Privacy Policy

We believe that data privacy should be transparent, easy to understand and, above all, fair to all parties. Therefore, in this Privacy Policy, we would like to tell you what personal information we collect from you and how we use it, whether we share it with third parties and if so, with whom, how long we store it, and what your rights are if at any time you do not agree with our responsible handling of your information. If you have any questions after reading this detailed Privacy Policy, please do not hesitate to contact us using the details below.

1. Name and contact details of the data controller

The data controller is

Mivelas GmbH & Co. KG

Theodor-Krumm-Straße 18

88213 Ravensburg

You can reach us by post, by e-mail at info@mivelas-charters.com or by phone at 0751/36656-0

2. Hosting

2.1. Our website is hosted on the servers of Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel (hereinafter referred to as “WIX”). WIX provides us with services for creating and hosting our website. Visiting our website leads to the analysis of various data by WIX, including user behavior, sources of visitors, geographic origin of the website visitors, and visitor numbers. For this purpose, WIX sets necessary cookies in your browser, which are required for displaying the website and ensuring security.

The transfer of personal data to WIX in Israel takes into account the EU data protection standards, as Israel has been recognized by the European Union as a country with an adequate level of data protection. Further information can be found in WIX's privacy policy: https://de.wix.com/about/privacy.

The processing of your data by WIX is based on our legitimate interest in providing a reliable website (Article 6(1)(f) GDPR). If consent has been obtained, the processing is carried out exclusively in accordance with Article 6(1)(a) GDPR. Your consent is voluntary and can be revoked at any time with future effect.

To ensure compliance with data protection, we have concluded a data processing agreement with WIX. This guarantees that WIX processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

3. Collection of personal data for informational purposes

3.1. Each time you access our website, we collect the following information about your computer: The IP address of your computer, the request of your browser and the time of this request. In addition, the status and the amount of data transferred are recorded as part of this request. We also collect product and version information about the browser and operating system used on your computer. Moreover, we record the website from which our website was accessed. The IP address of your computer is only stored for the duration of your use of the website and is then immediately deleted or anonymised by truncation. We use this data to operate our website, in particular, to identify and eliminate website errors, to measure website usage and to make adjustments or improvements. The legal basis for this processing is Art. 6 (1) (f) GDPR.

4. Cookies & Local Storage

4.1. We may also collect information about your use of our website through the use of so-called browser cookies. These are small text files that are stored on your data carrier. They save certain settings and data for exchange with our system via your browser. A cookie usually contains the name of the domain from which the cookie data has been sent as well as information about the age of the cookie and an alphanumeric identifier. Cookies enable our systems to recognise the user's device and make any preferences available immediately. As soon as a user accesses the platform, a cookie is transferred to the hard disk of the user's computer. Cookies help us to improve our website and provide you with a more personalised service. They allow us to recognise your computer when you return to our website and enable us to:

· Store information about your preferred activities on the website to help us tailor our site to your individual interests. This includes, for example, advertising that addresses your personal interests.

· Speed up the processing of your requests.

4.2. The cookies we use store only the data described above about your use of the website. This is not done by assigning it to you personally, but by assigning an identification number to the cookie.("cookie ID"). The cookie ID is not merged with your name, your IP address or similar data that would enable the cookie to be assigned to you.

4.3. There are two types of cookies: session cookies, which are deleted as soon as you close your browser, and persistent cookies, which are stored beyond the individual session. Cookies are also distinguished on the basis of their function:

Technical cookies: These are mandatory to navigate the website, use basic functions and ensure the security of the website; they do not collect information about you for marketing purposes nor do they store information about the web pages you have visited;
Performance cookies: These collect information about how you use our website, which pages you visit and, for example, whether errors occur during website use; they do not collect information that could identify you – all information collected is anonymous and is only used to improve our website and to identify the interests of our users;
Advertising cookies, targeting cookies: These are used to offer the website user needs-based advertising on the website or third-party offers and to measure the effectiveness of these offers; advertising and targeting cookies are stored for a maximum of 13 months;
Sharing cookies: These are used to improve the interactivity of our website with other services (e.g. social networks); sharing cookies are stored for a maximum of 13 months.

4.4. Any use of cookies that is not absolutely necessary from a technical point of view constitutes data processing that is only permitted with your express and active consent pursuant to Section 25 (1) of the German Telecommunications-Telemedia Data Protection Act (TTDSG) and will only be carried out in compliance with this statutory provision. This applies in particular to the use of advertising, targeting or sharing cookies. Furthermore, we will only disclose your personal data processed by cookies to third parties if you have given your express consent to do so in accordance with Section 25 (1) TTDSG.

4.5. You can use your browser settings to determine whether cookies can be set and retrieved. For example, you can completely disable storage of cookies in your browser, limit it to certain websites, or set your browser to automatically notify you when a cookie is about to be set and ask for your acknowledgement. You can block or delete individual cookies. However, this may adversely affect some features of our website and they may not be fully functional due to technical reasons.

4.6. If you want our website to use cookies only with your consent, you can also make the settings in our Cookie Consent Tool. To do this, simply select the link "Cookie settings".

5. Data security

5.1. All the information that you submit to us is stored on servers within the European Union. Unfortunately, transmission of information via the Internet is not completely secure and we therefore cannot guarantee the security of data transmitted to our website via the Internet. However, we secure our website and other systems by using technical and organisational measures to safeguard your data against loss, destruction, access, modification or distribution by unauthorised persons. In particular, we encrypt your personal data during transmission. We use the SSL (Secure Socket Layer) or TLS (Transport Layer Security) coding system.

6. No disclosure of your personal data

6.1. We do not disclose your personal data to third parties unless you have consented to the disclosure of data or we are entitled or obliged to disclose data due to statutory provisions and/or official or court orders. In particular, this may include providing information for the purposes of criminal prosecution, for averting danger or for the enforcement of intellectual property rights.

7. Data privacy and third-party websites

7.1. The website may contain hyperlinks to and from third-party websites. If you follow a hyperlink to one of these websites, please note that we cannot accept any responsibility or liability for third-party content or privacy policies. Please check the applicable Privacy Policy before submitting any personal data to these websites.

8. Use of our website functions

8.1. In addition to the use of our website for purely informational purposes, we offer various services that you can use if you are interested. This usually requires you to provide further personal data, which we use to provide the respective service. If additional voluntary information can be provided, this will be marked accordingly.

8.2. When you contact us by e-mail or via the contact form, we will store your e-mail address and, if you provide it, your name and telephone number, in order to answer your questions. (The legal basis is Art. 6 para.1 sentence 1 (b) GDPR)

9. Third-party tools

9.1. Use of Google Tag Manager

9.1.1. This website uses Google Tag Manager, a cookie-less domain that does not collect any personal data.

9.1.2. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If you have opted out at the domain or cookie level, this will apply to all tracking tags implemented with Google Tag Manager.

9.1.3. Google Tag Manager is used to facilitate the administration and development of our website. Google Tag Manager provides efficient control of content across multiple pages, reduces potential errors, eliminates outdated processes and thus ensures a safe user experience. The legal basis for the use is Art. 6 para. 1 (a) GDPR.

9.2. Use of Google Analytics

9.2.1. This website uses Google Analytics, a web tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). We use this tool to enable us to analyse user interactions with our websites and apps, and to use the statistics and reports we obtain to improve our service and make them more relevant to you as a user.

9.2.2. We collect the interactions between you as a user of the website and our website primarily through cookies, device/browser data, IP addresses and website or app activities. Google Analytics also collects your IP addresses in order to ensure the security of the service and to provide us, as the website operator, with information about the country, region or location from which the respective user originates (so-called "IP location determination"). However, for your protection, we use the anonymisation function ("IP masking"), i.e. Google truncates the IP addresses by the last octet within the EU/EEA.

9.2.3. Google acts as a data processor and we have concluded a corresponding contract with Google. The information generated by the cookie and the (usually truncated) IP addresses about your use of this website are usually transmitted to a Google server in the USA and processed there. Google states that in these cases it is subject to a standard that is equivalent to the former EU-US Privacy Shield and has promised to comply with applicable data privacy laws when transferring data internationally. We have also agreed on so-called standard contractual clauses with Google to ensure that an adequate level of data privacy is maintained in the third country.

9.2.4. The legal basis for the collection and further processing of the information (which takes place for a maximum of 14 months) is your consent (Art. 6 para. 1 sentence 1 (a) GDPR). Moreover, any necessary cookies will only be set with your consent in accordance with Section 25 para. 1 TTDSG. You can revoke your consent at any time without affecting the permissibility of the processing until the time of revocation. In apps, you can reset the advertising ID under the Android or iOS settings. The easiest way to revoke your consent is to use our Consent Manager or to install Google's browser add-on, which can be accessed via the following link: tools.google.com/dlpage/gaoptout?hl=en/.

9.2.5. For more information on the scope of services provided by Google Analytics, please visit https://marketingplatform.google.com/about/analytics/terms/gb/. Google provides information on data processing when using Google Analytics at the following link: support.google.com/analytics/answer/6004245?hl=en/. General information on data processing, which according to Google also applies to Google Analytics, can be found in Google's privacy policy at https://policies.google.com/privacy?hl=en&gl=en.

9.3. Integration of YouTube videos

9.3.1. We have integrated YouTube videos into our online offer. These videos are stored on YouTube.com and can be played directly from our website. [All of these are integrated in "extended data privacy mode", i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. The data mentioned in paragraph 2 will be transmitted only when you play the videos. We have no influence on this data transmission] The legal basis for the display of the videos is Art. 6 para. 1 sentence 1 (a) GDPR, i.e. integration only takes place after you have given your consent. We set the required cookie for playing the videos in accordance with Section 25 para. 2 no. 2 TTDSG, as this is mandatory for technical reasons.

9.3.2. When you visit the website, YouTube receives the information that you have accessed the corresponding sub-page of our website. In addition, the above-mentioned basic data such as IP address and time stamp are transmitted. This takes place regardless of whether YouTube provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not wish the data to be assigned to your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses it for the purposes of advertising, market research and/or for designing its website to meet user needs. Such an evaluation is carried out in particular (even for users who are not logged in) for the provision of needs-based advertising and to inform other social network users about your activities on our website. You have the right to object to the creation of these user profiles. You must contact YouTube to exercise this right.

9.3.3. The information collected is stored on Google servers, also located in the USA. The provider states that in these cases it is subject to a standard that is equivalent to the former EU-US Privacy Shield and has promised to comply with applicable data privacy laws when transferring data internationally. We have also agreed on so-called standard data privacy clauses with Google to ensure that an adequate level of data privacy is maintained in the third country.

9.3.4. For more information on the purpose and extent of data collection and processing by YouTube, please refer to the privacy policy. This will also provide further information on your rights and setting options to protect your privacy: https://policies.google.com/privacy?hl=en&gl=gb.

9.4. Use of Vimeo

9.4.1. On our website we integrate the service "Vimeo", which is provided by Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

9.4.2. We use plugins from the provider Vimeo on some of our pages. When you access pages of our online offer that are provided with such a plugin, a connection to the Vimeo servers is established and the plugin is displayed. This tells the Vimeo server which of our pages you have visited. If you are logged in as a Vimeo member, Vimeo assigns this information to your personal user account. When you use the plugin, e.g. when you click on the start button of a video, this information is also assigned to your user account. You can prevent this assignment by logging out of your Vimeo user account before using our website and deleting the corresponding cookies from Vimeo.

9.4.3. The privacy policy of Vimeo Inc. can be viewed here: vimeo.com/privacy

9.4.4. The data processing is based on our legitimate interest, i.e. to optimise our offer and our website according to Art. 6 para. 1 (f) GDPR. Likewise, technically required data is transmitted to Vimeo on the same legal basis. The technically required cookie for playing the videos is set on the basis of Section 25 para. 2 no. 2 TTDSG.

9.4.5. In order to ensure an appropriate level of data privacy when transferring data to the USA, we have concluded the EU standard contractual clauses with the provider of Vimeo in the so-called "controller to controller" variant. As further protective measures, we always integrate videos from Vimeo in the "Do Not Track" variant, so that minimal personal data is transmitted to Vimeo. In addition, the provider of Vimeo has given us an undertaking that it will continue to comply with the self-imposed obligations under the former so-called Privacy Shield agreement.

10. Recipients or categories of recipients

10.1. If we disclose your personal data to third parties, you will be explicitly informed of this in the description of the respective data processing (e.g. when using our contact form). Of course, for technical and organisational processing we also use external service providers with whom we have concluded corresponding data processing agreements within the meaning of Art. 28 GDPR. These are, e.g., service providers for web hosting, sending emails, maintenance and care of our IT systems, etc.

11. Storage period

11.1. Your data will be stored for as long as it is absolutely necessary to achieve the respective purpose. However the period will not exceed the period for which we are required to store it under any statutory provisions (e.g. under commercial law we are obliged to store business letters, which may also include e-mails, for 10 years).

11.2. As soon as the purpose of storage ceases to apply or a storage period prescribed by the aforementioned regulations expires, the personal data is routinely blocked or deleted.

12. Your rights

12.1. You have extensive rights with regard to the processing of your personal data. First of all, you have a comprehensive right to information and, if necessary, you can demand that your personal data be corrected and/or deleted and/or blocked. You can also request restricted processing and have a right to object and a right to data portability. If you would like to exercise any of your rights and/or receive more information about them, please contact us at info@mivelas-charters.com

12.2. In addition, you have the right to lodge a complaint with a supervisory authority. Should you have any questions, comments or requests regarding how we collect, process and use your personal data, please do not hesitate to contact us using the contact details provided.

12.3. Right to object

Right to object on a case-by-case basis:

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data which is carried out on the basis of Article 6 para. 1 (e) or (f) of the GDPR; this also applies to profiling based on these provisions.

We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims.

Right to object to processing of data for direct marketing purposes:

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
In the context of the use of information society services, you can – notwithstanding Directive 2002/58/EC – exercise your right to object by means of automated procedures using technical specifications.

13. No obligation to provide personal data

13.1. We do not require you to provide us with personal data before entering into a contract with us. As a customer, you are basically under no legal or contractual obligation to provide us with your personal data; however, we may only be able to provide certain services to a limited extent or not at all if you do not provide the necessary data. Should this exceptionally be the case for any of the products and services offered by us above, we will notify you separately.