Privacy Policy

 The protection of your personal data is important to us. With this privacy policy, we would like to explain in more detail what personal data we collect and for what purposes this data is processed. If you have questions or suggestions regarding data protection or would like to exercise your rights, please feel free to contact us at the following e-mail address: geral@falesiajovial.com.

​

​

I.    Subject of Data Protection

The subject of data protection is personal data, i.e. all information relating to an identified or identifiable natural person. Personal data is also referred to simply as data hereafter.

​

​

II.   Automated Data Collection

When you access our website, your end device automatically transmits data for technical reasons. The following data is stored separately from other data that you may transmit to us:

​

1. URL of the accessed page;

2. Latency of the network connection;

3. Date and time.

 

III. Customization Of Site Content

 

We also process your data to display personalized content on our website. The legal basis for this is our legitimate interest in showing you tours and activities that are relevant to you.

IV. Translations

 

In certain cases, it is necessary to translate incoming requests into a specific language. This may require processing personal data necessary to protect our legitimate interest in providing international customer service, art. 6 par. 1 acc. f GDPR. For this purpose, we use the service of US-based Unbabel Inc. ("Unbabel"). There is no adequacy decision of the EU Commission for the USA. We therefore conclude the standard contractual clauses approved by the EU Commission with Unbabel in accordance with Art. 46 para. 2 lit. c RGPD.

​

​

V.    Purposes For Storing Data
 

• For load balancing, i.e. to distribute access to our website across multiple devices and offer you the fastest possible loading times;

• To ensure the security of our IT systems, e.g., to defend against specific attacks on our systems and to recognize attack patterns;

• To ensure the smooth operation of our IT systems, e.g. if errors occur that we can only correct by storing the IP address;

• To enable criminal prosecution, the prevention of danger or legal prosecution in case of concrete evidence of criminal offenses;

• Your IP address is only stored for a period of 30 days;

• In this case, the processing is carried out to ensure the security of the processing in accordance with Art. 32 GDPR as well as based on our legitimate interest to protect us against misuse of our service (Art. 6 par. 1 lit. f GDPR);

• Your registration data is required to set up and manage a user account for you. In this case, you conclude a (free) user contract with us, on the basis of which we collect this data (Art. 6 para. 1 lit. b GDPR);

• To conclude the contract, you must provide us with this data. However, you are neither contractually nor legally obligated to conclude the contract and therefore provide the data.

 

VI. Wix.com Account

​

You have the option to create a Wix.com customer account, for example to manage purchases, save favorites or view previous purchases. To do this, you need to provide the following mandatory information:

 

• Last name First name;

• Email address;

• Passwords;

• Alternatively, you can log in with your Facebook, Google, or Apple account. In this case, we receive the following personal data from Facebook or Google or Apple to create a user account for you (Name; email address; photo [facebook only]; an authentication token).

​

Your registration data is required to set up and manage a user account for you. In this case, you conclude a (free) user contract with us, on the basis of which we collect this data (Art. 6, para. 1, lit. b GDPR).

​

To conclude the contract, you must provide us with this data. However, you are neither contractually nor legally obligated to conclude the contract and therefore provide the data.

 

VII. Custumer Support 

​

If you send us questions by e-mail, by telephone, via our contact form, by WhatsApp, via our social media channels or by any other means, we will process the information you provide in connection with this in order to process your inquiry. The further storage of data transmitted in the context of your inquiry is based on our legitimate interest in the proper documentation of our business operations and the protection of our legal positions and, if applicable, for the fulfillment of legal obligations.

​

​

VIII. Cookies

We use so-called 'cookies' to provide certain functions of our website and to optimize the use of our website. 'Cookies' are small files that are stored on your device with the help of your internet browser.

Specifically, we use (unless other cookies are specified elsewhere in this privacy policy or our cookie consent) the following cookies:

 

• Session cookies: These cookies are necessary to store certain technical data during your visit to our website, for example to determine whether you have logged in;

• Persistent cookies: These are necessary to store data beyond a browser session, if you wish.

 

IX. Improving Custumer Service 

​

In order to continuously improve our customer service, we analyze the inquiries sent to us based on certain parameters and keywords. Although, in principle, no analysis is performed on the basis of personal data, it cannot be ruled out that, in individual cases, personal data may also be processed in this context. The processing necessary in this context serves our legitimate interest, as well as that of our customers, in the continuous improvement of our customer service. 

​

​

X.  E-mail System

To send e-mails, we use the wix.com marketing service. By collecting your information, you acknowledge that we may use it to publicize the event.

You can object to this at any time - even during registration - by unchecking the corresponding checkbox or clicking the unsubscribe link in the respective emails.

​

When you purchase a ticket on our website, we collect the data necessary to hold the event, This generally includes the following information: First and last name, billing address, email address, phone number, number of attendees, date and time. 

 

XI. Fraud Prevention

 

To protect ourselves and the providers from fraudulent booking activities, we evaluate the information provided by our customers during the purchase process, including data technically transmitted by their device, to the extent necessary to protect our legitimate interest and that of the providers in reliable booking activity.

​

​

XII. Marketing & Remarketing Services

 

Evaluation of advertising on web and social media platforms.

 

With respect to our social media advertising, we use a service provided by the Wix.com platform to analyze the success of our advertisements, as described above, we use your Personal Information to provide you with targeted advertisements or marketing communications that we believe may be of interest to you.

​

If you have consented, we use Google remarketing services. Google uses cookies to record your usage behavior on our website in order to display interest-based advertising for our products on other pages in the Google advertising network across all devices. This includes Google search and other sites operated by Google and its subsidiaries, as well as sites operated by Google advertising partners. The information is transmitted in agreement with Google and Google's partners. Further data processing will only occur if you consent to Google linking your browsing history to your Google Account and using information from your Google Account to tailor the ads you see on the web. In this case, Google will use your data together with your Google Analytics data to create and set up targeting lists for remarketing. To do this, you can withdraw your consent via our preferences change. This does not affect the legality of the processing performed until your revocation. Furthermore, the remarketing cookie is deleted automatically as soon as it is no longer needed for the purposes for which we collect or use it in accordance with the above paragraphs.

​

​

XIII.  Facebook Pixel

 

If you have consented, the Facebook pixel is used on our website. This is a Javascript code. The Facebook pixel records when you perform certain actions on our website or visit certain areas on our website. Facebook pixel also collects usage data (such as URL, referring URL, IP address, device and browser characteristics and date/time stamp). The Facebook pixel generates a checksum (hash value) from this information and transmits this hash value to Facebook. If available, the Facebook cookie is also addressed and your Facebook ID is transmitted. If you have a Facebook profile and log into it, you can receive targeted personalized advertising on Facebook based on the data transmitted by the pixel. Data of users who do not have a Facebook profile is discarded by Facebook without being used.

​

We use the Facebook pixel based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time via our change preferences. This does not affect the legality of the processing performed until your revocation.

 

XIV. Facebook Server to Server

 

This technology is not based on cookies or pixels. When you use our site and are redirected by Facebook, we send your Facebook Click-ID and information about potential purchases and other actions on our site to Facebook. Facebook will use this information to understand which ad you clicked on, to measure the success of particular ads, and to provide us with this information in aggregate form. Facebook will not use the data to serve ads targeted to you or other users. We transmit this data based on our legitimate interest in controlling our marketing activities.

​

​

XV. Social Media

​

We operate pages or profiles on various social media platforms. Within this context, personal data is processed as described below.

​

If you interact with us via our social media sites or our posts, we will collect and process the information you provide in connection therewith, including your username and any profile picture if applicable, for example if you tag a post with "Like", share or "retweet", comment or provide other content. Data processing in this regard is carried out on a regular basis based on our legitimate interest in providing corresponding functions on our social media pages.

​

In addition, the respective operators collect and process your personal data in their own data protection responsibility when you visit our social media sites and/or interact with them or our posts. This applies especially if you are registered or logged into the relevant network. Even if you are not logged into a network, operators collect certain personal data when you access the page, such as unique identifiers linked to your browser or device. Note that this data may be aggregated across different platforms and services if they are operated by the same operator. For example, Facebook and Instagram are operated by Facebook Ireland Limited. More information can be found in the data protection notices of the respective operators, to which we refer below.

​

​

XVI. Social Media Management

 

To measure the success of our social media activities we also record when we are tagged in social media networks. In this context, we also process information about the people who tag us. The processing that takes place within this context is based on our legitimate interest in optimizing our social media activities (Art. 6 para. 1 lit. f GDPR).

 

XVII. Your Rights as a Data  Subject

​

You have the rights described below in relation to the processing of your personal data. To exercise your rights, you can make a request here, by post or by email: support@falesiajovial.com.

​

17.1 Automated Individual Decisions or Profile Measurements

 

We do not use any automated processing to obtain a decision or a profile.

​

​

17.2 Analysis Of Our Social Networking Activities

 

We also evaluate the success of our social media postings. We analyze how often individual posts are clicked on. The data processing is based on our legitimate interest in analyzing our reach and the success of our social media activities. 

​

​

17.3 Right To Access To Information

 

You have the right to receive information from us at any time, upon request, about the personal data we process concerning you, to the extent and under the conditions of art. 15 GDPR and § 34 BDSG.

​

​

17.4 User Account Deletion Policy and Data Retention

 

If you delete your user account, your profile will be deleted completely and permanently. However, we will retain backup copies of your data to the extent and for as long as this data is necessary for legal reasons or for criminal proceedings or to secure, assert or enforce legal claims.

​

​

17.5 Data Retention for Legal Compliance: Restricted Processing and Inaccessibility

 

If data must be retained for legal reasons, processing will be restricted. The data is no longer available for further use.

​

​

17.6 Extended Data Storage and Legitimate Interests under Art. 6(1) GDPR

 

Storage beyond the contractual relationship is based on our aforementioned legitimate interests in accordance with Art. 6 par. 1 acc. f RGPD.

​

​

17.7 Right Of Opposition

 

You have the right to object at any time, for reasons relating to your particular situation, to the processing of personal data concerning you, which is carried out, inter alia, on the basis of Art. 6 par. 1 lit. e or f GDPR, in accordance with Art. 21 GDPR. We will then stop the processing of your personal data, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

 

​

17.8 Right To Correct Incorrect Data

​

You have the right to request that we correct personal data relating to you without delay if it is inaccurate.

​

​

17.9 Right To Appeal

​

You have the right to contact a supervisory authority of your choice in case of complaints.

​

​

XVIII. Data Processing When Exercising Your Rights

 

Finally, we would like to point out that we process personal data provided by you when exercising your rights under Art. 15 to 22 of the GDPR for the purposes of implementing these rights and to be able to provide evidence of this. This processing is based on the legal basis of art. 6 par. 1 acc. c GDPR in conjunction with art. 15 to 22 GDPR and § 34 par. 2 BDSG.