Privacy policy
Updated October 30, 2023
With this privacy policy, we inform you about the scope of the processing of your personal data (hereinafter "data").
1. Responsible for data processing
Responsible for data processing in accordance with the provisions of the General Data Protection Regulation (GDPR) is:
STR Destination Handling GmbH & Co KG
Industrial road 38a
D-63150 Heusenstamm, Germany
Phone: +49 6104 780480 Web: https://www.str-destination.de E-mail:
2. Contact details of our data protection officer
Matthias Rosa, Große Langgasse 1a, D-55116 Mainz, Germany
Phone number +49 6131 28770 85
E-mail:
3. General information on data processing
In the course of our business and website operations, we process data. This also includes disclosure by transmission to third parties and, if applicable, to so-called third countries outside the European Union ("EU") and the European Economic Area ("EEA"). Insofar as we transfer data outside the EU or the EEA, we have marked this accordingly below.
4. Data processing
The individual data concerned, processing purposes, legal bases, recipients and, where applicable, transfers to third countries are listed below:
a) Log file when visiting the website
We log your website visit. In doing so, we process:
- Name(s) of our accessed website(s),
- Date and time of retrieval,
- the amount of data transferred,
- the browser type and version,
- the operating system you are using,
- the referrer URL (the previously visited website),
- Your IP address,
- the requesting provider.
The legal basis for data processing is our overriding legitimate interest in the ongoing provision and security of our website pursuant to Art. 6 (1) f) DSGVO.
The log file is deleted after seven days, unless it is needed to prove or clarify specific legal violations that have become known within the retention period.
b) Hosting
To provide our online presence, we use the services of web hosting providers who process the above-mentioned data and all data to be processed in connection with the operation of this website (log file when visiting the website) on our behalf.
The legal basis for data processing is our overriding legitimate interest in the provision of our website pursuant to Art. 6 (1) f) DSGVO.
c) Contacting
If you contact us, we process the following data from you for the purpose of processing and handling your request: Name, contact details -if provided by you- and your message.
The legal basis for the data processing is our obligation to fulfill the contract and/or to fulfill our pre-contractual obligations pursuant to Art. 6 para. 1 b) DSGVO and/or our overriding legitimate interest in processing your request pursuant to Art. 6 para. 1 f) DSGVO.
d) Contact for applications
If you contact us to send us your application as an employee:in, e.g. by e-mail or via a contact form, the data you provide (e.g. name, e-mail address, desired location, etc.), your message and the application documents submitted will be processed solely for the purpose of processing and handling your application request.
The legal basis for data processing is primarily Section 26 BDSG. Accordingly, the processing of data required in connection with the decision on the establishment of an employment relationship is permissible.
Should the data be necessary for legal prosecution after completion of the application process, data processing may be carried out to safeguard our legitimate interests pursuant to Art. 6 (1) f) DSGVO, namely for the assertion and/or defense of claims.
e) Contract execution
We process your data to handle the contractual relationship between you and us.
The legal basis for the data processing is the fulfillment of our contractual obligations pursuant to Art. 6 (1) b) DSGVO and, in individual cases, the fulfillment of our legal obligations pursuant to Art. 6 (1) c) DSGVO.
We transmit your address data and other data required for the execution of a trip to the company commissioned with the execution of the trip (airlines, hotels, etc.).
If this is ntowendig for the realization of the trip, we additionally collect the information of required vaccination status and/or intolerances.
We transmit your transaction data (name, date of booking, payment method, date of dispatch and/or receipt, amount and payee, bank details or credit card data, if applicable) to the payment service provider commissioned to process the payment.
f) Newsletter
In order to provide you with regular information about our company and offers, we offer German-speaking tour operators in the DACH market an e-mail newsletter. With your newsletter registration, we process the data you entered during registration (name, company, e-mail address and other voluntary information). In order to prevent misuse, we will send you an e-mail after your registration in which we ask you to confirm your registration (double opt-in procedure). In order to be able to prove the registration process in a legally compliant manner, your registration is logged. This concerns the time of registration and confirmation as well as your IP address.
The legal basis for sending the newsletter is your consent pursuant to Art. 6 para. 1 a) DSGVO. The data processing in connection with the sending of the confirmation email for your registration and the associated data logging is carried out pursuant to Art. 6 para.1 f) DSGVO due to our legitimate interest in proving your proper registration.
If you give us consent, we also evaluate in the newsletters whether you have opened the newsletter and the scrolling and clicking behavior in the newsletter. This is done for the purpose of optimally tailoring our newsletter to your interests and improving the content of our newsletter. The legal basis for the analysis of the newsletter is your consent in accordance with Art. 6 (1) a) DSGVO.
For the dispatch of the newsletter, we use a German service provider to whom we transmit the named data.
g) ITB online calendar
In order to give you the opportunity to make an appointment directly with an exhibitor at the International Tourism Exchange (ITB), we provide an online calendar via our website for a limited period of time for the respective duration of the ITB. Here, the appointment you have requested will be forwarded to the contact you have selected, together with the contact details you have provided. The processing of the data takes place accordingly on the basis of Art. 6 para. 1 b) DSGVO.
h) Loomly
We use the social media management platform Loomly from Loomly Inc. based in Los Angeles, California, USA. This is used to schedule social media posts and to obtain information about the use of our social media channels. In this context, a transfer of personal data to the USA cannot be ruled out. For data transfers to the USA, Loomly ensures an adequate level of data protection via the EU standard contractual clauses. A copy of the relevant EU standard contractual clauses will be provided upon request. Please contact
i) Taking part in competitions
If you take part in a competition organized by us, we process the data provided by you: First name, last name, e-mail address, and -if provided by you-: Address, company, telephone number for the purpose of participation or contact in the event of notification of the prize. If you are determined to be the winner, we will request your surname, first name and address for the purpose of communicating the prize, unless this has already been done as part of your registration. In any case, we will inform you about your prize in advance by e-mail.
For the purpose of transmitting the prize, we will send your surname, first name and address to the company contracted to deliver the prize.
The data processing is carried out for the fulfillment of our obligations in the context of the sweepstake implementation according to Art. 6 para. 1 b) DSGVO.
j) Surveys
For your participation in our surveys, e.g. with customers and interested parties, we use the Survey Monkey tool of the US provider Momentive Inc, 1 Curiosity Way, San Mateo, California 94403 USA. We process your e-mail addresses for contact purposes, as well as your age group in the context of the survey and the personal data you voluntarily provide for the evaluation of our surveys.
The legal basis for contacting us, but also for conducting the survey, is your consent according to Art. 6 I a), 7 DSGVO.
As part of your participation in this survey, your usage data will be transmitted to Momentive Inc. in the USA, in particular the name(s) of our website(s) accessed, the date and time of access, the amount of data transmitted, the browser type and version, the operating system you are using, the referrer URL (the previously visited website), your IP address, the requesting provider, as well as all personal data that you yourself transmit to Momentive Inc. However, these processes are the responsibility of Momentive Inc. and cannot be influenced by us.
Momentive Inc. is certified under the EU-US Data Privacy Framework and to that extent falls under the EU adequacy decision for the US.
For more information, please see the Momentive Inc. privacy policy.
k) Use of photographs and videos from trade fairs & events
Within the scope of events and functions by STR Destination GmbH & Co. KG, photographs and videos are taken to ensure the pictorial documentation of the events. These photographs and video recordings (including sound) are published by us on our intranet and website for follow-up reporting. In doing so, no portraits or direct recordings of you as a visitor to our event or events will be made unless you explicitly allow it. The data processing is based on our legitimate interests according to Art. 6 (1) f) DSGVO, in order to document and promote the event in question.
In all other cases, in particular in the case of portrait or direct recording, processing is carried out solely on the basis of your prior consent pursuant to Art. 6 (1) a) DSGVO or Section 22 of the German Art Copyright Act ("KUG") for publication. The photographs and video recordings created will be published by us on our intranet and website for follow-up reporting. If you wish to consent to such data processing, you can simply place one of the stickers provided on your clothing for the photographer to see.
l) Cookies
We use so-called cookies on our website. Cookies are small text files that are stored on your end device (PC, smartphone, tablet, etc.) and saved by your browser.
Information about the specific cookies we use, their providers and purposes can be found in our cookie settings or the consent banner we use.
There you give your consent to the respective services, can revoke it or adjust your settings subsequently.
Our Consent Banner
We use a Consent Banner on our website. This allows us to accurately and transparently disclose all cookies on our website for you.
The legal basis of the data processing is the fulfillment of our legal obligations pursuant to Art 6(1)(c) DSGVO.
m) Analysis / Marketing
aa) Google Services
We use various services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google") on our website. It is possible that this may also result in data transfers to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 in the USA.
Google is certified under the EU-US Data Privacy Framework and to this extent falls under the EU adequacy decision for the US.
Google Analytics
We use the Google Analytics tracking tool from Google on our website. We use Google Analytics to evaluate your use of the website, to compile reports on the activities within this
website and to provide other services related to the use of the website in order to improve the user experience.
When Google Analytics is used, the interactions of website visitors are primarily recorded and systematically evaluated with the help of cookies.
We use Google Analytics with the extension "anonymizeIp()". This shortens IP addresses within the member states of the EU or EEA. If a transmission to Google's servers in the USA takes place, the full IP address is only transmitted in exceptional cases and shortened there. A direct reference to a person is therefore generally excluded. In particular, an assignment to the called computer or terminal of the website visitor is no longer possible.
Through the use of Google Analytics, the following data is processed:
- 3 bytes of the IP address of the called system of the website visitor (anonymized IP address),
- the accessed website,
- the website from which the user accessed the page on our website (referrer),
- the subpages that are accessed from the website,
- the length of time spent on the website,
- the frequency with which the website is accessed.
Google states that it will not associate your IP address with any other data held by Google.
Google Ads
We use Google Ads, an online advertising program from Google, on our website. Here, so-called conversion tracking is operated. If you click on an ad placed by Google, a cookie is set. These cookies lose their validity after 30 days and are not used to personally identify the user. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page.
The data collected using the conversion cookie is used to generate statistics for Ads customers who have opted in to conversion tracking.
Legal basis and revocation
The legal basis for data processing within the scope of the aforementioned Google services is your prior consent pursuant to Art. 6 (1) a) DSGVO.
You can revoke your consent at any time with effect for the future by adjusting your preferences in our cookie settings or by adjusting the settings options at http://www.google.de/ads/preferences.
Please also note the information on the use of data by Google in the Google Partner Network at: http://www.google.com/intl/de/policies/privacy/partners/ .
n) External content
We use dynamic content ("Content") from third parties to optimize the presentation and the offer of our website. When visiting the website, a request is automatically made to the server
of the respective content provider by means of an interface, during which certain log data (e.g. the user's IP address) is transmitted. The dynamic content is then transmitted to our website and displayed there.
We use external content in connection with the following functionalities:
aa) Integration of YouTube videos
We have integrated videos of the portal "YouTube" of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") on our website. Google does not store any cookies in your browser.
The legal basis for the processing is your prior consent pursuant to Art. 6 (1) a) DSGVO.
It cannot be ruled out that a data transmission to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA takes place.
Google is certified under the EU-US Data Privacy Framework and to this extent falls under the EU adequacy decision for the US.
bb) reCaptcha
We use the captcha service "Google reCaptcha" from Google on our website to protect our website from interactions with bots. When you visit the website, data including your IP address, the referrer URL, information about the operating system, information about cookies, mouse movements and keyboard strokes, as well as the dwell time and the settings of your terminal device are transmitted to Google. The legal basis for the processing is our legitimate interest according to Art. 6 para. 1 f) DSGVO in securing our website.
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google") is responsible for data processing. It cannot be ruled out that a data transfer to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA takes place.
Google is certified under the EU-US Data Privacy Framework and to this extent falls under the EU adequacy decision for the US.
5. Social media presences
For our corporate presentation, interaction and communication with interested parties and customers, we operate the following social media channels:
You can find our privacy policy for Facebook here: https://www.str-destination.de/datenschutz-facebook-fanpage
You can find our privacy policy for YouTube here: https://www.str-destination.de/youtube-datenschutzerklaerung
You can find our privacy policy for Instagram here: https://www.str-destination.de/instagram-datenschutzerklaerung
The legal basis for data processing is our overriding legitimate interests in the optimal marketing of our online offer, for customer retention and customer acquisition in accordance with Art. 6 (1) f) DSGVO.
6. Duration of data storage
We store personal data only as long as it is necessary for the purposes for which it is processed or if you have revoked your consent. Insofar as statutory retention obligations must be observed, the storage period for certain data can be up to 10 years, regardless of the processing purposes.
7. Your data subject rights
a) Information
Upon request, you will receive information free of charge at any time about all personal data that we have stored about you.
b) Correction, deletion, restriction of processing (blocking), objection
If you no longer agree to the storage of your personal data or if this data has become incorrect, we will arrange for the deletion or blocking of your data or make the necessary corrections (insofar as this is possible under the applicable law) in response to a corresponding instruction. The same applies if we are only to process data in a restrictive manner in the future. You have the right to object in particular in cases where your data is required due to the performance of a task that is in the public interest or in our legitimate interest, as well as profiling based on this. You also have such a right of objection in the event of data processing for the purpose of direct advertising.
c) Right of revocation for consents with effect for the future
You can revoke consents granted at any time with effect for the future. Your revocation does not affect the lawfulness of the processing until the time of revocation.
d) Data portability
If data processing takes place on the basis of a contract, pre-contractual negotiations, consent or with the help of automated processes, you have the right to data portability. Upon request, we will provide you with your data in a common, structured and machine-readable format so that you can transfer the data to another responsible party upon request.
e) Restriction of processing
Data for which we are not able to identify the data subject, e.g. if it has been anonymized for analysis purposes, is not covered by the above rights. Information, deletion, blocking, correction or transfer to another company may be possible in relation to this data if you provide us with additional information that allows us to identify you.
f) Exercise of your data subject rights and right of appeal
If you have any questions regarding the processing of your personal data, if you wish to obtain information, correct, block, object to or delete data, or if you wish to have your data transferred to another company, please contact
You also have the possibility to complain to a supervisory authority about your data protection rights.