Privacy Policy of Sorient GmbH

We are very pleased about your interest in our company. Data protection is of particularly high importance to the management of Sorient GmbH. The use of the Sorient GmbH internet pages is generally possible without providing any personal data. However, if a data subject wishes to use special services of our company via our website, the processing of personal data may become necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject.

The processing of personal data, such as the name, address, email address, or telephone number of a data subject, is always carried out in compliance with the General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection regulations applicable to Sorient GmbH. Through this Privacy Policy, our company wishes to inform the public about the nature, scope, and purpose of the personal data we collect, use, and process. Furthermore, data subjects are informed about their rights by means of this Privacy Policy.

In the following, we inform you transparently about what data we collect, what we use it for, and what rights you are entitled to.

1. Controller and Security Notice

1.1 Who is responsible for data processing?

Sorient GmbH

Breslauer Str. 5

83313 Siegsdorf, Germany

Tel. 0049 8662 4910060

Email: info@sorient.eu

Website: www.sorient.eu

1.2 Security Notice

As the controller for processing, Sorient GmbH has implemented numerous technical and organisational measures to ensure the most complete protection possible of the personal data processed through this website. Nevertheless, internet-based data transmissions can fundamentally have security gaps, so absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us via alternative means, for example by telephone.

2. Collection and Storage of Data

2.1 When do we collect personal data?

We collect your data as soon as you contact us. This happens in particular when you book a trip (purchase goods or services via our websites), create a customer account via our websites, subscribe to a newsletter or receive other advertising, use our websites, mobile apps or offerings on social networks, or communicate with us via telephone, email, text messages, or instant messaging.

2.2 What data do we collect?

We collect data that you actively provide to us, as well as data that is automatically recorded when you use our services. This includes:

• Identity Data: Name and first name, date of birth, age, gender.
• Contact Data: Residential, delivery, and/or billing address, telephone number(s), email address(es).
• Customer and Contract Data: Online customer account information, contract date, and contract content (booked trip, price).
• Preferences: Language preferences, information about subscribed newsletters or advertising formats.
• Usage Data: Session data when visiting our websites and social networks.

3. Purposes and Legal Bases of Processing

We process your personal data for the following purposes, based on the stated legal bases of the GDPR:

• Contract Fulfilment & Travel Organisation (Booking, invoicing, debt collection): The legal basis is Art. 6 para. 1 lit. b (performance of a contract).
• Customer Communication (Inquiries, notifications regarding the trip): The legal basis is Art. 6 para. 1 lit. b (performance of a contract).
• Direct Marketing (personalised advertising, newsletter): The legal basis is Art. 6 para. 1 lit. a (consent) or Art. 6 para. 1 lit. f (legitimate interest for existing customers).
• Marketing and Optimisation (Analysis of customer behaviour to avoid unnecessary advertising): The legal basis is Art. 6 para. 1 lit. f (legitimate interest).
• Ensuring system stability and security of our IT systems: The legal basis is Art. 6 para. 1 lit. f (legitimate interest).

4. Transfer of Data to Third Parties

We transfer your personal data to third parties if this is necessary for the execution of the contract. For a tour operator, this is typically the case for:

• Transport companies (airlines, rail, bus companies).
• Hotels and local accommodation.
• Banks and payment service providers (for payment processing).
• Other service providers (e.g., local agencies, travel insurance, destination agencies).

Beyond this, we only transfer data if you have explicitly consented, a legal obligation requires it (e.g., to authorities), or the enforcement of our rights requires it (e.g., debt collection). Note: These service providers may only use your data within the scope of order processing.

5. Your Rights as a Data Subject

You can assert your data protection rights at any time. These include:

• Right of Access (Art. 15): You have the right to receive information about the data processed by us.
• Right to Rectification (Art. 16): You can request the correction or completion of your stored data.
• Right to Object (Art. 21): You can object to the processing of your data, particularly to processing for direct marketing purposes.
• Right to Erasure (Art. 17): You can request the erasure of your data, provided there are no legal retention obligations preventing this.
• Right to Restriction of Processing (Art. 18).
• Right to Data Portability (Art. 20).
• Right to Lodge a Complaint (Art. 77): You have the right to lodge a complaint with the competent supervisory authority.

6. Data Retention Period

We store your personal data for as long as it is necessary for the original purposes of data collection. We erase your data as soon as it is no longer required and in any case after the expiry of the legally prescribed maximum retention periods (e.g., commercial or tax law deadlines, which can be up to ten years).

7. Data Processing on Our Website

7.1 Use of Log Files

When you visit our websites, our servers temporarily store every access in a protocol file (log file). The following data is automatically collected and stored for a maximum of twelve months: The IP address of the requesting computer, date, time and origin of the access, name and URL of the retrieved file, as well as the operating system, browser used, and internet access provider. This data is used to ensure system security and stability, to optimize our offer, and for internal statistical purposes.

7.2 Use of Cookies

We use cookies on our internet pages. These are small text files that are stored on your device. Cookies are necessary to guarantee the basic functions of our pages (e.g., shopping cart). They also optimize your online experience and are used to optimize our advertising. Important Note: No data that can be directly assigned to a specific person is stored in our cookies. Preventing Cookies: You can prevent the setting of cookies at any time by making the appropriate setting in your internet browser. You can delete already set cookies via your browser at any time. However, we point out that if cookies are deactivated, not all functions of our website may be fully usable.

7.3 Web Analysis Tools (Google Analytics)

We use the analysis tool Google Analytics to constantly improve our offer. Data about the use of our site is transferred to the Google server. The IP addresses are shortened so that identification of the individual device is excluded (IP anonymization). You can prevent the collection of data by Google Analytics by downloading and installing the browser plugin available at the following link: [https://chromewebstore.google.com/detail/google-analytics-opt-out/fllaojicojecljbmefodhfapmkghcbnh].