Sporthotel und Resort Grafenwald;
Owner: Ferienpark Daun GmbH & Co. KG Vulkaneifel
1. PRIVACY AND DATA PROTECTION
Below we inform you about how your personal data is handled when using our website (https://www.sporthotel-grafenwald.de) and our online shop (http://www.ovoucher.de/grafenwald). Personal information is any data by which you could be personally identified. Of course, you can object to the use of your data at any time, unless this data is necessary to process a contractual relationship. If you wish to object to the use of your data, simply send an email to: firstname.lastname@example.org.
Dipl. Benno Maubach (BA Economics)
Im Grafenwald 1
Data protection officer:
Mr. Alexander Schulz
KARST IT GmbH
Am Stadtgraben 3
Telephone: 02632 94 59 -0
For security reasons and to protect the transmission of personal data, our website uses SSL encryption. You can recognise an encrypted connection by the character string "https://" and the "lock symbol".
From 25.05.2018, the legal basis of data protection can be found in the General Data Protection Regulation (GDPR).
We collect and store data for marketing and optimisation purposes. This concerns, for example, data on the website from which you have accessed our service (e.g. via advertising banners) and which websites you have visited within our offer. For this purpose, "cookies" (see point 5) or pixel-code techniques can be used, which, however, only collect and store data. When you visit our website, the IP address of your computer, the date and time of your visit, browser type, pages visited and the operating system are stored. This data is evaluated exclusively for statistical purposes in anonymous form without specific personal reference. No user or behaviour profiles or similar are created. The legal basis for data processing is Art. 6 para. 1 clause 1 letter f) GDPR. Our legitimate interest follows from the above-mentioned purposes.
6. USE OF YOUR PERSONAL DATA
Personal data is information which can identify a person, i.e. information that can be traced back to a person. This includes their name, email address, or telephone number. Personal data also includes data on preferences, hobbies, memberships, or which websites were viewed by someone.
Personal data will only be collected, used, and passed on by the provider if this is permitted by law or if the user consents to the data collection.
When you make a reservation request using the contact form on our website, your details will be stored for the purpose of processing your request and in the event that any follow-up questions arise. Your email with the contact data will be archived in our digital repository. Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 clause 1 letter a) GDPR on the basis of your voluntary consent.
If you use the feedback contact form on our website, your details will only be saved for processing if you wish to receive a reply by email. Your email with the contact data will be archived in our digital repository. Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 clause 1 letter a) GDPR on the basis of your voluntary consent.
Request a brochure
By using the contact form to request brochures via our website, your details are stored for the purpose of processing the request and further processing for sending brochures by post. Your email with the contact data will be archived in our digital repository. Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 clause 1 letter a) GDPR on the basis of your voluntary consent.
Comments and posts
If you leave comments, ratings or other posts, your IP addresses will be stored. This is done for the legal protection of Ferienpark Daun GmbH & Co KG Vulkaneifel, in the event that comments contain illegal content (insults, forbidden political propaganda, etc.). In this case, Ferienpark Daun GmbH & Co KG Vulkaneifel could themselves be prosecuted for the comment and therefore has a legitimate interest in the identity of the author within the meaning of Art. 6 para. 1 clause 1 letter f) GDPR.
The personal data that you communicate to us via a website (e.g. your name and address or email address) is only used for correspondence purposes and only processed for the purpose for which you have made the data available to us. Furthermore, we will only use this data for occasionally sending further information on certain offers, products or other services on our part if you have given your explicit prior consent. You may revoke this consent at any time in the future: send an email to email@example.com.
Integration of services and content from third parties
It may be the case that third party content, such as videos from YouTube, maps from Google Maps, RSS feeds or graphics from other websites, is integrated within the offer of our website in order to make the use of our website even more convenient for you. This always requires that the IP address of the user is visible to the provider of such content (hereinafter referred to as "third party"). This is because they would not be able to transmit the content to each user's browser without the IP address. The IP address is therefore necessary in order to display this content. Data processing is based on Art. 6 para. 1 clause 1 letter f) GDPR. We strive only to use content from providers who use the IP address to deliver content, and for nothing else. However, we have no influence over whether the third party provider might save the IP address, e.g. for statistical purposes. If we know of any such usage, we notify the user.
7. GOOGLE ANALYTICS and GOOGLE ADWORDS
This website uses Google Analytics, a web analysis service provided by Google Inc. ("Google"). This use includes "Universal Analytics" operating mode. This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus analyse user's activities across devices. This data protection notice is provided by www.intersoft-consulting.de.
Purpose of processing:
On behalf of the operator of this website, Google will use this information to evaluate your use of the website in order to compile reports on the activities of the website and to provide further services relating to the use of the website and the internet usage vis-a-vis the operator of the website.
Recipient / categories of recipients:
The recipient of the data collected is Google.
Transfer to third countries:
Personal data will be transferred to the US under the EU-US Privacy Shield on the basis of the European Commission's adequacy decision. You can view the certificate here.
Duration of data retention:
The data sent by us and linked with cookies, user IDs or advertising IDs is automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.
Rights of data subjects:
You can revoke your consent at any time with future effect by preventing the storage of cookies by setting your browser software accordingly; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible.
Furthermore, you can prevent the collection of data generated by the cookie and related to the usage of the website (including your IP address) and the processing of the data by Google by downloading and installing the browser plugin. Opt-out cookies prevent future collection of your data when you visit this website. In order to prevent data collection by Universal Analytics across multiple devices, you need to perform the opt-out on all systems you are using. You can set the opt-out cookie by clicking here: Disable Google Analytics
We also use the online advertising program "Google AdWords" and the conversion tracking of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") within the framework of Google AdWords, to statistically record and evaluate the use of our website for the purpose of optimising our website. With the help of Google Adwords, advertisements (Google Adwords) are placed on external websites in order to draw attention to our offers. Based on the data from the advertising campaigns, we determine how successful the individual advertising measures are.
The cookie for conversion tracking is set when a user clicks on an ad placed by Google. Cookies are small text files which are saved on your computer system. These cookies expire after 30 days and are not used for personal identification. Should the user visit certain pages of the website and the cookie has not yet expired, Google and the website can tell that the user clicked on the ad and proceeded to that page. Each Google AdWords advertiser has a different cookie. Thus, cookies cannot be tracked using the website of an Adwords advertiser. The information obtained using the conversion cookie is used to create conversion statistics for Adwords customers who have opted into conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, advertisers do not obtain any information that can be used to personally identify users.
If you do not want to participate in tracking, you can opt-out of this by easily disabling the Google Conversion Tracking cookie by changing your browser settings. In doing so, you will not be included in the conversion tracking statistics. We use Google Adwords because of our legitimate interest in a targeted advertising according to. Art. 6 para. 1 (f) GDPR.
Google LLC, based in the USA, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.
The following website provides more information about Google's privacy policies: http://www.google.de/policies/privacy/
You can permanently deactivate cookies for advertising preferences by preventing them by setting your browser software accordingly or by downloading and installing the browser plug-in available under the following link: http://www.google.com/settings/ads/plugin?hl=en
8. USING SOCIAL PLUG-INS
The data processor has integrated components from Facebook on this website. Facebook is a social network.
A social network is an Internet-based social meeting place, an online community that usually enables users to communicate with each other and interact in virtual space. A social network can serve as a platform for exchanging opinions and experiences or enables the Internet community to provide personal or company-related information. Facebook enables users of the social network to create private profiles, upload photos and network via friendship requests, among other things.
The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. The entity responsible for the processing of personal data, if the entity in question resides outside the US or Canada, is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
On each visit to one of the individual pages of this website, which is operated by the data processor and on which a Facebook component (Facebook plug-in) has been integrated, the Facebook component in question causes the Internet browser on the information technology system of the data subject to automatically download a representation of the corresponding Facebook component from Facebook. An overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=en_DE. As part of this technical process, Facebook receives information about the specific sub-page of our website visited by the data subject.
If the data subject is simultaneously logged in to Facebook, Facebook recognises which specific sub-page of our website they visited for each visit to our website and during the entire duration of the respective visit to our website. This information is collected through the Facebook component and assigned by Facebook to the appropriate Facebook account of the data subject. If the data subject clicks one of the Facebook buttons integrated on our website, for example the "Like" button, or they make a comment, Facebook assigns this information to the personal Facebook user account of the data subject and stores this personal data.
Facebook receives information via the Facebook component that the data subject has visited our website whenever they are logged in to Facebook at the same time as accessing our website; this happens regardless of whether the data subject clicks on the Facebook component or not. If the data subject does not want this information to be transmitted to Facebook, they can prevent it from being transmitted by logging out of their Facebook account before accessing our website.
The data policy published by Facebook available at https://de-de.facebook.com/about/privacy/ provides information on the collection, processing and use of personal data by Facebook. It also explains what setting options Facebook offers to protect the privacy of the data subject. In addition, various applications are available that make it possible to suppress data transmission to Facebook. Such applications can be used by the data subject to suppress data transmission to Facebook.
+1 BUTTON FROM GOOGLE+
This offer uses the " +1" button for the Google Plus social network operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States ("Google"). The plugins are identifiable by the " +1" on a white or coloured background.
When a user accesses a website for this offer that contains such a button, the browser establishes a direct connection to Google's servers. The content of the "+1″ button is transmitted by Google directly to its browser and integrated into the website. The provider therefore has no influence on the extent of the data that Google collects with the button. According to Google, no personal information is collected without clicking on the button. This data, such as the IP address, is only collected and processed for logged-in members.
The purpose and scope of the data collection and further processing and use of the data by Google as well as your rights and setting options for protecting your privacy can be seen by the users of Google's data protection information for the "+1″ button: http://www.google.com/intl/de/+/policy/+1button.html and the FAQ: http://www.google.com/intl/de/+1/button/.
Subscribing to the email newsletter:
If you subscribe to our newsletter, we will send you information about the hotel, holiday park, and products or news on the company approx. once a month. Only your email address is mandatory information to subscribe to a newsletter. Any other further information is voluntary and is used to address you personally. We only send newsletters and emails on the basis of legal permission or with the consent of the recipient (e.g. written consent at check-in). For the registration of the newsletter we use the "Double-Opt-In" procedure. This means that upon subscribing, you will receive an email requesting confirmation of the subscription. The confirmation is required to ensure that no one else can subscribe using your email address.
A record of subscriptions to the newsletter is kept to fulfil the legal requirements for recording the subscription process, Art 7 para. 1 GDPR. The record contains the time of subscription and confirmation as well as the relevant IP address, date and time. Likewise, the changes to your data stored with our sending service provider Mailjet will be logged (see below).
Use of the "Mailjet" sending service
You can revoke your consent to receive our email newsletter at any time with effect for the future via a link placed at the end of a newsletter or via our homepage www.sporthotel-grafenwald.de/Newsletter . This means that your user data expires for consent to send the newsletter.
10. Customer Alliance rating portal
We may use your email address in connection with a request for a review of your stay at Sporthotel & Resort Grafenwald. The guest survey is sent out by CA Customer Alliance GmbH, Ullsteinstrasse 118,12109 Berlin. The following data is stored at Customer Alliance to record the customer evaluation: email address, gender, surname and contract details. Customer Alliance is commissioned to carry out the evaluations and their analysis for our company.
Your email address will only be used for this purpose if you give us your explicit consent pursuant to Art.6 para.1 letter a) GDPR.
You can revoke this consent at any time with effect for the future by sending an email to firstname.lastname@example.org
11. ONLINE SHOP
For all orders placed in our online shop, the data you have entered will be processed automatically and sent to the shop operator Online Voucher (www.ovoucher.de). In this connection you will receive advertising information exclusively from the shop operator Online Voucher. This data is not transferred to third parties. All data such as your credit card number, bank code, account number, name and address when paying with credit cards are transmitted via certified payment providers via their secure SSL line in compliance with PCI guidelines. This means that no unauthorised person (according to the current technical status) can read the data you have entered during transmission on the Internet. The information is processed automatically. This data is not transferred to third parties.
12. YOUR RIGHTS
You have the right:
- to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you may obtain information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if this has not been collected by us, and requires the existence of automated decision-making including profiling and, where appropriate, meaningful information about its detail;
- to immediately request the correction of incorrect or complete personal data stored by us in accordance with Art. 16 GDPR;
- to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
- according to Art. 18 GDPR to demand the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you reject its deletion and we no longer need the data, but you need this to assert, exercise or defend legal claims or you have objected to processing in accordance with Art. 21 GDPR;
- according to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, current and machine-readable format or to request its transfer to another responsible person;
- in accordance with Art. 7 para. 3 GDPR, you can revoke your consent provided to us at any time. As a result, we will no longer be permitted to continue processing data based on this consent in the future.
- to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our headquarters.
If your personal data is processed based on legitimate interests in accordance with Art. 6 para. 1 clause 1 letter f) GDPR, you have the right in accordance with Art. 21 GDPR to object to your personal data being processed if there are reasons for this which arise from your particular situation or if the objection is directed against direct advertising. In the latter case, you have a general right to object, which we will implement without specifying a particular situation.
If you wish to exercise your right of revocation or objection, simply send an email to email@example.com.
For further questions, please contact the data protection officer of Ferienpark Daun GmbH & Co KG Vulkaneifel:
Mr. Alexander Schulz
KARST IT GmbH
At the moat 3
Telephone: 02632 94 59 -0
Last updated: 25. May 2018