Privacy Policy
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws as well as other data protection provisions is:
PureVita GmbH
Mainzer Str. 75
65189 Wiesbaden, Germany
Phone: +49 611 23668996
Email: info@purevita.group
Website: https://purevita.group
Represented by the Managing Director: Govan Najim
2. Data Protection Officer
PureVita GmbH does not currently have a legally required data protection officer. For any questions regarding data protection, you may contact the controller using the contact details above.
3. General Information on Data Processing
3.1 We process our users' personal data generally only to the extent necessary to provide our website, respond to inquiries, prepare travel offers, carry out travel contracts as a tour operator, and comply with legal obligations.
3.2 The legal bases for the processing are in particular Article 6(1)(a) GDPR (consent), Article 6(1)(b) GDPR (performance of a contract and pre-contractual measures), Article 6(1)(c) GDPR (legal obligation), and Article 6(1)(f) GDPR (legitimate interest). Insofar as we process special categories of personal data (e.g. health data), this is done only pursuant to Article 9(2)(a) GDPR (consent) or Article 9(2)(f) GDPR (legal claims).
3.3 We process, in particular, data of prospective customers, travelers and fellow travelers (basic data, booking data, payment data, communication data, usage data) as well as data of service providers and business partners.
3.4 We generally receive this data directly from you, e.g. as part of inquiries, bookings, or when visiting our website.
4. Visiting Our Website and Server Log Files
When you visit our website, technical information (e.g. IP address, date/time, pages accessed, browser type, operating system) is stored in server log files to ensure the functionality and security of the website. The legal basis is Article 6(1)(f) GDPR. According to IONOS, the access logs are kept available in the Deployment Viewer for a maximum of eight weeks; this information does not apply across the board to all error logs.
Our website is provided via IONOS Deploy Now. The provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. Technical access data may be processed as part of the hosting service. Where IONOS processes personal data on our behalf, this processing is carried out pursuant to Article 28 GDPR.
We use the IONOS Deploy Now visitor statistics to statistically evaluate and improve our website. According to IONOS, this is based on the server logs without cookies, with the IP address being anonymized for the statistics immediately after transmission.
5. Cookies
Our website exclusively uses technically necessary functions to provide the site. We do not currently use analytics or marketing cookies from third parties. Should services requiring consent be used in the future, we will inform you at this point and obtain your consent via a consent tool (Article 6(1)(a) GDPR in conjunction with Section 25 of the German Telecommunications-Telemedia Data Protection Act, TDDDG).
6. Contacting Us
When you contact us (e.g. by email, telephone, contact form), we process your contact details and the content of your inquiry in order to process it, advise you, and, if applicable, carry out pre-contractual measures. The legal basis is Article 6(1)(b) GDPR (where there is a contractual connection) or Article 6(1)(f) GDPR (legitimate interest in customer communication). Non-binding inquiries are stored for a maximum of 6 months and then deleted, unless a booking or business relationship results from them and provided no statutory retention obligations apply.
The information from the contact form is processed server-side and transmitted via the IONOS email service to info@purevita.group. The mailbox is operated under PureVita GmbH's IONOS contract.
7. Contacting Us via WhatsApp
7.1 On our website, we offer you the option of contacting us via WhatsApp. Use of this channel is voluntary; alternatively, you can reach us by email, telephone, or through our inquiry form (see Section 1 and Section 6).
7.2 The provider of WhatsApp for users in the European Economic Area is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
7.3 If you contact us via WhatsApp, we process the data transmitted in doing so (e.g. phone number, name, content of the message) to process your contact and travel inquiry. Depending on the nature of the inquiry, the legal basis is Article 6(1)(b) GDPR (pre-contractual measures or performance of a contract) or Article 6(1)(f) GDPR (legitimate interest in communicating with prospective customers).
7.4 When using WhatsApp, data may be transferred to companies of the Meta group, potentially including transfers to the USA. Possible transfer safeguards include the EU-US Data Privacy Framework as well as, additionally, EU Standard Contractual Clauses.
7.5 For further information on data processing by WhatsApp, please see WhatsApp's privacy notice: whatsapp.com/legal/privacy-policy-eea.
8. Data Processing for Bookings (Tour Operator)
When you book a journey with us, we process, in particular, basic data, contact details, booking data, payment data, and, where applicable, special information (e.g. mobility, allergies, insofar as provided by you) in order to conclude and perform the travel contract. The legal bases are Article 6(1)(b) GDPR (contract), Article 6(1)(c) GDPR (legal obligations), and Article 6(1)(f) GDPR (legitimate interests). We only process health data with your explicit consent pursuant to Article 9(2)(a) GDPR or to assert or defend legal claims.
To carry out the journey, we pass on data, where necessary, to service providers (e.g. airlines, hotels, transfer companies, local agencies, insurers) engaged in the provision of our travel services.
9. Disclosure of Data to Service Providers
We use service providers (e.g. IT and hosting providers, email providers, tax advisors, lawyers) who process personal data on our behalf. These service providers are contractually obliged to maintain confidentiality and to comply with the GDPR (data processing pursuant to Article 28 GDPR). The disclosure of data is based on Article 6(1)(b), (c) or (f) GDPR.
10. Rights of Data Subjects
Under the GDPR, you have, in particular, the following rights (provided the statutory requirements are met): access, rectification, erasure, restriction of processing, data portability, objection, withdrawal of consent, and the right to lodge a complaint with a data protection supervisory authority. To exercise your rights, you may contact us at any time (contact details, see Section 1).
11. Storage Period and Deletion
We store personal data only as long as necessary for the respective purposes or as required by statutory retention periods. Non-binding inquiries are stored for a maximum of 6 months and then deleted, unless a booking or business relationship results from them and provided no statutory retention obligations apply. Booking and contract data are generally stored for 6 to 10 years. After these periods expire, the data will be deleted or anonymized, provided it is no longer required for contract performance, legal obligations, or legal claims.
12. Data Transfer to Third Countries
As part of organizing the journey, it may be necessary to transfer data to service providers in third countries (outside the EU/EEA) if your journey takes place there. The legal basis is generally Article 6(1)(b) GDPR (performance of the travel contract) or Article 6(1)(c) GDPR (official requirements).
13. Security of Processing
We take appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, disclosure, alteration or destruction (e.g. access restrictions, encryption, regular updates). Nevertheless, complete security of data transmissions over the internet cannot be guaranteed.
14. Currency and Amendment of This Privacy Policy
This privacy policy is currently valid. Further development of our website and offers, or changes in legal or regulatory requirements, may make an update necessary. The current version of this privacy policy can be accessed and printed at any time on our website at https://purevita.group/en/datenschutz/.