Privacy Policy

1. Controller

The controller responsible for processing personal data within the meaning of the General Data Protection Regulation (GDPR) is:

KRIS Reisen
Königswarterstraße 50, 90762 Fürth, Germany
Email: hello@kris-reisen.de

2. Data collected when visiting our website

Each time our website is accessed, our server automatically records data and information from the system of the calling computer (so-called server log files). The following data is recorded:

• date and time of access
• IP address (anonymised)
• requested page and amount of data transferred
• referrer URL and user agent

This data is processed to ensure the operation of the website and to defend against attacks (legal basis: Art. 6 (1) (f) GDPR) and is deleted after a maximum of 30 days.

3. Cookies

We use only technically necessary cookies (e.g. to store the language selection and the cookie consent). No processing for advertising or tracking purposes takes place. You can open the cookie banner at any time via the corresponding link in the footer to adjust your consent.

4. Contact form and email enquiries

If you send us enquiries via the contact form or by email, your details (name, email address, company, message) will be stored with us for the purpose of processing the enquiry and in the event of follow-up questions. The legal basis is Art. 6 (1) (b) and (f) GDPR.

5. Booking and ticketing data

In the context of bookings, we process traveller data (first and last name, date of birth, passport or ID data where required, itinerary, payment data). We pass on this data exclusively to the entities required for the provision of services — in particular airlines, hotels, Global Distribution Systems (Amadeus, Travelport, Sabre) and the IATA BSP settlement system. Legal basis: Art. 6 (1) (b) GDPR.

6. Storage duration

Personal data will be deleted as soon as the purpose of its processing ceases to apply. Tax and commercial law retention obligations may require longer storage (generally 6 to 10 years).

7. Your rights as a data subject

You have the following rights:

• right to information about the data stored about you (Art. 15 GDPR)
• right to rectification of incorrect data (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to object to processing (Art. 21 GDPR)
• right to withdraw consent (Art. 7 (3) GDPR)

To exercise these rights, simply email hello@kris-reisen.de.

8. Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data. The supervisory authority responsible for KRIS Reisen is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

9. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the lock symbol in your browser bar and by the "https://" address line.