Data Protection

Privacy Policy

§ 1 Information on the Collection of Personal Data

(1) Below we inform you about the processing of personal data when using our website. Personal data are all data that can be related to you personally, e.g. name, address, email addresses, user behavior. With this, we want to inform you about our processing operations and at the same time comply with legal obligations, particularly from the EU General Data Protection Regulation (GDPR).

(2) The responsible party according to Art. 4 para. 7 GDPR is

Address: BB & TL GmbH 

Dorfring 17b

22889 Tangstedt

Germany

Email: www.zrce.de

Commercial Register: Kiel District Court, HRB 17231 

Managing Directors: Benjamin Buhs or Timo Laub

See also our imprint.

(3) When you contact us via email or through a contact form, the data you provide (your email address, possibly your name and phone number) will be stored by us to answer your questions. We will delete the data collected in this context if the inquiry is associated with a contract after the deadlines for the contract duration, otherwise after the storage is no longer necessary, or restrict processing if there are legal retention obligations.

(4) If we use commissioned service providers for individual functions of our offer or want to use your data for advertising purposes, we will always carefully select and monitor these service providers and inform you below in detail about the respective processes. We will also name the established criteria for the storage duration.

§ 2 Your Rights

(1) You have the following rights regarding your personal data against a responsible party:

– Right to information,

– Right to rectification or deletion,

– Right to restriction of processing,

– Right to object to processing,

– Right to data portability.

(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

§ 3 Processing of Personal Data When Visiting Our Website

When using the website for informational purposes, i.e., merely viewing without registration and without providing us with information in any other way, we process the personal data that your browser transmits to our server. The data described below is technically necessary for us to display our website to you and to ensure stability and security, and must therefore be processed by us. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR:

– IP address

– Date and time of the request

– Time zone difference to Greenwich Mean Time (GMT)

– Content of the request (visited page)

– Access status/HTTP status code

– Amount of data transmitted

– Previously visited page

– Browser

– Operating system

– Language and version of the browser software.

§ 4 Use of Our Webshop

(1) If you wish to order in our webshop, it is necessary for the conclusion of the contract that you provide your personal data, which we need for the processing of your booking. Mandatory information necessary for the processing of contracts is marked separately, further information is voluntary. For payment, you can provide your payment data to our payment service provider or we will pass your payment data to our house bank, whereby these third parties are each independently responsible for the payment processing. The legal basis for this is Art. 6 para. 1 sentence 1 lit. b GDPR.

We can also process the data you provide to inform you about other interesting products from our portfolio or to send you emails with technical information.

(2) We are obliged by commercial and tax law requirements to store your address, payment, and order data for a period of ten years. However, after [three] years, we will restrict processing, meaning your data will only be used from this point on to comply with legal obligations.

(3) To prevent unauthorized access by third parties to your personal data, the ordering process is encrypted using TLS technology.

§ 5 Web Tracking Using Google Analytics

(1) This website uses Google Analytics, a web tracking service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The purpose of our use of the tool is to enable the analysis of your user interactions on websites and in apps and to improve our offer based on the statistics and reports obtained, making it more interesting for you as a user.

(2) We primarily capture the interactions between you as a user of the website and our website using cookies, device/browser data, IP addresses, and website or app activities. In Google Analytics, your IP addresses are also captured to ensure the security of the service and to provide us as the website operator with information about the country, region, or location from which the respective user originates (so-called “IP location determination”). For your protection, we naturally use the anonymization feature (“IP Masking”), meaning that Google shortens the IP addresses within the EU/EEA by the last octet.

(3) Google acts as a processor, and we have concluded a corresponding contract with Google. The information generated by the cookie and the (usually shortened) IP addresses about your use of this website are usually transmitted to a Google server in the USA and processed there. For these cases, Google has imposed a standard on itself that corresponds to the former EU-US Privacy Shield and has committed to comply with applicable data protection laws when transferring data internationally. We have also agreed on so-called standard contractual clauses with Google, the purpose of which is to ensure an adequate level of data protection in the third country.

(4) The legal basis for the collection and further processing of the information (which occurs for a maximum of 14 months) is your consent (Art. 6 para. 1 sentence 1 lit. a GDPR). You can revoke your consent at any time without affecting the legality of the processing until the revocation. In apps, you can reset the advertising ID under the settings of Android or iOS. You can most easily revoke your consent through our consent manager or by installing the browser add-on from Google, which can be accessed via the following link: tools.google.com/dlpage/gaoptout?hl=en/.

(5) More information on the scope of services of Google Analytics can be found at marketingplatform.google.com/about/analytics/terms/en/. Information on data processing when using Google Analytics is provided by Google at the following link: support.google.com/analytics/answer/6004245?hl=en/. General information on data processing, which according to Google should also apply to Google Analytics, can be found in Google's privacy policy at www.google.com/intl/en/policies/privacy/.

§ 6 Our Presence on Social Networks

(1) We have various presences on so-called social media platforms. We operate on the following providers: [to be named with name, company name and address, URL of the company's presence on the platform and link to information on data protection; e.g. Twitter, Xing, LinkedIn, Facebook, Instagram, YouTube, TikTok].

(2) We rely on the technical platform and services of the providers for these information services. We would like to point out that you use our presences on social media platforms and their functions at your own risk. This particularly applies to the use of interactive functions (e.g. commenting, sharing, rating). When visiting our presences, the providers of the social media platforms collect, among other things, your IP address and other information that is available in the form of cookies on your device. This information is used to provide us as account operators with statistical information about the interaction with us.

(3) The data collected about you in this context is processed by the platforms and may be transferred to countries outside the European Union, particularly the USA. All of the aforementioned providers claim to maintain an adequate level of data protection that corresponds to that of the former EU-US Privacy Shield, and we have concluded standard data protection clauses with the companies (except for Xing, as this provider is based within the EU). We are not aware of how the social media platforms use the data from your visit to our account and interaction with our posts for their own purposes, how long this data is stored, and whether data is shared with third parties. Data processing may differ depending on whether you are registered and logged in to the social network or visit the page as a non-registered and/or non-logged-in user. When accessing a post or the account, the IP address assigned to your device is transmitted to the provider of the social media platform. If you are currently logged in as a user, a cookie on your device can track how you have moved around the web. Through buttons embedded in websites, the platforms can record your visits to these websites and assign them to your respective profile. Based on this data, content or advertising can be tailored to you. If you want to avoid this, you should log out or deactivate the “stay logged in” function, delete the cookies on your device, and restart your browser.

(4) As the provider of the information service, we also only process the data from your use of our service that you provide to us and that require interaction. For example, if you ask a question that we can only answer by email, we will store your information according to the general principles of our data processing that we describe in this privacy policy. The legal basis for processing your data on the social media platform is Art. 6 para. 1 sentence 1 lit. f GDPR.

(5) To exercise your rights as a data subject, you can contact either us or the provider of the social media platform. If one party is not responsible for the response or needs to obtain the information from the other party, we or the provider will forward your request to the respective partner. Please contact the operator of the social media platform directly for questions about profile creation, processing your data when using the website. For questions regarding the processing of your interaction with us on our page, please write to the contact details provided by us above.

(6) What information the social media platform receives and how it is used is described by the providers in their privacy policies (link see in the above table). There you will also find information about contact options and settings for advertisements. Further information on social networks and how you can protect your data can also be found at www.youngdata.de.

§ 7 Reach Measurement and Usage Analysis (own, anonymous statistics)

We operate our own, anonymous reach and usage measurement on our website to understand how our website is used and to continuously improve it. The processing takes place exclusively on our own servers. No data is transmitted to third parties, and no third-party services are integrated. Technical and usage data such as pages accessed, clicks and interactions, scroll depth, the device used, browser type, and screen size, the approximate origin of access (referring page), language, and – in the case of search or booking processes – technical key data such as travel period, number of people, and availability result are collected. Personal inputs such as name, email address, or phone number are not collected.
Your IP address is not stored in plain text. It is only processed in anonymized, cryptographically shortened form (hash with a daily changing key) to detect automated accesses (bots) and for rough assignment of the country of origin and is permanently not traceable to a person.
By default, this measurement is cookie-less and without access to your device storage, so no cross-device recognition takes place. Only if you have given your consent in the “Analysis” category will anonymous identifiers be stored locally in your browser to recognize recurring visits.
The legal basis for the anonymous measurement is our legitimate interest in the needs-based design and optimization of our website (Art. 6 para. 1 lit. f GDPR). As far as information is stored or read on your device, this is done exclusively on the basis of your consent (§ 25 para. 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR), which you can revoke at any time with effect for the future via the cookie settings.
The collected data will be automatically deleted after a maximum of 14 months.

• End of the Privacy Policy.

As of 15.05.2026