Privacy Policy

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator.

How do we collect your data?

Some data is collected when you provide it to us (e.g. via a contact form). Other data is collected automatically when you visit the website (e.g. browser type, operating system, time of access).

What do we use your data for?

Part of the data is collected to ensure the website is provided without errors. Other data may be used to analyze your user behavior.

What rights do you have?

You have the right to obtain information about your stored personal data, request correction or deletion, withdraw consent at any time, request restricted processing, and lodge a complaint with a supervisory authority.

Analytics Tools and Third-Party Tools

When you visit this website, your surfing behavior may be statistically evaluated. This is mainly done with analytics programs. Detailed information on these analytics programs can be found in the following privacy policy.

We host the content of our website with the following provider:

External Hosting

This website is hosted externally. Personal data collected on this website is stored on the hosting provider's servers.

We use the following hosting provider:

Lovable (Lovable Labs Incorporated)

Lovable Labs Incorporated is based in the United States (1 Lincoln St, Boston, MA 02111). The transfer of personal data to the US is based on the European Commission's Standard Contractual Clauses (Module 2: Controller-to-Processor, under Implementing Decision (EU) 2021/914). Further information is available in Lovable's privacy policy: https://lovable.dev/privacy and Data Processing Agreement: https://lovable.dev/data-processing-agreement.

Data Processing Agreement

We have entered into a Data Processing Agreement (DPA) with the above-mentioned service, ensuring it processes personal data only according to our instructions and in compliance with the GDPR.

Data Protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

Please note that data transmission over the Internet (e.g. when communicating by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Responsible Party

The responsible party for data processing on this website is:

Martin Hakel
Haki Travels
Weißenburger Straße 36
81667 München, Germany

Email: info@hakitravels.com

Storage Duration

Unless a more specific storage period is stated within this privacy policy, your personal data remains with us until the purpose for processing no longer applies.

Legal Bases for Processing

If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR. If your data is required for contract fulfillment, we process it on the basis of Art. 6(1)(b) GDPR. Processing may also be based on our legitimate interest pursuant to Art. 6(1)(f) GDPR.

Recipients of Personal Data

We only disclose personal data to external parties if this is necessary for contract fulfillment, if we are legally obliged to do so, or if we have a legitimate interest in disclosure pursuant to Art. 6(1)(f) GDPR.

Withdrawal of Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. The legality of the data processing carried out until the withdrawal remains unaffected by the withdrawal.

Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION. IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING PURPOSES.

Right to Lodge a Complaint with a Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority.

Right to Data Portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format.

Access, Correction and Deletion

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data as well as a right to correction or deletion of this data.

Right to Restrict Processing

You have the right to request the restriction of processing of your personal data.

SSL/TLS Encryption

This site uses SSL/TLS encryption for security. You can recognize an encrypted connection by "https://" in the address bar and the lock icon.

Objection to Promotional Emails

We hereby object to the use of contact data published within the scope of imprint obligations for the transmission of unsolicited advertising and information materials.

Cookies

This website uses cookies. Necessary cookies are stored based on legitimate interest (Art. 6(1)(f) GDPR). Where consent has been requested, processing is based exclusively on that consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG), revocable at any time.

Inquiries by Email

If you contact us by email, your inquiry and any resulting personal data will be stored and processed to handle your request. We do not share this data without your consent.

Instagram

This website includes features of Instagram, offered by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. When active, a direct connection is made between your device and Instagram's servers.

Use is based on your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG), revocable at any time. More information: https://privacycenter.instagram.com/policy/

The company holds certification under the EU-US Data Privacy Framework (DPF).

Newsletter Data

If you subscribe to our newsletter, we require your email address. Processing is based exclusively on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the unsubscribe link.

Resend (email delivery and newsletter management)

We use the service Resend (Resend, Inc.) to send emails and manage newsletter subscriptions. The data processed there includes: your email address, your subscription status (subscribed/unsubscribed), confirmation and delivery metadata (e.g. time of signup and confirmation, delivery status, bounces) and — for the contact form — the content you submit (name, email address, message, page language and time of submission).

Newsletter signup uses double opt-in: after entering your email address you receive a confirmation email containing a link that expires after 24 hours. Your address is only stored as a subscriber once you click that link. Subscription status is maintained at Resend, and you can unsubscribe at any time via the unsubscribe link in every newsletter email.

More information: https://resend.com/legal/privacy-policy

YouTube

This website embeds YouTube videos, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Use is based on legitimate interest (Art. 6(1)(f) GDPR) or consent where requested.

More information: https://policies.google.com/privacy

Google Fonts (self-hosted)

This website uses so-called Google Fonts for a consistent display of typography. The Google Fonts are installed locally on our server. No connection to Google's servers is made, and no data is transmitted to or stored by Google in this process.