Privacy Policy
Last updated: 21.05.2026
1. Data controller
The data controller within the meaning of the General Data Protection Regulation (GDPR) is: Melanie Ginting Eichenweg 4 21357 Wittorf Germany Email: kontakt@batam.com
2. General information on data processing
Scope of personal data processing We process our users' personal data only insofar as this is necessary to provide a functioning website along with our content and services. The processing of our users' personal data takes place regularly only with the user's consent or where the processing of the data is permitted by law. Legal bases for processing - Art. 6 (1)(a) GDPR: consent - Art. 6 (1)(b) GDPR: performance of a contract - Art. 6 (1)(c) GDPR: legal obligation - Art. 6 (1)(f) GDPR: legitimate interest Data deletion and storage duration The personal data of the data subject is deleted or blocked as soon as the purpose of storage ceases to apply. Storage may take place beyond this if provided for by the European or national legislator.
3. Provision of the website and server log files
Each time our website is called up, our system automatically collects data and information from the computer system of the calling computer (server log files). The following data is collected: - IP address of the user - Date and time of access - Pages and files accessed - Amount of data transferred - Source/referrer from which you arrived at the page - Browser and browser version used - Operating system used Log files are stored to ensure the functionality of the website. The data also helps us to optimise the website and ensure the security of our IT systems. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest). Storage duration: log files are deleted after a maximum of 30 days. Hosting providers The site is hosted in the EU Frankfurt region by Vercel Inc. (440 N Barranca Avenue #4133, Covina, CA 91723, USA). The database is operated by Neon, Inc. (USA) in the EU Frankfurt region. Media (images) are stored via Cloudflare R2, Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA), in the Western Europe region. All three providers are US companies operating EU infrastructure; data processing relies on EU Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.
4. Cookies and consent management
Our website uses cookies. Cookies are small text files stored on your device. We distinguish between: Technically necessary cookies (Art. 6 (1)(f) GDPR) These cookies are strictly necessary for the operation of the website (e.g. storage of your cookie settings and your NEXT_LOCALE language preference). Optional cookies (Art. 6 (1)(a) GDPR) These cookies are only set after your explicit consent. They include cookies for: - Embedded maps (Google Maps) - Affiliate tracking (Travelpayouts and partners) You can revoke your consent at any time via the cookie banner or the "Cookie settings" link in the footer.
5. Third-party embedded services — Google Maps
We use the Google Maps service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") to visualise locations. Google Maps only loads after your consent (cookie banner). When using Google Maps, data such as your IP address is transmitted to Google servers in the USA. Legal basis: Art. 6 (1)(a) GDPR (consent). Google's privacy policy: https://policies.google.com/privacy
Travelpayouts (affiliate network)
We use Travelpayouts as an affiliate network to enable bookings via partners such as Agoda, Booking.com, Trip.com and others. When you click an affiliate link, a cookie is set that allows us to receive a referral commission if you complete a booking. The following data is processed: - Click timestamp - Click source (which link on our site) - IP address (anonymised) - Browser information Travelpayouts is a service of Travelpayouts LTD, Cyprus. Legal basis: Art. 6 (1)(a) GDPR (consent). Travelpayouts' privacy policy: https://www.travelpayouts.com/legal/privacy_policy/
Other affiliate partners
When you click an affiliate link to the following providers, you leave our website and are subject to the privacy policies of the respective provider: - Agoda Pte. Ltd. (Singapore) — https://www.agoda.com/info/privacy.html - Booking.com B.V. (Netherlands) — https://www.booking.com/content/privacy.html - Trip.com Group (Singapore) — https://www.trip.com/m/privacy.html - Klook Travel Technology Limited (Hong Kong) — https://www.klook.com/privacy/ - 12Go Asia (Thailand) — https://12go.asia/en/privacy
6. Contact by email
When you contact us by email, the data you provide (email address, name if applicable, and other information you share) is stored to respond to your request. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in responding to your request). The data is deleted as soon as it is no longer needed, at the latest after 24 months.
7. Rights of the data subject
You have the following rights regarding your personal data: - Right of access (Art. 15 GDPR) - Right to rectification (Art. 16 GDPR) - Right to erasure (Art. 17 GDPR) - Right to restriction of processing (Art. 18 GDPR) - Right to data portability (Art. 20 GDPR) - Right to object (Art. 21 GDPR) - Right to withdraw consent (Art. 7 (3) GDPR) - Right to lodge a complaint with a supervisory authority (Art. 77 GDPR) To exercise your rights you can contact us at any time at kontakt@batam.com. Competent supervisory authority Die Landesbeauftragte für den Datenschutz Niedersachsen Prinzenstraße 5 30159 Hannover, Germany Phone: +49 (0511) 120-4500 Email: poststelle@lfd.niedersachsen.de Website: https://www.lfd.niedersachsen.de
8. Data security
We take appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, loss, destruction, or access by unauthorised persons. Our website uses SSL encryption (HTTPS).
9. Currency and changes to this privacy policy
As our website and offers continue to develop, or due to changes in legal requirements, it may become necessary to amend this privacy policy. The current privacy policy can be accessed at any time on this page.