We take the data protection of personal data and thus your privacy very seriously. With this data protection declaration, TSS Touristik Service System GmbH (TSS GmbH) clarifies, among other things, the type, scope and purpose of the collection and use of personal data on this website. In particular, we inform you about the collection of personal data when you use our website and when you contact us by e-mail or telephone. Personal data are all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.
I. Name and contact details of the person responsible:
TSS Touristik Service System GmbH, Bremer Str. 65, D-01067 Dresden, Germany, telephone: +49 (0) 3 51 8 79 00 0, fax: +49 (0) 3 51 8 79 00 22, e-mail:
II. Name and contact details of the data protection officer
Attorney Christian Krösch, SLK Compliance Services GmbH, Königsbrücker Straße 76, 01099 Dresden, Germany, telephone: 0351 89676360, e-mail:
III General information on the collection, transfer and storage period of personal data
We process your personal data in accordance with the provisions of the DSGVO, the Federal Data Protection Act (BDSG) and all other relevant laws.
First and foremost, data processing serves to ensure a smooth visit to this website and registration for the annual conference of TSS GmbH. When you contact us by e-mail or telephone, the data you provide (your e-mail address, your name and telephone number if applicable) will be stored by us in order to answer your questions. The primary legal basis for this is Art. 6 Para. 1 lit. b) and f) DSGVO. In addition, your separate consent pursuant to Art. 6 para. 1 a), 7 DSGVO may be used as a data protection permission regulation. We also process your data in order to be able to fulfil our legal obligations, especially in the area of commercial and tax law. This is done on the basis of Art. 6 Para. 1 c) DSGVO. Where necessary, we also process your data on the basis of Art. 6 Para. 1 f) DSGVO in order to protect the legitimate interests of ourselves or third parties.
Your personal data will not be transferred to third parties for purposes other than those listed below. We will only pass on your personal data to third parties if you have given your express consent in accordance with Art. 6 Para. 1 letter a) DSGVO, if the transfer in accordance with Art. 6 Para. 1 letter f) DSGVO is necessary for the assertion, exercise or defence of legal claims, and if there is no reason to assume that you have an overriding interest worthy of protection in not passing on your data, in the event that the transfer in accordance with Art. 6 para. 1 lit. c) DSGVO as well as this is legally permissible and is necessary for the processing of contractual relationships with you according to Art. 6 para. 1 lit. b) DSGVO.
If we would like to use commissioned service providers for individual functions of our offer or use your data for advertising purposes, we will inform you in detail about the respective processes below. We will also state the specified criteria for the storage period.
We will delete your personal data as soon as they are no longer required for the following purposes. After termination of a contractual relationship, your personal data will be stored as long as we are legally obliged to do so. This regularly results from legal obligations to provide evidence and to retain data, which are regulated in the German Commercial Code and the German Fiscal Code, among others. The storage periods thereafter are up to ten years. In addition, personal data may be stored for the time during which claims can be made against us (statutory limitation period of three or up to thirty years).
IV. Individual processing of personal data on our website
In the following, we will explain to you in particular which personal data we collect from you, on what basis and for what purpose
(1) Log files when visiting the website
For technical reasons and without any action on your part, your Internet browser transmits the following data to us if you use the website for information purposes only, e.g. if you do not register for the annual conference of TSS GmbH. These data are the following:
- Browser type and version
- Operating system used
- Website from which you visit us (referrer URL)
- Website you visit
- Date and time of your access
- Your Internet Protocol (IP) address.
The collection of this data is technically necessary for us to display our website and to ensure its stability and security.
The data is also stored in so-called log files.
The storage in log files is done to ensure the functionality of the website. In addition, the data serves us to optimise the website and to ensure the security of our information technology systems. These purposes also include our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f) DSGVO.
This data is stored separately from any other personal data you may have provided and will never be used to draw conclusions about a specific person. This data will not be passed on to third parties or evaluated for marketing purposes and will be deleted after five days at the latest, as far as log files are concerned. Otherwise, the data will be deleted as soon as they are no longer required for the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session is ended. A possible storage or processing beyond that only takes place in such a way that the IP address is deleted or anonymized, so that an assignment to the calling client cannot be made.
The collection of data when visiting the website and the storage of the data in log files is absolutely necessary for the operation of the website. There is therefore no possibility of objection on your part.
(2) Use of cookies
When you use our website, cookies are stored on your computer system. Cookies are text files that are stored in the Internet browser or by the Internet browser on your computer system. When you call up a website, a cookie may be stored on your operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when you return to the website.
This website uses transient cookies (temporary use) and persistent cookies (use for a limited period of time), the scope and function of which are explained below:
Transient cookies are automatically deleted when you close the browser. This includes in particular the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the common session. This enables your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser. The legal basis for the processing of personal data using transient cookies is Art. 6 para. 1 lit. f) DSGVO. The purpose of using these cookies is to make it easier for you to use websites. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change. These purposes also include our legitimate interest in the processing of personal data in accordance with Art. 6 para. 1 lit. f) DSGVO.
Persistent cookies are used exclusively for the memory function of the selected language in which the website is displayed, and are only used for as long as the purpose requires; they have a maximum life of one year. You can delete the cookies in the security settings of your browser at any time. In this case, the functions and the user-friendliness of the offer could be restricted. The legal basis for processing personal data using persistent cookies is Art. 6 para. 1 lit. f) DSGVO. The "voice memo function" is used to improve the quality of our website and its user-friendliness. These purposes also include our legitimate interest in the processing of personal data in accordance with Art. 6 para. 1 lit. f) DSG-VO.
Cookies that are not technically necessary for the provision of our service are only set with your consent, which you can revoke at any time. By continuing to use the website with appropriate browser settings, you agree to the use of cookies within the scope of this data protection declaration. You can inform us of your consent by adjusting your browser settings in such a way that you determine, for example, that you will be informed about the setting of cookies and that they will only be accepted if you expressly confirm this. In this way, you can also determine that you allow the acceptance of cookies for certain cases or generally. You can configure your browser settings according to your wishes and, for example, control the acceptance or rejection of third-party cookies or all cookies. We would like to point out, however, that you may not be able to use all the functions of this website. The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 para. 1 lit. a) DSGVO, provided the user has given his consent to this.
(3) Participation in the annual meeting
(a) As a travel agency
For participation in the annual conference of TSS GmbH as a travel agency, registration via this website " is required. To register, the membership number of TSS GmbH, the name of the travel agency, the address of the travel agency (postcode, city, street, house number), the participant's first and last name as well as the participant's e-mail address must be entered in the input mask provided. The data collected, except for the e-mail address, serves the purpose of ensuring that only persons or companies working for members of TSS GmbH are registered for the annual conference. This is also where the legitimate interest in the use of this data lies. The legal basis for this is Art. 6 para. 1 lit. f) DSGVO.
Once registration has been completed, a confirmation will be sent immediately afterwards to the e-mail address provided in the registration form, which will also contain the personal log-in data for participation in the TSS GmbH annual conference. Other information concerning the handling and implementation of the TSS GmbH annual conference will also be sent to this e-mail address. The legal basis for this is Art. 6 para. 1 lit. b) DSGVO.
Furthermore, the data is required for the processing and implementation of registration and participation in the annual conference of TSS GmbH. The legal basis for the processing of personal data with regard to registration and participation in the annual conference of TSS GmbH is Art. 6 para. 1 lit. b) DSGVO.
(b) As service provider/organizer
If you are interested in participating in the annual conference of TSS GmbH as a service provider or organizer, you can fill out the corresponding "Become an Exhibitor" form on this website and send it to TSS GmbH. For this purpose, you will need to specify the relevant company or firm, the name and first name of the contact person, the e-mail address and, if applicable, your message. After submitting the form, a link for registration ("registration link") as a service provider/organizer will be sent to the e-mail address provided immediately afterwards. The use of this data serves to process your request. The legal basis for this is Art. 6 para. 1 lit. b) DSGVO.
Registration for the annual conference of TSS GmbH is possible via the form which can be reached via the "registration link". To register, it is necessary to enter the company or business, the address of the company (postcode, city, street, house number), surname and first name of a participant as well as the e-mail address and which trade fair stand option is chosen in the input mask provided. All other details are optional, or can be entered under the item "You want more? Your upgrade options". The use of this data serves the purpose of processing, execution and to provide the selected service. The legal basis for this is Art. 6 para. 1 lit. b) DSGVO.
(c) Storage period of the data from the registration
The data collected in the registration or in the registration process will be stored as long as they are necessary for the processing of the selected services, i.e. until at the latest after the annual meeting of TSS GmbH, unless you have consented to a storage beyond that or unless the further processing of the data is necessary for the assertion, exercise or defence of legal claims or will be legally obliged to store the data. The legal basis for the processing of personal data for the purpose of fulfilling the legal archiving and storage obligations is Art. 6 para. 1 lit. c) DSGVO.
(d) No obligation to provide the data
You are not obliged to provide the aforementioned personal data. The communicated data are necessary for the conclusion of a contract or for the processing and execution of the registration as well as participation in the annual conference and the selected services. Without the provision of the data, a conclusion of a contract or the execution of a contract or the registration and participation in the annual conference of TSS GmbH may not be possible.
V. Data Security
For security reasons and to protect the transmission of confidential content, such as registration for the annual conference of TSS GmbH or inquiries that you send to us as site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
We also use suitable technical and organisational security measures to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments. "
VI. collection of personal data when contacting us by e-mail, by post and by telephone,
(1) Collection of personal data from customers, interested parties and suppliers
We collect your personal data as a customer, prospective customer or supplier only if you provide us with this data by e-mail, by post or by telephone. Then we collect the information that comes about in the course of contacting you. This includes in particular names and transmitted contact data, date and reason of the establishment of contact. The personal data collected from you will only be used for the purpose of providing you with the requested products or services (legal basis Art. 6 para. 1 b) DSGVO), or for other purposes for which you have given your consent (legal basis Art. 6 para. 1 a) DSGVO) and which are described in this Privacy Policy. You have the possibility to revoke your consent to the processing of personal data at any time.
You are not obliged to provide the aforementioned personal data. The data provided may be necessary for the conclusion of a contract. Without the provision of the data, communication, conclusion of a contract or contract processing may not be possible.
A transmission of the data relevant in the respective individual case is carried out on the basis of the statutory provisions or a contractual agreement to public bodies in the case of overriding statutory provisions, to external service providers or other contractors and to other external bodies, provided that you have given your consent or a transmission is permitted for overriding reasons of interest. There is no intention to transfer your data to a recipient in a third country (not an EU/EEA member state) or to an international organization.
The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected. This is the case for the personal data provided when the respective conversation with you has ended. The conversation is finished when it can be concluded from the circumstances that the matter in question has been finally clarified. Insofar as the communicated data is subject to the tax and commercial law obligations to retain data, it will be stored for the duration of the retention obligations of ten years and then deleted, unless you have consented to storage beyond this period or the further processing of the data is necessary for the assertion, exercise or defence of legal claims. The legal basis for the processing of personal data for the purposes of fulfilling the statutory archiving and storage obligations is Art. 6 Paragraph 1 lit. c) DSGVO".
(2) Collection of personal data from applicants
We only collect your personal data as an applicant if you provide us with this information of your own accord by e-mail, by post or by telephone. This applies both to applications in response to job advertisements and to unsolicited applications. In this case, we record the information provided in the context of the application. This includes in particular name, date of birth, contact data, interests, qualification data as well as educational and professional background. The personal data collected from you will only be used for the purpose of carrying out the application procedure (legal basis Art. 6 para. 1 lit. a), b) and f) DSGVO, § 26 BDSG).
You are not obliged to provide the aforementioned personal data. The data provided may be required for a future contract after the application procedure has been completed. Without the provision of the data, it may not be possible to communicate, carry out the application procedure or conclude a contract.
A transmission of the data relevant in the respective individual case is based on the legal provisions or a contractual agreement. Data is transferred to employees of the personnel department, employees of the management and the respective head of department. Your personal data will not be transferred to third parties. There is no intention to transfer your data to a recipient in a third country (not a member state of the EU / EEA) or to an international organisation.
The data will be deleted as soon as they are no longer required for the purpose for which they were collected. Therefore, we will retain your data for six months after the application procedure has been completed in the event of rejection, after the rejection decision has been communicated to you. If you have consented to longer storage, the storage period is two years. After this period we will either delete your data or ask for your consent again. You have the possibility to revoke your consent to the processing of your personal data at any time.
VII. Objection or revocation against the processing of your data
If you have given your consent to process your data, you can revoke it at any time. Such a revocation influences the permissibility of processing your personal data after you have given it to us.
Insofar as we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if the processing is in particular not necessary for the fulfilment of a contract with you, which is described by us in the following description of the functions. In the event of such an objection, we request that you explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the facts of the case and will either stop or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.
Of course, you can object to the processing of your personal data for the purposes of advertising and data analysis at any time. You can inform us about your objection to the processing of your personal data under the following contact details:
VIII. Your rights
You have the right to request information about your personal data processed by us in accordance with Art. 15 DSGVO. In particular, you may request information on the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right of rectification, cancellation, restriction of processing or opposition, the existence of a right of appeal, the origin of your data, if not collected by us, as well as the existence of automated decision making including profiling and, if applicable, meaningful information on the details of such data.
In accordance with Art. 16 DSGVO, you can immediately request the correction of incorrect or incomplete personal data stored by us. In accordance with Art. 17 DSGVO, you have the right to demand the deletion of your personal data stored with us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
In accordance with Art. 18 DSGVO, you have the right to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, if the processing is unlawful but you refuse to delete it and we no longer require the data, but you require it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing in accordance with Art. 21 DSGVO.
In accordance with Art. 20 DSGVO, you have the right to receive your personal data that you have provided us with in a structured, common and machine-readable format or to request that it be transferred to another responsible party.
In accordance with Art. 7 Para. 3 DSGVO, you have the right to revoke the consent you have given us at any time. As a result, we may no longer continue to process the data which was based on this consent in the future.
You also have the right, in accordance with Art. 77 DSGVO, to complain to a supervisory authority about the processing of your personal data by us, such as the Saxon data protection officer responsible for us, Bernhard-von-Lindenau-Platz 1, 01067 Dresden, telephone: 03 51 / 49 3-5401, e-mail:
IX. Up-to-dateness and amendment of this data protection declaration
This privacy policy is currently valid and has the status May 2020
Due to the further development of our website and offers above or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can access and print out the current data protection declaration at any time on the website at https://www.tss-jahrestagung.de/datenschutzerklaerung.