• Munich
  • Hamburg
  • Zurich
Travel Management Consulting Network

Data protection

Our privacy standards.

Data protection at a glance

German legislation applies.

This privacy policy is intended to inform the users of this website in accordance with the European Data Protection Regulation (DSGVO) about the nature, scope and purpose of the collection and use of personal data.

When using our website or communicating with us, it may be necessary to store and process personal data. Personal data is any data with which you can be personally identified. This privacy policy explains what data we or services on this site collect and what it is used for.

We take the protection of your personal data seriously and treat your personal data confidentially in accordance with the statutory data protection regulations and in compliance with the General Data Protection Regulation (DSGVO).

Data transmission on the Internet (e.g. communication by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible with reasonable effort. If you do not want this, a very simple measure will help: close all programs, shut down the computer and read a good book.

You are also free to transmit personal data to us by alternative means, for example by telephone or post.

This Privacy Statement as of April 2020 supersedes all previous versions and is valid indefinitely.


This privacy statement is based on the terms used by the European Union when adopting the General Data Protection Regulation (GDPR). Our data protection declaration should be easy to read and understand for the public as well as for our customers and business partners. To ensure this, we would like to explain the terms used in advance.

personal data

Personal data is any information relating to an identified or identifiable natural person. A person is identifiable if the collected data or their combination allow conclusions about identity or name.

person concerned

Data subject means any identified or identifiable natural person whose personal data is processed by us.


Processing is any operation performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Restriction of processing

Restriction of processing is the marking of stored personal data with the aim of limiting their future processing.


Pseudonymisation is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures which ensure that the personal data are not attributed to an identified or identifiable natural person.


A processor processes personal data on behalf of the controller.


Any body to which personal data are disclosed shall be considered as a recipient of the data. However, authorities that may receive personal data in the context of a specific investigation mandate under Union or Member State law shall not be considered as recipients.


A third party is authorised to access or process the personal data under the direct responsibility of the controller or processor.


Consent is any freely given indication of the data subject's wishes by which the data subject signifies his or her agreement to the processing of personal data relating to him or her.

Consent can be given actively by a documented signature or acknowledgement, but also passively by a deliberate act, particularly in ordinary business transactions.

Data acquisition and data processing

Data is collected automatically as a technical standard when visiting the website by IT systems of our provider, by social networks or by third-party providers. This is mainly technical data (e.g. internet browser, operating system or time of page view).

Analysis services help us to make our offer attractive and to provide error-free content. This data can also be used to analyse your user behaviour on this site. In the process, your surfing behaviour may be recorded and statistically evaluated using cookies and analysis programs. As a rule, the analyses are carried out anonymously; we cannot trace the surfing behaviour back to you. You can object to this analysis the first time you visit the site or prevent it by using software designed for this purpose.

The expenseBrain GmbH has implemented technical and organizational measures to ensure the most complete protection of personal data received in all channels.

Who is responsible for the data collection on this website?

The responsible party within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other provisions with a data protection character is expenseBrain GmbH. The data processing on this website is carried out by us as the website operator according to the imprint.

Legal requirements

We inform you that the provision of personal data is partly required by law (e.g. tax and storage regulations) or may also result from contractual regulations (e.g. information on the contractual partner). Failure to provide the personal data would mean that the contract with the person concerned could not be concluded.

Legal basis of the processing

The DSGVO serves our company as the legal basis for the processing of personal data.

Routine deletion and blocking of personal data

We and any order processors store your personal data only for the period of time required to achieve the purpose of storage or to meet legal requirements. If the purpose of storage no longer applies or if a statutory storage period expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.

Contact data protection officer

Send e-mail to data protection officer

Any data subject may contact our data protection officer directly at any time with any questions or suggestions regarding data protection.

What rights do you have regarding your data?

You have the right at any time to receive information free of charge about the existence, scope, origin, recipient and purpose of your stored personal data. You also have the right to request the correction, blocking or deletion of this data.

For information, restrictions or revocation of your consent or objection to the processing of your data, as well as other questions on the subject of data protection, you can contact our data protection officer at any time. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

Services used on the website

Data is collected automatically as a technical standard when visiting the website by IT systems of our provider, by social networks or by third-party providers. This is mainly technical data (e.g. internet browser, operating system or time of page view).

Server log files

The collection of technical data by the provider is mandatory for the functionality of the site and occurs automatically as soon as you enter our website. The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to the provider. The provider makes this data available to us for analysis purposes. These are browser type and browser version, operating system used, referrer URL, host name of the accessing computer, time of the server request, IP address, amount of data transferred.

This data is not merged with other data sources. The collection of this data is mandatory in order to ensure error-free and secure technical provision of the content and to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack.

When using these general data and information, the expenseBrain GmbH does not draw any conclusions about the data subject. The basis for the data processing is Art. 6 (1) lit. b DSGVO, which permits the processing of data for the performance of a contract or pre-contractual measures.


This website uses cookies. These are small text files that are stored on your terminal device. They do not cause any damage. Your browser accesses these files. Cookies increase the user-friendliness and security of this website, and enable the analysis of your use of the website.

Common browsers offer the setting option to not allow cookies or to delete them when closing the browser. It is not guaranteed that you will be able to access all functions of this website without restrictions if you make the corresponding settings.

Most of the cookies we use are so-called "session cookies". They are automatically deleted after the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies enable us to recognise your browser on your next visit.

Cookies that are required to carry out the electronic communication process or to provide certain functions you have requested are stored on the basis of Art. 6 (1) lit. f DSGVO. As the website operator, we have a legitimate interest in storing cookies for the technically error-free and optimised provision of our content and services.

Google Services

This website uses services from Google. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Whenever you visit our website, personal data, including the IP address of the internet connection used, is transmitted to Google in the United States of America or its subsidiaries. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical process to third parties.

For all Google services, their privacy policy applies

You can object to data collection by Google on the provider's website.

Google Analytics

Google Analytics uses cookies. The information about your use of this website is usually transferred to a Google server in the USA and stored there. We have concluded an order data processing contract with Google and fully implement the requirements of the German data protection authorities when using Google Analytics.

You can prevent the collection of data generated by cookies and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin

We have also activated the IP anonymization function on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

This website uses the "demographic characteristics" function of Google Analytics. This allows reports to be generated that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google as well as visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as shown in the item "Objection to data collection".

Further information can be found on the pages of the provider.

Google Web Fonts

This site uses web fonts from Google for the uniform display of fonts. When you call up a page, your browser loads the required fonts into its browser cache in order to display texts correctly. If your browser does not support web fonts, a standard font is used by your computer.

Google thereby obtains knowledge that our website was accessed via your IP address. The use of Google Web Fonts serves the uniform and appealing presentation of our online offers and represents a legitimate interest within the meaning of the DS-GVO.

You can find more information about Google Web Fonts on the provider's website.

Google AdWords

We have temporarily activated Google AdWords on this website. Google AdWords is an Internet advertising service that allows us to place ads in Google's search engine results and in the Google advertising network. Google AdWords allows an advertiser to specify certain keywords in advance, by means of which an ad is displayed in Google's search engine results exclusively when the user retrieves a keyword-relevant search result with the search engine. In the Google advertising network, the ads are distributed on topic-relevant websites by means of an automatic algorithm and in compliance with the previously defined keywords.

The purpose of Google AdWords is to advertise our website by displaying interest-relevant advertising on the websites of third-party companies and in the search engine results of the Google search engine and to display third-party advertising on our website.

If a data subject accesses our website via a Google ad, a so-called conversion cookie is stored on the data subject's system by Google. A conversion cookie loses its validity after thirty days and is not used to identify the data subject. The conversion cookie is used to track whether certain sub-pages have been called up. Through the conversion cookie, both we and Google can track whether a data subject who has accessed our website via an AdWords ad has generated a sale.

The data and information collected through the use of the conversion cookie are used by Google to create visit statistics for our website. These visit statistics are used by us to determine the total number of users who were referred to us via AdWords ads, i.e. to determine the success or failure of the respective AdWords ad and to optimize our AdWords ads for the future. Neither our company nor other advertisers of Google AdWords receive information from Google by means of which the data subject could be identified.

By means of the conversion cookie, personal information, for example the Internet pages visited by the person concerned, is stored.

The data subject can prevent the setting of cookies by our website, as already described above, at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a conversion cookie on the information technology system of the data subject. In addition, a cookie already set by Google AdWords can be deleted at any time via the internet browser or other software programs.

Furthermore, the data subject has the option to object to interest-based advertising by Google. To do this, the data subject must make the desired settings at www.google.de/settings/ads.


We have temporarily integrated YouTube videos on this website. In doing so, we use the extended data protection mode. In this case, YouTube still contacts Google, but no information about the visitors is stored anymore, unless they watch the video.

Cookies may also be used to uniquely identify the device and associate the activities with the Google account. When you click on the video, your IP address is transmitted to YouTube and YouTube learns that you have viewed the video. If you are logged in to YouTube, this information is also assigned to your user account. You can prevent this by logging out of YouTube before viewing the video.

We have no knowledge of and no influence on the possible collection and use of your data by YouTube.

Social Media Plug Ins

We do not use social media integrations on the Website that collect or transmit your information.

Profiling and automated decision making

As a responsible company, we do not use profiling and similar services.

Communication on the Internet

When using current electronic communication media, personal data is also collected in accordance with the provisions of the respective provider. By using these services, you have already consented to their storage, processing and retention. We process incoming communication in accordance with the legal regulations and the principles of confidentiality.

We largely avoid web-based forms in order to reduce the number of data processing systems and to be able to use secure transmission.

If you contact us by e-mail, your transmitted personal data will be processed and stored by the mail system. Communication data is stored in the receiving system and in other media for the purpose of processing or contacting you. In the context of an order for data processing, this data may also be accessible to third parties. Furthermore, this personal data will not be passed on to third parties.

external links

We have externally linked pages of partners and social networks on our website. A data transfer by us does not take place. When calling up the external page, the data protection provisions of the provider apply. We are not responsible for this.