recruitment process.

We explicitly point out that applications containing “special categories of personal data” according to Art. 9 GDPR (e.g., a photo that reveals your ethnic origin, religion, or marital status) are not desired, except for any disclosure of a possible disability, which you may voluntarily reveal. You should submit your application without these details. This will not affect your chances of being considered.

The legal basis for processing is Art. 6 (1) sentence 1 lit. b) GDPR as well as § 26 BDSG (German Federal Data Protection Act).

If, after the recruitment process is completed, an employment relationship is established with the applicant, the applicant’s data will be stored in compliance with relevant data protection laws. If no position is offered after the recruitment process is concluded, your submitted application documents will be deleted 6 months after the rejection letter is sent, to comply with potential claims and documentation requirements under the General Equal Treatment Act (AGG).

Rights of the Data Subject

Right to Object or Withdraw Consent for Data Processing

If processing is based on your consent according to Art. 6 (1) sentence 1 lit. a), Art. 7 GDPR, you have the right to withdraw your consent at any time. The legality of the processing based on your consent before the withdrawal is not affected.

If we rely on the balancing of interests according to Art. 6 (1) sentence 1 lit. f) GDPR for processing, you have the right to object to the processing. This applies especially if the processing is not necessary for the performance of a contract with you, which we explain in the subsequent description of the functions. In case of such an objection, we ask you to state the reasons why we should not process your personal data as carried out. In case of a justified objection, we will review the matter and either stop or adjust the processing, or we will show you our compelling legitimate reasons that justify the continuation of processing.

You can object to the processing of your personal data for advertising and data analysis purposes at any time. The right to object is free of charge. You can inform us about your advertising objection using the contact information provided at the beginning.

Right to Access

You have the right to request information about your personal data stored with us according to Art. 15 GDPR. This includes information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been disclosed or will be disclosed, the planned retention period, and the origin of your data, if it has not been collected directly from you.

Right to Rectification

You have the right to request rectification of incorrect data or completion of incomplete data according to Art. 16 GDPR.

Right to Deletion

You have the right to request the deletion of your personal data stored with us according to Art. 17 GDPR, unless there are legal or contractual retention periods or other legal obligations or rights to further store the data.

Right to Restriction

You have the right to request a restriction of the processing of your personal data if one of the conditions in Art. 18 (1) lit. a) to d) GDPR applies:

  • If you dispute the accuracy of your personal data for a duration that allows the controller to verify the accuracy of the data;
  • If the processing is unlawful and you oppose the deletion of the personal data and instead request the restriction of its use;
  • If the controller no longer needs the personal data for processing, but you need it for the establishment, exercise, or defense of legal claims; or
  • If you have objected to the processing according to Art. 21 (1) GDPR, and it is still unclear whether the legitimate grounds of the controller outweigh your reasons.

Right to Data Portability

You have the right to data portability under Art. 20 GDPR, meaning that you can receive the personal data we hold about you in a structured, commonly used, and machine-readable format, or you can request that it be transmitted to another controller.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority. Typically, you can contact the supervisory authority in the member state of your residence, workplace, or the location of the alleged violation.

Data Security

To protect all personal data transmitted to us and to ensure compliance with data protection regulations, both by us and our external service providers, we have implemented suitable technical and organizational security measures. For this reason, all data is transmitted via a secure SSL connection between your browser and our server.

Deutschland

Von Kurtzrock Ring 1422391 Hamburg

Südafrika

79A Bellairs DrGlenvista, Johannesburg2091