Umlawuli ngokwentsingiselo yoMgaqo-nkqubo woKhuseleko lweDatha Jikelele (GDPR), uMthetho woKhuseleko lweDatha waseSwitzerland (DSG) kunye neminye imithetho yokhuseleko lwedatha ngulo:
UJoseph Duncan
Isitalato esiPhambili 24
8280 Kreuzlingen
Swizalend
I-imeyile: privacy@vakantio.de
Iwebhusayithi: https://vakantio.de
Akukho mfuneko esemthethweni yokuba negosa lokukhusela idatha. Imibuzo malunga nale ngxelo okanye ukusetyenziswa kwamalungelo akhankanyiweyo kwinqaku le-15 kufuneka ibhekiswe kwidilesi ye-imeyile enikiweyo apha ngasentla.
Le ngxelo isebenza kwiqonga Vakantio ( vakantio.de , zonke ii-subdomains, ii-apps zeselula ze-iOS kunye ne-Android) kwaye ichaza ukuba loluphi ulwazi lomntu esilucubungulayo, ngayiphi injongo, ngasiphi isiseko somthetho, ixesha esilugcina ngalo kwaye ludluliselwa kubani abafumana ulwazi.
I-Vakantio yincwadi yohambo kunye nenkonzo yebhlog. Siqhuba le nkqubo:
Umxholo ofikeleleka eluntwini ungasetyenziswa ngaphandle kobhaliso kwaye ngenxa yoko ngaphandle kokubonelela ngedatha yobuqu, ngaphandle kwedatha yokufikelela kwezobuchwepheshe echazwe phantsi kwengongoma yesi-4 .
Sisebenzisa imiqathango ye-GDPR. Ngokukodwa:
Ngalo lonke ixesha iqonga lifikelelwa, idatha yobugcisa iyacutshungulwa ethunyelwa ngokuzenzekelayo yibrowser okanye yiapp yomsebenzisi:
Sicubungula le datha ngokusekelwe kumdla wethu osemthethweni (Umhlathi 6 para. 1 lit. f GDPR) ukuze kunikezelwe iqonga, ukuqinisekisa ukusebenza okuzinzileyo, ukuthintela ukusetyenziswa gwenxa kunye nokuzikhusela kuhlaselo.
Ixesha lokugcina: ubuninzi beentsuku ezingama-30; amanani aqokelelweyo, angaziwayo ngokobuqu ahlala ixesha elide.
Ukusingathwa kwedatha kubonelelwa yiDigitalOcean LLC (inkampani ese-US, iiseva ezikwiFrankfurt am Main). Akukho datha idluliselwa e-USA ngexesha lenkqubo yokusingathwa kweseva ngokwayo; ukusingathwa kwedatha kuqinisekiswa ngokwesivumelwano ngesivumelwano sokusingathwa kwedatha (i-DPA) ngokuhambelana neNqaku 28 le-GDPR.
Ngokuxhomekeke kwindlela yokubhalisa ekhethiweyo, sicubungula oku kulandelayo ngexesha lokubhalisa:
Ukongeza, sigcina umhla wobhaliso, indlela yokugqibela yokungena esetyenzisiweyo, ixesha lokungena kokugqibela kunye — ngenjongo yokuthintela ukusetyenziswa gwenxa kunye nokukhusela ubungqina xa kukho ingxabano — idilesi ye-IP ngexesha lenkqubo yokungena kunye nokubhalisa.
Xa singena nge-imeyile, senza ithokheni yokungena esetyenziswa kube kanye, enomda wexesha elithile, size siyithumele kwidilesi ye-imeyile ebhalisiweyo ngomboneleli weenkonzo ze-imeyile i-AWS SES (jonga inqaku lesi-8 ).
Xa ubhalisa ngeGoogle, Apple, okanye Facebook, uza kuthunyelwa kwiphepha lokungena lomnikezeli ofanelekileyo. IVakantio ifumana kuphela idatha yeprofayili ekhankanyiweyo kwicandelo 5.1 ukusuka apho. Idatha ecutshungulwa ngumnikezeli ngokwakhe ngexesha lenkqubo yokungena ilawulwa ngumgaqo-nkqubo wayo wabucala.
Ukuqaliswa kwekhontrakthi kunye nokusebenza kwayo (Umzobo 6 para. 1 lit. b GDPR). Sikwasekela ukugcinwa kweedilesi ze-IP ngexesha lokungena ngenjongo yokuthintela ukusetyenziswa gwenxa kwi-Umzobo 6 para. 1 lit. f GDPR.
Idatha yeakhawunti igcinwa de umsebenzisi ayicime iakhawunti. Iidilesi ze-IP kwiinkqubo zokungena ziyacinywa emva kweentsuku ezingama-90.
Xa umsebenzisi edala ibhlog okanye ethumela ibhlog, sicubungula size sipapashe umxholo abawunikayo, ngakumbi:
Imifanekiso efakiweyo inokuba ne-metadata ye-EXIF, ngakumbi umhla wokuthathwa, ulwazi lwesixhobo, kunye nee-GPS coordinates. Sifunda le metadata ngexesha lokufakwa ukuze sakhe ngokuzenzekelayo izithuba (umz., ukubonisa indawo yokuthathwa kwimephu). Ifayile yomfanekiso epapashiweyo iphinda ifakwe ikhowudi ngobukhulu obubonakalayo bomsebenzisi; i-metadata yobugcisa isuswa ngokuzenzekelayo. Ulwazi lwendawo kunye nomhla olukhutshiweyo lugcinwa kwisithuba kwaye lubonakala kwabanye ukuba isithuba sisesidlangalaleni.
Izithuba kunye nemifanekiso zifikeleleka esidlangalaleni ngokuzenzekelayo. Abasebenzisi besicwangciso se -Explorer nangaphezulu banokuseta iiblogi zibe zezabucala. Iiblogi zabucala zibonakala kuphela emva kokuba umbhali evumile ngokucacileyo.
Ukusebenza kwekhontrakthi (Umzobo 6 para. 1 lit. b GDPR). Iminikelo ihlala igcinwe ide icinywe ngumsebenzisi okanye nguVakantio njengenxalenye yokumodareyitha umxholo.
Abasebenzisi banyanzelekile ukuqinisekisa, ngaphambi kokulayisha, ukuba banamalungelo afunekayo omfanekiso kunye nobuntu babo bonke abantu ababoniswayo (jonga iMigqaliselo yoSetyenziso § 8). Ukuba abantu bayabonakala kumfanekiso ngaphandle kwemvume yabo, banokucela ukuba umfanekiso ucinywe ngemijelo ekhankanyiweyo kwinqaku le-15 .
Xa umsebenzisi eshiya uluvo, ethanda iposti, okanye elandela enye ibhlog, sigcina esi senzo kunye nesitampu sexesha, i-ID yomsebenzisi, kunye nedilesi ye-IP. Idilesi ye-IP isetyenziselwa kuphela injongo yokuthintela ukusetyenziswa gwenxa kunye nokutshutshisa xa kukho umonakalo kwaye iyacinywa emva kweentsuku ezingama-90.
Amagama abasebenzisi kunye nemibhalo yezimvo iboniswa esidlangalaleni kwiqonga, ukuba iposi enxulumene nayo iyabonakala esidlangalaleni.
Isiseko somthetho: Ukusebenza kwekhontrakthi (Icandelo lesi-6 para. 1 ilitha. b GDPR), inzala eyongezelelweyo esemthethweni (Icandelo lesi-6 para. 1 ilitha. f GDPR) yokugcina i-IP.
IVakantio ithumela ezi imeyile zilandelayo kubasebenzisi:
Umboneleli wokuthumela yiAmazon Web Services EMEA SARL (Amazon SES, Region eu-central-1, Frankfurt). Isivumelwano sokucubungula idatha ngokweCandelo lama-28 le-GDPR siyasebenza. Idatha efunekayo ukuze kuhanjiswe (idilesi ye-imeyile, umxholo) icutshungulwa kuphela ngaphakathi kwe-EU.
Isiseko somthetho: Ukusebenza kwekhontrakthi (Umhlathi 6 para. 1 lit. b GDPR).
I-Vakantio ithumela ii-imeyile ezinxulumene neenkonzo kubasebenzisi ababhalisiweyo, ngakumbi izaziso malunga nezimvo ezintsha, abalandeli abatsha, izithuba ezisandula ukupapashwa kwiiblogi ezibhalisiweyo, kunye nezikhumbuzo malunga nohambo oluye lwamiswa. Olu nxibelelwano luyinxalenye yokusebenzisa iqonga.
Idilesi ye-imeyile kunye nesitampu sexesha sokuthunyelwa.
Ungazikhupha kwizicelo zezaziso zomntu ngamnye kwizicwangciso zeakhawunti yakho. Ukuze uzikhuphe ngokupheleleyo kuzo zonke ii-imeyile zenkonzo, nceda uthumele isicelo ku-privacy@vakantio.de .
Ukusebenza kwekhontrakthi (Umzobo 6 para. 1 ilitha b GDPR). Idilesi ye-imeyile iya kucutshungulwa ide isuswe iakhawunti.
IVakantio isebenzisa ubukrelekrele bokwenziwa kwiindawo ezahlukeneyo zeqonga layo. Sicace gca malunga nobungakanani bolu cwangciso apha.
Izithuba ezipapashiweyo zihlalutywa ngokuzenzekelayo ukuze kukhutshwe i-metadata—ingakumbi iindawo ezityelelweyo, iindlela zothutho, iindawo ezinomdla, imisebenzi, kunye neendawo eziya kuzo. Idatha yesakhiwo ephumayo isetyenziswa kwiqonga leekhonkco kunye neengcebiso.
Ngenxa yesi sizathu, sithumela umbhalo weposi (ngaphandle kwedilesi ye-IP yomsebenzisi okanye iinkcukacha zeakhawunti) kwi -OpenAI Ireland Limited (eseDublin, apho ukucutshungulwa kwedatha kusenzeka nase-USA). I-OpenAI icubungula umxholo odluliselweyo kuphela ukuze iphendule isicelo esithile kwaye kungekhona ukuqeqesha iimodeli zayo (ezikhutshelwe ngaphandle nge-Enterprise API). I-Standard Contractual Clauses (ii-SCC) kunye nesivumelwano sokucutshungulwa kwedatha ngokwe-Article 28 GDPR ziyasebenza.
Amanqaku ashicilelweyo aguqulelwa ngokuzenzekelayo kwezinye iilwimi ukuze afikeleleke kubafundi kwezinye iindawo zeelwimi. Ngokuxhomekeke kwinqaku, sisebenzisa i- Google Cloud Translation API (Google Ireland Limited, Dublin) okanye i-OpenAI API (jonga icandelo 10.1) kule njongo. Kuphela ngumbhalo oza kuguqulelwa odluliselwayo; ulwazi lweakhawunti okanye lwesixhobo alwabelwana ngalo.
Izithuba ezisandula ukupapashwa kunye nezimvo zijongwa ngokuzenzekelayo ukuba azikho na izaphuli-mthetho ezinokwenzeka kwimigaqo yethu yenkonzo (umz., ugaxekile, intetho yentiyo, ukwaphulwa kwelungelo lokushicilela). Ngokusekelwe kwiziphumo, isithuba sinokuphawulwa ngokuzenzekelayo ukuze sihlolwe ngesandla okanye sibanjwe.
Olu cwangciso ludibanisa ukujonga okusekelwe kwimithetho kunye ne-OpenAI API. Isigqibo sokugqibela esizenzekelayo ngokupheleleyo esinempembelelo yomthetho ngaphakathi kwentsingiselo yeNqaku 22 le-GDPR asenzeki —umntu ugqiba ekubeni afihle, avale, okanye acime isithuba sokugqibela.
Abasebenzisi banokuthetha ngokuzithandela ngeWhatsApp kunye nomncedisi wokuhamba osebenza nge-AI ophanda uluhlu kwiVakantio aze anike iingcebiso zokuhamba. Imiyalezo yencoko idluliselwa kwi-WhatsApp Cloud API yeMeta Platforms Ireland Limited (Dublin) kunye ne-OpenAI. Ukusetyenziswa kwale nkonzo kunokwenzeka kuphela emva kokuba umsebenzisi eqalise unxibelelwano ngokukhutheleyo.
Ukusebenza kwekhontrakthi kunye nomdla osemthethweni kwinkonzo esebenzayo nekhuselekileyo (Umzobo 6 para. 1 lit. b kunye ne-f GDPR), ukuze umncedisi we-WhatsApp avume kwakhona (Umzobo 6 para. 1 lit. a GDPR).
I-OpenAI kunye neGoogle zinokudlulisela idatha yobuqu kumazwe esithathu, ngakumbi i-USA. Ukudluliselwa kwi-OpenAI kusekelwe kwiStandard Contractual Clauses (ii-SCC); kwi-Google Cloud, isigqibo sokwanela kwe -EU-US Data Privacy Framework naso siyasebenza.
Abasebenzisi banokuchasa uhlalutyo lwezithuba zabo oluxhaswa yi-AI nangaliphi na ixesha ngokuqhagamshelana ne-privacy@vakantio.de . Kwimeko yenkcaso, siya kuthintela izithuba ezintsha ekucutshungulweni ziinkqubo ze-AI zangaphandle; i-metadata ekhutshwe ngaphambili nayo iya kususwa xa iceliwe.
Izithuba ziboniswa kwimephu. Sisebenzisa oku kulandelayo:
Xa iphepha elinombono wemephu lifikelelwa, isikhangeli somsebenzisi sithumela idilesi yaso ye-IP ngqo kuGoogle. Asinalawulo koku; ukucutshungulwa kwedatha kaGoogle kulawulwa ngumgaqo-nkqubo wabucala.
Isiseko esisemthethweni: umdla osemthethweni kwisibonisi semephu esisebenzayo (Umzobo 6 para. 1 lit. f GDPR).
Xa ubhukisha isicwangciso esihlawulelwayo (i-Explorer, i-Adventurer), ukusetyenzwa kwentlawulo kuphathwa yi- Stripe Payments Europe Ltd. (eseDublin). I-Stripe ifumana idatha efunekayo ukuze ihlawulwe (idilesi ye-imeyile, igama, isicwangciso esikhethiweyo, indlela yokuhlawula).
Asizigcini ngokwethu iinkcukacha ezipheleleyo zentlawulo; iinkqubo zethu ziqulathe kuphela:
I-Stripe inoxanduva ngokwahlukileyo ekucwangcisweni kwentlawulo. Umgaqo-nkqubo wabucala we-Stripe uyasebenza naku: stripe.com/de/privacy .
Isiseko somthetho: Ukusebenza kwekhontrakthi (Icandelo 6 para. 1 lit. b GDPR); ukongeza, izibophelelo zokugcina umthetho phantsi komthetho werhafu noworhwebo (Icandelo 6 para. 1 lit. c GDPR).
Ixesha lokugcina: Idatha yentlawulo ixhomekeke kwiimbopheleleko zokugcina umthetho wezorhwebo kunye nowerhafu ukuya kuthi ga kwiminyaka eli-10.
Imifanekiso kunye neevidiyo zihanjiswa ngeCloudflare R2 / img2.vakantio.de (Cloudflare Inc., isebe le-EU). Xa ufikelela kumxholo, isikhangeli somsebenzisi sithumela idilesi yaso ye-IP kwiCloudflare; oku kucutshungulwa kuphela ukuze kuhanjiswe kwaye kukhuselwe i-DDoS. Kukho isivumelwano sokucubungula idatha (DPA) neCloudflare; ukucutshungulwa kwenziwa phantsi kweMigqaliselo yeSivumelwano se-EU Standard kunye namanyathelo ongezelelweyo obuchwephesha kunye nombutho.
Sisebenzisa ikhukhi yeseshoni ukugcina ukungena kwakho, kunye neekuki ezincinci ukugcina ulwimi oluthandayo kunye nokwamkelwa kwesaziso sekhukhi. Ezi khukhi ziyimfuneko ngokwetekhnoloji (Icandelo lama-25 Isiqendu sesi-2 No. 2 TTDSG) kwaye azidingi mvume yakho.
Ukuba unike imvume yakho, sisebenzisa inkonzo yohlalutyo lwewebhu iGoogle Analytics 4 (Google Ireland Limited) ukulinganisa ukufikelela kunye nokuziphatha komsebenzisi. Idatha elandelayo iqokelelwa ngokukodwa:
Idatha ihlanganiswe yaba ziinkcukacha-manani ezingezizo. Ayinxulunyaniswanga nomntu othile.
Isiseko somthetho: Imvume (§ 25 para. 1 TTDSG kunye neArt. 6 para. 1 ilitha. a GDPR). Imvume ingarhoxiswa nangaliphi na ixesha ngokusebenzisa useto lwekuki olusezantsi.
Ukudluliselwa kwe-intanethi kwilizwe lesithathu ukuya e-USA kusekelwe kwi- EU-US Data Privacy Framework kunye nee-SCC.
Unelungelo lokufumana oku kulandelayo kuthi nangaliphi na ixesha:
Nceda uthumele imibuzo ku-privacy@vakantio.de . Ngenxa yezizathu zokhuseleko, sinelungelo lokuqinisekisa ubuwena bakho ngaphambi kokuba sicubungule isicelo.
Unelungelo lokufaka isikhalazo kwigunya elilawula ukhuseleko lwedatha—ingakumbi kwilizwe elililungu le-EU ohlala kulo, kwindawo osebenza kuyo, okanye kwindawo apho kutyholwa ukuba kwaphulwe khona umthetho. EJamani, iikhomishinala zokhuseleko lwedatha zelizwe ezichaphazelekayo zinoxanduva (isishwankathelo: bfdi.bund.de ). ESwitzerland, iKhomishina yoKhuseleko lweDatha kunye noLwazi yeFederal (FDPIC) inoxanduva ( edoeb.admin.ch ).
| Uhlobo lwedatha | Ubude bexesha lokugcina |
|---|---|
| Iilog zeseva | Iintsuku ezingama-30 |
| Ngena kwiidilesi ze-IP | Iintsuku ezingama-90 |
| Idatha yeakhawunti kunye neprofayili | ide i-akhawunti icinywe |
| Izithuba ezipapashiweyo | ide icinywe ngumsebenzisi okanye ngenxa yeVakantio |
| Idilesi ye-imeyile yezaziso zenkonzo | ide i-akhawunti icinywe |
| Idatha yentlawulo yeStripe | ukuya kuthi ga kwiminyaka eli-10 (umthetho wezorhwebo/werhafu) |
| Izigqibo zokulawula | Iminyaka emi-3 |
Sisebenzisa abaprosesa bedatha abalandelayo. Sinezivumelwano nabo bonke ababoneleli ngokuhambelana neNqaku 28 GDPR; ukudluliselwa kwamanye amazwe, sikwanazo neziqendu zesivumelwano esiqhelekileyo kunye/okanye izigqibo ezifanelekileyo.
| Umboneleli | Injongo | Indawo / Indawo yokucubungula | Ukudluliselwa kwelinye ilizwe |
|---|---|---|---|
| I-DigitalOcean LLC | Ukusingatha (iseva) | i-EU (eFrankfurt) | Hayi (inkampani eMelika) |
| I-Cloudflare Inc. | I-CDN yomfanekiso, ukhuseleko lwe-DDoS | kwihlabathi liphela | Ewe, ii-SCC |
| Iinkonzo zeWebhu zeAmazon EMEA SARL | Ukuthumela i-imeyile (i-SES) | i-EU (eFrankfurt) | Hayi |
| Iintlawulo zeStripe Europe Ltd. | Ukucutshungulwa kwentlawulo | i-EU (eDublin) | Ewe, ii-SCC |
| I-OpenAI Ireland Limited | Uhlalutyo lwe-AI, uguqulelo, uhlengahlengiso | i-EU (eDublin), eMelika | Ewe, ii-SCC |
| I-Google Ireland Limited | Iimephu, i-geocoding, uguqulelo, uhlalutyo | i-EU (eDublin), eMelika | Ewe, ii-DPF + ii-SCC |
| I-Meta Platforms Ireland Limited | Umncedisi we-WhatsApp, ukungena kwi-Facebook | i-EU (eDublin), eMelika | Ewe, ii-DPF + ii-SCC |
| I-Apple Distribution International Ltd. | Ngena kwi-Apple | I-EU (iCork) | Hayi |
Akukho sigqibo sibophelelayo ngokomthetho esisekelwe kuphela ekucutshungulweni okwenziwa ngokuzenzekelayo ngokwentsingiselo yeNqaku 22 le-GDPR esenzekayo. Ngokukodwa, izigqibo malunga nokuvalwa okanye ukususwa komxholo okanye iiakhawunti zenziwa ngumntu ekugqibeleni.
Inkqubo exhaswa yi-AI echazwe kwinqaku le-10 isebenza ngokukodwa ekuphuculeni umxholo, ekuguquleleni nasekuvavanyeni kwangaphambili iminikelo kwaye ayithethi ukuba abasebenzisi babhala iprofayili yabo.
Sisebenzisa amanyathelo obuchwephesha nawombutho ukukhusela idatha ecutshungulwayo ekulahlekelweni, ekulawulweni, nasekufikeleleni okungagunyaziswanga. Oku kuquka, phakathi kwezinye izinto, ukudluliselwa okufihliweyo kwe-TLS, amalungelo okufikelela athintelweyo, ii-backups eziqhelekileyo, kunye nokufikelela kwi-database okukwisiseko seseva kuphela (esingafikelelekiyo kuluntu).
Siza kuhlaziya le nkqubo yabucala ukuba imisebenzi yokucubungula idatha okanye imeko yezomthetho iyatshintsha. Inguqulelo yangoku inokufumaneka ku-vakantio.de/datenschutz .
Ukusukela nge -24 kaMeyi 2026