Privacy Policy - Burghotel Staufeneck
Section 1 General
We will only process your personal data (e.g., title, name, address, e-mail address, telephone number) in accordance with the provisions of German data protection law and the data protection law of the European Union (EU). The following regulations also inform you about your rights and the party responsible for your data processing, in addition to the processing purposes, recipients, legal bases and storage periods. This privacy policy only applies to our websites. If you are redirected to other sites via links on our pages, please inform yourself via the respective websites about they handle your data.
Section 2 Communication
(1) Purpose of processing
We process your personal data that you provide us via e-mail, contact form, etc. in order to answer and address your enquiries. You are not obliged to provide us with your personal data. However, without your e-mail address, we will not be able to reply to you by e-mail.
(2) Legal basis
a) If you have granted us your express consent to process your data, Art. 6 (1a) GDPR is the legal basis for this processing.
b) If we process your data to carry out pre-contractual activities, Art. 6 (1b) GDPR is the legal basis.
c) In all other cases (in particular when using a contact form), Art. 6 (1f) GDPR is the legal basis.
RIGHT OF OBJECTION: You have the right to object to data processing that is based on Art. 6 (1f) GDPR and does not serve direct advertising for reasons that arise from your specific situation at any time.
However, in the case of direct advertising, you may object to the processing at any time without stating reasons.
(3) Legitimate interest
Our legitimate interest in processing is to communicate with you promptly and to respond to your enquiries cost-effectively. If you provide us with your address, we reserve the right to use it for direct postal advertising. You may protect your data protection interests by passing on data sparingly (e.g., by using a pseudonym).
(4) Categories of recipients
Hosting providers, shipping providers for direct advertising
(5) Storage period
Your data will be deleted when the circumstances indicate that your enquiry or the specific issue has been conclusively resolved.
However, if a contract is concluded, we will retain the data required under commercial and tax law for the periods specified by law, generally for a period of ten years (cf. Sec. 257 HGB, Sec. 147 AO).
(6) Right of revocation
You have the right to revoke your consent to processing based on your consent at any time.
Section 3 Web analysis with Google Analytics
(1) Purpose of processing
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics utilises cookies. These are text files that are stored on your device and enable the analysis of your use of the website. The information concerning your use of this website generated by the cookie is usually transferred to a Google server located in the USA and stored there. If this website generates an anonymous IP, Google will truncate your IP address within Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will your full IP address be transferred to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports about website activity and to provide other services associated with the website usage or the Internet usage for the website operator.
(2) Legal basis
The legal basis for this processing is Art. 6 (1a) GDPR.
(3) Categories of recipients
Google and its affiliates.
(4) Transfer to a third country
Google Ireland Limited is an affiliated company of Google LLC. Google LLC is located in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043).
(5) Storage period
Unlimited
(6) RIGHT OF OBJECTION
You may configure your browser software to prevent cookies from being saved; However, we wish to note that in this case you may not be able to use all of the functions of this website to their full extent. Furthermore, you can also prevent the recording of the data (incl. your IP address) generated by the cookies regarding your use of the website and its transfer to Google along with the processing of this data by Google by downloading and installing the plug-in available via the following link: optout
You can also prevent the collection by setting an opt-out cookie. If you would like to prevent the future collection of your data when visiting this website, please click here to deactivate Google Analytics
Section 4 Your rights as a data subject
If your personal data is processed, you are a data subject according to the GDPR and you have the following rights vis-à-vis us as the data controller:
- Right to information: You may request information about your personal data which we process pursuant to Art. 15 GDPR.
- Right to correction: If your information is not (or no longer) correct, you may request correction in accordance with Art. 16 GDPR. If your data is incomplete, you may request that it be completed.
- Right to deletion: You may request the deletion of your personal data pursuant to Art. 17 GDPR.
- Right to limitation of processing: In accordance with the provisions of Art. 18 GDPR, you have the right to demand the restriction of the processing of your personal data.
- Right to data transfer: Pursuant to Art. 20 GDPR, you have the right to receive your personal data that you have provided us in a structured, common and machine-readable format or to request the transfer of this data to another data controller.
- Right of withdrawal of the declaration of consent under data protection law: In accordance with Art. 7 (3) GDPR, you have the right to revoke your declaration of consent under data protection law at any time. The lawfulness of the processing carried out on the basis of the consent until revocation shall not be affected.
- Right to submit a complaint to a supervisory authority: If you are of the opinion that the processing of your personal data violates the GDPR, you have the right to submit a complaint to a supervisory authority (in particular in the Member State of your place of residence, place of work or the place of the alleged violation) in accordance with Art. 77 GDPR.
Please also note your right to object as per Art. 21 GDPR:
a) General: justified objection required: If your personal data is processed
to protect our overriding legitimate interest (legal basis according to Art. 6 (1f) GDPR) or
in the public interest (legal basis according to Art. 6 (1 e) GDPR),
you have the right to object to the processing at any time based on grounds relating to your specific situation; this also applies to profiling based on the provisions of the GDPR.
If you exercise your right to object, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing is used for the establishment, exercise or defence of legal claims.
b) Special case of direct advertising: simple objection is sufficient
Where your personal data is processed for direct marketing purposes, you have the right to object to the processing of your personal data for such marketing at any time. This also includes profiling to the extent it is related to such direct marketing.
If you object to processing for direct marketing purposes, your personal data shall no longer be processed for such purposes.
Data controller: Burghotel und Restaurant Staufeneck GmbH & Co. KG
Burg Staufeneck
73084 Salach, Germany
Telephone: +49 71 62 / 93 34 4-0
info@burg-staufeneck.de
Contact details of our Data Protection Officer:
Ramona Rack, Burg Staufeneck
73084 Salach, Germany
info@burg-staufeneck.de