Privacy policy / Disclaimer

:: PRIVACY POLICY ::

PRIVACY AND DATA REGULATION GUIDELINES

We think, that trust is a fundamental part of building a successful and long-term business relationship. Speaking about data protection, we would like to earn your trust through a high degree of transparency and responsible action. That is why we disclose in this document what happens to your data transmitted to us. The processing of all personal data (including, for example, your name, postal address, e-mail address, etc.) is subject to the General Data Protection Regulation (GDPR) and country-specific data protection laws applicable to us. In the following we would like to give you an overview about the processing of your personal data by us and also draw your attention to the rights to which you are entitled in accordance with data protection law.

OUR PRIVACY POLICY IN DETAIL

DEFINITION OF TERMS

Computer / computer system - this term refers to all types of devices used by you to access our website or any other services offered online or for those products and services requiring Internet access for their operation (e.g. software products).

ANONYMOUS SURFING AND BASIC PROCESSING OF PERSONAL DATA

In principle, it is possible to use our website without providing any personal data.

For providing certain services of our business, however, it is necessary that we process personal data. If there is no legal basis for this processing, we will of course obtain your explicit consent in advance. We ensure the protection of all personal data processed via this website through numerous technical and organisational measures. This is done according to the current state-of-the-art. Our website uses the latest encryption techniques for data transmission.

ORIGIN OF PROCESSED PERSONAL DATA BY US

We only process personal data that you make available to us in the context of your customer relationship, which is absolutely necessary for the fulfilment of our services. This also includes data that we legitimately collect from publicly accessible sources (e.g. Internet, commercial registers) as well as receive from other third parties (e.g. credit agencies). Possible data contents: Personal data (e.g. name, address, contact data), documentation data (e.g. protocols and transcripts), communication data (e.g. e-mail address) and other data similar to the above categories.

***********************************************************

RESPONSIBLE FOR DATA PROCESSING

If you have any questions regarding our data protection declaration or the exercise of your rights, please do not hesitate to contact us personally:

Friedrich Leiblein
Rothenburger Straße 1
91583 Schillingsfürst, Germany

Telephone: +49 9868 9500
E-mail: info@hotel-diepost.de

***********************************************************

LEGAL BASIS AND PURPOSE OF DATA PROCESSING

We process personal data exclusively on the basis of the General Data Protection Regulation (GDPR) and country-specific data protection laws applicable to us.

Based on your consent (Art. 6 par. 1 a GDPR)
On the basis of your explicit consent, we will only process your personal data for the agreed purpose.
You can revoke your consent at any time (please contact the above-mentioned responsible data processing department). The revocation of your consent does not affect the lawfulness of the data processing until revocation.

Fulfilment of contractual obligations (Art. 6 par. 1 b GDPR)
Your data will be processed to the extent necessary for the provision of our services. The specific purposes of data processing depend on the service booked (for details, please refer to the service agreements for details).

Due to legal requirements (Art. 6 par. 1 c GDPR) or if in the public interest (Art. 6 par. 1 e GDPR)
We are subject to certain legal obligations; in particular with regard to accounting obligations and tax law. Therefore, we also process your personal data, for example, for the fulfilment of tax control and reporting obligations.

Balancing of interests (Art. 6 par. 1 f GDPR)
If necessary, your data will be processed to protect our legitimate interests (Art. 6 par. 1 f GDPR) and to protect the legitimate interests of third parties; this includes, for example...

the assertion of legal claims and the use in the context of legal disputes.
to ensure the security of our IT systems.
the prevention and investigation of criminal offences.

RECIPIENTS OF PERSONAL DATA

Only authorised bodies within our company who are responsible for fulfiling contractual and legal obligations are granted regulated access to your personal data. The same applies to service providers commissioned by us who work for us within this framework. We ensure the protection of your data by organizational and technical measures, according to current state-of-the-art methods. This also applies to service providers commissioned by us.

TRANSFER OF DATA TO THIRD COUNTRIES OR ORGANISATIONS OUTSIDE THE EUROPEAN UNION

Data transmission in this context only occurs if...

you have given us your explicit consent.
the service to be provided absolutely requires it (e.g. search engine submissions).
a legal regulation requires this (e.g. tax reporting obligation).

To perform certain tasks, we use service providers who may be located in a third country (e.g. datacenter). This is permitted exclusively on the basis of article 45 GDPR, in the context of a decision of the European Commission on the existence of an adequate level of protection in this third country. Unless the European Commission made a decision, data submission is done only if appropriate guarantees are provided (e.g. data protection provisions approved by the European Commission or the local authority under a defined procedure) and if enforceable rights and effective remedies are provided. In contracts signed with such service providers, we always oblige them to comply with the European data protection level.

STORAGE DURATION OF PERSONAL DATA

Your personal data will be used by us as long as it is necessary for the fulfilment of our contractual and legal obligations. We will then immediately remove such data from our systems, unless further use is necessary for the following purposes:

Fulfilment of commercial and tax law storage obligations (e.g. commercial law, tax law) - the legally defined storage periods are varying between two and ten years.
Preservation of evidence within the context of statutory statute of limitations (e.g. §195 ff. BGB) - the usual statutory period is 3 years, otherwise up to 30 years.

YOUR PRIVACY RIGHTS

Right of access by the data subject (Art. 15 GDPR)
We will be pleased to inform you whether your personal data is processed by us, provide information on this data as well as further details and send you a copy of this data.

Right to rectification (Art. 16 GDPR)
Upon your request, we will immediately rectify any incorrect data collected and update incomplete data as quickly as possible.

Right to erasure (Art. 17 GDPR)
You can make use of your right to the immediate removal of personal data, provided that the fulfilment of our contractual and legal obligations does not conflict with your deletion claim.

Right to restriction of processing (Art. 18 GDPR)
As an alternative to the right of deletion, you also have the right to restrict the processing of personal data.

Right to data portability (Art. 20 GDPR)
Upon request, we will make your data available in a machine-readable format so that you can pass it on to third parties.

***********************************************************

Right of objection (Art. 21 GDPR)
You have the right to object to the processing of your personal data at any time for reasons arising from your particular situation, which is based on Art. 6 par. 1 e or Art. 6 par. 1 f GDPR. This also applies to profiling based on these provisions.
We will then no longer process your data unless we may prove compelling, legitimate reasons for processing which outweigh your interests, rights and freedoms, or the processing is intended to enforce, practice or defend legal claims.

Objections may be sent by e-mail to info@hotel-diepost.de (responsible for data processing).

***********************************************************

Miscellaneous

Within the scope of the right of access and right to erasure you must observe the restrictions according to §34 and §35 BDSG. In addition, there is a right of appeal to a responsible data protection supervisory authority (Art. 77 GDPR and §19 BDSG). You can revoke your consent to the processing of personal data at any time. Please note that the revocation only applies to future processing; processing that has taken place until the revocation remains unaffected.

OBLIGATION OF DATA PROVISION

You must provide us with any personal data we need to fulfill our contractual and legal obligations. Otherwise, we will usually not be able to provide our services for you.

AUTOMATED DECISION MAKING AND PROFILING (ART. 22 GDPR)

We do not use automated decision making techniques. In individual cases we use legally received data from credit bureaus to evaluate a possible cooperation or a possible signing of a contract with you. To the extent required by law, we will obtain your explicit consent in advance.

LOG DATA GENERATED DURING YOUR VISIT ON OUR WEBSITE

While visiting our website, we automatically collect a number of data:

Date/time stamp of the visit
Duration of the connection
Host name and IP address
Web browser (type and version)
Operating system (type and version)
Website, that contained the link used to visit us (so-called "referrer")
Visited pages on our website (including amount of transmtitted data)
Other data, such as data used to defend against attacks on our IT systems

This data remains stored for a maximum of 90 days and is then converted into anonymous statistics. At no time any personal data is exploited. The storage of anonymized data is separated from the storage of personal data.
We use this data to maintain the general functionality and security of our technical services and to investigate possible cases of misuse. Identification of individual visitors is technically impossible due to the anonymisation used.

COOKIES

We use cookies on our website. These are textual information stored in the web browser locally on your computer system. Cookies help us to make our website easier and more user-friendly. By using our website, you agree to the use of cookies.
Many cookies contain a cookie ID, which is a unique identifier for the cookie: With this string of characters our website can recognize you (more precisely your web browser) as a visitor and distinguish you from other visitors. You can deactivate the storage of cookies at any time in the settings of your web browser and delete existing cookies. Please note that if cookies are deactivated or deleted, certain functions of our website may no longer be available. If third parties use cookies on our website, please refer to the following sections for further information.

CONTACT OPTION ON OUR WEBSITE - CONTACT FORM

You can contact us via a contact form. If you use the contact form, your personal data will be stored automatically. This data is collected on a voluntary basis and is used solely to contact you and process your enquiry. When using the contact form, your data will be transmitted to us in encrypted form. The data processing takes place according to Art. 6 par. 1 sentence 1 lit. a DSGVO after your explicit consent. Your data will not be passed on to third parties. After processing your request, all personal data will be deleted automatically.

CONTACT OPTION ON OUR WEBSITE - E-MAIL

You can contact us either by letter post, by phone or directly by e-mail ("electronic mail"). In addition, we offer the option of exchanging encrypted e-mails. If you send us a letter or an e-mail, personal data you submitted will be stored automatically. For telephone enquiries, we keep written notes on the contents of the call. These data are collected on a voluntary basis (see Art. 6 par. 1 sentence 1 lit. a GDPR) and are used solely to initiate contact and to process your inquiry. The data will not be passed on to third parties. After processing your request, all personal data will be automatically deleted.

APPLICATIONS TO JOB VACANCIES

You have the opportunity to apply for open positions in our company and to send us the necessary documents electronically (e.g. by e-mail). If an employment contract is concluded between you as an applicant and us as an employer, we process the data you provide within the scope and for the purpose of processing the employment relationship in compliance with all statutory provisions. If there is no employment contract between you as an applicant and us as an employer, we will destroy the data provided by you within 30 days of receipt of the decision, provided that there are no other legitimate interests to prevent the deletion (e.g. duty of proof under the General Equal Treatment Act (AGG)).

USE AND APPLICATION OF FACEBOOK

We may use Facebook social networking services and their specific user interaction features on this site. Facebook integrates its own content into our website and automatically collects a number of data, including your IP address used at the time of access and the type and version of operating system and web browser used.

An overview of all integrable components can be found here: https://developers.facebook.com/docs/plugins/?locale=en_DE.

If you are logged in to Facebook during your visit to our website, the data collected will be combined with your account on Facebook. In this way, personal data such as a "Like" and comments can be assigned to your personal Facebook account. By visiting our website, you consent to the processing of the data collected by Facebook in the manner and for the purposes described herein.

Further information and current data protection regulations for Facebook can be found at https://de-de.facebook.com/about/privacy/.

Address of the operator
Facebook, Inc. | 1 Hacker Way | Menlo Park, CA 94025, USA

Responsible body for the processing of personal data of participants outside the USA and Canada
Facebook Ireland Ltd. | 4 Grand Canal Square, Grand Canal Harbour | Dublin 2, Ireland

USE AND APPLICATION OF GOOGLE ADWORDS

We may use Google AdWords on this website to promote our products and services.

Google AdWords is an advertising network that uses mathematical algorithms to integrate advertisements on relevant websites. Google integrates its own content into our website and thus automatically collects a number of data, including your IP address used at the time of access as well as the type and version of the operating system and web browser you are using. These are textual information for the usage analysis and billing of the advertising inserts. Google AdWords uses special "conversion cookies". These are used to compile access statistics for our website, to track purchases and to control the future sending of advertisements. The data collected about the use of our website (including your IP address) is sent to a Google server in the USA and stored there. Collected information may be shared by Google with its cooperation partners. Neither we nor other advertisers receive information that could identify an individual. You may refuse the use of cookies by selecting the appropriate settings on your web browser. Please note, however, that in this case our website may no longer function properly. By visiting our website, you consent to the processing of data by Google in the manner and for the purposes set out above.

Further information and current data protection regulations for Google AdWords can be found at https://www.google.de/intl/de/policies/privacy/.

Address of the operator
Google Ireland Limited | Gordon House, Barrow Street | Dublin 4, Ireland

USE AND APPLICATION OF GOOGLE FONTS

We may use Google Fonts on this website to incorporate fonts to display our textual content.

The embedded fonts are delivered by Google from an external server and integrated into our website, where Google automatically collects a number of data, including your IP address used at the time of access and the type and version of operating system and web browser used. Google stores "cookies" on your computer for the purpose of providing the services. These are textual information. The collected data about the use of our website (including your IP address) is sent to a Google server in the USA and stored there. This server also takes over the delivery of the contents. Collected information can be passed on by Google to their cooperation partners. You can prevent the storage of cookies by making the appropriate setting in your web browser. Please note, however, that in this case our website will probably no longer function properly. By visiting our website, you agree to the processing of the data collected by Google in the manner and for the purposes set out above.

Further information and current data protection regulations for Google Fonts can be found at https://policies.google.com/privacy?hl=en.

Address of the operator
Google Ireland Limited | Gordon House, Barrow Street | Dublin 4, Ireland

USE AND APPLICATION OF GOOGLE MAPS

We may use Google Maps on this website to map and display geographic information.

The content included is delivered by Google from an external server and integrated into our website; Google automatically collects a number of data, including your IP address used at the time of access and the type and version of operating system and web browser used. Google stores "cookies" on your computer for the purpose of providing the services. These are textual information. The collected data about the use of our website (including your IP address) is sent to a Google server in the USA and stored there. This server also takes over the delivery of the contents. Collected information can be passed on by Google to their cooperation partners. You can prevent the storage of cookies by making the appropriate setting in your web browser. Please note, however, that in this case our website will probably no longer function properly. By visiting our website, you agree to the processing of the data collected by Google in the manner and for the purposes set out above.

Further information and current data protection regulations for Google Maps can be found at http://www.google.com/intl/de_en/help/terms_maps.html.

Address of the operator
Google Ireland Limited | Gordon House, Barrow Street | Dublin 4, Ireland

LINKS TO EXTERNAL CONTENTS

We regularly set links to contents of external providers that are beyond our control. This applies not only to the content displayed there but also to the use of the data transmitted by you on this content. If you have any questions about data protection on external websites, please contact the responsible operator.