Privacy policy

Agentur KONSENS GmbH privacy policy

The controller processing the personal data

The controller responsible for the collection, processing and use of your personal data in the sense of the Federal Data Protection Act is the Agentur KONSENS GmbH, Schöllkrautstr. 39, 13503 Berlin, Germany (subsequently referred to as “KONSENS”).

If you wish to object to the collection, processing and use of your data by KONSENS in accordance with this privacy policy, whether generally or only for individual measures, please send your objection by e-mail to kirsten@konsens-booking.com.

What kind of personal information is collected by KONSENS and on what legal basis?

Booking

When you use our service, we will ask you for certain information. This involves basic information such as your name, contact details and the names of the guests travelling with you. This information is required for processing the respective order within the meaning of Article 6 (1)(b) GDPR (General Data Protection Regulation). However, we would like to point out that you are not legally required to provide us with your personal data, although if you do decide to object to this it may influence the services we are able to offer you.

Marketing

If, as part of your booking, you have given us your consent (under the requirements of Section 7 (3) UWG (German Act against Unfair Competition)) to send you electronic advertising we will send you further offers of our services. You may object to the receipt of such electronic advertising at any time by sending an e-mail to kirsten@konsens-booking.com.

Other communication

We may contact you by e-mail, post, telephone or SMS depending on the contact details you have provided to clarify any queries or questions concerning your booking.

Legal purposes

Your data is processed as described based on the following legal basis.

• Contract fulfilment: The use of your data may be required for the fulfilment of your contract with the provider. If, for example, you use our service to make an online booking, we use your data to fulfil our obligation to process and complete the booking in accordance with our joint agreement.
   
• Legitimate interests: We may use your data for our legitimate business interests. This can help us provide you with personalised content in our e-mails and newsletters and optimise and market our services as well as the content on our internet platform. It can also serve administrative and legal purposes and help uncover fraudulent activities.
   
• Consent: We may also ask your consent to use your personal data for certain direct marketing purposes. You may withdraw your consent at any time by sending an e-mail to kirsten@konsens-booking.com.

How long does KONSENS keep the personal data?

We only retain your data for as long as is required in terms of data protection law. This means that for the processing of a hotel booking, for example, your data would be deleted after completion of the booking process and your stay – unless the data is subject to legal retention periods (for example relating to tax purposes). In the latter case, we store the data until the legal retention period expires.

If you have given your consent for the processing of your data going beyond this (see above), your data is only stored until you withdraw your consent. To do so please send an e-mail to kirsten@konsens-booking.com.

How does KONSENS share data with third parties?

The main purpose of forwarding your data to third parties is to provide your booked accommodation with your booking data (name, room category, duration of stay as well as any special requests from the comments section). If you have a question regarding your booking, we may contact the accommodation provider and ask them to respond to this. In the case of booking-related disputes we may, if required, pass booking data onto the accommodation provider. This may include a copy of your booking confirmation as proof of the booking completion.

Third-party providers
We may ask service providers to process your personal data on our behalf. This can occur for various reasons, for example for sending advertising content. All third-party providers are subject to confidentiality agreements and may only use your personal data for the aforementioned purposes.

Competent authorities
We disclose personal data if law enforcement measures require us to do so or if this is necessary for the prevention, disclosure or prosecution of criminal action or fraud. We may also share personal data with the relevant authorities in order to protect our rights and accommodation or the rights and accommodation of our business partners.

What are my rights concerning my personal data?
You have the right to request information on your personal data which we have collected at any time. If you would like to find out what personal data we have collected, please contact kirsten@konsens-booking.com.

Please note that we collect, process and store any data which you have entered in a contact form for processing your enquiry.

You are also entitled to the rectification of any incorrect personal data or even the erasure of this (“right to be forgotten”) as long as the processing of this is no longer legitimate. In certain circumstances, for example a dispute on the legitimacy of the processing, you are also entitled to restriction of data processing. Furthermore, you are also entitled to request the transfer of your personal data in a structured, current and machine-readable format. You may also object to data processing on the basis of Article 6 (1)(e) and (1)(f), as well as for the purposes of direct advertising at any time. In so far as you have given us consent for the further processing of your personal data (see above) you may withdraw this at any time – for example by sending a message to the above e-mail address.

Finally, in the case of any discrepancies, you are also entitled to lodge a complaint with the relevant supervisory authority for data protection.

Reporting vulnerabilities or security incidents

Are you a security researcher or a white hat hacker who has discovered a security issue (e.g. with products, services, websites and other infrastructure components) which you would like the affected company to rectify?

Or do you have information concerning a security incident and would like to contact the relevant security department?

If this involves our internet platform www.konsens-booking.com, please contact us on kirsten@konsens-booking.com.

We take reported vulnerabilities and security incidents very seriously. Your information helps our security experts, in particular, to continue to maintain a high level of security.

Berlin, September 2019