The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

Use of our website is generally possible without providing personal data. If personal data (e.g. name, address or e-mail addresses) is collected on our website, this is always done on a voluntary basis as far as possible. This data will not be passed on to third parties without your express consent.

We would like to point out that data transmission over the Internet (e.g. when communicating by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

---

Cookies

The Internet pages sometimes use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called „session cookies“. They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognise your browser on your next visit.

 

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

 

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request

This data cannot be assigned to specific persons. This data is not merged with other data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use.

---

Data protection information in accordance with Art. 13, 14 and 21 of the EU General Data Protection Regulation (EU GDPR)

With this data protection information, we are informing you, our customers, in accordance with the EU General Data Protection Regulation (GDPR) applicable from 25 May 2018, about the processing of your personal data by us and the rights to which you are entitled. This information will be updated as necessary and published at www.oman.de. There you will also find further data protection information for visitors to our website.
1. who is responsible for data processing and who can you contact?

We are responsible for data processing - your tour operator ARABIA FELIX Synform GmbH, Treffauerstr. 18, 81373 München, e-mail: info@oman.de

2. which data and which sources do we use?

We process data that we receive in the course of our business relationship with you. We receive the data directly from you, e.g. as part of a travel or car hire booking or other order placement.
Specifically, we process the following data for the performance of our services:

- Master data for the performance and fulfilment of the travel service. (e.g. name and address of the person registering the trip, email address, telephone number, names of persons travelling with them and, if necessary, the date of birth of all travellers)
- Identification data for VISA applications, if applicable (e.g. passport data) and driving licence, if applicable
- Data in connection with payment processing and, if applicable, as security for the deposit of travel services (e.g. credit card data)
- Data of your previous bookings and stays if booked or arranged through us (e.g. previous trips, reviews, interest in future trips by ARABIA FELIX Synform GmbH if applicable)
- Health data for the prevention of accidents and for the protection of the traveller(s) (e.g. degree of physical disability, severely disabled person's pass, food intolerances, allergies, pregnancies)

3. on what legal basis is your data used (purpose of data processing)?
The following information explains why and for what purpose we process your data.

3.1 For the fulfilment of contractual obligations (Art. 6 para. 1 lit. b EU GDPR)

We process your data to fulfil our contracts with you, i.e. in particular to carry out and process the booked travel services. The purposes of the data processing depend in detail on the specific travel services and the contract documents (e.g. accommodation, transfer, hire car, flights).

3.2 In the context of the balancing of interests (Art. 6 para. 1 lit. f EU GDPR)

To safeguard legitimate interests, your data may be used by us or by third parties for the following purposes:

- Supporting our sales organisation in providing travel advice and support
- Further development of travel services and additional products
- Advertising
- Assertion of legal claims and defence in legal disputes
- Prevention and investigation of criminal offences
- Ensuring IT security and availability of IT operations

Our interest in the respective processing results from the respective purposes and is generally of an economic nature (efficient fulfilment of tasks, sales, avoidance of legal risks). Where permitted by the specific purpose, we process your data in pseudonymised or anonymised form.

3.3 On the basis of your consent (Art. 6 para. 1 lit. a EU GDPR)

If you have given us your consent to process your personal data, this consent is the legal basis for the processing specified therein. In addition, you may have consented to being contacted by email, telephone or messenger service. You can revoke your consent at any time with effect for the future. This also applies to declarations of consent that you gave us before the EU GDPR came into force, i.e. before 25 May 2018. The cancellation is only effective for future processing, not for processing that has already taken place. Please use our contact address for this purpose.

3.4 On the basis of legal requirements (Art. 6 para. 1 lit. c EU GDPR)

We are subject to various legal obligations and legal requirements (e.g. German Civil Code (BGB), German Commercial Code (HGB), GoB, Passenger Name Record Act, EU Package Travel Directive, tax laws of the Federal Republic of Germany). The purposes of processing include identity and age verification, fraud prevention, the fulfilment of control and reporting obligations under tax law and the assessment and management of risks.

4. Who receives my data?

Your data will only be passed on in compliance with the EU GDPR and only insofar as a legal basis permits this. Within our sales organisation, only those departments that need your data to fulfil our contractual and legal obligations or to perform their respective tasks (e.g. sales, customer service, tour management, tour operators, hotels, rental cars or transfer companies) will receive your data.
In addition, the following organisations may receive your data:

- Processors used by us (Art. 28 EU GDPR), in particular in the area of booking systems and IT services, logistics and printing services, who process your data for us in accordance with our instructions
- Public bodies and institutions (tax authorities, embassies of the destination country) in the event of a legal or official obligation (retention obligations, VISA procurement,
- other bodies for which you have given us your consent to transfer data.

5. How long will my personal data be stored?

If necessary, we process your personal data for the duration of our business relationship, which also includes the initiation and fulfilment of a contract for the provision of a travel service. We are also subject to various storage and documentation obligations arising from the German Civil Code (BGB), the German Commercial Code (HGB), the German Fiscal Code (AO) and the EU Package Travel Directive, among others. The retention and documentation periods specified there are two to a maximum of ten years. Finally, the storage period is also assessed according to the statutory limitation periods, which are generally three years, for example according to Section 195 et seq. of the German Civil Code (BGB). Your personal data will be stored on the basis of your consent until you withdraw your consent.

6. Will my data be transferred to a third country?

We only transfer your data to countries outside the European Union if this is necessary for the execution and processing of the travel services (long-distance travel) or is required by law or if you have given us your consent.

7. Do I have certain rights when handling my data?

Under the respective legal requirements, you have the right to information (Art. 15 EU GDPR, § 34 Federal Data Protection Act (BDSG) in the version valid from 25 May 2018), to rectification (Art. 16 EU-GDPR), erasure (Art. 17 EU-GDPR or § 35 BDSG), restriction of processing (Art. 18 EU-GDPR) and data portability (Art. 20 EU-GDPR). You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 EU GDPR and Art. 19 BDSG).

8. Am I obliged to provide my data?

As part of our business relationship, you only need to provide the personal data that is required for the establishment, performance and termination of a business relationship or that we are legally obliged to collect. Without this data, we will generally have to refuse to conclude the contract or execute the order or will no longer be able to fulfil an existing contract and may have to terminate it.

9. Is there automated decision-making in individual cases?

In principle, we do not use automated decision-making in accordance with Art. 22 EU GDPR to establish and conduct the business relationship. If we use these procedures in individual cases, you will be informed separately here if this is required by law.

10. Will my data be used in any way for profiling?

ARABIA FELIX Synform GmbH does not process your data in any way with the aim of evaluating your potential interest in certain products, offers and services. (so-called “profiling” according to Art. 4 No. 4 EU GDPR).

11. What rights do I have as a customer?

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR (data processing on the basis of a balance of interests). This also applies to profiling based on this provision within the meaning of Art. 4 No. 4 EU GDPR, which may be used, for example, for customer advice and support. If you object, we will no longer process your personal data. You also have a permanent right to withdraw your consent to data processing for other purposes in accordance with Art. 15 EU GDPR if you have given us your consent in this form. The objection can be made in any form to the contact address known to you. Every data subject has the right to lodge a complaint with the supervisory authority if they are of the opinion that the processing of their data violates data protection regulations. The right to lodge a complaint can be exercised in particular with the supervisory authority of your federal state or at the location of the relevant violation. A current list of the competent supervisory authorities can be found at:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html