Privacy Policy

I. Introduction

1. Overview

We are pleased about your visit and your interest in our Mapify Offers. HomeToGo GmbH (“HomeToGo”) operating under its brand Mapify (hereafter referred to as “Mapify”, “we” or “us”) is the responsible party in the sense of data protection law for the processing of your data when using the Mapify Offers (Pappelallee 78/79; 10437 Berlin, privacy@mapify.travel).
The protection of your privacy when using our Offers is an important concern for us. We have therefore created data protection information in which we explain how we handle your personal data. We reserve the right to adjust the content of this data protection notice from time to time. We therefore recommend that you read the data protection information again at regular intervals.

This Privacy Policy on the processing of your personal data applies on the website at https://mapify.travel as well as in the Mapify apps and other Mapify services and social media channels (collectively “Offers”).

2. Data Protection Officer

HomeToGo’s Data Protection Officer for the Mapify Offers can be reached at privacy@mapify.travel (Waterside DS GmbH, Bergstr. 28, 22095 Hamburg, Germany).

II. Purposes of data processing, legal bases and legitimate interests

We process personal data for specified purposes, which we explain in detail below for your information. The extent to which and the manner in which your data is specifically processed depends in particular on which services, functionalities and offers on the website or in the app you make use of in detail. In particular, we process data so that:

  • You can access and visit our website and we can protect our website, app and other systems from security risks;
  • You can register with us to become part of our community;
  • You can find out about trips and tours;
  • You can contact us; and

We can optimise the content of our Offers and make them user-friendly and tailored to your needs.

Further processing of your personal data than mentioned in this Privacy Policy will only be carried out in cases where a legal provision expressly entitles or obliges us to do so or where you have explicitly consented to the data processing. We will inform you accordingly about any changes of purpose, taking into account the legal requirements.

1. Accessing our websites

You can visit our Offers purely for information purposes without providing any further personal data. In this case, only the technical access data transmitted by your browser will be automatically stored about your visit to our Offers, i.e. the name of your internet service provider, the page from which you are visiting us, the date and time of your visit and the identification data of the browser/operating system used. The web server necessarily also stores your IP address, which under further conditions may enable an assignment to your person. In addition, we use cookies in order to be able to make our offers available to you in an optimised and needs-oriented manner, even in the case of purely informative use (for details in this regard and your corresponding design options, see below in the section “Use of cookies and associated functions/technologies”).
The storage of the aforementioned access data takes place within the framework of so-called server log files on our web server and is necessary for technical reasons in order to provide a functional offer and to ensure system security. In addition to the above-mentioned purposes, we use access data exclusively for the needs-based design and optimisation of our website, purely statistically and without any inference to your person.
If you visit our website in order to obtain information about our Offer and other services or to use them, the temporary storage of access data and log files is based on Art. 6 para. 1 lit. b GDPR (legal basis), in particular for the implementation of pre-contractual measures. In addition, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the temporary storage of access data and log files. Our legitimate interest here is to be able to provide you with a technically functioning and user-friendly website and to ensure the security of our systems.
The access data collected in the course of using our website is only stored for the period of time for which this data is required to achieve the above-mentioned purposes. Your IP address is stored on our web server for the minimum number of days required to fulfill the purpose.

2. Data processing for registration on the Mapify platform and Mapify mobile apps

a. Registration and Membership
Personal data is collected and stored by us when you provide it to us as part of your registration. In order to register with Mapify, We require the following data from you: First and last name, username, email address, and a password.

We use the personal data you provide to Us as part of the registration process to provide you with access to Our network and store it in Our user database. Within the scope of your membership, we process the data you have collected yourself, such as pictures and their descriptions and data on the presentation of your travel experiences, in order to make them available to members and other website visitors. The legal basis for the collection and further processing of this data as part of your membership is the user contract concluded with your registration in accordance with Art. 6 para 1 lit. b GDPR. You can cancel your user account at any time by setting it to inactive in the member area and asking us to delete your account. The storage of the technical access data collected during the submission process is carried out for the purpose of the technical provision of the registration options as well as to ensure system security on the basis of Art. 6 para. 1 lit. f GDPR (legal basis) and serves to protect our legitimate interests in providing a functional network.
We store the personal data collected in connection with your registration for the purpose and for the duration of your registration with us.

b. Facebook-Connect
We offer our users the possibility to register for our service with Facebook Connect. An additional registration is therefore not necessary. Facebook Connect is an offer from Facebook Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland ("Facebook ").
To register, you will be redirected to the Facebook page, where you can register with your user data. This links the Facebook profile and our service. Through the link, we automatically receive the publicly viewable profile and the e-mail address from Facebook Inc. We only use the first and last name, date of birth and email address from this data. This information is required for the conclusion of the contract if you wish to use Facebook Connect to register with us.
The legal basis for processing your data when registering with Facebook Connect is Art. 6 para. 1 lit. b. GDPR and is based on your wish to use this additional service as part of your membership.
For further information on Facebook Connect and the privacy settings, please refer to the Privacy Policy and the Terms of Use of Facebook Inc. The use of Facebook Connect is subject to Facebook’s Privacy Policy and Terms of Use, which you can find at https://www.facebook.com/about/privacy/your-info-on-other.

c. Apple Login
If you create a user account with us via Apple (Apple Login) or use our application on Apple end devices, we process personal data such as your email address and name stored in your Apple account (according to your settings in the Apple account, you can also hide this data and have an email address generated by Apple sent to us).
The legal basis for processing your data when registering with Apple Login is Art. 6 para. 1 lit. b. GDPR and is based on your wish to use this additional service as part of your membership.

d. Customer service requests
Personal data is collected and stored by us when you transmit it to us (e.g. by email). In principle, it is your free decision whether and which information you provide us with in corresponding contact requests. If you contact us by email, we will store the data you provide. We use the personal data provided to us as a result of an email enquiry exclusively for processing the respective contact or enquiry.
We use the GSuite service of Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland to send emails following customer support enquiries. Your email address and your first and last name (for personalising the email) are processed in order to send the email. There is an order processing relationship with Google. Further information can be found in Google’s privacy policy.

If you contact us within the scope of an existing contractual relationship or contact us in advance for information about our services, the data and information you provide will be processed for the purpose of processing and responding to your contact request in accordance with Art. 6 para 1 lit. b GDPR (legal basis).

We store the personal data collected in connection with your contact for the purpose of and for the duration of processing your enquiry. After the final completion of your request, this data will be deleted.

3. Online presence and website optimisation

a. Typeform
We use Typeform on our website and in our communication with prospects and customers. Typeform is a questionnaire software that allows the establishment of a direct question and answer communication in real time with visitors to the Typeform website. The developer of the Typeform component is typeform SL, Carrer Bac de Roda, 163, local, 08018 - Barcelona (Spain).

The legal basis for the processing of this data is Art. 6 para. 1 lit. f GDPR.

We delete the collected data points as soon as they are no longer needed for our purposes. However, according to Art. 6 para. 1 lit. f GDPR, we have a legitimate interest not to delete the data automatically, but to store it in order to use it to create target groups (for example, for remarketing). This historical data also supports us in making a sound analysis and optimising our services and Offers.

Information on Typeform can be found at https://admin.typeform.com/to/dwk6gt.

b. Google Cloud Image API
We use the Google Cloud Image API application to analyse the images you upload and automatically associate this with places and travel experiences. This also allows us to identify and block inappropriate content such as adult or violent content. During the analysis, there is the possibility that persons depicted are recorded. Neither facial recognition nor any other identification takes place. The legal basis for the use is the user contract according to Art. 6 para. 1 lit. b GDPR.

c. Google Maps integration
On our website we use the Google Maps API of Google Ireland Limited, Gordon House, Barrow Street Dublin 4. Ireland A (hereinafter: “Google”). This allows us to show you interactive maps directly on the website and enables you to conveniently use a map function. In this context, a cookie may be used. The information generated by the cookie about your use of our website, such as the visit to the relevant sub-page, browser type/version, operating system used, referrer URL (the previously visited page), host name of the accessing computer (IP address) and time of the server request.
The legal basis for the processing of the users’ personal data is Art. 6 para. 1 lit. f GDPR.

This processing helps us to improve our site and optimise the user experience. For more information on data protection in connection with Google Maps, please see the Google privacy policy.
You can object to this data processing by changing the corresponding settings in the Privacy Centre or Google’s activity settings.

d. YouTube integration
We have integrated YouTube components on this website. YouTube is an Internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment on them, also free of charge. YouTube allows the publication of all types of videos, which is why complete film and television programmes, but also music videos, trailers or videos made by users themselves can be accessed via the Internet portal.
Each time one of the individual pages of this website operated by the data controller is called up and on which a YouTube component (YouTube video) has been integrated, the Internet browser on the information technology system of the data subject is automatically caused by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube.

Further information on YouTube can be found at https://www.youtube.com/yt/about/de/. Within the scope of this technical procedure, YouTube and Google receive information about which specific sub-page of our website is visited by the data subject.
The operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Ireland Ltd.
The legal basis for the processing of the users’ personal data is Art. 6 para. 1 lit. f GDPR.

If the data subject is logged in to YouTube at the same time, YouTube recognises which specific sub-page of our website the data subject is visiting when a sub-page containing a YouTube video is called up. This information is collected by YouTube and Google and assigned to the respective YouTube account of the person concerned.
This helps us to continuously improve our websites and their user-friendliness. These purposes are also our legitimate interest in processing the data according to Art. 6 para. 1 lit. f GDPR. By anonymising the IP address, the interest of users in the protection of their personal data is sufficiently taken into account.

The privacy policy published by YouTube, which can be accessed at https://www.google.de/intl/de/policies/privacy/, provides information on the collection, processing and use of personal data by YouTube and Google.

4. Data processing for the newsletter and existing customer care

a. Newsletter dispatch
On our website, We offer you the opportunity to sign up for our newsletter. If you have registered for our newsletter, your email address will be used for the purpose of advertising our services until you unsubscribe from the newsletter. In order to ensure that no mistakes have been made when entering the email address, we use the so-called double opt-in procedure: After you have entered your email address in the registration field, We will send you a confirmation link. Only when you click on this confirmation link will your email address be added to our mailing list. You can revoke your consent declared in this way at any time with effect for the future. You can unsubscribe at any time either by clicking on the link at the end of each newsletter mailing or by sending us an email.

We use the Amazon Web Services (AWS) service of the company Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855, Luxembourg to send newsletters. Your email address and your first and last name (for personalising the email) are processed in order to send the newsletter. There is an order processing relationship with AWS.

The legal basis for the collection and processing of your data for sending newsletters is your consent in accordance with Art. 6 para 1 lit. a) GDPR, which you can revoke at any time. The legality of the data processing already carried out remains unaffected by the revocation. There is a legitimate interest according to Art. 6 para. 1 sentence 1 letter f) GDPR to have the data processed by AWS.

For more information, please see the AWS privacy policy at aws.amazon.com/en/privacy.

b. Interest-based advertising
To ensure that you also receive information that is presumably of interest to you, we categorise your user profile. Information about your searches is used for this purpose. Based on this information, we adapt our dispatch of newsletter articles and advertising emails. The aim is to send you advertising that is geared to your actual needs and not to send unnecessary advertising.

The legal basis for the aforementioned processing is in each case Article 6 para 1 lit. f) GDPR. The processing of existing customer data for advertising purposes in this way is to be regarded as a legitimate interest.

c. Push Messages
In our application we offer the possibility to activate push notifications. These contain brief information about relevant topics and news about our services, even if you are not currently using the application. When you allow or activate push notifications, a token is assigned to your end device. In the process, data is collected and transmitted (push ID, IP address, access times, advertising ID if applicable, location data if applicable). In addition, data on the use of the push notifications (such as opening rate or display duration) is collected and stored, which serves to improve and design our offer in line with your interests. You can activate or deactivate the push notifications at any time in the settings of your terminal device.

The legal basis for the processing of your data in the context of push notifications is Art. 6 para 1 lit. f) GDPR for the analysis for the purpose of interest-based design of the offer. Your data will only be stored for the duration of your use of the push notification service.

d. Right of objection
You can object to data processing for the aforementioned purposes at any time, free of charge, separately for the respective communication channel and with effect for the future. For this purpose, an email to privacy@mapify.travel or a postal letter to the address of HomeToGo mentioned in section I number 1 is sufficient.
If you object, the contact address concerned will be blocked from further data processing for advertising purposes. We would like to point out that in exceptional cases, advertising material may still be sent temporarily after receipt of your objection. This is technically due to the necessary lead time for advertisements and does not mean that we will not implement your objection.

III. Cookies and related functions / technologies

We use so-called cookies and other similar tracking technologies on our website. Our interest in optimising our website is to be regarded as legitimate. Cookies are small files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone or similar) on your hard drive or in the cache of your internet browser when you visit our site. We also refer to “cookies” as web beacons and other similar storage technologies used to track user activity. Web beacons are usually transparent graphic/image elements, usually no larger than 1 x 1 pixels, that are embedded in the website and can be used to detect cookies on your devices.

Cookies do not cause any damage to your end device and do not contain viruses, Trojans or other malware. Information is stored in the cookie that is related to the specific end device used. However, this does not mean that We gain direct knowledge of your identity. The use of cookies serves to make the use of our offer more pleasant for you.

On the one hand, we use cookies to store session-relevant information within the web pages. These cookies expire at the end of the session / browser session (so-called transient cookies) and are not stored permanently. Other cookies remain on your computer beyond the respective browser session and enable us to recognise your computer on your next visit (so-called persistent cookies). Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the type of cookie.
Cookies can be divided into the following categories / cookie types in particular:

Essential Cookies Cookies for the necessary execution of specific functionalities of the website
Functional Cookies Cookies that are used to enable basic services and functionalities of the website (e.g. playing videos) and/or to increase the “usability” of the website…
Performance Cookies Cookies to measure the performance of our website and website content.
Analysis-/Tracking Cookies Cookies to perform analysis of data on location, visitor interests and the like in order to obtain information about visitors to our website and the content they request.

Of course, you can also visit our website without using cookies. One option is to disable the use of cookies on your computer by changing the browser settings for cookies. This would include all cookies. You can regularly obtain the procedure for disabling cookies from the “Help” function of your internet browser. However, please note that these settings may potentially affect the full availability and function of our website. For further cookie-specific setting and deactivation options, please also see below the individual explanations of the cookies and associated functions/technologies specifically used when visiting our website.

Some of the cookies we use on our website come from third parties that help us analyse the impact of our website content and visitors’ interests, measure the power and performance of our website or communicate with you. As part of our website, we use both first party cookies (only visible from the domain you are visiting) and third party cookies (visible across domains and set regularly by third parties).
The legal basis for the processing of the users’ personal data is Art. 6 para. 1 lit. b GDPR for essential cookies for displaying the website, as well as based on your consent, Art. 6 para. 1 lit. a GDPR.

1. Session Cookies

When you visit our websites, we use so-called session cookies to recognise that you have already visited individual pages of our websites. These are automatically deleted after you leave our site. Most browsers accept cookies automatically. However, you can configure your browser in such a way that no cookies are stored on your computer or a message always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot use all the functions of our websites. The storage period of the cookies depends on their purpose and is not the same for all.

2. Google Tag Manager

We manage website tags with the Google Tag Manager. These make it easier for us to manage and develop our offer and shorten the loading time of the website. The Google Tag Manager only implements website code. The Google Tag Manager itself does not set any cookies and does not collect any personal data. The tool merely integrates website code that we have stored elsewhere and which may be used to collect data. The tool thus only serves to facilitate the control of the respective code, but does not itself access the data processed by the code. We inform you about all tags integrated in this way in this privacy policy. Further information on the Google Tag Manager and the usage guidelines can be found on the Google website.

3. Google Ads Conversion Tracking

We rely on the online advertising programme “Google AdWords” and the analysis tool Conversion Tracking, a service of Google Ireland Limited, Gordon House, Barrow Street Dublin 4. Ireland (hereinafter: “Google”), for the statistical collection of conversion tracking data.

When you click on an ad placed by Google, a cookie for conversion tracking is placed on your computer. The information generated by the cookie: Clicked ad, browser type/version, operating system used, location, referrer URL (the previously visited page), host name of the accessing computer (IP address), time of the server request are transmitted to a Google server in the USA and stored there. These cookies lose their validity after 30 days, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognise that you have clicked on the ad and have been redirected to this page. Each Google AdWords customer receives a different cookie. Thus, there is no way that cookies can be tracked across AdWords customers’ websites. The information obtained using the cookie is used to create conversion statistics for us as AdWords customers. In doing so, We learn the total number of users who clicked on our ad and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information with which users can be personally identified.

The legal basis for this data processing is Art. 6 para 1 lit. f GDPR. This data processing is carried out for the purpose of optimising advertising campaigns and We process this data within the scope of recital 47 to the GDPR for behaviour and interest-based advertising purposes.
You can prevent this processing in advance by generally preventing the installation of cookies by means of a corresponding browser setting in your browser (deactivation option) or by setting the browser so that cookies from the domain “googleleadservices.com” are generally not accepted. You can also object to the processing by setting the slider in the Google settings to “Off”.

4. Google Analytics

On our website, we use the Google Analytics analysis service of Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland (hereinafter: “Google”) for the needs-based design and ongoing optimisation of our websites. In this context, first party cookies are used to create pseudonymised usage profiles and to distinguish users by means of randomly generated values without identifying any individual person. The information generated by the cookie about your use of this website, such as browser type/version, device name, operating system used, referrer URL (the previously visited page), keywords/specific search query, service provider, host name of the accessing computer (IP address), time of the server request are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the websites, to compile reports on the activities and to provide further services associated with the use of the website and the internet for the purposes of market research and the design of these internet pages in line with requirements. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are shortened so that an assignment is not possible (so-called IP masking).
Appropriate contractual agreements have been made with Google and it is certified under the Privacy Shield:
www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
You can object to this data processing at any time by preventing the installation of cookies through a corresponding setting of the browser software; however, we would like to point out that in this case not all functions of our websites can be used to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser add-on at tools.google.com/dlpage/gaoptout?hl=en-DE. As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection of data by Google Analytics by setting an opt-out cookie that prevents the future collection of your data when you visit this website. Please note that the opt-out cookie is only valid in the browser used and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again. Further information on data protection in connection with Google Analytics can be found on the Google Analytics website.

The above cookie-based data processing is carried out on the basis of Art. 6 para. 1 lit f GDPR (legal basis) to protect our legitimate interests or on the basis of your consent pursuant to Art. 6 para. 1 lit a GDPR (legal basis). In particular, our legitimate interests are to be able to provide you with a technically optimised website that is user-friendly and tailored to your needs, and to ensure the security of our systems.

IV. Who receives your data and is it transferred to a third country or an international organisation?

First of all, only our employees who are involved in technical, commercial or editorial support receive knowledge of your personal data.
In addition, we use external service providers within the scope of the data processing described above or, if necessary, commission them with corresponding services. Insofar as service providers receive your personal data as processors, they are strictly bound by our instructions when handling your personal data. We list the categories of external recipients in detail below:

IT service providers, for example as part of the administration and hosting of our website, our online application process or individual services/functionalities and for website analysis/measurement.
In the context of the use of the analysis services described above, we may transfer your IP address to the USA (see above in the section “Cookies and associated functions/technologies”).

V. Data secrecy and Data Protection

We take precautions to ensure the security of your personal data and protect our websites and other systems through appropriate technical and organisational measures. In particular, your data is protected against loss, destruction, falsification, manipulation and modification by unauthorised persons as well as against unauthorised access and unauthorised disclosure or dissemination. In addition, data you provide via our website is transmitted in encrypted form using SSL.

VI. What rules apply to links?

Some sections of our website contain links to third-party websites. These websites are subject to their own privacy policies. We are not responsible for their operation, including their data handling practices. If you send information to or through such third-party sites, you should review the privacy policies of those sites before sending them any personally identifiable information.

VII. What applies to the deletion of my personal data?

Subject to statutory retention periods, the stored personal data will be deleted if you revoke any consent you have given us to store it, if knowledge of it is no longer required to fulfil the purpose for which it was stored or if its storage is inadmissible for other legal reasons.

VIII. Your Rights

You have various rights as a data subject in relation to your personal data and our processing of that data.

1. Right to data portability

In addition, you have the right, under the legal conditions, to demand that We hand over such personal data that you may have provided to Us in a commonly used, machine-readable format. In this context, if We process such data on the basis of your consent, you may request that We transfer your data to another provider, for example.

2. Right to information

If you have any questions or comments about the collection, processing and use of your personal data, you can contact us at the above address. Upon request, we will be happy to inform you whether and which personal data we have stored about you.

3. Right of rectification

You also have the right to request that we correct any inaccurate personal data relating to you.

4. Right of withdrawal

You have the right to revoke the consent you have given us at any time by sending us a message to this effect. Please note that your revocation does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

5. Rights to erasure and restriction of processing

You have the right, under the legal conditions, to demand that we delete the personal data relating to you, for example if the legal basis for the processing no longer applies. In addition, you can demand that we restrict the processing of data in certain cases, for example for the duration of an audit, if you dispute the accuracy of the data, or if data may not be deleted.

6. Right of objection

You have the right to object at any time to the processing of personal data concerning you, provided that We base the specific processing on legitimate interests. Upon your objection, we will no longer process your personal data unless there are compelling legitimate grounds for processing or the processing serves the assertion, exercise or defense of legal claims.

7. Right of appeal

If you are of the opinion that there is a reason to complain about the processing of your personal data, you can contact our data protection officer. You can also lodge a complaint with the supervisory authority responsible for HomeToGo, the Berlin Commissioner for Data Protection and Freedom of Information, Friedrichstr. 219, 10969 Berlin, Tel.: +49 (0)30 13889-0, Fax: +49 (0)30 2155050, Email: mailbox@datenschutz-berlin.de.

8. Is there an obligation to provide data?

In order to make our website available to you and to enable you to use the corresponding services/functionalities, it is necessary that you provide the personal data required for this purpose. Without this data, it is not possible to call up our website content or use the corresponding services/functionalities.

9. Is your data used in automated decision making / profiling?

You have the fundamental right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. As explained in this Privacy Policy, we use your travel experiences to provide you with a better user experience. We do not use automated decision-making processes that have legal effect on you or otherwise adversely affect you.

IX. Is this Privacy Policy subject to change?

The further development of the Internet and our website may also affect our Privacy Policy. We reserve the right to change this website-specific Privacy Policy from time to time in the future in order to comply with current legal requirements or to reflect additions or changes to our website. The current version of this Privacy Policy, which you can access on each subpage under the link “Privacy Policy”, applies to your visit.

Status: July 2022