HolidayPirates
Profile
Impressions and Other Assets/psb_background_picture
Search & book your next holidayFind hotels, flights & more
Search & Book Your Dream Holiday
Origin
Destination
-

Hand-picked deals by our pirate team

Inspire me!

Hand-picked deals by our pirate team
HolidayPirates
Profile
HolidayPirates

Hand-picked deals by our pirate team

Inspire me!

Hand-picked deals by our pirate team

Privacy policy for prize competition

Privacy policy for prize competition

We give great importance to the protection of your personal data and compliance with data protection laws. Below, we inform you in particular about which personal data is processed for which purposes and on which legal basis.

1. Who is responsible for data processing?

HolidayPirates GmbH, Neue Grünstrasse 18, 10179 Berlin, Germany is the data controller. The Data Protection Officer of the HolidayPirates GmbH can be contacted here: [email protected]

2. Which categories of personal data are being used?

  • Instagram usernames: To select and contact winners.

  • Furthermore, we process the following types of contact data provided by the winner of the competition:

  • Full Name

  • Email-Address

  • Address

  • IBAN + BIC of winner's bank account

For the purpose of prize delivery.

To accept the prize the winner has to give consent to publish the winner’s name (first name and first letter of last name or their Instagram username) on our Instagram (@holidaypirates, @urlaubspiraten, @vakantiepiraten, @piratinviaggio, @travelpirates and @viajerospiratas).

3. Where does this data come from?

The data we process comes directly from you, provided as part of your participation in the giveaway.

  • Instagram username: Collected when you participate in the giveaway through our Instagram Broadcast channel.

  • Winner details: Collected after we contact you via Instagram if your username is drawn as a winner.

4. For which purposes is my data being processed? What is the legal basis that the company bases this on?

a. Art 6 para 1 b) GDPR

We process personal data within the framework of contractual negotiations and the performance of the contract for the prize draw that has been concluded between you and us.

Processing takes place for the provision of contractually guaranteed services like e.g. the fulfilment of a possible claim for the prize offered as part of the competition.

The legal basis is Art. 6 para. 1 b) GDPR. Within the scope of contract fulfilment and performance, we process the data that you provide to us upon formation of the contract or in the course of the contractual relationship. This includes in particular your master information (name, surname, date of birth, address, e-mail address).

b. Art. 6 para 1 a) GDPR

If you have provided us with your consent to process data, we do so for the purposes informed about in the course of the declaration of consent. Consent that you have provided may be revoked at any time.

c. Art. 6 para 1 f) GDPR

We process your data to protect our legitimate interests or those of third parties. This applies in particular to internal communication between affiliated companies and other administrative purposes.

5. Will data be transferred?

Within our company respectively the group of companies whose employees receive access to your data who need the data in order to fulfil the contractual or legal responsibilities. Moreover, service providers that we use may also receive data for these purposes:

Meta Platforms, Inc. (Instagram)

  • Address: 1 Hacker Way, Menlo Park, California 94025, USA

  • GDPR Compliance: Instagram Privacy Policy

  • Purpose: Instagram serves as the platform for running the giveaway, including participant engagement and winner notifications.

  • Data Processed: Instagram usernames and messages exchanged on the platform.

  • HolidayPirates GmbH does not transfer or send personal data outside Instagram. All data exchanged is within the platform's terms and conditions.

Bank

The bank details will be stored for internal communication purposes, e.g. if they are sent to the finance department by email. This will be deleted internally right after the transfer is completed.

We have to store bank statements for 10 years. This data will be permanently deleted after the expiry of the tax and commercial law regulations.

6. What are my rights?

In accordance with the GDPR, you have the following rights:

  • right of access (Art. 15 GDPR)

  • right to rectification (Art. 16 GDPR)

  • right to object (Art. 21 GDPR)

  • right to erasure (Art. 17 GDPR)

  • right to restriction of processing (Art. 18 GDPR)

  • right to data portability (Art. 20 GDPR)

Where we cite our legitimate interest (Art. 6 para 1 f) GDPR) as the legal basis, you have a right to objection pursuant to Art. 21 GDPR.

According to Art. 21 GDPR you have the right

to object to your personal data being processed at any time. We will then no longer process your personal data for direct marketing purposes or related profiling.

We also do not process your personal data for other purposes after your objection unless we can demonstrate reasons that are binding and worthy of protection for the processing of the data which outweigh your interests, rights and freedoms, or the processing of your personal data serves to assert, exercise or defend legal claims (cf. Art. 21 para. 1, para. 6 GDPR, so-called "limited right of objection"). In this case, you must explain the reasons for the objection arising from your particular situation.

7. Do I have the right to complain?

Yes, you have the possibility to address your complaint directly to us or towards the competent data protection authority.

We attach great importance to transparency. Please do not hesitate to contact us if you have any questions.

8. For how long will my data be stored?

We process and store your personal data for the existing contract period. We will regularly delete the data when data is not required for contractual or legal purposes anymore. However, we need to take into account legal retention periods (in particular § 257 HGB and § 147 AO). These are up to 10 years.

Insofar as data is to be retained to ensure enforcement of legal claims, the limitation periods can be up to 30 years, whereas the regular limitation period is three years.

If your data is used for advertising purposes, we will only process the data until you object to its use or have revoked your consent or until usage is no longer permitted by law.

9. Do I have to give you my data?

In the context of our contractual relationship, you must provide the personal data that is necessary for the performance and fulfilment of the contract or the processing of which we are legally bound. Failure to make them available would mean that we would regularly be unable to conclude the contract with you.

We value your privacy

We use cookies to enhance your browsing experience, serve personalised content, and analyse our traffic. By clicking "Accept All" you accept this and consent that we share this information with third parties and that your data may be processed in the USA. For more information, please read our .

You can adjust your preferences at any time. If you deny, we will use only the essential cookies and unfortunately, you will not receive any personalised content. To deny, .