Privacy Policy | AT Rides & Tours

With this privacy policy, we aim to inform you about the type, scope, and purpose of processing personal data (hereinafter also referred to as "data"). Personal data includes all data that has a personal reference to you, such as your name, address, email address, or user behavior. This privacy policy applies to all data processing operations carried out by us, both within the scope of our core activities and for the online media we provide.

Responsible for data processing is:

AT Rides & Tours
Sudetenring 77
63303 Dreieich
Germany
Phone: +49 (0) 176 556 564 33

Processing your data within the core activities of our company

If you are our customer or business partner or are interested in our services, the type, scope, and purpose of processing your data are determined by the contractual or pre-contractual relationships between us. In this sense, the data we process includes all data provided by you for the purpose of utilizing contractual or pre-contractual services and required for processing your request or the contract concluded between us.

Affected Data:

Personal data (e.g., names, addresses)
Payment data (e.g., bank details, invoices)
Contact data (e.g., email address, phone number, postal address)
Contract data (e.g., contract subject, contract duration)

Affected Persons:

Interested parties, business and contract partners

Processing Purpose:

Processing contractual services, communication, and responding to contact inquiries, office and organizational procedures

Legal Basis:

Contract fulfillment and pre-contractual inquiries, Art. 6 para. 1 lit. b GDPR, legal obligation, Art. 6 para. 1 lit. c GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR

Your Rights under the GDPR

Under the GDPR, you have the following rights, which you can assert at any time with the responsible party mentioned in section 1 of this privacy policy:

Right to Information: You have the right to request information from us about whether and which data we process about you.
Right to Rectification: You have the right to request the correction of incorrect or completion of incomplete data.
Right to Erasure: You have the right to request the deletion of your data.
Right to Restriction: In certain cases, you have the right to request that we only process your data in a restricted manner.
Right to Data Portability: You have the right to request that we transfer your data to you or another responsible party in a structured, common, and machine-readable format.
Right to Complain: You have the right to complain to a supervisory authority. The supervisory authority responsible is the one of your usual place of residence, your workplace, or our company headquarters.

Right of Withdrawal

You have the right to withdraw your consent to data processing at any time.

Right to Object

You have the right to object at any time to the processing of your data, which we base on our legitimate interest according to Art. 6 para. 1 lit. f GDPR. If you exercise your right to object, we ask you to explain the reasons. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests and rights.
Regardless of the above, you have the right to object to the processing of your personal data for advertising and data analysis purposes at any time.
Please direct your objection to the contact address of the responsible party mentioned above.

When do we delete your data?

We delete your data when we no longer need it or when you instruct us to do so. This means that – unless otherwise stated in the individual privacy notices of this privacy policy – we delete your data,

when the purpose of data processing has ceased and thus the respective legal basis mentioned in the individual privacy notices no longer exists, e.g.,
after the termination of the contractual or membership relationships between us (Art. 6 para. 1 lit. a GDPR) or
after the cessation of our legitimate interest in further processing or storage of your data (Art. 6 para. 1 lit. f GDPR),
if you exercise your right of withdrawal and no other legal basis for processing according to Art. 6 para. 1 lit. b-f GDPR applies,
if you exercise your right to object and there are no compelling legitimate grounds against deletion.

However, if we still need to retain (certain parts of) your data for other purposes, such as tax retention periods (usually 6 years for business correspondence or 10 years for booking documents) or the assertion, exercise, or defense of legal claims from contractual relationships (up to four years) or if the data is needed to protect the rights of another natural or legal person, we will only delete (the part of) your data after these periods have expired. Until these periods expire, we will restrict the processing of this data to these purposes (fulfillment of retention obligations).

Cookies

Our website uses cookies. Cookies are small text files consisting of a series of numbers and letters that are stored and saved on the device you use. Cookies primarily serve to exchange information between the device you use and our website.

Types of cookies used:

Temporary Cookies (Session Cookies): These store a so-called session ID, deleted when you close your browser.
Permanent Cookies: Remain stored even after closing the browser to recognize you upon return (e.g., login status).

Purpose:

Necessary Cookies: Essential for operation (e.g., logins, security).
Statistics, Marketing, and Personalization Cookies: Used for analysis, reach measurement, and interest-based content.

Legal Basis:

Legitimate Interest (Art. 6 para. 1 lit. f GDPR): For necessary operations and improvement.
Consent (Art. 6 para. 1 lit. a GDPR): For optional cookies. You can withdraw consent at any time.

Web Hosting

We use a provider to host our websites (Hostinger). The provider processes data transmitted by your browser (IP address, access times, etc.) to ensure stability and security. Data is stored as log files.

Provider: Hostinger
Privacy Policy: Hostinger Privacy Policy

Contact

If you contact us via email, social media, phone, fax, mail, or contact form, we process your data to respond to your inquiry.

Payment Service Providers

We use payment service providers for efficient and secure payment processing. Provider terms and privacy policies apply.

Apple Pay: Privacy Policy
Visa: Privacy Policy
American Express: Privacy Policy
Mastercard: Privacy Policy
PayPal: Privacy Policy

Online Advertising & Analytics

We use services like Facebook Pixel and Google Ads for remarketing and measuring campaign success. Data usage includes access times, device info, and behavior.

Facebook Pixel: Privacy Policy, Opt-Out
Google Ads: Privacy Policy

Web Analysis and Statistics

We use analysis services to evaluate visitor flows. IP addresses are anonymized.

Third-Party Plugins

We use social media buttons and plugins from Facebook, Google (reCAPTCHA), Instagram, WhatsApp, and TikTok.

Google Maps: Used to display maps. Transmits IP/location to Google. Privacy Policy.
YouTube: Used to embed videos. Transmits usage data to Google. Privacy Policy.

Security Measures

We take technical and organizational security measures to protect your data.

Status: April 2022. This policy may be adjusted due to legal changes.