This is a translation. The German version is legally binding.

Privacy Policy

Table of Contents

We are pleased that you are visiting Campcruisers, the booking platform for recreational vehicles, boats, and pitches. The protection of your privacy and your personal data, known as personal data, when using our website is an important concern for us.

Personal data, according to Art. 4 No. 1 of the General Data Protection Regulation (GDPR), includes all information relating to an identified or identifiable natural person. This includes, for example, information such as your name, your address, your telephone number, your email address, but also your IP address.

Data for which no reference to your person can be established, for example through anonymization, are not considered personal data. Processing (e.g., collection, storage, reading, use, or transfer) according to Art. 4 No. 2 GDPR always requires a legal basis or your consent. Processed personal data must be deleted as soon as the purpose of the processing has been achieved and no legally prescribed retention obligations exist.

Below, we provide detailed information about how we handle your personal data when you visit our website. We explain the type, scope, and purpose of the respective data processing, the corresponding legal basis, and the respective storage duration.

This privacy policy applies to the website www.campcruisers.com, the company blog blog.campcruisers.com, and the Campcruisers Mobile App (iOS and Android). It does not apply to other websites to which we merely refer via a hyperlink. We cannot assume responsibility for the confidential handling of your personal data on third-party websites, as we have no influence on these companies' compliance with data protection regulations. Please inform yourself directly on the respective websites about how your personal data is handled.

1. Controller

The controller for the processing of personal data within the meaning of the GDPR is:

Campcruisers GmbH
Berliner Str. 21 B
D-14612 Falkensee
Phone: +49 (3322) 50703301
Fax: +49 (3322) 50703302
Email: datenschutz@campcruisers.com

2. Hosting

We host the content of our website and our backend services with the following provider:

netcup (Hosting)
The provider is netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany. Our servers are located in data centers in Germany. Personal data is processed exclusively on servers within the European Union.

When you visit our website, netcup collects various server log files, including your IP address. For details, please refer to netcup’s privacy policy: https://www.netcup.de/kontakt/datenschutz.php.

The use of netcup is based on Art. 6(1)(f) GDPR. We have a legitimate interest in presenting our website as reliably, securely, and efficiently as possible. If a corresponding consent was requested, processing takes place exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's end device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Data Processing Agreement

We have entered into a Data Processing Agreement (DPA) with netcup. This contract required by data protection law ensures that netcup processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR. netcup or the data centers used hold ISO/IEC 27001 certification.

3. Provision of the Website and Server Log Files

a) Type and Scope of Data Processing

When you use our website purely for informational purposes without transmitting any other data to us (e.g., through registration), we collect technically necessary data via server log files that your browser automatically transmits to our server. These include:

b) Purpose and Legal Basis

This processing is technically necessary to display our website and to ensure its security and stability. The legal basis for this processing is Art. 6 Abs. 1 lit. f GDPR. Our legitimate interest lies in providing a functional and secure website.

c) Storage Duration

The data is deleted as soon as it is no longer necessary for achieving the purpose of its collection. The collection of data for the provision of the website and its storage in log files is essential for operation, which is why there is no possibility to object.

4. Error Analysis and Monitoring (Sentry)

We use the Sentry service to improve the technical stability of our website by monitoring system errors and crashes.

The provider is Functional Software, Inc. d/b/a Sentry, 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA.

a) Type and Scope of Data Processing

If an error occurs on our website, technical data is transmitted to Sentry. This typically includes your IP address, information about your device and browser, the time of the error, and the page accessed. This data is used solely for analyzing and resolving technical issues.

b) Purpose and Legal Basis

The processing is carried out to ensure the smooth operation of our website. The legal basis is our legitimate interest in the technical error-free operation and optimization of our services according to Art. 6 Abs. 1 lit. f GDPR.

c) Data Transfer and Data Processing Agreement

We have entered into a data processing agreement (DPA) with Sentry. This legally required agreement ensures that Sentry processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR. Data transfer to the USA is secured by Sentry's certification under the "EU-US Data Privacy Framework" (DPF), ensuring an adequate level of data protection. For more information, please refer to Sentry's privacy policy: https://sentry.io/privacy/.

5. Use of Cookies and Similar Storage Technologies

a) Type, Scope, and Purpose of Data Processing

We use cookies and similar storage technologies (such as your browser's Local Storage) on our website. Cookies are small text files that are stored by your browser on your device. Local Storage stores data locally in your browser's cache. Both technologies are used to make our offering more user-friendly, effective, and secure.

We distinguish between technically necessary elements that are essential for the basic functionality of the website and optional elements for analysis, marketing, and functional purposes. The use of optional storage technologies only takes place after your explicit consent via our cookie consent banner.

Technically Necessary Cookies

These cookies are essential for the operation of the website and cannot be deactivated.

Name Type Provider Purpose Validity
NEXT_LOCALE Cookie campcruisers.com Stores the selected language setting (Next.js). approx. 1 year
previousNav Cookie campcruisers.com Stores the navigation state for user guidance. Session
trp_language Cookie blog.campcruisers.com Stores the selected language setting of the blog (WordPress/TranslatePress). Session

Consent Cookies

These cookies store your cookie settings.

Name Type Provider Purpose Validity
biscotti_consent Cookie Campcruisers GmbH (Biscotti CMP) Stores your cookie consent decisions. Biscotti CMP is a consent management tool developed by Campcruisers GmbH itself. approx. 1 year
wp_consent_statistics Cookie blog.campcruisers.com Stores your consent for statistics cookies on the blog (WordPress). Session
wp_consent_marketing Cookie blog.campcruisers.com Stores your consent for marketing cookies on the blog (WordPress). Session
wp_consent_functional Cookie blog.campcruisers.com Stores your consent for functional cookies on the blog (WordPress). Session

Analytics & Statistics Cookies

These cookies help us understand how visitors use our website.

Name Type Provider Purpose Validity
_ga Cookie Google Analytics Distinguishes unique users. approx. 13 months
_ga_ECDPZC4X4T Cookie Google Analytics Stores GA4 session data (main site). approx. 13 months
_ga_E0P1ND2QX6 Cookie Google Analytics Stores GA4 session data (blog). approx. 13 months
_gid Cookie Google Analytics Distinguishes users (24h). 24 hours
_gat Cookie Google Analytics Throttles request rate. 1 minute
_clck Cookie Microsoft Clarity Stores a Clarity user ID. approx. 1 year
_clsk Cookie Microsoft Clarity Links page views to a session. approx. 1 day
CLID Cookie Microsoft Clarity Clarity identifier (third-party domain). approx. 1 year

Marketing & Advertising Elements

These cookies are used to display relevant advertisements to you.

Name Type Provider Purpose Validity
NID Cookie Google Stores preferences and is used for ad personalization. approx. 6 months
SAPISID Cookie Google User authentication for Google services. approx. 2 years
__Secure_* Cookie Google Secure authentication for Google services. approx. 2 years
APISID Cookie Google API session cookie for Google services. approx. 2 years
SSID Cookie Google Session ID for Google services. approx. 2 years
SID Cookie Google Security ID for Google services. approx. 2 years
HSID Cookie Google Security cookie for Google services. approx. 2 years
1P_JAR Cookie Google Ad personalization. approx. 1 month
_taboolaStorageDetection Cookie Taboola Detects storage availability. Session
abLdr Cookie Taboola Controls ad loading. Session
abMbl Cookie Taboola Mobile ad control. Session
t_gid Cookie Taboola Unique user ID for advertising purposes. approx. 1 year
taboola_usg Cookie Taboola Usage tracking for advertising purposes. approx. 1 year
taboola_fp_td_user_id Cookie Taboola First-party user ID for ad attribution. approx. 1 year
belboon_session Cookie Belboon/Daisycon Affiliate tracking session cookie. Session
bb_ts Cookie Belboon/Daisycon Timestamp for affiliate tracking. Session

b) Configuration of Browser Settings

You can configure your browser to inform you about the setting of cookies and allow their acceptance only in individual cases, for specific cases, or generally exclude them. You can also activate the automatic deletion of cookies when closing the browser. Similarly, you can manually delete stored Local Storage data there. If cookies are deactivated, the functionality of this website may be limited.

c) Legal Basis

The processing of personal data through technically necessary cookies and storage technologies is based on Art. 6 Abs. 1 lit. f GDPR to safeguard our legitimate interest in a user-friendly and functional presentation of our offering.

The use of all other technologies (analytics, marketing, functionality) and the associated data processing is carried out exclusively on the basis of your consent according to Art. 6 Abs. 1 lit. a GDPR and § 25 Abs. 1 TDDDG. You can revoke your consent at any time via our cookie banner with effect for the future.

6. Data Collection for Pre-Contractual Measures and Contract Fulfillment

a) Type and Scope of Data Processing

In the pre-contractual area and upon contract conclusion, we collect personal data about you. This includes, for example, first and last name, address, country of residence, email address, date of birth, and telephone number.

b) Purpose and Legal Basis of Data Processing

We collect and process this data exclusively for the purpose of contract execution or to fulfill pre-contractual obligations. The legal basis for this is Art. 6 Abs. 1 lit. b GDPR. If you have given your consent, Art. 6 Abs. 1 lit. a GDPR is an additional legal basis.

c) Storage Duration

The data is deleted as soon as it is no longer necessary for the purpose of its processing. There may also be statutory retention obligations, such as commercial or tax retention obligations under the German Commercial Code (HGB) or the German Fiscal Code (AO). If such retention obligations exist, we will block or delete your data at the end of these retention obligations.

7. Booking Form

Our website features a booking form that can be used for electronic bookings as well as for rental or availability inquiries.

a) Type and Scope of Data Processing

Our data collection is limited to the following data:

b) Purpose and Legal Basis

The purpose of data processing is the proper handling of your booking, the preparation of rental agreements, and the support of tenants and landlords in contract execution. The legal basis for this is Art. 6 Abs. 1 lit. b GDPR (contract fulfillment or pre-contractual measures).

c) Storage Duration

The data is deleted as soon as it is no longer needed for the purpose of processing, unless legal retention obligations (e.g., from the HGB or AO) prevent this.

8. Registration Option

8.1 Direct Registration

a) Type and Scope of Data Processing

On our website, you can register and create a user account as a traveler (renter) or provider (landlord). We collect and store the data you enter into the input mask (e.g., name, email address). When registering as a provider, certain data is shared with our payment service provider to set up a payment account (see Section 10).

b) Purpose and Legal Basis of Data Processing

Your registration is necessary for the use of certain services (rental inquiries, bookings) or for the fulfillment of a contract. The legal basis, in the case of consent, is Art. 6 Abs. 1 lit. a GDPR. If your registration serves the preparation of a contract conclusion, Art. 6 Abs. 1 lit. b GDPR is an additional legal basis.

c) Storage Duration

The data is stored as long as you are registered on our website and is subsequently deleted. Legal retention periods remain unaffected.

8.2 Registration with Google

Instead of direct registration, you can sign up with Google. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For this, you enter your Google login details with Google. Google then confirms your identity to us. We may use certain information from your Google account (e.g., name) to complete your profile with us. You can specify which information this is in your Google security settings.

Data processing is based on our legitimate interest in providing a simple registration process (Art. 6 Abs. 1 lit. f GDPR). Google has certification under the "EU-US Data Privacy Framework" (DPF), ensuring compliance with European data protection standards.

8.3 Registration with Mobile Phone Number (Twilio)

To offer you the simplest and most secure registration process possible, we enable registration using your mobile phone number. For this, we use the service Twilio, provided by Twilio Ireland Limited, 3 Dublin Landings, North Wall Quay, Dublin 1, Ireland. Twilio processes your mobile phone number to send you a verification code via SMS and confirm your identity. The processing is based on our legitimate interest in a secure and user-friendly authentication process (Art. 6 Abs. 1 lit. f GDPR). We have entered into a data processing agreement (DPA) with Twilio. Twilio processes the data on servers within the European Union; data transfer to the USA is secured by the EU Commission's standard contractual clauses and DPF certification.

9. Reviews and Comments

On our website, you can rate providers. If you provide personal data in the process, we process this to display it to other visitors. The legal basis for this is Art. 6 Abs. 1 lit. b GDPR. Your comments and reviews generally remain visible even after the deletion of your user account but can be anonymized or removed upon request.

10. Payment Service Providers

We integrate the payment service provider Stripe Connect on our website to offer you secure and diverse payment options (e.g., credit card).

The provider is Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (hereinafter "Stripe").

When you make a payment via our platform, your payment data (e.g., name, payment amount, account details, credit card number) is entered directly into an input mask provided by Stripe and processed by Stripe for payment execution. We do not store your complete payment data, such as credit card numbers, on our servers. We receive from Stripe only a confirmation of the payment made and information necessary to assign the payment to your booking.

The processing of your data is for the purpose of payment processing and thus for the fulfillment of the contract according to Art. 6 Abs. 1 lit. b GDPR.

Data transfer to the USA is based on the EU Commission's standard contractual clauses. Stripe is also certified under the "EU-US Data Privacy Framework" (DPF). For details, please refer to Stripe's privacy policy: https://stripe.com/de/privacy.

11. Integrated Third-Party Services

11.1 Currency Conversion (fixer.io)

To display prices in various currencies, we use the fixer.io service, provided by APILayer GmbH, Gölsdorfgasse 4/1, 1010 Vienna, Austria. No personal data is transmitted to fixer.io during the conversion. The processing serves to fulfill our contractual obligations to provide you with accurate price information. The legal basis is Art. 6 Abs. 1 lit. b GDPR. For more information, please refer to APILayer's privacy policy: https://apilayer.com/privacy.

11.2 Partner Program and Retargeting (Daisycon)

For our partner program and retargeting measures, we use the affiliate network Daisycon B.V., P.J. Oudweg 5, 1314 CH Almere, Netherlands. (The former provider Belboon has merged with Daisycon, and the Belboon service has been completely discontinued, so the program now runs exclusively under the name Daisycon). If you arrive at our website via an advertising link from a partner site and make a booking, Daisycon records this via a cookie for correct commission billing. We also use Daisycon for retargeting measures to re-engage users who have already shown interest in our offering on other websites.

The storage of cookies and the analysis of data for affiliate tracking and retargeting are carried out exclusively on the basis of your consent according to Art. 6 Abs. 1 lit. a GDPR, which you provide via our cookie banner. Consent can be revoked at any time. For more information on data protection at Daisycon, please visit: https://www.daisycon.com/de/datenschutzbestimmungen/.

11.3 Translations and Summary of Rental and Booking Conditions (Google Gemini)

Providers and landlords can create listings in their Campcruisers account (e.g., for recreational vehicles, campsites, houseboats, or private pitches) and upload their own rental or booking conditions. To prepare this offering in the best possible way for travelers, we use the AI service Google Gemini (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google Gemini is used, on the one hand, to translate the descriptions of the vehicles, boats, campsites, or pitches created by the providers into additional languages. On the other hand, Campcruisers uses Gemini to summarize the uploaded conditions of the providers in a clear form. This allows travelers to see important information, such as the deposit, the extent of insurance coverage, site regulations, or the inclusive kilometers included in the rental price, at a glance on the product detail page (the detail page of a listing).

To the extent that personal data of the providers is processed in the texts (e.g., in the rental or booking conditions), this is done based on our legitimate interest in a user-friendly, international, and transparent presentation of the offerings according to Art. 6 Abs. 1 lit. f GDPR and for contract initiation according to Art. 6 Abs. 1 lit. b GDPR. Google may process the data on servers in the USA. We have entered into a data processing agreement (DPA) with Google. Data security during transmission to the USA is ensured by Google's DPF certification.

11.4 Data Transfer to Providers and Connected Booking Systems (API/ERP)

Campcruisers is connected via programmable interfaces (API) with numerous providers and external booking and ERP systems. If you make a booking via our platform with a provider that uses such a system connection, the personal data necessary for contract preparation and execution (such as name, contact details, booking period) is automatically transmitted via the interface to the respective provider or their management system.

These connected partners and systems include, for example, direct landlord connections (such as Indie Campers, Travellers Autobarn, Jucy Rentals, Tourism Holdings Limited) and industry-specific ERP systems for fleet and booking management (such as womoplus, Wheeloffice, Rental Car Manager, SYSCARA, INDV isiplan, Rentingforce, or 5 Anker for the boating sector).

Data transfer is carried out exclusively for the purpose of booking processing and contract fulfillment. The legal basis for this is Art. 6 Abs. 1 lit. b GDPR. The providers subsequently process your data under their own responsibility according to their own data protection regulations.

11a. Mobile App (Campcruisers App)

The Campcruisers Mobile App is available for iOS and Android. In addition to the data collected on the website, the following data is processed when using the app:

The app communicates with the same backend servers as the website. The same privacy policies apply.

11b. Wise (Payment Forwarding)

We use the Wise service to forward payments to providers who do not have a Stripe account.

The provider is Wise Payments Limited, 56 Shoreditch High Street, London, E1 6JJ, United Kingdom.

a) Type and Scope of Data Processing

Wise processes the name, IBAN or bank details, and the payment amount of the provider (not the renter). No personal data of the renter is transmitted to Wise.

b) Purpose and Legal Basis

The processing is carried out for the purpose of payment processing and thus for the fulfillment of the contract according to Art. 6 Abs. 1 lit. b GDPR.

c) Data Transfer

Data transfer to the United Kingdom is secured by the EU Commission's adequacy decision. For more information, please refer to Wise's privacy policy: https://wise.com/de/legal/privacy-policy.

11c. Vehicle Telemetry (OBD-II)

The Campcruisers Mobile App offers the option to read vehicle data via an OBD-II Bluetooth dongle.

a) Type and Scope of Data Processing

The following data can be collected: fuel level, battery voltage, coolant temperature, engine speed, speed, error codes (DTC), and the GPS location of the vehicle at the time of measurement.

b) Purpose and Legal Basis

The processing is used to display the vehicle's condition during the trip and to warn of technical problems. The legal basis is your explicit consent (Art. 6 Abs. 1 lit. a GDPR). The Bluetooth connection and data collection only occur if you actively start this in the app.

c) Storage Duration

Telemetry data is stored for the duration of the booking and deleted no later than 30 days after the end of the rental period. The data is not shared with the landlord or third parties.

11d. Campfire Social (Location-Based Chat)

The Campcruisers Mobile App offers "Campfire," a location-based chat function for travelers aged 18 and over.

a) Type and Scope of Data Processing

When using Campfire, the following data is processed: your current GPS location (to display nearby campers), your messages, and a display name (which can be anonymous). You can activate a privacy mode that hides your location from other users.

b) Purpose and Legal Basis

The processing is used to provide the location-based chat function. The legal basis is your explicit consent (Art. 6 Abs. 1 lit. a GDPR).

c) Storage Duration

Campfire messages are automatically and irrevocably deleted after 24 hours. Location data is only stored for the duration of active use.

11e. Speech Recognition and Voice Commands

The Campcruisers Mobile App offers voice search and voice commands for vehicle search and the Co-Pilot travel planner.

a) Type and Scope of Data Processing

When using the voice function, your voice input is converted into text on your device (speech-to-text). The resulting text is transmitted to our servers to process your search query. Audio data is not permanently stored.

b) Purpose and Legal Basis

The processing is used to provide the voice search function. The legal basis is your explicit consent (Art. 6 Abs. 1 lit. a GDPR), which you grant by activating the microphone function.

11f. Google reCAPTCHA

We use the Google reCAPTCHA v3 service on our website to protect against automated abuse (bots).

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA analyzes the behavior of the website visitor based on various characteristics (e.g., IP address, duration of stay, mouse movements). The analysis starts automatically when visiting the website. The legal basis is our legitimate interest in the security of our website (Art. 6 Abs. 1 lit. f GDPR). Google is DPF-certified. For more information: https://policies.google.com/privacy.

11g. Map Services (Google Maps, OpenStreetMap)

We use the following map services to display maps and locations:

11h. Used Vehicle Marketplace

Campcruisers offers a marketplace for used recreational vehicles. When using the marketplace, the following data is processed:

The processing is carried out for contract initiation and fulfillment (Art. 6 Abs. 1 lit. b GDPR). The data is deleted after the conclusion or termination of the transaction unless legal retention obligations exist.

11i. Joint Controllership with Providers (Art. 26 GDPR)

In the context of booking mediation, Campcruisers and the respective provider (landlord, campsite operator) are joint controllers within the meaning of Art. 26 GDPR. Both parties jointly determine the purpose and means of processing the booking data.

The essential contents of the agreement according to Art. 26 GDPR are:

The complete agreement according to Art. 26 GDPR can be requested from Campcruisers at datenschutz@campcruisers.com.

11j. Insolvency Protection / Deposit Insurance (R+V Allgemeine Versicherung AG)

As a travel provider, Campcruisers is required according to § 651r BGB to maintain insolvency protection for package tours. For this purpose, there is a deposit insurance with R+V Allgemeine Versicherung AG, Raiffeisenplatz 1, 65189 Wiesbaden.

a) Type and Scope of Data Processing

In the event of insolvency, the personal data necessary for processing the claims of travelers is transmitted to R+V Allgemeine Versicherung AG. This includes in particular: name, contact details, booking data (travel period, travel price, booked services), and payment information.

b) Purpose and Legal Basis

The data processing is carried out to fulfill the legal obligation for insolvency protection according to § 651r BGB (legal basis: Art. 6 Abs. 1 lit. c GDPR) and for the execution of the insurance contract (Art. 6 Abs. 1 lit. b GDPR). In the event of insolvency, the transmission serves to secure the travelers' claims for reimbursement of the travel price or repatriation.

c) Recipients and Storage Duration

The recipient is exclusively R+V Allgemeine Versicherung AG. Data transmission only occurs in the event of insolvency or as far as necessary for the execution of the deposit insurance contract. The data is deleted after the processing of the insurance case or after the expiration of the statutory retention periods. For more information, please refer to the privacy policy of R+V: https://www.ruv.de/datenschutz.

12. Data Transfer

We only share your personal data with third parties if:

When transferring to external entities in third countries (outside the EU/EWR), we ensure that these entities treat your personal data with the same care as within the EU. We only transfer data to third countries for which there is an adequacy decision by the EU Commission or if we ensure careful handling through appropriate guarantees (e.g., standard contractual clauses).

13. Job Application Option

a) Type and Scope of Data Processing

You can apply on our website or by email. We collect and store the data you provide to us as part of your application.

b) Purpose and Legal Basis

We process your data exclusively for the purpose of handling your application. The legal basis is Art. 88 Abs. 1 GDPR in conjunction with § 26 BDSG and Art. 6 Abs. 1 lit. b GDPR. If you give consent to be included in our applicant pool, the legal basis is Art. 6 Abs. 1 lit. a GDPR.

c) Storage Duration

If we cannot offer you a position, we store your data for a maximum of six months after the end of the application process. If you have given us consent to be included in our applicant pool, we store your data for a maximum of two years.

14. Contact Form

a) Type and Scope of Data Processing

When you use our contact form, we process the data you enter (name, company, email, telephone number, message content).

b) Purpose and Legal Basis

The processing serves to answer your inquiry. The legal basis is your consent according to Art. 6 Abs. 1 lit. a GDPR.

c) Storage Duration

Your data remains with us until you request deletion, revoke your consent, or the purpose for data storage ceases to exist (e.g., after your inquiry has been processed), unless legal retention periods prevent this.

15. Contact Options via Email (Google Workspace)

If you contact us by email, we process your email address and any other data you transmit. This is done to handle your request based on our legitimate interest in efficient communication (Art. 6 Abs. 1 lit. f GDPR).

For managing our email traffic, we use the services of Google Workspace. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google processes the data on servers in the USA as well. We have entered into a data processing agreement with Google. Data security is ensured by Google's DPF certification.

The data is deleted after the purpose has been fulfilled, unless legal retention obligations prevent this.

16. Platform-Internal Chat

We provide a chat function for registered users. We process message content and metadata for the initiation and execution of rental agreements (Art. 6 Abs. 1 lit. b GDPR) and to ensure our terms and conditions and prevent misuse (Art. 6 Abs. 1 lit. f GDPR). Employees may access the chat in case of suspected misuse. Chat histories are deleted after the end of the contract unless retention obligations exist.

17. Email Dispatch (Mailjet)

17.1 Transactional Emails

For sending system-relevant emails, so-called transactional emails (e.g., registration and booking confirmations, password resets), we use the Mailjet service.

The provider is Mailjet SAS, 13-13 bis, Rue de l'Aubrac, 75012 Paris, France.

Mailjet processes your email address and, if applicable, your name to carry out the dispatch on our behalf. The sending of these emails is essential for the fulfillment of the user agreement and the execution of your bookings. The legal basis is therefore Art. 6 Abs. 1 lit. b GDPR. We have entered into a data processing agreement (DPA) with Mailjet. For more information, please refer to Mailjet's privacy policy: https://www.mailjet.de/legal/datenschutzrichtlinie/.

17.2 Newsletter Dispatch

In addition to transactional emails, we offer you the option to subscribe to our newsletter to receive regular information and advertising about our offerings. We also use Mailjet SAS for newsletter dispatch. With your subscription, you give us your consent (Art. 6 Abs. 1 lit. a GDPR) to process your email address for the purpose of sending the newsletter. You can unsubscribe from the newsletter at any time via the unsubscribe link in every email or by sending a direct message to us.

18. Telephony (easybell)

For handling telephone calls, we use Voice-over-IP telephony services.

The provider is easybell GmbH, Markgrafenstraße 58, 10117 Berlin, Germany.

When you call us or we call you, connection data (e.g., your telephone number, time, and duration of the call) as well as call notes that we make to handle your request may be processed. The processing is carried out for the implementation of pre-contractual measures and contract fulfillment (Art. 6 Abs. 1 lit. b GDPR) as well as based on our legitimate interest in effective business communication (Art. 6 Abs. 1 lit. f GDPR). We have entered into a data processing agreement (DPA) with easybell.

19. Tawk.to Live Chat

We use the tawk.to live chat (provider: tawk.to, inc., USA) to handle user inquiries. Messages sent to us remain with us until the purpose of storage ceases to exist. The use is based on our legitimate interest in efficiently handling inquiries (Art. 6 Abs. 1 lit. f GDPR). If consent has been requested, processing is based on Art. 6 Abs. 1 lit. a GDPR. Data transfer to the USA is based on standard contractual clauses, and tawk.to is DPF-certified. We have entered into a DPA with tawk.to.

20. WhatsApp Business Support

Through the WhatsApp Business application, we offer you the opportunity to contact us with questions about individual recreational vehicles, bookings, or other concerns.

a) Type and Scope of Data Processing

The service provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. When you contact us via WhatsApp Business, we process your mobile phone number, the time of contact, the message content, and metadata (e.g., delivery status).

b) Purpose and Legal Basis

We use WhatsApp for quick and efficient responses to your inquiries.

c) Data Transfer to Third Countries and Storage Duration

We would like to point out that WhatsApp transfers data to the USA. Data transfer is secured by the certification of Meta Platforms Ireland Limited under the "EU-US Data Privacy Framework" (DPF).

The data is deleted as soon as it is no longer necessary for achieving the purpose of its collection and no legal retention obligations (e.g., from the HGB or AO) prevent this. Please note that the use of WhatsApp is at your own risk, and by contacting us through this channel, you agree to WhatsApp's terms of use and privacy policy.

21. Telegram Bot

To make searching for a suitable recreational vehicle even more convenient, we offer a chatbot in the Telegram messenger service. The provider of the messenger is Telegram FZ-LLC, Business Central Towers, Tower A, Office 1003/1004, Dubai, United Arab Emirates. When you use the bot, Telegram processes your user inputs, metadata, and communication content on our behalf to show you suitable search results. The use of the bot is voluntary and serves the initiation and fulfillment of contracts (Art. 6 Abs. 1 lit. b GDPR) as well as our legitimate interest in providing innovative search functions (Art. 6 Abs. 1 lit. f GDPR). We would like to point out that when using Telegram, data may also be processed outside the European Economic Area. By using the bot, you agree to Telegram's terms of use and privacy policy. For more information on data protection at Telegram, please visit: https://telegram.org/privacy.

22. Biscotti CMP (Cookie Consent Tool)

Our website and Mobile App use Biscotti CMP, a consent management tool developed by Campcruisers GmbH itself. Biscotti CMP is used to lawfully obtain, manage, and document consents in accordance with the General Data Protection Regulation (GDPR) and § 25 TDDDG.

Purpose of Processing: When you visit our website, Biscotti CMP displays a cookie banner through which you can give or refuse your consent for non-technically necessary cookies and tracking services. Your decision is stored in a cookie (biscotti_consent) in your browser so that you are not asked again on your next visit.

Processed Data: Biscotti CMP stores only your consent decisions (which cookie categories you have accepted or rejected) and the timestamp of the consent. No personal data is transmitted to third parties, as Biscotti CMP is fully operated by Campcruisers GmbH.

Legal Basis: The processing is based on Art. 6 Abs. 1 lit. c GDPR (legal obligation to document consents) and § 25 Abs. 1 TDDDG.

Storage Duration: The consent cookie (biscotti_consent) is stored for approximately 12 months. After this period, you will be asked for your consent again.

Revoking Consent: You can adjust or revoke your cookie settings at any time via the cookie banner (accessible via the "Cookie Settings" link in the footer of our website). The revocation applies for the future.

Controller: Since Biscotti CMP is developed and operated by Campcruisers GmbH itself, no third-party provider is involved in the processing. The controller is exclusively Campcruisers GmbH, Berliner Str. 21 B, 14612 Falkensee.

23. Tracking and Analytics Tools

The use of the tracking and analytics tools described below is carried out exclusively on the basis of your consent according to Art. 6 Abs. 1 lit. a GDPR, which you give via our cookie banner and can revoke at any time.

23.1 Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Purpose and Scope of Processing

We use Google Analytics to analyze the use of our website and optimize our offering. Google Analytics processes data such as your anonymized IP address, cookie identifiers, device IDs, and interactions on our site.

Data Retention Period

The data we send and link to user identifiers is automatically deleted after 2 months. This period restarts with each new activity on your part.

Special Features

Legal Basis and Revocation

The use is based on your consent (Art. 6 Abs. 1 lit. a GDPR), which you can revoke at any time. You can also prevent collection by Google via a browser plugin: http://tools.google.com/dlpage/gaoptout?hl=de. Google is DPF-certified.

23.2 Google Tag Manager

We use Google Tag Manager (provider: Google Ireland Limited). This tool is only used to manage and trigger other tags and does not process any personal data itself.

23.3 Google Ads Conversion Tracking

We use Google Ads Conversion Tracking (provider: Google Ireland Limited). If you arrive at our site via a Google ad, a cookie is set to measure the success of our advertising campaigns. We only receive statistical evaluations.

23.4 Meta Pixel

We use the Meta Pixel (provider: Meta Platforms Ireland Limited). This allows us to track user behavior after clicking on a Facebook or Instagram ad (conversion tracking). We only receive aggregated evaluations.

23.5 Taboola Conversion Tracking

Our website uses Taboola Conversion Tracking (provider: Taboola Germany GmbH). Taboola uses cookies to analyze user behavior and display personalized advertising.

23.6 HubSpot CRM

We use HubSpot (provider: HubSpot Europe Ltd.) to manage customer contacts and marketing activities. Personal data such as name and email address may be processed.

23.7 MGID Marketing

We use the marketing platform of MGID Inc. (USA) to place usage-based advertising. MGID uses cookies to collect information about your user behavior. Data transfer to third countries is secured by standard contractual clauses.

23.8 Propeller Ads

This website uses services from PropellerAds Ltd. (Cyprus) to display usage-based advertising. PropellerAds uses cookies to collect information about your user behavior. Data transfer is secured by standard contractual clauses.

23.9 Microsoft Clarity

We use "Microsoft Clarity" (provider: Microsoft Ireland Operations Limited). Clarity anonymously analyzes the use of our website (e.g., through heatmaps) to optimize our offering. The data is stored for one year. Microsoft is DPF-certified.

23.10 Cloudflare Turnstile

We use the "Cloudflare Turnstile" service from Cloudflare Inc. (101 Townsend St., San Francisco, CA 94107, USA) on our website. The service is used to protect our website from spam and abuse by automated bots while improving the user experience. Turnstile evaluates technical data such as IP address, browser information, operating system, and mouse movements to determine whether the request comes from a human. Unlike many other CAPTCHA services, Turnstile does not use cookies for user tracking. The legal basis for this processing is our legitimate interest (Art. 6 Abs. 1 lit. f GDPR) in the security and functionality of our website. Cloudflare may process data in the USA. Data transfer is secured by the EU-US Data Privacy Framework (DPF) or standard contractual clauses. For more information, please refer to Cloudflare's privacy policy.

24. Data Security and Safeguarding Measures

We are committed to protecting your privacy and treating your personal data confidentially. To this end, we implement extensive technical and organizational security measures, which are regularly reviewed and adapted to technological advancements. This includes the use of recognized encryption methods (SSL or TLS). However, data disclosed unencrypted, for example via unencrypted email, may potentially be read by third parties. We have no influence over this.

25. Changes to the Privacy Policy

We reserve the right to adjust this privacy policy at any time as necessary to comply with legal requirements or to reflect changes in our services. The new privacy policy will then apply to your next visit.

26. Your Rights

You have the following rights regarding the personal data we process about you. Details can be found in Articles 7, 15–22, and 77 GDPR.