Peakwork GmbH

Privacy Policy

The protection of your personal data is important to us.

I. Responsible party according to Art. 4 No. 7 GDPR

Name of the responsible entity:

Peakwork GmbH

Managing Director:

Manuel Saballus

Address of the responsible entity:

Georg-Glock-Strasse 18
40474 Düsseldorf

II. Data protection officer:

Michael Vogelbacher
consileo GmbH & Co. KG
Bahnhofstr. 5
53572 Unkel
data-protection@peakwork.com

III. Data processing purposes and data minimization

Based on our unique Player Hub technology, the Peakwork platform offers innovative and flexible solutions for the fast and worldwide distribution of vacation tours.

We collect, store and use your personal data exclusively in accordance with the provisions of the Regulation on Data Protection of the European Union and the Federal Republic of Germany. In the following, we inform you about the type, scope and purpose of the collection and use of personal data. Any further processing for purposes other than those specified below will not take place. You can retrieve this information from this website at any time.

  1. Security of data transmission

We use a secure data transmission procedure by means of SSL/TLS encryption. This means that the data you enter in a form on our website is protected. Pay special attention to the "s" in the "http(s)" of the URL (the Internet address you enter). This is an indication that your input is secure on the Internet. Additional information: the web browser you are using contains detailed explanations of security procedures and encryption under the help notes.

  1. Processing of your personal data

Processing of your personal data takes place in the following cases:

Data transmission and logging for internal system and statistical purposes (log files).

For technical reasons, your Internet browser automatically transmits data to our web server when you access our website. This data includes the date and time of access, the URL of the referring website, the file accessed, the amount of data sent, the browser type and version, the operating system and your IP address. This data is stored separately from other data that you enter when using our offer. It is not possible for us to assign this data to a specific person. This data is evaluated for statistical purposes and subsequently deleted.

Cookies

This website uses cookies. Website cookies are small files that enable specific information related to the device to be stored on the user's access device (PC, smartphone or similar). On the one hand, they serve the user-friendliness of websites and thus the users (e.g. storage of login data). On the other hand, they serve to collect statistical data on website usage and to be able to analyze it for the purpose of improving the offer.

Users can influence the use of cookies via a consent management tool. Most browsers also have an option to restrict or completely prevent the storage of cookies. However, it should be noted that the use and especially the comfort of use will be limited without cookies.

https://www.cookiebot.com

Inventory data

If you have provided us with personal data (for example, via the contact form), we collect, store and use this data only to respond to your inquiries and in the event of follow-up questions and technical administration.

By order of the competent authorities, we may provide information about this data (inventory data) in individual cases, insofar as this is necessary for the purposes of criminal prosecution, to avert danger, to fulfill the statutory tasks of the constitutional protection authorities or the Military Counter-Intelligence Service or to enforce intellectual property rights.

Beyond this, data will not be passed on to third parties without your express consent.

Usage data

We collect and use personal data from you to the extent necessary to enable or bill you for the use of our Internet service (usage data). This includes, in particular, features for your identification and information on the beginning and end as well as the extent of the use of our offer.

Newsletter

We will send a newsletter to the email address you provide to us if you have chosen to subscribe to the newsletter through our website. Through our newsletter, you will be regularly informed about news, dates or other promotions. The specification of your e-mail address for sending the newsletter will be used exclusively by us. Your data will in no case be sold to third companies, persons or institutions.

Of course, you can unsubscribe at any time by clicking on the unsubscribe link at the end of each newsletter or contact us by e-mail at info@peakwork.com.

Forms

You have the possibility to send us a request via different forms (contact form, application form, appointment form, press contact, cooperation opportunities, Peakwork SET). For sending the information we store your data (first name, last name, email, phone, message, if applicable company / name of travel agency, if applicable address data, if applicable website, if applicable position) in our CRM (Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Netherlands) and forward your request via Outlook to your responsible contact person. No other transmission, e.g. to other countries, takes place. The data will be stored for the duration according to your request. SSL encryption protects the data you enter in the contact forms. If you do not want to enter the data in the contact form, you can also send us an e-mail.

For more information about Zoho, please visit https://www.zoho.com/de/privacy.html.

Applications

You have the option to send us application documents via the applicant contact form. We process your personal data (first name, last name, email, phone number, message, cover letter, resume, references and, if applicable, other application documents) based on your application for the purpose of recruitment. To process your application, we will forward your request via Outlook from the HR department to the relevant contact person in the department that has advertised the position. In the case of applications for our international branches (e.g. USA), the relevant data will be forwarded to the respective responsible persons involved in the application process. No other transfer, e.g. to other countries or third parties, takes place. The data will be stored for the duration of the application process and deleted after the application process, plus the legal objection periods, i.e. after the expiration of a maximum of 6 months. Occasionally, we like an application so much that we would like to keep the data beyond the six months in case a suitable position becomes available. In this case, however, we will of course ask you again whether you agree to this.

  1. Data subjects and data categories

The data subjects are customers, visitors to the website and business partners, as well as employees and applicants. Here, surname, first name, address and e-mail address, if applicable, as well as IP are recorded. However, only to the extent described under purpose and data economy.

VII. Legal basis

The legal basis for the storage, processing and transfer of your data is, on the one hand, your consent (e.g. in the case of newsletters), a weighing of interests that did not result in a restriction of your rights and freedoms (e.g. in the case of answering your inquiries via the contact form) or, in the case of a contractual relationship, the contract with you. In the case of application documents, the legal basis is the decision on the establishment of an employment relationship or your consent within the meaning of Art. 88 GDPR in conjunction with. § 26 German Data Privacy Act.

VIII. Deletion of data

If the purpose ceases to apply and there is also no legal retention period, the corresponding personal data will be deleted. In principle, the data will only be stored for the duration of the above-mentioned purposes.

If the purpose ceases to exist and there is also no legal retention period, the corresponding personal data will be deleted. In principle, the data is only stored for the duration of the above-mentioned purposes.

  1. Recipients or categories of recipients to whom the data may be disclosed

Your personal data will only be disclosed or otherwise transferred to third parties if this is necessary for the purpose of processing the contract, if you have given your prior consent or if this is required by legal regulations. If you subscribe to a newsletter with us, our service provider (Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Netherlands) will receive your e-mail address for the purpose of sending it. We are also obliged to forward the data to the tax office or other authorities due to various legal regulations. You have the right to revoke a given consent with effect for the future at any time.

After termination of the contractual relationship or after your possible revocation of consent to data storage, the data will be deleted after expiry of any statutory retention periods.

  1. Data transfer to third countries

03.2023: Unless otherwise explained in this privacy policy, data transfer to third countries is not intended and does not take place.

  1. Data subject rights

You have the possibility and the right to contact the responsible office (see above) at any time and request information about how your data is processed. In addition, you have the right to have your data corrected and deleted. You have the right to restrict processing, i.e. to allow only partial information to be processed. In addition, you have the right to object to the processing of your personal data at any time if the processing is based on a legitimate interest. Peakwork will then check to what extent the non-processing conflicts with legal disclosure and processing obligations and inform you accordingly. You have a right to data portability, i.e. that we hand over your personal data to you in machine-readable form in a common format determined by us upon request.

In addition, you have the right to lodge a complaint with the supervisory authority for data protection responsible for your federal state if you are of the opinion that we are not handling your personal data properly and in accordance with this declaration.

If you have given us your consent to process your data, you can revoke this consent at any time.

If you receive advertising from us, you also have the right to object to no longer receiving advertising from us at any time.

XII. Google Services

In the following, we inform you which services of the Google Group (for users within the EU: Google Ireland Limited, Gordon House Barrow St, Dublin 4, Ireland; outside the EU: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) are used on our website.

For more information on data protection at Google, please visit: https://www.google.de/intl/de/policies/privacy, Google's data collection and use statement at https://privacy.google.com/intl/de/your-data.html and https://support.google.com/analytics/answer/6004245?hl=de.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Group. Google Analytics uses cookies. The information generated by the cookies about your use of this website is transmitted to a Google server in the USA and stored there. Due to the IP anonymization activated on our website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area in order to ensure anonymized recording of IP addresses (so-called IP masking).[K1].

In exceptional cases, the full IP address is transmitted to a Google server in the USA and shortened there. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.

For more information, see Google's statement on data use on websites using Google services at https://policies.google.com/technologies/partner-sites?hl=de, on "advertising" by Google at https://policies.google.com/technologies/ads?hl=de, and information and options for disabling personalized advertising at https://adssettings.google.de/authenticated.

Google Maps

This site uses the Google Maps service from Google via an API (application programming interface). You can recognize this by the map on our contact page. In order to use the functions of Google Maps, information about your website use, including your IP address, is usually transmitted to a Google server in the USA and stored there. According to Google, the IP address is not associated with other data from Google. However, we would like to point out that Google is technically able to identify individual user data with the data received in any case.

If you are also logged into your Google account, this enables Google to assign your surfing behavior directly to your personal profile and to display personalized maps to you. You can prevent this possibility of allocation if you log out of your account beforehand.

More information on the handling of user data can be found in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/ and in Google's statement on the collection and use of data at https://privacy.google.com/intl/de/your-data.html. The terms of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html.

YouTube and Doubleclick by Google

On our website we use the plugin of the service YouTube, which belongs to Google.

The plugin is recognizable on our site by the embedded video, which can be clicked on. When you click on the video on one of our pages, your browser establishes a direct connection with the YouTube servers via a cookie. The YouTube server thus receives information about which particular page of our website you have visited.

If you are logged into your YouTube account or other Google account, you would enable YouTube or Google by clicking on the video or the link, your surfing behavior directly to your personal profile. Google also uses the data for personalized advertising, to customize its services and for market research. You can prevent this possibility of assignment if you log out of your account beforehand. You can also turn off personalized advertising in the settings in your Google account or on your Android device. For more information on this and to object to Google's use of data, see the privacy policy at https://policies.google.com/privacy?hl=de&gl=de. You can also find information on data protection at Google in Google's statement on the collection and use of data at https://privacy.google.com/intl/de/your-data.html and at https://support.google.com/analytics/answer/6004245?hl=de.

Since we embed YouTube videos on our website, "Doubleclick by Google" is also in use there on the website. Doubleclick, like YouTube, belongs to Google. Doubleclick uses cookies for advertisements and measuring the success of advertisements. For this purpose, your browser is assigned a so-called pseudonymous identification number (pID). According to Google, Doubleclick cookies do not contain any personal information. However, Google uses the cookies and the pID to identify which pages have been visited in order to serve ads across pages and analyzes which ads have been displayed and which, if any, have been called up, i.e. clicked on. Doubleclick can use cookie IDs to record so-called conversions, which are related to ad requests. In addition, we point out that Google can assign the website visit to your Google account if you are registered and logged in to one of the Google services. Even without registration or login, it is technically possible for Google to query and store your IP address. The information generated by the cookies is transferred by Google to a server in the USA or another EU third country for evaluation and stored there.

If you do not wish to receive personalized advertising, you can set this accordingly at http://www.google.com/settings/ads/onweb/?hl=de. To prevent tracking, you can

- adjust the cookie settings in your browser so that third-party cookies are suppressed.

- In addition, you can disable conversion tracking cookies from Google by blocking cookies from the domain "www.googleadservices.com" in your browser. Please note that this setting only applies until you delete cookies.

- Finally, you can use a browser plugin in popular browsers (Chrome, Firefox, Microsoft Edge (former Internet Explorer)) to ensure permanent advertising settings. To do so, please visit https://support.google.com/ads/answer/7395996.

However, such a setting may mean that our website cannot be used without restrictions. For more information on Doubleclick by Google, please visit https://www.google.de/doubleclick.

Google reCAPTCHA

Our website uses the "Google reCAPTCHA" service, which belongs to Google. It serves us to make sure that only humans enter data on our site. This way we protect ourselves against input by automated programs and abuse (spyware, spam). For this purpose, the reCAPTCHA service analyzes the behavior of you as a website visitor as soon as you call up our website. For this purpose, among other things, your IP address and the duration of your visit are evaluated, but according to Google, they are not linked to other data unless you are logged into your Google account. Google receives this data, possibly on servers in the USA.

For more information on Google reCAPTCHA, please visit https://www.google.com/recaptcha/intro/v3.html.

Further information on data protection at Google can be found at: https://www.google.de/intl/de/policies/privacy, in Google's statement on the collection and use of data at https://privacy.google.com/intl/de/your-data.html and at https://support.google.com/analytics/answer/6004245?hl=de.

XIII. Privacy policy for our online presence in social networks

Linking to social networks

On our site, you can access our respective online presence on these social networks by clicking on the logos of the respective social networks. Only by actively clicking on the logos will a connection to the social networks be established. Only then does the data processing described below take place.

Privacy policy for our online presences on the social networks

In the following, we inform you about which data is processed when you access our online presences in the social networks.

As the operator of our company website, we receive anonymized visitor statistics (insights) in the respective social network, which are created on the basis of data collected by the respective social network. Page insights are summarized data that provide us with information about how users interact with our site. We do not receive personal data. We therefore do not gain insight into the individual personal data of visitors to our company site. As the operator of the company site, we are jointly responsible for the visitor statistics (Insights) with the provider of the respective social network (Art. 26 GDPR), with the provider of the respective social network assuming primary responsibility. The legal basis for the use of Insights data is our legitimate interest within the meaning of Art. 6 (1) f) GDPR to provide information and communication offers for interested parties and customers via social networks. We use this information for economic and communication purposes, including to remain competitive as a company.

When you access our online presences in the social networks, the respective social network places cookies on the device you use for this purpose (i.e. your computer or mobile device), which have the purpose of storing information in the web browsers and remain effective for a period of up to two years, unless they are deleted. The respective social network receives the information stored in the cookies, records it and processes it. This happens not only when you access services of the respective social network such as our Facebook/Twitter/Xing/LinkedIn/Kununu/Meetup page, but also for services provided by other members of the corporate group of the respective social network as well as services provided by other companies that use the services of the respective social network. Partners of the respective social network and third parties also use cookies on the respective social networks to provide services. The data is used by the respective Social Network and third party companies for product research and development and advertising and sponsored content.

Please note that cookie placement when you access our company site occurs regardless of whether or not you have an account on the respective social network.

If you have an account in the respective social network, the respective social network collects data when you call up the company page, provided you have provided this data in your account, and processes it. This includes your age, gender, relationship status, professional situation as well as information about your lifestyle, interests and purchases or purchasing behavior (demographic data). The respective social network also collects and processes geographical data such as your location. This is used by the respective social networks to offer their information services and advertising in a targeted manner (personalization). The respective social network can assign this data to your person.

If you do not have an account with the respective social network, the cookie placement will in any case collect your IP address, information about your device, the region or, if applicable, the more precise location where you use it, call time and dwell time, as well as estimate the above demographic data based on your surfing behavior.

You can prevent the collection of the data generated by the cookie and related to your use of our company site (including your IP address) to the respective social network as well as the processing of this data by the respective social network by adjusting your cookie settings before calling up our company site on the social networks. Most browsers have an option to restrict or completely prevent the storage of cookies. However, it should be noted that the use and especially the user comfort will be limited without cookies. In addition, you can activate the "do not track" function in your browser, disable script code executions in your browser or use a so-called script blocker.

The U.S. providers of the respective social network also have servers in the U.S. as well as other EU third countries and use a network of computers, cloud-based servers and other infrastructure and information technologies as well as other service providers that may be located outside the European Economic Area and Switzerland, i.e. in countries whose data protection does not meet the level of the EU GDPR and the Federal Republic of Germany. In this case, further guarantees such as standard contractual clauses of the EU Commission are concluded.

We maintain online presence on:

Facebook, provider: Facebook Inc, Headquarters: 1 Hacker Way, 94025 Menlo Park, CA, USA; for users within the EU: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

For more information:

Facebook's Data Policy at https://www.facebook.com/privacy/explanation,

Facebook's Cookie Policy at https://www.facebook.com/policies/cookies,

Page Insights data at https://www.facebook.com/legal/terms/information_about_page_insights_data,

Twitter, provider: Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, US.

For more information:

Twitter's data policy https://twitter.com/de/privacy

Xing / Kununu, provider: NewWork SE, Dammtorstraße 30, 20354 Hamburg, Germany.

You can obtain further information:

in Xing's privacy policy at https://privacy.xing.com/de/datenschutzerklaerung

LinkedIn, Provider: LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA ("LinkedIn"), or LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

For more information:

LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy

Meetup, Provider: Meetup Inc, 632 Broadway 10th Floor Conference Room New York, NY 10012 United States.

For more information:

Meetup's privacy policy at

https://help.meetup.com/hc/en-us/articles/360044422391-Privacy-Policy

Instagram, provider: Facebook (Facebook Inc., Headquarters: 1 Hacker Way, 94025 Menlo Park, CA, USA; for users within the EU: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)

Further information can be found in Instagram's data policy at https://help.instagram.com/519522125107875,

Instagram's cookie policy at https://help.instagram.com/1896641480634370?ref=ig and options for advertising settings on Facebook in the data protection information at https://www.facebook.com/help/568137493302217.

YouTube, provider: Google LLC, („Google“, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

Further Information can be found in Google’s data policy at https://policies.google.com/privacy?hl=de&gl=de

XIV. External Links

For your optimal information, you will find links on our pages that refer to pages of third parties. If this is not obviously recognizable, we point out that it is an external link. Peakwork has no influence whatsoever on the content and design of these pages of other providers. The guarantees of this data protection declaration therefore naturally do not apply there.

PRIVACY POLICY FOR OUR PRODUCT PEAKWORK SET

Our product Peakwork SET is available to you for efficient travel consulting. Personal data is processed during registration and use of Peakwork SET.

Data subjects and data categories

The persons concerned are travel agency employees and business/contractual partners. Here, surname, first name, address, if applicable, and e-mail address as well as IP are recorded. However, only to the extent described under purpose and data economy.

Payment processing

When concluding a subscription between your travel agency and Peakwork SET, we offer various payment options from Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland). The information provided as part of the subscription process (name, address, possibly business credit card number of the subscription contract partner, invoice amount, transaction number) will be processed there. The transfer of your data takes place exclusively for the purpose of payment processing with Stripe. You can find more information about Stripe's data protection at https://stripe.com/de/privacy.