1. Data Controller
CORENDON TOURISTIK GMBH Zentralgebäude OST - Raum 5.044 Terminal Ring 1 D-40474 DÜSELDORF Airport Germany, entered in the Commercial Companies Register of the Federal Republic of Germany under the number HRB 42194, operating under the brand “Corendon Flights” is the Controller of your personal data.
Corendon Flights has appointed a Data Protection Officer - Ms. Nicole Tehrani.
Contact with the data administrator:
ap-datenschutz GmbH
Hohenstaufenring 8
50674 Köln
+49 221 99989 030
2. Purpose and legal basis for document processing
Personal data is processed for the following purposes:
- Sale of tourist services
- Organization of tourist events
- Sale of air tickets
- Own marketing
- Issuing invoices and bills
- Contact and correspondence
- Data archivization
Corendon Flights processes the personal data:
- in order to enable the conclusion and then implementation of: a contract for the purchase of a tourist service, a contract for participation in a tourist event with a tourist organizer and a travel insurance contract with the Insurer, as well as under the legitimate interest of the data controller for the purpose of providing care and contact in matters related to a tourist event booked through us,
- in order to promote the services offered by Corendon Flights and learn about your preferences, as part of the legitimate interest of the data controller. Thanks to this, we will be able to adjust the services and the content provided to you to your expectations,
- in order to keep accounting books and settlements concluded through us through contracts for participation in a tourist event and travel insurance contracts, as well as other contracts concluded with Corendon Flights,
- as part of the legitimate interest of the Data Administrator to defend our rights and pursue claims arising from our business activities, which may involve the need to process personal data for this purpose.
3. Period of personal data processing
The data is stored until the purposes for which it was collected are achieved, claims expire, archiving deadlines specified in legal provisions expire, and consent to data processing is withdrawn.
The time limitation Corendon Flights will store your data depends on the purpose for which it is processed:
- In the case of data processing for the purpose of concluding and implementing a contract for a tourist event and defending our rights and pursuing claims for our business activities, we may store the personal data provided to the extent necessary to pursue claims and defend our rights. The storage time results from the provisions of law.
- In the case of data processing in order to promote the services offered and learn about your preferences, we will process the personal data provided by you for as long as you use our services. You can report to us at any time that you do not want to receive such content from us. Then we will stop shipping them as requested.
- In the case of data processing for tax and accounting purposes, we may store the data provided by the data to the extent and for the period required by law - 5 years from the beginning of the year following the financial year to which the data relates, as well as after the completion of the provision of services in the scope and for the period of necessary for the settlement of the contract.
After the aforementioned periods, the personal data provided is deleted or anonymized.
4. Data recipients
The data is available to the following categories of recipients:
- Air carriers, tour operators, hotels, insurance companies and banking institutions with which Corendon Flights has concluded agency contracts, contracts for brokerage in the sale of products and / or the provision of services, to the extent necessary for the proper performance of connecting contracts or contracts concluded through Corendon Flights.
- Entities processing personal data at the request of the administrator to the extent necessary to perform the commissioned service with which contracts for entrusting the processing of personal data are concluded.
- State authorities on the basis of legal provisions as part of ongoing proceedings.
Maintaining the confidentiality of your data is a priority for Corendon Airlines. Due to the need to ensure an appropriate organization, e.g. in the field of technical and IT infrastructure or in the current affairs of our business, the following data recipients may have access to the personal data provided by you:
- Authorized employees of Corendon Flights.
- Entities authorized to receive Personal Data on the basis of legal provisions.
- Service providers supplying Corendon Flights with technical, organizational and company management solutions (e.g. courier and postal companies).
- Providers of legal and advisory services and supporting us in pursuing due claims and defending our rights (in particular, law and tax offices, debt collection companies).
- Air carriers, tour operators, hotels, insurance companies and banking institutions with which Corendon Flights has concluded agency contracts, contracts for intermediation in the sale of products and / or the provision of services, to the extent necessary for the proper performance of contracts or contracts concluded through us.
5. Information on voluntary or obligatory data provision
Providing personal data in cases specified by law is obligatory. Then, if the data is not provided, it is not possible to achieve the goal. In other cases, e.g. marketing, providing personal data is voluntary. Providing personal data by you is obligatory and allows Corendon Flights to take action before concluding the contract and for its implementation, as well as preparing offers for services offered by Corendon Flights.
6. Rights of the owner of personal data
The person whose data is processed has the right to access this data, correct it, request its removal, as well as the right to limit processing, transfer data, object to the processing of personal data, in the event of consent to its withdrawal at any time.
The possibility of exercising certain rights depends on the legal basis on which the specific processing is based, as well as the purpose and method of data processing. The data controller is not obliged to exercise the rights in each case and to the same extent.
An application for the exercise of the right may be submitted to the following address: info@ap-datenschutz.de, by letter: ap-datenschutz GmbH, Hohenstaufenring 8, 50674 Köln or by calling +49 221 99989 030.
You have the right to lodge a complaint with the supervisory authority of the Bundesbeauftragten für den Datenschutz und die Informationsfreiheit (BfDI) https://www.bfdi.bund.de/DE/Service/Kontakt/kontakt_node.html
or the President of the Office for Personal Data Protection (PUODO) Address: Stawki 2 Street , 00-193 Warsaw
7. Categories of data
The processed personal data apply to Corendon Flights customers as well as employees, contractors and other persons employed on the basis of civil law contracts.
8. Data transfer to third countries
Due to the fact that Corendon Flights provides services also outside the European Union, your personal data, in connection with the destination selected by you, may or will be transferred outside the European Economic Area to the extent necessary to perform the contract concluded with you, including to countries that have not been recognized by the European Commission as ensuring an adequate level of protection of personal data.
9. Updating the Privacy Policy
The policy is verified on an ongoing basis and updated if necessary. The current version is valid from March 1, 2022.
10. Information Clause
The privacy of Corendon Flights users is our priority. That is why we make sure that your data is safe with us. It is about personal data and data stored in cookies and related technologies that we collect when you make a reservation / application for a tourist event or use the website www.corendonflights.com. When searching for or comparing offers on our website, we only save cookies.
Only when you start the booking process and fill out the contact form, your personal data such as: surname, first name, date of birth, address, email will be saved.
The solutions we use comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (General Data Protection Regulation), the so-called GDPR.
The administrator of the personal data provided by you at the stage of searching for a service or tourist event as well as after booking is Corendon Flights.
- The administrator, in the course of its business, may process the following data:
- contractors, including suppliers and potential suppliers;
- partners, employees, statutory representatives as well as representatives and proxies of the above-mentioned contractors, including contact persons disclosed.
- The administrator may process data provided directly by contractors or persons acting on their behalf, such as:
- name and surname, name of the contractor, business address and other correspondence addresses;
- registration numbers in the relevant registers;
- contact details (telephone number, e-mail address);
- data on the status in the contractor's structure (e.g. function, position, scope of authority).
- In addition, the administrator may, to the extent necessary, dictated by the need to verify the contractor, obtain additional information from publicly available sources, such as business and professional registers kept on the basis of legal provisions.
- The collected personal data referred to in point 1 will be processed on the basis of:
- Art. 6 sec. 1 lit. b) GDPR, when the processing of this data is necessary for the performance of the contract and the fulfilment of obligations arising from such a contract (e.g. name and surname, contact and registration details). Providing the data necessary to bind the contract or its implementation and settlement is mandatory. For this purpose, it may process personal data during the term of the contract;
- Art. 6 sec. 1 lit. c) GDPR, when the processing of this data will be necessary for the performance of obligations under the law. Providing data is mandatory, and the obligation results from legal provisions. For this purpose, the Administrator may store data during the duration of such an obligation (e.g. data contained in invoices and documents confirming the activities and transactions undertaken) for the purposes of the legitimate interests of the Administrator or third parties, in a situation where such interests override the interests or fundamental rights and the freedom of data subjects, pursuant to Art. 6 sec. 1 lit. f) GDPR. Such legitimate interests are, for example:
- keeping current communication and settlements;
- correspondence in the scope of undertaken economic activities, including the implementation of contracts and competition and tender procedures;
- verification of the identity of persons acting on behalf of Corendon Flights contractors;
- standing, pursuing and protecting claims arising from the activities carried out and protection against such claims - during the period of expiry of individual claims.
- The administrator may disclose personal data:
- entities and persons acting on request on the basis of concluded contracts for entrusting the processing of personal data in the field of legal, IT and organizational support,
- state authorities, pursuant to the provisions of the law, as part of the proceedings conducted.
- You have the right to access your data, rectify it and the right to delete it, limit processing, raise objections and the right to transfer data - within the limits specified in accordance with art. 15-22 GDPR. Each person has the right to lodge a complaint if he / she considers that the processing of personal data is unlawful.
Funpage Privacy Policy
The following information are for users of social media, and in particular for fans of our fan page, in order to provide information on the collection of personal data, the reasons for their processing and the rights of users.
The administrator of your personal data is CORENDON TOURISTIC GMBH GMBH Zentralgebäude OST - Raum 5.044 Terminal Ring 1 D-40474 DÜSELDORF Airport Germany entered in the Commercial Companies Register of the Federal Republic of Germany under the number HRB 42194, operating under the brand name Corendon Flights.
You can contact us:
by letter: to the address of the registered office
by e-mail to the following e-mail address: servicecenter@corendonflights.com
by phone at +48 22 152 0488
Data available on the website and on the FB, IG, LinkedIn profile.
1. Protection of personal data
We process all personal data that we collect on our Fanpage located on Facebook (hereinafter: "FB") as the administrator in accordance with the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016 on the protection of natural persons in in connection with the processing of personal data and on the free movement of such data and the repeal of Directive 95/46 / EC (hereinafter: "GDPR"). The administrator of your data is also Facebook Ireland Ltd. If you use FB, it means that you have concluded a contract with him , which entitles you to use FB Information on how Facebook Ireland Ltd. processes personal data can be found at: https://pl-pl.facebook.com/privacy/explanation.
We use technical measures required by the current provisions on the protection of personal data to prevent the acquisition and modification of personal data sent electronically by unauthorized persons, i.e. as part of our Fanpage. FB also uses its own security. For more information on this subject, you should contact FB https://www.facebook.com/privacy/explanation.
2. Rights of the owner of personal data
Due to the fact that Corendon Flights processes your personal data, you have the right to:
- access to your personal data,
- rectify them,
- request the deletion of your personal data when the GDPR allows it,
- restriction of processing, to the extent specified in the GDPR.
If you want to exercise your rights or find out more about them, please contact us (link).
If you want to exercise your rights against FB, more information is available at https://pl-pl.facebook.com/privacy/explanation
If you claim that we are processing your personal data unlawfully, you can lodge a complaint with the supervisory authority. In Poland, it is the President of the Data Protection Office. www.uodo.gov.pl while in Germany the Bundesbeauftragten für den Datenschutz und die Informationsfreiheit (BfDI) https://www.bfdi.bund.de/DE/Service/Kontakt/kontakt_node.html.
Using of Funpage
If you use our Fanpage, please note that we process your personal data for the following purposes:
- responding to private messages that you send to us,
- conducting discussions as part of comments under individual posts,
- sharing our posts with you as followers of our Fanpage,
- informing about our services and about ourselves by means of posts that we place on our Fanpage, including sponsored posts that are displayed to a wider group of FB users,
- statistical consisting in presenting us by Facebook Ireland with data on the display of Corendon Flights' posts, their ranges, number of interactions, demographic data of our followers; the data presented to us by Facebook Ireland Ltd. is statistical data.
Providing personal data when using Funpage is voluntary. However, due to the rules applied by FB, we will see your name, surname and photo if you write to us or comment on Corendon Flights.
Through the operation of our Funpage, we collect and process the following types of personal data:
- Facebook ID (usually containing your first and last name, which is not verified by us in any way to confirm the accuracy of the data),
- profile photo (in some cases we can get to know your image thanks to it),
- other photos (which can also show an image) resulting from the fanpage-user relationship. Posting photos under our posts is voluntary on your part,
- the content of your comments and the content of the conversation conducted by the Messenger application (thanks to it we can find out about your e-mail address, telephone number and the description that you have entered into in connection with the circumstances of our correspondence).
We process your personal data due to the legitimate interest of Corendon Flights, i.e. pursuant to art. 6 sec. 1 lit. f GDPR. The legitimate interest of Corendon Flights is to respond to your messages and comments, provide you with posts, inform about our services and about ourselves through them, analysis of statistics related to Fanpage.
Your personal data will be transferred to companies with whom we have signed data processing agreements in the field of IT support.
We will store your data for the time needed to resolve your case. Depending on its type, also for the time needed to prove that we have terminated it, i.e. for the period of limitation of claims. We will also process personal data while you are watching Funpage Corendon Flights.
Please be advised that you can always delete your comments under our posts, stop following us or opt out of having an account on FB.
Cookies policy
We use cookies to enable the use of the website. We inform you which cookies will be stored. You can change these settings in your browser at any time. Restrictions on the use of cookies may affect the correct operation of the website.
Cookies are commonly known as "cookies". These are small text files containing information, sent by a web server and saved on the user's side on a computer, laptop, mobile device or other device while browsing the web. The browser sends the information contained in cookies, e.g. saved on the hard drive, back to the visited page or to another website that recognizes the cookie file after each subsequent visit to the page. The parameters of these files allow the information contained in them to be read only by the server that created them. This allows a given website to recognize the user's device and display a website tailored to the preferences. Cookies are most often used in the case of websites that require logging in, advertisements and to monitor the activity of visitors, and they contain the domain name of the website they come from, their storage time on the end device and a unique number.
Cookies are not used to identify users and their identity is not determined on their basis. They are not harmful and do not affect the way the devices work, nor do they change the configuration of the devices or the software. The default parameters of cookies allow the information contained in them to be read only by the server that created them.
Cookies files:
- facilitate the use of the website,
- remember user settings and individual preferences,
- they are used to keep viewing statistics for individual pages,
- contain information about the history of the user's communication with the website,
- are used for technical purposes related to server administration.
By using the website www.corendonflights.com , you can receive cookies from third parties such as Facebook, Google, Twitter, as well as from companies implementing advertising campaigns on the Corendon Flights website at the request of advertisers. You can find more information on these cookies on the websites of individual third parties. Detailed information on how to do this can be found on the websites of the developers of the browsers: Internet Explorer, Chrome, Safari, Firefox, Opera.
Newsletter
The administrator of your personal data is CORENDON TOURISTIC GMBH GMBH Zentralgebäude OST - Raum 5.044 Terminal Ring 1 D-40474 DÜSELDORF Airport Germany entered in the Commercial Companies Register of the Federal Republic of Germany under the number HRB 42194, operating under the brand name Corendon Flights.
You can contact us:
by post: to the address of the registered office
by e-mail to the e-mail address: servicecenter@corendonflights.com
by phone at +48 22 152 0488
Your personal data will be processed for the purpose of contact. The consequence of not providing an e-mail address is the inability to conduct correspondence. Your personal data will be kept until and to the extent necessary to conduct correspondence. You have the right to access your data and the right to rectify, delete, limit processing, and the right to object. You have the right to lodge a complaint with the President of the Personal Data Protection Office www.uodo.gov.pl and in Germany with the Bundesbeauftragten für den Datenschutz und die Informationsfreiheit (BfDI) https://www.bfdi.bund.de/DE/Service/Kontakt/ contact_node.html
The data may be made available to processors on the basis of concluded data processing agreements.