PRIVACY POLICY – NOMAD CRUISE

Responsible Authority

We are happy about your visit to our website. We would like to introduce ourselves as the responsible authority within the meaning of data protection law:

WebWorkTravel GmbH

Am Laibach 17c

33790 Halle

info@nomadcruise.com

Pursuant to our statutory obligations, we would like to inform you about the collection and use of your personal data.

General Information

When you use our website, personal data about you will be collected. This may happen by you entering the data yourself, for example your e-mail address. But our system also collects your data automatically, for example whenever you visit our website. This happens irrespective of the device or the software that you use to visit our website.

All data that you enter in our app is provided voluntarily; there are no disadvantages to you if you do not provide data. But without certain data, we are unable to provide services or to conclude contracts. Whenever such information is necessary, we will point it out to you.

On this website, the user’s personal data is only collected within the framework of the existing data-protection law, in particular the General Data Protection Regulation (GDPR). The legal terms used in the text are defined in Art. 4 of the GDPR.

The GDPR allows data processing in three cases in particular:

  • in accordance with Art. 6 para. 1 (a) and 7 GDPR, when you have consented to us processing your data; in this Privacy Policy and in the cases of consent pursuant to Art. 4 no. 11 GDPR, we will inform you in detail and each time for what purposes and under what circumstances  your data will be processed by us;
  • in accordance with Art. 6 para. 1 (b) GDPR, when processing your personal data is necessary for negotiating, concluding or performing a contract;
  • in accordance with Art. 6 para. 1 (f) GDPR, if the balancing of interests leads to the conclusion that the processing is necessary to protect our legitimate interests; this means in particular our interests to analyse, optimise and secure the offers on our website – meaning primarily the analysis of user behaviour, setting up profiles for advertisement purposes and storage of access data as well as the use of third-party providers.

Inventory Data, Usage Data and Advertisements

Inventory Data

We collect inventory data (for example name, address and e-mail address, possibly services used) insofar as they are required for establishing, defining or amending a contract between us and the user. 

Usage Data

We also collect usage data (for example visits to the website, interest in products) to allow the user to use the services on our website and to invoice them.

We will only combine usage data if and insofar as it is necessary for billing purposes. Otherwise, we will only put together usage data pseudonymously and only insofar as you have not objected. You may send this objection to the address indicated in the “About Us” section or the responsible authority indicated in this Privacy Policy at any time.

The legal basis for this data processing are our legitimate interests pursuant to Art. 6 para. 1 (f) GDPR in analysing the website and your use, possibly also the statutory permission to store data as part of the negotiation of a contract pursuant to Art. 6 para. 1 (b) GDPR.

Furthermore, our provider stores information, the so-called server log files, each time the website is used; this is information which is automatically transferred by your browser. In detail, this data consists of:

  • your IP address
  • type and version of your browser
  • host name
  • time of visit
  • the page from which you came to our page
  • name of the page opened
  • exact time of usage as well as
  • the amount of data transferred

This data will only be used for statistical purposes and do not allow us to identify you as a user.

Advertisements

Before sending you advertisements, we will ask for your explicit consent pursuant to Art. 4 no. 11 GDPR, except in cases of advertisements for similar products to the one you already acquired. This will happen in particular when you grant us consent to mail our newsletter or when you fill out a contact form.

Consent

Whenever we ask you for your consent for the processing of your data, we will inform you in clear language and in an easily accessible way about the cases for which you will be granting your consent. Any consent that we ask you for is voluntary. Any advantage that you wish to gain by granting consent is also available without consent; simply ask us.

Regarding any consent, you have the right to revoke any consent given to us for the processing of your personal data at any time. You just need to contact us without any particular formal requirement, for example through our contact form, an e-mail to the e-mail address indicated in the “About Us” section or a link to unsubscribe (if offered by us). Your withdrawal has no effect on the legality of the data processing carried out up to that point.

Storage Period

Your data will generally only remain stored for as long as the purpose of the relevant data processing requires it. Storage beyond that is mainly possible when it is still necessary for us to pursue our rights or for our other legitimate interests or if we are compelled by law to keep your data stored (for example based on tax-law requirements to maintain files, which is generally 6 years, but may last up to 10 years).

Cookies

Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, our website uses cookies, allowing our offer to be used better, more effectively and more securely. Cookies are  text files, which are saved on your computer and will store certain data about your user behaviour on our website, allowing us for example to make an offer based on your usage up to that point. These can be so-called session cookies, which will be automatically deleted at the end of your visit to our website. But there are also cookies that are stored on your computer permanently, unless you delete them. That way, we are able to recognise your browser the next time you access our website, and we can make you offers that correspond with your use of  our website in the past.

Your browser allows you to prevent the use of cookies in specific cases or in general. Please consult the manual for your browser on this topic. Blocking cookies may limit the operability of our website or other websites visited by you.

You may permanently prevent cookies from being stored in your browser by downloading and installing the plugin linked to hereafter. Here you will find further information on this.

You can also prevent the use of cookies by third-party providers in your case by declaring your opt-out at the deactivation site of the Network Advertising Initiative, following the instructions on their page. Here you will find further information on this. You find the same offers on this US-American website as well as with this European service.

Transfer to Third Parties

We dislike spam as much as you do. We will therefore not transfer your data to third parties, unless permitted by law.

Transfer of customer data may either

  • be required for the performance of a contract and in that case be permitted according to Art. 6 para. 1 (b) GDPR, or
  • be permitted based on our legitimate interest in an effective service structure pursuant to Art. 6 para. 1 (f) GDPR, or
  • covered by your consent pursuant to Art. 6 para. 1 (a) GDPR, or
  • become necessary if we will be legitimately asked by a government or an agency to hand over your data pursuant to Art. 6 para. 1 (c) GDPR.

If your data are transferred to third parties, this is mentioned in this privacy policy.

Transfer to other Countries, in particular to the USA

Our website uses external providers located outside of the EU for different features. In particular, the use of cookies, active Java scripts and other technology can lead to processing and storage of your data outside of the EU. But we will not transfer your data to a third country, unless the EU Commission has determined that there is a similar level of data protection as in the EU or unless you have provided us with your informed consent or we have agreed on the standard contractual clauses for the protection of your data with the provider. Regarding the USA, the Privacy Shield Agreement – see https://www.privacyshield.gov/welcome – has re-established sufficient data protection under certain conditions.

You will find more information about your rights in the case of each of the data transfers to the USA mentioned subsequently at

http://ec.europa.eu/justice/data-protection/document/citizens-guide_en.pdf.

Users‘ Rights

Information

You may request us anytime to provide information about the personal data stored about you free of charge. To avoid misuse, this will require personal identification.

Deletion, Correction, Limitation

You may at any time demand from us that we correct (or complete) incorrect data as well as a limitation of the processing of data or deletion of your data. This applies in particular if the reason for processing the data is no longer valid, if a required consent has been revoked and there is no other legal basis or if our data processing is unlawful. We will then correct, block or even delete your personal data without delay as far as permitted by law.

Objection

The right to object to advertisement is governed by our text regarding consent:

Regarding any consent, you have the right to revoke any consent given to us for the processing of your personal data at any time. You just need to contact us without any particular formal requirement, for example through our contact form, an e-mail to the e-mail address indicated in the “About Us” section or a link to unsubscribe (if offered by us). Your withdrawal has no effect on the legality of the data processing carried out up to that point.

Data Transfer

You may request us to transfer the data stored about you in machine-readable form.

Complaint

If you feel that our data processing has violated any of your rights, you may file a complaint with the competent regulatory agency (here you find a list of the agencies).

Changes to the Privacy Policy

If and when factual or legal reasons will compel us to amend the Privacy Policy, we will update this page accordingly. This will not change the consent provided by the user.

Encryption of Data Entry

When you enter data on our website, whether in a contact form, during the registration process, when you log in or for payment purposes, the website, where you enter the data, is encrypted. Thus, third parties can not read what you enter. You will recognise the encryption by the lock symbol in your browser and by the URL beginning with “https“ instead of “http“.

Newsletter

Mail Chimp

If you subscribe to the newsletter offered on our website, we will inform you in detail about the information you will receive, which of your data will be stored and what it will be used for. We will not pass on your data to third parties and we will only use it to mail the newsletter. 

We will only mail you the newsletter if you have given us your prior permission. To that purpose, you will receive an e-mail from us with a link and further instructions and our request for your consent. By clicking on this link, you declare your consent to receiving the newsletter and our advertising.

The basis for the storage is your consent pursuant to Art. 6 para. 1 (a) GDPR, which you grant to us by registering for the newsletter. You may revoke this consent at any time, you just need to contact us without any particular formal requirement (for example through the contact form or an e-mail or the unsubscribe button in each e-mail). This withdrawal has no effect on the legality of the data processing that has occurred until that point.

Because we are legally obligated to record your permission as part of the so-called double opt-in, your order of the newsletter, the mailing of our e-mail of consent and your consent by clicking on the link will be recorded and saved with location and time as well as with your IP address.

For mailing the newsletter, we use (based on our legitimate interest in a technologically perfect processing of our customer information and analysis) the provider MailChimp (Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA) from the USA.

Thus, your data is forwarded to the USA, but MailChimp is registered with Privacy Shield and obligated to respect the EU data protection rules. You will find further information about your rights thereunder at 

http://ec.europa.eu/justice/data-protection/document/citizens-guide_en.pdf.

In our newsletter, we will also explicitly ask you to provide your consent to transferring data to MailChimp and to the USA. You will declare that consent by clicking on the link, but you may revoke it at any time. For the handling of your data at MailChimp, we refer you to the Privacy Policy of MailChimp. MailChimp will only use your data for mailing the newsletter and for evaluating that mailing on our behalf. In addition to that, MailChimp will only use your data to improve their own service. But MailChimp will not use the data to contact you directly or to pass on your data to third parties.

The data used by MailChimp contains a “web beacon“, which will inform MailChimp about the opening of the newsletter and/or the clicking on a link contained therein by you. As part of that process, information regarding your browser, your location and your IP address will be transmitted to MailChimp. This information will be used to optimise our communication with you.

Our newsletter provider will also use this data, but only in a pseudonymous form (meaning that they cannot identify you) to analyse and optimise their own services. Your data will never be used by the newsletter provider in order to contact you.

Your data will remain stored for as long as you are stored in our mailing list, the storage is required to enforce our rights or it is necessary for our legitimate interest or we are required by law to keep your data.

Contact Forms

When you fill out a contact form or when you send us an e-mail or another electronic message, your information will be stored for the processing of the request, for possible follow-up questions or for other related questions and will only be used to follow up with the request.

Your data will be transferred in an encrypted manner, preventing third parties from reading your data while it is being entered.

Basis for this storage is your consent pursuant to Art. 6 para. 1 (a) GDPR, which you grant us by filling in the contact form or by your other requests. You may revoke this consent at any time, you just need to contact us without any particular formal requirement (for example in the contact form or by e-mail). This withdrawal has no effect on the legality of the data processing that has occurred up to that point.

Your data remains stored for as long as the processing of the request requires, in particular as long as the storage is still necessary to perform the contract, to pursue our rights or for our other legitimate interests or we are compelled by law to keep your data stored (for example based on tax-law requirements to maintain files).

Registration 

When you apply on our website, the data entered by you will be stored for the use of of the application. It will also be used to inform you of changes to our offers, updates or technical improvements that are relevant for using our website.

Basis for this storage is the processing of data for the purpose of the performance of the contract pursuant to Art. 6 para. 1 (b) GDPR and your consent pursuant to Art. 6 para. 1 (a) GDPR, which you provide to us when you apply. You may revoke this consent at any time, you just need to contact us without any particular formal requirement (for example by unsubscribing, contact form or e-mail). This withdrawal has no effect on the legality of the data processing that has occurred up to that point.

Your data remains stored for as long as the application is decided, it will be deleted, when the journey, you applied for, has started, as long as the storage is not still required for the performance of the contract, to pursue our rights or for our other legitimate interests or as long as we are compelled by law to keep your data stored (for example based on tax-law requirements to maintain files).

Social Media Plugins

General Information

Social media plugins normally lead to the IP address of each visitor to a page being collected by these services immediately and the users having their subsequent browsing history recorded. This may even happen if you do not click on the button.

To prevent this, we use the Shariff method. Thus, our social media buttons only establish the direct contact between the social network and you only once you click on the respective share button. If you are already registered with a social network, Facebook and Google+ do not require a new window for this. Twitter will show a pop-up window, in which you can still edit the text of the tweet.

Thus, you can publish our content in social networks without them being able to put together complete browsing profiles. The Shariff method is already being used by many websites in order to protect their users.

But, at the latest, when you follow the link to the social media site, your data will be broadcasted to that site. The social media site will normally store a cookie in your browser and to your account information there, especially, if you are logged into your social media account on the site. The social media site can analyse your use of the platform and your browsing habits and will use these for targeting advertisements based on your interests. That can lead to ads being shown to you when browsing in- and outside of the social media site. Please inform yourself about the use of your data on these sites and use them only, when you agree to that use of your data, that happens on that social media site, in particular, when you are not using that social media site for the first time. We have added links to all the privacy policies of the social media site for your information. 

Facebook

Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we use plugins of the social network of Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. Due to the Shariff method, Facebook will only learn your IP address and your visit to our website, once you will have clicked on the button. If you confirm the plugin while being logged in at Facebook, Facebook may attribute your use to your user account.

That way, your data will be transferred to the USA, Facebook is registered with Privacy Shield and must adhere to the EU data protection rules. You will find more information about your rights thereunder at

http://ec.europa.eu/justice/data-protection/document/citizens-guide_en.pdf.

The collection and use of your data which is then possibly carried out by Facebook is beyond our knowledge or control. You will find further information in Facebook’s privacy policy at

http://de-de.facebook.com/policy.php

Regarding the general approach to cookies and their deactivation, we refer you to our general information in this Privacy Policy.

Social Media Links

General Information

We refer with links to our social media presences. When you follow any such link to the social media site, your data will be broadcasted to that site. The social media site will normally store a cookie in your browser and to your account information there, especially, if you are logged into your social media account on the site. The social media site can analyse your use of the platform and your browsing habits and will use these for targeting advertisements based on your interests. That can lead to ads being shown to you when browsing in- and outside of the social media site. Please inform yourself about the use of your data on these sites and use them only, when you agree to that use of your data, that happens on that social media site, in particular, when you are not using that social media site for the first time. We have added links to all the privacy policies of the social media site for your information. 

Social Media Link to Facebook

Our website uses links to our presence in the social network of Facebook by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. It is just a normal link. Thus, when you open our site, Facebook will not learn of your visit to our website. But once you click on the link, you will be led to Facebook, allowing Facebook to learn that you have visited out site. 

That way, your data will be transferred to the USA, but Facebook is registered with Privacy Shield and must adhere to the EU data protection rules. You will find more information about your rights thereunder at

http://ec.europa.eu/justice/data-protection/document/citizens-guide_en.pdf.

The collection and use of your data which is possibly carried out by Facebook after clicking on the link is beyond our knowledge or control. You may find further information in Facebook’s privacy policy at

http://de-de.facebook.com/policy.php.

Social Media Link to Instagram

Our website uses links to our presence in the social network of Instagram by Instagram LLC, represented by Kevin Systrom and Mike Krieger, 1601 Willow Rd, Menlo Park CA 94025, USA. It is just a normal link. Thus, when you open our site, Instagram will not learn of your visit to our website. But once you click on the link, you will be led to Instagram, allowing Instagram to learn that you have visited out site.
That way, your data will be transferred to the USA, but Instagram is registered with Privacy Shield and must adhere to the EU data protection rules. You will find more information about your rights thereunder at

http://ec.europa.eu/justice/data-protection/document/citizens-guide_en.pdf.

The collection and use of your data which is possibly carried out by Instagram after clicking on the link is beyond our knowledge or control. You may find further information in Instagram’s privacy policy at
https://help.instagram.com/155833707900388.

YouTube (embed)

Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we use the provider YouTube LLC , 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, for embedding videos. Normally, your IP address will already be sent to YouTube and cookies will be installed on your computer as soon as you open a page with an embedded video. But we have embedded our YouTube videos with the extended data-protection mode (in which case YouTube will still establish contact with Google’s Double, but according to Google’s privacy policy, the personal data will not be analysed). Thus, YouTube will no longer store information about the visitors, unless you view the video. When you click on the video, your IP address will be transferred to YouTube and YouTube will learn that you have watched the video. If you are logged in with YouTube, that information will also be attributed to your user account (you can prevent this by logging out of YouTube before watching the video). 

That way, your data will be transferred to the USA, but YouTube is registered with Privacy Shield and must adhere to the EU data protection rules. You will find more information about your rights thereunder at

http://ec.europa.eu/justice/data-protection/document/citizens-guide_en.pdf.

The collection and use of your data which is then possibly carried out by YouTube is beyond our knowledge or control. You will find further information in YouTube’s privacy policy at

https://www.google.de/intl/de/policies/privacy/

Regarding the general approach to cookies and their deactivation, we refer you to our general information in this Privacy Policy.

Google Analytics

Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we use the Google Analytics tool provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94.043 USA. This allows to analyse the use of websites and t put together pseudonymous profiles of users based on the data. In order to do this, Google applies different technologies, among them also storing cookies on your computer. These store information about the use of our page, which we will use to improve our offers.

he data collected by Google will be transferred by Google to countries outside of the EU, in particular to the USA. Google has subjected itself to the Privacy Shield Framework; you can read more about your rights thereunder at

http://ec.europa.eu/justice/data-protection/document/citizens-guide_en.pdf

We have taken additional precautions to ensure the appropriate protection of your data as far as possible. Before transferring it to Google, we anonymize your IP address. This is achieved by activating the Anonymizelp() feature in the tracking code of Google Analytics.

We have also concluded a contract with Google about the processing of data, according to which  Google will not combine your data with other data collected by Google in order to find out your identity.

If this should not be sufficient for you, you can also use the link

http://tools.google.com/dlpage/gaoptout?hl=de

to download and install a browser plugin provided by Google to block Google Analytics, preventing Google from collecting and transferring your personal data.

You can also prevent the data collection by Google Analytics by confirming the subsequent link

Deactivate Google Analytics

to deactivate Google Analytic and by setting an opt-out cookie which will also prevent the collection of your data.

You will find more information about Google’s precautions regarding data protection at the following link:

https://www.google.de/intl/de/policies/privacy/ .