Info

Information on the Processing of Your Data

According to Article 12 of the General Data Protection Regulation (hereinafter: GDPR), we are obliged to inform you about the processing of your personal data when interacting with our website. We take the protection of your personal data very seriously and this privacy policy will inform you about the details concerning how your data are processed and your legal rights in this respect.

We reserve the right to adapt the privacy policy with effect for the future, in particular in the event of further development of the website, the use of new technologies or changes in the legal basis or the relevant jurisdiction.

We recommend that you take some time to read through the privacy policy and print a copy for your records.

Definitions
- "Website" or "Internet presence" means a person’s interaction on all pages of www.aventuradobrasil.com.
- "Personal data" means all information relating to an identified or identifiable natural person. Identifiable refers to any person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal data therefore include, for example, a person's name, email address and telephone number, but may also include data about preferences, hobbies and memberships.
"Processing" means operations or series of operations that are performed upon personal data, whether or not by automatic means, such as collection, recording, organization, sorting, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment, interconnection, restriction, deletion or destruction.
- "Pseudonymisation" means the processing of personal data in such a way that the personal data cannot be attributed to a specific data subject without the need to obtain additional information, provided that this additional information is kept separately and is subject to technical and organizational measures which ensure that the personal data are not attributed to an identified or identifiable natural person.
- “Consent" shall hereinafter mean any freely given, informed and unequivocal expression of will in a specific case, in the form of a declaration or other unequivocal affirmative act by which the data subject signifies his or her consent to the processing of personal data relating to him or her.
- "Google" further means Google, Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; available in the European Union at Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Scope

The privacy policy applies to all pages of www.aventuradobrasil.com. It does not extend to any linked websites or to the internet presence of other providers.

Responsible Provider

We are responsible for the processing of personal data within the scope of this privacy policy:

Aventura do Brasil Viagens Ltda.
Avenida Rio Branco, 404, torre II, sala 1203
88015-200 Florianópolis - Brazil
+55-48-3206-2335
info@aventuradobrasil.com

Represented by: Mr. Michael Krämer

Representative of the Provider in the European Union (EU)

Mr Sebastian Seifert
Max-Planck-Strasse 28
31787 Hamelin
Germany
Email: info@aventuradobrasil.de

Questions on Data Protection

If you have any questions regarding data protection as it relates to our company or our website, please contact us here:
michael@aventuradobrasil.com

Security

We have taken comprehensive technical and organizational precautions to protect your personal data from unauthorized access, misuse, loss and other external disturbances. To this end, we regularly review our security measures and adapt them according to the most robust and cutting-edge resources available.

Your Rights

You have the following rights with regard to your personal data that you can assert against us:

- Right to information (Article 15 of the GDPR),
- Right of rectification (Article 16 of the GDPR) or deletion (Article 17 of the GDPR),
- Right to restrict processing (Article 18 of the GDPR),
- Right to object to the processing (Article 21 of the GDPR),
- Right to withdraw your consent [Article 7(3) of the GDPR],
- The right to receive the data in a structured, common, machine-readable format ("data transferability") and the right to transfer the data to another responsible party provided that the conditions of Article 20(1)(a)(b) of the GDPR are met.

You can assert your rights by notifying the appropriate individuals designated in the "Responsible Provider/Representative of the Provider in the European Union" or "Questions on Data Protection" sections above.

You also have the right to file a complaint to a data protection supervisory authority about our processing of your personal data (Article 77 of the GDPR).

Use of the Website to Access Data

Our website may be used for purely informational purposes without a need for identity disclosure. When browsing individual pages on the website in this manner, only access data are transmitted to our web space provider for the successful display of the website. These are the following data:

- Browser type/browser version
- Operating system used
- Language and version of the browser software
- Host name of the accessing end device
- IP address
- Website from which the request comes
- Content of the request (concrete page)
- Date and time of the server request
- Access status/HTTP status code

The system’s temporary processing of the IP address is necessary for the website to display properly on your computer. The subsequent processing of your IP address for the remaining duration of the session is necessary for the same reason. The legal basis for this processing is substantiated in Article 6(1)(f) of the GDPR.

The access data are not used to identify individual users nor are they merged with other data sources, and are deleted when they become no longer necessary for the purpose of their processing. In the event of data collection for the provision of the website, you may voluntarily end your visit to the website.

IP addresses are stored in log files to ensure the functionality of the website. In addition, the data are used to optimize the website and to ensure the security of our information technology systems. At no point are the data subjected to analyses for marketing purposes. The data are generally deleted within seven days, however processing beyond this span of time is possible in individual cases. In the latter case, the IP address will be deleted or alienated in such a way that it will no longer be possible to assign the calling client.

Data collection for the provision of the website and data processing in log files are absolutely necessary for the successful operation of the website. You may object to data processing. In the event of a justified objection, we will examine the facts of the case and will either stop, adapt the data processing or fully explain our rationale for continuing the processing.

Cookies

In addition to the aforementioned access data, so-called cookies are stored in the Internet browser of the terminal device used when navigating the website. These are small text files with a sequence of numbers that are stored locally in the cache of the browser used. Cookies do not become part of the PC system and cannot execute programs. They serve to make our website user-friendly. The use of cookies may be technically necessary or for other purposes (e.g., analysis/evaluation of website use).

a) Technically necessary cookies
Some elements of our website require that the calling browser be identified even after a page change. The following data are processed in the cookies:

- Language settings
The legal basis for this processing is substantiated in Article 6(1)(f) of the GDPR. The user data collected through technically necessary cookies are not processed for the purpose of creating user profiles.
We also use so-called "session cookies," which store a session ID with which various requests from your browser can be assigned to the common session. Session cookies are necessary for successful navigation of the website. In particular, they enable us to recognize the terminal device used when you return to the website. We use this cookie to recognize you on subsequent visits to the website if you have an account with us. Otherwise, you would have to log in with every future visit to the website. The legal basis for this processing is substantiated in Article 6(1)(f) of the GDPR. We use session cookies to facilitate user-friendly interaction with the website.

Most browsers are pre-set to automatically accept cookies. You can object to cookies processing your data. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Previously-stored cookies can be deleted at any time. This can also be done automatically. If cookies for our website are deactivated, it may not be possible to use all the functions of the website to their full extent.

b) Technically not necessary cookies
We also use cookies on the website that enable us to analyze the surfing behavior of the users. The following data, for example, are stored and processed in the cookies:

- Entered search terms
- Frequency of page views
- Use of website functions, such as the Wish List.

We use cookies to store content in the Wish List for a period of 7 days. These cookies are generally used to create a more user-friendly environment. The legal basis for this processing is substantiated in Article 6(1)(f) of the GDPR. Cookies that are not technically necessary are automatically deleted after a specified period of time, which may vary depending on the cookie.

You can file an objection to data processing. Your right to objection is substantiated by the justifications of your unique situation. We will not process your data further unless we convincingly present relevant rationales that serve your personal interests and those of your rights and freedoms, and also if the processing serves the assertion and exercise of or defense against legal claims [Article 21(1) of the GDPR]. By changing your browser settings, you have the option of blocking the placement of cookies generally or selectively or of removing cookies previously stored. You can have appropriate instructions displayed before a cookie is set, or even prevent the use of cookies by opening the browser used in "private mode." If you change the browser settings for the use of cookies or deactivate cookies, the range of functions of the website may be limited.

If we integrate third party cookies into our website, we will point this out separately below.

Contact with Our Company

If you contact our company (e.g., via email or the contact form on the website), the personal data you provide will be processed in order to respond to your inquiry.

In order to process inquiries via the contact form on the website, it is absolutely necessary to provide a name, or pseudonym, and a valid email address. When the inquiry is submitted, the following data are also processed:

- IP address
- Date/time of registration
- Phone number
- Address and date of birth (for booking requests)

The legal basis for the processing is substantiated in Article 6(1)(f) of the GDPR or Article 6(1)(b) of the GDPR if the purpose of the inquiry is to conclude a contract. If the provision of your data is necessary for the conclusion of a contract, it may be impossible to conclude or implement the contract, or to process the inquiry without it.

The processing of personal data from the input mask serves the sole purpose of processing the inquiry. If you contact us by email, the same legitimate interest applies in the processing of data. The other personal data processed during the submission process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

In this context, the data will not be passed on to third parties. The data are processed exclusively for the purpose of processing communication. We delete the data collected during this connection once processing is no longer necessary, or limit processing to compliance with the existing legally binding storage obligations.

Processing and Disclosure of Personal Data for Contractual Purposes

We process your personal data if and insofar as necessary for the initiation, establishment, execution and/or termination of a legal transaction with our company. The corresponding legal basis arises from Article 6(1)(b) of the GDPR. If data processing is necessary for the conclusion of a contract, it may be impossible to conclude, execute and/or terminate a legal transaction with our company if the data are not provided.

Once the purpose has been achieved (e.g., contract processing), the personal data will be either blocked for further processing or deleted, unless we are entitled to further storage and processing on the grounds of your personal consent (e.g., consent to process your email address to send electronic advertising mail), a contractual agreement, a legal authorization (e.g., authorization to send direct advertising) or on the basis of legitimate interests (e.g., storage for the enforcement of claims).

Your personal data will be passed on to third parties only if:
- it is necessary for the establishment, execution or termination of legal transactions with our company (e.g., when passing on data to a payment service provider/mail order company for the purpose of processing a contract with you), per Article 6(1)(b) of the GDPR;
- a subcontractor or vicarious agent that we use exclusively in the context of providing offers or requested services requires this data (such individuals are, unless you are expressly informed otherwise, only entitled to process data to the extent necessary to provide the offer or service);
- an enforceable administrative order exists [Article 6(1)(c) of the GDPR];
- an enforceable court order exists [Article 6(1)(c) of the GDPR];
- we are obliged to do so by law [Article 6(1)(c) of the GDPR];
- processing is necessary to protect the vital interests of the data subject or of another natural person [Article 6(1)(d) of the GDPR]; or
- we are authorized or even obliged to pass on information in order to pursue overriding legitimate interests [Article 6(1)(f) of the GDPR].

Outside of the aforementioned parameters, your personal data will not be passed on to other persons, companies or institutions unless you have effectively consented to such a transfer (e.g., to the performance of a credit check). The legal basis for processing is then substantiated by Article 6(1)(a) of the GDPR.

Feedback Requests via Trustpilot

We reserve the right to use your provided email address in any booking requests, in accordance with the statutory provisions, in order to send you feedback requests via email for company evaluations on the Trustpilot user feedback and evaluation platform following your successful travel arrangements and trip, provided you have not already objected to processing your email address. Trustpilot is a user feedback and evaluation platform of Trustpilot A/S, Pilestræde 58, 5, 1112 Copenhagen, Denmark.

We process your email address and first name to create an encrypted link using 256-bit AES and send it to your email address. You can submit your review by clicking on the link sent. After selecting the star rating you can enter your own rating text as well as a name/pseudonym under which your rating will be published on Trustpilot and the social media channels we have stored with Trustpilot, such as Facebook and Google +. Trustpilot will only receive your aforementioned data after confirmation of the General Terms and Conditions and the subsequent submission of your rating. The data are stored on servers in Denmark, which may be transferred and processed by Trustpilot outside of the EU, in particular to the USA, whereby Trustpilot has stated that it complies with the data protection regulations for transfer to third countries by its data processors.

Trustpilot will automatically create a personal account after feedback has been given and will record the previously submitted data, in particular the name and email address provided in the evaluation. You can delete your account at any time. We have no knowledge of or influence on the storage period at Trustpilot. Further information can be found in Trustpilot's terms and conditions and privacy policies, available at https://legal.trustpilot.com/for-reviewers/end-user-privacy-terms and https://legal.trustpilot.com/for-reviewers/end-user-terms-and-conditions.

If sending electronic information is not necessary for the execution of the contract (e.g., email in informational form) and the legal basis stipulated in Article 6(1)(b) of the GDPR is relevant, the processing rests upon the legal basis established in Article 6(1)(f) of the GDPR. Our legitimate interests in the aforementioned processing are to increase and optimize our services and to ensure customer satisfaction.
We delete the data produced in this connection once processing is no longer necessary or limit the processing to compliance with the existing legally binding storage obligations.

We would like to point out that you can object to receiving direct advertising and data processing at any time with no cost incurrence other than transmission costs according to basic tariffs. You have the fundamental right to object without legitimate reason [Article 21(2) of the GDPR]. After exercising your right of objection, we will delete your data in connection with the acquisition of existing customers. For this purpose, please send your objection to the individuals mentioned in the "Responsible Provider/Representative of the Provider in the European Union" sections of this document.

Integration of Third Party Content

Third party content such as videos, maps, RSS feeds or graphics from other websites are integrated into the website, always presupposing that the providers of such content ("third party providers") are aware of the IP address of the user as the content cannot be sent to the respective user’s browser without it. The IP address is therefore required to display this content.
We make every effort possible to use only content from third party providers who process IP addresses solely for the purpose of delivering the content. However, we have no influence on whether these providers process the IP addresses for statistical purposes, among others, which will be explained further should a case arise.

Some of the third party providers may process data outside the European Union.

You can object by installing a JavaScript blocker such as the browser plugin 'NoScript' (www.noscript.net) or by deactivating JavaScript in your browser. However, functional restrictions on the website may result.

Bookmarks

Bookmarks (to websites such as Facebook.com, Twitter.com, Google+) enable you as a user of social media to create links from our website to your profiles for easier access or to share them with your contacts.

The bookmarks on our website can be distinguished by the corresponding icons (e.g., "f" or "g+") at the bottom of the page. When you open a page of our website, the bookmarks may store cookies on your terminal/browser, which are small text files with a sequence of numbers that enable the browser to be recognized. If you are also logged into one of the included social media websites, the operator of these sites will be granted authorization to keep track of which pages you visit, unless you have deactivated the acceptance and storage of cookies in your browser settings. If you use bookmarks, the appropriate information is sent to the respective social media website.

We assume no control or responsibility for the activities of those who choose to use bookmarks for the aforementioned reasons. Persons who share our content via bookmarks are not entitled to represent our company or website, or to give the appearance of doing so to third parties.

The legal basis for the use of bookmarks is substantiated in Article 6(1)(f) of the GDPR. We have no knowledge of the further processing and storage period exercised by operators of social media websites and no corresponding possibilities of exerting influence.

You can object to this data processing, which is substantiated by the justifications of your unique situation. We will not process your data further unless we convincingly present relevant rationales that serve your personal interests and those of your rights and freedoms, and also if the processing serves the assertion and exercise of or defense against legal claims [Article 21(1) of the GDPR].
You can also prevent the creation of user profiles in various ways and thus exercise your right of objection:
- by setting your browser software accordingly (in particular, the suppression of third party cookies means that you will receive no advertisements from third party providers);
- by deactivating the interest-based ads of the providers that are part of the self-regulation campaign "About Ads" via the link http://www.aboutads.info/choices, whereby this setting is deleted when you delete your cookies; or
- by opening the browser used in "private mode" to prevent the use of cookies.

Google Tag Manager

We use Google Tag Manager on our website. Google Tag Manager is a solution that allows marketers to manage website tags through one interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect personal information. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access these data. If disabled at the domain or cookie level, it will remain disabled for all tracking tags implemented with Google Tag Manager.

Services for Statistical, Analytical and Marketing Purposes

We use third party services for statistical, analytical and marketing purposes. This enables us to provide optimized and user-friendly navigation of the website. These third parties use cookies to control their services (see the section on "Cookies" above). Personal data are not processed unless otherwise explained below.

Some of the third party providers offer the possibility to directly object to the use of the respective service (e.g., by setting an opt-out cookie).

You have the right to object to this data processing, which is substantiated by the justifications of your unique situation. We will not process your data further unless we convincingly present relevant rationales that serve your personal interests and those of your rights and freedoms, and also if the processing serves the assertion and exercise of or defense against legal claims [Article 21(1) of the GDPR].
If you activate a corresponding opt-out cookie, the external provider will no longer process data on your future online behavior. A mere objection to an individually made selection of external services is also possible. If you change the browser or the terminal device used or delete all cookies, you must activate the opt-out cookie again.
You can also opt out of the use of cookies via the opt-out platform of the Bundesverband Digitale Wirtschaft e.V. (BVDW) at http://www.meine-cookies.org/cookies_verwalten/praeferenzmanager.html or via the deactivation page of the Network Advertising Initiative at http://www.networkadvertising.org/choices/. Further information on usage-based advertising and opt-out options is also available at the following link: https://www.youronlinechoices.com/.
You can also prevent the use of cookies by opening the browser in "private mode."

In the following sections, we will inform you about the services of external providers that are currently used on our website as well as the purpose and scope of the respective processing in individual cases and your existing options for objection.

Subscription to Our RSS Feed

With our RSS feeds we inform you about current customer opinions that are available on our website. An RSS feed is a modernized form of a newsletter, which can be viewed either through your browser or with a special program (RSS reader). In order to show you information updates, it is necessary to process your IP address.
The legal basis for the processing is substantiated in Article 6(1)(f) of the GDPR. We use RSS feeds to meet the informational interests of our customers and website visitors as well as for customer care and to increase our services. We delete this data upon termination of your RSS feed subscription, and two years after contract termination at the latest.

Please note that you can object to receiving news from the RSS feed at any time. To do so, you must deactivate our RSS feed in your browser or RSS reader or send your objection to the appropriate individuals stated in the "Responsible Provider/Representative of the Provider in the European Union" sections of this document. Your right to objection is substantiated by the justifications of your unique situation, unless we convincingly present relevant rationales that serve your personal interests and those of your rights and freedoms, and also if the processing serves the assertion and exercise of or defense against legal claims [Article 21(1) of the GDPR].

Google Analytics

In order to be able to adjust our website optimally to your interests, we use Google Analytics, a web analysis service from Google. Google Analytics uses so-called "cookies" (see the section "Cookies" above), which are stored on your computer and enable an analysis of your interaction with the website. The information generated from these analyses is transferred to a Google server in the USA and processed there.

In the event that IP anonymization is activated on this website, your IP address will be truncated by Google within member states of the European Union or in other signatory states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. On our behalf, Google will use this information to evaluate your interaction with the website, to compile reports on website activities for us and to provide us with further services associated with the use of the website and the internet.

The IP address transmitted by your browser within the scope of Google Analytics is not combined with other data from Google.

This website uses Google Analytics with the "_anonymizeIp()" extension. This means that IP addresses are further processed in a truncated form, thus excluding the possibility of personal references. If the data collected about you contain a personal reference, it is immediately excluded and the personal data are deleted instantly.

We use Google Analytics to analyze and regularly improve the use of our website. The statistics enable us to improve our offers and appeal more to our users. For exceptional cases in which personal data are transferred to the USA, Google has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for processing by Google Analytics is substantiated in Article 6(1)(f) of the GDPR. The Analytics cookies are deleted after fourteen months at the latest.
Further information from Google can be found at
http://www.google.com/analytics/terms/,
http://www.google.com/intl/de/analytics/learn/privacy.html,
https://policies.google.com/privacy.

You may object to this data processing, which is substantiated by the justifications of your unique situation. We will not process your data further unless we convincingly present relevant rationales that serve your personal interests and those of your rights and freedoms, and also if the processing serves the assertion and exercise of or defense against legal claims [Article 21(1) of the GDPR]. You may refuse to use cookies by selecting the appropriate settings in your browser, however please note that doing so may disable the full functionality of the website. You can also prevent the collection of data generated by cookies and data related to your interaction with the website (including your IP address) by Google and its subsequent processing by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout. You can also prevent the use of cookies by opening the browser used in "private mode".

Hotjar

We also use the Hotjar analysis service to make our website better and more user-friendly. The analysis service is provided by Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe, +1 (855) 464-6788, david@hotjar.com.
This tool detects movements on the monitored websites in so-called heat maps. All data are collected without our ability to assign them to specific users. We can only track how the mouse is moved, where it clicked and how far it scrolled up or down. These data enable us to make our website better and more customer-friendly. We also record the screen size of the device, the type of device, information about the browser, the country from which it was accessed and the preferred language. If personal information is displayed on a website, Hotjar automatically hides it, disabling any kind of tracing ability on our part.
In order to analyze your usage behavior, the tool uses so-called "cookies" (see the section "Cookies" above), which are stored on your computer and enable analyses of your interaction with the website. The information generated by the "tracking code" and "cookie" concerning your visit to our website is transmitted to the Hotjar servers and stored there. The tracking code collects only certain information about the end device, namely: IP address, device type and browser information, geographical location (country only), the preferred language to display our website, pages visited, date and time when the website was accessed. Hotjar truncates your IP address before processing it further. If the data collected about you contains any personal references, these personal references are immediately excluded and the personal data are deleted instantly.
Hotjar will use this information for the purpose of evaluating your interaction with our website, compiling reports on website usage and other relevant details. Hotjar also uses the services of third party companies, such as Google Analytics and Optimizely, to provide services. These third parties may store information that your browser sends during your visit to the website, such as cookies or IP requests. For more information on how Google Analytics and Optimizely store and use data, please see their respective privacy policies.
The legal basis for the processing is substantiated in Article 6(1)(f) of the GDPR. The cookies that Hotjar uses have different storage periods. Some have periods that last up to 365 days, while others remain valid only during the current visit. An overview of the storage period can be found at: https://www.hotjar.com/legal/policies/cookie-information. Further information about Hotjar Ltd. and about the Hotjar tool can be found at: https://www.hotjar.com/legal/policies/privacy.

You have the right to object to this data processing, which is substantiated by the justifications of your unique situation. We will not process your data further unless we convincingly present relevant rationales that serve your personal interests and those of your rights and freedoms, and also if the processing serves the assertion and exercise of or defense against legal claims [Article 21(1) of the GDPR]. You can object to the processing in various ways;
- by activating the do-not-track function in your browser software, which is supported by Hotjar Instructions (for activating the do-not-track function, instructions are available at: https://www.hotjar.com/legal/compliance/opt-out);
- by setting your browser software accordingly (in particular, the suppression of third party cookies means that you will receive no advertisements from third party providers);
- by deactivating the interest-based ads of the providers that are part of the self-regulation campaign "About Ads" via the link http://www.aboutads.info/choices, whereby this setting is deleted when you delete your cookies; or
- by opening the browser used in "private mode" to prevent the tracking of your usage.

Mouseflow

The website also uses Mouseflow, a web analysis tool from Mouseflow ApS (Flaesketorvet 68, 1711 Koppenhagen, Denmark; email: hallo@mouseflow.com, data protection notice at: https://mouseflow.com/privacy/, further: "Mouseflow").
This tool records movements on the observed web pages in so-called heat maps. All data are collected without our ability to assign them to specific users. We can only track how the mouse is moved, where it clicked and how far it scrolled up or down. This information enables us to make our website better and more customer-friendly. We also record the screen size of the device, the type of device, information about the browser, the country from which it was accessed and the preferred language. If personal data are displayed on a website, Mouseflow automatically hides them, disabling any kind of tracing ability on our part.
In order to analyze your usage behavior, Mouseflow uses so-called "cookies" (see the section "Cookies" above), which are stored on your computer and enable analyses of your interaction with the website. The information generated by the "tracking code" and the "cookie" about your visit to our website is transmitted to the Mouseflow servers and stored there. Only certain information about the terminal device is collected by the tracking code, namely: IP address, device type and browser information, geographical location (country only), preferred language for displaying our website, pages visited, date and time when the website was accessed. Mouseflow truncates your IP address before processing it further. If the data collected about you contains any personal references, these personal preferences are immediately excluded and the personal data are deleted instantly.
Selected individual visits can be recorded through these processes. A protocol of mouse movements, mouse clicks and keyboard interactions is created with the intention of randomly reproducing individual visits to the website as so-called session replays and evaluating them in the form of so-called heat maps. Through these evaluations, we seek to improve the website and to make it more attractive for our customers. The legal basis for the processing of your data is substantiated in Article 6(1)(f) of the GDPR. We do not store personal data and do not pass them on to third parties. We have no knowledge of the storage period at Mouseflow nor have influence on it.