Data Protection at a Glance
Controller in the sense of GDPR is Mr Jörg Winkler as the proprietor of the hotel. Please see the legal notice for his contact details.
Transfer of data / disclosure
We basically only use your personal data for the provision of the services you request. Insofar as external service providers are used by us within the scope of our service, their access to the data also exclusively ensues for the purpose of providing services.
We use technical and organisational procedures to ensure adherence to data protection provisions and also obligate our external service providers accordingly. Our service providers are carefully selected, in particular with regard to data protection and data security, and data processing is carried out in principle in the EU.
Furthermore, we will not disclose your data to any third party without your explicit consent, and especially not for advertising purposes. A transfer of your personal data only occurs if you have consented to the data transfer, or if we are authorised or obligated to do so due to statutory provisions and/or official or judicial ordinances. Thereby this can relate, in particular, to the disclosure of information for prosecution purposes, to avert danger or to assert intellectual property rights.
General Information and mandatory Information
SSL and/or TLS encryption
This website uses SSL and/or TLS encryption for security reasons and to protect the transfer of confidential content, such as orders or enquiries which you send to us as the website operator. You can recognise an encrypted connection as the address line in the browser changes from “http://” to “https://”, and by the lock symbol in your browser line.
If SSL and/or TLS encryption is enabled, the data you transfer to us cannot be accessed by third parties.
Analysis tools and third-party tools
Data acquisition on our website
Some of the web pages use so-called cookies. Cookies do not harm your computer and do not contain any viruses. Cookies serve to make our website more user-friendly, effective and secure. Cookies are small text files that are placed on your computer and stored by your browser.
Most of the cookies used by us are so-called “session cookies”. These are erased automatically at the end of your visit. Other cookies are stored on your end device until you delete them. These cookies allow us to recognise your browser when you next visit our site.
Server log files
The website provider automatically collects and stores information in so-called server log files, which your browser automatically sends to us. This information includes:
- browser type and version
- operating system used
- referrer URL
- host name of the accessing computer
- time of the server query
- IP address
This data is not combined with other data sources.
The basis for the data processing is Art. 6 (1) point (f) GDPR on the basis of a weighing of interests. The prevailing interest is the secure and functional operation of this website.
If you send us enquiries using the contact form, we store and process your data from the enquiry form including the contact data specified there by you for the purpose of processing the enquiry and in case follow-up questions arise. Thus, processing of the data entered into the contact form is carried out exclusively on the basis of Art. 6 (1) point (b) GDPR. Processing is necessary to carry out pre-contractual measures. We delete the data collected in this context after its storage is no longer required, or limit processing if there are statutory retention obligations.
Analysis tools and advertising
This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called “cookies”. These are text files which are stored on your computer and which allow analysis of how you use the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the US and stored there. Google has agreed to comply with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
The Google Analytics cookies are stored on the basis of Art. 6 (1) point (f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both their web offer and their advertising.
We have activated the IP anonymisation function on this website. This means that your IP address is abbreviated by Google within European Union member states or other states which are part of the European Economic Area before it is transmitted to the US. Only in exceptional cases will the full IP address be transmitted to a Google server in the US and shortened there. On behalf of the provider of this website, Google will use this information to analyse your use of the website, to compile reports about website activities and to provide further services connected to the use of this website and of the internet for the website provider. The IP address transferred by your browser in the context of Google Analytics is not combined with any other data from Google.
You can prevent cookies from being stored by setting your browser accordingly; however, please note that you may not have full access to all website functions in this case. In addition, you may prevent any data created by the cookie and relating to website usage on your part (including your IP address) from being transmitted to and being processed by Google by downloading and installing the browser plug-in available at the link below: https://tools.google.com/dlpage/gaoptout?hl=de.
Objection to data collection
You can prevent Google Analytics from collecting your data by clicking on the following link. This places an opt-out cookie which prevents the future collection of your data when visiting this website: Deactivate Google Analytics.
Order Data Processing
We have concluded an agreement with Google for order data processing and fully implement the strict regulations of the German data protection authorities when using Google Analytics.
Demographic data in Google Analytics
This website uses the “demographic data” function of Google Analytics. This allows for the compilation of reports that contain information regarding the age, gender, and interests of the visitors to the website. This data originates from interest-based advertising from Google as well as third-party visitor data. This data cannot be associated with a specific person. You can deactivate this function using the display settings in your Google account at any time, or you can generally prevent the collection of your data by Google Analytics as described in the “objection to data processing” section.
We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our websites. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
With reCAPTCHA, it should be checked whether the data entry on our website (e.g. in a contact form) is carried out by a person or an automated programme. To this end, reCAPTCHA analyses the behaviour of the website visitors, using various characteristics. This analysis begins automatically, as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates a range of information (e.g. IP address, dwell time of the website visitor on the website, or mouse movements made by the user). The data collected in the analysis is forwarded to Google.
The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place.
The data processing takes place on the basis of Article 6 (1) point (f) GDPR. The website provider has a legitimate interest in protecting its web content from fraudulent automated spying and SPAM.
Plug-ins and tools
Google web fonts
For the uniform representation of fonts, this website uses “web fonts”, which are provided by Google. When accessing a website, your browser will load the necessary web fonts into your browser cache in order to display texts and fonts correctly.
For this purpose, the browser you use must establish a connection to the Google servers. This informs Google that our website has been accessed via your IP address. Google web fonts are used to ensure a uniform and appealing presentation of our online offers. This is a legitimate interest in terms of Art. 6 (1) point (f) GDPR.
If your browser does not support web fonts, one of your computer’s standard fonts will be used.
This website uses the map service Google Maps via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
For you to use the functions of Google Maps, your IP address needs to be stored. This information is usually transferred to a Google server in the USA and stored there. The provider of this website has no influence on this transfer of data.
Google Maps is used in the interest of ensuring an appealing representation of our online offers and to facilitate the search for the places specified by us on the website. This is a legitimate interest in terms of Art. 6 (1) point (f) GDPR.
Your rights and contacts
It is important for us to explain the processing of your personal data as clearly as possible and to also inform you of your rights. If you wish for additional information or wish to exercise your rights, you may contact us at any time, so that we can deal with your enquiry.
Rights of data subjects
You have comprehensive rights with regard to the processing of your personal data. Firstly, you have a comprehensive right to information and can request the rectification and/or erasure or blocking of your personal data. You can also request a restriction of processing and have a right to object. With regard to the personal data you have transferred to us, you also have a right to data portability.
If you wish to assert your rights and/or wish for further information about this, please use the contact form to contact our staff. Alternatively, you can also address our data protection officer.
Withdrawal of consent and objection
Any consent given can be withdrawn at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent granted before withdrawal. The points of contact responsible for this are also our employees who can be contacted using the contact form and our data protection officer.
Insofar as the processing of your personal data is not carried out on the basis of your consent but on a different legal basis, you may object to this processing. Your objection leads to an examination and possibly to an end to the data processing. You will be informed of the result of the examination and will receive - if the data processing is nevertheless continued - additional information from us explaining why the data processing is permissible.
Data protection officer and contact
We have commissioned an external data protection officer, who assists us in terms of data protection law and who can also be directly addressed by you. Please contact our data protection officer with any queries with regard to our handling of personal data, or for further information on matters relating to data protection law:
Ana Núñez Díaz
Gierather Str 48