This translation is provided for information only. Only the German original is legally binding.
Legal
Which cookies and comparable techniques we use, what they are needed for, and how to change your decision at any time.
Cookies are small files stored on your device. We treat comparable techniques such as browser local storage the same way here, because the law does.
Technically necessary storage may be used without your consent — where it is strictly necessary for a service you expressly asked for (§ 25 (2) no. 2 TDDDG). Everything else requires your consent (§ 25 (1) TDDDG).
We use two categories: necessary storage and analytics. Without your consent, only the first runs.
Without these entries, signing in, the booking flow and security functions do not work. They therefore cannot be switched off.
They include your session identifier, your language setting, the state of a booking in progress, protection against automated requests through Cloudflare Turnstile, and the record of your cookie decision itself.
The legal basis is § 25 (2) no. 2 TDDDG and, in so far as personal data is processed, Art. 6 (1) (b) and (f) GDPR.
Your cookie decision is itself stored. There would otherwise be no way to honour it on the next page you open.
For product analytics we use PostHog (PostHog, Inc., USA). Pseudonymised usage events are recorded: which pages are opened, which features are used, and where errors occur. During a share of visits and in the booking flow we also record the session as a replay; text and entries are masked in your browser beforehand.
PostHog is loaded only after you have agreed. Without consent no script is delivered and no entry is written.
The legal basis is your consent under § 25 (1) TDDDG and Art. 6 (1) (a) GDPR. You may withdraw it at any time with future effect.
We use no advertising pixels, no retargeting and no cross-provider tracking. There is therefore no marketing category for you to switch on or off.
Until this version, Google Analytics and Vercel Analytics also ran. Both were switched off and removed from the application.
You can withdraw or give your consent at any time through the cookie settings. The lawfulness of processing carried out until the withdrawal is unaffected.
Independently of that, you can delete stored entries in your browser or restrict cookies. If you delete the necessary entries, you will have to sign in again and make your cookie decision again.
If our cookie practice changes, we raise the consent version. Consent given earlier then no longer counts and we ask again.
When you complete a flight or hotel booking, a payment field from our partner LiteAPI is embedded into the page. Information is then stored on or read from your device in so far as this is necessary to carry out the payment you requested. That field loads only when you actually proceed to complete a booking.
Which personal data we process overall, who we share it with and what rights you have is set out in the privacy notice.