Privacy Policy for Website Users, Customers and other Business Partners of Traveliso OG

The protection of your personal data [1] (“data”) is of particular concern to us. In this privacy policy, we therefore inform you in accordance with Articles 13 and 14 of the General Data Protection Regulation (“GDPR”) about how we, as the data controller within the meaning of Article 4 No 7 GDPR, process your data in connection with your visit to and use of this website, your contact inquiries, your travel bookings and in the context of customer and business relationships with us.

1. Who is responsible for data processing and whom can you contact if you have any questions?
The data controller for the data processing operations as described in this privacy policy is:
Traveliso OG (“we”, “us”)
Klosterneuburgerstrasse 65/4,
1200 Vienna, Austria
traveliso.tours@gmail.com
+4369910616865

2. What categories of data do we process?
In connection with your visit to our website (www.travelisotours.com), we process data that falls under the following categories:

• IP address and IP location
• Other access data (such as information on your browser, system data on devices and operating systems used, date and time of the server request, referrer URL, amount of data sent).

We collect this data automatically with the help of so-called cookies and plug-ins (see section 3 for more details).
In the case of your contact with us, your inquiry or travel booking through our website, we process data that fall under the following categories:

• Name
• Contact information (e-mail address, phone number)
• Customer number
• Date of birth
• Company name, UID, company register data and name of contact person in the company (for corporate customers)
• Data concerning travel planning and, if applicable, booking data
• Payment data (in case of bookings)
• Contract texts and correspondences
• Passport/ ID details (if required for the booking or travel arrangements)
• Other disclosed data (e.g. data in connection with special booking requests, special travel needs, health data)

If you have subscribed to our newsletter (available at https:// www.travelisotours.com), we will process your data that falls under the following categories:

• Name
• E-mail address
• Other data (e.g. data in connection with your access to our newsletter)

If you are another business partner (in particular tour operator, travel agent, hotel, transport company or cooperation partner), we process your data that you provide to us as part of the initiation of the contractual relationship or during the ongoing contractual relationship, such as:

• Name/Company
• Address
• Contact information (e-mail address, phone number)
• Company register data
• Bank details
• UID number
• Names and contact details of contact persons in the company
• Contract texts and business correspondence

3. Data integrity
We prioritize your safety and data security.
You can feel safe on our website, from the search to the booking as well as when paying: We stand for tested security in the handling of sensitive, personal data such as credit card information through secure encryption according to current technical standards.
While we employ advanced security measures to protect your data, it is important to note that absolute security for communication over the Internet cannot be guaranteed.
This applies in particular to e-mails or social media systems, which do not represent a secure communication channel and should therefore not be used, for example, for credit card information or ID copies. If you would like to transmit your credit card information or ID copies to us electronically, we will be happy to provide you with the possibility of encrypted upload on request.

4. How do we process your data?
4.1. Website – Cookies and plug-ins
Our website uses cookies provided by third parties to make the website user-friendly. Cookies are small text files that are temporarily stored on your end device with the help of the browser and/or that your browser saves. In addition, you will find third-party plug-ins on our website, through which the website is equipped with additional functionalities. When you visit our website, these plug-ins are deactivated by default, so they do not send any data to third parties without any action on your part.

The collection of your data in connection with cookies and plug-ins is based on your consent pursuant to Article 6 para 1 lit a GDPR in conjunction with Section 165 para 3 TKG.

You can refuse the storage of individual cookies or the activation of plug-ins by configuring the cookie banner. If you have given your consent to the use of cookies and the activation of plug-ins, you can revoke this consent at any time in the future via your browser settings.

When cookies are set or plug-ins are activated on the basis of voluntary consent, data is sometimes transferred to recipients in third countries outside the EEA. In these third countries, no level of data protection comparable to the GDPR can be guaranteed; in particular, there is a risk that data may be viewed by authorities for control and monitoring purposes. With your consent, you agree that cookies or plug-ins from providers from other third countries may be used and accept a possible lower level of data protection (Article 49 para 1 lit a GDPR).

Cookies that are absolutely necessary for the functioning of the website (technically necessary cookies) cannot be rejected or deactivated. In these cases, the data processing is based on our legitimate interest pursuant to Article 6 (1) (f) GDPR to be able to provide our website in an appropriately functional manner.

4.2. Contact, inquiries or travel booking
When contacting, inquiring or booking travels (e.g. via our online forms, phone or e-mail), we process your data for the purpose of handling your contact, inquiry or travel booking. The data processing is based on the fulfilment of (pre)contractual obligations pursuant to Article 6 para 1 lit b GDPR as well as for the fulfilment of legal obligations pursuant to Article 6 para 1 lit c GDPR (e.g. proper accounting) or based on our legitimate interests pursuant to Article 6 para 1 lit f GDPR, such as in particular the maintenance of relationships with (potential) customers and the provision of information to customers and interested parties.

4.3. Newsletter
If you subscribe to our newsletter, available at https://www.travelisotours.com, we will process the data you voluntarily provide, in particular your name and e-mail address, in order to send you up-to-date information about our products, events and other relevant news at regular intervals.

The data processing is based on your express consent pursuant to Article 6 para 1 lit a GDPR in conjunction with Section 174 para 3 TKG. You can revoke your consent at any time with effect for the future (by e-mail to traveliso.tours@gmail.com or via the “unsubscribe button” in the respective newsletter e-mail). Your data will be stored until your effective revocation.

4.4. Business relations
If you are our business partner (in particular tour operator, travel agent, hotel, transport company or cooperation partner), we process your data or the data of your employees for the purpose of processing the business relationship (e.g. provision of services, processing of claims arising from the contract, invoicing) on the basis of the fulfilment of (pre)contractual obligations pursuant to Article 6 para 1 lit b GDPR as well as for the fulfilment of legal obligations pursuant to Article 6 para 1 lit c GDPR (e.g. proper accounting) and for the protection of our legitimate interests pursuant to Article 6 para 1 lit f GDPR, such as the processing of business relationships.

5. Storage duration
We process your data for as long as necessary to fulfil the purpose underlying the respective processing and in accordance with legal documentation and retention obligations. When data processing is no longer necessary, we will delete your data.

5.1. Cookies
Session cookies are only needed for the duration of your current session and are deleted again or lose their validity as soon as you leave our website or your current session expires. Persistent cookies are stored for a maximum duration of one year.

6. Who will your data be shared with?
In the course of processing for the above-mentioned purposes and, if necessary, due to legal or official obligations, your data will be transmitted by us to the following recipients:

• Tour Operators
• Airlines
• Accommodation Providers
• Cruise Lines
• Booking Platforms
• Travel Review Platforms
• Payment Providers
• Travel Insurance Providers
• Car Rental Companies
• Transfer Services
• Employees and Consultants for Online Platforms
• Other service providers
• In case of occasion to legal representatives, notaries, courts and administrative authorities
• In case of occasion to banks and insurance companies

Insofar as your data is processed by our service providers (processors), we ensure that they only process your data within the scope of our order and for the respective purposes stated above.

6.1. Use of Third-Party Services
Our website uses third-party services to improve functionality and user experience (Art. 6(1)(f) GDPR). This may involve the transmission of your IP address and the use of cookies or tracking technologies for technical, statistical, or marketing purposes.
We have no control over third-party data processing. Please refer to the privacy policies of the respective providers. You can limit tracking via browser settings or privacy tools. Some providers may process data outside the EU under the EU-U.S. Privacy Shield framework.

7. Social Media (Facebook, Instagram…):
The Traveliso OG is active on Facebook (https://www.facebook.com/traveliso.tours/) and on Instagram (https://www.instagram.com/traveliso.tours/). Your data will be processed.

The purpose of data processing by us on our Facebook and Instagram page is to provide information about news, promotions, competitions, promotions, as well as the interaction with the visitors of our social media pages. This also includes answering questions or feedback.

The data entered by you on our social media pages such as comments, likes, messages, pictures, videos, reels, etc. will be published by the social media platform and will not be used or processed by us for any other purposes. However, in order to comply with the legal provisions and the terms of use of the online platform, we expressly reserve the right to delete content.

Traveliso OG has no influence on the data processing by the operator of the online platform. In addition, we do not know in detail which data is actually processed by them. The fact is that the operator of the online platform uses advertising tracking methods. This may also be independent of a previous registration on the online platform.

The controller for the processing of personal data in the context of Facebook and Instagram use is Meta Ireland Limited 4 Grand Canal Square, Grand Canal Harbour, Dublin, Ireland (“Meta”). The operator of the online platform operates the entire IT infrastructure of the service and therefore also has its own data protection regulations. Regarding questions regarding the data of your user profile, the operator of the online platform is also solely responsible. To assert your rights as a data subject and if you have any questions about data protection, please contact Meta Ireland Limited directly. Further information on the data protection regulations of Meta Ireland Limited
can be found at https://www.facebook.com/privacy/explanation or at https://www.facebook.com/privacy/explanation.

For certain processing, the Traveliso OG and the operator of the social media platform act as jointly responsible within the meaning of Art. 26 GDPR. However, the Traveliso OG points out that it has no influence on the web tracking methods of the social media platform. The legal basis for the web tracking methods is, in accordance with Art. 6 (1) (f) GDPR, the interest in optimizing the social media platform and the respective Facebook or Instagram page.

In this context, we would like to point out that we cannot rule out that the provider of the social media platform uses profile and behavioural data for personal behaviour evaluation.

8. Transfer to third countries
If the above-mentioned recipients of your data are located outside the EEA and the country in question has also not been determined by decision of the EU Commission to have an adequate level of data protection, we will ensure that the transfer is made on the basis of standard contractual clauses or otherwise in accordance with Articles 46, 47 or 49 of the GDPR.

9. What rights do you have?
9.1. Right to information
If we process data from you, you have the right to information about the processing purposes, the categories of data processed, the recipients of this data, storage period, the rights you are entitled to, the origin of the data and the existence of automated decision-making.

9.2. Rectification and erasure of data
You are entitled to request the correction of incorrect or incomplete data concerning you. You are entitled to request the deletion of data concerning you, provided that the processing of the data is not lawful and there are no legal obligations on our part against the deletion.

9.3. Restriction of processing
You are entitled to request the restriction of the processing of your data in certain cases.

9.4. Data portability
You have the right to request the transfer of your data that you have provided to us in a structured, common and machine-readable format. You have the right to have the data transferred by us directly to a responsible party, insofar as this is technically feasible.

9.5. Right to object
You are entitled to object to the processing of data concerning you at any time on grounds relating to your particular situation. If you object, we will not further process data concerning you unless we can demonstrate that our reasons for processing outweigh your interests. You can object to the use of your data for advertising purposes at any time; in this case, we will stop processing your data for advertising purposes.

9.6. Withdrawal of consent
You have the right to revoke processing of your data based on your consent at any time. This does not affect the lawfulness of the data processing carried out up to this point.

9.7. Complaint
If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you can complain to the supervisory authority. In Austria, this is the Data Protection Authority, Barichgasse 40-42, 1030 Vienna (www.dsb.gv.at).

To exercise your data subject rights in connection with visiting our fan pages, please use the forms provided in the data protection information of the respective social media service provider linked under point 3.c) or contact us by mail at the contact address disclosed therein in each case.

Status: May 2025

[1] “Personal data” means, pursuant to Article 4(1) of the GDPR, any information relating to an identified or identifiable natural person.