Data protection Sporthotel Grafenwald

Owner: Ferienpark Daun GmbH & Co. KG Vulkaneifel

1. PRIVACY AND DATA PROTECTION

Below we inform you about how your personal data is handled when using our website (https://www.sporthotel-grafenwald.de) and our booking engine https://onepagebooking.com/sporthotel-grafenwald and Online Shop (http://www.vbooking.com/sporthotel-grafenwald). Personal information is any data by which you could be personally identified. Of course, you can object to the use of your data at any time, unless this data is necessary to process a contractual relationship. If you wish to object to the use of your data, simply send an email to: datenschutz@sporthotel-grafenwald.de.

2. VALIDITY OF THE PRIVACY POLICY

This privacy policy applies to all websites for which Ferienpark Daun GmbH & Co KG Vulkaneifel (owner of the Sporthotel & Resort Gra- fenwald) is responsible. However, our Internet pages may contain links to external companies to which our privacy policy does not apply. Ferienpark Daun GmbH & Co KG Vulkaneifel guarantees the confidentiality of your personal data by, among other things, obliging our employees to maintain confidentiality in accordance with Art. 28 Para. 3 letter b) GDPR, ensuring that our security precautions conform to the current state of the art and ensuring compliance with the data protection regulations by the company data protection officer and the management.

Person responsible:
Managing Director
Dipl. Benno Maubach (BA Economics)
Im Grafenwald 1
54550 Daun

Data protection officer:
Mr. Alexander Schulz
KARST IT GmbH
Am Stadtgraben 3
56626 Andernach

Email: datenschutz@sporthotel-grafenwald.de
Telephone: 02632 94 59 -0

For security reasons and to protect the transmission of personal data, our website uses SSL encryption. You can recognise an encrypted connection by the character string "https://".

3. SCOPE

This privacy policy informs the user about the type, scope and purpose of the collection of personal data by the responsible provider Ferienpark Daun GmbH & Co KG Vulkaneifel, Im Grafenwald 1, 54550 Daun.
From 25.05.2018, the legal basis of data protection can be found in the General Data Protection Regulation (GDPR).

4. LOGGING

We collect and store data for marketing and optimisation purposes. This concerns, for example, data on the website from which you have accessed our service (e.g. via advertising banners) and which websites you have visited within our offer. For this purpose, „coo- kies“ (see point 5) or pixel-code techniques can be used, which, however, only collect and store data. When you visit our website, the IP address of your computer, the date and time of your visit, browser type, pages visited and the operating system are stored. This data is evaluated exclusively for statistical purposes in anonymous form without specific personal reference. No user or behaviour profiles or similar are created. The legal basis for data processing is Art. 6 para. 1 clause 1 letter f) GDPR. Our legitimate interest follows from the above-mentioned purposes.

5. CONSENTMANAGER

We have integrated the consent management tool "consentmanager" (www.consentmanager.net) from Jaohawi AB (Håltgelvågen 1b, 72348 Västerås, Sweden, info@consentmanager.net) on our website in order to obtain consent for data processing and the use of cookies or comparable features. The "consentmanager" gives you the option of granting or refusing your consent to certain functionalities of our website, e.g., for the purpose of integrating external elements, integrating streaming content, statistical analysis, measurement of reach and personalised advertising. With the help of "consentmanager", you can grant or reject your consent for all features or grant your consent for individual purposes or individual features. You can also change the settings you have made at a later point by selecting "privacy settings" at the bottom of this homepage. The purpose of integrating "consentmanager" is to let the users of our website decide on the above-mentioned matters and, in the context of further use our website, to offer them the option of changing settings that have already been made. In the course of using "consentmanager", personal data and information from the end devices used, such as the IP address, are processed.

The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. c) in conjunction with Art. 6 para. 3 sentence 1 lit. a) in conjunction with Art. 7 para. 1 GDPR, as well as, alternatively, lit. f). By processing the data, we help our customers (according to the GDPR: the data controller) to fulfil their legal obligations (e.g., the obligation to furnish evidence of consent). Our legitimate interests in processing lie in the storage of user settings and preferences relating to the use of cookies and other functionalities. "Consentmanager" stores your data as long as your user settings are active. Consent will be requested again no later than two years after the settings have been made. The user settings made will then again be saved for this period.

You can lodge an objection against the processing. You have the right to object on grounds relating to your particular situation. To lodge an objection, please send an email to info@consentmanager.net.

6. COOKIES

We use temporary cookies, also called "session cookies", for the duration of your visit to our website in order to make using our offering more pleasant for you. They only contain purely technical information and no personal data. They are automatically removed when you leave our website. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f) GDPR.

Furthermore, we use permanent cookies with a limited lifetime in order to analyse the use of our Internet pages and marketing campaigns, and to optimise the user-friendliness of our service for you. This data that is processed by means of cookies is processed on the basis of your consent, in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR. This homepage has a query function for obtaining your consent – also known as the Consent Management Platform (CMP for short). However, if you later want to prevent the use of permanent cookies, you have the option to delete them in your browser. To find out how this works on the browser you are using, please use the browser‘s help function or contact the supplier. However, we recommend that you leave the cookie functions switched on, as this is the only way to make all the convenience functions available to you.

7. USE OF YOUR PERSONAL DATA

Personal data is information which can identify a person, i.e. information that can be traced back to a person. This includes their name, email address, or telephone number. Personal data also includes data on preferences, hobbies, memberships, or which websites were viewed by someone.

Personal data will only be collected, used, and passed on by the provider if this is permitted by law or if the user consents to the data collection.

RESERVATION REQUESTS

When you make a reservation request using the contact form on our website, your details will be stored for the purpose of processing your request and in the event that any follow-up questions arise. Your email with the contact data will be archived in our digital repository. Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 clause 1 letter a) or b) GDPR on the basis of your voluntary consent.

REQUEST A BROCHURE

By using the contact form to request brochures via our website, your details are stored for the purpose of processing the request and further processing for sending brochures by post. Your email with the contact data will be archived in our digital repository. Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 clause 1 letter a) GDPR on the basis of your voluntary consent.

COMMENTS AND POSTS

If you leave comments, ratings or other posts, your IP addresses will be stored. This is done for the legal protection of Ferienpark Daun GmbH & Co KG Vulkaneifel, in the event that comments contain illegal content (insults, forbidden political propaganda, etc.). In this case, Ferienpark Daun GmbH & Co KG Vulkaneifel could themselves be prosecuted for the comment and therefore has a legitimate interest in the identity of the author within the meaning of Art. 6 para. 1 clause 1 letter f) GDPR.

The personal data that you communicate to us via a website (e.g. your name and address or email address) is only used for correspon- dence purposes and only processed for the purpose for which you have made the data available to us. Furthermore, we will only use this data for occasionally sending further information on certain offers, products or other services on our part if you have given your explicit prior consent. You may revoke this consent at any time in the future: send an email to datenschutz@sporthotel-grafenwald.de.

INTEGRATION OF SERVICES AND CONTENT FROM THIRD PARTIES

It may be the case that third-party content, such as videos from YouTube, maps from Google Maps, RSS feeds or graphics from other websites, is integrated within the offering of our website in order to make the use of our website even more convenient for you. This always requires you to have given your prior consent to this via the CMS query.

The providers of this content (hereinafter referred to as "third-party providers") require the user's IP address. This is because they would not be able to transmit the content to each user's browser without the IP address. This means that if you do not give your consent to this, these features will not be available to you. Data processing is based on Art. 6 para. 1 clause 1 letter f) GDPR. We strive only to use content from providers who use the IP address to deliver content, and for nothing else. However, we have no influence over whether the third party provider might save the IP address, e.g. for statistical purposes. If we know of any such usage, we notify the user.

APPLICATION TOOL

8. GOOGLE ANALYTICS AND GOOGLE ADWORDS

In order to ensure the lawful use of tracking services such as analysis and marketing services, we use the tracking proxy solution provided by Tracking Garden GmbH (Ritterfelddamm 225e, 14089 Berlin, Germany).

The tracking proxy solution enables us to avoid direct access by the third-party providers we use to users' end devices and to ensure that we have complete control over a single data parameter when communicating with websites by restricting access to third-party providers and setting conditions for the transfer of data to third-party providers. For these purposes, we use what are known as cookies and browser fingerprinting methods, which are stored on your end device by the tracking proxy for recognition purposes and can process information from your end device. For this purpose, your end device is assigned a randomly generated identification number (cookie ID/device ID) by the tracking proxy.

With the help of the tracking proxy, we process the information generated about the use of our website by your end device as well as access data for the purpose of statistical analysis and performance assessment (e.g. call-up of a specific web page, number of unique visitors, entry and exit pages, duration of stay, click, swipe and scroll activity, button activation, bounce rate and similar user interactions on our website (events - e.g. new newsletter subscriptions, the purchase of products or new additions to the shopping trolley). Access data includes, in particular, browser and device information, cookie ID of the tracking proxy and date, and time of the server request. The processing of your data by the tracking proxy takes place exclusively on servers in Germany.

Your IP address is not stored (or is stored in a configuration variant only as a SHA256-encrypted value on our servers). The IP address is not passed on to third-party providers without user consent, but only general location information such as the region and city of the location of the end device is collected, which is previously derived from the IP address. Due to the tracking proxy function, further user data is transmitted to third-party providers strictly in an anonymous form to analyse and measure the reach of user behaviour on our website. To ensure effective pseudonymisation, the tracking proxy forms artificially generated data parameters for the browser identifier (user agent), for the third-party provider's cookie IDs, for order numbers if applicable and for other browser and device information that would enable re-identification. The storage period of the tracking proxy cookie for recognising the end devices of users is maximally 24 months.

The legal basis for this processing is your consent in the consent manager in accordance with Art. 6, Paragraph 1 S. 1 lit. a) GDPR. You can withdraw your consent to this processing at any time by clicking on the "privacy settings" setting option at the bottom of the website and changing your selection.

9. GOOGLE ADS

We use the "Google Ads" service from "Google" (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001) to draw attention to our attractive offers on external websites with the help of advertising media (formerly known as "Google AdWords"). We can determine how successful the individual advertising measures are in relation to the data from the advertising campaigns. This advertising media is delivered by Google via so-called "ad servers". For this purpose, we use "ad server" cookies, which allow certain reach parameters to be measured, such as the display of ads or clicks by users. If you access our website via a "Google" advertisement, "Google Ads" will store a cookie on your device. "Google" uses cookies to process the information generated on your device about interactions with our advertising media (accessing a certain website or clicking on an advert) and the data specified in the section "Use of our website", in particular, your IP address, browser information, the website previously visited, and the date and time of the server request, for the purpose of analysing and visualising the reach of our advertisements. For this purpose, it is also possible to determine whether different devices belong to you or your household. Due to the marketing tools used, your browser automatically establishes a direct connection to the "Google" server. If you are registered with a "Google" service, "Google" may associate your visit to our website with your account. Even if you are not registered with "Google" or you are not logged in, it is possible for the provider to find out and process your IP address. We only receive statistical evaluations from "Google" that are provided in order for us to be able to measure the success of our advertising media. The legal basis for the processing of your data is your consent pursuant to Art. 6 (1) (1) (a) GDPR. "Google" also processes some of the data in the USA. No adequacy decision of the EU Commission exists for the transfer of data to the USA; the legal basis for the transfer of data to the USA is your consent pursuant to Art. 49 (1) (1) (a) GDPR. The retention period for "Google" is a maximum of twenty-four months. Further information on data protection and the retention period at "Google" can be found at: https://policies.google.com/privacy?hl=en&gl=en.

It is possible to withdraw your consent to the processing of your data and its transfer to third countries at any time by pushing back the slider in the "Settings" of the consent tool https://www.sporthotel-grafenwald.de/de/datenschutz.html?cmpscreencustom. The withdrawal of your consent will not affect the lawfulness of the processing carried out on the basis of your consent up until the point of revocation.

GOOGLE ADS REMARKETING

We use the "Google Ads" tool with the "Dynamic Remarketing" feature from "Google" (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001). This is a process we use to re-establish contact with you. The "Dynamic Remarketing" feature enables us to recognise users of our website on other websites within the "Google" advertising network (in "Google Search" or on "YouTube", so-called "Google advertisements", or on other websites) and to show them advertisements that are tailored to their interests. The advertisements may also relate to the kind of products and services that you have already viewed on our website. The interaction of users on our website is analysed for this purpose – for example, which offers the user was interested in – in order to also be able to display targeted advertising to those users on other sites after they have visited our website. If you visit our website, "Google Ads" will store a cookie on your device. Google uses cookies to process the information generated on your device about the use of our website and interactions with our website, as well as the data specified in the section "Use of our website", in particular, your IP address, browser information, the website previously visited, and the date and time of the server request, for the purpose of displaying personalized advertising. For this purpose, it is also possible to determine whether different devices belong to you or your household. The data collected in the context of "Google Ads" does not get merged with data from other "Google" products. The legal basis for the processing of your data is your consent pursuant to Art. 6 (1) (1) (a) GDPR. "Google" also processes some of the data in the USA. No adequacy decision of the EU Commission exists for the transfer of data to the USA; the legal basis for the transfer of data to the USA is your consent pursuant to Art. 49 (1) (1) (a) GDPR. The retention period for "Google" is a maximum of twenty-four months. Further information on data protection and the retention period at "Google" can be found at: https://policies.google.com/privacy?hl=en&gl=en.

It is possible to withdraw your consent to the processing of your data and its transfer to third countries at any time by pushing back the slider in the "Settings" of the consent tool https://www.sporthotel-grafenwald.de/de/datenschutz.html?cmpscreencustom. The withdrawal of your consent will not affect the lawfulness of the processing carried out on the basis of your consent up until the point of revocation.

10. NEWSLETTER

SUBSCRIBING TO THE EMAIL NEWSLETTER

If you subscribe to our newsletter, we will send you information about the hotel, holiday park, and products or news on the company approx. once a month. Only your email address is mandatory information to subscribe to a newsletter. Any other further information is voluntary and is used to address you personally. We only send newsletters and emails on the basis of legal permission or with the consent of the recipient (e.g. written consent at check-in). For the registration of the newsletter we use the „Double-Opt-In“ procedure. This means that upon subscribing, you will receive an email requesting confirmation of the subscription. The confirmation is required to ensure that no one else can subscribe using your email address.

A record of subscriptions to the newsletter is kept to fulfil the legal requirements for recording the subscription process, Art 7 para. 1 GDPR. The record contains the time of subscription and confirmation as well as the relevant IP address, date and time.

11. ONLINE SHOP

For all orders placed in our online shop, the data you have entered will be processed automatically and sent to the shop operator Hotel Net Solutions (http://www.vbooking.com/sporthotel-grafenwald). In this connection, you will receive advertising information exclusively from the shop operator Hotel Net Solutions, HotelNetSolutions GmbH – Genthiner Str. 8 – 10785 Berlin. This data is not transferred to third parties. All data such as your credit card number, bank code, account number, name and address when paying with credit cards are transmitted via certified payment providers via their secure SSL line in compliance with PCI guidelines. This means that no unauthorised persons (according to the current technical status) can read the data you have entered during transmission on the Internet. The information is processed automatically. This data is not transferred to third parties.

12. YOUR RIGHTS

You have the right:

• to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you may obtain in- formation about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if this has not been collected by us, and requires the existence of automated decision-making including profiling and, where appropriate, meaningful information about its detail;
• to immediately request the correction of incorrect or complete personal data stored by us in accordance with Art. 16 GDPR;
• to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
• according to Art. 18 GDPR to demand the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you reject its deletion and we no longer need the data, but you need this to assert, exercise or defend legal claims or you have objected to processing in accordance with Art. 21 GDPR;
• according to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, current and machine-readable format or to request its transfer to another responsible person;
• in accordance with Art. 7 para. 3 GDPR, you can revoke your consent provided to us at any time. As a result, we will no longer be permitted to continue processing data based on this consent in the future.
• to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our headquarters.

The supervisory authority responsible for us:

Supervisory authority for data protection in the non-public area in Rhineland-Palatinate
The State Commissioner for Data Protection Rhineland-Pfalz
Hintere Bleiche 34, 55116 Mainz
Telephone: +49(0)6131-208-2449
Fax: +49(0)6131-208-2497
Email: bdsb@datenschutz.rlp.de

If your personal data is processed based on legitimate interests in accordance with Art. 6 para. 1 clause 1 letter f) GDPR, you have the right in accordance with Art. 21 GDPR to object to your personal data being processed if there are reasons for this which arise from your particular situation or if the objection is directed against direct advertising. In the latter case, you have a general right to object, which we will implement without specifying a particular situation.

If you wish to exercise your right of revocation or objection, simply send an email to datenschutz@sporthotel-grafenwald.de.

Points 7 & 8 of this Privacy Policy were partially prepared by the privacy policy generator of the DGD Deutsche Gesellschaft für Datenschutz GmbH, which acts as External Data Protection Officer Munich , in cooperation with the Lawyer for data protection law Christian Solmecke.

For further questions, please contact the data protection officer of Ferienpark Daun GmbH & Co KG Vulkaneifel:

Mr. Alexander Schulz
KARST IT GmbH
At the moat 3
56626 Andernach
Email: datenschutz@sporthotel-grafenwald.de
Telephone: 02632 94 59 -0

Last updated: September 2022