We appreciate your interest in our company and our products and services, and we want you to feel safe when visiting our website, including with regard to the protection of your personal data. We take the protection of your personal data very seriously. Compliance with the provisions of the European General Data Protection Regulation (EU GDPR) and the German Federal Data Protection Act (BDSG) is a matter of course for us.
We want you to know when we collect which data and how we use it. We have taken technical and organizational measures to ensure that both we and our external service providers comply with data protection and data security regulations.
Below we inform you about the collection and storage of personal data when you use our website. Personal data is all data relating to your identity or that can be personally related to you, such as your name, address, email addresses, user behavior, and IP address.
For technical reasons, every time you access our website, your browser automatically transmits the data listed below to our web server. This data is stored solely for statistical and technical purposes, for example, to evaluate the frequency of page visits or to detect disruptions in server operation.
The following data is logged and evaluated:
Further personal data, such as name, home address, email address, date of birth, or business-related data, will only be collected if you provide it yourself. You can provide such data on our website, for example, in the contact form.
Contact via email and contact form
When you contact us by email or via a contact form, the data you provide (your email address, your name, and your telephone number, if applicable) will be stored by us in order to answer your questions. We will delete the data collected in this context once storage is no longer required, or restrict processing if statutory retention periods apply.
Persons under the age of 18 should not submit any personal data to us without the consent of their parents or guardians. We do not request, collect, or share personal data from children and young people.
We generally use the personal data you provide to answer your inquiries, process your orders, or provide you with access to specific information or offers. To maintain customer relationships, it may also be necessary for us or a service provider commissioned by us to use this personal data to inform you about product offers that are useful for your business activities or to conduct online surveys to better meet the needs and requirements of our customers.
Furthermore, only those departments or employees of ensemble.tours who need your data to fulfill contractual, legal, and regulatory obligations, as well as legitimate interests, will receive your data. We also use selected processors for the technical and organizational implementation of our website. All processors are contractually obligated to treat your personal data confidentially and to process it only within the scope of providing services in accordance with our instructions.
Of course, we respect your wish not to share your personal data with us to support our customer relationship (especially for direct marketing or market research purposes). We will neither sell nor otherwise market your personal data to third parties.
We will collect, process, and use the personal data you provide online only for the purposes communicated to you. Your personal data will not be shared with third parties without your necessary consent.
Logging of email traffic
To ensure appropriate information and system security and to detect malware, we store log data on email traffic. When you send an email to one of our addresses, the following data is logged: the email and IP address of the recipient and sender, the number of recipients, the subject, the date and time of receipt by the server, the file name of any attachments, the size of the message, the spam risk classification, and the delivery status. Emails are initially checked purely automatically. Only if there is a suspicion of a threat to the security of the IT systems are individual emails manually reviewed by responsible persons.
In addition, we process your personal data in connection with emails, if necessary, for the duration of the entire business transaction and beyond, in accordance with statutory retention and documentation obligations.
You have the following rights with regard to the personal data concerning you:
You have the right to withdraw your consent pursuant to Article 6 (1) (a) or Article 9 (2) (a) at any time, without affecting the legality of the processing carried out on the basis of your consent until the withdrawal.
Cookies are small text files that your browser stores on your device; local storage (localStorage) is a similar storage area in the browser. We do not set any cookies of our own to operate this website, and we do not recognise your browser on a later visit.
In your browser's local storage we only keep your decision from the cookie notice (entry "et-consent" with your choice per provider and the time). The entry remains until you change your choice or clear your browser storage. It is strictly necessary so that we can respect your decision (Section 25 (2) no. 2 TDDDG); the legal basis for the processing is Art. 6 (1) (c) GDPR in conjunction with Art. 7 (1) GDPR (proof of consent).
Cookies from Meta and Google are only set if you consent to the Meta Pixel (section 10) or to Google Ads conversion tracking (section 11), and cookies of our booking service only if you load the booking calendar (section 12). Without consent the website remains fully usable. You can change your choice at any time, separately for each provider, via the "Cookie settings" link in the footer of every page. You can also block or delete cookies in your browser.
This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the inquiries you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser bar. When SSL encryption is activated, the data you transmit to us cannot be read by third parties.
Security:
We have taken technical and organizational security measures to protect your personal data from loss, destruction, manipulation, and unauthorized access. All of our employees and all third parties involved in data processing are committed to the General Data Protection Regulation and to the confidential treatment of personal data.
When personal data is collected and processed, the information is transmitted in encrypted form to prevent misuse by third parties. Our security measures are continuously revised in line with technological developments.
Changes to our privacy policy:
We reserve the right to change our security and data protection measures as necessary due to technological developments. In these cases, we will also adapt our data protection information accordingly. Please therefore always refer to the most recent version of our data protection information.
Links:
If you use external links provided on our website, this privacy policy does not apply to these links. When we provide links, we endeavor to ensure that they also comply with our data protection and security standards. However, we have no influence on the compliance with data protection and security regulations by other providers. Therefore, please also inform yourself about the data protection notices provided on the websites of the other providers.
Our website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit our website, Vercel processes technically necessary data, in particular your IP address, date and time of access, pages visited, and browser and device data (server log files). This processing is required to provide, stabilize and secure the website.
The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the secure and efficient provision of our online services). We have concluded a data processing agreement with Vercel pursuant to Art. 28 GDPR. As Vercel is based in the USA, a transfer of personal data to the USA cannot be ruled out. The transfer is based on the EU Standard Contractual Clauses and Vercel's certification under the EU-US Data Privacy Framework.
If you use our contact form or contact us by email or phone, we process the data you provide (in particular name, email address, phone number, company or ensemble name and the content of your message) to handle your enquiry and for possible follow-up questions.
The legal basis is Art. 6 (1) (b) GDPR insofar as your enquiry is aimed at concluding a contract (quotation, travel planning), and otherwise Art. 6 (1) (f) GDPR (legitimate interest in the effective handling of enquiries).
To manage enquiries, we use the CRM platform HighLevel (LeadConnector) provided by HighLevel Inc., Dallas, Texas, USA as a processor. The data you submit via the contact form is stored and processed there. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider. As the provider is based in the USA, your data is transferred to the USA. The transfer is based on the EU Standard Contractual Clauses pursuant to Art. 46 GDPR.
We store your enquiry data until processing is complete and no statutory retention obligations remain. You may object at any time to processing based on legitimate interests.
Parts of the editorial content of this website are created with the support of AI systems and editorially reviewed by us before publication. Such pages are marked with a notice. No personal data of our website visitors is processed during content creation.
With your consent, we use the Meta Pixel on this website, an analytics tool of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. We use it to measure whether our ads on Facebook and Instagram lead to visits and enquiries, and to direct the delivery of our ads to people interested in ensemble travel. Without your consent, the Meta Pixel is not loaded and no data is transferred to Meta through the pixel. The booking calendar of our booking service also loads a Meta script, but only once you load the calendar yourself (section 12).
After your consent, the Meta Pixel sets cookies and transmits to Meta in particular: the page visited, time, IP address, browser and device data, the identifier of a Meta cookie, the click identifier from a Facebook or Instagram link (fbclid) if you arrived via such a link, and the event that a form on this website was submitted, together with the type of form (for example cost factor check, indicative quote, general enquiry). We do not transmit your name, email address or the content of your enquiry to Meta. Within the website we pass the click identifier on via the address of the next page, without a cookie of our own, so that consent given on a later page can still attribute the visit. Meta may link the data to your Facebook or Instagram account if you are logged in there and use it for its own purposes.
We and Meta are jointly responsible for the collection and transmission of the data to Meta (Art. 26 GDPR); the agreement is available at https://www.facebook.com/legal/controller_addendum. Meta is solely responsible for any further processing. The legal basis is your consent pursuant to Section 25 (1) TDDDG and Art. 6 (1) (a) GDPR. Insofar as data is transferred to the USA, Meta states that this is based on the EU-US Data Privacy Framework and the EU Standard Contractual Clauses.
We store your decision in your browser's local storage (strictly necessary). You can withdraw your consent at any time with effect for the future via the "Cookie settings" link in the footer of every page (also for Meta alone). On withdrawal we delete the Meta cookies on our domain (_fbp, _fbc) and reload the page without the pixel. We cannot delete cookies that Meta has set on its own domains; you can remove them in your browser or in the settings of your Meta account. Further information: https://www.facebook.com/privacy/policy/.
With your consent, we use Google Ads conversion tracking on this website, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use it to measure whether our ads on Google lead to enquiries. Without your consent, the Google tag is not loaded and no data is transferred to Google through it. The booking calendar of our booking service also loads fonts and scripts from Google, but only once you load the calendar yourself (section 12). We use Google consent mode with the default setting "denied"; after your consent we only allow the storage and transmission required for measurement, no personalised advertising (remarketing) and no web analytics. In the Google tag we additionally switch off enhanced conversions and signals for personalised advertising explicitly.
After your consent, the Google tag sets cookies and transmits to Google in particular: the page visited, time, IP address, browser and device data, the identifier of a Google cookie, the click identifier from the ad (gclid, gbraid or wbraid) if you arrived via a Google ad, and the event that an enquiry form on this website was submitted successfully. We do not transmit your name, email address or the content of your enquiry to Google; we do not use enhanced conversions. Within the website we pass the click identifier on via the address of the next page, without a cookie of our own, so that consent given on a later page can still attribute the ad.
Retention according to Google (https://business.safety.google/adscookies/, retrieved 12 October 2026): the conversion cookies on our domain (for example _gcl_au, _gcl_aw, _gcl_gb, _gcl_gs) last 90 days. When sending the measurement data, Google may also set or read cookies on its own domains (googleadservices.com, doubleclick.net, google.com), for example GCL_AU_P and GCL_AW_P (90 days), test_cookie (15 minutes), DSID (2 weeks), NID (6 months) and IDE (13 months in the European Economic Area). Which of these cookies are set in a given case is determined by Google. Google is itself responsible for the further processing of the measurement data under the Google Ads Controller-Controller Data Protection Terms (https://business.safety.google/adscontrollerterms/). The legal basis is your consent pursuant to Section 25 (1) TDDDG and Art. 6 (1) (a) GDPR. Insofar as data is transferred to the USA, this is based on the European Commission's adequacy decision on the EU-US Data Privacy Framework, under which Google LLC states it is certified, and on the EU Standard Contractual Clauses.
We store your decision in your browser's local storage (strictly necessary). You can withdraw your consent at any time with effect for the future via the "Cookie settings" link in the footer of every page (also for Google alone). On withdrawal we delete the Google cookies on our domain (_gcl_*) and reload the page without the Google tag. We cannot delete cookies that Google has set on its own domains; you can remove them in your browser. Further information: https://policies.google.com/privacy and https://business.safety.google/privacy/.
On the pages /en/tour-briefing/, /erstgespraech/ and /orchester/briefing/ you can book a call via an embedded calendar. The calendar is a service of HighLevel Inc., Dallas, Texas, USA (LeadConnector), which we also use for enquiry management (section 8). It is not loaded automatically. In its place there is a notice; only when you click "Load booking calendar" or open the calendar in a new window does your browser connect to HighLevel.
The calendar then loads content from servers of HighLevel Inc. (including api.leadconnectorhq.com, stcdn.leadconnectorhq.com), fonts via Google Fonts (fonts.googleapis.com, fonts.gstatic.com) and scripts via Google Cloud Storage (storage.googleapis.com); the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, together with Google LLC, USA. One of these scripts also loads the Meta Pixel script library from connect.facebook.net (Meta Platforms Ireland Limited). We have not configured a Meta Pixel of our own in the calendar. In the process, your IP address, browser and device data, the time and the address of the calling page in particular are transmitted; the providers may use cookies or local storage. Any further processing is determined by the providers themselves. A transfer to the USA is based on the European Commission's adequacy decision on the EU-US Data Privacy Framework, insofar as the provider is certified under it, and on the EU Standard Contractual Clauses.
The legal basis for loading the calendar is your consent given by the click (Section 25 (1) TDDDG, Art. 6 (1) (a) GDPR). It applies only to the respective page view and is not stored; without a click, no connection is made. If you book an appointment, we process your details (name, email address, phone number, selected time, message) at HighLevel as our processor to prepare and hold the call (Art. 6 (1) (b) GDPR) and store them as described in section 8. Instead of the calendar you can always use the contact form or call us.
