In the following we would like to inform you about data protection on our websites and about the type, scope and purpose of the personal data we collect, use and process. Data protection is very important to us.
Personal data is all data with which you could be personally identified, e.g. name, IP address, telephone number, etc. Some of this data is processed automatically when you visit the website (e.g. IP address, browser type, operating system, etc.), or if you give us your consent to processing, or if you voluntarily provide us with your data, e.g. enter your data in a form on our website.
Furthermore, we would like to inform you about the rights to which you are entitled under the GDPR.
You have the right at any time to receive information free of charge about the origin, recipient and purpose of your personal data processed by us, as well as the right to correct or delete this data.
You also have the right to request that the processing of your personal data be restricted under certain circumstances. If you have given us your consent to data processing, you can revoke this consent at any time for the future. You also have the right to lodge a complaint with the competent data protection supervisory authority.
Responsible for data protection / processing body
Beatrice Drechsel and Erland Drechsel
Deubach 16A
99848 Wutha-Farnroda
Telephone: +49 179 4529 421
Fax: +49 160 9388 1842
Email:
Processing of your data as part of the services we provide
In the case of our guests or business partners, or if you are interested in our services, the type, scope and purpose of the processing of your personal data are based on the contractual or pre-contractual relationships between us. We process personal data that we request from you or that you provide to us in order to answer your request, to make you an offer or to process your booking. Affected persons are guests, interested parties, business and contractual partners. The processing purpose is the processing of contractual services, communication, as well as answering contact requests and office and organizational procedures.
Unless otherwise stated in the further information in this data protection declaration, the processing of your data and its transfer to third parties is limited to the data required to answer your inquiries and/or to fulfill the contract, to protect our rights and to fulfill legal obligations duties are necessary and appropriate.
Affected data are
Inventory data (e.g. names, addresses)
Payment data (e.g. bank details, invoices)
Contact details (e.g. e-mail address, telephone number, postal address)
Contract data (e.g. subject of the contract, contract duration)
The legal basis for data processing is Art. 6 I 1 lit. b GDPR, the fulfillment of the contract or the fulfillment of pre-contractual inquiries.
Unless a specific storage period is mentioned in this data protection declaration, we store your personal data until the purpose for data processing no longer applies. We delete your personal data when we no longer need them, i.e. after the contractual relationship between us has ended, or after our legitimate interest in further processing of the data no longer applies, or if you request us to delete it. Mandatory legal provisions - in particular statutory retention periods - remain unaffected. It may also be necessary to process your personal data until the expiry of these periods in order to assert, exercise or defend legal claims arising from contractual relationships, or to protect the rights of another natural or legal person. We will then only delete the personal data required for this after these periods have expired. However, until these deadlines expire, we limit the processing of this data to these purposes.
Calling up the websites - processing of personal data and type and purpose of use
When you visit our website, you transmit (due to technical necessity) data to our web server via your internet browser. The following data is processed in the server log files during an ongoing connection for communication between your internet browser and our web server:
the page from which the file was requested - referrer URL
the name of the file
the date and time of the request
a description of the type of web browser used / browser version and operating system
IP address of the requesting computer
Access status (file transferred, file not found, etc.)
Amount of data transferred
For technical reasons (accessing the website), this data is stored for a short time. It is not possible for us to draw conclusions about individual persons based on this data. After 7 days at the latest, the IP addresses will be deleted or made anonymous.
The data is evaluated exclusively for internal purposes and does not allow us to draw any conclusions about your person. There is no comparison with other databases.
The data mentioned are processed for the following purposes:
Ensuring a proper and smooth connection to the website,
ensuring comfortable use of the website,
Evaluation of system security and stability
The legal basis for data processing is Art. 6 Para. 1 S. 1 lit. f GDPR. The legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person. You can visit the website without providing any personal information.
cookies
We use technically necessary session cookies on our website. Cookies are small files that your browser creates automatically and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not damage your end device and do not contain viruses, Trojans or other malware.
Information is stored in the cookie that arises in connection with the specific end device used. However, this does not mean that we are immediately informed of your identity. Cookies do not contain any personal data and can therefore not be assigned directly to any user.
The use of cookies serves to make the use of our offer more pleasant for you. These cookies are automatically deleted after you close your browser. The data processed by cookies are required for the stated purposes to protect our legitimate interests and those of third parties in accordance with Article 6 Paragraph 1 Sentence 1 lit. f GDPR.
OpenStreetMaps
With your consent (Art 6 I S 1 lit a DSGVO) we use the geo data of the open source map service "OpenStreetMaps" (also called "OSM") of the Openstreetmap Foundation, St John's Innovation on our website to display maps Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom (Company Registration Number: 05912761). Great Britain is a safe third country in terms of data protection and has a data protection level that corresponds to that of the EU.
This service enables us to display our website and the map displayed on it in an appealing way. When the map data is retrieved, your IP address and the information that our website was accessed are transmitted to the OSM servers.
For more information on handling user data, see OSM's privacy policy at https://wiki.osmfoundation.org/wiki/Privacy_Policy
Inquiries by e-mail, fax or telephone
If you contact us by e-mail, fax or telephone, your inquiry including all resulting personal data (e.g. name, inquiry) will be stored and processed by us for the purpose of processing your request. The data will not be passed on without your consent. There is no legal or contractual obligation to provide your data, but it is not possible to process your request without providing your data.
This data is processed on the basis of Article 6 (1) (b) GDPR if your request is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 Para. 1 lit. a GDPR) and / or on our legitimate interest (Art. 6 Para. 1 lit. f GDPR), since we have a legitimate interest in the effective processing the inquiries addressed to us.
The data sent to us via contact requests (e-mail) will be stored by us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular statutory retention periods - remain unaffected.
Data when using our contact form - inquiries - bookings
If you send us a message via our contact form, you can also use a pseudonym instead of your real name. For bookings and inquiries we need your name. Entering an e-mail address is necessary to enable us to contact you by e-mail. There is no legal or contractual obligation to provide your data, but it is not possible to process your request without providing your data.
The data is processed either for the purpose of fulfilling a contract to which the data subject is a party, or to carry out pre-contractual measures (Article 6 I S 1 lit b GDPR), or in accordance with Article 6 Paragraph 1 Sentence 1 lit. a GDPR on the basis Your voluntarily given consent and / or on our legitimate interests (Art. 6 Para. 1 lit. f GDPR), since we have a legitimate interest in the effective processing of inquiries addressed to us.
Your data will be deleted after your request has been finally processed, provided that the deletion does not conflict with any statutory retention requirements.
E-mail advertising without registering for the newsletter and your right to object
If we have received your e-mail address in connection with a booking or service and you have not objected, we reserve the right to regularly send you our offers for similar services on the basis of Section 7 III UWG. The legal basis results from our legitimate interest in advertising to our customers and the processing of the data is permissible under Art. 6 I S1 lit f GDPR within the framework of a balancing of interests.
You can object to the use of your e-mail address at any time by sending us a message or via the corresponding link in the advertising e-mail. After the legal basis for data processing for advertising e-mails no longer applies, your e-mail address will be deleted, unless there are legal storage obligations (e.g. from tax or commercial storage obligations) to the contrary.
We would also like to point out that you can object to the future processing of your personal data at any time in accordance with the legal requirements of Article 21 GDPR. The objection can be made in particular against processing for direct advertising purposes.
Postal advertising and your right to object
We reserve the right to use your first and last name as well as your postal address, which you have given us when booking, for our own advertising purposes, e.g. to send you interesting offers by post. This serves to safeguard our overriding legitimate interests in advertising to our customers in accordance with Article 6 Paragraph 1 Sentence 1 lit. f GDPR.
You can object to the storage and use of your data for these purposes at any time by sending us a message. The objection can be made in particular against processing for direct advertising purposes. After the legal basis for data processing for postal advertising no longer applies, your address data will be deleted unless there are statutory retention requirements to the contrary.
guest book
If you post a comment in our guest book, information about the time the comment was created and, if you are not posting anonymously, the user name you have chosen will be saved in addition to your comment. You can also use a pseudonym instead of your real name.
We do not pass on the data you enter in the guest book to third parties or use this data for any other purpose than to display your comment on our website. The data processing takes place on the basis of Article 6 Paragraph 1 Sentence 1 lit.
We would like to point out that you can revoke the future processing of your personal data at any time. Further information on your right of withdrawal can be found under "Rights of data subjects".
Data security - SSL encryption
We use the SSL (Secure Socket Layer) method on our website for encryption and to protect the transmission of confidential content. If SSL encryption is activated, the data that you transmit to us cannot be read by third parties. You can tell whether an individual page of our website is transmitted in encrypted form by the closed representation of the key or lock symbol in the status bar of your browser - the address line of your browser shows "https://" with SSL encryption
.Processing/sharing of data
Your personal data will not be transmitted to third parties for purposes other than those listed above or below.
We only pass on your personal data to third parties if:
you have given your express consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR,
this is legally permissible and, according to Art. 6 (1) sentence 1 lit. b GDPR for the fulfillment of contractual relationships which is necessary for the implementation of pre-contractual measures with you,
in the event that there is a legal obligation for us to pass on the data pursuant to Article 6 Paragraph 1 Clause 1 Letter c GDPR,
the processing according to Article 6 Paragraph 1 Clause 1 Letter f GDPR is necessary to protect our legitimate interests or those of a third party, unless the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, prevail, in particular then if the data subject is a child.
data subject rights
You have the right:
to request information about your personal data processed by us in accordance with Art. 15 GDPR;
in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us;
According to Art. 17 GDPR, to request the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims is required;
pursuant to Art. 18 GDPR, to request the restriction of the processing of your personal data if you dispute the accuracy of the data, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you use them to assert, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 GDPR;
in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request transmission to another person responsible;
pursuant to Art. 7 Para. 3 GDPR, to revoke your consent once given to us at any time. As a result, we are no longer allowed to continue the data processing based on this consent for the future;
pursuant to Art. 77 GDPR to complain to a supervisory authority if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or work or our headquarters. A list of data protection officers in Germany and their contact details can be found under the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Right to object to data collection in special cases and to direct advertising (Art. 21 GDPR)
If we process your personal data in accordance with Article 6 Paragraph 1 Sentence 1 lit. f GDPR in order to safeguard our legitimate interests that prevail in the context of a balancing of interests, you have the right to object to the processing with effect for the future in accordance with Article 21 GDPR submit your personal data. If the processing is for direct marketing purposes, you can exercise this right at any time. This also applies to profiling insofar as it is associated with such direct advertising. If the processing is for other purposes, you only have the right to object if there are reasons that arise from your particular situation.
If you would like to make use of your right to object, an email to us is sufficient.
After you have exercised your right to object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.
If you object to the processing of your personal data for direct marketing purposes, the personal data will no longer be processed for these purposes.
We do not use automatic decision-making or profiling.
Changes to this data protection declaration - as of
Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration in compliance with the applicable data protection regulations. You can access and print out the current data protection declaration at any time on our website under data protection.
Status: January 2023 created by RA Markus v. Hohenhau - www.e-anwalt.de