Data protection | Lanes & Planes

Data protection

Data protection and information security are a central component of Lanes & Planes' products and services.

The protection of your data and your trust are very important to us. Therefore, we have implemented technical and organizational measures to ensure the security of processing, which we are continuously developing, such as hosting our own servers in Germany! Lanes & Planes meets the requirements of the EU General Data Protection Regulation and is data protection compliant as an organization and as software in accordance with the EU GDPR.

Scope of application

Thank you for your interest in our website. Below we inform you about which data is collected and processed for which purposes when you use our website.

Person responsible

The controller within the meaning of data protection law is the:

Lanes & Planes GmbH
Friedenheimer Brücke 16
80639 Munich
kontakt@lanes-planes.com
Phone 089-21 54 07 10
We have appointed as data protection officer
PROLIANCE GmbH / www.datenschutzexperte.de
Leopoldstr. 21
80802 Munich
datenschutzbeauftragter@datenschutzexperte.de
Further information can be found in the imprint.

Data protection & IT security at Lanes & Planes GmbH

Data protection and information security are a central component of Lanes & Planes' products and services. We only handle personal data to the extent that this is possible in accordance with data protection regulations. We also take all necessary technical and organizational security measures to adequately protect your personal data from unauthorized access and misuse at all times.

Insofar as we store or process personal data, this takes place within a high-security data center. To protect the security of your data during transmission, we use encryption methods (e.g. SSL) via HTTPS. Our servers are protected by a firewall and IDS (intrusion detection system). Back-up and recovery procedures as well as role and authorization concepts are a matter of course for us.

Our employees are obliged to comply with the provisions of the GDPR and the BDSG when handling data.

Handling of personal data

Personal data is information that can be used to identify a person, i.e. information that can be assigned to a person. This includes, for example, the name, e-mail address or telephone number. We collect personal data in the context of data avoidance and data economy only to the extent and for as long as is necessary for the use of our website or as required by law. We take the protection of your personal data seriously and strictly adhere to the relevant legal regulations and this privacy policy when collecting and processing personal data. If the purpose of data collection ceases to apply or the end of the statutory storage period is reached, the data collected will be blocked or deleted. As a rule, our website can be used without the disclosure of personal data. If we collect personal data - such as your name, address or e-mail address - this data is collected voluntarily. This data will not be disclosed to third parties without your express consent. Please note that data on the Internet is generally not always transmitted securely. Particularly in e-mail traffic, protection during data exchange cannot be guaranteed.

Cookies

Our website uses cookies, which are stored on your device by the browser and which contain certain settings for the use of the website (e.g. for the current session). Cookies are used to make our website more user-friendly, effective and secure. We also use cookies for remarketing purposes. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are so-called session cookies, which are automatically deleted when you close your browser. Other cookies remain stored on your end device until you delete them or the storage period expires. These cookies enable us to recognize your browser on your next visit.

In some cases, cookies are used to simplify website processes by storing settings (e.g. the provision of already selected options). If personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the execution of the contract or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser.

Use of the service without registration

Our service can generally be accessed without you providing us with personal data. Your IP address is automatically shortened before it is stored in the log files so that it is no longer possible to establish a personal reference. Nevertheless, it is technically necessary for data to be transmitted to our web server via your Internet browser. The following data is recorded during an ongoing connection for communication between your Internet browser and our web server:

We collect the listed data to ensure a smooth connection to the website and to enable users to use our website comfortably. In addition, the log file is used to evaluate system security and stability as well as for administrative purposes. The legal basis for the temporary storage of the data or log files is Art. 6 para. 1 lit. f GDPR.

The server log files are anonymized data that are collected when you access our website. This information does not allow any conclusions to be drawn about you personally, but for technical reasons it is essential for the delivery and presentation of our content. It also serves our statistics and the continuous optimization of our content. Log files also enable a precise check to be carried out in the event of suspected illegal use of our website.

This data is collected exclusively for statistical purposes. This data is not merged with other data sources.

Use of the service with registration

When employees register, we collect the following data, among others: Name, address, e-mail address, password, gender, telephone number, IP address and, if necessary, ID data, rail card number and any other data relevant for booking travel.

We collect the following data when you register as a corporate customer: Name (and company, if applicable), address, e-mail address, password, VAT ID (if available), IP address and any other data required for processing the contract.

This data is used by us exclusively to fulfill our contractual obligations and in particular to process the contractual bookings of travel services. The legal basis for data processing is the consent of the data subject in accordance with Art. 6 para. 1 a) EU GDPR. The registration data will be deleted as soon as a registration on our website is canceled, modified or deleted by the user.

Use of the Lanes & Planes APP

By using the service with registration, every user receives access to the Lanes & Planes app. When employees register, we collect the following data, among others: Name, address, email address, password, gender, telephone number, IP address and, if necessary, also ID data, rail card number and any other data relevant to the booking of trips.

Google Maps

This site uses the map service Google Maps via an API. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

For this purpose, corresponding program libraries or map contents are called up from Google servers. This calls up external Google servers in the USA. To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.

The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

In this regard, the Google privacy policy applies, which you can access at http://www.google.de/intl/de/policies/privacy/.

Google Analytics 4 (GA4)

We use Google Analytics 4 (GA4) on our website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Purpose of data processing

Google Analytics 4 enables us to analyze user behavior on our website in order to optimize our website, improve the user experience and measure the effectiveness of our marketing measures. GA4 collects data about your interactions with our website, such as page views, clicks, scrolls and other events.

Collection and processing of data

If you visit our website and have consented to the use of analysis cookies, GA4 collects information about your surfing behavior. This may include the following data:

Legal basis

The processing of your personal data by Google Analytics 4 is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time by adjusting your cookie settings.

Your rights

You have the right to access, rectification, erasure, restriction of processing and data portability of your personal data. You also have the right to lodge a complaint with a supervisory authority.

Further information
Further information on data protection at Google Analytics 4 can be found in Google's privacy policy:
Google Privacy Policy

Microsoft Advertising (Bing Ads)

We use Microsoft Advertising, a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft"), to present you with personalized advertisements.

Purpose of data processing

Microsoft Advertising enables us to display advertisements on Bing search results pages and in the Microsoft advertising network. This enables us to present you with relevant offers and optimize our marketing measures.

Legal basis

The processing of your personal data is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time by adjusting your cookie settings.

HubSpot (CRM)

We use HubSpot, a service of HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA ("HubSpot"), as our central system for managing customer relationships (CRM) and for carrying out marketing activities.

Purpose of data processing
HubSpot helps us to manage customer contacts, personalize communication with customers and interested parties, carry out marketing campaigns and analyse customer behaviour on our website.

Collection and processing of data in CRM
As part of CRM use, we collect and store the following data in HubSpot:

Legal basis

Your personal data is processed on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR (for marketing cookies) or for the fulfillment of the contract or implementation of pre-contractual measures in accordance with Art. 6 para. 1 lit. b GDPR (for CRM use in the context of customer relationships). You can withdraw your consent at any time by adjusting your cookie settings.

Further information: Further information on data protection at HubSpot can be found in HubSpot's privacy policy:
https://legal.hubspot.com/de/privacy-policy

Zendesk

Lanes & Planes GmbH uses the Zendesk ticket system, a customer service platform from Zendesk Inc, 1019 Market St, San Francisco, USA (www.zendesk.com), to process customer inquiries.