Privacy Policy

The following provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. Detailed information can be found in the sections below.

This privacy policy informs you about the nature, scope, and purpose of the processing of personal data on our website rizztrip.com (hereinafter "website"). We take the protection of your personal data very seriously and treat it confidentially in accordance with applicable data protection regulations.

We would like to point out that data transmission over the Internet (e.g. communication by e-mail) may have security gaps. Complete protection of data against access by third parties is not possible.

Data Retention

Unless a more specific retention period is stated, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a justified request for deletion or revoke your consent, your data will be deleted unless we have other legally permissible reasons for storing it (e.g. tax or commercial law retention periods).

Legal Basis for Data Processing

If you have consented to data processing, we process your data on the basis of Art. 6(1)(a) GDPR. If your data is required for contract performance, we process it under Art. 6(1)(b) GDPR. We also process data to fulfil legal obligations (Art. 6(1)(c) GDPR) or based on our legitimate interest (Art. 6(1)(f) GDPR). Consent can be revoked at any time.

Your Rights

SSL/TLS Encryption

This site uses SSL/TLS encryption for all data transmissions. You can recognize an encrypted connection by "https://" in the address bar and the lock icon in your browser.

All hosting is based on Art. 6(1)(f) GDPR (legitimate interest in reliable website operation). We have data processing agreements in place with all providers.

Cookies

Our website uses cookies — small data packets stored on your device. Session cookies are deleted after your visit; persistent cookies remain until you delete them. Necessary cookies are stored under Art. 6(1)(f) GDPR. You can configure your browser to manage cookies.

Consent Management (Cookiebot)

We use Cookiebot (Usercentrics A/S, Copenhagen, Denmark) to obtain and document your cookie consent as required by Art. 6(1)(c) GDPR.

Server Log Files

Our server automatically collects: browser type/version, operating system, referrer URL, hostname, time of request, and IP address. This data is not merged with other sources. Legal basis: Art. 6(1)(f) GDPR.

Contact Form & Communication

Data from contact forms, emails, phone calls, and WhatsApp messages is stored to process your request. Legal basis: Art. 6(1)(b) GDPR (contract-related) or Art. 6(1)(f) GDPR (legitimate interest). Data is kept until the purpose no longer applies.

Registration

Registration data is used for the service you registered for. Processing is based on Art. 6(1)(b) GDPR. Data is stored while you are registered and deleted afterward.

Booking & Payment Data

We collect name, email, phone, hotel, dates, guests, and payment info for bookings under Art. 6(1)(b) GDPR. Data is retained as required by commercial and tax law.

We integrate social media elements that may establish direct connections to their servers when active. All are based on your consent (Art. 6(1)(a) GDPR), revocable at any time.

To subscribe, we need your email address and verification that you're the account holder. We use Mailcoach (self-hosted) — your data stays on our servers, no third-party transfer.

Based on your consent (Art. 6(1)(a) GDPR), revocable at any time. Data is deleted upon unsubscription. Existing customers may receive newsletters for similar services under Art. 6(1)(f) GDPR / Section 7(3) UWG — you can unsubscribe anytime via the link in each email.

We use Microsoft Clarity (Microsoft Ireland Operations Limited, Dublin, Ireland) to understand and improve user experience through interaction analysis.

Cookies: _clck, CLID, _clsk, SM, ANONCHK, MR, MUID (session), forms_visit_count, forms_previous_session_id (1 year).

Only used with your explicit consent (Art. 6(1)(a) GDPR / Section 25(1) TDDDG). You can revoke consent anytime via cookie settings. Data processed in the USA. Microsoft Privacy Policy · Clarity FAQ

Customer & Booking Data

We collect, process, and use personal customer and booking data for establishing, defining, and modifying our contractual relationships. Usage data is only collected insofar as necessary to provide the service. Legal basis: Art. 6(1)(b) GDPR. Collected data is deleted after order completion and expiry of statutory retention periods.

Data Transfer at Booking

We transfer personal data to third parties only when necessary for contract fulfilment — for example to the payment provider processing your transaction. No further transfer occurs unless you have explicitly consented. Legal basis: Art. 6(1)(b) GDPR.

Objection to Advertising Emails

The use of contact data published for imprint purposes to send unsolicited advertising is hereby objected to. We expressly reserve the right to take legal action against unsolicited advertising such as spam emails.