Privacy Policy

Privacy Notice

AllSeason.Tours provides booking services to individuals for travel services provided by third party suppliers and local tour operators who We work with and who provide the travel services to individuals. AllSeason.Tours therefore collects and processes personal data about individuals when booking arrangements for its customers (“Services”). In addition to this, the Website also collects certain personal data from users, in accordance with this Policy.

AllSeason.Tours is firmly committed to respecting and protecting the privacy of all personal data received or collected, in strict adherence to Data Protection Legislation and best business practice. AllSeason.Tours has established this Policy so that you can understand the care with which We intend to treat your personal data.

We are committed to the protection of your personal data and would therefore like to inform you of your rights as well as the type and scope of the respective data collection.

1. Responsible Person and Data Protection Officer

Contact details of the person responsible, if the website you have been assigned to the United Kingdom or has indicated this as the relevant country for our service:

AllSeason.Tours
2nd Floor, Nucleus House, 2 Lower Mortlake Road, Richmond, TW9 2JA
[email protected]

Contact details of the person responsible, unless you have been assigned to the United Kingdom or has indicated this as the relevant country for our service:

TET Travel Expert Technologies GmbH
Münzstr. 12, 10178 Berlin, Germany
[email protected]

Contact details of the data protection officer:

We have appointed a data protection officer within the company. You can reach this person in all matters concerning your personal data as follows:

InfAI Infinity GmbH
Goerdelerring 9, 04109 Leipzig
[email protected]

(both below “AllSeason.Tours”, “We”).

2. Terms and Definitions

Personal data are all information relating to an identified or identifiable natural person (hereinafter ‘person concerned’). Identifiable is a natural person who can be identified directly or indirectly, in particular by assignment to an identifier such as a name, an identification number, location data, an online identifier or one or more special characteristics that express the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.

The persons concerned are persons whose personal data are processed by the data controller.

Processing means any operation or series of operations carried out with or without the aid of automated procedures in relation to personal data, such as the acquisition, collection, organization, sorting, storage, adaptation or alteration, reading, retrieval, use, disclosure by transmission, dissemination or any other form of provision, comparison or linking, restriction, erasure or destruction.

Profiling is any form of automated processing of personal data consisting in the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to the performance of work, economic situation, health, personal preferences, interests, reliability, conduct, location or relocation of that natural person.

Pseudonymization is the processing of personal data in such a way that the personal data can no longer be assigned to a specific person concerned without the use of additional information, provided that this additional information is kept separately and is subject to technical and organizational measures which ensure that the personal data are not assigned to an identified or identifiable natural person.

The person responsible is the person who decides on the purposes and means of processing personal data and who also carries them out accordingly.

Processor is another natural or legal person, authority, institution or other body that processes personal data on behalf of the data controller.

Recipient is a natural or legal person, authority, institution or other body to which personal data is disclosed.

Data subject’s consent is any voluntary, specific case, informed and unequivocal expression of consent in the form of a declaration or other clear affirmative act by which the data subject indicates his/her consent to the processing of his/her personal data.

Violation of the protection of personal data is a breach of security that leads to destruction, loss or alteration, whether unintentional or unlawful, or to unauthorized disclosure or access to personal data that has been transmitted, stored or otherwise processed.

The supervisory authority is an independent state body established by a Member State in accordance with Article 51 GDPR, which is responsible for monitoring compliance with data protection laws and regulations.

3. Information on the Processing of Personal Data

Visit Our Website

When you visit the website of AllSeason.Tours, i.e. if you do not register or otherwise provide Us with information, AllSeason.Tours only collects the personal data that your browser transmits to our server. If you wish to view the website of AllSeason.Tours, AllSeason.Tours collects the following data, which are technically necessary for Us to display the website to you and to guarantee stability and security (legal basis is Art. 6 Para. 1 p. 1 lit. f GDPR):

• IP address and service provider
• Date and time of the request
• Content of the request (specific page)
• Access status/HTTP status code
• Amount of data transferred in each case
• Website from which the request originates
• Browser incl. language and software version
• Operating system and its interface 

Basis for Collection

Where AllSeason.Tours is acting as a data controller, AllSeason.Tours may collect, use, store and transfer different kinds of personal data about you which AllSeason.Tours has grouped together as follows:

• Identity Data includes first name, last name, title, date of birth and gender;
• Contact Data includes postal address, email address and telephone numbers;
• Financial Data includes credit / debit card details or other payment information;
• Booking Data includes details about booking arrangements for travel and payments from you and other details of travel services that AllSeason.Tours has arranged for you with local tour operators;
• Technical Data includes internet protocol address, browser type and versions, time zone setting and location, browser plug-in types and versions and platform and other technology on the devices you use to access our Website;
• Profile Data includes bookings made by you, your interests, preferences, feedback and survey responses;
• Usage Data includes information about how you use our Services or submit an enquiry or query through our Website;
• Marketing and Communications Data includes your preferences in receiving marketing from Us and Our third parties and your communication preferences;
• Individual Data – additional information collected from you in relation to the Services We provide;
• Special Categories of Data includes information relating to disabilities or medical conditions which may affect your travel arrangements (including, for example, access to properties or activities featured in your travel arrangements).

If you fail to provide personal data

Where AllSeason.Tours needs to collect personal data by law, or under the terms of a contract AllSeason.Tours has with you (or for a contract that you may enter into with a Local Tour Operator or supplier for travel arrangements) and you fail to provide that data when requested, AllSeason.Tours may not be able to perform the contract it has or is trying to enter. In this case, AllSeason.Tours may have to cancel the Services but it will notify you (or where appropriate, its client) if this is the case at the time.

How is your personal data collected?

AllSeason.Tours uses different methods to collect personal data from and about you including through:

• Direct interactions. You may give Us your contact information by filling in forms or by corresponding with Us by post, phone, email or otherwise. This includes personal data you provide when you make a booking for travel arrangements through AllSeason.Tours; or
• Enquiries information, when made through the Website or by email, including requests for further information relating to the Services We offer and travel services which might be available through AllSeason.Tours with suppliers; or
• Participation contact if you participate in a competition, survey or other offer that We might make available to you; or
• Third parties or publicly available sources. We may receive personal data about you from various third parties and public sources such as contact data from providers; or
• Automated technologies or interactions. As you interact with Our Website, We may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies. Please see Our cookie policy below for further details.
• Telephone interaction. We take your details during telephone calls in relation to your Identity Data, Transaction Data, Contact Data, Financial Data, Profile Data and Marketing Data

How AllSeason.Tours uses your personal data

AllSeason.Tours will only use your personal data when the law allows Us to, ie, if We have a legal basis for doing so, as outlined in this Policy or as notified to you at the time We collect your personal data, and for the purposes for which it was collected for, unless We reasonably consider that We need to use it for another reason and that reason is compatible with the original purpose.  If We need to use your personal data for an unrelated purpose, We will notify you and We will explain the legal basis which allows Us to do this. Please note that We may process your personal data without your knowledge or consent, where this is required or permitted by law.

Where We act as the data controller for client contact information, We have set out below in the table a description of all the ways We plan to use your personal data, and which of the legal bases We rely on to do so. We have also identified what our legitimate interests are, where appropriate.

Note that We may process your personal data for more than one lawful ground depending on the specific purpose for which We are using your data. Please contact AllSeason.Tours if you need details about the specific legal ground We are relying on to process your personal data where more than one ground has been set out in the table below.

Use of the contact form

When you contact Us via the contact form on our website, the data you have entered (your email address and regularly your name, your telephone number and the other data you have provided) will be stored by Us at the time of sending in order to process your request. The legal basis is Art. 6 Para. 1 p. 1 f GDPR.

Alternatively, to the contact form you can also contact Us via the email address provided on the website.

You can object to the processing of your personal data at any time by sending an email to Us or by declaring your objection to the processing of your personal data vis-à-vis the person(s) listed in Section 1. If you contact Us directly by email, you can object to the processing of your personal data at any time in the same way.

We delete the data arising in this context after the storage is no longer necessary or restrict the processing if statutory retention obligations exist.

If your establishment of contact is aimed at the conclusion or the execution of a contract, then additional legal basis for the processing of your personal data is Art. 6 para. 1 p. 1 lit. b GDPR.

Use of our feedback form

In order for you to give Us feedback about your trip, We will give you the opportunity to share your opinion about the trip with Us using a form at the end of your trip. This enables Us to optimize our services and make our overall service more interesting for you as a user. For this purpose, the data you enter on our website via the feedback form (your email address and your name or pseudonym specified in the feedback form, if provided, your profile picture, your rating submitted, your probability of recommendation, your experience report and the other data you provide) are stored by Us at the time of sending in order to process your feedback accordingly.

If you wish to publish your feedback under your name and give Us your consent, please enter your name in the feedback form instead of a pseudonym, otherwise direct personal reference is excluded.

You can object to the processing of your personal data at any time by sending an email to Us or by declaring your objection to the processing of your personal data vis-à-vis the person(s) listed in Section 1.

We will delete the data arising in this context after the storage is no longer necessary or you request the deletion, or limit the processing if there are legal storage obligations.

We use your feedback to optimize our service. The legal basis for processing your personal data is Art. 6 Par. 1 p. 1 lit. f GDPR. If you give Us your consent to the publication of your feedback on our website, the legal basis for processing your personal data is Art. 6 para. 1 p. 1 lit. a GDPR.

How your personal data may be shared

Where We act as the data controller, personal data processed by AllSeason.Tours may be shared as follows:

• where AllSeason.Tours is under a duty to disclose your personal data to comply with any legal obligation, or to enforce or apply AllSeason.Tours terms and conditions and other agreements;
• to protect the rights, property, or safety of AllSeason.Tours, AllSeason.Tours client, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and for compliance with laws;
• with the authorities, Foreign and Commonwealth Office or other regulatory or official purpose, as may be appropriate for regulatory purposes; and
• with third parties to whom We may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, We may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this Policy.

Third party travel service providers

• To fulfil your booked travel arrangements, appropriate personal data will be passed on to the relevant suppliers of your arrangements / any third party supplier / any other third party (including banks and/or credit card issuers) who need to process your personal data so that your travel arrangements can be provided, including suppliers. This may also include transfer between our legal entities in Germany TET Travel Expert Technologies GmbH, Münzstr. 12, 10178 Berlin and in the United Kingdom AllSeason.Tours Ltd., 2nd Floor, Nucleus House, 2 Lower Mortlake Road, Richmond, TW9 2JA. We have concluded a data processing agreement. The information may also be provided to government / public authorities such as customs or immigration if required by them, or as required by law.
• We will generally use other companies to help provide our Services to you, including where We send marketing material or survey / feedback requests. We only provide third parties with the personal data they require in order to deliver their services and their use is limited to the services they provide.
• If We cannot pass your personal data to the relevant suppliers, We will be unable to complete your booking with suppliers.

We require all third parties to respect the security of your personal data and request that suppliers do the same, to treat your personal data in accordance with the law. We do not allow any other third-party service providers that We appoint to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.  If you provide further personal data to suppliers, for example, in order to request additional services or other excursions, catering services, transport arrangements or other features that a supplier may offer when you stay in their accommodation, then when you provide such personal data to them then they will be responsible to you as the data controller for that personal data.

Some of our external third parties are based outside the European Economic Area (EEA) so their processing of your personal data will involve a transfer of data outside the EEA.

Whenever We transfer your personal data to countries outside of the EEA as a data controller to other people or companies it will be for one of the legal bases for processing your personal data as indicated above.  

Where We do so, We will take all steps to ensure that any country to which the personal data has been transferred has suitable protection mechanisms in place to protect personal data, including (if applicable) use of EU Model Clauses in any contract with that third party for steps to be taken to keep personal data secure.

Marketing

We may use your Identity, Contact, Technical, Usage and Profile Data to form a view on what We think you may want or need, or what may be of interest to you.  This is how We decide which products, services and offers may be relevant for you (We call this marketing).  You will only receive marketing communications from Us if you have either given your consent, requested information from Us, or you have previously purchased travel arrangements through Us, and you have not opted out of receiving that marketing.

You can sign up for the AllSeason.Tours newsletter by entering your email address into the subscribe component found across the website or via the checkbox on the request form. When you sign up via the subscribe component, we collect your email address and the page from which you signed up. When you sign up to the AllSeason.Tours newsletter by clicking the checkbox on the request form, we collect your name, email address, and (if provided by you optionally) your phone number and age range. We will also record the time and date of the request. We will use the newsletter to send you weekly travel inspiration, news, offers, and information about AllSeason.Tours products and services.

The legal basis is Art. 6 para. 1 p. 1 lit. a GDPR. You can revoke your consent to the sending promotional offers at any time and cancel the promotional offers. You can declare your revocation by clicking on the link provided in every promotional offer, or by sending a message to the contact details given in the imprint. Alternatively, you can opt-out of certain newsletter topics within our subscription centre.

Cookies

To view our full Cookie Policy click here.

Use of our Agency Area

If you wish to become a partner and use our Agency Area, you must register by providing your email address, a password of your choice, your telephone number or your Skype Name. You must also specify the countries in which you work. We must also be informed of the name and website of the agency, the relationship between your private and business customers, the languages in which you can communicate and the software you mainly use. The data is entered using a form. Essential data (especially bank account data, agency relationships) must also be verified. It is obligatory to provide the aforementioned data; all further information can be provided voluntarily by using our portal.

After registration, you will be notified of the current status via the email address you have provided. Subsequently, the selection process takes place. If necessary, We will contact you via the contact data you have provided.

If you use our portal, We store your data necessary for the fulfilment of the contract until you terminate your access permanently. Furthermore, We store the voluntary data provided by you for the duration of your use of the portal, unless you delete it beforehand. You can manage and change all information in the protected area. The legal basis is Art. 6 para. 1 p. 1 lit. b and f GDPR.

To prevent unauthorized access to your personal data by third parties, the connection is encrypted using SSL or HTTPS.

Wistia videos

This website uses Wistia to integrate videos and to make our website more attractive for you. Legal basis for the use of Wistia is Art. 6 Par. 1 p. 1 lit. f GDPR.

If you access a website with such content, a connection to the Wistia servers is established and the data mentioned in section above ‘Visit Our website’, of this declaration is transmitted in order to be able to transmit the requested content to you.

In addition, Wistia uses cookies, which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is transferred to servers in the USA.

You can deactivate the storage of cookies by setting your browser software accordingly. However, We would like to point out that in this case you may not be able to use all functions of this website to their full extent.

Information of the provider: Wistia Inc., 17 Tudor Street, Cambridge, Massachusetts 02139, USA Further information on the purpose and scope of data collection and its processing by Wistia can be found in the data protection declaration. There you will also find further information about your rights and setting options to protect your privacy: http://wistia.com/privacy. 

Google Maps

This website uses the offer of Google Maps. This allows Us to display interactive maps directly on the website and enables you to conveniently use the map function. The legal basis for the use of Google Maps is Art. 6 Par. 1 p. 1 lit. f GDPR.

By visiting the website, Google receives the information that you have called up the corresponding subpage of our website. In addition, the data specified above, ‘Use of cookies’ and ‘Visiting Our website’, are transmitted in this declaration. This is regardless of whether Google provides a user account that you are logged in with or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you don’t want to be associated with your profile on Google, you’ll need to log out of your Google Account before visiting our site. Google stores your data as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation takes place in particular (even for unlogged-in users) for the provision of demand-oriented advertising. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

Information of the provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland. Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider’s data protection declaration. There you will also find further information about your rights in this regard and setting options for the protection of your privacy: https://www.google.de/intl/de/policies/privacy. 

Data Protection in the Application Process

We offer you the opportunity to apply to us (e.g., via email, postal service, or online application form). The following information provides you with details about the scope, purpose, and use of your personal data collected during the application process. We assure you that the collection, processing, and use of your data will be carried out in accordance with applicable data protection laws and all other legal provisions, and your data will be treated strictly confidential.

If you submit an application to us, we will process the associated personal data (e.g., contact and communication details, application documents, notes from application interviews, etc.) to the extent necessary for making a decision regarding the establishment of an employment relationship. The legal basis for this is Art. 6 Para. 1 lit. b GDPR. If you have given your consent, the legal basis is Art. 6 Para. 1 lit. a GDPR. The consent can be revoked at any time.

Your personal data will only be disclosed within AllSeason.Tours to individuals involved in the processing of your application. If the application is successful, the data you have provided will be stored in our data processing systems based on Art. 6 Para. 1 lit. b GDPR for the purpose of carrying out the employment relationship.

If we cannot offer you a position, you reject a job offer, withdraw your application, no consent for data processing is given, or you revoke your consent for data processing, or if you request the deletion of data, the data you have submitted, including any remaining physical application documents, will be stored or retained (retention period) for a maximum of 6 months after the conclusion of the application process to allow for the clarification of any discrepancies, if applicable (Art. 6 Para. 1 lit. f GDPR).

YOU HAVE THE RIGHT TO OBJECT TO THIS STORAGE IF YOU HAVE LEGITIMATE INTERESTS THAT OUTWEIGH OUR INTERESTS.

After the retention period has expired, the data will be deleted unless there is a legal obligation to retain them or another legal basis for further storage. If it becomes apparent that the retention of your data will be necessary after the retention period has expired (e.g., due to an impending or ongoing legal dispute), deletion will only take place once the data has become obsolete. Other legal retention obligations remain unaffected.

Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, We limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

For the purposes of when We take payments from you in connection with bookings for travel that We arrange on your behalf, We take such payments and treat your payment data with the upmost security.  We therefore do not store credit card information ourselves and use a secure third party payment gateway to ensure the security of your payment data.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where We are legally required to do so.

Other than in relation to government / public authorities (over whom We have no control), We take appropriate steps to ensure that anyone to whom We pass your personal data for any reason agrees to keep it secure, only uses it for the purposes of providing their services and does not collect any personal data from you in the course performing their services.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where We are legally required to do so.

Personal Data Retention

We will keep your information for as long as We need it for the purpose it is being processed for. For example, where you book accommodation arrangements through Us, We will keep the information related to your booking, so We can arrange the specific travel arrangements for you and after that, We will keep the information for a period which enables Us to handle or respond to any complaints, queries or concerns relating to the booking. The information may also be retained so that We can continue to improve your experience with Us.

We will actively review the information We hold and delete it securely, or in some cases anonymise it, when there is no longer a legal, business or customer need for it to be retained.

Your Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data. These include the right to:

• The right to be informed – this is information on for what purpose We are processing it and what personal data We are processing.
• The right of access – you have the right to be provided with copies of the personal data of you that We are processing as well as confirmation of the processing We are doing. You can do this by sending a “subject access request” to the contact details noted above for our consideration.
• The right to rectification – if you think the personal data that We hold on you is wrong you can tell Us and We will fix it.
• The right to erasure (also known as the right to be forgotten) – if you want Us to permanently delete the personal data We hold for you then you can ask Us to do so.
• The right to restrict processing – if you do not like how We are using your personal data then you can let Us know and We will stop processing it in that way.
• The right to data portability – if you want Us to pass on your personal data to someone else then please let Us know. This transfer should not affect the integrity or otherwise damage your personal data.
• The right to withdraw your consent – you can withdraw your consent for Us to process your personal data (if We have relied on your consent to process your personal data) at any time by contacting us. If We have relied only on your consent as the basis to process your personal data then We will stop processing your personal data at the point you withdraw your consent. Please note that if We can also rely on other bases to process your personal data aside from consent then We may do so even if you have withdrawn your consent.
• Rights in relation to automated decision making and profiling – if We use either automated decision making or profiling then you have a right to know. Also, We need your consent if either of these are used to make a decision that affects you. As with all consent, you can withdraw it at any time.

To exercise any of the above rights please email your request to: [email protected].

Where you exercise your right to erasure or where information is deleted in accordance with AllSeason.Tours retention policy, please note that after the deletion of your personal data, it cannot be recovered, so if you require a copy of this personal data, please request this during the period AllSeason.Tours retains the data.

Where you exercise your right to request access to the information AllSeason.Tours processes about you, you will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, We may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive.

Alternatively, We may refuse to comply with your request in these circumstances.

AllSeason.Tours will try to respond to all legitimate access requests within one month. Occasionally it may take Us longer than a month if your request is particularly complex or you have made a number of requests. In this case, We will notify you and keep you updated.

If you believe that any of your personal data which We are processing is inaccurate or incorrect please contact Us by calling Our office, by emailing [email protected], or by writing to AllSeason.Tours at our address above.

Children

The Website is not intended for children and AllSeason.Tours will not knowingly collect any personal data from persons under the age of 18.  Where, as part of the Services being provided and travel arrangements being put in place, We may collect information about children from you to perform such Services and We will treat such information securely.

Complaints

You have a right to data transferability and a right of appeal to the responsible supervisory authority.

If you would like to make a complaint in the United Kingdom in relation to how AllSeason.Tours may have stored, used or processed your personal data, you have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). AllSeason.Tours would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact Us in the first instance.

External Websites

The Website may, from time to time, contain links to and from the websites of AllSeason.Tours partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that We do not accept any responsibility or liability for these policies. AllSeason.Tours is not responsible for the content of external internet sites and you are advised to read the privacy policy of external sites before disclosing any personal data.

Remember the Risks Whenever You Use the Internet

AllSeason.Tours is committed to ensuring that your information is secure and has in place reasonable and proportionate safeguards and procedures to protect your personal data. Whilst AllSeason.Tours does its best to protect your personal data, AllSeason.Tours cannot guarantee the security of any information that you transmit to AllSeason.Tours and you are solely responsible for maintaining the secrecy of any passwords or other account information.

Changes to this Privacy Policy and your duty to inform Us of changes

As and when necessary, changes to this Privacy Policy will be posted here. Where changes are significant, We may also email all our registered users with the new details, and where required by law, We will obtain your consent to these changes.