Tropical Islands: Privacy Policy

Tropical Islands Privacy Policy

This privacy statement contains the guiding principles of Tropical Island Management GmbH, Tropical-Islands-Allee 1, D - 15910 Krausnick ("Tropical Islands") for the handling of personal data collected, processed and used during visits to the Tropical Islands website ("website"), including the use of the associated online shops and the newsletter. Tropical Islands attaches great importance to the careful handling of your personal data. For this reason, we establish technical and organisational measures to reliably protect the data we receive from you.

We always endeavour to help you with all questions regarding the security of your data in connection with the use of our website or our other offers. In this case, please contact our data protection officer directly.

I.Name and address of the person responsible

The companies responsible for processing your personal data are:

Tropical Island Management GmbH - which operates Tropical Islands,

with its registered office at Tropical-Islands-Allee 1, 15910 Krausnick (Germany).

Parques Reunidos Servicios Centrales S.A.,

with its registered office at Calle Federico Mompou, 5, Parque Empresarial "Las Tablas", 28050 Madrid (Spain)

The aforementioned companies each act individually as "controllers" and, pursuant to Article 26 GDPR, as "joint controllers".

Managing Directors of Tropical Island Management GmbH:

Thorsten Christopher Jung, John Thomas Reilly, Yaelle Sophie Biriotti ep Boquet, Juan Pablo Romero Cuadra; Commercial Register Number: HRB 6984 CB (Cottbus Local Court)

Sales Tax Identification Number: DE 222 393 077

Website: www.tropical-islands.de

II.Contact details of the data protection officer

The contact details of the data protection officer of the data controller are: Martin Tascheit

Tropical Island Management GmbH

Tropical-Islands-Allee 1

15910 Krausnick Germany

datenschutz@tropical-islands.de

III.General information on data processing

1.guiding principle

The implementation of German laws and European regulations and directives on data protection is a top priority for Tropical Islands. Tropical Islands not only makes every effort to comply with data protection legislation, but also strives to comply with the recommendations of recognised data protection bodies on voluntary self-monitoring.

2.personal data

The following information relates to the processing of your personal data.

"Personal data", according to Art. 4(1) GDPR, includes any information relating to a natural person which permits the identification of that person. Personal data are, for example: Name, address, email address, payment information or user behaviour.

3.scope of the processing of personal data

As a matter of principle, we collect and use personal data of our users only insofar as this is necessary to provide a website that is functional and adapted to your needs as well as our content and services. The collection and use of our users' personal data regularly only takes place with the user's consent. An exception applies only in those cases in which prior collection or consent is not possible for actual reasons and the processing of the data is permitted by legal regulations.

4.legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing operations of personal data, Art. 6 (1) lit. a of the General Data Protection Regulation (DSGVO) serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures,

i.e. if you have ordered something from our online shop and we have not yet positively confirmed your enquiry or you have applied for a vacancy with us.

Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation to which our company is subject, Art. 6 para. 1 lit. c DSGVO serves as the legal basis.

In the event that vital interests of the data subject or another natural person make the processing of personal data necessary, Art. 6 (1) lit. d DSGVO serves as the legal basis.

If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 (1) lit. f DSGVO serves as the legal basis for the processing.

5.data deletion and storage period

The personal data of the data subject shall be deleted or blocked as soon as the purpose of the storage no longer applies or a previously granted consent is revoked. Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the person responsible is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or fulfilment of a contract.

6.right to information, rectification, deletion and others

Claims for information

You have the right to request information from us at any time and free of charge about what data we have stored about you. The same applies to its origin, the recipients or categories of recipients to whom this data is passed on and the respective purpose of the storage.

Correction

You have the right to request that inaccurate personal data concerning you be corrected without undue delay. You also have the right to request the completion of incomplete personal data, taking into account the purposes of the processing.

Deletion

After termination of the respective contractual relationship, your personal data will be deleted, if applicable, after expiry of the retention periods under tax and commercial law, unless you have expressly consented to the further use of your data.

Provided that the statutory retention periods are not affected by this and your data is no longer required for the processing of the contract or your enquiry, you can request the deletion of your data at any time.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data if one of the conditions pursuant to Art. 18 DSGVO is met.

Right to data portability

You have the right to receive the personal data relating to you that you have provided to us in a structured, common and machine-readable format, as well as to transfer this data to another controller without hindrance from Tropical Islands, provided that the requirements of Art. 20 DSGVO are met.

Right of objection

In accordance with Art. 21 DSGVO, you have the right to object at any time to the processing of personal data relating to you that is carried out on the basis of Art. 6 (1) lit. a or f DSGVO.

Revocation

You can revoke your consent to the use and processing of your data at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

Right of appeal

You have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of personal data concerning you carried out by us violates data protection regulations. You can contact the "State Commissioner for Data Protection and Inspection of Files" via: www.lda.brandenburg.de

Contact details

Please send your revocation as well as requests for information and deletion to our data protection officer by post or e-mail:

Martin Tascheit

Tropical Island Management GmbH Tropical-Islands-Allee 1

15910 Krausnick Germany

datenschutz@tropical-islands.de

IV.Data collection in connection with the provision of the website

1.data collection each time the website is called up

Usage data

Each time you visit our website, we collect personal data that your browser transmits to enable you to visit the website. These are:

IP address of the user
Visited subpages of our website
Date and time at the time of the request
Amount of data sent in bytes
Source/reference from which other page you come to our website
Browser used
Operating system used by the user

This information is stored in the log files of our system. This data is not stored together with other personal data. We only evaluate this data statistically.

Legal basis for the data processing

The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. f DSGVO.

Purpose of the data processing

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, your IP address must be stored for the duration of the session. These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 lit. f DSGVO.

The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

Duration of storage

The log files are stored for a maximum of 30 days. Otherwise, the data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of our website, this is the case when the respective session has ended.

Possibility of objection and removal

The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Therefore, there is no possibility for you to object.

2.use of cookies

Description and scope of data processing in connection with cookies

When you use our website, cookies are stored on the device you use to access the page, provided you have given your consent. Cookies are small text files that are stored on the user's device when visiting a website. This stored information is sent back to our server upon repeated website visits.

We use session cookies as well as temporary cookies:

Session cookies store a so-called session ID, which can be used to assign various requests from your browser to the joint session. We use this type of cookie to make our website more user-friendly so that you are always recognised throughout your visit to the website, even if you have called up sub-pages.

Temporary cookies are automatically deleted after a set period of time. They enable us to identify you on repeated visits to the website based on the feedback of the set cookie to our server across different browser sessions.

The following data is stored and transmitted in the cookies:

Language settings
Items in a shopping cart
Log-in information

We also use cookies on our website that enable an analysis of the user's surfing behaviour. In this way, the following data can be transmitted, for example:

Search terms entered
Frequency of page views
Use of website functions

We also use third-party cookies. These are set by servers that are not identical with our servers, i.e. with the website you have accessed. In contrast, first-party cookies are not made accessible by browsers across domains. Third-party cookies are used by third-party companies (for details see section 3) in the context of using our online shop. Through the use of such cookies, also known as tracking cookies, visits to different websites can be assigned to a visitor. This enables the conclusion to be drawn about the interests of website visitors and the corresponding adaptation of websites (personalisation, for example through individually tailored advertisements).

When you access our website, you will be informed by a consent tool about the use of cookies for analysis and marketing purposes and referred to the data protection declaration. The notice is linked to the privacy policy. In the case of "technically unnecessary" cookies, which are not required to operate the website, you can configure the settings in the aforementioned consent tool in such a way that only individual types or no cookies at all are permitted.

You have the option of configuring the browser you use via the browser settings so that either individual types of cookies or no cookies at all are permitted. You can also visit our website if your browser settings block the setting of cookies or if you do not consent to the setting of cookies. However, we would like to point out at this point that unrestricted use of our website is not possible in this case.

Legal basis for data processing

The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. a DSGVO.

Purpose of the data processing

The purpose of using technically necessary cookies is to simplify the use of our website for you. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change. This applies to the following applications:

Shopping cart
Adoption of language settings
Remembering search terms

The user data collected through technically necessary cookies are not used to create user profiles.

Analysis cookies are used to improve the quality of our website and its content. Through the analysis cookies, we learn how our website is used and can thus constantly optimise our offer and adapt our website to your and other visitors' needs. The legal basis for processing personal data in this case is Art. 6 para. 1 lit. a DSGVO.

For more information, please see our Cookie Policy.

3.systems used and links

Web analytics service (Google Analytics)

We use Google Analytics, a web analytics service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") as an analysis tool on our website.

Google Analytics uses so-called cookies, which enable an analysis of your use of the website. The information generated by cookies about your use of this website is usually transmitted to a Google server in the USA.

The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. We have also added the code "anonymised IP" to Google Analytics on this website. This guarantees the masking of your IP address so that all data is collected anonymously. Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage.

Further information on Google's use of data can be found at: www.google.de/policies/privacy/partners.

The legal basis for the processing of personal data using Google Analytics is Art. 6 para. 1 lit. a DSGVO.

Facebook Custom Audiences

We use the "Custom Audience" remarketing function of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). This function is used to present interest-based advertisements ("Facebook Ads") to users of our website when they visit the social network Facebook. For this purpose, the Facebook remarketing tag has been implemented on this website. This tag establishes a direct connection to the Facebook servers when you visit our website. In the process, it is transmitted to the Facebook server that you have visited this website. Facebook assigns this information to your personal Facebook user account. For more information on the collection and use of data by Facebook, as well as your rights in this regard and the options for protecting your privacy, please refer to Facebook's privacy policy at: https://www.facebook.com/about/privacy/.

The legal basis for the processing of personal data using Facebook is Art. 6 para. 1 lit. a DSGVO.

Google AdWords

We use the online advertising programme "Google AdWords" and the associated Google Conversion Tracking. Google Conversion Tracking is an analysis service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). When you access our website via a Google ad, Google AdWords sets a cookie on your device (conversion cookie). These cookies lose their validity after 30 days, do not contain any personal data and are therefore not used for personal identification. If you visit certain web pages on our website and the cookie has not yet expired, Google and we can recognise that someone has clicked on the ad and thus been redirected to our page. Each Google AdWords customer receives a different cookie. Cookies can therefore not be tracked across AdWords customers' websites.

The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted in to conversion tracking. This tells customers the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

Further information and Google's privacy policy can be found at: http://www.google.com/policies/technologies/ads/ and http://www.google.de/policies/privacy/

The legal basis for the processing of personal data using Google AdWords is Art. 6 (1) lit. a DSGVO.

Google Remarketing

Using Google's remarketing technology, users who have already visited the Tropical Islands website are targeted again by interest-based advertising on the pages of the Google Partner Network. With the help of cookies, interests when visiting the website can be analysed and then used for relevant product advertising.

Insofar as users have consented to Google linking their web and app browsing history to their Google account and to Tropical Islands using information from this Google account to personalise online ads, Google will use data from these users together with Google Analytics data to create and define target group lists for cross-device remarketing. Authenticated IDs of these users are collected by Google Analytics to support this function.

The legal basis for the processing of personal data using Google Remarketing is Art. 6 para. 1 lit. a DSGVO.

Google Display & Video 360 (Doubleclick Bid Manager)

On this website, we use the Display & Video 360 tool of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, which collects data for analysis, marketing and optimisation purposes and thereby helps us to improve our marketing measures and our website. The data collected is used by Display & Video 360 to link advertising contacts and clicks on advertisements with a resulting use of our website. This enables us to determine whether internet users who have seen our ads also visit our website and which products they are interested in. This helps us to use our advertising budget more efficiently. The data

collected may also be used by us to deliver advertising based on your interests (e.g. products viewed).

Pseudonymous online identification numbers (online IDs) such as cookie IDs, IP address, device IDs, advertising IDs / IDFA (e.g. on Android or Apple smartphones) are used for data collection. No unique user-related data, such as name or address, is stored here. All IDs used by us only enable the recognition of your end device, your internet browser or the app used. The collected data will not be used by us to personally identify you as a user of our website or app without your separate consent.

We would like to point out that for users who have registered with Google, Google may link the visit to this website with the registered data. You can find out exactly how Google handles your data on Google's privacy pages by clicking on the following link:

https://privacy.google.de/intl/de/take-control.html?categories_activeEl=sign-in

The legal basis for the processing of personal data using Google Display & Video 360 is Art. 6

(1) lit. a DSGVO.

Under the following link you will find an explanation of how you can deactivate data collection by Google on your computer or mobile device: https://support.google.com/ads/answer/7395996

Taboola

Our website uses technology from Taboola. Taboola uses cookies to determine which content you use and which of our pages you visit when you have reached our website by clicking on a Taboola advertisement.

This process is used to evaluate the effectiveness of the advertisements for statistical and market research purposes and can help to optimise future advertising measures. These usage profiles do not allow any conclusions to be drawn about your person and are anonymous for us.

Processed data

Usage behaviour
IP address (shortened)

The legal basis for the processing of personal data using Taboola is Art. 6 para. 1 lit. a DSGVO.

Designation (duration)

taboola global:user-id (Persistent)
taboola_session_id (Session)

You can prevent the installation of the cookie by setting your browser software accordingly and in the settings of the consent tool on our website. However, we would like to point out that you may not be able to use all the functions of our website to their full extent. This varies from browser to browser.

i) Third-party links

Our website also contains links from third-party providers, such as Google Maps, Twitter, Facebook, Instagram or similar. You activate the forwarding by clicking on the corresponding symbol (e.g. the Facebook button). We are not responsible for the data processing carried out by the third-party providers in the following. Please inform yourself about the data processing on the basis of the privacy policy of the responsible companies. If you have not consented to the use of links to third-party providers in the consent tool, you will receive a corresponding notice before the link is forwarded.

V.Data collection in connection with other contacts, registration for the newsletter, the purchase of goods or vouchers and room reservations via our website and in connection with an application for an advertised position

1.other contact

For the purpose of contacting you via the contact form on our website, we collect the following mandatory data from you:

First name and surname
E-mail address
Your text message to us

In addition, you can leave us the following optional data at this point:

Mobile phone (for telephone feedback, if desired)
Postcode and country (for analysing the origin of our guests)
Date of birth (for the collection of socio-demographic data of our guests)

We use this data exclusively to contact you and do not pass it on to third parties. After the purpose has been fulfilled, this data is deleted immediately or only processed anonymously (no inference to your person possible).

The legal basis for this collection is Art. 6 para. 1 lit. a DSGVO. The data subject rights listed above also apply.

If you agree to receive commercial information, discounts and promotions about Parques Reunidos Group products and services, we will also use your data to communicate this content. You can object to this use at any time in the future without giving any reason.

2.newsletter registration

If you would like to receive regular information about offers, promotions and news from Tropical Islands, you can register on our website to receive our newsletter by providing your e-mail address.

Within the scope of the newsletter registration, we use the so-called double opt-in procedure. This means that after entering your e-mail address, you will receive a confirmation e-mail from us in which we ask you to confirm that you wish to receive the newsletter and that you consent to the use of your data. These data are:

Your email address
The IP address of the calling computer
Date and time of registration

If you do not confirm within 24 hours, your registration will be automatically deleted and you will not receive any newsletters from us. If you confirm your newsletter registration, we will store your e-mail address until you unsubscribe from the newsletter. The storage serves the sole purpose of being able to send you the newsletter. The only mandatory data for registration and receipt of our newsletter is your e-mail address as a technical necessity. In addition, we store the e-mail exchange with you in order to be able to present your consent if necessary.

To process the newsletter dispatch, we forward your e-mail address to our service provider Salesforce via our parent company (Parques Reunidos - see responsible party):

salesforce.com Germany GmbH Erika Mann Str. 31

80636 Munich Germany

No data is passed on to other third parties in connection with the processing of data for the dispatch of newsletters.

The legal basis for this collection is Art. 6 para. 1 lit. a DSGVO. The data subject rights listed above also apply.

You can unsubscribe from our newsletter at any time without giving reasons for the future. You will also find a link to unsubscribe at the end of each newsletter.

3.data processing for ticket and item purchases and room reservations

You can purchase tickets, vouchers and products in our online shop via our website by providing the personal data required for the purchase process. This also applies if you wish to book a room or other overnight accommodation with us.

The data collected and stored by us for the purpose of and within the scope of processing the contract are: Name, address, e-mail address, date of birth and payment information, your IP address and the date and time of your registration or order. All other information is marked accordingly and is voluntary.

If you enter a personal dedication on the form provided when purchasing a voucher, this data will only be used to print the voucher and will then be deleted.

We store your data as part of the order history and send you the order details by e-mail. When confirming an order by email, we do not disclose payment details, only the selected payment method.

To prevent unauthorised access by third parties to your personal data, in particular financial data, the ordering process is encrypted using SSL technology.

The legal basis for this collection is Art. 6 para. 1 lit. b DSGVO. The data subject rights listed above also apply.

After fulfilment of this contractual obligation, all related data will be deleted, unless we are obliged to store this data due to other obligations towards you or due to legal regulations. Your data will not be forwarded to third parties.

4.data processing for online application for a vacancy

If you wish to apply for an advertised position with us, you can do so on our website by providing the following information:

E-mail address
Name
Address
Telephone number
Indication of your personal qualifications with relevant supporting documents

We store your personal data as part of the application history and send you a confirmation of receipt by e-mail.

The storage serves the sole purpose of being able to consider and contact you in connection with filling the vacancy.

No data will be passed on to third parties in connection with the data processing for filling the vacant position. The data will be used exclusively for filling the advertised position and - if we hire you - for implementing the employment contract with you.

The legal basis for this collection is Art. 6 para. 1 lit. b DSGVO The data subject rights listed above also apply.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of an online application, this includes 6 months after the vacancy has been filled for the applicants who were not considered, in order to be able to justify our decision in a comprehensible manner in a possible procedure according to the AGG. If we

establish an employment relationship with you, we store the personal data insofar as this is necessary for the fulfilment of the employment relationship (in accordance with BDSG-Neu §26).

You can informally revoke your application at any time. Your data will not be forwarded to third parties.

Tropical Island Management GmbH

Tropical-Islands-Allee 1

D - 15910 Krausnick welcome@tropical-islands.de

6. Satisfaction survey

We also use your e-mail address and name to send you a satisfaction survey by e-mail after your visit to our house. You can object to this at any time by sending us an e-mail to datenschutz@tropical-islands.de. You will also be informed of this separately during the ordering process. We will not charge you any transmission costs for this. We do this on the basis of a legitimate interest in constantly improving our services for you. Your answers are stored exclusively in anonymous form. The legal basis is Art. 6 para. 1 lit f in conjunction with. § 7 para. 3 UWG.