Privacy Policy

Privacy Policy

We are pleased to see you here on our website. Thank you for visiting us and for taking an interest in our services. We would like to let you have some information below regarding how your personal data are protected on this website.
We are very much concerned to protect your data and your privacy when you use our website. We therefore wish to also enable you to learn in detail about when we use what personal data, as well as how we use them and for what purpose. We have compiled some information below to keep you informed in this regard.

1. Personal data

Personal data are all data relating to you personally or which can be attributed to you, such as your name, your postal and e-mail addresses, your user conduct, etc.
We process all personal data that are collected when you visit our website, in compliance with the applicable provisions of privacy law. Personal data are only collected, processed or used in the manner described in the following sections.

2. Controller

The following is responsible for the content of this site within the meaning of the provisions of privacy law:

The Niche Traveller GmbH
Rothenbaumchaussee 58
20148 Hamburg
Should you have any questions, you can reach us as follows:

e-mail: hello@niche-traveller.com

3. How data are collected and processed when you visit the website

Each time someone visits our website, the following data (access data) are collected anonymously and stored for a maximum of seven days, after which they are erased. Data which need to be retained for longer for evidentiary purposes are exempted from being erased until the incident in question is definitively clarified. The following access data are stored in a protocol file on our provider’s server, these being the IP address of the requesting computer, the date and time of access; the name and URL of the data retrieved; the referrer URL; the name and IP address of the Internet service-provider; the volume of data transferred; notification of whether the retrieval was successful; the ID data of the browser and operating system used; status codes and user name (optional).
These data are collected in accordance with Art. 6§1(f) GDPR exclusively for technical reasons and without a personal connection. The data are not passed on or used for other purposes.
They are used exclusively for statistical purposes and to improve our services, without any personal connection being created.

4. Links to third-party websites

Our website contains links to the websites of other providers. When these links are used, i.e. when you click on one of them, you are redirected to the websites of these other providers.
Consult the data protection regulations on these sites as to how they deal with your personal data.

5. Contact form and e-mail communications

Our website allows you to contact us via a contact form. In order to be able to provide you with a customised answer to your enquiry, we need to know your name, the country in which you live and your e-mail address, as well as your actual enquiry. Your IP address and the date and time of registration are also stored when you send the message.
Your consent is obtained and a reference made to this Privacy Policy in order to process the data as part of the sending process.
Alternatively, you can contact us via the e-mail address provided. In this case, the user’s personal data that are passed on with the e-mail are stored.
The legal basis for processing the data is Article 6§1(a) GDPR, provided the user’s consent has been obtained. The legal basis for processing the data provided whilst sending an e-mail is Article 6§1(f) GDPR. We only use the names, e-mail addresses, interests and enquiries that you state on the contact form in order to process your enquiries and get back to you. The other personal data that are processed as part of the sending process are used to prevent the contact form being misused and to safeguard the security of our IT systems. Your data will be erased once your enquiry has been finally processed; this will take place when the circumstances permit the conclusion to be reached that the matter in question has been finally clarified, and assuming this is not precluded by any statutory retention obligations. The additional personal data collected during the sending process are erased after a maximum period of seven days. You have the right to withdraw declarations of consent that you have given at any time in part or in full, with effect for the future. We also protocol any such withdrawal.

If you contact us by e-mail, you can object to the storage of your personal data at any time with effect for the future. The conversation may not be continued in such cases.
You are by no means obliged by law or by contract to contact us via the contact form. You will not incur any disadvantages if you do not use the contact form, or if you contact us by other means.
These personal data will not be forwarded to third parties.

6. Newsletters

Users can sign up to our newsletter via our website. What personal data are forwarded to the controller in the newsletter ordering procedure depends on the input form used for this purpose. You can only receive our newsletter if you have a valid e-mail address and subscribe to receive the newsletter.
If you sign up to our e-mail newsletter, we will send you information on our services on a regular basis. The only mandatory information we need in order to send our newsletter is your e-mail address. Any other data you may provide is voluntary, and will be used to enable us to address you personally. We use a method for sending the newsletter that is known as the double opt-in procedure. This means that you will not receive an e-mail newsletter from us until you have explicitly confirmed that you consent to the sending of newsletters. We will then send you a confirmation e-mail asking you to confirm by clicking on an appropriate link that you wish to receive newsletters in the future.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6§1(a) GDPR. When you sign up to the newsletter, we store your IP address as entered by the Internet service-provider (ISP), as well as the date and time of registration, in order to be able to trace any misuse of your e-mail address at a later date on the basis of Art. 6§1(f) GDPR. The data that we collect when you sign up to the newsletter are only used for promotional reasons via the newsletter.
You can unsubscribe from the newsletter at any time via the appropriate link in the newsletter, or by sending an appropriate message to the controller named at the beginning, for instance by sending an e-mail to: hello@niche-traveller.com, with effect for the future. Your e-mail address will be promptly erased from our newsletter address list as soon as you have unsubscribed, unless you have explicitly consented to the further use of your data or we reserve the right to continue to use the data as permitted by law and as stated in this Policy.
MailChimp
This website uses the MailChimp service to send newsletters. This service is provided by Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.
MailChimp is a service that can be used amongst other things to send and evaluate newsletters. If you provide data (such as your e-mail address) in order to subscribe to the newsletter, they will be stored on MailChimp’s servers in the USA.
MailChimp is certified under the “EU-US Privacy Shield”. The “Privacy Shield” is an agreement between the European Union (EU) and the USA intended to guarantee that European privacy standards are complied with in the USA.
MailChimp enables us to evaluate our newsletter campaigns. When you open an e-mail sent with MailChimp, a file that is contained in the e-mail (known as a web beacon) contacts MailChimp’s servers in the USA. This allows us to see whether a newsletter message has been opened and what links have been clicked on, if any. Technical information is also collected (e.g. time of request, IP address, browser type and operating system). This information cannot be attributed to the respective newsletter recipient, but is only used for the statistical evaluation of newsletter campaigns. The results of these evaluations can be used to customise future newsletters in line with recipients’ interests.
If you do not wish MailChimp to carry out any evaluation, you will need to unsubscribe from the newsletter. Each newsletter message contains a link for this. You can also unsubscribe from the newsletter directly on the website.
The data are processed on the basis of your consent (Article 6§1(a) GDPR). You can withdraw this consent at any time by cancelling the newsletter. The lawfulness of the data processing that has already been carried out is not affected by your withdrawal.
We store the data that you have provided us in order to receive the newsletter until you cancel the newsletter, and erase them both from our servers and from MailChimp’s servers once you have cancelled the newsletter. Data that we store for other purposes (such as e-mail addresses for the members’ section) are not affected by this.
You can find more information on this in MailChimp’s Privacy Policy at: https://mailchimp.com/legal/terms/.

7. Forwarding to third parties

Your personal data will not be forwarded to third parties for any other purposes than those stated below.
We only pass your personal data to third parties if:
– you have given your explicit consent to this in accordance with Article 6§1(a) GDPR,
– their forwarding is necessary in accordance with Article 6§1(f) GDPR for the purposes of asserting, exercising or defending legal claims and there is no reason to presume that you have an overriding interest which requires protection in your data not being forwarded,
– there is a legal obligation to pass them on in accordance with Article 6§1(c) GDPR, as well as
– this is legally permissible and necessary in accordance with Article 6§1(b) GDPR for the performance of a contract with yourself.

8. Instagram plug-ins

We use a social plug-in (“feed”) from Instagram LL.C., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”) on our website. The plug-in is based on the “LightWidget” Java Script code. It shows preview images of our Instagram profile. When LightWidget is activated, personal data can be sent to Instagram or LightWidget.
If you visit part of our website which contains such a plug-in, your browser establishes a direct connection with Instagram’s servers. Instagram directly transmits the content of the plug-in to your browser and incorporates it into the site. This connection informs Instagram that your browser has retrieved the corresponding part of our website, even if you do not have an Instagram profile, or if you are not logged in to Instagram at that time. Your browser transmits this information (including your IP address) to an Instagram server in the USA, either directly or via LightWidget, where it is stored. We are not informed of these personal data, and also do not store them.
If you are logged in to Instagram, Instagram can attribute your visit to our website directly to your Instagram account. If you interact with the plug-ins, for instance by clicking on the “Instagram” button or on one of the images, this information is also directly transmitted to an Instagram server and/or to LightWidget, where it is stored. The information may also be published in your Instagram account and shown to your contacts there.
You can learn more about the purpose and extent of the collection of data and the further purposes to which they are put by Instagram, as well as about your rights in this regard and the settings that are available in order to protect your privacy, by consulting the Instagram and LightWidget Privacy Policies:
https://help.instagram.com/155833707900388/
https://lightwidget.com/privacy/
Should you not want Instagram to directly assign the data collected via our website to your Instagram account, you will need to log out of our website on Instagram before your visit. You can also prevent the Instagram plug-in loading with add-ons for your browser altogether, for instance by using the “NoScript” script blocker (http://noscript.net/).
You are not obliged vis-à-vis ourselves by any means, either by law or by contract, to provide Instagram and/or LightWidget with personal data. There is no obligation for you to transmit these data in order to conclude a contract with us. If you deactivate scripts on our site, the use of the website may be technically restricted. You will however not suffer any further disadvantages if you deactivate the “LightWidget” Instagram plug-in.

9. Cookies

We use “cookies” to enhance your user experience. Cookies are text information files which are locally stored on your device by your browser when you visit our website. This enables our website to be tailored to different sets of interests, to make the website attractive, and to facilitate the use of specific functions. Your device is recognised when you return to the website. We therefore use cookies on the basis of Art. 6§1(f) GDPR.
Some of the cookies that are used are erased once the browser session is ended, that is when you close your browser (these are known as session cookies). Other cookies are stored on your device and enable us to recognise your browser when you come back (known as “persistent cookies”).
You can set your browser such that you are informed when cookies are generated and can decide in each case whether to accept them, or you can rule out the acceptance of cookies, either across the board or for specific cases only. You are not obliged either by law or by contract to permit cookies on this website. We should however point out that the functions of the website may be restricted if you do not permit cookies.

10. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses “cookies”, which are text files stored on your computer, to enable the analysis of how you use the site. The information generated by the cookie about your use of this website will as a rule be transmitted to and stored on a Google server in the USA.

As IP anonymisation is activated on this website, your IP address will however be previously truncated by Google within the Member States of the European Union or in other Contracting States of the Treaty on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be transmitted to one of Google’s servers in the USA and truncated there. Google will not associate the anonymised IP address transmitted by your browser in Google Analytics with any other data held by Google. In these exceptional cases, this processing is carried out in accordance with Art. 6§1(f) GDPR on the basis of our legitimate interest in the statistical analysis of user conduct for the purpose of optimisation and marketing.

Google will use this information on our behalf in order to evaluate the way you use the website, to compile reports for us illustrating activities on our websites, and to provide other services linked to the use of our website. Google will not associate the IP address transmitted by your browser in Google Analytics with any other data held by Google.

You can prevent cookies being stored by making the appropriate setting on your browser; we would however like to point out that you may not then be able to make full use of all the functions of this website. You can also prevent the data generated by the cookie regarding your use of the website (including your IP address) from being passed on to Google, as well as Google processing these data, by downloading and installing the browser plug-in available via the following link:

https://tools.google.com/dlpage/gaoptout?hl=en

Alternatively to the browser plug-in, or in browsers on mobile devices, please click on the following button to generate an opt-out cookie preventing collection by Google Analytics on this website in the future (this opt-out cookie only works in this browser, and only for this domain; if you erase your cookies in this browser, you need to click on this link again): deactivate Google Analytics

Google LLC is headquartered in the USA, and is certified for the US-European “Privacy Shield” privacy agreement, which guarantees compliance with the level of privacy that applies in the EU.

You can learn more about how Google Analytics handles user data by consulting Google’s Privacy Policy:

https://support.google.com/analytics/answer/6004245?hl=en

11. Google web fonts

This site uses “web fonts” provided by Google in order to ensure that fonts are presented uniformly. When you visit a page, your browser loads the necessary web fonts into your browser cache in order to display texts and fonts correctly.
In order for this to work, your browser needs to connect to Google’s servers. This informs Google that our website has been visited via your IP address. Google web fonts are used in order to ensure that our website can be presented attractively. This is a legitimate interest within the meaning of Art. 6§1(f) GDPR.
If your browser does not support web fonts, your computer will use a standard font.
You will find more information on Google web fonts at https://developers.google.com/fonts/faq and in Google’s Privacy Policy: https://www.google.com/policies/privacy/.

12. The storage period

As a matter of principle, and in cases not explicitly described above, we only process and store your data for the period that is necessary to achieve the purpose of their storage, or where provided for by the European legislature or another legislature in statutes or regulations to which we are subject. Should the purpose of the storage cease to apply, or if a storage period prescribed by the European legislature expires, the personal data will be routinely barred or erased in accordance with the statutory provisions.

13. Data subjects’ rights

You have the right at any time to obtain information regarding your data which we have stored and processed, the purposes of the processing, the categories of personal data which are being processed, the recipients or categories of recipient to whom the data have been or will be disclosed, the envisaged period for which the data will be stored or the criteria used to determine that period, the existence of the right to request rectification, erasure, or restriction of processing, to object to such processing, to lodge a complaint with a supervisory authority, the source of your data where they are not collected by ourselves, the existence of automated decision-making, including profiling, and where appropriate meaningful information about the logic involved as well as the significance and the envisaged consequences of such processing for you, and your right to be informed of the appropriate safeguards pursuant to Article 46 GDPR where your data are transferred to a third country (Art. 15 GDPR).

You furthermore have the possibility at any time to examine, alter or erase the personal data that you have provided by sending us an e-mail to the e-mail address hello@niche-traveller.com (Art. 16 to 18 GDPR).
You also have the right to us storing your data in such a form that we can transmit them to someone else in a combined form (“right to data portability”).
If you have consented to us using your data, you can withdraw this consent at any time with effect for the future. The data that have been stored will be erased if you withdraw your consent to their storage.
Provided the statutory prerequisites in accordance with Art. 21 GDPR are met, you furthermore have the right to lodge an objection to data processing based on a “legitimate interest” of the controller in accordance with Art. 6§1(f) GDPR or effected for the purposes of direct advertising.
You furthermore have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR if you consider that the processing of personal data relating to you infringes the GDPR. To this end, you can turn to the supervisory authority at your habitual place of residence, at the place where you work or at our registered office.
If you wish to assert your rights, please contact us as follows:

Kerstin Bognár
Heilwigstraße 57
D-20249 Hamburg
Tel.: +49 1520 4132771
e-mail: hello@niche-traveller.com

14. Topicality of the Privacy Policy and amendments

This Privacy Policy is valid as per the present time, in the version of June 2018.

It may become necessary to amend this Privacy Policy as our website as well as the services in relation to the website develop, or on the basis of altered statutory or official stipulations. You can retrieve and print out the respectively current Privacy Policy at any time on the website at www.niche-traveller.com/privacy-policy.