The personal information we collect includes:
Your first name, last name, email address, telephone number and address; credit card information (type of credit card, credit card number, cardholder name, expiry date and security code); guest stay information, including arrival and departure dates, special requests, service preferences (including room requests, amenities or other services used); information you provide regarding your marketing preferences or when participating in surveys, contests and promotional offers; you can always choose which and whether to share personal information with us. If you do not want to share certain data with us, then certain transactions with us may be affected as a result.
DATA WE COLLECT AUTOMATICALLY
PURPOSES OF PROCESSING
We use your data for the following purposes:
A. Bookings: We use your personal data to complete and manage your online bookings.
B. Customer service: We use your personal data to provide you with customer service.
C. Guest reviews: We may use your contact details to invite you by email to write a review after your stay. This helps other travellers choose the accommodation that best suits them. If you send a guest review, then these reviews could be published on our website.
D. Marketing activities: We also use your information for marketing activities where permitted by law. We use your personal data for direct marketing purposes, such as sending you commercial newsletters and marketing communications about new products and services or other offers that we think may be of interest to you. We include a link in these newsletters that allows you to unsubscribe from receiving these communications.
E. Other Communications: On certain occasions we may contact you by email, post, telephone or text message, depending on the contact details you share with us. There may be a number of reasons for this:
F. a. If we are responding to or dealing with an enquiry you have sent us.
b. If you have not yet completed your booking online, then we might send you a reminder to do so. We believe that this additional service is useful to you as it allows you to complete a booking without having to search for the accommodation again or re-enter the booking details all over again.
c. If you use our service then we may send you a survey or invite you to leave a review of your experience of our website. We believe that this additional service will be useful to you and that we can improve our website based on your feedback.
G. Analysis, improvements and research: We use personal information for research and analysis purposes. We may involve third parties to perform these activities on our behalf. We may share or disclose the results of such research in anonymous and aggregate form, including to third parties. We use personal information for analytics purposes to improve our services and to improve the functionality and quality of our travel services.
H. Security, Fraud Detection and Prevention: We use information, which may include personal data, to prevent fraud and other illegal or other infringing activities. We use this information to investigate and detect fraud. We may use personal information for risk assessment and security purposes, including user authentication. For these purposes, personal information may be shared with third parties, such as, to the extent permitted by law, law enforcement agencies, and outside consultants.
I. Legal and Regulatory Compliance: In certain cases, we may need to use the information provided, which may include personal information, to process and resolve legal complaints or disputes, for regulatory investigation and compliance purposes, to enforce contractual claims, and to comply with law enforcement requests where required by law.
If we use automated means to process personal data that has a significant impact on you in a legal sense or in general, we will apply appropriate security measures to protect your rights and freedoms, including the right of intervention by a human authority.
With regard to points A and B, we assume the effect of a contract: the use of your personal data may be necessary to perform the contract you have entered into with us. For example, if you use our services to make an online booking, we will use your data to fulfil our obligation to complete and administer your booking in accordance with the contract between us.
With regard to the purposes from points C-H, we assume legitimate interests: We use your data to pursue our legitimate interests, such as to show you the most appropriate content on our website, emails and newsletters, to promote our products, services and what is on offer on our website, and for administrative, fraud prevention and legal purposes. When we use personal data for our legitimate interests, we always balance your interests and your rights to protect your data with our rights and interests.
With regard to the purpose of H, we will, where applicable, assume our obligation to comply with applicable laws.
INTEGRATION OF THIRD PARTY SERVICES AND CONTENT
It may happen that third-party content, such as videos from YouTube, maps from Google Maps, RSS feeds or graphics from other websites, are integrated within this online offer. This always assumes that the providers of this content (hereinafter referred to as “third-party providers”) are aware of the IP address of the user. Without the IP address, they could not send the content to the browser of the respective user. The IP address is therefore necessary for the presentation of this content. We endeavour to only use content whose respective providers only use the IP address to deliver the content. However, we have no influence if the third-party providers store the IP address, e.g. for statistical purposes. Insofar as this is known to us, we inform the users about this.
Plugins of the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA are integrated on our pages. You can recognise the Facebook plugins by the Facebook logo or the “Like button” (“Like”) on our site. You can find an overview of the Facebook plugins here: http://developers.facebook.com/docs/plugins/.
If you do not wish Facebook to be able to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.
REVOCATION OF YOUR CONSENT TO DATA PROCESSING
Some data processing operations are only possible with your express consent. You can revoke your consent at any time. An informal communication by e-mail is sufficient for the revocation. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
RIGHT TO COMPLAIN TO THE COMPETENT SUPERVISORY AUTHORITY
As a data subject, you have the right to complain to the competent supervisory authority in the event of a breach of data protection law. The competent supervisory authority with regard to data protection issues is the State Data Protection Commissioner of the federal state in which our company’s registered office is located. The following link provides a list of data protection officers and their contact details: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
RIGHT TO DATA PORTABILITY
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to third parties. The data will be provided in a machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done insofar as it is technically feasible.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content that you send to us as site operator, our website uses SSL or TLS encryption. This means that data you transmit via this website cannot be read by third parties. You can recognise an encrypted connection by the “https://” address line of your browser and the lock symbol in the browser line.
Data transmitted via the contact form, including your contact details, are stored in order to be able to process your enquiry or to be available for follow-up questions. This data will not be passed on without your consent.
The data entered in the contact form is processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a DSGVO). You may revoke your consent at any time. An informal communication by e-mail is sufficient for the revocation. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
Data transmitted via the contact form will remain with us until you request us to delete it, revoke your consent to store it or there is no longer any need to store the data. Mandatory legal provisions – in particular retention periods – remain unaffected.
Some cookies are “session cookies.” Such cookies are deleted automatically at the end of your browser session. On the other hand, other cookies remain on your terminal device until you delete them yourself. Such cookies help us to recognise you when you return to our website.
With a modern web browser, you can monitor, restrict or prevent the setting of cookies. Many web browsers can be configured so that cookies are deleted automatically when the program is closed. Disabling cookies may result in limited functionality of our website.
The setting of cookies that are necessary to carry out electronic communication processes or the provision of certain functions desired by you (e.g. shopping cart) is based on Art. 6 para. 1 lit. f DSGVO. As the operator of this website, we have a legitimate interest in storing cookies for the technically error-free and smooth provision of our services. If other cookies are set (e.g. for analysis functions), these are dealt with separately in this data protection declaration.
We use Google Analytics in conjunction with the IP anonymisation function. It ensures that Google truncates your IP address within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before transmitting it to the USA. There may be exceptional cases where Google transfers the full IP address to a server in the USA and truncates it there. Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity and providing us with other services relating to website activity and internet usage. The IP address transmitted by Google Analytics is not merged with other Google data.
The setting of cookies by your web browser can be prevented. However, some functions of our website may be restricted as a result. You can also prevent the collection of data relating to your website use, including your IP address and subsequent processing by Google. This is possible by downloading and installing the browser plug-in accessible via the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
OBJECTION TO DATA COLLECTION
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set, which will prevent the collection of your data during future visits to our website: Deactivate Google Analytics.
In order to fully comply with the legal data protection requirements, we have concluded an order processing agreement with Google.
DEMOGRAPHIC CHARACTERISTICS WITH GOOGLE ANALYTICS
Our website uses the “demographic characteristics” function of Google Analytics. It can be used to create reports that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google as well as visitor data from third-party providers. It is not possible to assign the data to a specific person. You can deactivate this function at any time. This is possible via the ad settings in your Google account or by generally prohibiting the collection of your data by Google Analytics, as explained in the item “Objection to data collection”.
Our website uses Google AdSense. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google AdSense is used to integrate advertisements and sets cookies. Cookies are small text files that your web browser stores on your terminal device in order to analyse the use of the website. Google AdSense also uses web beacons. Web beacons are invisible graphics that allow us to analyse visitor traffic on our website.
Information generated by cookies and web beacons is transferred to Google servers and stored there. The servers are located in the USA. Google may pass this information on to contractual partners. However, Google will not merge your IP address with other data stored by you.
The storage of AdSense cookies is based on Art. 6 para. 1 lit. f DSGVO. As the website operator, we have a legitimate interest in analysing user behaviour in order to optimise our website and our advertising.
With a modern web browser, you can monitor, restrict and prevent the setting of cookies. Disabling cookies may result in limited functionality of our website. By using our website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.
Google AdWords and Google Conversion Tracking
Our website uses Google AdWords. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States.
AdWords is an online advertising programme. As part of the online advertising programme, we work with conversion tracking. After a click on an ad placed by Google, a cookie is set for conversion tracking. Cookies are small text files that your web browser stores on your end device. Google AdWords cookies lose their validity after 30 days and are not used to personally identify users. The cookie allows Google and us to recognise that you have clicked on an ad and have been redirected to our website.
Each Google AdWords customer receives a different cookie. The cookies are not traceable through AdWords customers’ websites. Conversion cookies are used to create conversion statistics for AdWords customers who use conversion tracking. AdWords customers learn how many users clicked on their ad and were redirected to pages with a conversion tracking tag. However, AdWords customers do not receive any information that enables personal identification of users. If you do not wish to participate in tracking, you can object to its use. In this case, the conversion cookie must be deactivated in the user settings of the browser. In this way, it will not be included in the conversion tracking statistics.
The storage of “conversion cookies” is based on Art. 6 para. 1 lit. f DSGVO. As the website operator, we have a legitimate interest in analysing user behaviour in order to optimise our website and our advertising.
With a modern web browser, you can monitor, restrict or disable the setting of cookies. Disabling cookies may result in limited functionality of our website.
MANDATORY INFORMATION ACCORDING TO THE REGULATION (EU) NO. 524/2013 OF THE EUROPEAN PARLIAMENT AND COUNCIL.
Link to the homepage of the European Commission’s Online Dispute Resolution service for consumer disputes: http://ec.europa.eu/consumers/odr/ – further information will probably be available there from 15.02.2016. For initial questions regarding a possible dispute resolution, please contact us at firstname.lastname@example.org.
Mandatory information according to the Regulation (EU) No 524/2013 of the European Parliament and of the Council
Follow this link to the website of the European Commission’s entity for online dispute resolution for consumer disputes: http://ec.europa.eu/consumers/odr/ – further information is expected to be available there from 15 February 2016. Should you have any initial questions concerning a potential dispute resolution, please email us at email@example.com
PARKHOTEL ENGELSBURG OPERATIONS GMBH
Telephone: ++49 (0) 2361-2010
Fax: ++49 (0) 2361-201120
DATA PROTECTION OFFICER
The company Parkhotel Engelsburg Betriebs GmbH
legally represented by the managing director Susanna Goesmann
Augustinessenstr. 10, 45657 Recklinghausen concerning the Parkhotel Engelsburg
has, on the basis of Art. 37 DSGVO
Attorney Peter Hense, Spirit Legal LLP, Neumarkt 16-18, 04109 Leipzig, Germany
as data protection officer.
Spirit Legal LLP Lawyers
Attorney at Law and Data Protection Officer Peter Hense
Data Protection Officer
c/o Parkhotel Engelsburg Betriebs GmbH
Augustinessenstr. 10, 45657 Recklinghausen, Germany
Contact via encrypted online form: