top of page

DATA PROTECTION

mydream-Tours

 

1. Responsible party
The responsible party for the processing of personal data is:

mydream-Tours
Owner: Matthias Bolm
Pelargonienweg 65
81377 Munich, Germany
Email: info@mydream-tours.com

2. Collection and processing of personal data
We collect personal data that is necessary for advising on and arranging travel services. This includes in particular:

  • Surname, first name

  • Contact details (email, telephone number, postal address)

  • Travel dates and preferences

  • Payment information for the agency fee


3. Purpose of processing
Personal data is processed for the following purposes:

  • Consulting and arranging travel services

  • Processing the agency fee

  • Communication in connection with inquiries and bookings

  • Fullfilling legal obligations


4. Legal basis

Processing is carried out on the basis of the following legal grounds:

  • Art. 6 (1) (b) GDPR – for the performance of a contract for agency services

  • Art. 6 (1) (f) GDPR – to safeguard the legitimate interests of the agent (e.g., customer service, improvement of services)

  • Art. 6 (1) (a) GDPR – insofar as the customer has expressly consented to the processing

 

5. Disclosure to third parties
Personal data will only be disclosed to the extent necessary for the provision of services:

  • Providers of travel services (airlines, hotels, car rental companies, etc.)

  • Payment service providers for the processing of agency fees

  • Statutory authorities (e.g., tax authorities)

  • Data will only be disclosed to third parties for advertising purposes with the express consent of the customer.


6. Storage period
Personal data will only be stored for as long as is necessary to fulfill the agency service or legal retention obligations. After that, the data will be deleted or anonymized.

7. Rights of data subjects
Customers have the right at any time to:

  • Obtain information about the personal data stored (Art. 15 GDPR)

  • Request the correction of inaccurate data (Art. 16 GDPR)

  • Request the deletion or restriction of processing (Art. 17, 18 GDPR)

  • Object to processing (Art. 21 GDPR)

  • Receive their data in a structured, commonly used format or transfer it to another provider (Art. 20 GDPR)

  • Withdraw their consent at any time (Art. 7 (3) GDPR)

To exercise these rights, customers can contact us using the contact details above.

 

8. Right to lodge a complaint
Customers may lodge a complaint with a competent data protection supervisory authority if they believe that their personal data is being processed unlawfully.

9. Data security
Appropriate technical and organizational measures are taken to protect personal data from unauthorized access, loss, or misuse.

10. Changes to the privacy policy
We reserve the right to amend this privacy policy as necessary, in particular in the event of changes to legal requirements or the services offered. The current version is published on this website.

​

bottom of page