With this data privacy statement, the Cilentano GmbH („Cilentano“) informs you about the ways personal data are collected, processed and used on its website and about the rights the persons concerned have got. What applies in any case is the following: We collect, process and use your personal data only insofar as is allowed according to the 'Bundesdatenschutzgesetz' (BDSG; Federal Data Protection Act) and the 'Datenschutzgrundverordnung' (DSGVO; General Data Protection Regulation) as well as the area-specific data protection regulations.
Responsible controller, see Art. 4 no. 7 of the EU-Datenschutzgrundverordnung (DSGVO), is the Cilentano GmbH, Ludwig-Eckert-Str. 10, 93049 Regensburg (see our 'Legal notice'). A data protection officer is not appointed and Cilentano is not legally obligated to appoint one.
The controller has taken and implemented several technical and organizational measures to ensure as complete a protection as possible of the personal data processed via this website. Nevertheless, Internet-based data transfer might hold security gaps and complete protection can therefore not be guaranteed. For this reason you are free to transfer personal data to us by other means, e.g. by phone.
§ 1 Personal data
Personal data are all data relating to your person and which you can be identified by (e.g. name, address, e-mail address, user behavior).
§ 2 Collection and storage of personal data as well as manner and purpose of their use
(1) Use for information and visit to our website
Should you use our website only to gather information, i.e. if you do not register or transfer information to us in any other way, we collect only the personal data your browser transfers to our server automatically. This information is temporarily stored in a so-called log file.
Should you visit our website, we collect the following data, which are recorded without your participation and stored until they are automatically erased:
- IP address of inquiring browser
- Date and time of inquiry / visit
- Website from where you were referred to our site (referrer-URL)
- Time zone offset from GMT
- Content of request (precise page)
- Access status/http status code
- Amount of data transferred
- Website which has sent the request
- Browser used / type of browser, as the case may be the operating system of your computer, its interface as well as the name of your access provider
- Language and version of the browser software
- Other similar data and information serving to avert any threats in case of attacks on our information technology systems
We collect the data for the following purposes:
- to ensure that connection with our website is easily established
- to ensure convenient use of our website
- to evaluate the security and stability of the system as well as
- to ensure the permanent efficiency of our information technology systems and the technique of our website
- to provide law enforcement authorities with the necessary information for prosecution in the case of a cyber attack
- for further administrative purposes.
Legal basis for the processing of data is Art. 6 Abs. 1 S. 1 lit. f DSGVO. Our legitimate interest can be derived from the purposes for the collection of data mentioned above.
When using and processing these general data and pieces of information we draw no inference on the person concerned. The anonymized data and information are evaluated statistically as well as with the aim of increasing data protection and security at our agency in order to ensure a high level of protection for the personal data we process. The anonymized data of the server log files are stored apart from all the personal data transmitted by an individual concerned.
(2) Contact by e-mail / contact form
When you contact us by e-mail or by using our contact form, we collect necessary personal data (name, first name, address, e-mail address, phone number (landline and/or mobile)), information required for your journey. Collecting and storing these data enables us to identify you as a customer, to answer your questions and to deal with the booking concerning your journey. The processing of these data for the purpose of establishing contact with us follows your contact inquiry; pursuant to Art. 6 Abs. 2 S. 1 lit. b DSGVO it is required for the purposes mentioned in order to deal adequately with your non-binding inquiry or your booking request and with regard to both parties’ performance of obligations arising from the travel contract.
The personal data given by the person concerned are collected and stored by the controller for internal use only and for appropriate purposes. The controller might pass them on to one or several processors, e.g. a parcel service, who, on their part, deal with the personal data only on an internal basis and on behalf of the controller.
When registering on the website of the controller, the concerned person’s IP address, assigned by his/her Internet service provider (ISP), as well as the date and time of registration are also stored. Storage of these data is based on the fact that it is the only way to prevent abuse of our services and that, in the case of a criminal offense, these data might help solve it. Thus, storage of these data is required for the security of the controller. These data are not passed on to third parties, unless there is a legal obligation to pass them on or unless they are needed for legal prosecution.
Registration of the person concerned by stating personal data by his/her own choice is necessary for the controller to offer to the person concerned contents or services which, as a matter of course, can be offered only to registered users. Registered persons are free to change the personal data they have stated when registering at any time or to have them erased from the controller’s data file.
Upon request of any person concerned, the controller provides information, at any time, about the personal data which have been stored of the person concerned. Furthermore, the controller changes or erases personal data upon request or if indicated to do so by the person concerned, but for any legal obligations to retain the data. In this regard, all the controller’s employees are available as contact persons for the person concerned under firstname.lastname@example.org.
The data we have received from you are collected, processed and used in order to enable you to use the web offer (usage data) and insofar as is required for entering, performing or terminating the contract (fulfillment of contract) and for customer service. These data are not passed on to third parties without your explicit consent. All the personal data are stored only as long as is necessary for the purpose mentioned (dealing with your inquiry or completing your request) and for the fulfillment of the contract. We erase these data as soon as storage is no longer required, or restrict the processing in case of legal obligations to retain the data. Storage time of personal data is based on the respective statutory retention period. After expiry of this period it is a standard procedure to erase the appropriate data, if they are no longer required for the fulfillment or the preparation of a contract.
By sending a message to email@example.com you can object to the use or processing of your data for the purposes of promotion, market or opinion research.
For actions/operations taking place should we need to resort to appointed service providers for individual functions of our offer or want to use your data for promotional purposes see the information as of § 6 below. The criteria used to determine the period for which the data will be stored are also mentioned.
Should there be no legal basis for the processing of your personal data, we will ask for consent of the person concerned.
§ 3 Your rights as a user
Right of withdrawal: Pursuant to Art. 7 Abs. 3 DSGVO (GDPR) you have
- the right to withdraw the consent you have given to us at any time. As a consequence, we are not allowed to continue the processing of the data, which is based on this consent.
Right to information / further rights: Pursuant to Art. 15 DSGVO you have
- the right to obtain information about the personal data we process and the purposes of the processing, the category of the personal data, the recipients or categories of recipients these data are shared or will be shared with, the envisaged period for which the data will be stored,
- the right to rectification or erasure (“right to be forgotten”)
- the right to restriction of processing,
- the right to object to processing,
- the right to transfer data (data portability)
- the right to information about the source of your data, if they were not collected by us,
- the right to information about the existence of automated decision-making, including profiling and, where applicable, significant information about the details.
Right to rectification of inaccurate data: Pursuant to Art. 16 DSGVO you have
- the right to obtain immediate rectification of any inaccuracy in your personal data we have stored and to have incomplete personal data completed.
Right to erasure: Pursuant to Art. 17 DSGVO you have
- the right to erasure of your personal data we have stored, unless processing of the data is necessary for exercising the right of freedom of expression and information, for the performance of a legal obligation, for reasons of public interest or in order to establish, exercise or defend legal claims.
Right to obtain restriction: Pursuant to Art. 18 DSGVO you have
- the right to obtain restriction of the processing of your personal data, if you contest the accuracy of the data, if the processing is unlawful, you however oppose the erasure of the data, and if we no longer need them, you however need them to establish, exercise or defend legal claims, or if have objected to processing pursuant to Art. 21 DSGVO.
Right to receive personal data: Pursuant to Art. 20 DSGVO you have
- the right to receive your personal data, which you have provided us with, in a structured, commonly used and machine readable format or to transmit them to another controller.
Right to lodge a complaint: Pursuant to Art. 77 DSGVO you have
- the right to lodge a complaint with a data protection authority about our processing of your personal data. In general, you can complain to the supervisory authority at your habitual place of residence or employment or to the one at the seat of our agency.
Right to object:
Should your personal data be processed on the basis of legitimate interests as defined by Art. 6 Abs. 1 S. 1 lit. f DSGVO, you have got the right pursuant to Art. 21 DSGVO to object, on grounds relating to your particular situation, to the processing of your personal data. You can exercise your right of withdrawal by contacting us at firstname.lastname@example.org or the address mentioned below. We then no longer process the personal data, unless it is verified that for processing there are essential reasons warranting protection and outweighing the interests, rights and liberties of the person concerned or unless processing serves to establish, exercise or defend legal claims.
Right to withdraw consent:
You have the right to withdraw the consent, along the lines of data privacy, which you have given concerning the processing of your personal data at any time with immediate effect. You also have the right to object to the processing of your data for promotional purposes and for market research. In these cases contact us under email@example.com.
As to exercising the rights mentioned as well as information, requests or suggestions concerning data protection feel free to contact us under the address mentioned above or firstname.lastname@example.org.
§ 4 Transfer of data to third parties
Your personal data are disclosed to third parties only for the following, specified purposes.
We disclose your personal data to a third party, if:
- you have given explicit consent pursuant to Art. 6 Abs. 1 S. 1 lit. a DSGVO,
- disclosure is required, pursuant to Art. 6 Abs. 1 S. 1 lit. f DSGVO, to establish, exercise or defend legal claims and if there is no reason to assume that your interests in not having your data transferred are legitimate and warrant protection,
- disclosure is necessary, pursuant to Art. 6 Abs. 1 S. 1 lit. c DSGVO, for compliance with a legal obligation, and
- disclosure is lawful and, pursuant to Art. 6 Abs. 1 S. 1 lit. b DSGVO, required for the performance of contracts to which you are a party.
Apart from the collection of the above-mentioned data, information in the form of cookies passes to your web browser and is stored on your computer when you visit our website. Cookies make it easier for you to use the website, because we recognize your computer when you visit again and reentry of your data becomes easier. Cookies are small text files with configuration information, which are assigned to the browser you use and stored on your hard disk and via which the website the cookie has been 'sent' from (in this case from us) is provided with certain information.
The cookies we use help to assess the frequency of use and the number of users of our website and to offer you the complete use of the service. Cookies cannot run programs or infect your computer with viruses. They serve to make Internet offers in general more user-friendly and more efficient.
This website uses transient cookies and persistent cookies.
Transient cookies are automatically deleted once you close the browser. Transient cookies include session cookies, for example. They store a so-called session ID, with which related browser requests are assigned to one session. This way, our website can identify your computer when you return to our website. Session cookies are deleted once you log out or close the browser.
Persistent cookies are automatically deleted after a specific length of time, which might differ depending on the cookie. You can delete cookies at any time in the security settings of your browser.
The data processed with the help of cookies are necessary for the purposes mentioned in order to ensure our legitimate interests as well as those of third parties, pursuant to Art. 6 Abs. 1 S. 1 lit. f DSGVO.
Most browsers are set in such a way that they accept cookies automatically. You can, however, deactivate the storing of cookies or set your browser to inform you as soon as cookies are sent or to delete them automatically. Moreover, you can delete the stored cookies from your hard disk later at any time.
Please note that the display of the website and the user guide might be 'limited' when cookies are deleted. This limited use of our services is, in general, possible without cookies, too.
§ 6 Tracking tools
We use the following tracking measures, which is done on the basis Art. 6 Abs. 1 S. 1 lit. f DSGVO. By using the tracking measures we want to ensure a needs-based presentation and continuous improvement of our website. Furthermore, tracking measures are used to analyze the use of our website from a statistical point of view and to evaluate them with regard to improving our offer for you. These interests are legitimate as defined by the regulation mentioned.
For the respective purposes of data processing and data categories refer to the corresponding tracking tools.
a) Google Analytics
For the purpose of a needs-based presentation and continuous improvement of our website we use Google Analytics, a web analytics service offered by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; „Google“). We use this service in the form of commissioned data processing.
- browser type/version,
- operating system used,
- referrer-URL (the site visited before),
- host name of the inquiring browser (IP address),
- time of the server inquiry,
is transmitted to a Google server in the USA and stored there.
As our website uses the anonymization feature of Google Analytics, Google first 'strips' your IP address within the area of the European Union and the European Economic Area; only in exceptional cases is the full IP address transferred to the Google server in the USA and 'stripped' there.
Google processes this information on our behalf to evaluate your use of the website, to file reports on the website activities for the website owner and to provide other services for us which are related to the use of the website and the Internet. This information might be transmitted to a third party, if there is a legal obligation to do so or if a third party is commissioned to process these data.
Google will in no case link your IP address transmitted by Google Analytics to other Google data. IP addresses are anonymized, thus making it impossible to identify any person concerned (IP masking).
You can prevent the cookies from being installed or stored by selecting the appropriate setting of your browser software (see § 3); we ask you to note that you might then not be able to use all the functions of this website to their full extent.
Furthermore, collection of the data generated by the cookie and related to your use of the website (including your IP address) as well as processing of these data by Google can be prevented by downloading and installing a browser add-on:
You can object to the collection and processing of data with the help of Google Analytics at any time and with immediate effect for the future. In this case you can use the plug-in offered by Google:
This website uses Google Analytics with its additional feature „_anonymizeIp ()“. IP addresses are 'stripped' before being processed, thus they cannot be linked to any person concerned.
The use of Google Analytics complies with the requirements which the German data protection authorities and Google have agreed upon. Further information regarding data protection in connection with the use of Google Analytics is provided, for example, by Google Analytics help:
We use Google Analytics including the functions of Universal Analytics. Universal Analytics enables us to analyze activities on our sites and integrate data across multiple devices (e.g. access via laptop and later via tablet). This is realized by assigning, in pseudomized form, a user ID to a user. Such an ID is assigned, for example, when you register for a customer account or log into your customer account. However, no personal data are transmitted to Google. The additional functions of Universal Analytics together with Google Analytics in no way restrict data protection measures, such as IP masking or browser add-on.
b) Google AdWords (including AdWords Conversion and Dynamic Remarketing)
This website uses services of Google AdWords (Google AdWords Conversion und Google AdWords Dynamic Remarketing) to create pseudomized user profiles for advertising and market research purposes. Should you have been 'sent' to our site via a Google ad, Google AdWords stores a cookie (see § 5) on your computer. The data transmitted from your browser (e.g. information about the browser used or the search history as well as data from cookies) are collected and processed by Google in the form of pseudomized user profiles.
A tracking cookie is used for Google AdWords Conversion, if a user clicks an ad run by Google. These cookies expire after 30 days and do not serve to identify any person concerned. Should the user visit certain pages on the website of the AdWords client (Cilentano) and should the cookie have not yet expired, Google and the client are able to tell that the user has clicked on the ad and has been referred to this site. Each client is assigned an individual cookie, i.e. cookies cannot be tracked via the websites of AdWords clients.
The information collected with the help of the cookie serves to compile conversion statistics for AdWords clients. As a result, we get to know about the total number of users which have clicked an ad and have been referred to a site with a conversion tracking tag. We do not, however, receive any information which would enable us to identify the user. There is no way to connect your personal data to your usage data.
By means of Google’s dynamic remarketing technology those users which have been to our website and have shown interest in our offer are approached again by specific advertisement on the sites of the Google partner network. The impression (display of the ad) is generated with the help of cookies. Text files help analyze a user’s behavior while on the website, which can then be used for personalized product recommendations and interest-based advertising.
Further information regarding data protection in connection with the use of Google AdWords is found at: https://www.google.de/policies/technologies/ads/.
If you do not want to be included in the tracking measure, you can object to a required cookie being placed – for example by selecting the browser setting which completely deactivates the automatic placing of cookies. You can deactivate cookies for conversion tracking by setting your browser to block cookies from the following domain: „googleadservices.com". You can object to the collection and processing of data in connection with Google AdWords by changing your Google ad settings at www.google.com/settings/ads. Alternatively, you can turn to the opt-out page of the Network Advertising Initiative (https://www.networkadvertising.org/managing/opt_out.asp) and select an opt-out cookie, which cuts off processing by Google AdWords.
Google’s data privacy statement concerning conversion tracking is found at:
By using our websites you agree to the processing of the data collected about you by Google and to the above-described way the data are processed as well as to the purpose mentioned. You can prevent cookies from being stored by selecting the appropriate setting of your browser software; we ask you to note that you might then not be able to use all the functions of this website to their full extent. Furthermore, you can prevent Google from collecting and then processing the data generated by the cookies and relating to your use of the websites by following the link to
where you download the browser plug-in available at DoubleClick opt-out extension and install it. Alternatively, you can deactivate DoubleClick cookies on the page of the Digital Advertising Alliance by following the link:
§ 7 Social Media Plugins and tools
On the basis of Art. 6 Abs. 1 S. 1 lit. f DSGVO we use Social Plugins of the social networks Facebook, Twitter and Instagram on our website to make our agency more widely known. The underlying promotional purpose is to be regarded as a legitimate interest as defined by the DSGVO. Responsibility for complying with data protection regulations is to be taken by the respective provider. We integrate these plugins by way of the so-called purpose-click method in order to offer visitors to our website the highest possible protection.
a) Facebook Social Plugins
Social Plugins („Plugins“) of the social network facebook.com, which is offered by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”), have been placed on our website. The Facebook plugins can be identified by one of the Facebook logos (white „f“ on blue tile / „Thumbs up“-sign) or are marked by the add “Facebook Social Plugin”.
If you access a page of our website which includes such a plugin, your browser establishes direct connection with the servers of Facebook. The content of the plugin is transmitted by Facebook straight to your browser, which integrates it into the website. We, therefore, have no influence on the amount and content of the data Facebook collects with the help of these plugins, but pass on to you the information available to us (for the information Facebook offers go to https://www.facebook.com/help/186325668085084).
By placing the plugins, Facebook gets to know about your / your browser’s access of the corresponding page of our website. Should you then be logged in at Facebook, Facebook can link your visit to your Facebook account. Should you interact with the plugins, e.g. click the 'like' or 'share' button or make a comment, the corresponding information is transmitted from your browser to Facebook and stored there. Furthermore, the information is released on Facebook and accessible for your Facebook friends.
Even if you are not a Facebook member, Facebook might find out your IP address and store it.
Facebook can use this information for purposes of advertisement, market research and tailoring its websites to the needs of the market. Facebook creates usage, interest and relationship profiles, for example to evaluate your use of our website with regard to the ads you are shown on Facebook, to inform other Facebook users about your activities on our website and to provide other services linked to the use of Facebook.
If you are Facebook member, but do not want Facebook to collect data about you via our website and link them with the membership data stored with Facebook or to your Facebook account, log out of Facebook and delete cookies that have been placed before visiting our website (see above § 5).
b) Twitter Plugins
Social Plugins („Plugins“) of the social network of Twitter, which is offered by Twitter Inc. at 795 Folsom St., Suite 600, San Francisco, CA 94107, USA, have been placed on our website. The Twitter plugin can be identified by the symbol of the bird and the wording „Tweet“. See the survey:
If you access a page of our website which includes such a plugin, your browser establishes direct connection with the servers of Twitter. Twitter then receives the information that you have visited our website with your IP address. Should you be logged in at Twitter at that time by clicking / using one of the plugins („Tweet Button“), Twitter can link the visit to your account. If you interact with the plugins, e.g. by clicking a „tweet“ button, the corresponding information is transmitted from your browser to Twitter and stored there. Even if you are not a member of Twitter or have logged out of Twitter before visiting our website, Twitter might still find out your IP address and store it. We, the owners of this website, ask you to note that we receive no information about the contents of the transmitted data or their processing by Twitter.
The plug-in provider stores your given data as user profiles and uses these for purposes of advertisement, market research and /or tailoring his website to the needs of the market. You have the right to object to these user profiles being generated and in order to exercise this right you have to turn to the plug-in provider.
If you are a Twitter member, but do not want Twitter to collect data about you via our website and link them to your data stored with Twitter, you have to log out of Twitter and delete cookies that have been placed before visiting our website. More information about cookies is found in this data privacy statement (see above § 5 and https://twitter.com/privacy)
c) Pinterest („Pin-it-button“)
We use the social network Pinterest of Pinterest Inc., 808 Brannan St., San Francisco, CA 94103, USA (henceforth called „Pinterest“). By your clicking the „Pin-it“ button Pinterest receives the information that you have accessed the corresponding page of our website. If you are logged in at Pinterest, Pinterest can link your visit to your Pinterest account. Pinterest stores the data transferred by clicking the „Pin-it“ button in the USA. If you do not agree with this, you have to log out of your Pinterest account before clicking the „Pin-it“ button.
d) Font Awesome
Concerning uniform representation of fonts, this site uses so-called web fonts supplied by Fonticons Inc. When visiting a site, your browser stores the necessary web fonts in your browser cache in order to represent text and type of font correctly.
For this purpose, the browser you use has to link with the servers of Fonticons Inc. This way Fonticons Inc. gets to know that your IP-address has visited our website. Our use of web fonts serves to guarantee a uniform and attractive representation of our online offer. This is a legitimate interest according to Art. 6 Abs. 1 S. 1 lit. f DSGVO.
Should your browser not support web fonts, your computer will use a standard font.
Further information about Font Awesome is found at fontawesome.com/help and in the data privacy statement of Fonticons, Inc.: fontawesome.com/privacy.
§ 8 Trustpilot
Should you not agree, you need only send us an e-mail.
§ 9 Newsletter / Newsletter subscription
Cilentano informs its customers and business partners about the agency’s offers by newsletter at regular intervals. Users have got the possibility to sign up for the newsletter. If you register for our newsletter by using the sign-up mask, the personal data (name, address, e-mail address) you have put down when registering are transmitted to the controller and stored. A person concerned can receive our newsletter only (1) if the person concerned has got a valid e-mail address and (2) if the person concerned signs up for the newsletter. For legal reasons and using the double opt-in process, a confirmation e-mail is sent to the e-mail address a concerned person has for the first time submitted in the subscription form. The confirmation e-mail serves to confirm whether the owner of the e-mail address is the person concerned and has authorized the sign-up for the newsletter. Cilentano can pass on the personal data to a processor, e.g. a lettershop, where they are also dealt with only internally and on behalf of the controller. Your data are not passed on to unauthorized third parties. When someone subscribes for our newsletter, we also store the IP address assigned by the Internet service provider (ISP) to the computer system the person concerned uses at the time of registration as well as the date and time of registration. Collecting these data is necessary in order to be able to retrace the (possible) abuse of the e-mail address of a person concerned later on and is therefore required to ensure legal protection of the controller.
The personal data collected when someone signs up for the newsletter are used only for mailing our newsletters. Furthermore, newsletter subscribers can be informed by e-mail, if this is required for the operation of the newsletter service or a related registration, which could be the case if changes occur regarding the newsletter offer or technical conditions.
A person concerned can cancel subscription to our newsletter at any time. The person concerned can withdraw consent to the storage of the personal data passed on for the newsletter sign up at any time. If you want to withdraw consent, you need only click the link which is included in each newsletter. You can also unsubscribe from the newsletter on the website of the controller or inform the controller in a different way. You can object to the use and processing of your data for the purposes of advertising, market or opinion research by sending a message to email@example.com and you can unsubscribe from the newsletter at any time free of charge (at basic rates) by contacting firstname.lastname@example.org.