DATA PROTECTION DECLARATION Eckelmann Service GmbH

We are delighted that you have decided to visit our website and we would like to thank you for your interest in our company. The protection of personal data is very important to us. The use of our website is fundamentally possible without the provision of any personal data. However, if a user wishes to avail of specific company services via this website then it may be necessary to process personal data. If it is necessary to process personal data and if no legal basis for such processing exists then we will obtain the permission of the affected person as a general rule. You can withdraw your consent at any time with effect for the future. The contact details of the data controller can be found at the end of this data protection declaration. The personal data (name, address, email address or telephone number) of a user of this website is always processed on the basis of the General Data Protection Regulation and in accordance with the valid and applicable national data protection provisions. Eckelmann Service GmbH officially informs you in this data protection declaration of the type, purpose and scope of your personal data subject to processing. Furthermore, the persons affected by this data protection declaration are informed here of their associated rights.
The following terms are used in this data protection declaration, which were also used with the enactment of the EU General Data Protection Regulation. In order to keep the data protection declaration simple and comprehensible, these terms are explained here.

Personal data – according to Art 4 (1) GDPR, this is:
All information that pertains to an identified or identifiable natural person (referred to in the following as “affected person”). A natural person is deemed to be identifiable if they can be directly or indirectly identified, in particular with assignment to an identifier such as a name, an ID number, location data, an online identification, or one or more particular characteristics, which constitute a manifestation of the physical, physiological, psychological, mental, economic, cultural or social identity of this natural person.

Affected person
Every identified or identifiable natural person, whose personal data is processed by the data controller.

Processing – according to Art 4 (2) GDPR, this is:
Any procedure or sequence of procedures, executed with or without the help of automated processes, that takes place in conjunction with personal data, such as acquisition, recording, organisation, sorting, storage, alignment or modification, reading out, querying, utilisation, publication or disclosure through transmission, distribution or any other form of provision, comparison or linking, restriction, deletion or destruction.

Restriction of processing
The marking of stored personal data with the aim of restricting its future processing.

Profiling – according to Art 4 (4) GDPR, this is:
Any form of automated processing of personal data, which consists of using this personal data in order to evaluate specific personal aspects that pertain to a natural person, in particular in order to analyse or predict aspects pertaining to work performance, financial situation, health, personal preferences, interests, reliability, conduct or behaviour, whereabouts or change of location of this natural person.

Pseudonymisation
The processing of personal data in such a way that the personal data can no longer be attributed to a specific affected person without drawing upon additional information, insofar as this additional information is stored separately and is subject to technical and organisational measures that guarantee that the personal data cannot be assigned to an identified or identifiable natural person.

Data controller – according to Art 4 (7) GDPR, this is:
The natural or legal person, authority, institution or any other entity that decides, autonomously or together with others, on the purposes and means of processing personal data. If the purposes and means of this processing are specified by Union law or by the law of the member states then the data controller or the specific criteria governing their designation may be set out by Union law or by the law of the member states.

Recipient
A natural or legal person, authority, institution or any other entity to whom personal data is disclosed, irrespective of whether this is a third party or not. However, authorities that may receive personal data within the framework of a specific investigation mandate in accordance with Union law or the law of the member states are not deemed to be recipients.

Third party
A natural or legal person, authority, institution or any other entity apart from the affected person, the data controller, the order processor and the persons who are authorised under the direct responsibility of the data controller or the order processor, to process the personal data.

Order processor – according to Art 4 (8) GDPR, this is:
A natural or legal person, authority, institution or any other entity that processes the personal data on behalf of the data controller.

Consent – according to Art 4 (11) GDPR, this is:
Every manner in which the affected person provides permission and clearly states their will in the form of a declaration or any other unambiguous action of conveying confirmation on a voluntary basis for the specific case, whereby the affected person confirms that they permit the processing of their respective personal data.

Cookies

The Eckelmann Service GmbH website uses cookies. Cookies are text files that are stored and saved on a computer system via an Internet browser. Numerous websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a character string through which websites and servers can be assigned to the specific internet browser in which the cookie was stored. This enables the visited websites and servers to distinguish the individual browser of the data subject from other Internet browsers that contain other cookies. A specific internet browser can be recognized and identified using the unique cookie ID. By using cookies, Eckelmann Service GmbH can provide users of this website with more user-friendly services that would not be possible without the cookie setting. The cookies used can be divided into the following categories:

Necessary
These cookies are absolutely necessary for the operation of the site and enable, for example, security-relevant functions. In addition, we can also use these types of cookies to determine whether you want to remain logged in to your profile in order to make our services available to you more quickly when you visit our website again.

Statistics
In order to further improve our offer and our website, we collect anonymized data for statistics and analysis. With the help of these cookies we can, for example, determine the number of visitors and the effect of certain pages on our website and optimize our content.

Comfort
We use these cookies to make it easier for you to use the site. For example, you can use this search when you visit our website again on the basis of a previous hotel search.

Personalization
These cookies are used to show you personalized content that matches your interests. This enables us to present you offers that are particularly relevant for you and your planned stay.

A cookie can be used to optimize the information and offers on our website in the interests of the user. As already mentioned, cookies enable us to recognize the users of our website. The purpose of this recognition is to make it easier for users to use our website. The user of a website that uses cookies, for example, does not have to enter his access data every time he visits the website, because this is done by the website and the cookie stored on the user’s computer system. Another example is the cookie of a shopping cart in the online shop. The online shop remembers the items that a customer has placed in the virtual shopping cart via a cookie. The person concerned can prevent the setting of cookies by our website at any time by means of a corresponding setting of the internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time using an Internet browser or other software programs. This is possible in all common internet browsers. If the person concerned deactivates the setting of cookies in the internet browser used, under certain circumstances not all functions of our website can be used to their full extent.

Registration on this website (e.g. online booking)

The affected person has the option of registering on the website of the data controller by providing their personal data. The personal data that is transmitted to the data controller depends on the respective input screen that is used for registration. The personal data entered by the affected person is acquired and stored exclusively for internal use by the data controller and for their own purposes. The data controller can initiate the passing on of the personal data to one or more order processors (for example a mailing service provider), who will also use the personal data exclusively internally and for the purpose of the data controller. When registering on the website of the data controller, the IP address assigned to the affected person by the Internet Service Provider (ISP), as well as the date and time of registration will also be stored. The storage of this data takes place because it is only in this way that misuse of our services can be prevented. Furthermore, if necessary this data also facilitates the detection of committed offences and copyright infringements. As such, the storage of this data is necessary to safeguard the data controller. This data is never passed on to third parties unless a legal obligation exists to pass this on, or if this is necessary for law enforcement and prosecution purposes. The registration of the affected person with the voluntary provision of personal data enables the data controller to offer the affected person contents or services that can only be offered to registered users due to the nature of the matter. Registered persons are entitled to have the personal data they provided at the time of registration deleted from the data inventory of the data controller in full. On request, the data controller shall inform any affected person of the personal data that is stored about them at any time. Furthermore, the data controller shall correct or delete the personal data on request or notification by the affected person, unless statutory storage periods prevent this.

Contact

Personal data is also processed by Eckelmann Service GmbH if you provide this to us. This takes place every time you get in contact with us for example. Personal data transmitted to us in this way is naturally only used for the purpose intended by you when you provide this to us at the time of establishing contact. This information is provided expressly on a voluntary basis and with your consent. Insofar as this information pertains to communication channels (e.g. email address, telephone number) then you also consent to us contacting you via these communication channels if necessary, in order to respond to your inquiry.

Security

The company implements numerous technical and organisational measures, in order to protect your personal data against unintended or unlawful deletion, amendment or loss, and against unauthorised passing on or access. However, internet-based data transmissions for example may always be at risk of security breaches and it is therefore not possible to guarantee absolute protection. For this reason, all affected persons are free to transmit their personal data to us via alternative routes, for example on the telephone.

Links with other websites

This website contains links with other websites (so-called external links).
As the provider, Eckelmann Service GmbH, is responsible for its own contents in accordance with the valid European and national legal provisions. It is necessary to distinguish between these contents and the contents of other providers accessed via links. We have no influence over the operators of other websites and we cannot ensure that they comply with the valid European and national legal provisions. Please refer in this regard to the data protection declarations on the respective website. Eckelmann Service GmbH accepts no liability for external contents that are marked as such and that are accessed via links. Furthermore, we do not adopt such contents as our own. Providers of the linked websites bear sole responsibility for unlawful, inaccurate or incomplete contents and for damages arising in connection with the use or non-use of information supplied in this way.

Acquisition of general data and information

The website of Eckelmann Service GmbH acquires various general data and information every time an affected person or an automated system calls up the website. This general data and information is stored in the server log files. The data acquired may include the (1) browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which the accessing system arrived on our website (so-called referrer), (4) the sub-pages that are called up on our website by the accessing system, (5) the date and time of access to the website, (6) an Internet Protocol Address (IP Address), (7) the Internet Service Provider of the accessing system and (8) other similar data and information that facilitates defence in the event of attacks of our information technology systems. When using this general data and information, Eckelmann Service GmbH draws no conclusions regarding the affected person. Rather, this information is in fact required in order to (1) deliver the contents of our website correctly, (2) optimise the contents of our website and our advertising for this, (3) guarantee the continuous functionality of our information technology systems and the technology of our website, and (4) so that we can provide the necessary information to the law enforcement authorities for the purpose of prosecution in case of a cyber attack. This anonymously acquired data and information is evaluated by Eckelmann Service GmbH on the one hand statistically and also with the aim of safeguarding data protection and the processed personal data. The anonymous data in the server log files is stored separately to all personal data provided by an affected person.

Registering on our website

The affected person has the option of registering on the website of the data controller by providing their personal data. The personal data that is transmitted to the data controller depends on the respective input screen that is used for registration. The personal data entered by the affected person is acquired and stored exclusively for internal use by the data controller and for their own purposes. The data controller can initiate the passing on of the personal data to one or more order processors, for example a mailing service provider, who will also use the data exclusively internally and for the purpose of the data controller. When registering on the website of the data controller, the IP address assigned to the affected person by the Internet Service Provider (ISP), as well as the date and time of registration will also be stored. The storage of this data takes place because it is only in this way that misuse of our services can be prevented. Furthermore, if necessary this data also facilitates the detection of committed offences. As such, the storage of this data is necessary to safeguard the data controller. This data is never passed on to third parties unless a legal obligation exists to pass this on, or if this is necessary for prosecution purposes. The registration of the affected person with the voluntary provision of personal data enables the data controller to offer the affected person contents or services that can only be offered to registered users due to the nature of the matter. Registered persons are entitled to have the personal data they provided at the time of registration amended or deleted from the data inventory of the data controller in full at any time. On request, the data controller shall inform any affected person of the personal data that is stored about them at any time. Furthermore, the data controller shall correct or delete the personal data on request or notification by the affected person, unless statutory storage periods prevent this. All employees of the data controller are available to the affected person as points of contact in this regard.

Subscribing to our newsletter

On the website of Eckelmann Service GmbH, users are given the option of subscribing to our company newsletter. The personal data that is transmitted with subscription to the newsletter can be determined from the input screen used for this. Eckelmann Service GmbH informs its customers and business partners at regular intervals of the company offers and services via a newsletter. Our company newsletter can only be received by affected persons if (1) the affected person has a valid email address and (2) the affected person has registered for receipt of the newsletter. For legal reasons, a confirmation email will be sent to the email address initially provided by an affected person for receipt of the newsletter, within the framework of a double opt-in process. This confirmation email serves to ensure that the owner of the email address, as the affected person, has authorised receipt of the newsletter.
Upon registration for the newsletter, we also save the IP address assigned by the Internet Service Provider (ISP) to the computer system used by the affected person at the time of registration, as well as the date and time of registration. The acquisition of this data is necessary in order to track any (possible) misuse of the email address of an affected person at a later point in time, and therefore serves to legally safeguard the data controller. The personal data acquired within the framework of registration for the newsletter is used exclusively for sending our newsletter. Furthermore, subscribers to the newsletter may receive information by email if this is necessary for operation of the newsletter service or an associated registration, for example with changes to the newsletter service or with a change to the technical conditions. The personal data acquired within the framework of the newsletter service is not passed on to third parties. Affected persons can cancel their subscription to our newsletter at any time. It is possible for affected persons to withdraw their consent to the storage of personal data provided for receipt of the newsletter at any time. Every newsletter contains a link provided for the purpose of withdrawing consent. Furthermore, it is possible to de-register for the receipt of the newsletter at any time directly on the website of the data controller, or to inform the data controller of de-registration in another way.

Newsletter tracking

The newsletter of Eckelmann Service GmbH contains so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in emails that are sent in HTML format, that facilitate log file logging and log file analysis. In this way, statistical evaluation of the success or failure of online marketing campaigns can take place. Using the embedded tracking pixel, Eckelmann Service GmbH is able to detect whether and when an email has been opened by an affected person, and which links have been called up in the email of the affected person. The personal data acquired by means of the tracking pixels contained in the newsletters is stored and evaluated by the data controller, in order to optimise the newsletter dispatch and to better align the contents of future newsletters with the interests of the affected person. This personal data is not passed on to third parties. Affected persons are entitled at all times to withdraw their respective consent to this, provided separately within the framework of the double opt-in process. Following the withdrawal of consent, this personal data is deleted by the data controller. Eckelmann Service GmbH automatically considers de-registration of the newsletter subscription to be a withdrawal of consent.

Contact options via the website

On the basis of statutory provisions, the website of Eckelmann Service GmbH contains information that enables you to quickly get in touch with our company electronically and communicate with us directly. This information also includes a general electronic mail address (email address). If an affected person gets in touch with the data controller by email or via a contact form then the personal data transmitted by the affected person will be automatically saved. Such personal data transmitted by the affected person to the data controller on a voluntary basis is stored for the purpose of processing the inquiry or for getting in touch with the affected person personally. This personal data is not passed on to third parties.

Routine deletion and blocking of personal data

The data controller only processes and stores personal data of the affected person for the period required in order to realise the purpose of storage, or if this is prescribed by the European lawmakers and regulators, or by another legislator in laws or provisions that the data controller is subject to.
If the storage purpose no longer exists or a statutory storage period prescribed by the European lawmakers and regulators, or by another legislator, expires then the personal data will be routinely blocked or deleted in accordance with the legal provisions.

Rights of the affected person

Right to confirmation
Every affected person has the right granted by the European lawmakers and regulators to demand confirmation from the data controller regarding whether they are processing personal data pertaining to the affected person. If an affected person wishes to exercise this right to confirmation, they can contact an employee of the data controller at any time in this regard.

Right to information
Each person affected by the processing of personal data has the right granted by the European lawmakers and regulators to free information at any time from the data controller regarding any personal data stored about them personally, and to receive a copy of this information. Furthermore, the European lawmakers and regulators have granted the affected person the right to the following information:

• the purpose of processing
• he categories of personal data that are processed
• the recipients or categories of recipient that the personal data has been or is being disclosed to; in particular with recipients in third countries or with international organisations
• if possible, the planned duration of storage of the personal data, or if this is not possible then the criteria that determine this duration
• the existence of a right to correction or deletion of personal data that pertains to the affected person, or to the restriction of processing by the data controller, or a right to object to this processing
• the existence of a right to appeal to a regulatory authority
• if personal data is not acquired from the affected person: all available information regarding the origins of the data
• the existence of automated decision-making including profiling, in accordance with Article 22, sections 1 and 4 of the GDPR and – at least in these cases – meaningful information regarding the logic involved, as well as the implications and intended impacts of such processing for the affected person

Furthermore, the affected person has the right be informed as to whether personal data has been transmitted to a third country or an international organisation. If this is the case then the affected person also has the right to information regarding the appropriate guarantees provided in relation to the transmission. If an affected person wishes to exercise this right to information, they can contact an employee of the data controller at any time in this regard.

Right to correction
Each person affected by the processing of personal data has the right granted by the European lawmakers and regulators to demand the immediate correction of incorrect personal data pertaining to them. Furthermore, the affected person also has the right to demand that incomplete personal data be completed – also with a supplementary explanation – with consideration to the purposes of processing. If an affected person wishes to exercise this right to correction, they can contact an employee of the data controller at any time in this regard.

Right to deletion (right to be forgotten)
Each person affected by the processing of personal data has the right granted by the European lawmakers and regulators to demand that the data controller immediately delete any personal data pertaining to them, insofar as one of the following reasons applies and insofar as processing is not necessary:

• The personal data was acquired for such purposes as are no longer applicable, or processed in such a way that is no longer necessary.
• The affected person withdraws their consent to processing in accordance with Art. 6 section 1, letter a GDPR or Art. 9 section 2 letter a GDPR, and if no other legal grounds for processing exist.
• The affected person lodges their withdrawal of consent to processing in accordance with Art. 21 section 1 GDPR and no overriding justified grounds for processing exist, or the affected person lodges their withdrawal of consent to processing in accordance with Art. 21 section 2 GDPR.
• The personal data was processed unlawfully.
• Deletion of the personal data is necessary in order to satisfy a legal obligation in accordance with Union law, or the law of the member states applicable to the data controller.
• The personal data has been acquired in relation to a service provided by the information society in accordance with Art. 8 section 1 GDPR.

If one of the aforementioned reasons applies and an affected person wishes to initiate the deletion of personal data that is stored by Eckelmann Service GmbH, they can contact an employee of the data controller at any time. The employee of Eckelmann Service GmbH will ensure that the deletion request is satisfied immediately. If personal data has been published by Eckelmann Service GmbH and if our company is obligated to delete the personal data as the data controller in accordance with Art. 17 section 1 GDPR, Eckelmann Service GmbH shall implement appropriate measures with consideration to the available technology and the costs of implementation, also of a technical nature, to inform other bodies responsible for data processing, which are processing the published personal data, that the affected person has demanded the deletion of this personal data by the other bodies responsible for the data processing, including all links to this personal data and all copies and duplicates of this personal data, insofar as processing is not necessary. The employee of Eckelmann Service GmbH shall initiate the necessary measures in individual cases.

Right to restriction of processing

Each person affected by the processing of personal data has the right granted by the European lawmakers and regulators to demand the restriction of processing if one of the following preconditions exists:

• The correctness of the personal data is disputed by the affected person, whereby this restriction applies for a period that enables the data controller to check the correctness of the personal data.
• Processing is unlawful, the affected person rejects the deletion of their personal data and instead demands that use of the personal data be restricted.
• The data controller no longer requires the personal data for the processing purposes, however the affected person requires it in order to assert, exercise or defend against legal claims.
• The affected person has submitted an objection to processing in accordance with Art. 21 section 1 GDPR and it has not yet been determined, whether the justified reasons of the data controller outweigh the justified reasons of the affected person.

If one of the aforementioned preconditions exists and an affected person wishes to demand the restriction of personal data that is stored by Eckelmann Service GmbH, they can contact an employee of the data controller at any time. The employee of Eckelmann Service GmbH shall initiate the restriction of processing.

The right to data portability
Each person affected by the processing of personal data has the right granted by the European lawmakers and regulators to receive the personal data pertaining to them, which the affected person previously provided to a data controller, in a structured, conventional and machine-readable format. Furthermore, they also have the right to demand that this data be transmitted without hindrance to another data controller by the data controller to which they initially provided the personal data, insofar as processing was based on consent in accordance with Art. 6 section 1 letter a GDPR or Art. 9 section 2 letter a GDPR, or on a contract in accordance with Art. 6 section 1 letter b GDPR and processing takes place with the aid of an automated process, insofar as processing is not required in order to perform a task that lies in the public interest or that takes place within the framework of exercising official authority, where this has been transferred to the data controller. Furthermore, the affected person has the right, when exercising their right to data portability in accordance with Art. 20 section 1 GDPR, to demand that the personal data be transmitted directly from one data controller to another data controller, insofar as this is technically feasible and if this does not infringe on the rights and freedoms of other persons. The affected person can contact an employee of Eckelmann Service GmbH at any time in order to exercise their right to data portability.

Right to objection
Each person affected by the processing of personal data has the right granted by the European lawmakers and regulators to object at any time to the processing of personal data pertaining to them for reasons that arise due to their specific situation, where processing takes place on the basis of Art. 6 section 1 letters e or f GDPR. This also applies to profiling based on these conditions.
If an objection is lodged, Eckelmann Service GmbH will no longer process the personal data unless we can verify compelling legitimate grounds for the processing, that outweigh the interests, rights and freedoms of the affected person, or if processing serves the assertion, exercising or defence of legal claims. If Eckelmann Service GmbH processes personal data for the purposes of direct advertising, the affected person has the right to object at any time to the processing of the personal data for the purposes of this type of advertising. This also applies to profiling, insofar as this is connected to such direct advertising. If the affected person lodges an objection with Eckelmann Service GmbH regarding processing for the purposes of direct advertising then Eckelmann Service GmbH shall no longer process the personal data for these purposes. Furthermore, the affected person has the right, for reasons that arise from their specific situation, to lodge an objection to the use of the personal data pertaining to them by Eckelmann Service GmbH for scientific or historic research purposes or for statistical purposes in accordance with Art. 89 section 1 GDPR, unless such processing is necessary in order to perform a task that lies in the public interest. The affected person can contact any employee of Eckelmann Service GmbH directly at any time in order to exercise their right to objection. The affected person is also entitled to exercise their right to object in relation to the use of services of the information society, notwithstanding directive 2002/58/EC, with automated processes whereby technical specifications are used.

Automated decision-making in individual cases including profiling
Each person affected by the processing of personal data has the right granted by the European lawmakers and regulators to avoid being subjected to a decision that is based exclusively on automated processing – including profiling – which has a legal affect on them or significantly affects them in a similar way, unless the decision (1) is necessary in order to conclude or realise a contract between the affected person and the data controller, or (2) is permissible on the basis of the legal provisions of the Union or the member states applicable to the data controller and this legal provision contains appropriate measures to safeguard the rights and freedoms, as well as the justified interests of the affected person, or (3) takes place with the express consent of the affected person. If the decision (1) is necessary in order to conclude or realise a contract between the affected person and the data controller, or (2) takes place with the express consent of the affected person, Eckelmann Service GmbH shall implement appropriate measures in order to safeguard the rights and freedoms, as well as the justified interests of the affected person, which include at least the right to obtain human intervention on the part of the data controller, to express their own point of view and to contest the decision.
If the affected person wishes to exercise rights in relation to automated decisions, they can contact an employee of the data controller at any time in this regard.

Right to withdraw consent in relation to data protection
Each person affected by the processing of personal data has the right granted by the European lawmakers and regulators to withdraw their consent to the processing of their personal data at any time. If the affected person wishes to exercise this right to withdraw consent, they can contact an employee of the data controller at any time in this regard.

Data protection with applications and application procedures

The data controller acquires and processes personal data from applicants for the purposes of conducting the application procedure. This processing may also take place via electronic channels. This is the case in particular if an applicant transmits their application documents to the data controller via electronic channels, for example by email or via a web form provided on the website. If the data controller concludes an employment contract with an applicant then the transmitted data will be saved for the purposes of establishing the employment relationship with consideration to the legal regulations. If the data controller does not conclude an employment contract with the applicant then the application documents are automatically deleted two months after the rejection decision has been issued, unless other justified interests of the data controller stand against deletion. Other justified interests in this regard are for example the burden of proof in conjunction with processes in accordance with German general equal treatment law (AGG).

Data protection provisions on the use and application of Facebook

The data controller has integrated components of the company Facebook in this website. Facebook is a social network.
A social network is a social meeting point or online community operated on the internet, that generally enables its users to communicate with each other and interact in a virtual space. A social network can serve as a platform for exchanging opinions and experiences, or it may enable the internet community to provide personal or commercial information. Facebook enables users of the social network to create private profiles, upload photos and establish a network via friend requests for example.
The operator of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If an affected person lives outside the USA and Canada, the data controller responsible for processing personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. By calling up individual pages of this website, which are operated by the data controller and in which a Facebook component (Facebook plugin) has been integrated, the internet browser on the information technology system of the affected person will be automatically prompted by the respective Facebook component to download an image of the respective Facebook component from Facebook. A complete overview of all Facebook plugins can be called up via httpss://developers.facebook.com/docs/plugins/?locale=de_DE. Within the framework of this technical process, Facebook receives information regarding the actual sub-pages of our website visited by the affected person. If the affected person is logged into Facebook at the same time, Facebook recognises which sub-pages of our website the affected person actually visits every time they access our website and for the entire duration of the affected person’s respective visit to our site. This information is collected by the Facebook component and assigned to the affected person by means of the respective Facebook account. If the affected person clicks on one of the Facebook buttons integrated in our website, for example the “Like” button, or if the affected person leaves a comment, Facebook will assign this information to the personal Facebook user account of the affected person and store this personal data.
Facebook always receives information via the Facebook component that the affected person has visited our website if the affected person is logged into their Facebook account and accesses our website at the same time; this takes place irrespective of whether the affected person clicks on the Facebook component or not. If the affected person does not wish this form of information transmission to Facebook, it is possible to prevent this transmission by logging out of the Facebook account before accessing our website.
The data guidelines published by Facebook under httpss://de-de.facebook.com/about/privacy/ provide information on the acquisition, processing and use of personal data by Facebook. Furthermore, the Facebook setting options available for protecting the privacy of the affected person can also be found here. Various applications are also available, which facilitate the suppression of data transmission to Facebook. Such applications can be used by the affected person to suppress the transmission of data to Facebook.

Data protection provisions on the use and application of Google Analytics (with anonymization function)

The data controller has integrated the Google Analytics component (with anonymization function) in this website. Google Analytics is a web analysis service. Web analysis is the acquisition, collection and evaluation of data regarding the behaviour of visitors to websites. A web analysis service logs data and information such as the website from which an affected person arrived on a website (so-called referrer), the sub-pages of the website that an affected person visits, or how often and for what length of time a sub-page was viewed. A web analysis service is predominantly used in order to optimise a website and to analyse the value for money of internet advertising. The provider of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. The data controller uses the suffix “_gat._anonymizeIp” for web analysis via Google Analytics. Using this suffix, the IP address of the internet connection of the affected person is abbreviated and anonymised by Google, if the access to our website takes place from a member state of the European Union or another state that is a contracting party to the European Economic Area.
The purpose of the Google Analytics component is to analyse the flow of visitors to our website. Google uses the data and information acquired, for example, to evaluate the use of our website, to generate online reports for us, which show the activities on our web pages, and to deliver further services connected with the use of our website. Google Analytics sets a cookie on the information technology system of the affected person. The nature of cookies is explained above. By setting cookies, Google is able to analyse the use of our website. By calling up individual pages of this website, which are operated by the data controller and in which a Google Analytics component has been integrated, the internet browser on the information technology system of the affected person will be automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. Within the framework of this technical process, Google obtains knowledge of personal data such as the IP address of the affected person, which Google uses for example to track the origin of visitors and clicks, and to accordingly settle commission.
Personal information pertaining to the affected person – such as the access time, place from which access was initiated, and the frequency of visits to our website – is saved with the cookie. With every visit to our website this personal data, including the IP address of the internet connection used by the affected person, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass this personal data, acquired via the technical process, on to third parties under certain circumstances. The affected person is able to prevent the setting of cookies by our website at any time with the requisite settings in their internet browser, as described previously, and thereby permanently inhibit the setting of cookies. Applying these settings to the internet browser used would also prevent Google setting a cookie on the information technology system of the affected person. Furthermore, any cookie previously set by Google Analytics can be deleted via the internet browser or another software program at any time. Additionally, the affected person can also object to and prevent the acquisition of the data logged by Google Analytics regarding the use of this website, as well as the processing of this data by Google. To do so, the affected person must download and install a browser add-on, via the link httpss://tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that it is prohibited to transmit data and information regarding visits to websites to Google Analytics. The installation of the browser add-on is considered by Google to be an objection. If the information technology system of the affected person is deleted, reformatted or reinstalled at a later point in time then the affected person must reinstall the browser add-on, in order to deactivate Google Analytics again. If the browser add-on is de-installed or deactivated by the affected person or by another person within their sphere of influence, it is possible to reinstall or reactivate the browser add-on. Further information and the valid data protection provisions of Google can be found at httpss://www.google.de/intl/de/policies/privacy/ and https://www.google.com/analytics/terms/de.html. Google Analytics is explained in greater detail here: httpss://www.google.com/intl/de_de/analytics/.

Data protection provisions on the use and application of live rate

On this website, the technologies of live rate GmbH, Metzstr 12, 81667 München, Germany (Http://www.liverate.chat) are used to collect and store data from which usage profiles are created using pseudonyms. Cookies are used for this purpose; These are small text files which are stored on the local terminal of the visitor and enable the user to be recognized on further visits to our website. The pseudonymised usage profiles are not brought together with personal data of the user, unless this would have been agreed separately and explicitly.

Data protection provisions on the use and application of YouTube

The data controller has integrated components of YouTube in this website. YouTube is an internet video portal, which enables video publishers to present video clips free of charge, and also allows other users to view, rate and comment on these for free. YouTube permits the publication of all types of videos, so that complete films and television programs, as well as music videos, trailers or videos produced by the users themselves can be called up via the internet portal. The operator of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. By calling up individual pages of this website, which are operated by the data controller and in which a YouTube component (YouTube video) has been integrated, the internet browser on the information technology system of the affected person will be automatically prompted by the respective YouTube component to download an image of the respective YouTube component from YouTube. For further information on YouTube, visit httpss://www.youtube.com/yt/about/de/. Within the framework of this technical process, YouTube and Google receive information regarding the actual sub-pages of our website visited by the affected person. If the affected person is logged into YouTube at the same time, YouTube recognises which sub-page of our website containing a YouTube video is actually visited by the affected person when this sub-page is called up. This information is collected by YouTube and Google and assigned to the affected person by means of the respective YouTube account. YouTube and Google always receive information via the YouTube component that the affected person has visited our website if the affected person is logged into their YouTube account and accesses our website at the same time; this takes place irrespective of whether the affected person clicks on the YouTube video or not. If the affected person does not wish this form of information transmission to YouTube and Google, it is possible to prevent this transmission by logging out of the YouTube account before accessing our website. The data protection provisions published by YouTube can be viewed at httpss://www.google.de/intl/de/policies/privacy/. These provide information on the acquisition, processing and use of personal data by YouTube and Google.

Legal basis for processing

Art. 6 I lit. a GDPR serves as the legal basis for our company’s processing procedures, whereby we obtain consent for a certain processing purpose. If the processing of personal data is necessary in order to implement a contract to which the affected person is a contracting party, for example the data processing required in order to deliver goods or provide any other form of service or counter-performance, processing takes place on the basis of Art. 6 I lit. b GDPR. The same applies to processing procedures that are necessary in order to perform pre-contractual measures, for example in the event of inquiries regarding our products or services. If our company is subject to a legal obligation, which results in a necessity to process personal data, for example to fulfil fiscal obligations, then processing is based on Art. 6 I lit. c GDPR. In rare cases, the processing of personal data may be necessary in order to protect the vital interests of the affected person or another natural person. This would be the case for example if a visitor to our company were to sustain an injury and it were consequently necessary to inform a doctor, hospital or another third party of their name, age, health insurance details or other vital information. In this case, processing would be based on Art. 6 I lit. d GDPR. Finally, processing could be based on Art. 6 I lit. f GDPR. Processing procedures that take place on this legal basis, to which none of the previous legal bases apply, arise if processing is necessary in order to protect a justified interest of our company or a third party, insofar as this interest is not outweighed by the interests, basic rights and basic freedoms of the affected party. We are permitted to perform such processing procedures in particular because these have been specifically admitted by the European lawmakers. The legislation considers that a justified interest could be assumed if the affected person is a customer of the data controller (recital 47 clause 2 GDPR).

Justified interests in processing, which are pursued by the data controller or a third party

If the processing of personal data is based on Article 6 I lit. f GDPR then our justified interest is the performance of our commercial activity to the benefit of the well-being of all our employees and our shareholders.

Duration of storage of personal data:
The criterion for the duration of storage of personal data is the respective statutory retention period. After the retention period has expired, the corresponding data is routinely deleted insofar as it is no longer required for contract fulfilment or contract initiation. Legal or contractual regulations for the provision of personal data; necessity for contract conclusion; obligation of the affected person to provide the personal data; possible consequences of a failure to provide Please note that the provision of personal data may be prescribed in certain cases (e.g. tax legislation), or that it may be necessary due to contract regulations (e.g. information about the contract partner). It may sometimes be necessary with the conclusion of a contract, for the affected person to provide personal data, which must in turn be processed by us. The affected person is obligated to provide personal data to us for example if our company is concluding a contract with them. A failure to provide the personal data would result in it being impossible to conclude a contract with the affected party. Before the affected person provides personal data, they must contact one of our employees. Our employee will clarify with the affected person, whether the provision of the required personal data is prescribed by law or by the contract in the respective case, or whether it is essential due to conclusion of the contract, and furthermore what the consequences would be for the affected person with a failure to provide the personal data.

Existence of automated decision-making

We do not perform any automatic decision-making or profiling.

Name and address of the data controller

Eckelmann Service GmbH
Dr.-Kurt-Huber-Str. 22a
82031 Grünwald
Deutschland
Tel.: +49 89 59993901
E-Mail: info(at)hotel-gio.de
Internet: www.hotel-gio.de

Name and address of the data protection officer

contrust – Gesellschaft für betriebliche Prävention mbH
Alsterredder 8
22395 Hamburg
Deutschland
+49 40 808058300
info@consulting-trust.de

Please direct all data protection inquiries to our data protection officer.

We reserve the right to amend our data protection practices and these guidelines, in order to align them with any changes in the relevant laws or provisions where applicable, or to better meet with your needs. Any changes to our data protection practices shall be duly noted here. Please observe the latest valid version of the data protection declaration in this regard.

Munich, Mai 2023