Data Protection
Data Collection and Processing
We collect and store all data provided by the user on our website or through other means. This data includes personally identifiable information such as the customer’s full name, date of birth, phone number, address, email, passport number, or other personal data. The collected data is necessary to ensure the proper execution of our travel services and registrations and to ensure that the storage and use of this data always comply with applicable Swiss and European laws. The collected and stored data is used for booking products that are part of an offered travel package. Additionally, TravelSECRET GmbH informs customers or users that the collected data may be used for internal commercial purposes or marketing. The transfer of data for commercial reasons is excluded. The basis for data processing is Art. 6 para. 1 lit. f GDPR, which allows the processing of data to fulfill a contract or pre-contractual measures.
User Data to Third Parties
TravelSECRET GmbH must pass on data to third parties under the following conditions:
- When processing inquiries and/or technical services for TravelSECRET’s websites.
- When this data is necessary for organizing the travel package booked by the customer.
- When required by the competent authorities. This only occurs if TravelSECRET GmbH is legally obliged to do so or if it is ordered by a court. All private or public entities to which TravelSECRET GmbH must transfer data for legal, technical, or operational reasons are obliged to comply with Swiss and European data protection laws.
SSL or TLS Encryption
Encrypted Payment Transactions
Payment transactions via common payment methods (Visa/MasterCard) are carried out exclusively through our payment service provider Saferpay, a service of SIX Finance Group in Zurich, SWITZERLAND, and Bexio AG, Switzerland (www.bexio.com). Payment data is transmitted encrypted via an SSL or TLS connection. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. In the case of encrypted communication, your payment data that you transmit to our payment service provider cannot be read by third parties.
Privacy Policy and Cookies
In accordance with Article 22.2 of Law 34/2002 of July 11, on Information Society Services and Electronic Commerce, this website informs you in this section about the policy of collecting and processing cookies. What are cookies? A cookie is a file that is downloaded to your computer when you access certain websites. Cookies allow a website, among other things, to store and retrieve information about the browsing habits of a user or their device. Depending on the information they contain and how you use your device, they can be used to recognize the user. A cookie is a file that is placed on your computer when you visit certain pages. Cookies allow a website, among other things, to store information about a user’s or their device’s browsing behavior. Depending on the information they contain and how you use your device, they can be used to recognize the user. The user’s browser stores the cookies on the hard drive only during the current session and uses only the minimal required storage space without affecting the computer. Cookies do not contain any personal or specific information, and most are deleted after the browser session (the so-called session cookies). Most browsers accept cookies by default. Regardless, browsers can allow or prohibit the use of temporary or stored cookies through security settings. Without your express consent – through the activation of cookies in your browser – TravelSECRET will not store any personal data provided by you via cookies at registration or purchase. What types of cookies does this website use? This website uses the following types of cookies: Analytics cookies: These are cookies that are either collected by us or by third parties. They allow us to determine the number of users and thus perform statistical measurement and analysis of the use of our services. To improve the offerings of our products and services, your browsing behavior on our website is analyzed.
Technical Cookies
These are cookies that allow the user to visit a website, platform, or application and use various options and services that exist on the website. These include, for example, controlling traffic and data communication, identifying a session, accessing restricted areas, retrieving elements that contain a request/order, implementing a purchase process of a request, requesting registration or participation in an event, using security elements during the visit, storing content for the dissemination of videos or sounds, or sharing content via social media.
Personal Cookies
These are cookies that allow the user to access services based on some generally predefined characteristics and through a series of criteria of the user’s device, such as language or the type of browser through which a connection to the service is made.
Advertising Cookies
These are cookies that are either collected by this website or by third parties. They serve to better manage the offers that appear on advertising spaces. The advertising content is adapted to the requested services or the user’s behavior on our website. We can analyze browsing behavior on the internet and thus show advertising that matches the browser profile.
Behavioral Advertising Cookies
These are cookies that allow the management of advertising spaces in the most efficient way possible. The editor may provide a web execution that offers an application or platform for the requested service. This type of cookie continuously stores observed information about the user’s behavior. This allows specific profiles to be created to show user-defined advertising.
Third-Party Cookies
TrueMallorca’s websites may use third-party services that – on behalf of TrueMallorca – collect information for statistical purposes, gather information regarding the use of the site by the user, and utilize other services related to website activity and other internet services. This website uses Google Analytics. Google Analytics is a service provided by Google, Inc. with its central office at: 1600 Amphitheatre Parkway, Mountain View, California 94043/USA. The service is used for data analysis. Google uses cookies to collect information, including users’ IP addresses. This data is transmitted, processed, and collected by Google – and in accordance with the conditions set on the website Google.com. This includes the possible transfer of information to third parties due to legal requirements or when these third parties process the information on behalf of Google.
Disabling Cookies
The user expressly accepts – by using this site – the processing of the collected information for the aforementioned purposes and in the manner described. At the same time, the user is informed that there is an option to reject the processing of data or information by disabling the use of cookies through the selection in the browser settings. This option to block cookies in the browser may limit the use of the site and its functions. You can allow, block, or delete the installation of cookies. This is done through the management of options in the browser installed on your computer. Most web browsers allow the installation of cookies on your device, block them, or delete them. Below you can access the management of the most commonly used web browsers installed on your computer. Most web browsers offer the option to allow, block, or delete installed cookies. Below you can access the management of the most commonly used browsers to allow, install, or disable cookies:
- Management of cookies for Google Chrome
- Management of cookies for Microsoft Internet Explorer
- Management of cookies for Mozilla Firefox
- Management of cookies for Safari (Apple) If you have questions regarding the cookie policy, you can contact TravelSECRET GmbH at booking@travel-secret.ch.
Third-Party Cookies
This website uses third-party services to collect data for statistical purposes and website usage. Cookies are used by DoubleClick to improve the advertising that appears on the website. Cookies are used to adapt the advertising to user-relevant content. This improves the quality of use and experience with the website content. Specifically, we use the services of Google Adsense and Google Analytics for our statistics and advertising. Some cookies are essential to ensure the functionality of the site. This includes, for example, the built-in search engine. Our website contains additional features provided by third parties. With the help of the buttons we have integrated, you can easily share content on social media such as Facebook, Twitter, or Instagram.
Note on Deleting Cookies
External Links and Use of Social Media Plugins
We hereby inform users that other websites are not covered by the privacy policy listed here. This applies when these are accessed via buttons or plugins. We recommend reading the privacy policy on these websites to understand the norms applied to the handling of personal data. Some of these external websites that the user and/or customer may access are as follows:
- Operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. https://www.facebook.com/about/privacy/
- Operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA. https://twitter.com/privacy
- Operated by Instagram Inc., 181 South Park Street, Suite 2, San Francisco, CA 94107, USA.
Newsletter Data
The data provided by our customers regarding the email address is automatically added to our newsletter distribution list. We use this data exclusively for sending newsletter information and do not pass it on to third parties. The processing of the data entered during booking is based solely on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent to the storage of data, the email address, and its use for sending the newsletter at any time, for example, via the unsubscribe link in the newsletter or through personal information to TrueMallorca. The legality of the data processing operations already carried out remains unaffected by the revocation. The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and deleted after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g., email addresses for customer correspondence related to travel booking) remain unaffected.
Google Fonts
To visually enhance the presentation of various information on this website, Google Webfonts (https://www.google.com/webfonts/) are used. The Webfonts are transferred to the browser’s cache when the page is accessed to be used for display. If the browser does not support Google Webfonts or blocks access, the text will be displayed in a standard font. No cookies are set when the page is accessed. Data transmitted in connection with the page call is sent to resource-specific domains such as fonts.googleapis.com or fonts.gstatic.com. They are not associated with data that may be collected or used in connection with the parallel use of authenticated Google services such as Gmail. You can configure your browser to prevent fonts from being loaded from Google servers (e.g., by installing add-ons like NoScript or Ghostery for Firefox). If your browser does not support Google Fonts or you block access to Google servers, the text will be displayed in the system’s standard font. Information about Google Webfonts’ privacy conditions can be found at: https://developers.google.com/fonts/faqPrivacy General information about privacy can be accessed at the Google Privacy Center: https://www.google.com/intl/en-US/privacy/
Vimeo
Our website uses plugins from the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. When you visit one of our pages equipped with a Vimeo plugin, a connection to Vimeo’s servers is established. The Vimeo server is informed which of our pages you have visited. Vimeo also obtains your IP address. This applies even if you are not logged into Vimeo or do not have an account with Vimeo. The information collected by Vimeo is transmitted to the Vimeo server in the USA. If you are logged into your Vimeo account, you enable Vimeo to directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your Vimeo account. Further information on the handling of user data can be found in Vimeo’s privacy policy at: https://vimeo.com/privacy.
Revocation / Deletion
You can request the deletion of your data from us at any time and revoke your consent to data protection. You also have the right to information, correction, or restriction of processing. Storage occurs until revocation. Please use the contact details listed below for this purpose.