Declaration
Name and contact details of the responsible person in accordance with article 4 paragraph 7 GDPR (General Data Protection Regulation)
Zellar Hotel & Restaurant –
Proprietor : Alexandra Schleunung
Aschaffenburger Strasse 2
63796 Kahl am Main
Phone: 06188/918-0
fax: 06188/918-100
rezeption@hotel-zeller.de
Data protection officer
Daniel Jonetat
Am Röhrig 1b
datenschutz@hotel-zeller.de
This data protection declaration clarifies the type, scope and purpose of the processing of personal data (hereinafter referred to as “data”) within our online offer and the websites, functions and contents connected with it as well as external websites, such as our social media profile. (hereinafter jointly referred to as the “online offer”). With regard to the terms used, e.g. “processing” or “person responsible”, we refer to the definition in paragraph 4 of the General Protection Regulation (GDPR).
We inform you about us and our offers through the newsletter. If you would like to receive the newsletter., we require a valid e-mail address from you as well as information that allows us to check that you are the owner of the e-mail address provided or that the owner of the e-mail address agrees to receive the newsletter.. This data will only be used for sending the newsletter. and will not be passed on to third parties. When you register for the newsletter., we save your IP address and the date of registration. The saving of this data serves only as proof in the event that a third party misuses an e-mail address and registers to receive newsletters without the knowledge of the person entitled. You can revoke your consent to the saving of the data, the e-mail address and its use for sending the newsletter. at any time. The revocation can be made via a link in the newsletter. itself or by using the above-mentioned contact details of the hotel.
Visitors and users of the online offer (Hereinafter collectively referred to as “users”).
Personal data
Personal data is information that can be used to identify a person, i.e. information that can be traced back to a person. This includes the name, address or contact details. However, personal data also includes data such as preferences, hobbies, memberships, or websites visited by a certain person.
Personal data is only collected, used, passed on or processed by the provider if this is permitted by law or if the users have consented to the collection of their data.
Processing
“Processing” means any operation or set of operations performed upon personal data whether or not by automatic means such as collection, recording, organizing, arranging, filing, storing, adapting or altering, retrieval, consultation, use, disclosure by transmission, dissemination or making data available in any other way, matching or linking, restricting, deleting or complete destruction of data.
Responsible person
The term “responsible person” means the natural or legal person, public authority, institution or another body which alone or jointly with others determines the purposes and means of the processing of personal data.
Relevant legal basis
In accordance with Art. 13 GDPR we inform you of the legal basis of our data processing. If the legal basis is not stated in the data protection declaration, the following applies:
The legal basis for obtaining consent is Art. 6 para. 1 lit. a. and Art. 7 GDPR, the legal basis for processing in order to fulfil our services and implement contractual measures and answer enquiries is Art. 6 Para. 1 lit. b GDPR, the legal processing basis to fulfil our legal obligations is Art. 6 Para. 1 lit. c. GDPR, and the legal processing basis to safeguard our legitimate interests is Art. 6 Para. 1 lit. f GDPR. In the event that it is necessary to process the vital interests of the data subject or of another natural person, Art. 6 para. 1. lit. d. GDPR will serve as the legal basis.
Processor
“Processor” is any natural or legal person, public authority, institution or any other body which/who processes personal data on behalf of the responsible person.
Third party
“Third party” is any natural or legal person, public authority, institution or any other body who is authorised to process the personal data except the data subject, the responsible person, the processor and the persons who are authorized to process the data under the direct authority of the responsible person or the processor.
If, in the course of our processing, we disclose data to other persons and companies (processors or third parties), transfer the data to them or otherwise grant them access to the data, this is only done on the basis of a legal authorisation (e.g. when the data must be transferred to third parties, such as payment service providers, in accordance with Art. 6 Para. 1 lit. b. GDPR in order to fulfil the contract), provided they have given their consent, when a legal obligation provides for this or on the basis of our legitimate interests (e.g. when deploying designees, web hosts, etc.).
If we commission third parties to process data on the basis of a so-called “contract processing agreement”, this is done on the basis of Art. 28 GDPR.
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA) or if this is done using the services of third parties or disclosure or transfer of data to third parties, this will only take place if it is done to fulfil our (pre-)contractual obligations, based on your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subjecting to legal or contractual permissions, we will only process or transfer the data to a third country if the data is subject to the special conditions of Art. 44 ff. GDPR. This means that the processing is carried out, for example, on the basis of special guarantees, such as the officially recognised statement e.g. on the basis of special guarantees, such as the officially recognised statement of a level of data protection equivalent to that of in the EU (e.g. for the USA through the “Privacy Shield”) or compliance with officially recognised special contractual obligations (so-called “standard contractual clauses”).
Cookies are small files that enable the storage of specific information of the user’s device used to access the website (PC, smartphone, etc.). On the one hand, they serve the user-friendliness of websites and thus help the users. On the other hand, they serve to collect statistical data on website usage and in order to analyse them for the purpose of improving offers. Users can influence the cookies. Most browsers have an option to restrict or completely prevent the storage of cookies. However, it should be noted that without cookies the usage and the user-friendliness of the website can be restricted.
Data subjects have the right to obtain confirmation as to whether or not data in question are being processed and to obtain information about such data, as well as further information and a copy of the data in accordance with Art. 15 of the GDPR.
In accordance with Art. 16 GDPR, you have the right to request the completion of the data concerning you or the correction of incorrect data concerning you.
In accordance with Art. 17 GDPR, you have the right to demand that data relating to you be deleted immediately or, alternatively, in accordance with Art. 18 GDPR, to demand that the processing of the data be restricted.
You have the right to demand that data concerning you which you have made available to us to be sent to you in accordance with Art. 20 GDPR and to demand that it be passed on to other responsible parties.
You also have the right under Art. 77 GDPR to lodge a complaint with the competent supervisory authorities.
The right of revocation states that you have the right to revoke consents granted in accordance with Art. 7 Para. 3 GDPR with effect to the future.
The right of revocation means that you can object to the future processing of data concerning you in accordance with Art. 21 GDPR at any time. The objection may be made in particular against data processing for the purposes of direct advertising.
You have the right to demand that we correct any incorrect personal data concerning you without delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data – also by means of a supplementary declaration.
You have the right to demand from the responsible person the immediate deletion of the data, and we are obliged to delete personal data immediately if one of the following reasons applies:
The right of cancellation (“right to be forgotten”) does not apply where processing is necessary:
You have the right to receive the personal data concerning you that you have provided us in a structured, commonly acceptable and machine-readable format and you have the right to transfer this data to another responsible party without hindrance from the responsible party to whom the personal data was provided, provided that
When exercising the right to transfer data in accordance with paragraph 1, you have the right to ask that personal data be transferred directly from one responsible party to another, insofar as this is technically feasible. Exercising the right to data transferability is without prejudice to the right of deletion (“right to be forgotten”). This right does not apply to processing that is necessary for the performance of a task that is in the public interest or is carried out in the exercise of official authority vested in the responsible person.
When contacting the provider (e.g. via contact form or e-mail), the user’s details are stored for the purpose of processing the inquiry and if follow-up questions arise.
With the newsletter. we inform you about us and our offers.
If you would like to receive the newsletter., we need a valid email address from you as well as information that allows us to verify that you are the owner of the provided email address or that the owner agrees to receive the newsletter.. Optionally, we ask you to provide a name for the purpose of personal contact in the newsletter. This data will only be used for sending the newsletter. and will not be passed on to third parties.
When you register for the newsletter., we save your IP address and the date of registration. This storage serves only as proof if a third party misuses an email address and registers to receive newsletters without the knowledge of the entitled person.
You can revoke your consent to the storage of the data, the e-mail address and its use for sending the newsletter. at any time. The revocation can be made via a link in the newsletter. itself, in your profile area or by sending a message to the above-mentioned contact details of the hotel.
The hosting services we use are meant to provide the following services: infrastructure and platform services, computing capacity, storage and database services, e-mailing, security and technical maintenance services that we use to operate this online service.
In doing so, we, or our host, process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer in accordance with Art. 6 para. 1 lit. f. GDPR in combination with Art. 28 GDPR (conclusion of contract processing contract).
We, (or our hosting provider), collects on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f GDPR Data on every access to the server on which this service is located (so-called server log files). The access data includes name of the retrieved web page, file, date and time of retrieval, amount of data transferred, message about successful retrieval, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider. Logfile information is stored for security purposes (for example, to investigate abusive or fraudulent activities) for a maximum of 7 days and then deleted. Data whose further retention is required for evidential purposes shall be exempted from the cancellation until final clarification of the incident.
The provider uses the log data only for statistical evaluations for the purpose of operation, security and optimization of the offer. However, the provider reserves the right to change the log data retrospectively if, based on specific indications, there is a justified suspicion of illegal use.
We process inventory data (e.g. names and addresses as well as contact data of users), contract data (e.g. services used, names of contact persons, payment information) for the purpose of fulfilling our contractual obligations and services in accordance with Art. 6 para. 1 lit. b GDPR. The entries marked as obligatory in online forms are required for the conclusion of the contract.
In the context of the use of our online services, we store the IP addresses and the time of the respective user action. The storage is based on our legitimate interests, as well as the user’s protection against misuse and other unauthorized use. This data will not be passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so in accordance with Art. 6 Para. 1 lit. c GDPR.
We process usage data (e.g. the visited web pages of our online offer, interest in our products) and content data (e.g. entries in the contact form or user profile) for advertising purposes in a user profile in order to show the user e.g. product information based on the services they have used so far.
We maintain web pages within social networks and platforms in order to be able to communicate with the customers, interested parties and active users there and to create awareness of our services. When accessing the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply.
Unless otherwise stated in our privacy policy, we process the data of users if they communicate with us within the social networks and platforms, e.g. write articles on our online presences or send us messages.
We integrate the videos of the “YouTube” platform of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain view, CA 94043, USA.
Privacy policy: https://www.google.com/policies/privacy,
Opt-Out: https://adssettings.google.com/authenticated
We integrate the maps of the “Google Maps” service of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain view, CA 94043, USA.
Privacy policy: https://www.google.com/policies/privacy,
Opt-Out: https://adssettings.google.com/authenticated
This site uses so-called web fonts, which are provided by Google, for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache to display texts and fonts correctly.
For this purpose, the browser you are using must connect to the servers of Google. This enables Google to know that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and attractive presentation of our online offers. This represents a legitimate interest in the sense of Art. 6 para. 1 lit. f GDPR.
If your browser does not support Web Fonts, a standard font from your computer will be used.
Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in the Google privacy policy: https://www.google.com/policies/privacy.
