Data Protection
Your privacy and the protection of your personal data is of the greatest importance to Sumatra EcoTravel. In the following statement you will find out which kind of data you submit while using our website, the specific purposes your personal data is used for and how you can control the use of your personal data. Any specific personalized data is only registered when you make a booking through our website. Your booking will typically contain your email address and your name, your telephone number and your home address. For some bookings it will be necessary to submit your passport number and your date of birth. These data will be used for handling your booking with your tour operator EcoTravel Bukit Lawang (PT. Sumatra EcoTravel Bukit Lawang).
1. DATA PROTECTION AT A GLANCE
Introduction
The FAQs below will give you a general and quick overview on what happens to your personal data or your personally identifiable information when you visit our website or make a booking. By “personal data” we refer to any data identifying you personally. A more specific information on data protection will then be provided in section 2 (“GENERAL INFORMATION AND COMPULSARY STATEMENTS”)
Data processing on our website
Who is responsible for the data processing on this website?
Data processing on this website is carried out by the provider of this website. Their contact information can easily be found in the sections labelled “Contact” or “Impressum” (Imprint) on this website.
How do we collect your data?
We collect your personal data when you submit information to our website actively and deliberately. Typically this is done when you submit data by communicating with us to book your holiday in Sumatra and fill in the contact form on our website. For the handling of your booking it can be necessary to collect further data including passport numbers, information on special needs or on your dietary requirements. Further data is registered automatically by our IT system when you visit our website. This happens merely for technical reasons and the processed information refers to your internet browser, your operating system and the time of your online visit.
What is your data used for?
Your personal data is handed on to your tour operator Sumatra EcoTravel Bukit Lawang with which you book in order to enjoy its services. Some data is used to make sure our website is running properly on your device. Other data is used to analyse your online needs.
Which rights do I have concerning my own personal data?
You have the right to gain information on the origin, the receivers and the specific use of your personal data stored with us – anytime and at no extra cost. You also have the right to demand your personal data to be corrected, blocked or erased. If you wish to do so or if you have any further questions please contact us immediately using the “Contacts” or “Impressum” (Imprint) sections on our website. On top of that you have the right to complain with your data protection authority.
2. GENERAL INFORMATION AND COMPULSARY STATEMENTS
DATA PROTECTION
The provider of this website takes the protection of your personal data very seriously. Your personal data will be processed confidentially under our data protection and privacy policy and according to European General Data Protection Regulations. When you use this website you may submit certain personal data. Personal data means data and information by which you can be identified. Our data protection and privacy policy explains which kind of data we process and how we use it. It also explains for which specific purposes your data is used. Please be informed that any online data transfer (e.g. in email communication) may be subject to security gaps. A complete protection of online communication from third party access is not possible.
REVOCATION OF YOUR DATA PROTECTION AGREEMENT
Most data processing is only possible with your explicit consent or agreement. Any consent you have given can be revoked at any time. Your revocation is not linked to a specific form, a simple email to us will suffice. The lawfulness of any data processing done before your revocation remains untouched.
RIGHT OF COMPLAINT WITH YOUR DATA PROTECTION AUTHORITY
Any violation of data protection regulations may be reported to the data protection authorities by the person affected. In Germany for example, the relevant data protection authority is based with the data protection officer of the federal state in which the violating party has its seat. A list of data protection officers and how to contact them can be found here: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
RIGHT OF DATA PORTABILITY
You have the right to be handed out your personal data in a commonly used and machine readable format when it is technically available. If you wish, this data can also be transferred to a third party designated by you.
SSL-ENCRYPTION
Our website uses SSL-encryption whenever confidential or personal data of our users is transferred. SSL-encryption is activated when we handle payments through our website or when you place requests or bookings. Please make sure that SSL-encryption is enabled on your computer device. You can easily spot SSL-encryption in your browser when addresses starting with “http://” are changing to “https://”. SSL-encrypted data is not accessible through a third party. Please only submit personal data when SSL-encryption is activated. Whenever you are in doubt, please contact us.
INFORMATION, BLOCKING AND ERASURE
In accordance with current legal regulations you have the right to be informed about the personal data processed by us, about its origin, the specific purpose it is used for and also the addressees we have handed it on to. This information can be demanded any time and at no extra cost. You also have the right of your data to be corrected, blocked or erased. Please use our contacts in the imprint section (“Impressum”) for any further questions on your personal data.
OPTING OUT OF DIGITAL ADVERTS
The owners of this site do not send out digital adverts or any other information that has not been requested explicitly by its users. Vice versa, we hereby forbid any unrequested advertising to the addresses given in our contact or imprint sections. The owners of this site have the right to take legal steps against any form of unrequested advertising or spam mails.
3. Forms of data processing and storage on our website
COOKIES
Our websites uses “cookies”. Cookies do not damage your computer, nor do they contain digital viruses or malware. Cookies are designed to make our online services more user friendly, more effective and more secure. Cookies are small data units in text format which are stored in your internet browser. Most cookies we use are so called “session cookies” which are automatically erased as soon as you leave our website. Some cookies remain stored on your computer until you actively erase them. These cookies help us to recognize your computer when you visit our website again. You can change your browser settings in a way that you are informed about cookie activity, may opt in or out of allowing cookies for individual websites or in general and have cookies erased automatically as soon as you close your browser. Deactivating cookies may lead to limited performance of our website.
Cookies which are necessary for electronic communication are stored in accordance with Art. 6 (1) f) (EU General Data Protection Regulation). The owner of this website has a legitimate interest in using cookies in order to optimize its function. Other cookies such as those analysing your browser activity will be dealt with in the following sections.
SERVER-LOGFILES
Server logfiles contain anonymized data which are generated when you access our website. This data can not identify you in person but it is technically essential for the delivery of our digital content. Also, they are statistically important for the constant improvement of our services. Typically, logfiles will include date and time of your online visit, the amount of data transferred, the browser version and operating system used, your provider’s domain, the site which directed you to our website (referrer URL) and your IP address. These server logfiles will not be linked to other data sources. Based on Art. 6 (1) b) (EU General Data Protection Regulation) data may be processed in order to fulfil a contract or prepare its completion. Logfiles are also used to prevent unlawful or illegal access to our website.
4. Social media
FACEBOOK PLUGIN
Our website uses plugins of Facebook’s social network. They are provided by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. Facebook’s logo and the “Like-Button” make Facebook plugins recognizable to you. By using our website these plugins link you to Facebook‘s servers. Your browser is then linked to Facebook and generates the information that you have visited our website with your IP address. Clicking on Facebook’s “Like-Button” will link our website’s content with your Facebook profile. Facebook can then link your visit on our website to your Facebook account. Within this process we do not have any information on the kind of data transferred to Facebook or how it is used. Further details on Facebook’s use of personal data can be found in Facebook’s data protection policy which you will find on de-de.facebook.com/policy.php . You can stop being linked to your Facebook profile when you visit our site simply by logging out of your Facebook account beforehand.
INSTAGRAM PLUGIN
Our website embeds Instagram services. These are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. While you are logged into your Instagram account, clicking the Instagram button on our website will link you to your Instagram profile. Instagram can then refer your visit on our website to your account. We confirm that we do not receive any information about the kind of data generated by Instagram, nor do we have any knowledge of how it is used. Further details on Instagram’s use of personal data can be found here: https://instagram.com/about/legal/privacy/.
5. Further plugins and tools
YOUTOUBE
Our website uses plugins provided by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our pages equipped with YouTube plugins, a link to YouTube’s servers will be created. YouTube will then receive information about which of our website pages you have visited. While you are logged into your YouTube account, YouTube will be able to connect your online activities to your personal profile. Simply log out of your YouTube account if you do not wish your online activities to be linked to your YouTube profile. We use YouTube in order to provide an attractive visual display of our services – a legitimate interest in accordance with Art. 6 (1) f) (EU General Data Protection Regulation). Further details on YouTube’s use of personal data can be found on: https://www.google.de/intl/de/policies/privacy.
GOOGLE MAPS
Our website uses Google Maps plugins provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The use of Google Maps on our website will be sent to and stored on Google’s servers in the USA, together with your IP address. We do not have any knowledge of the exact nature of the data submitted nor about its use by Google. Google denies any combination of information generated from Google Maps with data sourced from other Google services. But Google may hand on the information to a third party. By deactivating Javascript in your browser you prevent Google Maps from running on your device which also means that you cannot display any maps from our website. By using our website you are giving your consent to the procedures of generating and processing data by Google Inc. as described. Further details on Google’s data protection policy and their terms of use can be found on: www.google.com/intl/de_de/help/terms_maps.html.
TRIPADVISOR & HOLIDAYCHECK
Our website integrates plugins provided by TripAdvisor Inc., 141 Needham Street, Newton, MA 02464, USA and by HolidayCheck AG, Bahnweg 8, CH-8598 Bottighofen, Schweiz. These plugins are easily identifiable by their respective logos on our website. By visiting the sites of TripAdvisor or HolidayCheck, their server will create a direct link to your browser. These companies will then receive the information that your IP address was used to visit their sites. We do not have any knowledge of the exact nature of the data submitted nor about its use by Tripadvisor and/or HolidayCheck. Further details on their data protection policies and their terms of use can be found on www.tripadvisor.de/datenschutz and/or www.holidaychek.de/datenschutz
GOOGLE ANALYTICS
Our website uses Google Analytics, a service designed to analyse online activity and provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses text file cookies which are stored on your computer in order to analyse your use of our website. The information generated by these cookies will typically be sent to and stored on one of Google’s servers located in the USA. By activating the IP anonymization on websites your IP address will be shortened within member states of the EU and within states that have joined the European Economic Area (= EU + EFTA). Very rarely, a full IP address may be sent to a Google server in the USA and then shortened there. On behalf of the provider of this website Google will then process this information to analyse your usage of this website, to create reports on website activity and to provide further online services to the provider of this website. Google Analytics will not link your IP address to any other data generated by Google. By using our website you agree with the procedures implied by Google for the processing of your data in the way described above.
6. Online payment
PAYPAL
On our website we offer payment through PayPal as provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. If you choose payment through PayPal, personal data concerning your payment will be sent to PayPal. The transfer of personal data to PayPal is in accordance with EU General Data Protection Regulation Art. 6 (1) a) (consent to data processing for specific purposes) and Art. 6 (1) b) (processing for the performance of a contract). You may revoke your consent to data processing at any time. Your revocation will not touch the lawfulness of data processing activities in the past.
7. Partner bonus schemes
AGODA
The owners of this website take part in the Agoda scheme. Our site integrates Agoda adverts and links which enable us to create revenue from online advertising. Agoda uses cookies to trace the origin of orders placed with their partners. These cookies enable Agoda to identify an order coming from our website. The storage of Agoda cookies is in accordance with EU General Data Protection Regulation Art. 6 (1) f). The provider of this website has a legitimate interest as Agoda cookies are the only means of defining the exact sum of its commission. Further details on data protection through Agoda can be found here: https://www.agoda.com/content/privacy.de.html.
Our data protection policy was updated on 15 January 2021.