Data protection details www.hotel-nieder.de
Contact address of the responsible person
Josef Nieder
In der Gasse
59909 Bestwig-Ostwig (Sauerland)
Tel.: 02904 / 97100
Fax: 02904 / 971070
mail(at)hotel-nieder.de
General
This privacy policy contains all necessary information you need to know as user of our internet site, on how, to what extent and for what purpose we or third parties collect and use data from you. The collection and use of your data is fully in accordance with the provisions of the General Data Protection Regulation (GDPR). We are particularly committed to the confidentiality of your personal information and therefore work strictly within the limits set by law. The collection of these personal data takes place on a voluntary basis, if this is possible for us. Additionally, we will only pass on this data to third parties with your express consent. We ensure high security for highly confidential data such as payment transactions or for your requests to us by using SSL encryption. However, we do not want to miss the opportunity to point out the general dangers of internet usage that we have no influence on. Especially in e-mail traffic, your data is not safe and may be recorded by third parties anyway, if no further precautions have been taken.
Data capture
Online request
We collect, process and use the personal data provided by you in our contact form only for the purpose of general inquiry and purpose-based support. The following data is mandatory information that we need in order to process your request:
- Name
- Telephone number
- E-Mail address
- Your message
It is also possible to contact us via the provided e-mail address. In this case, the user's personal data transmitted by e-mail will be stored for the named purpose.
The legal basis for processing the data is our legitimate interest in answering your request in accordance with article 6, paragraph 1, section f GDPR. If your contact is aimed at concluding a contract, then additional legal basis for the processing is article 6 paragraph 1 section b GDPR. For your voluntary information, the legal basis is article 6 (1) section a GDPR.
Your data will be deleted after the processing of your request has been finalised. Deletion of the data will take place if the cicrumstances allow the conclusion that the respective matter has been finally clarified and provided that this does not go against any statutory storage requirements.
Gift voucher order
We collect, process and use the personal data provided by you - through our form, used for ordering a voucher - only for the purpose of processing your request and purpose-based support. The data entered into the input mask are transmitted to us and stored. These data are:
- Value
- Use
- Mr/Mrs/Ms
- First name
- Family name
- Street
- Postal code
- City
- Telephone number
- E-mail address
- From
- To
- Company
- Department
- Salutation (delivery address)
- First name (delivery address)
- Family name (delivery address)
- Street (delivery address)
- Postal code (delivery address)
- City (delivery address)
- Payment
The legal basis for processing the data is our legitimate interest in answering your request in accordance with article 6, paragraph 1, section f GDPR. If your contact is aimed at concluding a contract, then additional legal basis for the processing is article 6 paragraph 1 section b GDPR. For your voluntary information, the legal basis is article 6 (1) section a GDPR.
Your data will be deleted after the processing of your request has been finalised. Deletion of the data will take place if the cicrumstances allow the conclusion that the respective matter has been finally clarified and provided that this does not go against any statutory storage requirements.
Server logfiles
The server logfiles are data collected by our provider when you access our website. The log files contain the access date and time, the amount of data, the browser used for the access and its version, the operating system used, the domain name of the provider you have requested, the site from which you came to our offer (referrer URL) and your IP address. The logged data are used exclusively for data security purposes, in particular for the defense against attacks on our web server (legal basis: article 6 paragraph 1 f GDPR). They are neither used for the creation of individual user profiles nor passed on to third parties and they will be deleted after 9 weeks, at the latest. After 7 days, your IP address will be anonymized so that it can no longer be assigned to you. We reserve the statistical evaluation of anonymized data sets.
Your rights
Right of access by the data subject
At any time and free of any charges, you can obtain information about the personal data, we have stored about you, as well as the origin, the recipient and the purpose of the data collection, besides the data processing and storage period (article 15 GDPR).
Right to rectification
You can request the correction or addition of incorrect or incomplete data (article 16 GDPR).
Right of withdrawal
You have the right to withdraw your consent at any time for the future (article 7 paragraph 3 GDPR).
Right to object
You can object to data processing at any time on the grounds of your specific situation (article 21 paragraph 1 GDPR).
Right to have data deleted
In certain cases, you may request the deletion of data - especially if the data are no longer required or improperly processed for the intended purpose, or if you revoke your consent (in line with article 7 (3) GDPR) or an objection has been stated (in line with article 21 paragraph 1 GDPR).
Right to restrict processing data
Under certain circumstances, you can request the limitation of data, aso far as removal is not possible or if the removal obligation is disputed (article 18 GDPR).
Right to be notified
If you have the right to correct, delete or restrict the processing, we are obliged to notify all recipients to whom the personal data disclosed have been corrected or deleted or processing restricted, unless this proves to be impossible or it requires a disproportionate effort. Furthermore, you have the right to be informed about these recipients (art. 19 GDPR).
Right to data portability
You can receive your information provided to us in a conventional machine-readable format, such as CSV and, if required, forward it to others (art. 20 GDPR).
Automated individual decision-making, including profiling
According to the EU General Data Protection Regulation you also have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This shall not apply if the decision
- is necessary for entering into, or performance of, a contract between you and the responsible person
- is authorised by Union or Member State Law to which the responsible person is subject and which also lays down suitable measures to safeguard your rights, and freddoms and legitimate interests or
- is based on your explicit consent.
In the cases referred to, the responsible person shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the responsible person, to express his point of view and to contest the decision.
Decisions referred to above, shall not be based on special categories of personal data referred to in article 9, paragraph 1 GDPR, unless article 9, paragraph 2, section a or g applies and suitable measures to safegueard your rights and freedoms and legitimate interests are in place.
Right to appeal
You can complain at any time about the data processing at the responsible supervisory authority („Landesbeauftragte für Datenschutz und Informationsfreiheit“, North Rhine- Westphalia, Kavalleriestr. 2-4, 40213 Düsseldorf, Germany ).
SSL encryption
Our website uses SSL encryption when it comes to the transmission of confidential or personal content of our users. This encryption is activated, for example, in the processing of payments and requests that you make to us through our website. Please make sure that the SSL-encryption is activated by you during activities. The use of encryption is easy to recognize: The display in your browser line changes from "http: //" to "https: //". SSL encrypted data cannot be read by third parties. Submit your confidential information only if SSL encryption is activated and in case of doubt contact the above mentioned contact address.
Use of cookies
We use cookies on our website. Cookies are text files that are placed and stored on the user's computer system in or via a web browser. When you access a website, a cookie can be saved in your operating system. It contains a characteristic string that enables a clear identification of the browser when the website is accessed again.
We use cookies in order to design our website in a more user-friendly way. Some elements of our website require the browser to be recognized even after a page is changed.
The EU ePrivacy Directive in connection with the Act to Regulate Data Protection and Privacy in Telecommunications and Telemedia (TTDSG) are the legal basis for the storage of cookies, device identifiers, and similar tracking technologies or for the storage of information in the terminal device of the end user and access to this information.
Please note that the legal bases for the processing of the personal data collected in this context then result from the General Data Protection Regulation (Article 6(1) Sentence 1(a) GDPR). The relevant legal basis for the processing of personal data in each specific case can be found on the respective cookie or the respective processing itself.
The primary legal basis for the storage of information in the end user's terminal equipment - consequently in particular for the storage of cookies - is their consent, Section 25(1) sentence 1 TTDSG. Consent is given when visiting our website - although this does not have to be given, of course - and can be revoked at any time in the cookie settings.
According to Section 25(2) No. 2 TTDSG, consent is not required if the storage of information in the end user's terminal equipment or access to information already stored in the end user's terminal equipment is absolutely necessary for the provider of a telemedia service to be able to provide a telemedia service expressly requested by the user.
You can see from the cookie settings which cookies are to be classified as absolutely necessary (often also referred to as "technically necessary cookies") and therefore fall under the exception of Section 25(2) TTDSG and therefore do not require consent.
Online ad cookies can be managed via the following links: for the USA, for Europe.
Additional tools and plugins
Seekda
We use Seekda widgets. The operator of the widget is Seekda GmbH, Neubaugasse 10/15, 1070 Vienna, Austria. Personal data are only collected, processed and used by Seekda to the extent that is expressly permitted by the relevant data protection regulations or if the data subject has also given his effective consent. Personal data will only be collected, processed and used by Seekda if you choose to use Seekda yourself, e.g. within the scope of a registration, a survey, or to carry out a contract and this is done with your express consent. After termination of a contractual relationship, your personal data will be deleted. Excluded are personal data in respect of which statutory retention periods must be observed. These personal data are blocked by Seekda. The Booking Engine now requires guests to accept the privacy policy in addition to the terms and conditions and booking conditions as defined in their policies. Further information can be found in the privacy policy of Seekda.
TrustYou
On our website we use the Social Media Plugin of TrustYou Munich Center of Technology, Agnes-Pockels-Bogen 1, 80992 Munich. Trust You is a service that collects reviews of hotels and processes them into reports. We use data from Trust You to provide our visitors with independent reviews about service. For more information, please refer to the privacy policy of TrustYou.
Termin2go
We use the applications "Termin2go". It is cloud-based online appointment booking and customer management software. We use the software for managing appointment and customer data. It is offered by Schiela Web Development, Schöneggstrasse 13, 8004 Zürich. Switzerland. More information about "Termin2go" and the privacy policy can be found here: https://www.termin2go.com/datenschutz.
Google Analytics
If you have given your consent, this website uses Google Analytics 4, a web analytics service provided by Google LLC. The responsible party for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
Scope of processing
Google Analytics uses cookies that enable an analysis of your use of our websites. The information collected by means of the cookies about your use of this website is generally transferred to a Google server in the USA and stored there.
Google Analytics 4 has IP address anonymization enabled by default. Due to IP anonymization, your IP address will be shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
During your website visit, your user behavior is recorded in the form of "events". Events can be:
- Page views
- First visit to the website
- Start of session
- Your "click path", interaction with the website
- Scrolls (whenever a user scrolls to the bottom of the page (90%))
- clicks on external links
- internal search queries
- interaction with videos
- file downloads
- seen / clicked ads
- language settings
Also recorded:
- Your approximate location (region)
- your IP address (in shortened form)
- technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
- your internet service provider
- the referrer URL (via which website/advertising medium you came to this website)
Purposes of processing
On behalf of the operator of this website, Google will use this information to evaluate your pseudonymous use of the website and to compile reports on website activity. The reports provided by Google Analytics serve to analyse the performance of our website.
Recipients
Recipients of the data are/may be:
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor under Art. 28 DSGVO).
- Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
- Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
It cannot be ruled out that US authorities may access the data stored by Google.
Third country transfer
Insofar as data is processed outside the EU/EEA and there is no level of data protection corresponding to the European standard, we have concluded EU standard contractual clauses with the service provider to establish an appropriate level of data protection. The parent company of Google Ireland, Google LLC, is based in California, USA. A transfer of data to the USA and access by US authorities to the data stored by Google cannot be ruled out. The USA is currently considered a third country from a data protection perspective. You do not have the same rights there as within the EU/EEA. You may not be entitled to any legal remedies against access by authorities.
Duration of storage
The data sent by us and linked to cookies are automatically deleted after 14 months. The deletion of data whose retention period has been reached occurs automatically once a month.
Legal basis
The legal basis for this data processing is your consent pursuant to Art.6 para.1 p.1 lit. a GDPR.
Revocation
You can revoke your consent at any time with effect for the future by accessing the cookie settings and changing your selection there. The lawfulness of the processing carried out on the basis of the consent until the revocation remains unaffected.
You can also prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to reject all cookies, this may result in a restriction of functionalities on this and other websites. In addition, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google, by not giving your consent to the setting of the cookie or downloading and installing the browser add-on to disable Google Analytics here.
For more information on Google Analytics' terms of use and Google's privacy policy, please visit https://marketingplatform.google.com/about/analytics/terms/us/ and at https://policies.google.com/?hl=en.
Google Tag Manager
This website uses the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The Google Tag Manager is a tool that allows us to embed tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, does not store cookies and does not perform any independent analyses. It only serves to manage and display the tools integrated using it. The Google Tag Manager does, on the other hand, record your IP address, which is transmitted to Google.
The Google Tag Manager only collects your IP address if you have agreed to the transfer of data by Google Analytics. You can revoke this permission at any time using this link.
Google Maps
If you have consented that data are transmitted to Google Maps, this website will use the functions of Google Maps. This allows us to show you interactive maps on our website and you to conveniently use the map features.
By visiting the website, Google receives the information that you have accessed the corresponding subpage within our website. In addition, the following data may be transmitted to Google:
- Information about the browser type and version used
- The operating system
- Information about your internet service provider
- Your IP address
- Access date and time
- Website, from which you came to our website
- Websites that you visit through our website
This is done regardless of whether Google provides a user account that you are logged in to, or if there is no user account. When you're logged into Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data as usage profile and uses this for purposes of advertising, market research and / or tailor-made website design. Such an evaluation is done in particular (even for users who are not logged in) to provide appropriate advertising and to inform other users of the social network about their activities on our website. You have the right to object to the creation of this user profile, and you must make this known to Google.
For more information on the purpose and scope of the data collection and its processing by the plug-in provider, please refer to the provider's privacy policy. There you will also find further information about your rights and settings options for the protection of your privacy. Google also processes your personal information in the United States.
The storage of Google Maps cookies and the transmission of data to Google Maps is based on Article 6 (1) lit. a GDPR and shall occur only with your consent. You can revoke your consent at any time by clicking this link.
Information about Google:
- Google Dublin, Google Ireland Ltd.
Gordon House, Barrow Street
Dublin 4
Ireland
Fax: +353 (1) 436 1001. - Terms of use
- Details privacy
- Privacy policy
YouTube
If you have consented that data are transmitted to YouTube, this website will use the plugins from the Google-powered YouTube page. Site operator is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our YouTube plug-in-enabled sites, you will be connected to the servers of YouTube. The Youtube server will be informed which of our pages you visited. If you're logged in to your YouTube account, YouTube allows you to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.
Further information on the handling of user data can be found in the privacy policy of
YouTube at: https://www.google.com/intl/en/policies/privacy
The storage of YouTube cookies and the transmission of data to YouTube is based on Article 6 (1) lit. a GDPR and shall occur only with your consent. You can revoke your consent at any time by clicking this link.
Changes to the privacy policy
Please, note that privacy policies and privacy practices, such as e.g. in the case of Google, can change constantly. It is therefore advisable and necessary to keep up to date with changes in the legal provisions and practice of companies. Accordingly, we reserve the right to change the contents of this Privacy Policy at any time, if required.
Update: Mai 2023