DATA PROTECTION


1. Data protection at a glance

General information

The following section provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to identify you personally. For complete information on data protection, please see our Data Privacy Declaration, provided under this text.

Analytic tools and tools from third-party providers

When you visit our website, your surfing behavior may be statistically analyzed. This is primarily done using cookies, as well as analytics programs. Your surfing behavior is generally analyzed anonymously; it cannot be traced back to you. You can object to this analysis, or prevent it by not using certain tools. The following Data Privacy Declaration provides detailed information on doing so.

You can object to this analysis. We will inform you of your options for objecting in this Data Privacy Declaration.

2. General and mandatory information

Data protection

The operator of this website takes the protection of your personal data very seriously. We treat your personal data as confidential, and make use of it in accordance with statutory data protection regulations and this Data Privacy Declaration.

A variety of personal data is collected when you use this website. Personal data is data that can be used to identify you personally. This Data Privacy Declaration explains what data we collect, and what we use it for. It also explains how we use your data, and for what purpose.

Please note that online data transmission (for instance during e-mail communication) may result in gaps in security. It is not possible to provide seamless protection for your data against third-party access.

Revocation of your consent to data processing

Many data processing procedures may be carried out only with your express consent. You can revoke consent that you have granted at any time. To do so, simply send an e-mail to us. There are no formal requirements for this revocation. The legality of data processing carried out before consent was revoked shall remain unaffected.

SSL and TLS encryption

For security reasons, and to protect the transmission of confidential content, such as orders or inquiries which you send to us as the page operator, this page uses SSL and TLS encryption. You can recognize an encrypted connection because the browser address line will switch from “http://” to “https://”, and you will see a lock symbol in the browser line.

If SSL and TLS encryption are activated, the data you transmit to us cannot be accessed by third parties.

Information, blockage, deletion

Under applicable statutory regulations, you have the right to receive information free of charge at any time regarding the personal data we have saved on you, as well as the origin and recipients of that data and the purposes of data processing, and in some cases you have a right to have this data rectified, blocked, or deleted. You are welcome to contact us using the address provided in the Legal Notice for more information on this, as well as any other questions regarding personal data.

Objection to advertising emails and mailing

We hereby reject any use of contact information published as part of our obligation to post a Legal Notice to send us advertisements or informational materials that we have not expressly requested. The operator of this website expressly reserves the right to take legal steps if advertising materials are sent without our request, such as via spam e-mails.

3. Data collection on our website

Cookies
Server log files

The website provider automatically collects and stores information in so-called server log files, which your browser transmits to us automatically. These include:

  • Browser type and version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

This data is not combined with data from other sources.

The basis for data processing is Art. 6 para. 1 lit. f GDPR, which permits data processing in order to carry out a contract or to undertake pre-contractual measures.

Contact form

If you submit an inquiry to us using the contact form, your information entered into the form and the contact details you provide there will be stored for the purpose of processing your inquiry, and in case we have any follow-up questions for you. We will not disclose this data without your consent.

Therefore, the data entered into the contact form is processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. To do so, simply send an e-mail to us. There are no formal requirements for this revocation. The legality of data processing procedures carried out before consent was revoked shall remain unaffected.

We will retain the data you enter into the contact form until you request that we delete it, until you revoke your consent to store the data, or until the purpose for which the data was stored no longer applies (for instance, after we finish processing your inquiry). Mandatory legal provisions, in particular retention periods, shall remain unaffected.

4. Analytic tools and advertisement

Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called “cookies” These are text files that are stored on your computer, and that facilitate analysis of your use of the website. The information generated by the cookie on your use of this website is generally transmitted to a Google server in the USA and stored there.

Google Analytics cookies are saved on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its web services and its advertisements.

IP anonymization

We have activated the IP anonymization function on this website. This function causes Google to truncate your IP address within a member state of the European Union, or in another contracting state to the Agreement on the European Economic Area, before it is transmitted to the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the USA, where it will be truncated. Google will use this information to evaluate your site usage, create reports regarding website activity, and complete additional services associated with your internet use for the website operator. The IP addresses transferred by your browser as part of Google Analytics are not associated with other data from Google.

Browser plugin

You can prohibit the storage of cookies by changing the settings in your browser software accordingly; we would, however, like to inform you that in this case you will not be able to use all functions on our website to their full extent. You can, additionally, prohibit the collection of the data created by cookies and related to your use of the website (incl. your IP address) by Google and Google’s processing of this data by downloading and installing the browser plug-in available at the following link. https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data collection

You can prevent Google Analytics from collecting your data by clicking the following link. This saves an opt-out cookie that prevents your data from being collected in the future when you visit this website: Deactivate Google Analytics.

For more information on how user data is handled by Google Analytics, please see the Google Data Privacy Declaration: https://support.google.com/analytics/answer/6004245?hl=de.

Contract data processing

We have concluded an agreement for contract data processing with Google, and we fully implement the strict specifications of German data privacy authorities governing the use of Google Analytics.

Demographic features on Google Analytics

This website uses the “demographic features” function of Google Analytics. This function can be used to create reports with information on the age, sex and interests of page visitors. This data comes from interest-based advertisements from Google and visitor data from third party providers. This data cannot be associated with a specific person. You can deactivate this function at any time using the display settings in your Google account, or generally object to the collection of your data by Google Analytics as indicated in the point “Objection to data collection.”

5. Video surveillance

Sec. 4 para. 1 clause 1 no. 2 and 3 BDSG (new version)
Sec. 4 BDSG Video surveillance of publicly accessible spaces

  • 1. 1Surveillance of publicly accessible spaces using optical electronic equipment (video surveillance) is permitted only if it is required
    1. for public entities to fulfill their duties,
    2. to implement building regulations, or
    3. to take advantage of legitimate interests for specifically defined purposes
  • and if there are no protected interests of data subjects that outweigh these interests. 2When conducting video surveillance of

    1. publicly accessible large facilities, in particular sports, meeting, and entertainment venues, shopping centers, or parking lots, or
    2. vehicles and publicly accessible large public railway, shipping, and bus transit facilities,
  • then protecting the life, health, or freedom of persons in said facilities is considered a special legitimate interest.

    • 2. The use of surveillance and the name and contact information of the controller must be clearly designated using suitable measures at the earliest possible point.
    • 3. 1The storage and use of data collected in accordance with paragraph 1 is permitted if this is necessary in order to achieve the intended purpose, and if there are no protected interests of data subjects that outweigh these interests. 2Paragraph 1 clause 2 shall apply accordingly. 3Data may only be processed for other purposes if this is necessary to prevent risks to state and public safety, as well as to prosecute criminal activity.
    • 4. 1If data collected through video surveillance is associated with a specific person, then this person is considered a data subject and must be informed of the processing according to Articles 13 and 14 of directive (EU) 2016/679. 2Sec. 32 shall apply accordingly.
    • 5. Data must be deleted promptly if it is no longer required to achieve the indicated purpose, or if the data subject has protected interests that outweigh the interest of further storage.

ONLINE BOOKING

Data processing (customer and contractual data)

We only collect, process, and use personal data if necessary to initiate, design the content of, or change the legal relationship (basic data). The basis for this collection, processing, and use is Art. 6 para. 1 lit. b GDPR, which allows for the processing of data to fulfill a contract or to carry out pre-contractual measures. We only collect, process, and use personal data regarding how our websites are used (usage data) if necessary to allow users to access our services or invoice them for doing so.

Collected customer data is deleted after the order is complete, or after the end of the business relationship. Statutory retention periods shall remain unaffected.

Data transmission when concluding a contract for online shops, dealers, and shipment of goods

We transmit personal data to third parties only if necessary in the course of carrying out a contract, for instance to companies hired to deliver goods, or to credit institutions commissioned to process payments. Data is not transmitted for other purposes, or is transmitted only if you have expressly agreed to the transmission. Data is not disclosed to third parties without your express consent, for instance for advertising purposes.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which allows for the processing of data to fulfill an agreement or to carry out pre-contractual measures.

Data transmission for contracts concluded for services and digital content

We transmit personal data to third parties only if necessary in the course of carrying out a contract, for instance to credit institutions commissioned to process payments.

Data is not transmitted for other purposes, or is transmitted only if you have expressly agreed to the transmission. Data is not disclosed to third parties without your express consent, for instance for advertising purposes.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which allows for the processing of data to fulfill an agreement or to carry out pre-contractual measures.

Use of the DIRS21 online booking tool from TourOnline AG

Our website uses the online booking tool DIRS21 (hereinafter referred to as “OBT”) from the company TourOnline AG, Borsigstraße 26, 73249 Wernau, Germany (www.dirs21.de, hereinafter referred to as “TOAG”) in order to facilitate online booking of lodging services and other travel-related services, and to process inquiries.  TOAG processes data as the controller within the framework of the OBT. Information and provisions on data protection are provided in the TOAG Data Privacy Declaration for the OBT, which is available at any time from the OBT, or at http://www.dirs21.de/datenschutz.

APPLICATIONS

Data protection for applications and during the application process

The controller responsible for processing collects and processes personal data of applicants for the purpose of carrying out the application procedure. This processing may also be carried out electronically. This is the case, in particular, if an applicant submits relevant application documents electronically, for instance via e-mail, to the controller responsible for processing. If the controller responsible for processing concludes an employment contract with an applicant, the data provided will be stored for the purpose of carrying out the employment relationship in compliance with statutory regulations. If the controller responsible for processing does not conclude an employment contract with the applicant, then the application documents will be deleted automatically six months after the applicant is informed that they have not been selected, unless there are other legitimate interests of the controller that outweigh the interest in deleting the data. Other legitimate interests in this sense include, for example, the obligation to provide evidence in proceedings in accordance with the General Equal Treatment Act (Allgemeinen Gleichbehandlungsgesetz (AGG).

1. Data protection at a glance

General information

The following section provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to identify you personally. For complete information on data protection, please see our Data Privacy Declaration, provided under this text.

Analytic tools and tools from third-party providers

When you visit our website, your surfing behavior may be statistically analyzed. This is primarily done using cookies, as well as analytics programs. Your surfing behavior is generally analyzed anonymously; it cannot be traced back to you. You can object to this analysis, or prevent it by not using certain tools. The following Data Privacy Declaration provides detailed information on doing so.

You can object to this analysis. We will inform you of your options for objecting in this Data Privacy Declaration.

2. General and mandatory information

Data protection

The operator of this website takes the protection of your personal data very seriously. We treat your personal data as confidential, and make use of it in accordance with statutory data protection regulations and this Data Privacy Declaration.

A variety of personal data is collected when you use this website. Personal data is data that can be used to identify you personally. This Data Privacy Declaration explains what data we collect, and what we use it for. It also explains how we use your data, and for what purpose.

Please note that online data transmission (for instance during e-mail communication) may result in gaps in security. It is not possible to provide seamless protection for your data against third-party access.

Revocation of your consent to data processing

Many data processing procedures may be carried out only with your express consent. You can revoke consent that you have granted at any time. To do so, simply send an e-mail to us. There are no formal requirements for this revocation. The legality of data processing carried out before consent was revoked shall remain unaffected.

SSL and TLS encryption

For security reasons, and to protect the transmission of confidential content, such as orders or inquiries which you send to us as the page operator, this page uses SSL and TLS encryption. You can recognize an encrypted connection because the browser address line will switch from “http://” to “https://”, and you will see a lock symbol in the browser line.

If SSL and TLS encryption are activated, the data you transmit to us cannot be accessed by third parties.

Information, blockage, deletion

Under applicable statutory regulations, you have the right to receive information free of charge at any time regarding the personal data we have saved on you, as well as the origin and recipients of that data and the purposes of data processing, and in some cases you have a right to have this data rectified, blocked, or deleted. You are welcome to contact us using the address provided in the Legal Notice for more information on this, as well as any other questions regarding personal data.

Objection to advertising emails and mailing

We hereby reject any use of contact information published as part of our obligation to post a Legal Notice to send us advertisements or informational materials that we have not expressly requested. The operator of this website expressly reserves the right to take legal steps if advertising materials are sent without our request, such as via spam e-mails.

3. Data collection on our website

Cookies
Server log files

The website provider automatically collects and stores information in so-called server log files, which your browser transmits to us automatically. These include:

  • Browser type and version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

This data is not combined with data from other sources.

The basis for data processing is Art. 6 para. 1 lit. f GDPR, which permits data processing in order to carry out a contract or to undertake pre-contractual measures.

Contact form

If you submit an inquiry to us using the contact form, your information entered into the form and the contact details you provide there will be stored for the purpose of processing your inquiry, and in case we have any follow-up questions for you. We will not disclose this data without your consent.

Therefore, the data entered into the contact form is processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. To do so, simply send an e-mail to us. There are no formal requirements for this revocation. The legality of data processing procedures carried out before consent was revoked shall remain unaffected.

We will retain the data you enter into the contact form until you request that we delete it, until you revoke your consent to store the data, or until the purpose for which the data was stored no longer applies (for instance, after we finish processing your inquiry). Mandatory legal provisions, in particular retention periods, shall remain unaffected.

4. Analytic tools and advertisement

Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called “cookies” These are text files that are stored on your computer, and that facilitate analysis of your use of the website. The information generated by the cookie on your use of this website is generally transmitted to a Google server in the USA and stored there.

Google Analytics cookies are saved on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its web services and its advertisements.

IP anonymization

We have activated the IP anonymization function on this website. This function causes Google to truncate your IP address within a member state of the European Union, or in another contracting state to the Agreement on the European Economic Area, before it is transmitted to the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the USA, where it will be truncated. Google will use this information to evaluate your site usage, create reports regarding website activity, and complete additional services associated with your internet use for the website operator. The IP addresses transferred by your browser as part of Google Analytics are not associated with other data from Google.

Browser plugin

You can prohibit the storage of cookies by changing the settings in your browser software accordingly; we would, however, like to inform you that in this case you will not be able to use all functions on our website to their full extent. You can, additionally, prohibit the collection of the data created by cookies and related to your use of the website (incl. your IP address) by Google and Google’s processing of this data by downloading and installing the browser plug-in available at the following link. https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data collection

You can prevent Google Analytics from collecting your data by clicking the following link. This saves an opt-out cookie that prevents your data from being collected in the future when you visit this website: Deactivate Google Analytics.

For more information on how user data is handled by Google Analytics, please see the Google Data Privacy Declaration: https://support.google.com/analytics/answer/6004245?hl=de.

Contract data processing

We have concluded an agreement for contract data processing with Google, and we fully implement the strict specifications of German data privacy authorities governing the use of Google Analytics.

Demographic features on Google Analytics

This website uses the “demographic features” function of Google Analytics. This function can be used to create reports with information on the age, sex and interests of page visitors. This data comes from interest-based advertisements from Google and visitor data from third party providers. This data cannot be associated with a specific person. You can deactivate this function at any time using the display settings in your Google account, or generally object to the collection of your data by Google Analytics as indicated in the point “Objection to data collection.”

5. Video surveillance

Sec. 4 para. 1 clause 1 no. 2 and 3 BDSG (new version)
Sec. 4 BDSG Video surveillance of publicly accessible spaces

  • 1. 1Surveillance of publicly accessible spaces using optical electronic equipment (video surveillance) is permitted only if it is required
    1. for public entities to fulfill their duties,
    2. to implement building regulations, or
    3. to take advantage of legitimate interests for specifically defined purposes
  • and if there are no protected interests of data subjects that outweigh these interests. 2When conducting video surveillance of

    1. publicly accessible large facilities, in particular sports, meeting, and entertainment venues, shopping centers, or parking lots, or
    2. vehicles and publicly accessible large public railway, shipping, and bus transit facilities,
  • then protecting the life, health, or freedom of persons in said facilities is considered a special legitimate interest.

    • 2. The use of surveillance and the name and contact information of the controller must be clearly designated using suitable measures at the earliest possible point.
    • 3. 1The storage and use of data collected in accordance with paragraph 1 is permitted if this is necessary in order to achieve the intended purpose, and if there are no protected interests of data subjects that outweigh these interests. 2Paragraph 1 clause 2 shall apply accordingly. 3Data may only be processed for other purposes if this is necessary to prevent risks to state and public safety, as well as to prosecute criminal activity.
    • 4. 1If data collected through video surveillance is associated with a specific person, then this person is considered a data subject and must be informed of the processing according to Articles 13 and 14 of directive (EU) 2016/679. 2Sec. 32 shall apply accordingly.
    • 5. Data must be deleted promptly if it is no longer required to achieve the indicated purpose, or if the data subject has protected interests that outweigh the interest of further storage.

ONLINE BOOKING

Data processing (customer and contractual data)

We only collect, process, and use personal data if necessary to initiate, design the content of, or change the legal relationship (basic data). The basis for this collection, processing, and use is Art. 6 para. 1 lit. b GDPR, which allows for the processing of data to fulfill a contract or to carry out pre-contractual measures. We only collect, process, and use personal data regarding how our websites are used (usage data) if necessary to allow users to access our services or invoice them for doing so.

Collected customer data is deleted after the order is complete, or after the end of the business relationship. Statutory retention periods shall remain unaffected.

Data transmission when concluding a contract for online shops, dealers, and shipment of goods

We transmit personal data to third parties only if necessary in the course of carrying out a contract, for instance to companies hired to deliver goods, or to credit institutions commissioned to process payments. Data is not transmitted for other purposes, or is transmitted only if you have expressly agreed to the transmission. Data is not disclosed to third parties without your express consent, for instance for advertising purposes.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which allows for the processing of data to fulfill an agreement or to carry out pre-contractual measures.

Data transmission for contracts concluded for services and digital content

We transmit personal data to third parties only if necessary in the course of carrying out a contract, for instance to credit institutions commissioned to process payments.

Data is not transmitted for other purposes, or is transmitted only if you have expressly agreed to the transmission. Data is not disclosed to third parties without your express consent, for instance for advertising purposes.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which allows for the processing of data to fulfill an agreement or to carry out pre-contractual measures.

Use of the DIRS21 online booking tool from TourOnline AG

Our website uses the online booking tool DIRS21 (hereinafter referred to as “OBT”) from the company TourOnline AG, Borsigstraße 26, 73249 Wernau, Germany (www.dirs21.de, hereinafter referred to as “TOAG”) in order to facilitate online booking of lodging services and other travel-related services, and to process inquiries.  TOAG processes data as the controller within the framework of the OBT. Information and provisions on data protection are provided in the TOAG Data Privacy Declaration for the OBT, which is available at any time from the OBT, or at http://www.dirs21.de/datenschutz.

APPLICATIONS

Data protection for applications and during the application process

The controller responsible for processing collects and processes personal data of applicants for the purpose of carrying out the application procedure. This processing may also be carried out electronically. This is the case, in particular, if an applicant submits relevant application documents electronically, for instance via e-mail, to the controller responsible for processing. If the controller responsible for processing concludes an employment contract with an applicant, the data provided will be stored for the purpose of carrying out the employment relationship in compliance with statutory regulations. If the controller responsible for processing does not conclude an employment contract with the applicant, then the application documents will be deleted automatically six months after the applicant is informed that they have not been selected, unless there are other legitimate interests of the controller that outweigh the interest in deleting the data. Other legitimate interests in this sense include, for example, the obligation to provide evidence in proceedings in accordance with the General Equal Treatment Act (Allgemeinen Gleichbehandlungsgesetz (AGG).