Privacy policy

The following information explains how personal data is processed on this website under Art. 13 GDPR. The German version is authoritative in case of discrepancies.

Controller

Franziska Mende, email: hallo@franziskamende.de(see the legal notice).

Cookies only with your consent

This website does not set any cookies itself and does not load any tracking service without your consent. The cookie banner only concerns the Travelpayouts script described below; without clicking "Accept", nothing from it is loaded. Separately, we use the cookieless audience measurement Cloudflare Web Analytics (see the next section).

Audience measurement with Cloudflare Web Analytics

To learn how many visits our pages receive and how fast they load, we use Cloudflare Web Analytics (Cloudflare, Inc., see the hosting section). Each page loads a small script from static.cloudflareinsights.com which, on each visit, transmits the visited page, the referring page, technical browser details (e.g. browser type, screen size) and load times to Cloudflare; your IP address is technically processed in the process. The script sets no cookies, uses no local storage in your browser and, according to Cloudflare, creates no profiles and no cross-site tracking; visits are not attributed to individual persons. We only see aggregated statistics. The legal basis is our legitimate interest in measuring and improving our site (Art. 6(1)(f) GDPR). You can object by blocking the script in your browser (e.g. with a content blocker); the website then works unchanged.

Travelpayouts script (only with consent)

On your first visit, a cookie banner asks whether we may load a script from our partner Travelpayouts. The provider is Go Travel Un Limited, Hong Kong (trading as "Travelpayouts", contact: legal@gtu.ltd; its own privacy policy:travelpayouts.com). The script verifies this website with Travelpayouts and attributes bookings to our partner account. According to our technical review of the script (as of 10/2026) it sets a cookie named "am_user_session" on this website with a lifetime of 30 minutes, uses your browser's local storage / IndexedDB (entries prefixed "tp-"), and communicates with the provider's servers (including app.travelpayouts.com, emrld.cc, mn-tz.com, tp.media) as well as an error-reporting service. Data such as the visited page, technical browser details and a session ID may be transmitted, including to servers outside the EU (including Hong Kong, a third country without an adequacy decision). The legal basis is exclusively your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Which further functions the script might perform depending on the configuration of our Travelpayouts account cannot be conclusively verified from the outside. In our account, as configured by us (as of 25 Oct 2026), link replacement, automatic keyword linking, recommendation blocks, link previews and the display of offers in a background tab are switched off; only the statistics function (clicks and bookings) is active. Without your consent the script is not loaded. Your choice is stored in your browser. You can change or withdraw it at any time via the "Cookie settings" link in the page footer; on withdrawal we remove the script's known entries and reload the page.

Hosting and server logs

This website is served as a static site via Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you visit, Cloudflare processes technically necessary connection data (IP address, date and time, requested URL, browser and operating system information) to deliver the site and fend off attacks. The legal basis is our legitimate interest in a secure, fast site (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework; a data processing agreement with EU standard contractual clauses is in place. We do not store log files ourselves. The fonts used are served from our own server; no connection to third-party font services (e.g. Google Fonts) is made.

Booking links (affiliate)

This website is funded through affiliate booking links. For hotels without a Booking.com page, the "Check price" button goes through an internal redirect page (/go/…) to a booking page on KKday, brokered via the Travelpayouts partner program (Go Travel Un Limited, Hong Kong, contactlegal@gtu.ltd; privacy policy:travelpayouts.com). According to Travelpayouts, the destination page sets a cookie to attribute a booking to our partner account, with a lifetime of up to 30 days; details are listed inTravelpayouts' cookie policy. This cookie is not set by airporthotel-tokio.de but only on the partner page, after you have already left our website — it is therefore governed by that provider's own privacy policy (KKday or Travelpayouts), not ours. The redirect URL also references the technical partner network Involve Asia (incl. Involve Asia Technologies Sdn Bhd, Kuala Lumpur, Malaysia), which processes the booking technically on Travelpayouts' behalf; its own privacy policy: involve.asia. The legal basis is our legitimate interest in funding this free comparison site through commissions (Art. 6(1)(f) GDPR); the booking itself takes place solely between you and the respective provider. For the "Royal Park Hotel Tokyo Haneda – Transit" room category, we link to the hotel's own official page instead, with no commission involved, since the operator states this product cannot be booked via third-party platforms.

For hotels with a confirmed Booking.com page, the button (on the German as well as the English pages) instead goes through the same redirect page and the partner network CJ Affiliate (operated in Europe by Epsilon International UK Ltd.; privacy policy:cj.com/legal/privacy) to Booking.com (Booking.com B.V., Amsterdam). On click, your IP address, technical browser details, the referring page and an identifier we assign (hotel and language, no information about you personally) are transmitted to CJ's click domain so that a booking can be attributed to our partner account. Processing may also take place on servers outside the EU/EEA/UK, in particular in the USA; according to its own statements CJ relies on standard contractual clauses for this. According to its own statements CJ places only its own cookies and similar technologies and, unless technically necessary, only with consent; they arise on CJ's domain or on Booking.com's page after you have left our website. Our website itself stays cookie-free. The legal basis is again our legitimate interest in funding this comparison site through commissions (Art. 6(1)(f) GDPR). If the connection to the click domain fails (for example because of an ad blocker), we forward you directly to Booking.com without tracking.

In the guides we also place partner links to transfers, luggage storage, eSIMs and activities, each marked as advertising: Welcome Pickups, Kiwitaxi, GetTransfer, Radical Storage, Saily, Airalo, Yesim and Klook. The click goes through the same redirect page (/go/p/…) and the Travelpayouts partner program (Go Travel Un Limited, Hong Kong, see above) to the respective provider's page. On click, your IP address, technical browser details, the referring page and an identifier of our partner account are transmitted to Travelpayouts; for some providers the attribution additionally runs through other networks (for Airalo, for example, Impact). According to the networks, cookies or similar technologies are set only on the provider's or network's page after you have left our website; our website itself stays cookie-free. Further processing is governed by the privacy policies of the respective providers on their websites. The booking takes place solely between you and the provider. The legal basis is again our legitimate interest in funding this site through commissions (Art. 6(1)(f) GDPR).

Contact by email and contact form

If you contact us by email or through the contact form, we process your email address, the content of your message and, if you give it, your name solely to handle your inquiry. The legal basis is our legitimate interest in communicating with you (Art. 6(1)(f) GDPR), or Art. 6(1)(b) GDPR for contractual or pre-contractual inquiries. The form data is received by a small program on our website and forwarded as an email to our mailbox via Cloudflare Email Routing (Cloudflare, Inc., USA, see the hosting section). It is not stored on the website and not written to log files. The form sets no cookies and embeds no third-party services; a hidden field and a timing check protect against automated abuse. The data is deleted once it is no longer required and no statutory retention periods apply.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interests, as well as the right to lodge a complaint with a supervisory authority. No automated decision-making within the meaning of Art. 22 GDPR takes place.