Data protection

§ 1 Information about the collection of personal data

§ 2 your rights

1. You have the following rights vis-à-vis us with regard to your personal data:
   
   
   • Right to information,
   • Right to correction or deletion,
   • Right to restriction of processing,
   • Right to object to processing,
   • Right to data portability.
     
     
2. You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

§ 3 Collection of personal data when you visit our website

1. If you only use the website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you would like to view our website, we collect the following data, which is technically necessary for us to display our website to you and to guarantee stability and security (the legal basis is Art. 6 Para. 1 S. 1 lit.f GDPR ):
   
   
   • IP address
   • Date and time of the request
   • Time zone difference to Greenwich Mean Time (GMT
   • Content of the request (specific page)
   • Access status / HTTP status code
   • amount of data transferred in each case
   • Website from which the request came
   • Browser
   • Operating system and its interface
   • Language and version of the browser software.
     
     
2. In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using and through which certain information flows to the place that sets the cookie (in this case by us). Cookies cannot run programs or transmit viruses to your computer. They serve to make the Internet offer more user-friendly and effective overall.
   
   
3. Use of cookies:
   
   • This website uses the following types of cookies, the scope and functionality of which are explained below:
     
     • Transient cookies (see b)
     • Persistent cookies (see c).
   • Transient cookies are automatically deleted when you close the browser. This includes in particular the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
   • Persistent cookies are automatically deleted after a specified period, which can differ depending on the cookie.
   • You can delete the cookies at any time in the security settings of your browser. You can configure your browser settings according to your wishes and e.g. B. reject the acceptance of third-party cookies or all cookies. We would like to point out that you may not be able to use all functions of this website.

§ 4 Further functions and offers on our website

1. In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do this, you usually have to provide additional personal data that we use to provide the respective service and for which the aforementioned data processing principles apply.
2. In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are checked regularly.
3. Furthermore, we can pass on your personal data to third parties if we offer participation in campaigns, competitions, conclusion of contracts or similar services together with partners. You will receive more information on this when you provide your personal data or below in the description of the offer.
4. If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this fact in the description of the offer.

§ 5 Objection or revocation against the processing of your data

1. If you have given your consent to the processing of your data, you can revoke this at any time. Such a revocation affects the permissibility of the processing of your personal data after you have given it to us.
2. If we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case, in particular, if the processing is not necessary to fulfill a contract with you, which we describe in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either stop or adjust the data processing or show you our compelling reasons worthy of protection, on the basis of which we will continue the processing.
3. You can of course object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us about your objection to advertising under the following contact details: info @ schlossreinach.

§ 6 Newsletter

1. With your consent, you can subscribe to our newsletter, which we use to inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.
2. We use the so-called double opt-in procedure to register for our newsletter. This means that after your registration we will send you an e-mail to the e-mail address provided, in which we ask you to confirm that you wish to receive the newsletter. In addition, we save the IP addresses you use and the times of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.
3. The only mandatory information for sending the newsletter is your email address. The provision of further, separately marked data is voluntary and is used in order to be able to address you personally. After your confirmation, we will save your email address for the purpose of sending you the newsletter. The legal basis is Article 6 Paragraph 1 Sentence 1 Letter a GDPR.
4. You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare your revocation by clicking on the link provided in every newsletter email, by email to info (at) schlossreinach.de or by sending a message to the contact details given in the legal notice.
5. We would like to point out that we evaluate your user behavior when sending the newsletter. For this evaluation, the e-mails sent contain so-called web beacons or tracking pixels, which represent single-pixel image files that are stored on our website. For the evaluations, we link the data mentioned in § 3 and the web beacons with your email address and an individual ID. With the data obtained in this way, we create a user profile in order to tailor the newsletter to your individual interests. We record when you read our newsletters, which links you click in them and deduce your personal interests from this. We link this data to your actions on our website. You can object to this tracking at any time by clicking on the separate link provided in every email or by informing us via another contact channel. The information is stored for as long as you have subscribed to the newsletter. After you unsubscribe, we save the data purely statistically and anonymously.

§ 7 Use of Google Analytics

1. This website uses Google Analytics, a web analysis service from Google Inc. (“Google”). Google Analytics uses so-called "cookies", text files that are stored on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address will only be transmitted to a Google server in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage.
2. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
3. You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by using the browser plug-in available under the following link. Download and install it from: http://tools.google.com/dlpage/gaoptout?hl=de.
4. This website uses Google Analytics with the extension "_anonymizeIp ()". As a result, IP addresses are further processed in abbreviated form, so that personal references can be ruled out. If the data collected about you can be linked to a person, this will be excluded immediately and the personal data will be deleted immediately.
5. We use Google Analytics to analyze the use of our website and to improve it on a regular basis. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Article 6, Paragraph 1, Sentence 1, Letter f of the GDPR.
6. Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: http://www.google.com/analytics/terms/de .html, overview of data protection: https://support.google.com/analytics/answer/6004245?hl=de, as well as the data protection declaration: https://policies.google.com/privacy?hl=de&gl=de.

§ 8 Facebook, Google+, Instagram

1. Links to these services are provided on our website. Your personal data will not be passed on by us. Social plugins are not used on our site, i.e. if you do not explicitly follow the relevant links, no data will be transmitted to the services mentioned.
2. If you follow these links, your browser will connect to the relevant social network or service. In doing so, data, e.g. your IP address, are transmitted so that you can assign your visit to our site to your existing user account. You can prevent this assignment by logging out of your corresponding user account.

§ 9 Integration of YouTube videos

1. We have integrated YouTube videos into our online offering, which are stored on http://www.YouTube.com and can be played directly from our website. These are all integrated in the "extended data protection mode", i. H. that no data about you as a user will be transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence on this data transfer.
2. When you visit the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under Section 3 of this declaration will be transmitted. This happens regardless of whether YouTube provides a user account that you are logged in to or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not want the assignment to your profile on YouTube, you must log out before activating the button. YouTube saves your data as a usage profile and uses it for advertising, market research and / or needs-based design of its website. Such an evaluation takes place in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, although you must contact YouTube to exercise this right.
3. Further information on the purpose and scope of the data collection and its processing by YouTube can be found in the data protection declaration. There you will also find further information on your rights and setting options to protect your privacy: https://policies.google.com/privacy?hl=de&gl=de. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

§ 10 Integration of Google Maps

1. We use Google Maps on this website. This enables us to show you interactive maps directly on the website and enables you to conveniently use the map function.
2. When you visit the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under Section 3 of this declaration will be transmitted. This happens regardless of whether Google provides a user account that you are logged in to or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be assigned to your profile on Google, you must log out before activating the button. Google saves your data as a usage profile and uses it for advertising, market research and / or needs-based design of its website. Such an evaluation takes place in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, although you must contact Google to exercise this right.
3. Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

§ 11 Use of Google Adwords Conversion

1. We use the offer of Google Adwords to draw attention to our attractive offers with the help of advertising materials (so-called Google Adwords) on external websites. In relation to the data from the advertising campaigns, we can determine how successful the individual advertising measures are. We are interested in showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.
2. These advertising media are delivered by Google via so-called "ad servers". To do this, we use ad server cookies, through which certain parameters for measuring success, such as the insertion of advertisements or clicks by the user, can be measured. If you access our website via a Google ad, Google Adwords will save a cookie on your PC. These cookies usually lose their validity after 30 days and are not intended to identify you personally. The analysis values ​​for this cookie are usually the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user is not would like to be addressed more).
3. These cookies enable Google to recognize your internet browser. If a user visits certain pages on the website of an Adwords customer and the cookie stored on their computer has not yet expired, Google and the customer can see that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Adwords customer. Cookies cannot therefore be tracked via the websites of Adwords customers. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material; in particular, we cannot identify the users on the basis of this information.
4. Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data that is collected by Google through the use of this tool and therefore inform you according to our level of knowledge: By integrating AdWords Conversion, Google receives the information that you are visiting the corresponding part of our website have accessed or clicked on one of our advertisements. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out your IP address and save it.
5. You can prevent participation in this tracking process in various ways: a) by setting your browser software accordingly; in particular, by suppressing third-party cookies, you will not receive any advertisements from third-party providers; b) by deactivating the cookies for conversion tracking by setting your browser so that cookies from the domain “www.googleadservices.com” are blocked, https://adssettings.google.de/authenticated, whereby this setting is deleted if you delete your cookies; c) by deactivating the interest-based advertisements of the providers who are part of the self-regulation campaign “About Ads” via the link http://www.aboutads.info/choices, whereby this setting is deleted when you delete your cookies; d) by permanent deactivation in your Firefox, Internet Explorer or Google Chrome browsers under the link https://support.google.com/ads/answer/7395996. We would like to point out that in this case you may not be able to use all functions of this offer to their full extent.
6. The legal basis for processing your data is Article 6 Paragraph 1 Sentence 1 Letter f GDPR. Further information on data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

§ 12 Remarketing

In addition to Adwords Conversion, we use the Google Remarketing application. This is a process that we would like to use to address you again. This application allows you to see our advertisements when you continue to use the Internet after visiting our website. This is done by means of cookies stored in your browser, through which your usage behavior is recorded and evaluated by Google when you visit various websites. In this way, Google can determine your previous visit to our website. A merging of the data collected in the context of remarketing with your personal data, which may be stored by Google, does not take place by Google according to its own statements. In particular, according to Google, pseudonymization is used in remarketing.

§ 13 Facebook Custom Audiences

1. The website also uses the remarketing function “Custom Audiences” from Facebook Inc. (“Facebook”). This allows users of the website to be shown interest-related advertisements (“Facebook Ads”) when visiting the social network Facebook or other websites that also use the process. We are interested in showing you advertisements that are of interest to you in order to make our website more interesting for you.
2. Due to the marketing tools used, your browser automatically establishes a direct connection with the Facebook server. We have no influence on the extent and further use of the data that is collected by Facebook through the use of this tool and therefore inform you according to our level of knowledge: By integrating Facebook Custom Audiences, Facebook receives the information that you are visiting the corresponding website of our Have accessed our website or have clicked on one of our advertisements. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, there is a possibility that the provider will find out and save your IP address and other identification features.
3. The deactivation of the “Facebook Custom Audiences” function is possible at https://www.facebook.com/settings/?tab=ads#_.
4. The legal basis for processing your data is Article 6 Paragraph 1 Sentence 1 Letter f GDPR. Further information on data processing by Facebook is available at https://www.facebook.com/about/privacy.

§ 14 A/B-Testing, Klick-Tracking and Recordings

1. This website also carries out analyzes of user behavior using what is known as A / B testing. We can show you our websites with slightly varied content, depending on a profile assignment. In this way we can analyze our offer, regularly improve it and make it more interesting for you as a user. The legal basis for A / B testing is Article 6 Paragraph 1 Sentence 1 Letter f GDPR.
2. For this evaluation, cookies (more on this in Section 3) are stored on your computer. The person responsible stores the information collected in this way on his server in the USA. You can prevent the evaluation by deleting existing cookies and preventing the storage of cookies. If you prevent the storage of cookies, we would like to point out that you may not be able to use our website in full. It is possible to prevent the storage of cookies by changing the settings in your browser.
3. Before the analyzes are carried out, the IP addresses are further processed in abbreviated form, so that direct personal reference can be ruled out. The IP address transmitted by your browser will not be merged with other data collected by us.

§ 15 Smart Host

1. the Smart Host system is used in the course of establishing contact. This serves to optimise communication and customer loyalty.

2. for what purpose is your data collected?

To enable and fulfil the guest's booking; to carry out the guest's stay; to tailor the stay to the guest's wishes and interests; to be able to offer services in line with the guest's interests in the future; marketing in connection with the hotel's services and to improve the hotel's services.

3. in the course of processing, your data will be transferred to the service provider and its auxiliary persons who provide cloud-based software and data processing solutions for the hotel and who analyse and process the guest's data (for the above purposes) on behalf of the hotel.

§ 16 order data processing

On the basis of a separate agreement on the processing of personal data on behalf of the

• Incert eTourismus GmbH & Co. KG based in Linz
• Protel Hotelsoftware GmbH based in Dortmund
• Vioma GmbH based in Offenburg
• IT service Stefan Wehmeier based in Freiburg

§ 17 contact form

You can contact us using our contact form. The input of the data takes place expressly on a voluntary basis. The personal data provided will be treated confidentially and used for the intended purpose in accordance with the applicable data protection regulations. The data will not be passed on to third parties outside of our company.

§ 18 Payment by credit card

You can pay by credit card on our website. Payment data is transferred to Concardis GmbH in order to process the payment. The legal basis for processing your data is Article 6 Paragraph 1 Letter F GDPR.

Concardis GmbH collects the information about the transaction as well as other information in connection with the transaction such as information about goods / services, financial information, information about the interaction between you and Concardis GmbH, dealer information, including details about payment instruments, device-related information and Location data.

Concardis GmbH uses the data, among other things, to process payments, check creditworthiness and monitor and improve its services.

Details on data processing and processing purposes can be found in the data protection conditions of Concardis GmbH: www.concardis.com/datenschutzerklaerung

Further information about Concardis GmbH:

Concardis GmbH is a limited liability company with headquarters in Eschborn near Frankfurt am Main. It is entered in the commercial register of the Frankfurt am Main local court under number HRB 57036. Concardis is approved and supervised as an e-money institute by the Federal Financial Supervisory Authority, Graurheindorfer Straße 108 in 53117 Bonn.

Sales tax identification number (USt-IdNr.): DE 228 965 682. The management team includes: Mark Freese, Jens Mahlke, Luca Zanotti

Address:
Concardis GmbH
Helfmann Park 7
65760 Eschborn,
Germany
Phone: +49 69 7922-0
Fax: +49 69 7922-4500
Email: service (at) concardis.com

§ 19 Security

Hotel Schloss Reinach uses technical and organizational security measures to protect the data you provide from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. These security measures are continuously improved in line with technological developments. In addition, all employees and vicarious agents are obliged to observe data secrecy under the Federal Data Protection Act.

§ 20 changes to this data protection declaration

Hotel Schloss Reinach reserves the right to change this data protection declaration. The current version of the data protection declaration is always available on the Hotel Schloss Reinach website at www.schlossreinach.de/datenschutz/.

Status: May 2018