Privacy Statement according to GDPR

This is just a translation, using google translate, of the German version. Since we are a German company, the German version is legally binding

I.Name and address of the responsible person

The responsible person in the sense of Basic Data Protection Regulation and other national data protection laws of the Member States as well as other data protection regulations is this:

Hotel Garni am Waldhang
Florian Mohr
Am Waldhang 22
82205 Gilching
E-Mail: info@hotel-amwaldhang.de
Website: hotel-amwaldhang.de

II. General information on data processing

1. Extent of processing of personal data

We process personal information Data of our users basically only, as far as to provide a functional website and our content and services. The processing of personal data of our users is done on a regular basis only after the consent of the user. An exception applies in those cases in which a prior request for consent for factual reasons is not is possible and the processing of data by law is permitted.

2. Legal basis for the processing of personal data

To the extent that we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU data protection regulation (DSGVO) as legal basis.

In the processing of personal data necessary for the performance of a contract whose Party is the person concerned, Art. 6 (1) lit b DSGVO as legal basis. this is also valid for processing operations necessary for the performance of pre-contractual measures are required.

As far as processing personal data for the purpose of fulfilling a legal obligation is required, which is subject to our company, Art.6 paragraph 1 lit c DSGVO as legal basis.

In the event of vital interests of the data subject or another natural person Processing of personal data is required, Art. 6 (1) lit d DSGVO as legal basis.

Is the processing for maintaining one legitimate interest of our company or a third party and outweigh the interests, fundamental rights and fundamental freedoms of the person concerned Article 1 (1) (f) GDPR serves as the legal basis for the processing.

3. Data deletion and storage duration

The personal data of the affected Person will be deleted or disabled as soon as the purpose of the storage N & auml; llt. In addition, storage may take place as indicated by the European or national legislators in EU regulations, Laws or regulations to which the controller is subject, was provided. Blocking or deleting the data also takes place if a storage period prescribed by those standards is abolished because there is a need for further storage of the data for a contract or a contract.

III. Provision of the website and creation of logfiles

1. Description and scope of data processing

Every time we call our Website captures our system automatically Data and information from the computer system of the calling computer.

The following data is collected here:

  • (1) Information about the browser type and the version used
  • (2) The user's operating system
  • (3) The user's Internet service provider
  • (4) The IP address of the user
  • (5) Date and time of access
  • (6) Websites from which the user's system accesses our website
  • (7) Web sites accessed by the user's system through our website

This data is stored in the log files of our system and deleted after about 6 weeks. A storage of this data together with other personal data of the user does not take place.

2. Legal basis for data processing

Legal basis for the temporary storage of data and logfiles is Art. 6 (1) lit. f DSGVO.

3. Purpose of data processing

The temporary storage of the IP address through the system is necessary to deliver the site to allow the computer of the user. For this must the IP address of the user remains stored for the duration of the session.

Storage in log files is done to improve the functionality of the website sure. In addition, we use the data to optimize the website and the Ensuring the security of our information technology systems. A Evaluation of data for marketing purposes does not take place in this context instead of.

In these purposes is ours too legitimate interest in data processing according to Art. 6 para. 1 lit. f DSGVO.

4.Duration of storage

The data will be deleted as soon as they are are no longer necessary for the purpose of their collection. in the Case of collecting the data to provide the website, this is the case when the session is over.

In case of storing the data in logfiles, this is the case after 6 weeks at the latest. A beyond Storage is possible. In this case, the IP addresses of the users gel or alienated, so that an assignment of the calling client is no longer possible.

5.Contraception and elimination

The collection of data to provide the Website and the storage of data in logfiles is responsible for the operation of the Website absolutely necessary. It therefore exists on the part of the user no inconsistency.

IV. Contact form and e-mail contact

1. Description and scope of data processing

On our website is a contact / reservation form present, which can be used for the electronic contact. If a user realizes this possibility, they will be displayed in the input mask input data to us and saved. These data are:

  • (1) Company name
  • (2) Name
  • (3) first name
  • (4) address
  • (5) Country
  • (6) Telephone
  • (7) Mobile
  • (8) Fax
  • (9) Email Address
  • (10) Arrival and Departure
  • (11) Number of rooms you want
  • (12) Comments
  • (13) Request Type

At the time of dispatch The message also stores the following data:

  • date and time

For the processing of the data in the context of the sending process your consent and refer to this privacy statement.

Alternatively is a contact via the provided e-mail address. In this case, the with stored in the user's personal e-mail.

It happens in this context no transfer of data to third parties. The data is used exclusively for the Processing the conversation used.

2. Legal basis for data processing

Legal basis for processing the data is in the presence of the consent of the user Art. 6 Para. 1 lit. a GDPR.

Legal basis for processing of the data transmitted by e-mail Art. 6 para. 1 lit. f DSGVO. Aim of the E-mail contact on the conclusion of a contract, Thus, the additional legal basis for processing is Article 6 (1) lit. b DSGVO.

3. Purpose of data processing

The processing of personal data from the input mask serves us solely for processing the contact. In case of contact by e-mail is this also the required legitimate interest in the processing of the data.

The other personal data processed during the posting process serve to misuse the contact form prevent and the security of our information technology systems sure.

4.Duration of storage

The data will be deleted as soon as they are are no longer necessary for the purpose of their collection. F navigation use r the personal data from the input form of the contact form and those who have been sent by e-mail, this is the case when the respective conversation with the user has ended. Finished is the conversation then, if it can be inferred from the circumstances, that the facts in question are finally clarified.

During the submission process personal data collected in addition will become available after a certain period of time of seven days.

5.Consideration and elimination psibility

The user always has the The ability to consent to the processing of personal data withdraw. Does the user contact by e-mail or the contact form us, so he can store his personal information at any time disagree. In such a case, the conversation can not continue be.

All personal data stored in the event of contacting us will be deleted.

V. Transfer of personal data to third parties

1. Extent of processing of personal data

We use a service provider to host the website and e-mail services. This stores the submitted emails as well as the data from the contact form between. Specifically when visiting the website the following data is stored:

  • (1) Anonymized IP address of the user's calling system
  • (2) The called website
  • (3) The website from which the user came to the accessed website (referrer)
  • (4) The subpages that are called from the called web page
  • (5) User's browser and operating system
  • (6) When using the contact form, the data mentioned under IV. will also be saved as an e-mail

2. Legal basis for the processing of personal data

The legal basis for the processing of users' personal data is Article 6 (1) lit. f DSGVO.

3. Purpose of data processing

The processing of users' personal data enables us to process their requests. When visiting the website, the data is stored in log files to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

4. Duration of storage

The data will be deleted as soon as they are no longer needed for our recording purposes. For logfiles this is about 6 weeks.

5. Opposition and disposal option

The collection of data by the service provider is for the provision of the website and the storage of the data in log files is imperative for the operation of the website. There is consequently no contradiction on the part of the user. The user has the possibility at any time to revoke his consent to the processing of the personal data obtained through the contact form. In such a case, the conversation can not continue.

6. List of service providers

Strato AG
Pascalstraße 10
10587 Berlin

VI. Rights of the person concerned

Be personal information of you processed, you are concerned i.S.d. DSGVO and it You have the following rights against the responsible person:

1. Right to inform

You can get one from the person in charge Requesting that personal data concerning you, be processed by us.

If such processing is available, you can request information from the person responsible for the information:

  • (1) the purposes for which the personal data are processed;
  • (2) the categories of personal data being processed;
  • (3) the recipients or categories of recipients against whom you are personal data disclosed or yet to be disclosed are
  • (4) the planned duration of the storage of your personal data or, if specific information is not available, criteria for the Defining the storage duration;
  • (5) the existence of a right to rectification or dissolution of the person concerned personal data, a right to a restriction of processing by the person responsible or a right to object to this processing;
  • (6) the existence of a right of appeal to a supervisory authority;
  • (7) all available information on the origin of the data, if the personal data are not collected from the data subject;
  • (8) the existence of automated decision-making including profiling in accordance with Article 22 (1) and (4) GDPR and - at least in these cases - meaningful information about the logic involved as well as the scope and desired effects such processing for the data subject.

You have the right to provide information about ask if your personal data relates to a third country or to an international organization. In this Context you may request to use the appropriate warranties in accordance with. Art. 46 DSGVO in connection with the transfer.

2. Right to rectification

You have a right to rectification and / or Completion against the person responsible, provided that the processed personal information that concerns you is incorrect or incomplete. The person in charge must make the correction without delay.

3. Right to restriction of Processing

Under the following conditions, you can the restriction on the processing of your personal data request:

  • (1) if you determine the accuracy of your personal information for a duration deny the responsible person the correctness of the personal data;
  • (2) the processing is unlawful and you refuse to disclose the personal data and instead the restriction on the use of the require personal data;
  • (3) the person responsible for the personal data for the purposes of processing You are not required to do so, but to enforce, defeat or defend it of legal claims, or
  • (4) if you object to the processing in accordance with Article 21 (1) GDPR have not yet determined whether the legitimate reasons of the Those in charge over your reasons.

Was the processing affecting you personal data are limited, these data may be deleted - from theirs Storage aside - only with your consent or to Assertion, exercise or defense of legal claims or for protection the rights of another natural or legal person or for reasons an important public interest of the Union or of a Member State be processed.

Failed to restrict processing the o.g. Conditions are limited, you will be responsible teaches before the restriction is lifted.

4. Right to deletion

a) Liability obligation

You may require the person responsible to that the personal data concerning you are instantaneously deleted, and the controller is obliged to immediately disclose this data, if one of the following applies:

  • (1) The personal data concerning you are for the purposes for which you are collected or otherwise processed, no longer necessary.
  • (2) You revoke your consent, to which the processing acc. Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. DSGVO defended, and one is missing other legal basis for the processing.
  • (3) According to. Art. 21 para. 1 DSGVO Opposition to processing and there are no legitimate reasons for processing, or you acc. Art. 21 para. 2 DSGVO Opposition to the Processing.
  • (4) The personal data concerning you have been processed unlawfully.
  • (5) The provision of personal data concerning you is required to comply with one of the following legal obligation under EU or international law Member States to which the person responsible is subject.
  • (6) The personal data relating to you has been provided in relation to the services offered of the Information Society in accordance with Article 8 (1) GDPR.

b) Information to third parties

Does the person in charge have you? personal data made public and is gem. Art. 17 para. 1 DSGVO is obliged to do so, it shall take into account the available technology and implementation costs, appropriate measures, also of a technical nature, to inform data controllers who process the personal data inform you as the affected person of them of the leasing of all links to such personal data or of copies or replications thereof personal data.

c) Exceptions

The right to deletion does not exist, as far as the processing is required

  • (1) on the exercise of the right to freedom of expression and information;
  • (2) to fulfill a legal obligation which the Processing under the law of the Union or of the Member States to which the Responsible is subject to, requires, or to perform a task that is in the public interest or in the exercise of public power, which has been transferred to the person responsible;
  • (3) for reasons of public interest in the field of public health in accordance with Art. 9 para. 2 lit. h and i and Art. 9 (3) GDPR;
  • (4) for public archival purposes, scientific or non-governmental historical research purposes or for statistical purposes acc. Art. 89 para. 1 DSGVO, insofar as the law referred to in section a) is likely to be the Make the achievement of the objectives of this processing impossible or serious adversely affects or
  • (5) to assert, defer or defend legal claims.

5. Right to Information

Do you have the right to rectification, deletion or limitation of processing to the controller This is obliged to all recipients to whom you are concerned personal data, this correction or disclosure the data or restriction of processing, unless this is so proves to be impossible or involves a disproportionate effort connected.

You stand against the person responsible Right to be informed about these recipients.

6. Right to Data Transferability

You have the right that concerns you personal data provided to the controller in a structured, regular and machine-readable format. Besides, you have the right to transfer this data to another person without Disability by the person responsible for the personal data provided, provided that

  • (1) the processing on a consent acc. Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a DSGVO or on a contract acc. Art. 6 para. 1 lit. b DSGVO is based and
  • (2) processing by automated methods takes place.

In exercising this right, you also have the Right to obtain that personal data concerning you directly be transferred from one person in charge to another person in charge, as far as this is technically feasible. Freedoms and rights of other persons This should not affect this.

The right to data transferability does not apply for the processing of personal data necessary for the perception of a person Task is required, which is in the public interest or in dis- public authority, which has been transferred to the controller.

7. Right to

You have the right, for reasons that are their special situation, at any time against the processing of you Personal data relating to the personal data collected pursuant to Article 6 (1) lit. e or f DSGVO takes an objection; this also applies to profiling imposed on these provisions.

The person responsible processes you personal data in question, unless it can be compulsory Properly prove the reasons for processing your interests, Rights and freedoms, or processing serves to assert, Exercise or defense of legal claims.

Be the personal related to you Data processed to operate direct mail, you have the right at any time object to the processing of your personal information Insert data for the purpose of such advertising; this also applies to profiling, as far as such direct marketing in Connection stands.

Contrast the processing for purposes direct mail, your personal data will not be processed more for these purposes.

You have the opportunity, in the context of the use of information society services - regardless of Directive 2002/58 / EC - your right to object by means of automated Procedures for which technical specifications are used.

8. Right to revoke the data protection law consent

You have the right to yours data protection agreement at any time. By the Withdrawal of consent becomes the legality of the consent until cancellation has not been processed.

ninth Automated decision in the Individual case including profiling

You have the right, not one based solely on automated processing - including profiling - based decision be unlawful or unlawful to you Significantly impaired. This does not apply if the decision

  • (1) for the conclusion or the performance of a contract between you and the person responsible,
  • (2) by virtue of Union or Member State legislation to which the Responsible, legal and legal appropriate measures to safeguard your rights and freedoms as well as yours contain legitimate interests or
  • (3) with your express consent.

However, these decisions do not matter on special categories of personal data pursuant to Art. 9 (1) GDPR unless Art. 9 (2) lit. a or g DSGVO applies and appropriate measures to protect the rights and Liberties and your legitimate interests.

With regard to those mentioned in (1) and (3) The responsible person takes appropriate measures to protect the rights and Freedoms and your legitimate interests, at least that Right to obtain the intervention of a person by the person responsible, to state its own position and to contest the decision heard.

10. Right to appeal to a supervisory authority

Without prejudice to any other administrative or judicial remedy is yours to a complaint to a supervisory authority, in particular in the Member State their place of residence, their place of work or the place of presumption Violation, too, if you feel that the processing of you personal data in breach of the GDPR.

The supervisory authority in which the complaint the complainant, shall inform the complainant of the status and Results of the complaint including the possibility of a judicial review Appeal pursuant to Art. 78 DSGVO.