Privacy Policy

We are pleased about your visit to our website. We continuously work on the content and user-friendliness of our platform. As the controller within the meaning of data protection law, we inform you below about the processing of your personal data by us.

In simple terms, personal data is any information that relates to you personally. The legal definitions of the term "personal data" and other important terms can be found in Article 4 of the GDPR (General Data Protection Regulation).

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data. The name and contact details of the controller can be found in our provider identification / imprint.

We process your personal data for the following purposes and on the following legal bases:

• Performance of pre-contractual measures at your request or performance of a contract (Art. 6 para. 1 lit. b GDPR)
• Protection of our legitimate interests (Art. 6 para. 1 lit. f GDPR)
• Consent given by you (Art. 6 para. 1 lit. a GDPR)

Further information on the individual processing purposes can be found in the following sections of this privacy policy.

We only pass on your personal data to third parties if this is necessary to fulfil the stated purposes and is legally permitted. The scope of the transmitted data is limited to the necessary minimum.

1. Informational use of the website
When you visit our website without actively transmitting data, our server automatically collects technical data (IP address, browser type, operating system, referrer, date and time, etc.). This processing is based on Art. 6 para. 1 lit. f GDPR. The data is deleted after 6 months at the latest.

2. Processing of inquiries
When you contact us (via contact form, email, etc.), we process the data you provide to respond to your request based on Art. 6 para. 1 lit. f GDPR.

3. Contract processing and customer account
For the execution of contracts, we process your data on the basis of Art. 6 para. 1 lit. b GDPR. Data is transferred to necessary service providers. Data is also transferred to a service provider in Kazakhstan (Beissenova Nazgul Rymbaevna) for order processing. To ensure an adequate level of data protection, this transfer is based on the EU Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR.

4. Newsletter
When you subscribe to our newsletter, we process your email address based on your explicit consent (Art. 6 para. 1 lit. a GDPR). You can unsubscribe at any time.

5. Cookies
We use technically necessary cookies (e.g. PHPSESSID, WP language cookies) to ensure the functionality of the platform. These are based on Art. 6 para. 1 lit. b GDPR and § 25 para. 2 TTDSG.

6. Social Media
We maintain presences on various social media platforms. If you interact with us there, we process only the data you make publicly available.

7. Enforcement of rights
We process your data to the extent necessary to assert our rights or defend against legal claims (Art. 6 para. 1 lit. f GDPR).

8. Affiliate Tracking and Local Storage
If you visit our website via a partner link (identifiable by the "?ref=" parameter), we save this code in your browser's Local Storage. This serves solely to correctly assign your booking to the referring partner. This code contains no personal data. The legal basis is our legitimate interest (Art. 6 para. 1 lit. f GDPR). You can delete this data at any time by clearing your browser's storage.

Your personal data will be deleted as soon as it is no longer required for the purpose for which it was collected, unless statutory retention periods (e.g. 6 or 10 years under commercial and tax law) require longer storage.

You have the following rights under the GDPR:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure ("right to be forgotten") (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to withdraw consent at any time (Art. 7 para. 3 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

The provision of your personal data is necessary for the conclusion of a contract or for processing your inquiry. Without this data, we cannot conclude a contract with you or process your request.