Hotel am Badersee - Privacy Policy Hotel am Badersee - Privacy Policy

Privacy Policy

1. GENERAL NOTES & MANDATORY INFORMATION


DATA PROTECTION

As the operator of the Hotel am Badersee, meine Hotel und Gastro GmbH takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. We process personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the Internet (e.g. when communicating by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Should offers from other providers be accessible from our website (e.g. via links), our data protection information does not apply to these, as we have no influence on the collection and use of data by the other provider. In this case, please refer to the privacy policy of the provider in question.

NOTICE CONCERNING THE PARTY RESPONSIBLE FOR THIS WEBSITE

The party responsible for processing data on this website is:

meine Hotel und Gastro GmbH
Am Badersee 1-5
82491 Grainau

Phone: 08821/821-0
e-mail: info@hotelambadersee.de 

The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).

REVOCATION OF YOUR CONSENT TO THE PROCESSING OF YOUR DATA

Many data processing operations are only possible with your express consent. You may revoke your consent at any time with future effect. A common email making this request is sufficient.

RIGHT TO FILE COMPLAINTS WITH REGULATORY AUTHORITIES

If there has been a breach of data protection legislation, the person affected may file a complaint with the competent regulatory authorities, in our case:

Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach

RIGHT TO DATA PORTABILITY

You have the right to have data which we process based on your consent or in fulfillment of a contract automatically delivered to yourself or to a third party in a standard, machine-readable format. If you require the direct transfer of data to another responsible party, this will only be done to the extent technically feasible.

SSL-ENCRYPTION

This site uses SSL-encryption for security reasons and for the protection of the transmission of confidential content, such as the inquiries you send to us as the site operator. You can recognize an encrypted connection in your browser's address line when it changes from "http://"; to "https://"; and the lock icon is displayed in your browser's address bar.

If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.

INFORMING, BLOCKING, DELETING

As permitted by law, you have the right to be provided at any time with information free of charge about any of your personal data that is stored as well as its origin, the recipient and the purpose for which it has been processed. You also have the right to have this data corrected, blocked or deleted. You can contact us at any time using the address given in our legal notice if you have further questions on the topic of personal data.

 

2. DATA PROTECTION OFFICER


STATUTORY DATA PROTECTION OFFICER

We have appointed a data protection officer for our company:

meine Volksbank Raiffeisenbank eG
Datenschutzbeauftragter
Tegernseestraße 20
83022 Rosenheim

Telephone: 08031/185-22752
Email: datenschutz@vb-rb.de 

3. COOKIES

Our website uses an external solution by Usercentrics to manage cookies. Below you will find a list of cookies (in German).

Web pages use cookies. Cookies do not harm your computer and do not contain any viruses. Cookies help make our website more user-friendly, efficient, and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies." They are automatically deleted after your visit. Other cookies remain in your device's memory until you delete them. These cookies make it possible to recognize your browser when you next visit the site.

You can configure your browser to inform you about the use of cookies so that you can decide on a case-by-case basis whether to accept or reject a cookie. Alternatively, your browser can be configured to automatically accept cookies under certain conditions or to always reject them, or to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of this website.

Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested are stored on the basis of Art. 6 para. 1 lit. (f) GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimised provision of its services. Insofar as other cookies (e.g. cookies for analysing your surfing behaviour) are stored, this is always done on the basis of your consent, which can be controlled via the consent banner in accordance with Art. 6 para. 1 lit. (a) GDPR. It is possible to change or withdraw this consent at any time for the future via the consent banner.

4. SERVER LOG FILES

Our website collects a range of general data and information each time it is accessed by a data subject or an automated system. This anonymous visitor data is logged and stored in the log files of our servers in the form of a data record. This data record is made up as follows:

  • User agent (browser type and version, operating system used)
  • Date and time of the server request
  • HTTP status code
  • Transferred file size
  • Requested document

This stored data is analysed exclusively for statistical purposes. We do not draw any conclusions about natural persons from this data. This information is only required in order to

  • deliver the content of our website correctly and optimise it for you,
  • ensure the long-term functionality of our IT systems and the technology of our website
  • and to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack. Beyond this, this information is not passed on to third parties.

This anonymously collected data and information is analysed by us both statistically and with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimal level of protection for the personal data processed by us. The anonymous data of the server log files are stored separately from all personal data provided by you on the website and deleted after 7 days.

5. DATA INPUT BY THE USER

5.1. CONTACT FORM

This website offers you various contact forms for the purpose of contacting us and communicating directly with us. If you send us enquiries via this channel, your details from the enquiry form, including the contact data you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions.

The basis for this processing of your personal data is Art. 6 para. 1 lit. f GDPR, whereby our legitimate interest is the careful processing of your enquiry. We delete your data in this regard when the purpose for which you have provided us with your data has been fulfilled or completed and we are not authorised or obliged to continue storing it for legal reasons. You can object to the processing of this data at any time. To do so, please send a corresponding message to datenschutz@vb-rb.de. We would also like to point out that the data subject rights described in this declaration (see section 7.) also apply in full to this functionality.

5.2. ONLINE BOOKING ENGINE

This website offers you the option of booking a hotel stay. For this purpose, we use the SmartIBE tool from our service provider SmartHOTEL, 2811 EP Reeuwijk, Netherlands. The basis for this processing of your personal data is Art. 6 para. 1 lit. (b) GDPR, the fulfilment of contractual agreements or the implementation of pre-contractual measures. We delete your data in this regard when the purpose for which you have provided us with your data has been fulfilled or completed and we are not authorised or obliged to continue storing it for legal reasons. You can object to the processing of this data at any time. To do so, please send a corresponding message to datenschutz@vb-rb.de. We would also like to point out that the data subject rights described in this declaration (see section 7.) also apply in full to this functionality.

5.3. NEWSLETTER

If you would like to receive the newsletter offered on the website, we need an e-mail address from you. No further data is collected, or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.

The processing of the data entered takes place exclusively on the basis of your consent (Art. 6 para. 1 lit. (a) GDPR). You can revoke your consent to the storage of the data, the e-mail address and its use for sending the newsletter at any time, for example via the "unsubscribe" link or by e-mail to datenschutz@vb-rb.de. The legality of the data processing operations that have already taken place remains unaffected by the cancellation.

The data you have stored with us for the purpose of receiving the newsletter will be stored by us until you unsubscribe/unsubscribe from the newsletter and deleted after cancellation. Data stored by us for other purposes remains unaffected by this.

This website uses CleverReach to send newsletters. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany. CleverReach is a service that can be used to organise and analyse the sending of newsletters. The data you enter for the purpose of receiving the newsletter (e.g. e-mail address) is stored on CleverReach's servers in Germany or Ireland.

The data processing takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the cancellation.

The data you have provided to us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted from both our servers and the CleverReach servers after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g. e-mail addresses for the member area) remain unaffected by this.

For more information, please refer to CleverReach's privacy policy at: https://www.cleverreach.com/de/datenschutz/.

Contract for commissioned data processing

We have concluded a contract with CleverReach for commissioned data processing and fully implement the strict requirements of the German data protection authorities when using CleverReach.

We would also like to point out that the data subject rights set out in this declaration (see section 7.) also apply in full to this functionality.

5.4. JOBS WEBPAGE: DATA PROTECTION FOR APPLICANTS AND DURING THE APPLICATION PROCESS 

We collect and process personal data from applicants for the purpose of handling the application process. The basis for this processing of your personal data is Art. 6 para. 1 lit. b GDPR in conjunction with § 26 BDSG (employee data protection in connection with the implementation of pre-contractual measures). Processing takes place via the application form on our careers page at: https://www.hotelambadersee.de/en/job-application-form

We use the documents submitted by the applicant for this purpose. The specific personal data that is collected in the process can be seen from the input screen and the required attachments. We delete your relevant data when the purpose for which you have provided us with your data has been fulfilled or completed and we are not authorised or obliged to continue storing it for legal reasons.

Within ABG GmbH, access to the data is granted to those departments that require it to review the application. These are, for example, the personnel managers and the managers concerned.

If we conclude an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. In the event that no employment contract is concluded with the applicant, the application documents will be deleted six months after notification of the rejection decision, provided that no other legitimate interests on our part stand in the way of deletion. We would like to point out that the data subject rights described in this declaration (see section 7.) also apply in full to this functionality. If you have any questions in this regard, please contact our company data protection officer.

 

6. ANALYTICS & ADVERTISING


6.1. GOOGLE ANALYTICS

This website uses Google Analytics, a web analytics service. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses the so-called "cookies". These are text files that are stored on your computer and enable your use of the website to be analysed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

Google Analytics cookies are stored on the basis of the consent you have given via the consent banner in accordance with Art. 6 para. 1 lit. (a) GDPR for the purpose of anonymised analysis of user behaviour.

IP anonymization

We have activated the IP anonymization feature on this website. Your IP address will be shortened by Google within the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases is the full IP address sent to a Google server in the US and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website activity and Internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.

Browser plugin

You can prevent these cookies being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Outsourced data processing

We have entered into an agreement with Google for the outsourcing of our data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic data collection by Google Analytics

This website uses Google Analytics' demographic features. This allows reports to be generated containing statements about the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google and third-party visitor data. This collected data cannot be attributed to any specific individual person. You can disable this feature at any time by adjusting the ads settings in your Google account or you can forbid the collection of your data by Google Analytics as described in the section "Refusal of data collection".

6.2. GOOGLE ADS

Provided that you have given your consent in the consent banner, the following procedure will be carried out:

GOOGLE ADS CONVERSION TRACKING

We use the online advertising programme "Google Ads", including "DoubleClick.Ad" and "Google Syndication", which allows advertisers to place ads both in Google's search engine results and in the Google advertising network. As part of this, we use Google Ads Conversion Tracking. Google Ads Conversion Tracking uses cookies. These cookies lose their validity after 30 days and are not used for personal identification.

As soon as you see or click on our advert in the Google search or advertising network, a cookie is stored on your computer. If you visit certain pages of our website while the cookie is valid, both we and Google can recognise that you have clicked on our ad and have been redirected to our site.

The information collected with the help of the conversion cookie is used to create conversion statistics for us as a Google Ads customer. We find out the total number of users who clicked on our advert and were redirected to a page with a conversion tracking tag.

The personal information generated by the conversion cookies is stored. Each time you visit our website, personal data, including the IP address of the internet connection used by the data subject, is therefore transmitted to Google in the United States of America. This data is stored by Google in the United States of America.

Users who do not wish to participate in tracking can also deactivate the Google Conversion Tracking cookie via their Internet browser under "User settings". In this case, you will not be included in the conversion tracking statistics. You can also find more information in the Google privacy policy, which can be accessed via this link: https://www.google.de/intl/de/policies/privacy/.

GOOGLE REMARKETING

This website also uses Google Dynamic Remarketing as part of Google Ads. This technology allows users who have already visited our website or our YouTube channel and thus shown interest to be addressed again through targeted advertising on the pages of the Google Partner Network. The adverts are displayed through the use of cookies. With the help of text files, user behaviour when visiting the website can be analysed and then used for advertising according to your interests.

We would like to point out that Google has its own data protection guidelines which are independent of ours. We accept no responsibility or liability for these policies and procedures.

For more information, please refer to the Google privacy policy: https://www.google.de/intl/de/policies/privacy/.

THIRD-PARTY PROVIDER INFORMATION:

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001

User Policy: https://policies.google.com/terms?hl=de

Overview of Data Protection Policy: https://policies.google.com/privacy/update?hl=de

 

7. DATA SUBJECT RIGHTS

The EU General Data Protection Regulation grants data subjects comprehensive rights regarding the processing of their data. These rights to which you are entitled are outlined and explained below.

7.1. RIGHT TO CONFIRMATION

Every data subject has the right to obtain confirmation from the controller as to whether personal data relating to him or her are being processed. If you wish to exercise this right of confirmation, you may contact our Data Protection Officer at any time.

7.2. RIGHT OF ACCESS

Every person affected by the processing of personal data has the right to receive information free of charge from the controller at any time about the personal data stored about him or her, as well as a copy of this information. This right of access includes the following contents:

  • the purposes of processing;
  • the categories of personal data processed;
  • the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organisations;
  • if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
  • the existence of a right to obtain the rectification or erasure of personal data concerning him or her, or to obtain the restriction of processing by the controller, or a right to object to such processing;
  • the existence of a right of appeal to a supervisory authority;
  • if the personal data are not collected from the data subject, any available information on the origin of the data;
  • the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

In addition, you have the right to be informed whether your personal data has been transferred to a third country or to an international organisation. If this is the case, you also have the right to obtain information about the appropriate safeguards in connection with the transfer. If you wish to make use of this right to information, you can contact our company data protection officer at any time.

7.3. RIGHT TO RECTIFICATION

Any person affected by the processing of personal data has the right to demand the rectification of any inaccurate personal data concerning him or her without undue delay. You also have the right to request that incomplete personal data be completed, including by means of a supplementary declaration, taking into account the purposes of the processing.

If you wish to make use of this right of rectification, you can contact our company data protection officer at any time.

7.4. RIGHT TO BE FORGOTTEN

Any person affected by the processing of personal data has the right to demand from the controller that the personal data concerning them be deleted immediately, provided that one of the following reasons applies and insofar as the processing is not necessary for other reasons:

  • The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
  • The data subject withdraws consent on which the processing is based according to point (a) of Article 6(1) of the GDPR, or point (a) of Article 9(2) of the GDPR, and where there is no other legal ground for the processing.
  • The data subject objects to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) of the GDPR.
  • The personal data have been processed unlawfully.
  • The personal data must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
  • The personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

If one of the above reasons applies and you wish to have your personal data stored by us deleted, you can contact our company data protection officer at any time. We will then delete your data immediately, provided that there are no other legal reasons to the contrary.

If we have made the personal data public and our company is obliged to erase your personal data as the controller pursuant to Article 17(1) GDPR, we will take reasonable steps, including technical measures, taking into account the available technology and the cost of implementation, to inform other controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data, unless the processing is necessary. Our company data protection officer will take the necessary measures in individual cases.

7.5. RIGHT TO RESTRICT PROCESSING

Any person affected by the processing of personal data has the right to request the controller to restrict processing if one of the following conditions is met:

  • The accuracy of the personal data is contested by you as the data subject. For the period of time required by us to verify the accuracy of your personal data, a restriction of the processing of the personal data at hand is carried out by us.
  • The processing is unlawful and you object to the erasure of the personal data and instead request the restriction of the use of the personal data.
  • We no longer need your personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims.
  • You have lodged an objection to the processing pursuant to Art. 21 (1) DS-GVO and it is not yet clear whether the legitimate grounds of our company for processing the data outweigh your legitimate grounds.

If one of the above-mentioned conditions applies and you wish to request the restriction of the processing of personal data stored by us, you can contact our company data protection officer at any time. They will then immediately arrange for the restriction of the processing of the data concerned.

7.6. RIGHT TO DATA PORTABILITY

You also have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format. You also have the right to have this data transferred to another controller at your request, provided that the processing is based on consent pursuant to Art. 6(1)(a) DS-GVO or Art. 9(2)(a) DS-GVO or on a contract pursuant to Art. 6(1)(b) DS-GVO and the processing is carried out using automated procedures. However, this is not possible in cases where the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

Furthermore, you have the right to have the personal data transferred directly from us to another controller, insofar as this is technically feasible and insofar as this does not affect the rights and freedoms of other persons.

To assert the right to data portability, you can contact our company data protection officer at any time.

7.7. RIGHT TO OBJECTION

Any person affected by the processing of personal data has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her which is carried out on the basis of Article 6(1)(e) or (f) DS-GVO. This also applies to profiling based on these provisions

We will no longer process your personal data in the event of your objection, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

In addition, you have the right to object on grounds relating to your particular situation to the processing of personal data concerning you which is carried out by us for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) DS-GVO, unless such processing is necessary for the performance of a task carried out in the public interest.

To exercise the right of objection, you can contact our company data protection officer directly.

7.8. RIGHT TO WITHDRAW YOUR CONSENT UNDER DATA PROTECTION LAW

Any person affected by the processing of personal data has the right to withdraw consent to the processing of personal data at any time.

If you wish to exercise your right to revoke consent, you may contact our Data Protection Officer at any time.

7.9. AUTOMATED DECISIONS IN INDIVIDUAL CASES INCLUDING PROFILING

Automated decisions in individual cases including profiling are not used on our website.

 

8. PLUGINS & TOOLS


8.1. GOOGLE MAPS

This site uses the Google Maps map service via an API. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Service use is only possible with explicit consent. You will be asked to give your consent when you access the service. A data connection to Google will only be established after consent has been given. The legal basis for the processing of your personal data is Art. 6 para. 1 lit. a GDPR. You can revoke your consent to the processing of data at any time via our consent banner in the cookie settings. The legality of the data processing operations that have already taken place remains unaffected by the cancellation.

To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.

Further information about handling user data, can be found in the data protection declaration of Google at https://www.google.de/intl/de/policies/privacy/.

8.2. GOOGLE RECAPTCHA

We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on our websites. This service is provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google").

reCAPTCHA is used to check whether the data entered on our website (such as on a contact form) has been entered by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, how long the visitor has been on the website, or mouse movements made by the user). The data collected during the analysis will be forwarded to Google.

The reCAPTCHA analyses take place completely in the background. Website visitors are not advised that such an analysis is taking place.

Data processing is based on Art. 6 (1) (f) DSGVO. The website operator has a legitimate interest in protecting its site from abusive automated crawling and spam.

For more information about Google reCAPTCHA and Google's privacy policy, please visit the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

8.3. MATTERPORT

This website uses the service of Matterport, Inc. to display 3D animations for videos, 352 E. Java Dr., Sunnyvale, CA 94089, USA (https://matterport.com/de).

The use of the service is necessary for technical reasons to display the 3D animated videos on the website. The service is used as part of the balancing of interests in accordance with Art. 6 para. 1 lit. f GDPR and serves the purpose of an appealing presentation.

Further information on data protection issues relating to the service provider can be found at https://matterport.com/de/privacy-policy.

8.4. SOCIAL MEDIA LINKS

Our website contains links to social networks such as Linkedin, Instagram, YouTube, etc. When you access the parts of our website that contain such links, no personal data is transmitted to the operators of these social networks. Only when you click on the link and thereby visit the social network in question does the operator of the network visited receive personal data relating to you. For more information about the data processing that takes place when you visit a social network and the controller within the meaning of Art. 4 No. 7 GDPR, please refer to the website of the respective social network.

 

9. LANGUAGE PRECEDENCE

This document is executed in two languages. In the event of discrepancy between the two versions, the German version shall prevail for legal assessment and interpretation purposes.

 

10. UPDATING THIS PRIVACY POLICY

We will update this privacy policy on a regular basis. This statement is dated 14.09.2021, last update on 31.12.2024.