Data protection

How do we ensure that your personal data is handled confidentially in our company?
Dear website visitors,
With this data protection declaration, we would like to inform you in a general, transparent and understandable manner about how we ensure the handling of your personal data in our company in accordance with the General Data Protection Regulation (GDPR for short).
This privacy policy tells you what information we collect, the purposes for which we collect the information, and what happens to the information we collect. Because this is important, please take the time to read our privacy policy carefully.

1. Use
Use of our website http://www.hotel-stadt-schluechtern.de is generally possible without providing any personal data such as (first name, last name, etc.). However, if you (the data subject) would like to use a service via our website, personal data may be required. If the processing of personal data is necessary, e.g. for the following purposes:
an inquiry / a booking / an order,
We generally obtain your consent to data processing in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR.
Alternatively, you can contact us, for example by telephone. Data processing is always carried out in accordance with the General Data Protection Regulation. Our legal basis for data processing is Art. 6 Paragraph 1 Clause 1 Letter f of GDPR. The legitimate interest of the controller arises from the purposes listed above.

2. Collection of general data (log files)
a) When you visit our website, information is automatically sent to our website server. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention and stored until it is automatically deleted:
• The Internet Protocol address (IP address) of the requesting computer,
• Date and time of access,
• Name and URL of the retrieved file,
• the previously visited website (so-called referrer),
• browser used and, if applicable, the operating system of your computer,
• the name of your Internet service provider and
• other similar data and information used to avert threats in the event of attacks on our information technology systems

b) The data mentioned under point 2 a) will be processed by us for the following purposes:
• Ensuring a smooth connection to the website,
• Ensuring comfortable use of our website,
• Evaluation of system security and stability as well as
• for other administrative purposes.
The legal basis for this data processing is Art. 6 Paragraph 1 Clause 1 Letter f of GDPR. Our legitimate interest arises from the purposes for data collection stated under Section 2 b). Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally.

3. Collection and storage of personal data as well as the type and purpose of their use
a) Subscribe to our newsletter
Our newsletter can only be received by the data subject if he or she has expressly consented to the newsletter registration in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR. The email address collected in this process is used for legal reasons to send a confirmation email to the data subject. This confirmation email is used to verify the identity of the data subject.
We also store the IP address of the person concerned at the time of registration as well as the date and time of registration. The data collection is necessary in order to be able to trace any (possible) misuse of the e-mail address of a person concerned at a later date and serves as legal protection (burden of proof).
You can unsubscribe from the newsletter at any time, for example via a link at the end of each newsletter. Alternatively, you can also send your unsubscribe request to info@hotel-stadt-schluechtern.de send by email.

b) Contact option via our website
When using our contact form for inquiries of any kind, we offer you the opportunity to contact us via a form embedded on the website. You must provide a valid email address so that we know who the inquiry came from and can answer it. Further information such as title and name are required. Data processing for the purpose of contacting us is carried out in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR on the basis of your voluntarily given consent. The personal data we collect for the use of the contact form is automatically deleted after the task of processing your inquiry has been completed.

c) Bookings of rooms, meetings, arrangements via our website
You have the option of booking seminars using our embedded booking form. You must provide a valid email address so that we know who the request came from and can answer it. Further information such as title and name are required. Data processing for the purpose of a booking through us is carried out in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR on the basis of your voluntarily given consent. If we send a seminar booking confirmation to the data subject, the legality of the processing additionally arises from Art. 6 Paragraph 1 Clause 1 Letter b of GDPR. Necessary to fulfill a contract to which the data subject is a party or to carry out pre-contractual measures at the request of the data subject.

d) Consent to the processing of personal data
You give any consent to the processing of your personal data:
1. Voluntary, 2. Informed, 3. Clear and 4. Revocable (for the future).

4. Transfer of data
Your personal data will not be transferred to third parties for purposes other than those listed below. We will only pass on your personal data to third parties if:
• you have given your express consent in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR,
• the transfer is necessary to assert claims in accordance with Art. 6 Paragraph 1 Clause 1 Letter f of GDPR and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
• in the event that there is a legal obligation to disclose data pursuant to Art. 6 Paragraph 1 Clause 1 Letter c of GDPR, and
• this is legally permissible and is necessary for the processing of contractual relationships with you according to Art. 6 Paragraph 1 Clause 1 Letter b of GDPR.

5. Rights of the data subject (data subject rights)
You have the right to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about
(a) the purposes of the processing;
(b) the categories of personal data being processed;
c) the categories of recipients to whom your data have been or will be disclosed;
d) the planned storage period;
e), the existence of a right to rectification, erasure, restriction of processing or objection;
(f) the existence of a right to lodge a complaint with a supervisory authority;
g) the origin of your data, if it was not collected by us, and
h) the existence of automated decision-making, including profiling
to demand;.

Furthermore, the data subject has the right to obtain information as to whether personal data have been transferred to a third country or to an international organisation. If this is the case, the data subject also has the right to obtain information about the appropriate safeguards in connection with the transfer.
If a data subject wishes to exercise this right to information, he or she may contact our data protection officer or another employee of the controller at any time, see section 18.

6. Right to rectification (Art. 16 GDPR)
6. Right to rectification (Art. 16 GDPR)

7. Right to erasure (“right to be forgotten”) Art. 17 GDPR
To request the deletion of your personal data stored by us, unless the processing is necessary to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
Your right to erasure includes:
a) The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
(b) The data subject withdraws consent on which the processing is based according to point (a) of Article 6(1) or point (a) of Article 9(2), and where there is no other legal ground for the processing.
(c) the data subject objects to processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or the data subject objects to processing pursuant to Article 21(2)
Objection to the processing.
d) The personal data were processed unlawfully.
e) The erasure of personal data is necessary to fulfill a legal obligation under Union or Member State law to which the controller is subject.
(f) the personal data have been collected in relation to the offer of information society services pursuant to Article 8(1).

8. Right to restriction of processing (Art. 18 GDPR))
To request the restriction of the processing of your personal data if you contest the accuracy of the data, the processing is unlawful but you refuse to delete it and we no longer need the data, but you require it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR;

9. Right to data portability (Art. 20 GDPR)
to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another controller;

10. Conditions for consent (Article 7 paragraph 3 GDPR)
The data subject has the right to withdraw his or her consent at any time. The withdrawal of consent does not affect the legality of the processing carried out on the basis of the consent until the withdrawal. The data subject will be informed of this before consent is given. The withdrawal of consent must be as easy as the granting of consent. If you wish to exercise the right to withdraw consent, simply send an email to info@hotel-stadt-schluechtern.de

11. Right to object (Art. 21 GDPR)
If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 Paragraph 1 Clause 1 Letter f of GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which we will implement without specifying a particular situation. If you would like to exercise your right of withdrawal or objection, simply send an email to info@hotel-stadt-schluechtern.de

12. Right to lodge a complaint with a supervisory authority (Article 77 GDPR)
Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data concerning him or her infringes this Regulation.
As a rule, you can contact the supervisory authority at your usual place of residence or place of work.
If a data subject wishes to exercise his or her rights, he or she may contact our data protection officer or another employee of the controller at any time, see section 18.

13. Security of processing (Art. 32 GDPR)
We have taken extensive technical and organizational measures and security precautions to protect your personal data from unauthorized access or misuse. Our security procedures are regularly reviewed and adapted to technological advances. Our employees are trained in data protection and are obliged to maintain confidentiality and to protect data privacy.
Our data protection principles are to ensure:
1. Confidentiality,
2. Integrity,
3. Availability and resilience
of the systems and services related to the processing on a permanent basis.
Furthermore, our employees are trained in data protection and are obliged to maintain confidentiality and protect data privacy.

14. Cookies
We use cookies to make our website user-friendly and to tailor it to your needs as best as possible. A cookie is a small text file that is stored locally on your notebook, tablet, smartphone, etc. However, this does not mean that we thereby receive immediate knowledge of your identity. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted when you leave our website. Your browser also offers a function for deleting cookies (e.g. via delete browser data). You can find further information on this in the operating instructions or usually under the settings of your Internet browser. The data processed by cookies is required for the purposes stated to protect our legitimate interests and those of third parties in accordance with Art. 6 Paragraph 1 Clause 1 Letter f of GDPR.
Every time you access our website, data about this process is saved in a log file. This data is not personal; we cannot therefore track which user accessed which data. In detail, the following data set is saved for each access:
» Name of the retrieved file,
» Date and time of retrieval,
» amount of data transferred,
» Message whether the retrieval was successful

You also have the option to deactivate or manage cookies throughout your browser.
https://support.google.com/accounts/answer/61416?hl=de
https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies#ie=ie-11
http://help.opera.com/Windows/10.00/en/cookies.html

15. Analysis tools used
We use the analysis tools listed below on the basis of Art. 6 Paragraph 1 Clause 1 Letter f of GDPR. With the tracking measures we use, we want to ensure that our website is designed to meet your needs and is continuously optimized. Please refer to the relevant tracking tools for the respective data processing purposes and data categories.
i) Other Google Adwords Conversion Tracking, Webtrekk, etracker
Description of the methods…
This website uses Google Analytics, a web analysis service provided by Google Inc. ("Google"). The use of this service is based on Art. 6 Paragraph 1 Clause 1 Letter f. of GDPR. Google Analytics uses so-called "cookies", text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of the website, such as
• Browser type/version,
• operating system used,
• Referrer URL (the previously visited page),
• Hostname of the accessing computer (IP address),
• Time of the server request,
are usually transferred to a Google server in the USA and stored there. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. We have also added the code "anonymizeIP" to Google Analytics on this website. This guarantees that your IP address is masked so that all data is collected anonymously. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
For more information on data protection in connection with Google Analytics, see the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=de).

16. General information on social media plug-ins
Based on Art. 6 Paragraph 1 Clause 1 Letter f of GDPR, we use social plug-ins from the social networks Facebook, YouTube, Twitter, XING and Instagram on our website to make our company better known. The advertising purpose behind this is to be regarded as a legitimate interest within the meaning of the GDPR. These social networks are operated exclusively by third parties, some of which have their registered office outside the EU. Third parties may not offer you an adequate level of data protection. These browser plug-ins and links are marked on our website by logos or other notices.

a) Facebook
Our website uses social media plug-ins from Facebook to make its use more personal. For this we use the "LIKE" or "SHARE" button. This is an offer from Facebook. When you visit a page on our website that contains such a plug-in, your browser establishes a direct connection to the Facebook servers. The content of the plug-in is transmitted directly from Facebook to your browser, which integrates it into the website. By integrating the plug-ins, Facebook receives the information that your browser has accessed the corresponding page on our website, even if you do not have a Facebook account or are not currently logged into Facebook. This information (including your IP address) is transmitted from your browser directly to a Facebook server in the USA and stored there. If you are logged into Facebook, Facebook can assign your visit to our website directly to your Facebook account. If you interact with the plug-ins, for example by pressing the "LIKE" or "SHARE" button, the corresponding information is also sent directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your Facebook friends. Facebook can use this information for the purposes of advertising, market research and needs-based design of Facebook pages. For this purpose, Facebook creates usage, interest and relationship profiles, e.g. to evaluate your use of our website with regard to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website and to provide other services associated with the use of Facebook. If you do not want Facebook to assign the data collected via our website to your Facebook account, you must log out of Facebook before visiting our website. The purpose and scope of data collection and the further processing and use of the data by Facebook as well as your rights and setting options to protect your privacy can be found in the privacy policy. (https://www.facebook.com/about/privacy) von Facebook.

b) Google+
Our website includes a plug-in from the Google social network (Google+), which is operated in the USA by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). You can recognise the plug-ins by the coloured “Google+” font on our site. When you visit one of our websites that contains such a plug-in, your browser establishes a direct connection to the Google server. Google transmits the content of the plug-in directly to your browser, which integrates it into the website. We have no influence on the extent of the data Google collects. Google receives the information that a user has visited our website using their IP address. If you are logged in to Google+ and do not want Google to store data about your visit, you must log out of your Google account before visiting our website. For information on the purpose and scope of data collection and the further processing and use of data by Google, as well as your rights and setting options to protect your privacy, please refer to Google's privacy policy for Google+ https://www.google.com/policies/privacy/partners/?hl=de.

c) Instagram
Our website also uses so-called social plug-ins (“plug-ins”) from Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”). The plug-ins are marked with an Instagram logo, for example in the form of an “Instagram camera”. When you visit a page on our website that contains such a plug-in, your browser establishes a direct connection to the Instagram servers. The content of the plug-in is transmitted directly from Instagram to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page on our website, even if you do not have an Instagram profile or are not currently logged into Instagram. This information (including your IP address) is transmitted from your browser directly to an Instagram server in the USA and stored there. If you are logged into Instagram, Instagram can directly assign your visit to our website to your Instagram account. If you interact with the plug-ins, for example by pressing the "Instagram" button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed to your contacts there. If you do not want Instagram to assign the data collected via our website directly to your Instagram account, you must log out of Instagram before visiting our website. You can find more information about this in the privacy policy. (https://help.instagram.com/155833707900388) von Instagram.

d) Use of YouTube plugins (videos)
Some of our website pages contain embedded videos stored on YouTube. YouTube is a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The "extended data protection mode" is activated for all YouTube videos on our websites. This is provided by YouTube and thus ensures that YouTube does not store any cookies with personal data on your computer. When you access the website and embed the videos, the IP address is transmitted. This cannot be assigned unless you have logged in to YouTube or another Google service before accessing the page or are permanently logged in.
As soon as you start playing an embedded video by clicking on it, YouTube only stores cookies that do not contain any personally identifiable data on your computer thanks to the extended data protection mode. These cookies can be prevented by using the appropriate browser settings and extensions. You can find more information about embedding YouTube videos on the YouTube information page.

e) Twitter
Our website contains plug-ins from the Twitter Inc. (Twitter) short message network. You can recognise the Twitter plug-ins (tweet button) by the Twitter logo on our site. You can find an overview of tweet buttons here (https://about.twitter.com/resources/buttons). When you visit a page on our website that contains such a plug-in, a direct connection is established between your browser and the Twitter server. Twitter therefore receives the information that you have visited our site using your IP address. If you click the Twitter “tweet button” while you are logged into your Twitter account, you can link the contents of our pages to your Twitter profile. This enables Twitter to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the data transmitted or how it is used by Twitter. If you do not want Twitter to be able to associate your visit to our pages, please log out of your Twitter user account. For more information, see Twitter’s privacy policy (https://twitter.com/privacy).

f) Xing
The plug-in of the XING network is integrated into our website. (http://www.xing.com/app/share?op=button_builder) The plug-in is offered by XING AG, Gänsemarkt 43, 20354 Hamburg ("XING"). When you visit our website, a short-term connection to the XING servers is established via your browser. XING does not store any personal information about users who have visited our website. The IP address is also not stored by XING. There is also no evaluation of your usage behavior via the use of cookies in connection with the XING Share button. A summary of the functionality of the Share button can be found at: https://www.xing.com/app/share?op=data_protection. A general description of data processing can be found in the XING privacy policy. https://www.xing.com/privacy.

g)Google Maps
Our website uses the Google Maps map service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. In order to use the functions of Google Maps, it is necessary to save your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. Google Maps is used in the interest of an attractive presentation of our online offers and to make the location specified by us on the website easy to find. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR. You can find more information on how user data is handled in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/

17. Existence of automated decision-making / profiling
As a responsible company, we do not use automated decision-making or profiling.

18. Name and address of the controller
Responsible within the meaning of the GDPR.
Owner: Janet Dietrich
Breitenbacher Str. 5
36381 Schlüchtern
Phone.: 06661 747880
Fax. 06661 7478899
E-Mail: info@hotel-stadt-schluechtern.de
Website: http://www.hotel-stadt-schluechtern.de

Our external data protection officer can be reached at the following address:
IT expert and data protection office Michael J. Schüssler
Kolpingstraße 3
D-63739 Aschaffenburg
Phone.: +49 6021 / 4391845
E-Mail: info@svb-ms.de
Website: www.datenschutz4you-aschaffenburg.de/

19. Competent data protection authority
The Hessian Commissioner for Data Protection and Freedom of Information
Prof. Dr. Michael Ronellenfitsch
PO Box 3163
65021 Wiesbaden

or:

Gustav-Stresemann-Ring 1
65189 Wiesbaden
Phone: 06 11/14 08-0
Fax: 06 11/14 08-611

Homepage:
https://datenschutz.hessen.de/

20. Current status and changes to this privacy policy
This privacy policy is currently valid and is dated May 2018. Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this privacy policy.