If you provide us with your personal data, we store and process some of this data in our own systems and make it available to other external providers. These providers include:
- Our technology, logistics and data management partners who help us to provide the services we offer or to dispatch goods.
- Our travel partners, such as external airlines, as well as airports, insurance companies and ground handling services, so that they can make the arrangements for you and provide you with the support you need.
- Our payment service providers, e.g. trustees, online payment services and card payment intermediaries who help us process customer payments and assist us in detecting and preventing fraudulent payments and bookings.
- Our insurance partners. The insurance companies process your data in accordance with their own privacy policies in the event of a contractual relationship requested by you.
The website www.condor.com uses services such as Google Analytics, a web analysis tool from Google Ireland Ltd (‘Google’). Google Analytics uses so-called ‘cookies’, i.e. text files stored on your computer that enable us to analyze your use of the website. The information that the cookie generates about your use of this website is transmitted to Google servers in the EU and in the USA and stored there. Google uses this information to analyze your use of the website, to compile reports on website activity for the website operator and to provide other services associated with website and internet usage. Google may share this information with third parties if Google is legally obliged to do so, or if these third parties process the data on behalf of Google. Google will never combine your IP address with other data stored by Google. You can prevent cookies from being installed by changing your browser settings accordingly; however, this may mean that you will no longer be able to use all the functions of this website to their full extent. By using this website, you authorize Google to process the data collected about you in the manner and for the purposes described above. You can revoke this consent at any time so that data is no longer collected and stored in the future. You can use the following plug-in for this: https://tools.google.com/dlpage/gaoptout?hl=en Google's Privacy Shield certification can be found at: https://privacy.google.com/businesses/compliance/#?dal_active=none
Our website uses Google's anonymization function. As a result, IP addresses are only stored and processed in abbreviated form so that data cannot be traced back to a specific person.
Plugins for the social network facebook.com, which is operated by Meta Platforms Ireland Limited, (‘Facebook’), are used on our website. If you access another website via our website that has one of these plugins, a connection to the Facebook servers is established and a message to your browser then displays the corresponding plugin on the website. This enables the Facebook server to recognize which pages of our website you have visited. If you are logged in as a member of Facebook, Facebook can assign this information to your private Facebook user account. If you use the plugin functions (e.g. click ‘Like’, ‘Share’ a page or leave a ‘Comment’), this information is also assigned to your Facebook user account. The only way to prevent this is to log out before using the plugin. For more information about how Facebook collects and uses the data, about your rights in this regard and about ways to protect your privacy, please refer to Facebook's privacy policy.
Condor also runs its own page on Facebook. Condor is responsible for data processing. If Condor and Facebook are joint controllers (e.g. within the scope of the GDPR pursuant to Art. 26 (1)), the corresponding agreement concluded at this link applies: https://www.facebook.com/legal/terms/page_controller_addendum Further information on responsibility can be found at the following link: https://www.facebook.com/legal/terms/information_about_page_insights_data
Condor processes your personal data when you interact with the Condor Facebook page, such as your public profile information (e.g. display name). Furthermore, this includes personal data provided in a post you have published or entered in the comment function under a post or in Messenger messages. When you interact with the Condor Facebook page, Facebook Insights processes data (statistical data on page usage) about you. For more information, please see the link https://de-de.facebook.com/legal/terms/information_about_page_insights_data
Information on the storage period and deletion of data on Facebook can be found here: https://de-de.facebook.com/about/privacy/update
Condor also has a page on the social network TikTok. You can find TikTok's privacy policy at https://www.tiktok.com/legal/page/eea/privacy-policy/en.
If you have any questions or concerns, feel free to contact us via the WhatsApp messenger service. These requests are handled via live chat by our customer service team. To identify and precisely assign it to a specific booking, we ask for personal data (e.g. your booking number).
WhatsApp is integrated into our systems via the Salesforce Service Cloud. This allows us to centrally manage all customer communications. Communication takes place via what is known as end-to-end encryption. Therefore, no data or other disclosed information can be viewed for WhatsApp. The processing takes place within the EU. You can find more information about data protection and data processing at WhatsApp under https://www.whatsapp.com/privacy. For more information about Salesforce, see the "Salesforce System Usage" section.
To optimize our customer service, we use the cloud-based contact center platform "Talkdesk", from the provider Talkdesk, Inc., 650 California Street, Floor 7, San Francisco, CA 94108, USA. Talkdesk provides various cloud-based applications for incoming and outgoing telephony and uses AI-based functions to make communication with our customers more efficient and secure.
Personal data (such as phone number, time and duration of contact, IP address, device and browser information) is processed in strict compliance with the GDPR. Talkdesk has a “privacy by design” and “privacy by default” concept, which is integrated into all relevant processes. Talkdesk is also certified according to international standards such as ISO 27001, SOC 2/3, PCI DSS and ISO 22301. The data is stored and processed in data centers within the EU. Data processing is carried out exclusively for the purpose of improving our customer service and ensuring the security of communication. If we use call recordings for training or quality purposes, we will obtain your consent in advance; the recording only starts after you have agreed and can be terminated by you at any time by withdrawing your consent. Automated decision-making within the meaning of Art. 22 of the GDPR does not apply. Personal data is generally stored for the duration of the respective support ticket, but for a maximum of six months after the process is completed, unless legal retention obligations or legitimate interests (such as the assertion or defense of claims) require longer storage.
Further information on data processing by Talkdesk can be found at: https://www.talkdesk.com/terms-of-service/privacy-notice/
Some of these external providers may be located outside the European Union (‘EU’). Some organisations based outside the EU may not be subject to the same level of data protection controls as companies within Germany and the EU. We will only transfer your data to external providers outside the EU where your personal data is protected by one or more appropriate safeguards. These include, for example, the use of standard contractual clauses in the form published by the European Commission or that contractors/suppliers can be subject to an independent data protection program approved by regulators.
With regard to data transfer to the USA, we would like to point out that the EU Commission adopted the adequacy decision for the EU-US Data Privacy Framework on July 10, 2023. It stipulates that the protection of data processed by certified companies is in line with EU standards. This means that personal data can be transferred from the EU to the USA.
To learn more about our destinations, please click on the following link.