Privacy policy

1. Controller

Brodmann Midibusse Hannover Busreisen GmbH
Kolberger Str. 7
30853 Langenhagen, Germany
Phone: +49 (0)511 723379
E-mail: info@hannover-busreisen.de
Represented by: Klaus Brodmann

2. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You may withdraw consent at any time with effect for the future (Art. 7(3) GDPR) and lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority for us is the State Commissioner for Data Protection of Lower Saxony, Prinzenstraße 5, 30159 Hannover.

3. Server log files

When you access this website, the hosting provider automatically collects the information your browser transmits: browser type and version, operating system, referrer URL, host name or IP address of the accessing computer, time of the request and the file requested. This data cannot be attributed to a specific person by us and is not merged with other data sources. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in a stable connection, convenient use and the evaluation of system security and stability. Log files are deleted after seven days at the latest.

4. Hosting

This website is hosted by an external service provider in Germany acting as a processor within the meaning of Art. 28 GDPR. A data processing agreement has been concluded.

5. Encryption

This website uses SSL/TLS encryption for security reasons. You can recognise an encrypted connection by https:// in your browser's address bar.

6. Contact form and enquiries

If you contact us via the contact form, by e-mail, telephone or fax, we process the data you provide (in particular name, e-mail address, telephone number where given, address, company and the details of your planned trip) in order to answer your enquiry and prepare a quote. The form is submitted to a script on our own web space; the data is delivered by e-mail to our business address. No transfer to third parties takes place.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures), otherwise Art. 6(1)(a) GDPR (your consent) or Art. 6(1)(f) GDPR. We store this data until the purpose of storage no longer applies, you request erasure or you withdraw your consent. Mandatory statutory retention periods under commercial and tax law (six or ten years) remain unaffected.

7. Spam protection of the contact form

We do not use external services such as Google reCAPTCHA. Instead the form relies on a field that is invisible to you, a minimum completion time and a limit on requests per connection. For that limit we only store a non-reversible hash of your IP address combined with the current hour on our own web space; it is overwritten automatically and never linked to your enquiry. The legal basis is Art. 6(1)(f) GDPR (prevention of abuse). Your IP address is not included in the notification e-mail.

8. Cookies, fonts and external content

This website sets no cookies at all – neither strictly necessary ones nor any for analytics or advertising. A cookie banner is therefore neither required nor present.

No tracking services, no social media plug-ins, no map or video embeds and no content-delivery-network resources are loaded. In particular, no external web fonts (such as Google Fonts) are used: the site relies solely on the system fonts already present on your device. Opening this website therefore establishes no connection to third-party servers.

9. Map display (OpenStreetMap)

On the contact page we offer a map via OpenStreetMap. The map is not loaded automatically. Only when you actively click "Load map" is a connection to the servers of the OpenStreetMap Foundation established and your IP address transmitted. The legal basis is your consent under Art. 6(1)(a) GDPR. OpenStreetMap privacy policy.