1. Data controller
The controller responsible for data processing on this website is CVP TRAVEL, represented by Chaka Dhouib.
Email: cvp.info@gmail.com
2. Principles of data processing
We process personal data only insofar as this is necessary to provide the website, to handle your requests and to manage your client account, or where you have given your consent. Where the General Data Protection Regulation (GDPR) applies, the legal bases are in particular Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract and pre-contractual measures), Art. 6(1)(c) GDPR (legal obligation) and Art. 6(1)(f) GDPR (legitimate interests).
3. Provision of the website
When you visit the website, technically necessary data such as your IP address, the date and time of access, the page visited and browser information are processed in order to provide the website securely and reliably. The website is operated via a technical service provider (Modulify), which processes this data on our behalf. The legal basis is our legitimate interest in the secure operation of the website (Art. 6(1)(f) GDPR).
To protect against misuse, such as mass form submissions, we store a pseudonymised identifier of your IP address for a limited period.
4. Requests via the request form
When you send a request for a long-term rental, holiday accommodation or a rental car, we process the details you provide: your first name and surname, email address, phone number, your nationality in the case of long-term rentals, and your details regarding location, period, accommodation or vehicle, budget and additional wishes.
We use this data to review your request, clarify availability and contact you. The legal bases are pre-contractual measures taken at your request (Art. 6(1)(b) GDPR) and the consent you give before sending your request (Art. 6(1)(a) GDPR).
Your request is stored in our database. We also receive a notification by email, and you receive a confirmation of receipt at the email address you provided.
Where this is necessary to arrange or book accommodation or a rental car, we pass your details on to the relevant landlords or rental companies only after consulting you.
5. Client account
For a client account, we store your first name and surname, your email address and your password. The password is stored exclusively as a secure hash value and cannot be viewed in plain text, even by us.
The account allows you to view your requests and their status. For signing in, we set a technically necessary session cookie. You can request the deletion of your account by email at any time.
6. Contact form
When you write to us via the contact form, we process your name, your email address, optionally your phone number, and your message in order to respond to your enquiry (Art. 6(1)(a) and (b) GDPR). The message is stored in our database and is also delivered to us by email.
7. Reviews
When you submit a review, we process your name or display name, optionally your country, your star rating and your text. Reviews are only published after we have checked them. By submitting a review, you consent to its publication (Art. 6(1)(a) GDPR). You can request the deletion of your review by email at any time.
8. Sending emails
We send emails such as confirmations of receipt, status updates or links for setting a new password via the email service of our technical service provider. Our emails may contain technical means that record whether an email has been opened or a link it contains has been clicked. We use this information only to verify the delivery of our emails.
9. Cookies and local storage
We use only technically necessary cookies and comparable storage technologies, for example for your language selection, for signing in to the client area and for temporarily storing your entries in the request form. You will find an overview in the cookie settings. We do not use analytics or marketing cookies.
10. Visitor statistics
To improve our services, anonymous, aggregated visitor numbers are recorded without cookies, for example the pages visited, country of origin and device type. No user profiles are created in the process.
11. Recipients and service providers
We use technical service providers for hosting, database, file storage and email sending, which process data on our behalf. Where data is processed outside the European Union in this context, this is done on the basis of the safeguards provided for by law. Your data is neither passed on for advertising purposes nor sold.
12. Storage period
We store personal data only for as long as is necessary for the purposes stated or as long as statutory retention obligations apply. We delete requests and messages as soon as they are no longer needed, and the data in your client account when the account is deleted.
13. Data security
Data is transmitted in encrypted form via HTTPS. Passwords are stored only as hash values, and access to the admin area is restricted to authorised persons.
14. Your rights
You have the right to access, rectification, erasure, restriction of processing and data portability, as well as the right to object. You can withdraw any consent you have given at any time with effect for the future. You can also lodge a complaint with a data protection supervisory authority.
To exercise your rights, simply send an email to cvp.info@gmail.com.
15. Changes
We will update this privacy policy if our website or the legal requirements change. The version published here at any given time applies.
