Disclaimer
Data protection
The following notes give a simple overview of what happens to your personal information when you visit our website. Personal data is all data that personally identifies you.This Privacy Policy clarifies the nature, scope and purpose of the processing of personal data (hereinafter referred to as “Data”) within our websites, features and content, as well as external online presence, e.g. our Social Media Profile (collectively referred to as the “Online Offering”).
With regard to the terminology used, e.g. “Processing” or “Responsible”, we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).
We reserve the right to amend this privacy policy to always comply with the latest legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. Your new visit will be subject to the new privacy policy.
Who is responsible for data processing and who can I contact?
Responsible is:Kurgarten-Hotel GmbH & Co. KG
Funkenbadstraße 7
D-77709 Wolfach
Tel.: + 49 (0) 7834 / 40 – 53
Fax: + 49 (0) 7834 / 47 – 589
E-Mail: info@kurgarten-hotel.de
Imprint: https://www.www.kurgarten-hotel.de/en/imprint/
You can reach our data protection officer at:
Dr. Gert Landauer
HWH – Gesellschaft für Datenschutz und Beratung GmbH
BGM – Bürgermeister-Rohrmüller Straße 14
D-86554 Pöttmes
Tel.: +49 (0) 160 / 96780366
E-Mail: info@hwh-datenschutz.de
Types of processed data
- inventory data (e.g., names, addresses)
- contact information (e.g., e-mail, phone numbers)
- content data (e.g., text input, photographs, videos)
- usage data (e.g., websites visited, interest in content, access times)
- meta / communication data (e.g., device information, IP addresses)
- contract data (for example, subject matter, term, customer category)
- payment details (e.g., bank details, payment history)
What do we process your data for (purpose of processing) and on what legal basis?
We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).- providing the online offer, its features and content
- answering contact requests and communicating with users
- safety measures
- audience measurement / Marketing
- You have given your express consent
- processing is required to complete a contract with you,
- the processing is necessary to fulfill a legal obligation,
- processing is necessary to protect legitimate interests and there is no reason to believe that you have a predominantly legitimate interest in not disclosing your information.
Use of the website
If the website is used merely for informational purpose, we only collect the data that your browser transmits to our server. If you wish to view our website, we collect the following data that is technically necessary for us to display our website and to ensure the stability and security. The legal basis is art. 6 (1) sentence 1 lit. f GDPR.
Cookies
In addition to the aforementioned data, cookies are saved on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and by which the body that sets the cookie (here by us) receives certain information. Cookies can not run programs or transmit viruses to your computer. They serve to make the website more user-friendly and effective overall.
The website uses transient and persistent cookies, the scope of which is explained below: Transient cookies are automatically deleted when you close the browser. These include the session cookies in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the common session. This will allow your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
You can configure your browser setting according to your wishes, e.g. decline the acceptance of third-party cookies or all cookies. Please be aware that you may not be able to use all features of this website.
Use of Google Analytics
This website uses Google Analytics, a web-based analysis tool of Google Inc. (“Google”). Google Analytics uses so called cookies, text files, which a saved on your computer and which allow for an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the United States and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the activities and to provide other services related to website usage and internet usage to the website operator.
The IP address of your browser provided as part of Google Analytics will not be merged with other Google data.
You can prevent the storage of cookies by a corresponding setting of your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. In addition, you may prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link : https://tools.google.com/dlpage/gaoptout?hl=en.
We use Google Analytics to analyze and regularly improve the use of our website. With the statistics we can improve our offering and make it more interesting for you as user. For the exceptional cases in which personal data is transmitted to the US, Google has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US framework. The legal basis for the use of Google Analytics is art. 6 (1) sentence 1 lit. f GDPR.
Google Fonts
External fonts, Google Fonts, are used on this website. Google Fonts is a service of Google Inc. (“Google”). These web fonts are integrated by calling up a server, usually a Google server in the USA. This tells the server which of our websites you have visited. Google also stores the IP address of the browser of the visitor’s end device on this website. You can find more information in Google’s privacy policy, which you can access here: https://www.google.com/policies/privacy/
Contact forms
With your consent, you can contact us through the contact forms and send us messages. The legal basis is art. 6 (1) sentence 1 lit. a GDPR.
Obligatory for the transmission of the forms is your name and first name as well as your e-mail address. The input of additional, separately marked data is voluntarily. The data will be used confidentially and exclusively for the purpose intended by you and will not be forwarded to unauthorized third parties.
You can revoke your consent to the transmission of the contact form with effect to the future at any time. The revocation can be explained by sending a message to the contact details given in the imprint.
Data protection during the application process
We process applicant data only for the purpose and in the context of the application process in accordance with the legal requirements. The processing of the applicants data takes place in order to fulfill our (pre-) contractual obligations in the context of the application process as defined by art. 6 (1) lit . GDPR art. 6 (1) lit. f GDPR if the data processing is required of us, e.g. in context of legal proceedings (in Germany § 26 BDSG applies additionally).
The application process requires for applicants to provide us with the applicant data. The necessary applicant data depend on the job descriptions and generally include the personal details, postal and contact addresses and the documents belonging to the application such as a cover letter, CV and certificates. Furthermore, applicants can provide us with additional information voluntarily. By submitting the application to us applicants agree to the processing of their data for the purposes of the application process in accordance with the nature and scope outlined in this Privacy Policy.
Insofar as special categories of personal data as defined by art. 9 (1) GDPR are voluntarily communicated within the context of the application procedure, their processing is additionally carried out in accordance with art. 9 (2) lit. b DSGVO (e.g., health information such as disability or ethnic origin). Insofar as special categories of personal data as defined by Art. 9 (1) GDPR are requested from applicants in the context of the application procedure, their processing is additionally carried out in accordance with Art. 9 (2) lit. a GDPR (for example health data, if they are necessary for the profession).
In addition to postal transmittal applicants can send their applications via e-mail. However, please note that e-mails are generally not sent in encrypted form and that applicants must provide encryption themselves. Therefore we can not take any responsibility for the transmission of the application between the sender and the reception on our server.
In the event of a successful application the data provided by the applicants may be further processed by us for employment purposes. Otherwise, if the application for a job offer is not successful, the applicants’ data will be deleted. Applicants’ data will also be deleted if an application is withdrawn, which the applicants are entitled to at any time.
The cancellation takes place after the expiration of a period of six months, subject to a legitimate cancellation of the candidate, so that we can answer any follow-up questions to the application and meet our obligations under the Equal Treatment Act.
Who receives ma data?
Only those positions of us receive access to your data that need to fulfill their contractual and legal obligations. Also our commissioned data processors according to art. 28 GDPR may receive data for these purposes. These are companies in the categories IT services and telecommunications. In this regard, there are corresponding contracts for order processing according to Article 28 GDPR.Personal data may only be passed on if legal provisions allow it or if you have consented. Under these conditions, recipients of personal data referred to in point 2 may be third parties.
