Privacy policyPrivacy policy

Privacy Policy

The protection of personal data is important to us. Therefore, the processing of personal data is carried out in accordance with the applicable European and national legislation.

You can of course revoke your declaration of consent at any time with effect for the future. Please contact the person responsible for this in accordance with § 1.

The following declaration provides an overview of what type of data is collected, how this data is used and passed on, what security measures we take to protect your data and how and how you can obtain information about the information given to us.

Legal basis for the processing of personal data Insofar as we obtain the consent of the person concerned for the processing of personal data, Article 6 Paragraph 1 Clause 1 lit Fulfillment of a contract to which the data subject is a party is required, Article 6 (1) sentence b) GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.Insofar as processing of personal data is necessary to fulfill a legal obligation to which we are subject, Article 6 (1) sentence 1 lit. c) GDPR serves as the legal basis.Is If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the person concerned do not outweigh the first-mentioned interest, Article 6 Paragraph 1 Sentence 1 lit. f) GDPR serves as the legal basis for the processing.

Data deletion and storage period The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage no longer applies. Storage can also take place if this has been provided for by European or national legislators in EU regulations, laws or other regulations to which we are subject. The data will also be blocked or deleted if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

§ 1 The person responsible and the data protection officer

(1) Name and address of the person responsible The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

Breckwoldt & Pöppe Service GbR

Rehwisch 32

25436 Moorrege

Tel: 0157/59154960

pensionzurschleuse@gmx.de

www.pensionzurschleuse.de

(2) The data protection officer of the person responsible is:

Carsten Breckwoldt

§ 2 Definitions

The data protection declaration is based on the terminology used by the European legislator when issuing the EU General Data Protection Regulation (hereinafter referred to as "GDPR"). The data protection declaration should be easy to read and understand. In order to ensure this, the most important terms are explained below:

(1) Personal data is all information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"). A natural person is considered to be identifiable if, directly or indirectly, in particular by means of assignment to an identifier such as a name, an identification number, location data, an online identifier or to one or more special features, the expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person can be identified.

(2) Affected person is any identified or identifiable natural person whose personal data is processed by the person responsible for processing.

(3) Processing is any process carried out with or without the help of automated procedures or any such series of processes in connection with personal data such as collecting, recording, organizing, arranging, storing, adapting or changing, reading out, querying, the use, disclosure by transmission, distribution or any other form of making available, matching or linking, restriction, deletion or destruction.

(4) Profiling is any type of automated processing of personal data that consists of using this personal data to evaluate certain personal aspects relating to a natural person, in particular to evaluate aspects relating to work performance, economic situation, analyze or predict that natural person's health, personal preferences, interests, reliability, conduct, whereabouts or relocation.

(5) Pseudonymization is the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without the use of additional information, provided that this additional information is stored separately and is subject to technical and organizational measures that ensure that the personal data are not assigned to an identified or identifiable natural person.

(6) The person responsible or responsible for processing is the natural or legal person, authority, institution or other body that alone or jointly with others decides on the purposes and means of processing personal data. If the purposes and means of this processing are specified by Union law or the law of the Member States, the person responsible or the specific criteria for his naming can be provided for by Union law or the law of the Member States.

(7) Processor is a natural or legal person, authority, institution or other body that processes personal data on behalf of the person responsible.

(8) Recipient is a natural or legal person, authority, institution or other body to which personal data is disclosed, regardless of whether it is a third party or not. However, authorities that may receive personal data in the context of a specific investigation mandate under Union or Member State law are not considered recipients.

(9) Third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct responsibility of the controller or processor, are authorized to process the personal data.

(10) Consent is any expression of will voluntarily given by the data subject in an informed manner and unequivocally for the specific case in the form of a declaration or other clear affirmative action, with which the data subject indicates that they are consenting to the processing of data concerning them agrees to personal data.

§ 3 Provision of the website and creation of log files

(1) If the website is only used for informational purposes, i.e. if you do not register or otherwise provide us with information, we automatically collect the following data and information from the computer system of the accessing computer each time the website is accessed: a) Information about the browser type and version used b) The user's operating system c) The user's Internet service provider d) Date and time of access) Websites from which the user's system accessed the website f) Websites that the user's system accessed Users are called up via our website g) Content of the calls (specific pages) h) Amount of data transferred in each case

The data is stored in the log files of our server. This does not affect the IP addresses of the user or other data that enable the data to be assigned to a user. This data is not stored together with other personal data of the user.

When using these general data, we do not draw any conclusions about the data subject. The data is only evaluated statistically. The log files are stored anonymously so that they cannot be assigned to a specific person .

(2) The legal basis for the temporary storage of the log files is Art. 6 (1) sentence lit. f) GDPR.

(3) The temporary storage of the IP address by the system is necessary to a) enable delivery of the website to the user's computer. For this purpose, the IP address of the user must remain stored for the duration of the session. b) to optimize the content of our website and the advertising for it c) to ensure the functionality of our information technology systems and the technology of our website) law enforcement authorities in the event of a cyber attack the necessary criminal prosecution Providing information

Our legitimate interest in data processing according to Article 6 Paragraph 1 Sentence 1 lit. f) GDPR also exists for these purposes.

(4) The data will be deleted as soon as they are no longer required to achieve the purpose - in this case at the end of the usage process.

(5) The collection of the data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website, which is why there is no possibility of objection.

§ 4 Use of cookies

(1) This website uses so-called cookies. Cookies are small text files that, as soon as you visit a website, are sent from a web server to your browser and stored locally on your end device (PC, notebook, tablet, smartphone, etc.) and stored on your computer and the user (i.e. us) provide certain information. Cookies do not damage the computer and do not contain viruses. Each cookie contains a characteristic character string (so-called cookie ID), which enables the browser to be clearly identified when the website is called up again.

(2) We use cookies to make our website more user-friendly, e.g. to make it easier for you to fill out forms, to offer you different languages or to make our multimedia content accessible to you. Some elements of our website require that the calling browser can be identified even after a page change.

(3) We also use cookies on our website, a) which enable an analysis of your surfing behavior b) for the integration of user-oriented advertisements and for market research purposes c) from third-party providers for the use of various tools specified below.

(4) When you visit our website, you will be informed about the use of cookies and consent to the processing of the personal data used in this context will be obtained. In this context, there is also a reference to this data protection declaration.

(5) The legal basis for the processing of personal data using technically necessary cookies is Art. 6 (1) sentence 1 lit. f) GDPR. The legal basis for the processing of personal data using cookies for analysis, information and advertising purposes is Article 6 (1) sentence 1 lit. a ) GDPR if the user has given his consent; the same applies to third-party cookies.

(6) The purpose of using technically necessary cookies is to simplify the use of websites for you. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser is recognized even after a page change. Cookies are used in particular to make the website more customer-friendly and secure, in particular to collect usage-related information, such as frequency of use and number of users of the pages and behavior of page use. The user data collected by technically necessary cookies are not used to create user profiles.

(7) The purpose of using technically unnecessary cookies is to improve the quality of our website and its content. Through the analysis cookies we learn how the website is used and can thus continuously optimize our offer. The advertising cookies allow us to include advertising according to your interests or to display it to you. This information is also used to automatically recognize you when you visit the website again with the same device and to make navigation easier for you. Third-party cookies allow us to provide you with tools that make the website easier to use. The purpose of the information and identification cookies is to identify the user by means of an ID and to be able to recognize this user again when they are called up again. The cookie is used to inform the user to find out how many other users are currently on the site and how often the room that the user is looking at has already been booked.

(8) Permanent cookies remain stored even when the browser session is ended and can be called up again when you visit the site again . The cookies are stored on your computer and transmitted to our site. Therefore, you also have full control over the use of cookies. If you do not want data to be collected via cookies, you can set your browser via the menu under "Settings" so that you are informed about the setting of cookies or generally exclude the setting of cookies or delete cookies individually. However, it is pointed out that the functionality of this website may be restricted if cookies are deactivated. As far as session cookies are concerned, they will be automatically deleted after leaving the website.

§ 5 Contact Form & Emails

(1) There is a contact form on our website which can be used to contact us electronically. If you take advantage of this option, the data entered in the input mask will be transmitted to us and saved. This data is:

a) E-mail address

b) Message

c) Name

d) Telephone number

(2) At the time the message is sent, the following data is also stored - anonymously:
a) IP address of the user
b) Date and time of registration For the processing of the data, your consent is obtained during the sending process and reference is made to this data protection declaration.

(3) You are also welcome to contact us by email. In this case, the personal data transmitted with the e-mail will be saved. Insofar as this concerns information on communication channels (e.g. e-mail address, telephone number), you also agree that we may also contact you via this communication channel in order to answer your request. In this context, the data will not be passed on to third parties. The data will only be used to process the conversation.

(4) The legal basis for processing the data is Art. 6 (1) sentence 1 lit. a) GDPR if the user has given his or her consent. The legal basis for the processing of the data transmitted in the course of sending an e-mail is Article 6 Paragraph 1 Clause 1 Letter f) GDPR. If the e-mail contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 Para. 1 S. 1lit. b) GDPR.

(5) The processing of the personal data from the input mask serves us solely to process the contact. Of course, we will only use the data from your e-mail inquiries for the purpose for which you made them available to us when contacting us. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems. This is also our legitimate interest.

(6) The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is over when it can be inferred from the circumstances that the facts in question have been finally clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest. If the e-mail contact is aimed at the execution of a contract, the data will be deleted after the statutory (commercial or tax law) storage periods required for this have expired.

(7) You have the option to revoke your consent to the processing of the e-mail and its content at any time. In such a case, the conversation cannot be continued. Please contact the person responsible in accordance with § 1. However, this revocation option only exists if the e-mail contact does not serve to prepare or implement a contract.

§ 6 SSL encryption

Our website uses SSL encryption for the transmission of confidential or personal data. This encryption is used, for example, for payment transactions and for inquiries to us via this website. You must monitor this to ensure that this encryption is actually active. The status of the encryption can be seen from the browser line, which changes from "http://" to https:// in the case of encryption. In the case of encryption, your data cannot be read by third parties. If the encryption is not active, please contact us confidentially via another contact option.

§ 7

Room booking (1) On our website we have the online service Siteminder Limited for room booking; Bond Store 3, 30 Windmill Street, Millers Point, NSW 2000Australia.

(2) If you would like to book a room with us, it is necessary for the conclusion of the contract that you provide your personal data, which we need to process your booking. Mandatory information required for the processing of the contracts is marked separately, further information is voluntary. The data is entered into an input mask and transmitted to us and stored. The following data is collected as part of the booking:

a) IP address

b) Date and time of booking

c) Room category and number of people

d) Travel periods

e) Any extras

f) Any comments to the hotel (requests)

g) Salutation

h) Name of the person making the booking

i) Name of the traveler (if different from the person making the booking)

j) Address

k) E-mail address

l) Telephone number

m) possibly different billing addresses

n) Land

o) Credit card details

(3) The data will also be passed on to the provider of the online service Siteminder Limited and to the payment service provider (see § 11). Otherwise, the data will only be passed on to third parties if the transfer is necessary for the purpose of contract processing or for billing purposes or to collect the fee or if you have expressly consented. In this regard, we only pass on the data required in each case. The data recipients are
a) the respective delivery/shipping company (passing on of name and address) b) debt collection companies, insofar as the payment has to be collected (passing on of name, address, order details) c) payment institutes for the purpose of collecting claims, insofar as you direct debit having chosen the payment method) Payment service provider – depending on the choice of payment method.

(4) The legal basis is Article 6 Paragraph 1 Sentence 1 Letter b) GDPR. With regard to the voluntary data, the legal basis for the processing of the data is Art. 6 (1) sentence 1 lit. a) GDPR. There is an order processing contract between the person responsible and Siteminder Limited.

(5) The mandatory information collected is required to fulfill the contract with the user (for the purpose of sending the goods and confirming the content of the contract). We therefore use the data to answer your inquiries, to process your booking, if necessary to check your creditworthiness or collect a claim and for the purpose of technical administration of the websites. The voluntary information is provided to prevent misuse and, if necessary, to investigate criminal offenses. We can also process the data you provide in order to inform you about other interesting products from our portfolio or to send you e-mails with information.

(6) The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. Due to commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of ten years after the contract has been executed. However, after 3 years we restrict the processing, i. H. Your data will only be used to comply with legal obligations. If there is a continuing obligation between us and the user, we store the data for the entire term of the contract and for a period of ten years thereafter (see above). With regard to the data provided voluntarily, we will delete the data at the end of 3 years after the execution of the contract, provided that no further contract is concluded with the user during this time; in this case, the data will be deleted 3 years after the last contract has been carried out.

(7) If the data is required to fulfill a contract or to carry out pre-contractual measures, the data can only be deleted prematurely if there are no contractual or legal obligations to the contrary. Otherwise, you are free to have the personal data provided during registration completely deleted from the database of the person responsible in accordance with § 1. With regard to the voluntary data, you can declare your revocation to the person responsible in accordance with § 1 at any time. In this case, the voluntary data will be deleted immediately.

§ 8 Payment Services

We have integrated payment services on our website. The integration is encrypted.

8 Credit card

(1) We have integrated components for payment via credit card on this website, which enable cashless payment for products and services on the Internet.

(2) If you select "credit card" as the payment option during the ordering process in our online shop, your data will be automatically transmitted to the credit card company. By selecting this payment option, you consent to the transfer of personal data required for payment processing.

(3) When making a purchase using a credit card, you send your name, your credit card number, the security code and the expiration date of the credit card to the credit card company. The processing takes place in encrypted form. The credit card company then carries out the payment to us after a technical check.

(4) The transmission of the data is only intended for payment processing.

§ 9 Disclosure

We are responsible for the collection, processing and use of the participants' personal data if we process it ourselves. We will only use the personal details of the participant and their other personal data within the framework of the statutory provisions of data protection law. We will only save, process and use the information to the extent that this is necessary for the implementation of the competition or if the participant has given his consent. This also includes use to exercise the rights of use granted. The data will only be used to carry out the competition and will then be deleted. Personal data will only be passed on to third parties or used beyond the processing of the competition if there is a legal claim or in legal implementation according to § 28 DSGVO. Should it be necessary to forward the information to a third party, the participant's consent shall be deemed to have been granted. The participant can request information about the data stored about him at any time. Otherwise, our data protection declaration applies in accordance with our website.

10.1 Links to external websites This website contains links to external websites. We are responsible for our own content. We have no influence on the content of external links and are therefore not responsible for it. In particular, we do not adopt their content as our own . If you are directed to an external site, the data protection declaration provided there applies. If you notice illegal activities or content on this site, you are welcome to point it out to us. In this case we will check the content and react accordingly (notice and take down procedure).

10.2 Google MapsOn this website we use the offer of Google Maps Google Inc. (Google Inc., 1600 Amphitheater Parkway Mountain View, CA 94043, USA). This enables us to show you interactive maps directly on the website and enables you to conveniently use the map function. By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. The following data is transmitted here

a) device-specific information, for example the hardware used; the version of the operating system; unique device identifier and mobile network information including your phone number.b) log data in the form of server logs. These include, among other things, details of how the Services were used, such as search queries; IP address; hardware settings; browser type; browser language; date and time of your request; page of origin; Cookies that can be used to uniquely identify your browser or your Google account c) Location-related information. Information about your actual location may be collected by Google. This includes, for example, your IP address, your WLAN access points or mobile phone mast end) You can find more information about the data collected by Google, INC under the following link: https://policies.google.com/privacy?hl=de&gl=de

This is done regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account.

The legal basis for the processing of personal data is Article 6 Paragraph 1 Letter S.1 f) GDPR. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework .

Google stores your data as usage profiles and uses them for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. If you do not wish to be associated with your profile on Google, you must log out before activating the button.

You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. The duration of storage depends on the storage periods at Google.

Responsible is Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the provider's data protection declaration. There you will also find further information on your rights in this regard and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy .

10.3 Embedding Vimeo videos We have incorporated Vimeo videos into our online offering, which are stored on www.vimeo.com and can be played directly from our website. Vimeo is operated by Vimeo, LLC, headquartered at 555 West 18th Street, New York, New York 10011. Clicking on a video connects to Vimeo's servers in the United States. The following data is transmitted:
a) Visited websites b) IP address, browser information c) Date and time of your request; d) Originating page e) Cookies that can be used to clearly identify your browser. You can find more information about the data collected by Vimeo under the following link : https://vimeo.com/privacy .
If you are logged in to Vimeo as a member, your data will be assigned directly to your account. Vimeo also enables videos to be rated or shared, for example, if you log in with your user account on Vimeo or other social networks (e.g. Facebook, Twitter, etc.). The legal basis for the processing of personal data is Art. 6 Para. 1 S .1 lit. a) GDPR. The integration of the videos serves to make the website clearer for the user. Vimeo stores your data as usage profiles and uses them for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular to provide needs-based advertising and to inform other users about your activities on our website. You can prevent this assignment by logging out of your Vimeo user account before using our website and deleting the corresponding Vimeo cookies .
The duration of the storage depends on the storage periods at Vimeo. You have the right to object to the creation of these user profiles, whereby you must contact Vimeo to exercise this right. The same applies to the right of withdrawal. If you do not want the data to be collected, simply log out of your user account or do not click on the Vimeo button. Further information on data processing and information on data protection by Vimeo can be found at https://vimeo.com/privacy .

§ 11 Web analysis by Google Analytics

(1) We use the service of Google Inc. (Google Inc., 1600 Amphitheater Parkway Mountain View, CA 94043, USA) on our website to analyze the surfing behavior of our users. The software sets a cookie on your computer (for cookies see § 4). If individual pages of our website are called up, the following data is stored:
a) Two bytes of the IP address of the calling system of the user b) The website called up c) Entry pages, exit pages d) The length of time spent on the website and the drop-out rate e) The frequency with which the Websitef) Country of origin and regional origin, language, browser, operating system, screen resolution, use of Flash or Javag) search engines used and search terms used

(2) The information generated by the cookie about the use of this website by users is usually sent to a server from transferred to Google in the USA and stored there. This website uses Google Analytics with the extension "_anonymizeIp()". The software is set in such a way that the IP addresses are not saved in full, but only in an abbreviated form. In this way, it is no longer possible to assign the shortened IP address to the calling computer. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. However, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

(3) The legal basis for the processing of personal data is Art. 6 (1) sentence 1 lit. f) GDPR. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework .

(4) Google will use this information on our behalf to evaluate your use of the website and to compile reports on website activity. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to constantly improve our website and its user-friendliness. Our legitimate interest in processing the data also lies in these purposes. By making the IP address anonymous, the interest of the user in the protection of their personal data is sufficiently taken into account.

(5) The data will be deleted as soon as they are no longer required for our recording purposes. In our case, this is the case after 14 months.

(6) The cookies used are stored on your computer and transmitted to our site. If you do not agree to the collection and evaluation of usage data, you can prevent this by setting your browser software accordingly by deactivating or restricting the use of cookies. Cookies that have already been saved can be deleted at any time. In this case, however, you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install. The current link is: " https://tools.google.com/dlpage/gaoptout?hl=de ."

(7) If you visit our website with your mobile device, you can also object to its use here by deactivating GoogleAnalytics by clicking on the following link: Deactivate Google Analytics . In this case, a cookie will be set in your browser, which tells Google to prevent tracking.

(8) Responsible is Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland Further information can be found in the user conditions at https://www.google.com/analytics/terms/de.html , in the overview of data protection at http://www.google.com/intl /de/analytics/learn/privacy.html and in the data protection declaration at https://www.google.de/intl/de/policies/privacy .

(9) We only use Google Analytics with your consent. You can revoke consent once given by

prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent;

Download and install the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de or click this link: Disable Google Analytics to prevent future collection by Google Analytics on our website. An opt-out cookie is stored in your browser. Please note that you must activate the opt-out cookie in every browser you use on all your end devices and may also have to activate it again if you delete all cookies in a browser.

§ 12 Bing Ads Conversion Tracking

(1) We use the Bing Ads service on our website. It is an analysis service provided by Microsoft Corporation, One Microsoft, Redmond, WA 98052-6399, USA. The service enables us to track your activities on our website if you have reached our website via ads from Bing Ads. The software then sets a cookie on your computer (see § 4 for cookies). This tells us and Microsoft that someone clicked on the ad, was redirected to our website and which page you came from. We also learn the total number of users who clicked on an ad and were forwarded to us.

(2) Neither Microsoft nor we receive personal data.

(3) The information generated by the cookie about the use of this website is usually transmitted to a server in the USA and stored there.

(4) The information obtained using the conversion cookie is used to create statistics for us. By evaluating the data obtained, we are able to compile information about the use of our ads. Our legitimate interest in processing the data also lies in these purposes.

(5) The legal basis for the processing of personal data is Art. 6 (1) sentence 1 lit. f) GDPR.

(6) The cookies used are stored on your computer and transmitted to our site. If you do not agree to the collection and evaluation of usage data, you can prevent this by setting your browser software accordingly by deactivating or restricting the use of cookies. Cookies that have already been saved can be deleted at any time. In this case, however, you may not be able to use all the functions of this website to their full extent.

(7) Third-party provider is Microsoft Corporation, One Microsoft, Redmond, WA 98052-6399, USA. For more information, see the privacy statement at https://privacy.microsoft.com/de-de/privacystatement .

§ 13 Facebook, Custom Audiences and Facebook Marketing Services (Tracking Pixel)

(1) Within our online offer, the so-called "Facebook pixel" is used due to our legitimate interests in the analysis, optimization and economic operation of our online offer and for these purposes. the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are resident in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 , Ireland ("Facebook").

(2) With the help of the Facebook pixel, Facebook is able to determine the visitors of our online offer as a target group for the display of advertisements (so-called "Facebook Ads"). Accordingly, we use the Facebook pixel to only display the Facebook ads we have placed to those Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products, which are based on the visited website). websites are determined), which we transmit to Facebook (so-called “Custom Audiences”). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interests of users and are not annoying. With the help of the Facebook pixel, we can also understand the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion"). This is also where our legitimate interests lie.

(3) The Facebook pixel is integrated directly by Facebook when you visit our website and can save a so-called cookie, ie a small file, on your device. If you then log in to Facebook or visit Facebook while logged in, the visit to our online offer will be noted in your profile. The data collected about you is anonymous to us, so we cannot draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and can be used by Facebook and for its own market research and advertising purposes. If we should transmit data to Facebook for comparison purposes, this will be encrypted locally on the browser and only then sent to Facebook via a secure https connection. This is done solely for the purpose of making a comparison with the data that is similarly encrypted by Facebook.

(4) Furthermore, when using the Facebook pixel, we use the additional function "extended comparison" (here data such as telephone numbers, e-mail addresses or Facebook IDs of the users are used) to form target groups ("Custom Audiences" or "Look Alike Audiences ") to Facebook (encrypted). Further information on "extended matching": https://www.facebook.com/business/help/611774685654668 .

(5) The legal basis for processing the data is Article 6 Paragraph 1 Clause 1 Letter f) GDPR and Article 6 Paragraph 1 Clause 1 Letter a) GDPR. Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law ( https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active ).

(6) Also on the basis of our legitimate interests (Article 6 (1) (f) GDPR) and your consent (Article 6 (1) ( a ) GDPR) we use the “Custom Audiences from File” procedure of the social network Facebook, Inc. In this case, the e-mail addresses of the newsletter recipients are uploaded to Facebook. The upload process is encrypted. The upload serves solely to determine recipients of our Facebook ads. We want to ensure that the ads are only displayed to users who are interested in our information and services.

(7) The processing of the data by Facebook takes place within the framework of Facebook's data usage guidelines. Accordingly, general information on the display of Facebook ads in Facebook's data usage guidelines: https://www.facebook.com/policy.php . You can find specific information and details about the Facebook pixel and how it works in the Facebook help area: https://www.facebook.com/business/help/651294705016616 .

(8) You can object to the collection by the Facebook pixel and the use of your data to display Facebook ads. In order to set which types of advertisements are displayed to you within Facebook, you can visit the page set up by Facebook and follow the instructions for setting usage-based advertising there: https://www.facebook.com/settings?tab=ads . The settings are platform-independent, ie they are adopted for all devices, such as desktop computers or mobile devices.

§ 14 Google-Re/Marketing-Services

(1) On the basis of our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 Para. 1 lit. f) DSGVO) we use the marketing and remarketing services (“Google Marketing Services” for short) from Google Inc. (Google Inc., 1600 Amphitheater Parkway Mountain View, CA 94043, USA).

(2) The Google marketing services allow us to display advertisements for and on our website in a more targeted manner in order to only present you with advertisements that potentially match your interests. If, for example, a user is shown ads for products that he was interested in on other websites, this is referred to as "remarketing". For these purposes, a so-called "web beacon" is integrated into the website when our and other websites on which Google Marketing Services are active are accessed. With their help, an individual cookie, ie a small file, is stored on your device (comparable technologies can also be used instead of cookies). This file notes which websites you have visited, what content you are interested in and which offers you have clicked on, as well as technical information on the browser and operating system, referring websites, visiting times and other information on the use of the online offer. This is also where our legitimate interests lie. Your IP address will also be recorded, whereby we inform Google Analytics that the IP address will be shortened within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and only in exceptional cases sent in full to a server from transferred to Google in the USA and shortened there. The IP address will not be merged with your data within other Google offers. The above information can also be combined by Google with such information from other sources. If you then visit other websites, you can be shown the ads tailored to you according to your interests.

(3) User data is processed pseudonymously as part of Google Marketing Services, ie Google does not store and process names or e-mail addresses, for example, but the relevant cookie-related data within pseudonymous user profiles. From Google's point of view, the ads are not managed and displayed for a specifically identified person, but for the cookie holder, regardless of who this cookie holder is. This does not apply if a user has expressly allowed Google to process the data without this pseudonymization. The information collected about you by Google Marketing Services is transmitted to Google and stored on Google servers in the USA. Your interests as a user are adequately safeguarded by the pseudonymous storage of the data.

(4) We can also use the "Google Tag Manager" to integrate and manage the Google analysis and marketing services on our website.

(5) The legal basis for processing the data is Article 6 Paragraph 1 Clause 1 Letter f) GDPR and Article 6 Paragraph 1 Clause 1 Letter a) GDPR. Google is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law ( https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active ).

(6) The person responsible is Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. For more information on how Google uses data for marketing purposes, see the overview page: https://www.google.com/policies/technologies/ads , Google's privacy policy is at https://www.google.com/policies/privacy available .

(7) If you wish to object to interest-based advertising by Google Marketing Services, you can use the setting and opt-out options provided by Google: http://www.google.com/ads/preferences .

§ 15 Google DoubleClick

(1) This website uses Google DoubleClick. This is a service for integrating advertisements from Google Inc. (Google Inc., 1600 Amphitheater Parkway Mountain View, CA 94043, USA). DoubleClick transmits data to the DoubleClick server with every impression as well as with clicks or other activities. Each of these data transfers triggers a cookie request to your browser. If the browser accepts this request, DoubleClick sets a cookie (see Cookies, § 4). A pseudonymous identification number (ID) is assigned to your browser in order to check which ads were displayed in your browser and which ads were viewed. The cookies enable Google and its partner websites, including us, to place ads based on previous visits to our or other websites. Every time one of our individual pages is called up, on which a DoubleClick component has been integrated, the Internet browser is automatically prompted to transmit data to Google for the purpose of online advertising and the settlement of commissions.

(2) DoubleClick is also able to use the cookie ID to record conversions. Conversions are recorded, for example, if you were previously shown a DoubleClick ad and you subsequently make a purchase on the advertiser's website using the same internet browser.

(3) The cookies do not collect any personal data. However, a DoubleClick cookie may contain additional campaign identifiers. A campaign identifier serves to identify the campaigns with which you have already been in contact.

(4) We have no influence on the data collected, nor do we know the full extent of the data collection and the storage period. Your data will be transferred to the USA and evaluated there. If you are logged in with your Google account, your data may be assigned to it.

(5) The purpose of the cookie is to optimize and display advertising that might be of interest to you, to make our website more interesting for you and to be able to finance it. This also allows reports on advertising campaigns to be created or improved, as well as multiple displays the same advertising can be avoided.

(6) The legal basis for the processing of your data is Art. 6 (1) sentence 1 lit. f GDPR. For cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework .

(7) You can prevent the installation of Google DoubleClick cookies in various ways: a) By setting your browser software accordingly, in particular the suppression of third-party cookies means that you will not receive any ads from third-party providers; in this case, however, you may not be able to use all the functions of our website.b) By permanently deactivating it in your browsers Firefox, Internet Explorer or Google Chrome under the link https://www.google.com/settings/ads/plugin . We would like to point out that in this case you may not be able to use all the functions of this offer to their full extent.

(8) Responsible is Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Further information on the purpose and scope of the data collection and its processing as well as further information on your rights in this regard and setting options for protecting your privacy can be found at http://www.google.de/intl/de/policies/privacy .

§ 16 Google Adwords Conversion with Remarketing

(1) This website uses Google Adwords. This is a service for integrating advertisements from Google Inc. (Google Inc., 1600 Amphitheater Parkway Mountain View, CA 94043, USA).

(2) Google AdWords allows an advertiser to set keywords that will only display an ad in Google's search engine results when the search engine retrieves a keyword-related search result. In the Google advertising network, the ads are distributed to topic-relevant websites using an automatic algorithm and taking into account the previously defined keywords.

(3) Google Adwords aims to advertise our website by displaying interest-based advertising on third-party sites, in the results of the Google search engine and through third-party ads on our site. We are interested in showing you advertising that is of interest to you, in making our website more interesting for you and in achieving a fair calculation of advertising costs. These advertising media are delivered by Google via so-called "ad servers". To do this, we use ad server cookies, which can be used to measure certain parameters for measuring success, such as the display of ads or clicks by users. If you access our website via a Google ad, Google Adwords will store a cookie on your PC. These cookies usually lose their validity after 30 days. For this cookie, the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wants to be addressed) is saved.

(4) The cookies enable Google to recognize your internet browser (see also § 4). If a user visits certain pages of an Adwords customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. Each Adwords customer is assigned a different cookie. This means that cookies cannot be tracked via the websites of Adwords customers. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material, in particular we cannot identify the user based on this information. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out and store your IP address. We ourselves do not collect or process any personal data in the advertising measures mentioned.

(5) Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence on the data collected, nor do we know the full extent of the data collection and the storage period. Your data will be transferred to the USA and evaluated there. By integrating AdWords Conversion, Google receives the information that you have accessed the relevant part of our website viewed or clicked on an advert from us; Furthermore, both Google and we receive information via the conversion cookie as to whether you have generated sales if you came to our website via an AdWords ad.

(6) Remarketing: In addition to Adwords Conversion, we use the Google Remarketing application. This is a function that enables us to display advertising to Internet users who have previously visited our website. This is intended to show you advertisements that are relevant to your interest. This is done using cookies stored in your browser, which are used by Google to record and evaluate your usage behavior when you visit various websites. Each time a website is accessed on which the Google Remarketing service has been integrated, the browser of the person concerned automatically identifies itself to Google. In this way, Google can determine your previous visit to our website. As part of this technical process, Google gains knowledge of personal data, ie your IP address or your surfing behavior. Google does not, according to its own statements, combine the data collected as part of remarketing with your personal data, which may be stored by Google. However, this data is also transmitted to Google in the USA and stored there.

(7) The legal basis for processing the data is Art. 6 (1) sentence 1 lit. f GDPR. For cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework .

(8) You can prevent participation in this tracking process in various ways: a) by setting your browser software accordingly; in particular, suppressing third-party cookies means that you will not receive any third-party ads; in this case, however, you may not be able to use all the functions of our website.
b) by deactivating the cookies for conversion tracking by setting your browser so that cookies from the domain " www.googleadservices.com " are blocked, https://www.google.de/settings/ads , whereby this setting deleted when you delete your cookies;
c) by deactivating the interest-based ads of the providers who are part of the self-regulatory campaign "About Ads" via the link http://www.aboutads.info/choices , whereby this setting will be deleted if you delete your cookies;
d) by permanent deactivation in your browsers Firefox, Internet Explorer or Google Chrome under the link http://www.google.com/settings/ads/plugin . We would like to point out that in this case you may not be able to use all the functions of this offer to their full extent.

(9) Responsible is Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Further information on data protection at Google can be found here: http://www.google.com/intl/de/policies/ privacy and https://services.google.com/sitestats/ de.html . Alternatively, you can visit the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org .

§ 17 Rights of the data subject

If personal data is processed by you, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the person responsible in accordance with § 1: - Right to information - Right to rectification - Right to restriction of processing - Right to Deletion - Right to information - Right to data portability - Right to object to processing - Right to revoke consent under data protection law - Right to revoke consent under data protection law - Right to non-application of an automated decision - Right to lodge a complaint with a supervisory authority

17.1 Right to information (1) You You can request confirmation from the person responsible as to whether personal data relating to you is being processed by us. If such processing is present, you can request free information from the person responsible at any time about the personal data stored about you and about the following information:
a) the purposes for which the personal data are processed; b) the categories of personal data, which are processed; c) the recipients or categories of recipients to whom the personal data relating to you have been disclosed or will be disclosed; d) the planned duration of the storage of the personal data relating to you or, if specific information on this is not possible , criteria for determining the storage period; e) the existence of a right to correction or deletion of the personal data concerning you, a right to restriction of processing by the person responsible or a right to object to this processing; f) the existence of a right of appeal to a supervisory official authority; g) all available information about the origin of the data if the personal data is not collected from the data subject; h) the existence of automated decision-making including profiling in accordance with Article 22 (1) and (4) GDPR and - at least in these cases - Meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

(2) You have the right to request information as to whether your personal data is being transmitted to a third country or to an international organization. In this context, you can request to be informed of the appropriate guarantees pursuant to Art. 46 GDPR in connection with the transmission.

(3) This right to information can be restricted insofar as it is likely to make it impossible or seriously impair the realization of the research or statistical purposes and the restriction is necessary for the fulfillment of the research or statistical purposes.

17.2 Right to rectification You have the right to immediate rectification and/or completion to the person responsible if the processed personal data relating to you is incorrect or incomplete. or statistical purposes impossible or seriously impairs and the restriction is necessary for the fulfillment of the research or statistical purposes.

17.3 Right to restriction of processing (1) Under the following conditions, you can request the person responsible to immediately restrict the processing of the personal data concerning you: a) if you contest the accuracy of the personal data concerning you for a period of time that enables the person responsible to check the accuracy of the personal data; b) the processing is unlawful and you refuse the deletion of the personal data and instead request the restriction of the use of the personal data; c) the person responsible no longer needs the personal data for the purposes of the processing, However, you need this to assert, exercise or defend legal claims, ord) if you have lodged an objection to the processing pursuant to Art. 21 Para. 1 GDPR and it is not yet clear whether the legitimate reasons of the person responsible outweigh your reasons .

(2) If the processing of the personal data concerning you has been restricted, this data - apart from its storage - may only be used with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of a important public interest of the Union or a Member State are processed. If the restriction of processing has been restricted according to the above conditions, you will be informed by the person responsible before the restriction is lifted.

(3) The right to restriction of processing can be restricted insofar as it is likely to make it impossible or seriously impair the realization of the research or statistical purposes and the restriction is necessary to fulfill the research or statistical purposes.

17.4 Right to erasure (1) You can request the person responsible to erase the personal data concerning you without undue delay if one of the following reasons applies: a) The personal data concerning you are necessary for the purposes for which they were collected or for other purposes way were processed is no longer necessary.b) You revoke your consent on which the processing was based in accordance with Article 6 (1) ( a) or Article 9 (2) ( a) GDPR and there is no other consent Legal basis for processing.
c) You object to the processing in accordance with Article 21 (1) GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Article 21 (2) GDPR.
d) The personal data concerning you were processed unlawfully.e) The erasure of the personal data concerning you is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the person responsible is subject.
f ) The personal data concerning you was collected in relation to information society services offered in accordance with Article 8 (1) GDPR.

(2) If the person responsible has made the personal data concerning you public and is obliged to delete it in accordance with Article 17 (1) GDPR, he shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, in order to to inform those responsible for data processing who process the personal data that you, as the data subject, have requested them to delete all links to this personal data or copies or replications of this personal data.

(3) The right to erasure does not exist if the processing is necessary
a) to exercise the right to freedom of expression and information; b) to fulfill a legal obligation that requires the processing under Union or Member State law to which the person responsible is subject to, requires, or to perform a task that is in the public interest or in the exercise of official authority that has been transferred to the person responsible; c) for reasons of public interest in the area of public health pursuant to Article 9 Paragraph 2 lit. h and i as well as Art. 9 Para. 3 GDPR;
d) for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 Para. to assert, exercise or defend legal claims.

17.5 Right to information If you have asserted the right to correction, deletion or restriction of processing against the person responsible, he is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction/deletion/restriction of processing, unless , this proves to be impossible or involves a disproportionate effort. You have the right to be informed about these recipients by the person responsible.

17.6 Right to data portability (1) You have the right to receive the personal data that you have provided to the person responsible in a structured, common and machine-readable format. You also have the right to transmit this data to another person responsible without hindrance from the person responsible to whom the personal data was provided, provided that a) the processing is based on consent pursuant to Article 6 (1) ( a) GDPR or Article 9 Paragraph 2 lit. a GDPR or on a contract in accordance with Article 6 Paragraph 1 lit. b GDPR and
b) the processing is carried out using automated procedures.

(2) In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one person responsible to another person responsible, insofar as this is technically feasible. The freedoms and rights of other people must not be impaired by this.

(3) The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task that is in the public interest or in the exercise of official authority that has been transferred to the person responsible. To assert the right to data portability the data subject can contact the data controller at any time.

22.7 Right to object
(1) You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is based on Article 6 Paragraph 1 lit. e or f GDPR ; this also applies to profiling based on these provisions.

(2) The person responsible will no longer process the personal data relating to you unless he can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

(3) If the personal data concerning you are processed in order to operate direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising. If you object to the processing for direct marketing purposes, the personal data relating to you will no longer be processed for these purposes.

(4) In connection with the use of information society services, you have the option – irrespective of Directive 2002/58/EC – of exercising your right of objection by means of automated procedures that use technical specifications.

(5) You have the right, for reasons arising from your particular situation, to object to the processing of personal data relating to you for scientific or historical research purposes or for statistical purposes pursuant to Article 89 (1) GDPR . Your right to object can be restricted insofar as it is likely to make it impossible or seriously impair the realization of the research or statistical purposes and the restriction is necessary for the fulfillment of the research or statistical purposes.

(6) In order to exercise the right to object, the data subject may contact the data controller directly.

17.8 Right to revoke the declaration of consent under data protection law You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the point of revocation. You can contact the person responsible for this.

17.9 Right to automated decision-making in individual cases, including profiling
(1) You have the right not to be subject to a decision based solely on automated processing - including profiling - which has legal effects on you or significantly affects you in a similar way. This does not apply if the decision
a) is necessary for the conclusion or performance of a contract between you and the person responsible, b) is permissible on the basis of legal provisions of the Union or the Member States to which the person responsible is subject and these legal provisions take appropriate measures to ensure compliance contain your rights and freedoms as well as your legitimate interests orc) is carried out with your express consent.

(2) However, these decisions may not be based on special categories of personal data according to Article 9 Paragraph 1 GDPR, unless Article 9 Paragraph 2 lit. a or g GDPR applies and appropriate measures to protect the rights and freedoms and your legitimate interests were met.

(3) With regard to the cases mentioned in (1) and (3), the person responsible shall take appropriate measures to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain human intervention on the part of the person responsible, to present the own point of view and to challenge the decision.

(4) If the data subject wishes to assert rights relating to automated decisions, they can contact the data controller at any time.

22.10 Right to lodge a complaint with a supervisory authority Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement, if you believe that the processing of the personal data concerning you violates the GDPR. The supervisory authority to which the complaint was lodged will inform the complainant about the status and the results of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR.

Section 18 Changes to the Privacy Policy

We reserve the right to change our privacy practices and this policy to reflect changes in relevant laws or regulations, or to better meet your needs. Any changes to our privacy practices will be announced accordingly at this point. Please note the current version date of the data protection declaration.

We care about your privacy !.

And yet this website uses cookies. How so?

We use cookies (also from third parties) to offer you an optimal website experience. These include cookies that make the use of the website possible in the first place, cookies that help to evaluate statistics for controlling company goals and those that help to personalize content and offers for your convenience and benefit. You can decide for yourself whether you want to allow only the necessary cookies or all cookies. Please note, however, that based on your decision not all functionalities of the website may be available.

privacy

Cookies are small text files used by websites to provide a more efficient user experience.

The law allows us to store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission.

This site uses different types of cookies. Some cookies are placed by third parties that appear on our sites.

You can change or withdraw your consent at any time from the cookie statement on our website.

Find out more about who we are, how you can contact us and how we process personal data in our privacy policy.

Please include your consent ID and date when contacting us regarding your consent.

Your consent applies to the following domains: hotelhafenhamburg.meetingpackage.com, tickets.hotel-hafen-hamburg.de, gutscheine.hotel-hafen-hamburg.de, karriere.hotel-hafen-hamburg.de, onepagebooking.com/, www.hotel-hafen-hamburg.de

The cookie statement was last updated by Cookiebot on 10/09/22 :

Necessary (26)

Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies. Data about the behavior of visitors on the website. Used by the webmaster for internal analysis.