Privacy Policy

THE DATA CONTROLLER IS

TUI AG

Karl-Wiechert-Allee 4
D-30625 Hannover
Tel.: +49 (0)511 566-00
Fax: +49 (0)511 566-1901

E-Mail: info@tui.com 

For questions, requests or comments on the subject of data protection, please email the data protection officer at TUI AG:

Datenschutz@tui.com

WHAT THIS PRIVACY NOTICE COVERS

The data controller is TUI AG (referred to in this Notice as “we” or “us”), part of the TUI Group.

We are committed to doing the right thing when it comes to how we collect, use and protect your personal data. Your privacy matters to us, so please do take the time to read our Privacy Notice which explains:

  • What types of personal data we collect and why we collect it.
  • When and how we may share personal data within the TUI Group and with other organisations.
  • The choices you have, including how to access and update your personal data.

LEGAL BASIS FOR PROCESSING PERSONAL DATA

We will only collect and use your personal data if at least one of the following conditions applies:

  • We have your consent;
  • It is necessary for a contract with you or to take steps at your request prior to entering into a contract;
  • It is necessary for us to comply with a legal obligation;
  • It is necessary to protect your vital interests or those of another individual;
  • It is in the public interest or we have official authority; or

PERSONAL DATA WE COLLECT

We process personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). Personal data are processed by us to fulfill contractual obligations according to Art. 6 Para. 1 S. 1 lit. b) GDPR. We also process your data to safeguard our legitimate interests in accordance with Art. 6 Para. 1 S. 1 lit.f) GDPR.

When you contact us via our contact form, we may collect:

  • Personal data you provide when you connect with us, including your address, email address and phone number

Other sources of personal data

  • We may use personal data from other sources, such as specialist companies that supply information, retail partners and public registers.

Personal data you provide about other individuals

  • We use personal data about other individuals provided by you, such as contact people and addresses provided in exposes / descriptions of your offer.
  • By providing other people’s personal data, you must be sure that they agree to this and you are allowed to provide it. You should also ensure that, where appropriate, they understand how their personal data may be used by us.

USING YOUR PERSONAL DATA

To make contact and interact with you

We need to process your personal data so that we can get in contact with you and give feedback on the cooperation’s offered. We may use personal data to provide clarification or assistance to you.

We do not sell your personal data to third parties.

SHARING PERSONAL DATA WITH REGULATORY AUTHORITIES

We may share the minimum personal data necessary with public authorities if the law says we must, or we are legally allowed to do so.

SHARING PERSONAL DATA WITHIN THE TUI GROUP

Our Privacy Notice applies to all of the services offered by the TUI Group but excludes services that have separate privacy notices that do not incorporate this Privacy Notice. We may share the minimum personal data necessary with other companies in the TUI Group, for example, to present a hotel asset to one of our hotel management subsidiaries and to make contact and interact with you.

We may also share personal data with an organisation we sell or transfer (or enter into negotiations to sell or transfer) any of our businesses or any of our rights or obligations under any agreement we may have with you. If the transfer or sale goes ahead, the organisation receiving your personal data can use your data in line with this Privacy Notice.

PROTECTING YOUR PERSONAL DATA

We know how important it is to protect and manage your personal data. We take appropriate security measures to help protect your personal data from accidental loss and from unauthorised access, use, alteration and disclosure.

The personal data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). It may also be processed by organisations operating outside the EEA who work for us. We put in place appropriate protections to make sure your personal data remains adequately protected and that it is treated in line with this Notice. These protections include, but are not limited to, appropriate contract clauses, such as standard contract clauses approved by the European Commission, and appropriate security measures.

DATA RETENTION

We will retain your personal data for only as long as it is necessary for the uses set out in this Privacy Notice and/or to meet legal and regulatory requirements. After this period, we will securely erase personal data. If data is needed after this period for analytical, historical or other legitimate business purposes, we will take appropriate measures to anonymise this data.

ABOUT COOKIES AND SIMILAR TECHNOLOGIES

Cookies are small data files that allow a website to collect and store a range of data on your desktop computer, laptop or mobile device. Cookies help us to provide important features and functionality on our websites and mobile apps, and we use them to improve your customer experience. Please see our separate Cookie Notice.

LINKS TO OTHER WEBSITES

Our website may contain links to websites operated by other organisations that have their own privacy notices. Please make sure you read the terms and conditions and privacy notice carefully before providing any personal data on another organisation’s website as we do not accept any responsibility or liability for websites of other organisations.

ACCESSING AND UPDATING YOUR PERSONAL DATA; AND COMPLAINTS

You have a right to ask for a copy of the personal data we hold about you.

We want to make sure that the personal data we hold about you is accurate and up to date. If any of the details we hold are incorrect, please let us know.

You can also ask for your personal data to be rectified or erased, to object to the processing of your personal data and, where technically feasible, to ask for personal data you provided to be transmitted to another organisation.

We will update or erase your data, unless we have to keep it for legitimate business or legal purposes.

You can also contact us if you have a complaint about how we collect, store or use your personal data. We aim to resolve complaints but if you are dissatisfied with our response, you may complain to the local data protection authority:

Landesbeauftragte für Datenschutz und Informationsfreiheit Niedersachsen

Prinzenstraße 5, 30159 Hannover

Telefon: +49 0511 120-4500

E-Mail: poststelle@lfd.niedersachsen.de

Please submit your request or complaint in writing to the Legal Department/Data Protection Officer:

TUI AG
Data Protection Officer
Karl-Wiechert-Allee 4
30625 Hannover

datenschutz@tui.com

Please note that we may ask you to verify your identity before we can act on your request or complaint. We may also ask you for more information to help ensure that you are authorised to make such a request or complaint when you contact us on behalf of someone else.

AFFILIATES OF TUI GROUP

If you send us an offer or give TUI permission to get in contact with you, TUI Hotels & Resorts on behalf of TUI AG may pass on your personal data to the following affiliated companies of the TUI Group:

Robinson Club GmbH

TUI Hotel Betriebsgesellschaft mbH

TUI MAGIC LIFE GmbH

RIU II S.A.

Grupotel DOS S.A.

Atlantica Hellas A.E.

Atlantica Hotels and Resorts Limited

Jaz Hotels & Resort S.A.E.

Magic Hotels S.A.

TT Hotels Turkey Otel Hizmetleri Turizm ve Ticaret AS

WOT Hotels Adriatic Management Company d.o.o.

Ha Minh Ngan Company Ltd.

CHANGES TO OUR NOTICE

This Notice replaces all previous versions. We may change the Notice at any time so please check it regularly on our website for any updates. If the changes are significant, we will provide a prominent notice on our website including, if we believe it is appropriate, electronic notification of Privacy Notice changes.

Last update: September 2021