Privacy Policy

This English version is provided for convenience only. The German version is the legally binding one.

Prima Klima Reisen GmbH · Last updated: September 2026

1. Privacy at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. For detailed information on data protection, please refer to the privacy policy set out below this text.

Who is responsible for data collection on this website?

Data on this website is processed by the website operator. You will find their contact details in the section “Information on the controller” in this privacy policy.

How do we collect your data?

Some of your data is collected because you provide it to us. This may, for example, be data you enter in our contact form or in the Whistleblower Portal.

Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or the time the page was accessed). It is collected automatically as soon as you enter this website.

What do we use your data for?

Part of the data is collected to ensure that the website is provided without errors and securely. Data you send us via the contact form or by e-mail is processed in order to answer your enquiry and prepare a quote. Only if you have given your consent do we also use Google Analytics to evaluate how our website is used.

What rights do you have regarding your data?

You have the right to obtain information about the origin, recipients and purpose of your stored personal data free of charge at any time. You also have the right to request the rectification or erasure of this data. If you have given consent to data processing, you can withdraw that consent at any time with effect for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time regarding this and any further questions on the subject of data protection.

2. Hosting

We host the content of our website with the following provider:

Hetzner

The provider is Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (hereinafter Hetzner). The servers are located in Germany. For details, please see Hetzner’s privacy policy: https://www.hetzner.com/de/legal/privacy-policy/.

Hetzner is used on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in presenting our website as reliably as possible.

Data processing agreement

We have concluded a data processing agreement (Auftragsverarbeitungsvertrag, AVV) for the use of the service named above. This is a contract required by data protection law which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

3. General information and mandatory disclosures

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection provisions and this privacy policy.

When you use this website, various items of personal data are collected. Personal data is data by which you can be personally identified. This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose this is done.

We point out that data transmission over the internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

Information on the controller

The controller for data processing on this website is:

Prima Klima Reisen GmbH
Ordensmeister Str. 40
12099 Berlin
Telephone: +49 (0)30 68 40 98 40
E-mail: office@primaklimareisen.de

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses or similar).

Data protection officer

We have appointed a data protection officer.

Steffen Cordt
Telephone: +49 (0)30 68 40 98 40
E-mail: datenschutz@mobilityservice.berlin

Retention period

Unless a more specific retention period is stated within this privacy policy, your personal data remains with us until the purpose for processing it no longer applies. If you assert a justified request for erasure or withdraw your consent to data processing, your data will be erased unless we have other legally permissible grounds for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, erasure takes place once those grounds no longer apply.

General information on the legal bases for data processing on this website

Where you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR, or Art. 9(2)(a) GDPR where special categories of data pursuant to Art. 9(1) GDPR are processed. Where you have consented to the storage of cookies or to access to information on your device, the processing additionally takes place on the basis of § 25 (1) TDDDG (German Telecommunications Digital Services Data Protection Act). Consent can be withdrawn at any time. If your data is required for the performance of a contract or for taking steps prior to entering into a contract, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, we process your data where it is necessary for compliance with a legal obligation, on the basis of Art. 6(1)(c) GDPR. Processing may also take place on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR. The legal bases relevant in each individual case are set out in the following paragraphs of this privacy policy.

Recipients of personal data

In the course of our business activities we work with various external bodies. This sometimes also requires the transfer of personal data to those external bodies. We only pass personal data on to external bodies where this is necessary for the performance of a contract, where we are legally obliged to do so (e.g. transfer of data to tax authorities), where we have a legitimate interest in the transfer pursuant to Art. 6(1)(f) GDPR or where another legal basis permits the transfer. Where we use processors, we only pass on our customers’ personal data on the basis of a valid data processing agreement.

Withdrawal of your consent to data processing

Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. The lawfulness of the data processing carried out up to the withdrawal remains unaffected.

Right to object to the collection of data in special cases and to direct marketing (Art. 21 GDPR)

If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims (objection pursuant to Art. 21(1) GDPR).

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection pursuant to Art. 21(2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged infringement. This right to lodge a complaint is without prejudice to any other administrative or judicial remedies.

The supervisory authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin (https://www.datenschutz-berlin.de).

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

Access, rectification and erasure

Within the framework of the applicable statutory provisions, you have the right at any time to obtain free information about your stored personal data, its origin and recipients and the purpose of the data processing and, where applicable, a right to rectification or erasure of this data. You can contact us at any time regarding this and any further questions on the subject of personal data.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time for this purpose. The right to restriction of processing exists in the following cases:

If you dispute the accuracy of the personal data we hold about you, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
If the processing of your personal data was or is unlawful, you can request the restriction of the data processing instead of erasure.
If we no longer need your personal data but you need it in order to exercise, defend or establish legal claims, you have the right to request the restriction of the processing of your personal data instead of erasure.
If you have lodged an objection pursuant to Art. 21(1) GDPR, a balance must be struck between your interests and ours. As long as it has not been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data may – apart from being stored – only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, such as enquiries you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address bar of your browser changes from “http://” to “https://” and by the padlock symbol in your browser bar.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

4. Data collection on this website

Server log files

The provider of these pages automatically collects and stores information in what are known as server log files, which your browser transmits to us automatically. These are: browser type and browser version, operating system used, referrer URL, host name of the accessing computer, time of the server request and IP address.

This data is not merged with other data sources. It is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and the security of its website – and the server log files have to be collected for that purpose.

In addition, we process your IP address briefly in memory in order to limit the number of form submissions per sender and thus prevent misuse (rate limiting). This processing likewise takes place on the basis of Art. 6(1)(f) GDPR; the IP address is not stored permanently and is not attached to your enquiry.

Cookies

Our web pages use what are known as “cookies”. Cookies are small data packets and do no harm to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are deleted automatically at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or until your web browser deletes them automatically.

Without your consent, we use exclusively technically necessary cookies on this website. Cookies for audience measurement with Google Analytics are only set if you have given your consent; likewise, Google may set its own cookies when a map you have agreed to is loaded (see section 6).

Cookies that are necessary to carry out the electronic communication process, to provide certain functions you have requested or to ensure the security of the website (necessary cookies) are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is stated. Where consent to the storage of cookies and comparable recognition technologies has been requested, the processing takes place exclusively on the basis of that consent (Art. 6(1)(a) GDPR and § 25 (1) TDDDG); consent can be withdrawn at any time.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be limited.

Consent management

To manage your privacy settings we use the open-source software Klaro. We provide Klaro ourselves on our own server; no data is transmitted to third parties and no connections to external servers are established.

Your choice is stored exclusively locally in your browser in a cookie named “pkr-consent” for a period of 365 days, so that we do not have to ask you again on every visit. By default, no optional services are enabled. You can change your decision at any time via the “Cookie settings” link in the footer of every page. The legal basis is Art. 6(1)(c) GDPR, as we are legally obliged to be able to demonstrate consent.

Contact form

If you send us enquiries via the contact form, the details you provide in the enquiry form – name, e-mail address, optionally your telephone number, subject and message – are transmitted by e-mail to our mailbox in order to process the enquiry and in case of follow-up questions. These details are not stored in a database of this website; they exist solely in our e-mail mailbox.

This data is processed on the basis of Art. 6(1)(b) GDPR where your enquiry is connected with the performance of a contract or is necessary for taking steps prior to entering into a contract. In all other cases, the processing is based on our legitimate interest in the effective handling of the enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) where this has been requested; consent can be withdrawn at any time.

The data you enter in the contact form remains with us until you ask us to erase it, withdraw your consent to its storage or the purpose for storing the data no longer applies (e.g. once your enquiry has been dealt with). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Protection against automated form submissions

To protect our forms against automated misuse (spam), we use the open-source solution ALTCHA. Your browser solves a small computational task before the form can be submitted. ALTCHA runs entirely on our own server; no data is transmitted to third parties, no cookies are set and no user profiles are created. In addition, the form contains a field that is invisible to you and is only filled in by automated programs. The legal basis is Art. 6(1)(f) GDPR; we have a legitimate interest in warding off spam and abusive access.

Enquiry by e-mail or telephone

If you contact us by e-mail or telephone, your enquiry including all personal data resulting from it (name, enquiry) is stored and processed by us for the purpose of handling your request. We do not pass this data on without your consent. What is said about the contact form applies accordingly to the legal bases and the retention period.

Fonts

This website uses the “Blinker” typeface for a consistent presentation of fonts. The font files are embedded locally on our own server and delivered from there. In this process, your browser does not connect to servers operated by Google or other third parties; no data is transferred to third parties.

5. Whistleblower Portal

At /hinweisgeberportal we operate an internal reporting office under the German Whistleblower Protection Act (HinSchG). The following special rules apply to the reports received there.

Scope of processing

You can submit a report completely anonymously: no login is required and the form does not ask for any details about your person. We process the content of your report, a category chosen by you, any attachments you upload and an automatically generated ticket number with which you can view the processing status and communicate anonymously with the reporting office. If you voluntarily provide details about your person in your report, we process those as well.

Confidentiality and security

Your identity is treated confidentially in accordance with § 8 HinSchG, unless the law provides for an exception. The content of your report, your messages and all attachments are stored encrypted using the AES-256-GCM method. Decrypted content is never stored permanently or logged. Access is technically restricted to the staff of the internal reporting office; other administrators and editors of this website have no access. IP addresses are not stored in connection with a report; they are only processed briefly to prevent misuse. Google Analytics is switched off on the pages of the Whistleblower Portal even if you have consented to audience measurement; no usage data is transmitted to Google from there.

Legal basis and retention period

The legal basis for the processing is Art. 6(1)(c) GDPR in conjunction with §§ 12 et seq. HinSchG (compliance with a legal obligation to operate an internal reporting office). We confirm receipt of your report within seven days (§ 17 (1) HinSchG) and inform you within three months of the follow-up measures taken (§ 17 (2) HinSchG). The documentation of a report is erased three years after the conclusion of the procedure in accordance with § 11 (5) HinSchG, unless longer retention is legally required and proportionate.

6. Analytics tools and map services

Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter Google). We use it to evaluate which pages are visited and how our website is used, in order to improve its content and structure. We do not use the advertising features of Google Analytics – Google signals, audience building and remarketing.

Consent and legal basis

Google Analytics is only loaded after your express consent. As long as you have not consented, no Google script is executed, no cookies are set and there is no connection to Google. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and § 25 (1) TDDDG. When the Google services are loaded, we additionally transmit your decision to Google as a machine-readable signal (Consent Mode), so that Google only processes the data to the extent you have consented to; the signals for advertising purposes are always reported as denied. Consent is voluntary, not required to use this website and can be withdrawn at any time.

What data is processed

If you have given your consent, Google processes, among other things, the pages visited, the time and duration of the visit, the previously visited page, your approximate location, device type, screen resolution, browser and operating system. For users from the European Union, Google Analytics 4 uses your IP address only on servers within the EU to derive your approximate location and then discards it before the data is logged or processed further; IP addresses are not stored in Google Analytics. Your device is recognised by means of a pseudonymous identifier in a cookie. We do not collect details such as your name or address, and we do not merge the data with other data sets.

In addition, we report to Google when you click on one of our e-mail addresses or telephone numbers on this website. Only the fact that such a click took place and which of the entries it related to is transmitted – not whether you then actually wrote or called, and certainly not the content of any message or conversation. The content of enquiries sent via our contact form is not transmitted to Google.

Google Analytics is switched off on the pages of our Whistleblower Portal even if you have given your consent (see section 5).

Transfer to the USA

A transfer of data to Google LLC in the United States cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework; in addition, standard contractual clauses pursuant to Art. 46(2)(c) GDPR are in place. Even on this basis, access to the data by US authorities cannot be completely ruled out.

Cookies used

_ga – distinguishes returning visitors – retention period 2 years
_ga_83D8TEBB9W – session state for this property – retention period 2 years
pkr-consent – stores your consent decision (see “Consent management”) – retention period 365 days

Retention period

Two periods must be distinguished. The cookies remain on your device for as long as stated in the list above; you can delete them yourself at any time via your browser, independently of us and of Google. Separately from this is how long Google keeps the collected usage data on its servers: we have set the retention period for this data to 2 months, without extension on new activity; once it has expired, Google deletes the data in its regular monthly deletion runs. Aggregated reports – such as the number of page views per month – are retained beyond that; they cannot be attributed to a device or a person.

Data processing agreement

We have concluded a data processing agreement with Google pursuant to Art. 28 GDPR. This is a contract required by data protection law which ensures that Google processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Withdrawing your consent

You can withdraw your consent at any time with effect for the future. Withdrawing consent is as easy as giving it: open the “Cookie settings” – this link is permanently available in the footer of every page – and switch off Google Analytics. The Google Analytics cookies that have been set are then deleted, measurement is switched off immediately and the withdrawal is transmitted to Google as a signal. The lawfulness of the processing carried out up to the withdrawal remains unaffected.

Independently of this, you can prevent collection by Google Analytics on all websites by installing the browser add-on provided by Google: https://tools.google.com/dlpage/gaoptout?hl=en.

Further information

For details on how Google handles user data, please see Google’s privacy policy and the privacy information for Google services.

Google Search Console

We use Google Search Console to see how our pages are found in Google Search. Our ownership is verified via an identifier in the source code or in the domain record. In this process, no data from your device is collected, no cookies are set and no connections to Google are established. The reports come from Google’s search index, not from your visit to this website. Consent is not required for this.

Google Maps

On our contact page you can display a map from the Google Maps service of Google Ireland Limited. The map is only loaded once you expressly agree – via the button on the map or in the “Cookie settings”. Before that, there is no connection to Google. After your consent, your IP address and information about your browser are transmitted to Google and Google may set cookies; a transfer to Google LLC in the USA is also possible (see “Transfer to the USA” above). The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and § 25 (1) TDDDG; it can be withdrawn at any time via the “Cookie settings”. The address and route planning are also available without consent via a simple link.

No social media plugins or video embeds from third-party providers are integrated on this website.

Last updated: September 2026