Privacy Policy

Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Imprint

1. Hosting and server access

Our website runs on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, which processes data on our behalf (Art. 28 GDPR).

When you open a page, your browser automatically transmits technical data such as your IP address, date and time of the request, the requested page, the referring page and your browser type. This data is required to deliver the website and to protect it against attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a secure and working website. We do not store access logs with IP addresses on our servers.

2. Content delivery network (Cloudflare)

Requests to goasia.cc pass through the network of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare protects the website against attacks and delivers it faster. For this, Cloudflare processes your IP address and technical request data on our behalf. The legal basis is Art. 6(1)(f) GDPR.

Cloudflare is certified under the EU-U.S. Data Privacy Framework. Transfers to the USA are based on the adequacy decision of the European Commission (Art. 45 GDPR).

3. Website analytics (Plausible)

To understand which pages are used and how, we use Plausible Analytics, which we host ourselves on our servers in Germany. Plausible sets no cookies and stores no IP addresses. To count visits, it forms a pseudonymous identifier from your IP address and browser that changes daily and cannot be traced back to you. We only see aggregated figures such as page views, referring websites, countries and device types.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is improving our content. You can object at any time, for example by email to [email protected] or by blocking the script goasia.cc/js/script.js in your browser or with a content blocker.

4. Cookies and storage in your browser

GoAsia does not set any cookies of its own. Your browser keeps two technical entries in the session storage of the tab (sveltekit:scroll and sveltekit:snapshot). They hold the scroll position and page state of the pages you visited in this tab, so that the back button returns you to the same place. They stay on your device, are not sent to us and are deleted when you close the tab. They are technically necessary to provide this function (§ 25(2) no. 2 TDDDG), so no consent is required. Third-party services only load after you click on them (see sections 7 and 8) and then store the entries described there.

5. Contact by email

If you write to us by email, we process your email address, your message and any details you include in order to answer you. The legal basis is Art. 6(1)(b) GDPR if your request relates to a contract, and Art. 6(1)(f) GDPR otherwise; our legitimate interest is answering enquiries. Our email is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, on our behalf (Art. 28 GDPR). We delete emails once they are no longer needed, unless statutory retention periods apply.

6. Booking transport tickets (12Go)

Ticket searches and bookings for trains, buses, ferries, flights and transfers are provided by 12Go Asia Pte. Ltd., 75 High Street, Singapore 179435. When you use the booking form on our pages or the booking pages at booking.goasia.cc, your entries go directly to 12Go. booking.goasia.cc is operated by 12Go on its own servers.

12Go processes your search, booking and payment data as an independent controller under its own privacy policy. We do not receive your payment details. Singapore has no adequacy decision of the European Commission; the transfer takes place because you request the search or booking yourself (Art. 49(1)(b) GDPR).

7. Tours and activities (GetYourGuide)

Some pages offer tours and activities from GetYourGuide Deutschland GmbH, Sonnenburger Straße 73, 10437 Berlin, Germany. The offers are not loaded automatically. Only when you click the button do we load the GetYourGuide widget. Your browser then connects to servers of GetYourGuide (widget.getyourguide.com, collector.getyourguide.com, cdn.getyourguide.com) and transmits your IP address and technical data. The widget also requests a style sheet from Google Fonts (fonts.googleapis.com), so your IP address also reaches Google.

Only after your click, the following is stored on your device: a cookie named session_id on goasia.cc, set by the GetYourGuide script and kept until you close the browser; the entry partner_id in the local storage and the entry gyg_visitor_id in the session storage of your browser; and a cookie named __cf_bm for widget.getyourguide.com, a technical cookie for bot detection that expires after about 30 minutes. Before your click, none of this is stored.

The legal basis is your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). You can withdraw it at any time with effect for the future by reloading the page; the widget is then not loaded until you click again. You can delete the stored entries at any time in your browser settings. Bookings on getyourguide.com are subject to the privacy policy of GetYourGuide.

8. Videos (YouTube)

Some pages contain videos from YouTube, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Videos are not loaded automatically. Only when you click on a video do we load it in YouTube's privacy-enhanced mode (youtube-nocookie.com). Your browser then connects to Google servers (youtube-nocookie.com and further Google domains such as google.com, googlevideo.com, ytimg.com, ggpht.com and gstatic.com) and transmits your IP address and technical data. YouTube stores player settings in the local storage of your browser (for the domain youtube-nocookie.com) and may also set cookies or similar technologies. Data may be transferred to Google LLC in the USA, which is certified under the EU-U.S. Data Privacy Framework.

The legal basis is your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). You can withdraw it at any time with effect for the future by reloading the page. You can delete the stored entries at any time in your browser settings.

9. Partner links and commission

Links to our partners 12Go and GetYourGuide contain an identifier so the partner can see that you came from GoAsia. If you book, we receive a commission. Your price stays the same. The partners process this information as independent controllers. For commission settlement we receive booking reports from them, but no payment details.

10. Recipients and transfers to third countries

We do not sell personal data and do not pass it on for advertising. Recipients are only the service providers and partners named in this policy. Transfers to countries outside the EU take place only as described in sections 2, 6 and 8.

11. Storage period

We store personal data only as long as it is needed for the purpose described, or as long as statutory retention periods require. Analytics data is only kept in aggregated form.

12. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time with effect for the future (Art. 7(3)).

Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).

To exercise your rights, write to [email protected]. You also have the right to lodge a complaint with a data protection supervisory authority, for example the authority responsible for us: Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany.

13. Other information

You are not obliged to provide personal data in order to use our website. We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR. Our website is not directed at children under 16.

14. Changes and language versions

We update this policy when our website or the legal situation changes. The current version is always available on this page. This policy is available in several languages; if versions differ, the English version prevails.