App and Website
Below we inform you in detail about the handling of your data which we process in connection with our website under the URL https://www.lambus.com/ (hereinafter referred to as "Website") and our travel planning app (hereinafter also referred to as "App").
I. General Information
The general information presented in Section I. also apply to our App, unless otherwise stated or supplemented in Section II.
The person responsible within the meaning of data protection law is Lambus GmbH, Albert-Einstein-Str. 1, D-49076 Osnabrück, Germany, telephone number: 0541 350 263 23, e-mail address email@example.com (hereinafter also referred to as "Lambus" or "we"). If you have any questions about data protection at Lambus, please contact our data protection officer at the e-mail address firstname.lastname@example.org .
2. Access to our Website
We automatically collect and store so-called log files data, which your browser transmits to us. These are:
- Browser type/version,
- Operating system,
- URL of the previously visited website,
- URL of the page you are viewing on the website,
- IP address of the accessing terminal device,
- the name and URL of the requested file,
- the amount of data transferred,
- the message as to whether the call was successful, and
- Date and time of access to our website.
The collection of this data is necessary for technical reasons. Unfortunately, it is not technically possible to use the website without providing your IP address. The data is collected for pre-contractual purposes or in our legitimate interest to provide you with the content of our website and for prosecution in the event of illegal use of our website.
3. Blog Function
On our blog, which can be found at the URL https://lambus.com/blog/, and on which we publish various articles on topics related to travel and specific destinations, you can make public comments. Your comments will be published with your username on the blog. We recommend using a pseudonym instead of your username. The username and email address are required, all other information is voluntary. If you leave a comment, we will also store your IP address. The storage of your IP address is necessary for us to be able to defend ourselves in cases of a possible publication of illegal content against liability claims, this is in our legitimate interest. We need your e-mail address and your user name in order to contact you if a third party should object to your comment as unlawful. This processing serves the execution of the contract or our legitimate interest. We reserve the right to delete comments if they should be objected to as unlawful by third parties.
4. Newsletter Subscription
When you sign up for our newsletter on our website, we collect and use your email address to keep you informed about current travel topics and news about using our website by sending you newsletters. We use the double opt-in process to subscribe to our newsletter. This means that once you have subscribed, we will send you an email to the email address you provided, asking you to confirm your subscription. The e-mail address is mandatory and without it you will not receive any newsletter from us.
The data processing associated with the dispatch of the newsletter serves the purpose of providing you with interesting information about our website and thus of user retention.
Your data will not be passed on to third parties at any time.
By registering for our newsletter you have given the following consent:
"I agree that Lambus GmbH will inform me by e-mail a maximum of once a month about current travel topics and news regarding the use of the website and app and that my user behaviour in connection with receiving the newsletter will be evaluated by my participation in a performance measurement by the service provider Mailchimp (operated by Rocket Science Group LLC (675 Ponce De Leon Ave NE, Suite 500, Atlanta, Georgia 30308, USA). My e-mail address will be forwarded to Mailchimp and stored there for the duration of my newsletter subscription. Success measurement involves storing data on when and how often a newsletter is opened and what content I click on at what time. I can revoke this consent at any time with effect for the future. The legality of the newsletters sent until receipt of the revocation remains affected. Further information can be found in the data protection declaration".
If you no longer wish to receive the newsletter, you can unsubscribe at any time. You can unsubscribe by clicking on the link in the newsletter or by informing us directly, e.g. by e-mail.
You can set your browser to being informed when cookies are set and decide individually whether to fully accept them or to only accept them in certain cases or not to accept them at all. If cookies are deactivated, however, the functionality of our website may be restricted.
5.1 Google Analytics
The following cookies will be set and used:
|_ga||Anonymous ID for analyzing page views in Google Analytics||2 years|
|_gat||Cookie to throttle the request requests.||1 minute|
|_gid||Unique User Identification||24 hours|
Google will use this data on our behalf to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage.
The data processing associated with analyses of website usage carried out by Google serves the purpose of optimally adapting the website to the needs and wishes of users.
Google and its affiliated companies operate servers worldwide on which personal data can be stored. When transferring data to third countries, Google ensures an adequate level of data protection in accordance with its data protection declaration.
In order to guarantee an anonymized collection of IP addresses, the source code of Google Analytics was extended by the code "_anonymizeIP". The IP addresses are thus only processed in abbreviated form in order to exclude the possibility of personal references. The IP address transmitted by your browser as part of Google Analytics is also not merged with other Google data.
A link in the cookie banner gives you the opportunity to obtain further information about the individual cookies. You can prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google not only through your browser settings, but also by downloading and installing the browser plug-in available at the following link:
By clicking this link an Opt-Out Cookie is set, which prevents that your data are seized by Google.
Please do not delete the respective opt-out cookie as long as you wish to maintain your revocation.
- to Google: https://www.google.de/intl/de/policies/privacy
- to Google Analytics: https://www.google.com/analytics/terms/de.html ;
5.2 Cookie Banner
If you give us permission to set and use tracking cookies via our cookie banner, you have made the following declaration:
"I consent to Lambus GmbH, Albert-Einstein-Str. 1, D-49076 Osnabrück, Germany, using tracking cookies to optimize its website and to analyze my usage patterns using Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Lambus GmbH will pass this information on to Google Ireland Limited, whereby my IP address will be anonymised as soon as possible. The information transmitted by Google to Lambus GmbH does not allow any conclusions to be drawn about my person. I can revoke this consent at any time with effect for the future, without affecting the legality and permissibility of the cookies set and used up to the time of exercising the revocation. Further information can be found in the data protection declaration".
6. Social Media
We are present on various platforms and social networks. This enables us to get in touch with our users and interested parties active there and to inform them about our services of the travel planning app. The terms and conditions and data protection information of the respective operators apply on the respective platforms. By maintaining a presence there, we are jointly responsible with the operator in the sense of data protection law.
We are represented in the following social media:
7. Legal and Contractual Obligations to make available
The provision of all data to us is neither contractually nor legally prescribed.
8. Further Processing for Legal Defence or Prosecution
We can use your data for our own legal prosecution or defense as a legitimate interest.
9. Storage Duration and Deletion of Data
The log files data that your browser transmits to us, in particular your IP address, will be anonymized or deleted 7 days after the end of your last use of the website.
The storage period of the data you enter during registration depends on the usage contract concluded with us. If the user contract is terminated by you or us through termination, we are entitled, subject to statutory retention periods, to irretrievably delete your data. The protection of the data in case of termination is incumbent on you.
Data that we process on the basis of your consent will be blocked or deleted if you revoke your consent.
If you are an invited friend whose e-mail address was given to us by a user already registered with us, we will delete your e-mail address after 30 days if you have not registered with us within this time.
The data which you have provided to us in connection with the registration for our newsletter and which you have subsequently confirmed as part of the double opt-in procedure will be deleted as soon as you have unsubscribed from the newsletter. If you do not confirm your subscription to our newsletter, your e-mail address will also be blocked or deleted after one month if we are not allowed to process your e-mail address any further.
Data that you make available in the course of using one of our presences in social media (e.g. communication with us via the comment or message function) will be deleted as soon as the purpose of the processing has ceased, i.e. your request has been dealt with and the respective platform permits deletion.
As far as we process your data in the case of a legal dispute for legal prosecution or legal defence, these data remain stored for the duration of the legal dispute or statutory limitation periods. The limitation period can be up to 30 years, whereby the regular limitation period ends after 3 years.
10. Transmission of your Data
We will only pass on your data to third parties if we are entitled to do so on the basis of your consent or if we are entitled or obliged to do so on the basis of the applicable law. The same applies if we receive your data from third parties, i.e. neither from you nor from companies commissioned by us.
An authorization exists both in the case in which third parties on our behalf collect data for us and transmit it to us, as well as in the case in which we on our part pass on data to other companies and these process the data on our behalf. The latter is particularly the case if we do not carry out our business activities (e.g. IT services in connection with the operation of the website, creation and sending of newsletters) ourselves, but have them carried out by other companies, and this activity is connected with the processing of your data. In such cases, we have previously contractually obliged these companies to use the data only for the purposes permitted by law. We are authorised to control these companies in this respect.
There is a legal obligation, for example, to pass on data to criminal prosecution authorities.
11. Your rights (Objection, Revocation, Information, Correction, Blocking, Deletion, Transfer, Complaint)
You can object to the processing of your personal data by us at any time for reasons arising from your particular situation. For this, you can use the contact possibilities mentioned in paragraph I. 1. If you file an objection, we will no longer process your personal data unless we can prove compelling reasons for the processing worthy of protection which outweighs your interests, rights and freedoms.
Furthermore, you have the right to revoke any consent you have given with effect for the future. However, the legality of the data processing based on your consent remains unaffected until the revocation is exercised.
11.3 Other rights
You have the right at any time to receive information about your personal data stored by us free of charge, to correct incorrect data and to block or delete data. Furthermore, you have the right to receive your data in a structured, common and machine-readable format and to have your data transferred by us to someone else. Finally, you have the right to complain to a data protection authority. With the exception of your right of complaint to the data protection authority, you can address your respective request to us by using the contact data mentioned in section I. 1.
12. Data Security
Your personal data will be transmitted encrypted over the internet. We secure our website and other systems by technical and organizational measures, in particular the encryption technology TSL (Transport Layer Security), against loss, destruction, access, alteration or distribution of your data by unauthorized persons.
All data collected and processed in connection with our website is stored on servers located in Frankfurt/a.M. and therefore subject to the high standards of the General Data Protection Regulation.
We take the appropriate technical and organisational measures within Art. 32 DS-GVO, taking into account the state of the art, the implementation costs and the type, scope, circumstances and purposes of the processing as well as the probability and severity of the infringement of rights and freedoms of natural persons.
In this sense, the following measures, among others, are taken to protect your data and to secure it against loss, destruction, access, alteration and distribution by unauthorised persons:
- Ensuring the confidentiality, integrity, availability and resilience of the systems and services in connection with the processing;
- Ensure rapid recovery of the availability of personal data in the event of a physical or technical incident;
- Implement procedures to regularly review, evaluate and evaluate the effectiveness of the technical and organisational measures taken to ensure the security of the processing.
Please be aware that while we strive to provide a secure and reliable website for our users, the absolute confidentiality of any communications or materials transmitted in the course of using our website cannot be guaranteed.
II. Additional Information on the App
1. Access to our App
We automatically collect and store so-called Log Files data, which your terminal transmits to us. These are:
- Type of mobile device (e.g. "iPhone 12"),
- Operating system ("iOS" or "Android"),
- Device version (e.g. "10.1"),
- Display width (e.g. 375),
- Display height (e.g. 812),
- Display scaling (e.g. 3),
- App version (e.g. "1.0.0"),
- Date and time of access to our website,
- IP address of the accessing terminal device.
The collection of this data is necessary for technical reasons. Unfortunately, it is not technically possible to use the website without providing your IP address. The data is collected for pre-contractual purposes or in our legitimate interest to inform you of the contents of our app as well as for legal prosecution in the event of illegal use of our app. If you have already registered to use our travel planning app, your data will be processed to fulfill the contract.
2. Registration with Lambus
2.1. Registration with Username and Password
When creating a user account, you will be asked to enter your first and last name, an e-mail address and a user name and password of your choice.
The username and password serve as access data. We use your first and last name to know who our contractual partner is. We use your e-mail address to communicate with you as far as this is necessary for the use of our app, e.g. to inform you about new features. This data processing serves the implementation of pre-contractual measures and the fulfillment of the contract. Without the provision of the aforementioned data, you cannot create a user account with us with the choice of your own user name and password.
In addition, after your registration, you may voluntarily submit a profile picture, state your gender and your PayPal e-mail address and username. If these voluntary data are not made by you, this remains without consequences.
You can cancel your user account at any time by sending us a message (see contact details in section I. 1. or using the e-mail address email@example.com ).
In addition, we save the IP address and time each time you access the user account. The storage takes place due to the protection against abuse and other unauthorized uses in our legitimate interest.
2.2. Registration via Facebook Connect
If you have a Facebook account and would like to register with Lambus using your Facebook login, we will first ask you for permission to process data in this context. Facebook is operated by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). If you choose to register using your Facebook login, you have given the following statement:
"I agree that my public profile data stored on Facebook in the form of my first and last name, my Facebook ID (identification number) and my e-mail address will be forwarded from Facebook to Lambus GmbH if I register with my Facebook login data for the Lambus GmbH app and Facebook can see when I use the Lambus GmbH app. I can revoke this consent at any time with effect for the future. The revocation does not affect the legality of the processing of the data carried out up to that point".
Lambus GmbH does not provide any data from you to Facebook. We use your first and last name to know who our contractual partner is. We use your e-mail address to communicate with you as far as this is necessary for the use of our app, e.g. to inform you about innovations. This data processing serves the implementation of pre-contractual measures and the fulfillment of the contract.
You can revoke your consent to the processing of your first and last name, your Facebook ID and your e-mail address at any time by notifying us, e.g. by e-mail, or by cancelling your user account.
2.3. Registration via Google Account
If you have a Google account and would like to register with Lambus using your Google login, we will first ask you for permission to process the data in this context. Google is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
If you choose to register using your Google Account, you have made the following statement:
"I agree that the public profile data deposited in my Google account in the form of my first and last name, my Google ID (identification number), my e-mail address, my profile picture and the indication of my gender will be passed on by Google to Lambus GmbH if I register with my Google login data for the Lambus GmbH app and Google can see when I use the Lambus GmbH app. I can revoke this consent at any time with effect for the future. The revocation does not affect the legality of the processing of the data carried out up to that point."
Lambus GmbH for its part does not make any data from you available to Google.
We use your first and last name to know who our contractual partner is. We use your e-mail address to communicate with you as far as this is necessary for the use of our app, e.g. to inform you about innovations. This data processing serves the implementation of pre-contractual measures and the fulfillment of the contract.
You can revoke your consent to the processing of your first and last name, your Google ID and e-mail address as well as your profile picture and the indication of your gender in the context of the registration for our website at any time by notifying us, e.g. by e-mail, or by terminating your user account.
You will not be able to use the Google Account registration feature unless you provide us with the aforementioned information, which will be transmitted to us by Google. You can find information about data protection at Google in Google's data protection regulations:
2.4 Registration via Apple ID
If you have an Apple account and wish to register with Lambus using your Apple ID, we will first ask you for permission to process data in this context. Apple is operated by Apple Inc, 1 Infinite Loop, Cupertino, CA 95014, USA ("Apple").
If you choose to register using your Apple account, you have provided the following statement:
"I agree that the public profile data stored in my Apple account in the form of my first and last name, my Apple ID (identification number), my email address, my profile picture and the indication of my gender will be shared by Apple with Lambus GmbH when I register for the Lambus GmbH app using my Apple login data, and Apple can see when I use the Lambus GmbH app. I can revoke this consent at any time with effect for the future. The revocation does not affect the lawfulness of the processing of the data carried out up to that point."
Lambus GmbH does not provide Apple with any of your data.
We use your first and last name to know who our contractual partner is. We use your e-mail address to communicate with you, as far as this is necessary in the context of the use of our app, e.g. to inform you about innovations. This data processing is used to carry out pre-contractual measures and to fulfill the contract.
You can revoke your consent to the processing of your first and last name, your Apple ID and e-mail address, as well as your profile picture and the specification of your gender in the context of registering for our website at any time by notifying us, e.g. by e-mail, or by terminating your user account.
3. Push Notifications
When installing our app, we ask for your permission to send you push notifications. Push notifications are text messages that are displayed on your mobile device and that concern news about the app or the trip you created, such as marking a waypoint on a trip, inviting you to a trip, or sharing travel expenses. If you allow the receipt of push notifications, your device will send an encrypted, anonymized device identification number to the push notification system of your device's operating system so that the push notifications can be sent and received by you. This is done through the Google Firebase service operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). We receive statistics from Google in anonymous and aggregated form about user behavior, which we use to improve our app and identify errors.
With permission to receive push notifications, you have given the following consent:
"I agree that Lambus GmbH may send me push notifications with news about the app or my travels and that my device identification number may be sent to Google Firebase, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to receive the push notifications and to anonymously evaluate my user behaviour. I may revoke this consent at any time without prejudice to the legality and permissibility of the data processing carried out prior to the exercise of the revocation".
You may revoke your permission to receive push notifications at any time via the settings of your mobile device under "Settings", "Privacy" and "Messages" (iOS operating system) or under "Settings", "Device" and the administration of your "App Permissions" (Android operating system).
to Google Firebase: https://firebase.google.com/terms/
4. Location Data
In addition, you have the possibility to access your location data. Using your location data, you can send your friends your current location or mark it on the map when they travel together.
With the permission to use your location data you have given the following consent:
"I agree that Lambus GmbH may collect and save my location so that I can display it to my friends or other participants of the trip within the app or mark waypoints using my location. I can revoke this consent with effect for the future, without affecting the legality and permissibility of the data processing carried out prior to exercising the revocation."
If you allow access to your location data, our app will only access this data and transfer it to our server to the extent necessary to provide the functionalities for displaying your own location. If you do not give us permission, we will not use this data. In this case, you will not be able to note your location on the map of your trip or send it to your friends.
You can revoke your permission to use your location data at any time via the settings of your mobile device under "Settings", "Privacy" and "Location Services" (iOS operating system) or under "Settings", "Device" and the administration of your "App Permissions" (Android operating system).
5. Invite Friends and add Participants
We give you the opportunity to invite friends to our app so that they can participate in the trips you create or create their own trips. We will generate a link for you, which you can either forward to your friends via email or messenger service, or you can tell us the email address of the person.
If you provide us with a friend's email address to invite them to our app, we assume that you are authorized to use that email address and that the person has previously consented to receive the invitation email from Lambus GmbH.
If you are the invited friend whose e-mail address was given to us by a friend already registered with us, we will store your e-mail address for a period of 30 days. Within this time the link generated by us is active and can lead you directly to our App in the App Store.
If you have created a trip or are a participant of a trip, you have the option to add other users as participants to your trip. The users of our app are not visible to each other. In order to add a specific user to your trip, you need to know the person's username, only then you can add them to your trip as participants. This user will then receive a message telling him or her that you want to add them to the trip.
6. Video Chat
You can start a video chat with the participants of your travel group. For this purpose, you must declare a one-time consent to the use of the camera and the microphone before the first use. Within the scope of the connection, image and sound recordings will be transmitted.
The video chat is only for your internal communication as a travel group. It will not be recorded, logged or evaluated in any other way by Lambus.
7. Feedback Form and how to contact us
Via the link "Feedback" you have the possibility to send us a message. If you have already registered with our app and are logged in, just fill in the message field and click "Send Feedback". In this case we can assign your message to your user account. We will send a reply to your email address, which is the email address of the logged in user profile. The message itself and your e-mail address are mandatory details and are used to process your request and thus to implement the contract.
If you have not yet registered with us or are not currently logged in, you can contact us at any time with any questions about our app at the contact details listed under I. 1. Your message and your e-mail or postal address are mandatory information that we need in order to process your request. If you provide us with further data on a voluntary basis (e.g. first name and surname for your inquiry by e-mail), these will also be used to contact you or process your request.
Depending on your position as an interested party or already registered user, the aforementioned data processing of the mandatory data serves to initiate the contractual relationship with us and thus the implementation of pre-contractual measures or the fulfilment of the user contract and thus the execution of the contract.
You will not receive any feedback on your request from us without providing the mandatory information. The non-availability of voluntary information remains without consequences.
8. Integration of Services of Third Parties
8.1 Google Firebase
We use Google Firebase features on our app, which provide developers of apps with various ways to improve their developed products and fix bugs, including analysis of user data. Google Firebase is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
Google Firebase captures the interaction with our app, storing the events that occur. An overview of the events stored (e.g. user registration, clicking on an advertisement, etc.) can be found here:
When Google Firebase is used, the following data is collected in particular: Number of users and sessions, session duration, operating systems, device models, regions, first-time starts, app executions, app updates and screens visited. The data processing associated with the integration of Google Firebase serves our legitimate interest to continuously improve our app and, in particular, to detect malfunctions at an early stage and to correct errors.
Google and its affiliated companies operate servers worldwide on which personal data can be stored. When Google transfers personal data to third countries, it ensures an adequate level of data protection in accordance with its data protection declaration.
to Google Firebase: https://firebase.google.com/terms/
In addition, we use Google's Crashlytics service, which allows us to analyze the crashes of our app and fix the causes of the crashes. This also includes an analysis of the user data. Crashlytics is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
Crashlytics captures the events within our app that lead to a crash of the app, these are: Stacktrace (source code class and line number). These are all anonymous and not personally identifiable.
When Crashlytics is used, the following data is collected in particular: Number of users and sessions, session duration, operating systems, device models, regions, initial starts, app executions, app updates and current version of the Lambus app. The data processing associated with the integration of Crashlytics serves our legitimate interest in analysing app crashes and being able to prevent them as far as possible in the future.
about Crashlytics: https://firebase.google.com/terms/crashlytics/
8.3 Google Maps
We also use on our app the maps of the service "Google Maps" of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Maps allows you to mark different waypoints and highlights within our app that you are planning or have already visited for your trip.
Google will receive the information that you have accessed on the corresponding subpage of our app, as well as the data shown in section II. 1. The data processing is based on our legitimate interest in being able to provide you with a map within the app. An objection against the data processing carried out by Google can be accessed here:
In addition, your location data may be processed if you allow access to it via your mobile device. The processing of your location data in this case is based on your consent. You can revoke the access at any time afterwards directly in the settings of your mobile device under "Settings", "Privacy" and "Location services" (iOS operating system) or under "Settings", "Device" and the administration of your "Website permissions" (Android operating system).
8.4 Payment Service Provider PayPal
We use the payment service PayPal in our app. PayPal is operated by PayPal (Europe) S. à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal").
If you use the "Travel expenses" function during your trip to record the costs you have incurred for yourself and your fellow travellers, you can use the payment service PayPal to balance these costs.
In order to be able to transfer the incurred travel expenses to your fellow travellers via PayPal, you must have a PayPal customer account. You will then be redirected to the PayPal website where you can log into your customer account. PayPal collects in particular your first and last name, your address and bank data (e.g. account number or credit card number), passwords, the sums of the transaction as well as the data of the receiver. These data are processed exclusively by PayPal. We do not receive this information from PayPal.
The use of PayPal is based on our legitimate interest in providing you with the service of secure travel cost balancing through our app.
Further information on data protection and the general terms and conditions of PayPal can be found in the following links:
8.5 Facebook Pixel
Furthermore, we use the so-called "Facebook pixel" of the social network Facebook in the context of our online offer. Facebook pixel is operated by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").
Facebook pixels enable Facebook to identify you as a visitor to our online presence as a target group for displaying Facebook ads. We use Facebook pixel on the basis of our legitimate interests in order to display the Facebook ads placed by us only to those users who have shown an interest in our offer or have certain features which we transmit to Facebook anonymously (so-called "custom audiences"). We also use Facebook pixels to track the effectiveness of our Facebook ads for our own statistical and market research purposes when users are referred to our site by a Facebook ad ("conversion").
When Facebook pixel is used, Facebook collects, stores and processes data so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook data usage guidelines. You may enable Facebook and its affiliates to serve advertisements on and off Facebook. A cookie may also be stored on your device for these purposes.
If you wish to revoke your consent, click here:
- to Facebook: https://www.facebook.com/policy.php
- to Facebook pixel: https://www.facebook.com/business/learn/facebook-ads-pixel