Privacy Policy

This Privacy Policy informs users about the nature, scope, and purposes of the collection and use of personal data by the data controller

Scherer Reisen Omnibus Gesellschaft mbH
Hauptstraße 49
55490 Gemünden
Germany

Phone: +49 6765 270
EMail: info@scherer-reisen.de

on this website (hereinafter referred to as the “Service”). The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data. The legal basis for data protection can be found, among other places, in the General Data Protection Regulation (GDPR) and the Digital Services Act (DDG).

The data controller uses HIT Hahn Informations-Technologie GmbH & Co. KG, Dietrichshöhe 3, 55491 Büchenbeuren, Germany, as its web hosting provider, which utilizes servers from Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany (host), to host the website. The host collects data about every access to the website — so-called server log files — for statistical analysis for the purposes of operation, security, and optimization of the website.

Access data includes:

• Name of the accessed website
• Date and time of the server request
• Browser type and version
• Operating system
• IP address
• Requesting provider
• Referrer URL
• Name of the file accessed and amount of data transferred
• Status message regarding the request

The host reserves the right to review the log data retrospectively if there are concrete indications giving rise to a reasonable suspicion of unlawful use. This data is not combined with other data sources. The legal basis for data processing is Article 6(1)(f) of the GDPR, which permits the processing of data based on a legitimate interest in optimizing website operations and ensuring the security of the website.

We have entered into a data processing agreement with HIT Hahn Informations-Technologie GmbH & CO. KG in accordance with Article 28 of the GDPR, which obligates both HIT and any subcontractors used to protect the data of our website visitors and not to disclose it to third parties. For more information, please refer to the host’s privacy policy at https://www.hetzner.com/de/legal/privacy-policy/.

This website uses TLS encryption for security reasons and to protect the transmission of personal data and other confidential content. You can recognize an encrypted connection by the “https://” in the URL and the padlock icon next to the browser address bar.

To make your visit to our website more enjoyable and to enable the use of certain features, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted at the end of the browser session—that is, when you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser the next time you visit (so-called persistent cookies). When cookies are set, they collect and process certain user information—such as browser and location data, as well as IP addresses—to the extent applicable to each individual case. Persistent cookies are automatically deleted after a predetermined period, which may vary depending on the cookie. You can find the storage duration of each cookie in the overview of your web browser’s cookie settings.

To manage your cookie settings, we use the “Contao Cookiebar” cookie consent tool, which is provided by HIT Hahn Informations-Technologie GmbH & Co. KG, Dietrichshöhe 3, 55491 Büchenbeuren, Germany. This tool stores the settings you have individually configured for the services integrated into this website, as well as log data, such as your IP address. The processing of your cookie settings is based on a legal obligation pursuant to Art. 6(1), Sent. 1, Lit. c GDPR in conjunction with § 25 TDDDG.

In some cases, cookies serve to simplify processes by storing settings, e.g., by retaining information across multiple simultaneous page views within the same browser. If personal data is also processed by individual cookies we use, such processing is carried out in accordance with Article 6(1), sentence 1, letter a of the GDPR in the event that consent has been given, or in accordance with Article 6(1), sentence 1, letter f of the GDPR to safeguard our legitimate interests in ensuring the best possible functionality.

Please note that you can configure your browser to notify you when cookies are set, allowing you to decide on a case-by-case basis whether to accept them, or to block cookies in specific cases or generally. Each browser manages cookie settings differently. This is described in each browser’s Help menu, which explains how to change your cookie settings.

You can find these for the respective browsers at the following links:

• Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/konfigurieren-sie-die-datenschutzeinstellungen-ihren-bed%C3%BCrfnissen-entsprechend-8c923c9d-4ef2-849d-a399-4de716ecbbaf
• Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
• Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
• Safari: https://support.apple.com/de-de/guide/safari/sfri11471/12.0/mac/10.14
• Opera: https://help.opera.com/de/latest/web-preferences/#cookies.

Please note that if you do not accept cookies, the functionality of our website may be limited.

When you contact us -for example, via the contact form - we collect personal data such as your email address, name, and phone number. When making general contact, providing your email address is the only required information. Providing additional data is voluntary and helps us address your inquiry in a more personalized manner. This data is stored and used exclusively for the purpose of responding to your inquiry or for establishing contact and the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Article 6(1)(f) of the GDPR. Providing your data is necessary because otherwise you would not be able to send us a message.

If you contact us to file a lost property report, in addition to providing your email address, you must also provide your name. The legal basis for processing this data is our legitimate interest in processing the lost property report, identifying and returning lost items, and the associated communication pursuant to Article 6(1), first sentence, (f) of the GDPR.

If you contact us to request a non-binding quote, in addition to providing your email address, you must also provide your name and mailing address. The legal basis for processing this data is the implementation of pre-contractual measures in accordance with Article 6(1), first sentence, letter b of the GDPR. Your data will be deleted once your inquiry has been fully processed. This occurs when the circumstances indicate that the matter in question has been conclusively resolved and provided that no statutory retention obligations preclude such deletion. In the event that a contractual relationship is established, the retention period is governed by the statutory provisions of the German Commercial Code (HGB) and the German Fiscal Code (Abgabenordnung).

On our website, we offer job seekers the opportunity to apply online using the appropriate form. To conduct the application process, we process the personal data provided by applicants to the extent necessary for reviewing the application and making a selection decision. This includes, in particular, general personal information such as name and contact details, as well as information regarding education, professional background, and the qualifications and professional experience required for the respective position.

When the form is submitted, the applicant’s data is transmitted to us in encrypted form using state-of-the-art technology, stored by us, and processed exclusively for the purpose of processing the application. The legal basis for this processing is Article 6(1)(b) of the GDPR in conjunction with Section 26(1) of the German Federal Data Protection Act (BDSG). This processing is necessary to make a decision regarding the establishment of an employment relationship.

To the extent that special categories of personal data within the meaning of Article 9(1) of the GDPR (e.g., health data such as information regarding severely disabled status) are processed as part of the application process, this occurs only to the extent that there is a specific legal basis for doing so and the processing is necessary. This applies in particular to health data, to the extent that its processing is necessary for the exercise of rights or the fulfillment of legal obligations under labor law, social security law, or social protection law. The legal basis in this regard is Article 9(2)(b) of the GDPR in conjunction with Section 26(3) of the BDSG. Health data will be processed for occupational health purposes or to assess work capacity only to the extent that the applicable legal requirements are met.

If, as a result of the evaluation described above, the applicant is not selected or withdraws their application prematurely, the data required exclusively for the specific application process, as well as the associated electronic correspondence, will be deleted no later than 6 months thereafter. This period is determined on the basis of our legitimate interest pursuant to Art. 6(1), sentence 1, subparagraph (f) of the GDPR to be able to answer any follow-up questions regarding the application and to examine and defend against potential claims under the General Equal Treatment Act (AGG). In the event of a successful application, the data provided during the application process - to the extent it is necessary for the performance of the employment relationship - will be further processed on the basis of Article 6(1), sentence 1, subparagraph (b) of the GDPR in conjunction with Section 26(1), sentence 1 of the Federal Data Protection Act (BDSG) for the purposes of performing the employment relationship. Further storage and processing are governed by the statutory provisions applicable to employee data and the respective purposes of processing. Application data that is no longer necessary for the performance of the employment relationship will be deleted, provided that no statutory retention obligations or other reasons - in particular for the assertion, exercise, or defense of legal claims - preclude further storage.

To provide central scripts, fonts, and icons, we use the Content Delivery Network (CDN) and the Content Management System (CMS) of our web hosting provider, HIT Hahn Informations-Technologie GmbH & Co. KG. When the content provided by the aforementioned services is loaded into your browser, so-called server log files are transmitted, which include, among other things, your IP address, browser data, the time of access, and the amount of data transferred. This processing is necessary for the proper display, functionality, and security of this website. The legal basis for the processing is Article 6(1)(f) of the GDPR (legitimate interest). We have entered into a data processing agreement with HIT Hahn Informations-Technologie GmbH & Co. KG pursuant to Article 28 of the GDPR, which obligates them to protect the data of our website visitors and to disclose it to third parties only within the scope of permissible subcontracting arrangements.

This website uses so-called web fonts to ensure consistent font display. When you visit the website, your browser loads the necessary web fonts into your browser cache to display text and fonts correctly. In the process, log data—such as your IP address, browser data, and the time of the request—is processed. We use individual fonts from Google Fonts, provided by Google LLC, which are made available locally via the web server. This processing is carried out in accordance with Art. 6(1)(f) of the GDPR based on our legitimate interest in the proper display of the website.

To comply with legal accessibility requirements, this website uses the DigiAccess tool provided by digi·access GmbH, Quarzstr. 4, 51371 Leverkusen, Germany. The tool is made available through our web hosting provider, HIT Hahn Informations-Technologie GmbH & Co. KG.
When you visit our website, the files required to provide the accessibility features are loaded and stored in your browser cache. In the process, so-called log data, such as your IP address, information about the browser you are using, and the date and time of your visit, is processed. This processing is carried out to comply with legal requirements for accessibility based on Art. 6(1)(c) of the GDPR in conjunction with the BFSG (Act on Strengthening Accessibility).

We have entered into a data processing agreement with HIT Hahn Informations-Technologie GmbH & Co. KG pursuant to Article 28 of the GDPR, which obligates both HIT and any subcontractors engaged to protect the data of our website visitors and to disclose such data to third parties only within the scope of permissible subcontracting relationships.
HIT Hahn Informations-Technologie GmbH & Co. KG engages digi·access GmbH as a subprocessor to provide accessibility features. digi·access GmbH, in turn, engages BunnyWay d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia, as a content delivery network, and Datacamp Limited, 9 Coldbath Square, London EC1R 5HL, United Kingdom, as a hosting service provider. Data transfers to the United Kingdom are based on an adequacy decision pursuant to Art. 45 of the GDPR.

We maintain company pages on the social media platforms Facebook and Instagram. These pages offer additional opportunities to learn about our company and engage with us. If you wish to prevent the platform operators from processing the personal data you have provided to us, please contact us through other means.

We process information that you have provided to us via the aforementioned platforms. Such information may include your username, contact information, or a message. We process this personal data solely to respond to your specific inquiry or to address your request. To the extent that processing is necessary for the initiation or performance of a contract, it is based on Article 6(1), first sentence, letter b of the GDPR. In other cases, processing is based on our legitimate interest in handling inquiries and communicating with prospective clients and business partners in accordance with Article 6(1), first sentence, letter f of the GDPR.

When you visit or interact with a company page on a platform, your personal data may be processed. The information associated with a social media or platform profile you use also constitutes personal data. This also applies to messages and statements made using the profile, as well as to information collected automatically while visiting one of our company pages.

When you visit one of our Meta company pages (Facebook and Instagram), which showcase the company itself or individual products and services from our portfolio, personal data—in particular, communication, usage, and metadata (e.g., IP address, time of communication, or information about the device used)—may be processed by Meta under its own data protection responsibility. The controller responsible for the processing of personal data in connection with the operation of the Meta platforms is generally Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Dublin, D02X525, Ireland. For more information about the processing of personal data by Meta Platforms Ireland Ltd., please visit:

Instagram: https://privacycenter.instagram.com/policy/
Facebook: https://www.facebook.com/privacy/policy/.

Meta Platforms Ireland Ltd. provides the controller of the Meta platforms with aggregated statistics and insights that help gain an understanding of the types of actions users take on the page (so-called “Page Insights”). These Page Insights are generated based on certain information about users who have visited or interacted with the page. This processing of personal data is carried out by Meta Platforms Ireland Ltd. and the data controller as joint controllers. The processing serves the legitimate interest of evaluating the types of actions taken on the site and improving the site based on these insights. The legal basis for this processing is Article 6(1)(f) of the GDPR. The data controller cannot associate the information obtained through Page Insights with individual profiles on the Meta platforms. An agreement on joint processing has been entered into with Meta Platforms Ireland Ltd., which defines the allocation of data protection obligations between the data controller and Meta Platforms Ireland Ltd. For details on the processing of personal data for the purpose of generating Page Insights, please visit:

Instagram: https://www.facebook.com/help/instagram/788388387972460?helpref=faq_content
Facebook: https://www.facebook.com/legal/terms/information_about_page_insights_data. With regard to these data processing activities, you have the option to exercise your data subject rights (see “Your Rights”) against Meta as well. Further information on this can be found in Meta’s Privacy Policy at: https://www.facebook.com/privacy/policy.

Applicable data protection law grants you comprehensive rights as a data subject (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we inform you below:

• Right of access pursuant to Art. 15 GDPR: In particular, you have the right to obtain information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned retention period or the criteria for determining theretention period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, lodging a complaint with a supervisory authority, the origin of your data if it was not collected from you by us, the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the logic involved, the significance of such processing for you, and the intended effects of such processing, as well as your right to be informed of the safeguards in place pursuant to Article 46 of the GDPR when your data is transferred to third countries;
• Right to rectification pursuant to Article 16 of the GDPR: You have the right to have inaccurate personal data concerning you rectified without undue delay and/or to have incomplete personal data stored by us completed;
• Right to erasure pursuant to Article 17 of the GDPR: You have the right to request the erasure of your personal data if the conditions set forth in Article 17(1) of the GDPR are met. However, this right does not apply, in particular, if the processing is necessary for the exercise of the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to establish, exercise, or defend legal claims;
• Right to restriction of processing under Article 18 of the GDPR: You have the right to request the restriction of the processing of your personal data while the accuracy of your data—which you have contested—is being verified; if you object to the erasure of your data on the grounds of unlawful processing and instead request the restriction of processing; if you need your data to assert, exercise, or defend legal claims, after we no longer need this data once the purpose has been fulfilled, or if you have objected on grounds relating to your particular situation, as long as it has not yet been determined whether our legitimate grounds override yours;
• Right to be informed pursuant to Article 19 of the GDPR: If you have exercised your right to rectification, erasure, or restriction of processing against the controller, the controller is obligated to notify all recipients to whom your personal data has been disclosed of such rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed of these recipients.
• Right to data portability pursuant to Art. 20 GDPR: You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request that it be transmitted to another controller, to the extent that this is technically feasible;
• Right to withdraw consent pursuant to Article 7(3) of the GDPR: You have the right to withdraw your consent to the processing of data at any time with future effect. In the event of withdrawal, we will delete the relevant data without delay, unless further processing can be based on a legal basis that does not require consent. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to such withdrawal;
• Right to lodge a complaint pursuant to Article 77 of the GDPR: If you believe that the processing of your personal data violates the GDPR, you have—without prejudice to any other administrative or judicial remedy—the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your workplace, or the location of the alleged violation.

If, as part of a balancing of interests, we process your personal data based on our overriding legitimate interest pursuant to Article 6(1)(f) of the GDPR, you have the right at any time to object to this processing with future effect for reasons arising from your particular situation.

If you exercise your right to object pursuant to Article 21 of the GDPR, we will cease processing the data in question. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing that override your interests, fundamental rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.

If we process your personal data on the basis of Article 6(1)(f) of the GDPR in conjunction with Section 7(3) of the German Unfair Competition Act (UWG) for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes. You may exercise this right of objection as described above. If you exercise your right to object pursuant to Article 21 of the GDPR, we will cease processing the relevant data for direct marketing purposes.

We store your personal data only for as long as is strictly necessary. The retention period for personal data is determined based on the respective legal basis, the purpose of processing, and—where applicable—the applicable statutory retention periods (e.g., retention periods under commercial and tax law).

When processing personal data based on explicit consent pursuant to Art. 6(1)(a) GDPR, this data is stored until the data subject revokes their consent. If personal data is processed for the purpose of entering into or performing contractual relationships based on Article 6(1), sentence 1, subparagraph (b) of the GDPR, such data is deleted as soon as the attempt to enter into the contractual relationship has failed or the established contractual relationship has ended, and we have no legitimate interest in retaining the data. Such a legitimate interest exists, for example, to defend against or assert legal claims. In these cases, the retention period is determined in accordance with the applicable statutory statute of limitations.

If statutory retention periods for data exist, such data is processed for the duration of the relevant retention periods pursuant to Article 6(1), first sentence, (c) of the GDPR. This data is routinely deleted upon expiration of the retention periods, provided that we no longer have a legitimate interest in continuing to store it.

When processing personal data pursuant to Article 6(1), first sentence, subparagraph (f) of the GDPR, this data is stored until the data subject exercises their right to object under Article 21(1) of the GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing is necessary for the establishment, exercise, or defense of legal claims. Irrespective of whether the right to object (Article 21(1) of the GDPR) is exercised, the data will be deleted as soon as our legitimate interest in the processing ceases to exist or the purpose of the processing has been achieved.

When processing personal data for the purpose of direct marketing based on Section 7(3) of the German Unfair Competition Act (UWG) in conjunction with Article 6(1), first sentence, letter f of the GDPR, this data will be processed until the data subject exercises their right to object under Article 21(2) of the GDPR.

Unless otherwise specified in the other information in this statement regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Document date: September 2, 2026