This privacy policy outlines the guiding principles of Tropical Island Management GmbH, Tropical-Islands-Allee 1, D-15910 Krausnick ("Tropical Islands"), regarding the handling of personal data collected, processed, and used during visits to the Tropical Islands website ("Website"), including the use of associated online shops and newsletters. Tropical Islands places great importance on the careful handling of your personal data. For this reason, we have established technical and organizational measures to reliably protect the data we receive from you.
We are always committed to assisting you with any questions concerning the security of your data in connection with the use of our online presence or other offers. Please contact our Data Protection Officer directly in such cases.
The companies responsible for processing your personal data are:
· Tropical Island Management GmbH - which operates Tropical Islands, based at Tropical-Islands-Allee 1, 15910 Krausnick (Germany)
· Parques Reunidos Servicios Centrales S.A, located at Calle Federico Mompou, 5, Parque Empresarial "Las Tablas", 28050 Madrid (Spain)
The aforementioned companies each act individually as "Controllers" and, under Article 26 GDPR, as "Joint Controllers."
Managing Directors of Tropical Island Management GmbH:
John Thomas Reilly, Yaelle Sophie Biriotti ep Boquet, Bradley Phillip Loxley
Commercial Register Number: HRB 6984 CB (Amtsgericht Cottbus)
VAT Identification Number: DE 222 393 077
Website: www.tropical-islands.de
The contact details of the Data Protection Officer are:
Martin Tascheit
Tropical Island Management GmbH
Tropical-Islands-Allee 1
15910 Krausnick
Germany
datenschutz@tropical-islands.de
1. Guiding Principle
Tropical Islands places the highest priority on complying with German laws and European regulations and directives on data protection. Tropical Islands not only strives to comply with legal data protection regulations to the best of its ability but also aims to adhere to the recommendations of recognized data protection bodies for voluntary self-regulation.
2. Personal Data
The following information pertains to the processing of your personal data.
"Personal data" includes all information related to a natural person that allows the identification of that person, as defined in Article 4(1) GDPR. Personal data includes, for example, your name, address, email address, payment information, or user behavior.
3. Scope of Processing Personal Data
We generally collect and use personal data from our users only to the extent necessary to provide a functional and user-friendly website, along with our content and services. The collection and use of personal data from our users regularly occur only with the user's consent. An exception applies in cases where obtaining prior consent is not possible for factual reasons, and the processing of the data is permitted by legal regulations.
4. Legal Basis for the Processing of Personal Data
If we obtain the data subject's consent for processing operations involving personal data, Article 6(1)(a) GDPR serves as the legal basis.
For processing personal data necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations necessary for pre-contractual measures, such as if you have placed an order in our online shop, and we have not yet positively confirmed your request, or if you have applied for a job with us.
If processing personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis.
If processing is necessary to protect the vital interests of the data subject or another natural person, Article 6(1)(d) GDPR serves as the legal basis.
If processing is necessary for the purposes of the legitimate interests pursued by our company or a third party, and these interests are not overridden by the interests, fundamental rights, or freedoms of the data subject, Article 6(1)(f) GDPR serves as the legal basis for the processing.
5. Data Deletion and Storage Duration
Personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to exist, or previously granted consent is withdrawn. Further storage may occur if provided for by European or national legislation in Union regulations, laws, or other provisions to which the controller is subject. Blocking or deletion of the data will also occur if a storage period prescribed by the aforementioned norms expires unless there is a need for further storage of the data for contract conclusion or fulfillment.
6. Rights to Access, Rectification, Deletion, and More
a) Right to Access
You have the right at any time to request information from us, free of charge, about the data we have stored about you. The same applies to their origin, the recipients or categories of recipients to whom this data is disclosed, and the purpose of the storage.
b) Rectification
You have the right to request the immediate rectification of incorrect personal data concerning you. Additionally, you have the right, considering the purposes of the processing, to request the completion of incomplete personal data.
c) Delection
After the termination of the respective contractual relationship, your personal data will be deleted after the expiry of tax and commercial retention periods unless you have explicitly consented to further use of your data.
You can request the deletion of your data at any time, provided the statutory retention periods do not affect this, and your data is no longer required for contract processing or handling your request.
d) Right to Restrict Processing
You have the right to request the restriction of the processing of your personal data if one of the conditions specified in Article 18 GDPR is met.
e) Right to Data Portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and to transmit this data to another controller without hindrance from Tropical Islands, provided the conditions of Article 20 GDPR are met.
f) Right to Object
According to Article 21 GDPR, you have the right to object at any time to the processing of personal data concerning you based on Article 6(1)(a) or (f) GDPR.
g) Withdrawal of Consent
You can withdraw any consent you have given for the use and processing of your data at any time informally. The lawfulness of processing based on consent before its withdrawal is not affected by the withdrawal.
h) Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you violates data protection regulations. The contact details for the "State Commissioner for Data Protection and Access to Information" can be found at www.lda.brandenburg.de
i) Contact Information
Please send your withdrawal and requests for access and deletion to our Data Protection Officer by post or email:
Martin Tascheit
Tropical Island Management GmbH
Tropical-Islands-Allee 1
15910 Krausnick
Germany
datenschutz@tropical-islands.de
1. Data Collection with Every Visit to the Website
a) Usage Data
Each time you visit our website, we collect personal data that your browser transmits to enable you to visit the website. These include:
· The user's IP address
· Subpages visited on our website
· Date and time of the request
· The amount of data sent in bytes
· Source/referral from which other site you came to our website
· The browser used
· The operating system of the user
This information is stored in the log files of our system. There is no storage of this data together with other personal data. We only evaluate this data statistically.
b) Legal Basis for Data Processing
The legal basis for the temporary storage of the data and log files is Article 6(1)(f) GDPR.
c) Purpose of Data Processing
Temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, your IP address must be stored for the duration of the session. This is also where our legitimate interest in data processing lies, according to Article 6(1)(f) GDPR.
The storage in log files is done to ensure the functionality of the website. The data is also used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
d) Storage Duration
The log files are stored for a maximum of 30 days. Otherwise, the data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collection for providing our website, this occurs when the respective session ends.
e) Right to Object and Elimination
The collection of data for providing the website and the storage of the data in log files is essential for the operation of the website. Therefore, you have no possibility to object.
2. Use of Cookies
a) Description and Scope of Data Processing in Connection with Cookies
When you use our website, cookies are stored on the device you use to access the website, provided you have given your consent. Cookies are small text files stored on users' devices when they visit a website. This stored information is sent back to our server when you visit the website again.
We use session cookies and temporary cookies:
Session cookies store a session ID that allows various requests from your browser to be assigned to the same session. We use this type of cookie to make our website more user-friendly, ensuring that you are recognized throughout your visit to the website, even if you visit different subpages.
Temporary cookies are automatically deleted after a specified duration. These cookies enable us to identify you across different browser sessions based on the cookie set on our server.
The following data is stored and transmitted in these cookies:
· Language settings
· Items in a shopping cart
· Log-in-information
We also use cookies on our website that allow an analysis of users' surfing behavior. For example, the following data can be transmitted:
· Entered search terms
· Frequency of page visits
· Use of website functions
We also use third-party cookies. These are set by servers that are not identical to our servers, i.e., the website you accessed. In contrast, first-party cookies are not made accessible by browsers across domains. Third-party cookies are used in our online shop by third-party companies (details can be found in section 3). By using such cookies, also known as tracking cookies, it is possible to assign visits to different websites to a visitor. This allows conclusions to be drawn about the interests of website visitors and enables websites to be customized accordingly (personalization, such as individually tailored advertisements).
When you visit our website, you will be informed about the use of cookies for analysis and marketing purposes through a consent tool, and you will be referred to the privacy policy. The notice is linked to the privacy policy. You can configure the consent tool to allow only certain types of cookies or no cookies at all, especially those "not technically necessary" for the website's operation.
You have the option to configure the browser you use to either allow only certain types of cookies or no cookies at all. You can visit our website even if your browser settings block cookies or you do not consent to the use of cookies. However, we inform you that full use of our website may not be possible in this case.
b) Legal Basis for Data Processing
The legal basis for processing personal data using cookies is Article 6(1)(a) GDPR.
c) Purpose of Data Processing
The purpose of using technically necessary cookies is to simplify the use of our website for you. Some functions of our website cannot be offered without using cookies. For these, it is necessary that the browser is recognized even after changing pages. This applies to the following applications:
· Shopping cart
· Adoption of language settings
· Remembering search terms
The user data collected by technically necessary cookies is not used to create user profiles.
The use of analysis cookies aims to improve the quality of our website and its content. Through analysis cookies, we learn how our website is used and can continuously optimize our offering and tailor our website to your needs and those of other visitors. The legal basis for processing personal data is Article 6(1)(a) GDPR.
Further information can be found in our Cookie-Richtlinie.
3. Used Systems and Links
a) Web Analytics Service (Google Analytics)
We use Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"), as an analysis tool on our website. Google Analytics uses cookies, which enable an analysis of your use of the website. The information generated by the cookies about your use of this website is generally transmitted to and stored by Google on servers in the USA.
The IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data. We have also extended Google Analytics with the code "anonymized IP" on this website. This guarantees the masking of your IP address, ensuring that all data is collected anonymously. On our behalf, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide us with other services related to website and internet use.
For more information on how Google uses your data, please visit: www.google.de/policies/privacy/partners.
The legal basis for processing personal data using Google Analytics is Article 6(1)(a) GDPR.
b) Facebook Custom Audiences
We use the remarketing function "Custom Audience" of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). This function is used to present interest-based advertisements ("Facebook Ads") to users of our website within the social network Facebook. The Facebook remarketing tag is implemented on this website. This tag establishes a direct connection to the Facebook servers when you visit our website. This informs the Facebook server that you have visited this website. Facebook associates this information with your personal Facebook user account. For more information on Facebook's data collection and use, your rights in this regard, and how to protect your privacy, please refer to Facebook's privacy policy at: https://www.facebook.com/about/privacy/.
The legal basis for processing personal data using Facebook is Article 6(1)(a) GDPR.
c) Google AdWords
We use the "Google AdWords" online advertising program and the associated Google Conversion Tracking. Google Conversion Tracking is an analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). When you reach our website via a Google ad, Google AdWords sets a cookie on your device (Conversion Cookie). These cookies expire after 30 days, do not contain personal data, and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that someone clicked on the ad and was redirected to our site. Each Google AdWords customer receives a different cookie. Cookies cannot, therefore, be tracked across the websites of AdWords customers.
The information obtained using the conversion cookie is used to compile conversion statistics for AdWords customers who have opted for conversion tracking. Customers receive the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive information that personally identifies users.
For more information and Google's privacy policy, please visit: http://www.google.com/policies/technologies/ads/ und http://www.google.de/policies/privacy/
The legal basis for processing personal data using Google AdWords is Article 6(1)(a) GDPR.
d) Google Remarketing
Using Google's remarketing technology, users who have already visited the Tropical Islands website are re-engaged through interest-based advertising on Google Partner Network pages. Cookies can analyze interests during the website visit and then be used for relevant product advertising.
If users have consented to Google linking their web and app browsing history with their Google account and using information from this Google account for personalized online advertising, Google will combine data from these users with Google Analytics data to create and define cross-device remarketing target groups. To support this feature, Google Analytics collects authenticated IDs from these users.
The legal basis for processing personal data using Google Remarketing is Article 6(1)(a) GDPR.
e) Google Display & Video 360 (Doubleclick-Bid-Manager)
We use Google LLC's Display & Video 360 tool on this website to collect data for analysis, marketing, and optimization purposes, which helps us improve our marketing activities and website. The data collected by Display & Video 360 is used to link ad contacts and clicks on ads with subsequent use of our website. This way, we can determine if internet users who have seen our ads visit our website and are interested in which products. This helps us use our advertising budget more efficiently. We can also use the data collected to deliver interest-based advertising (e.g., viewed products.
Pseudonymous online IDs (online IDs) such as cookie IDs, IP addresses, device IDs, advertising IDs/IDFA (e.g., on Android or Apple smartphones) are used for data collection. No unique user-related data such as name or address is stored. All IDs we use only allow the recognition of your device, browser, or app used. The collected data will not be used by us to identify you as a user of our website or app personally without your explicit consent.
Please note that Google may link visits to this website with registered data for users registered with Google. To learn more about how Google handles your data, visit Google's privacy pages by clicking the following link:
https://privacy.google.de/intl/de/take-control.html?categories_activeEl=sign-in
The legal basis for processing personal data using Google Display & Video 360 is Article 6(1)(a) GDPR.
You can find an explanation of how to deactivate data collection by Google on your computer or mobile device at the following link: https://support.google.com/ads/answer/7395996
f) Taboola
Our website uses technologies from Taboola. Taboola uses cookies to determine which content you use and which of our pages you visit after clicking on a Taboola ad to reach our website. This process is used to evaluate the effectiveness of ads for statistical and market research purposes and may help optimize future advertising measures. These usage profiles do not allow conclusions about your person and are anonymous to us.
Processed Data:
· Usage behavior
· IP address (truncated)
The legal basis for processing personal data using Taboola is Article 6(1)(a) GDPR.
Designation (Duration)
· taboola global:user-id (Persistent)
· taboola_session_id (Session)
You can prevent the installation of cookies through an appropriate setting in your browser software and the settings of the consent tool on our website. However, please note that you may not be able to use all the functions of our website fully. This varies from browser to browser.
g) Links to Third-Party Providers
Our website also includes links to third-party providers, such as Google Maps, Twitter, Facebook, Instagram, or similar. You activate the redirection by clicking on the corresponding symbol (e.g., the Facebook button). We are not responsible for the data processing carried out by the third-party providers after this. Please refer to the data processing policies of the responsible companies for information on how your data is processed. If you did not consent to the use of links to third-party providers in the consent tool, you will receive a corresponding notice before being redirected.
1. Other Contact
For the purpose of contacting us through the contact form on our website, we collect the following data from you as mandatory information:
· Salutation, First Name, and Last Name
· Email address
· Subject
· Your message to us
In addition, you can optionally provide the following data:
· Mobile phone (for a callback, if desired)
· Postal code and country (for origin analysis of our guests)
· Date of birth (for collecting sociodemographic data of our guests)
To process your request, we forward your data via our parent company (Parques Reunidos – see Controller) to our service provider Salesforce:
salesforce.com Germany GmbH
Erika-Mann-Str. 31
80636 München
Germany
After fulfilling the purpose, this data will be deleted immediately or only further processed anonymously (no personal identification possible).
The legal basis for this collection is Article 6(1)(a) GDPR.
The aforementioned rights of the data subject apply.
If you agree to receive commercial information, discounts, and promotions about products and services from the Parques Reunidos Group, we will also use your data to send this content. You can object to this use at any time without providing a reason.
2. Newsletter Registration
If you want to receive regular updates about offers, promotions, and news from Tropical Islands, you can register on our website by providing your email address to subscribe to our newsletter.
We use the double opt-in procedure for newsletter registration. This means that after providing your email address, you will receive a confirmation email from us asking you to confirm that you wish to receive the newsletter and that you consent to the use of your data. The following data is processed:
· Your email address
· The IP address of the accessing computer
· Date and time of registration
If you do not confirm within 24 hours, your registration will be automatically deleted, and you will not receive any newsletters from us. If you confirm your newsletter registration, we will store your email address until you unsubscribe from the newsletter. The storage serves the sole purpose of being able to send you the newsletter. The only mandatory information for registration and receipt of our newsletter is your email address, as it is a technical necessity. We also store the email exchange with you to provide your consent if necessary.
To manage the newsletter distribution, we forward your email address via our parent company (Parques Reunidos – see Controller) to our service provider Salesforcer:
salesforce.com Germany GmbH
Erika-Mann-Str. 31
80636 München
Germany
There is no further transfer of data to third parties in connection with the data processing for sending newsletters.
The legal basis for this collection is Article 6(1)(a) GDPR.
The aforementioned rights of the data subject apply.
You can unsubscribe from our newsletter at any time without providing a reason for future mailings. A link to unsubscribe is also provided at the end of each newsletter.
If you agree to receive commercial information, discounts, and promotions about products and services from the Parques Reunidos Group, we will also use your data to send this content. You can object to this use at any time without providing a reason.
3. Data Processing When Purchasing Tickets and Items or Booking a Room
.You can purchase tickets, vouchers, and products in our online shop via our website by providing the personal data necessary for the purchase process. This also applies if you want to book a room or other accommodation with us
The data we collect and store for the purpose and within the framework of contract processing includes: name, address, email address, date of birth, payment information, your IP address, and the date and time of your registration or order. All other information is optional and appropriately marked. We also use the data for invoicing and, if necessary, for dunning processes (legal basis is, among others, Article 6(1)(b) and (f)).
For overnight guests, we collect the following data in addition to the categories mentioned above for managing reservation data and billing: phone number, fax number, homepage, vehicle registration, family relationships, company affiliation, and position, correspondence, sales, number of stays, notes, credit card data, payment method. For group travel bookings, participant name lists are also collected.
If you enter a personal dedication on the designated form when purchasing a voucher, this data will only be used to print the voucher and then deleted.
For telephone bookings, the following data is collected through an external call center: name, first name, email address, age. The call center is a processor bound to us under the legal requirements (GDPR).
We store your data as part of the order history and send you the order details via email. When confirming an order via email, we do not disclose payment details, only the chosen payment method.
To prevent unauthorized access by third parties to your personal data, especially financial data, the order process is encrypted using SSL technology.
We also use your email address and name to send you a satisfaction survey via email after your visit to our premises. You can object to this at any time by sending an email to datenschutz@tropical-islands.de. We also inform you separately during the order process. There are no transmission costs from us. We do this based on a legitimate interest in continuously improving our services for you. Your responses are stored exclusively in anonymous form. The legal basis is Article 6(1)(f) in conjunction with § 7(3) UWG.
For some surveys, you may be asked at the end of the survey whether you agree to your answers being stored in a personalized manner. We offer this so that you receive offers tailored to your preferences. We do this by collecting and possibly segmenting your data from this questionnaire along with your email so that we can target you directly in certain campaigns. We may involve processors to conduct the surveys, with whom we have concluded processing contracts and, if necessary, required standard contractual clauses. You can revoke your consent to the storage of your survey data at any time at datenschutz@tropical-islands.de.
The aforementioned rights of the data subject apply.
After fulfilling this contractual obligation, all related data will be deleted unless we are required to store this data due to other obligations towards you or due to legal regulations. There is no transfer of your data to third parties.
4. Data Processing When Applying for an Open Position Online
If you want to apply for an advertised position with us, you have the option of applying on our website by providing the following data:
· Email address
· Name
· Address
· Phone number
· Details of your qualifications with corresponding evidence
We store your personal data as part of the application history and send you a confirmation of receipt via email.
The storage serves solely to consider and contact you in connection with the filling of the open position.
There is no transfer of data to third parties in connection with the data processing for filling the open position. The data is only used to fill the advertised position and, if we hire you, to implement the employment contract with you.
The legal basis for this collection is Article 6(1)(b) GDPR.
The aforementioned rights of the data subject apply.
The data will be deleted as soon as they are no longer necessary for the purpose of their collection. This includes an online application 6 months after the position is filled for applicants not considered, to justify our decision in a potential AGG proceeding. If we establish an employment relationship with you, we store the personal data to the extent necessary to fulfill the employment relationship (according to BDSG-New §26).
You can revoke your application at any time informally. Your data will not be forwarded to third parties.
5. Data Processing "My Account"
You can set up a personal account on our website. For this, we collect your email address to identify you during future visits.
6. Data Processing When Using Our Wristbands
To facilitate your visit to Tropical Islands, we issue electronic wristbands for processing payment transactions and as access control to various areas during your visit. The wristbands record transaction data (purchase of products, prices) and movement data (accesses).
The legal basis for these collections is Article 6(1)(a) and (b) GDPR. The aforementioned rights of the data subject apply. After fulfilling this contractual obligation, all related data will be deleted unless we are required to store this data due to other obligations towards you or due to legal regulations. There is no transfer of your data to third parties.
For conducting contests for participants in park surveys and tracking, Parques Reunidos Servicios Centrales S.A., located at Calle Federico Mompou, 5, Parque Empresarial "Las Tablas", 28050 Madrid (Spain), is solely responsible under GDPR.
The following data is processed: salutation, first name, last name, email address, postal code, age, country, mobile phone number, prizes, tracking information (survey ID).
We use the data Name, Email Address, and Age to conduct the contest. Your tracking data is used to evaluate your participation in the contest. We delete this data after the contest ends. We work with a processor to conduct the contest. Your data may be transferred to the USA, for which appropriate standard contractual clauses have been concluded. Your data will not be forwarded to third parties.
Participation in Our Anonymous Surveys
As part of our efforts to continuously improve, we may ask you to participate in surveys about our products and attractions during a park visit. These are evaluated anonymously. We conduct these surveys based on our legitimate interest in effective marketing and further improving our services. We may involve processors to conduct the surveys, with whom we have concluded processing contracts and, if necessary, required standard contractual clauses. If you do not wish to receive further survey invitations by email, please contact dpo@grpr.com or use the methods provided in the emails to unsubscribe from the surveys.
Tropical Island Management GmbH
Tropical-Islands-Allee 1
D - 15910 Krausnick
© 2008 - 2024, Tropical Island Management GmbH. All Rights Reserved.
Last updated: 07.05.2024