Privacy Notice – Dream Urlaub GMBH

Data Controller: Dream Urlaub GMBH, registered in Austria.

Dream Urlaub GMBH ("we", "our", "us") respects your privacy and is committed to handling your personal data responsibly and transparently. This Privacy Notice explains how we collect, use, share, and protect your personal information in connection with our services, in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR).

1. Categories of Personal Data We Process
   
   We process different types of personal information depending on how you interact with us:
   
   Contact Information: such as your name, email address, phone number, and mailing address.
   
   Booking Details: travel dates, accommodation preferences, traveler names, and other details required to complete a booking.
   
   Payment Information: billing data provided to process payments, which may be handled by secure third-party providers.
   
   Digital Identifiers: including IP address, device type, operating system, browser type, and website activity.
   
   Cookies and Analytics: used to improve site performance, remember preferences, and gather usage statistics.
2. Why We Process Your Data – Legal Basis
   
   Your personal data is processed for the following purposes, under these legal bases:
   Purpose Legal Basis
   Booking and travel arrangements Contract performance
   Customer service and support Legitimate interest / Contract
   Marketing communications (optional) Consent
   Website optimization and analytics Legitimate interest
   Legal compliance and dispute handling Legal obligation
   
   You may withdraw consent at any time where applicable, without affecting the lawfulness of prior processing.
3. Who We Share Your Data With
   
   We only share your personal data when necessary and with appropriate safeguards in place:
   
   Travel Partners: hotels, transport companies, and other service providers to fulfil your reservation.
   
   Payment Processors: secure providers handling financial transactions in compliance with PCI-DSS standards.
   
   Technology Vendors: hosting, IT support, and analytics tools with GDPR-compliant agreements in place.
   
   Authorities: where required by law, court order, or in cases of fraud or safety concerns.
   
   Affiliated Brands or Agents: where you have a pre-existing relationship or partnership with our brand network.
   
   We never sell or rent your personal data.
4. International Data Transfers
   Some service providers may be located outside the European Economic Area (EEA). Where international transfers occur, we ensure compliance with GDPR using:
   
   European Commission adequacy decisions
   
   Standard Contractual Clauses (SCCs)
   
   Additional contractual and technical safeguards
5. Your Data Protection Rights
   
   If you reside in the EEA, you have the following rights under GDPR:
   
   Access: Request details of the personal data we hold about you.
   
   Correction: Update or amend inaccurate data.
   
   Erasure: Request deletion where data is no longer necessary or where legally permitted.
   
   Objection: Object to processing based on legitimate interest.
   
   Restriction: Request limited processing in specific circumstances.
   
   Portability: Receive your data in a structured, machine-readable format.
   
   Withdraw Consent: At any time where processing is based on consent.
   
   You can exercise your rights by contacting us (see Section 8). You also have the right to lodge a complaint with your local data protection authority.
6. Data Security and Retention
   
   We implement physical, technical, and organisational safeguards to protect your data from unauthorised access, loss, or misuse:
   
   Encrypted data transmission (SSL/TLS)
   
   Role-based access controls
   
   Secure third-party service agreements
   
   Personal data is retained only as long as necessary for the purposes stated or as required by law (e.g., for accounting or legal records).
7. Cookies and Tracking Technologies
   
   Our website uses cookies and similar technologies for functionality, performance, and analytics purposes. You can control or disable cookies through your browser settings at any time. For more information, refer to our [Cookie Policy].
8. Contact Us
   
   To exercise your data protection rights or for any privacy-related concerns, please contact:
   
   Dream Urlaub GMBH
   Email: info@dreamurlaub.com