Privacy policy
Table of contents
- Name and address of the person responsible
- Contact details of the data protection officer
- General information on data processing
- Rights of the data subject
- Provision of the website and creation of log files
- Use of cookies
- Newsletter
- Email contact
- Contact form
- Application by email and application form
- Company websites
- Use of company presences in job-oriented networks
- Hosting
- Geotargeting
- Partner programmes
- Third-Party Software used
- Name and address of the person responsible
- Contact details of the Data Protection Officer
- General information on data processing
- Rights of the data subject
- The purposes of the processing;
- The categories of personal data concerned;
- The recipients or categories of recipients to whom the data has been or will be disclosed;
- The envisaged storage period or the criteria used to determine that period;
- The existence of a right to rectification, erasure or restriction of processing;
- The existence of a right to object to processing;
- The existence of a right to lodge a complaint with a supervisory authority;
- Any available information concerning the source of the data where it was not collected directly from you; and
- The existence of automated decision-making, including profiling, and meaningful information about the logic involved and the envisaged consequences of such processing.
- You contest the accuracy of the personal data for a period enabling the controller to verify its accuracy;
- The processing is unlawful and you oppose the erasure of the data and request restriction of its use instead;
- The controller no longer requires the data for the purposes of processing, but you require it for the establishment, exercise or defence of legal claims; or
- You have objected to the processing and it has not yet been determined whether the controller’s legitimate grounds override your interests.
- The data is no longer necessary for the purposes for which it was collected or processed;
- You withdraw your consent and there is no other legal basis for processing;
- You object to processing and there are no overriding legitimate grounds for continuing it;
- The personal data has been processed unlawfully; or
- Erasure is necessary to comply with a legal obligation.
- Provision of the website and creation of log files
- Browser type and browser version;
- Operating system;
- Internet service provider;
- IP address;
- Date and time of access;
- Website from which the user accessed our website;
- Pages and resources accessed through our website.
- Use of cookies
- Language settings
- Search terms entered
- Frequency of page views
- Use of website functions
- Remembering search terms
- Newsletter
- Email contact
- Contact form
- Email address
- Surname
- First name
- Telephone or mobile phone number
- Date and time of contact
- Application by email and application form
- Salutationr
- First namer
- Surnamer
- Telephone or mobile phone numberr
- Email addressr
- Information about education and schoolingr
- Curriculum vitaer
- References and certificatesr
- Company profiles on social networks
- Marketing products and services
- Information about products
- Information about services
- Advertising
- Marketing products and services
- Information about products
- Information about services
- Advertising
- Marketing products and services
- Information about products
- Information about services
- Advertising
- Marketing products and services
- Information about products
- Information about services
- Advertising
- Use of company profiles on professional networks
- Hosting
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Date and time of the server request
- IP address
- Geotargeting
- Advertising purposes
- Partner programmes
- HotelNetSolutions
- Gastronovi
- Third-Party Software used
- User activity, especially pages visited and elements clicked
- Device and browser information, especially the IP address and operating system
- Information about displayed advertisements, particularly which advertisements were displayed and whether the user clicked on them
- Data from advertising partners, particularly pseudonymised user IDs
- User activity, especially mouse movements and elements clicked
- Device and browser information
- Date and time of access
- IP address
- Operating system
- User activity, especially pages visited and elements clicked
- Device and browser information
- IP address
- Operating system
- Measure visitor numbers and user behaviour
- Measure the effectiveness of online advertising and social media channels
- Carry out remarketing and target-group advertising
- Test and optimise the website
- Salutation, where provided
- First name
- Surname
- Email address
- Other information that you provide voluntarily
- Information you voluntarily provide, such as your name, the reason for the call, your email address or a callback request
- Your telephone number, if transmitted
- Transcripts of the conversation
- The date and time of the call and technical connection metadata
- Technical connection data, such as the telephone number, call duration, date and time, to assign calls and ensure connection stability
- Temporary real-time processing of audio to generate transcripts
- Transcripts that are pseudonymised during processing, processed in encrypted form and deleted in accordance with the retention periods stated below
- Logs and error records used to detect misuse, such as spam, and ensure system functionality
- Encrypted data transmissions using TLS and SRTP to ensure secure communication
The controller within the meaning of the General Data Protection Regulation (GDPR) and other applicable data protection legislation is:
Seehotel Heidehof GmbH
Seestraße 11
17094 Klein Nemerow
Germany
Telephone: +49 39605 2600
Email: info@seehotel-heidehof.de
Website: https://www.seehotel-heidehof.com
The Data Protection Officer of the controller is:
DataCo GmbH
Sandstraße 33
80335 München
Germany
Telephone: +49 89 452459 900
Email: datenschutz@dataguard.de
Website: https://www.dataguard.com
1. Scope of the processing of personal data
As a general rule, we process our users’ personal data only insofar as this is necessary to provide a functional website and our content and services.
Personal data is generally processed only with the user’s consent. An exception applies where obtaining prior consent is not possible for factual reasons or where the processing is permitted or required by law.
2. Legal bases for processing
Where we obtain the data subject’s consent to the processing of personal data, Article 6(1)(a) GDPR serves as the legal basis.
Where processing is necessary for the performance of a contract to which the data subject is party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing that is necessary in order to take steps at the request of the data subject prior to entering into a contract.
Where processing is necessary for compliance with a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis.
Where processing is necessary in order to protect the vital interests of the data subject or another natural person, Article 6(1)(d) GDPR serves as the legal basis.
Where processing is necessary for the purposes of a legitimate interest pursued by our company or a third party, and where the interests, fundamental rights and freedoms of the data subject do not override that interest, Article 6(1)(f) GDPR serves as the legal basis.
3. Data deletion and storage periods
Personal data will be deleted or its processing restricted as soon as the purpose for which it was stored no longer applies.
Data may be stored for a longer period where this is required by European or national legislation or by other legal provisions to which the controller is subject.
Data will also be deleted or its processing restricted when a statutory retention period expires, unless continued storage is necessary for the conclusion or performance of a contract or for the establishment, exercise or defence of legal claims.
If we process personal data concerning you, you are a data subject within the meaning of the GDPR and have the following rights vis-à-vis the controller.
1. Right of access
You have the right to obtain confirmation as to whether personal data concerning you is being processed.
Where this is the case, you may request information about:
You also have the right to be informed whether personal data concerning you is transferred to a third country or an international organisation and to receive information about the appropriate safeguards relating to such a transfer.
2. Right to rectification
You have the right to request the rectification of inaccurate personal data and the completion of incomplete personal data concerning you. The controller must carry out the rectification without undue delay.
3. Right to restriction of processing
You have the right to request restriction of processing where:
Where processing has been restricted, the relevant data may, apart from storage, be processed only with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another person or for reasons of important public interest.
You will be informed before a restriction of processing is lifted.
4. Right to erasure
You have the right to request the erasure of personal data concerning you without undue delay where:
The right to erasure does not apply where processing remains necessary, in particular for compliance with a legal obligation, for exercising the right to freedom of expression and information or for the establishment, exercise or defence of legal claims.
5. Right to information
Where you have exercised your right to rectification, erasure or restriction of processing, the controller is generally required to inform all recipients to whom the relevant personal data has been disclosed.
You have the right to be informed about those recipients.
6. Right to data portability
Where processing is based on consent or a contract and is carried out by automated means, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format.
You also have the right to transmit that data to another controller without hindrance. Where technically feasible, you may request that the data be transmitted directly from one controller to another, provided that this does not adversely affect the rights and freedoms of others.
7. Right of objection
You have the right to object at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(e) or Article 6(1)(f) GDPR.
The controller will then no longer process the personal data unless compelling legitimate grounds for the processing can be demonstrated which override your interests, rights and freedoms, or unless the processing is required for the establishment, exercise or defence of legal claims.
Where personal data is processed for direct marketing purposes, you have the right to object to such processing at any time. Following your objection, your personal data will no longer be processed for direct marketing purposes.
8. Right to revoke the declaration of consent under data protection law
You have the right to withdraw your consent to the processing of personal data at any time with effect for the future.
Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before it was withdrawn.
9. Automated decision in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
This does not apply where the decision is necessary for entering into or performing a contract, is authorised by law or is based on your explicit consent and the applicable legal requirements are met.
10. Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.
1. Description and scope of data processing
Whenever our website is accessed, our system automatically collects data and information from the computer system of the accessing device.
The following data is collected:
This information is stored in the log files of our system. It is not stored together with other personal data relating to the user.
2. Purpose of processing
The temporary storage of the IP address is necessary to deliver the website to the user’s device. The IP address must therefore remain stored for the duration of the session.
The data is stored in log files to ensure the functionality of the website, optimise our website and ensure the security of our information technology systems. The data collected in this context is not evaluated for marketing purposes.
These purposes constitute our legitimate interest in the processing.
3. Legal basis
The legal basis for the temporary processing of the data and its storage in log files is Article 6(1)(f) GDPR.
4. Storage period
Data processed solely for the provision of the website is deleted when the respective session has ended.
Server log files are deleted after no more than seven days. Data may be stored for a longer period where necessary. In such cases, the users’ IP addresses will be deleted or anonymised so that the accessing device can no longer be identified.
5. Right to object
The collection of data for the provision of the website and its storage in log files is essential for the operation of the website. Users therefore cannot object to this processing.
1. Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user calls up a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.
We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.
The following data is stored and transmitted in the cookies:
The user data collected in this way is pseudonymised by technical precautions. Therefore, it is no longer possible to assign the data to the calling user. The data is not stored together with other personal data of the users.
2. Purpose of the data processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change.
We need cookies for the following applications:
The user data collected through technically necessary cookies are not used to create user profiles.
3. Legal basis for the data processing
The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 p. 1 lit. f DSGVO.
4. Duration of storage, possibility of objection and elimination
Cookies are stored on the user's computer and transmitted to our site by the user. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.
If you use a Safari browser from version 12.1, cookies are automatically deleted after seven days. This also applies to opt-out cookies, which are set to prevent tracking measures.
On our website, you have the option of subscribing to a free newsletter.
The newsletter contacts are collected and managed via a widget from the ReGuest communication software.
When you register, the necessary data is transferred to the ReGuest server, which is managed on our behalf by ReGuest AG. This standardised data collection is used exclusively for the purpose of sending the newsletter and managing your consent.
Further evaluations are carried out in anonymous form for statistical purposes only. The owner of all data collected during the use of the newsletter widget is Seehotel Heidehof GmbH. Personal data will not be passed on to third parties.
The provider of the “ReGuest” tool is ReGuest AG, Kuperionstr. 34, 39012 Merano, Italy.
Further information can be found on the provider’s website: https://www.reguest.io/
The provider’s privacy policy can be found at: https://www.reguest.io/en/information/privacy-policy/5-0.html
1. Description and scope of data processing
On our website, it is possible to contact us using the email address provided. In this case, the user’s personal data transmitted with the email will be stored.
The data will be used exclusively for processing the communication.
2. Purpose of data processing
In the case of contact by email, the processing of the data serves the purpose of handling the communication. This also constitutes our necessary legitimate interest in processing the data.
3. Legal basis for data processing
Where the user has given consent, the legal basis for processing the data is Article 6(1)(a) GDPR.
The legal basis for processing data transmitted in the course of sending an email is Article 6(1)(f) GDPR.
If the email contact is intended to lead to the conclusion of a contract, Article 6(1)(b) GDPR additionally serves as the legal basis for processing.
4. Storage period
The data will be deleted as soon as it is no longer required for the purpose for which it was collected.
For personal data sent by email, this is the case when the respective communication with the user has ended. The communication is considered to have ended when it can be inferred from the circumstances that the matter in question has been conclusively resolved.
Any additional personal data collected during the sending process will be deleted after no more than seven days.
5. Options for objection and removal
The user may withdraw consent to the processing of personal data at any time.
If the user contacts us by email, they may object to the storage of their personal data at any time. In such a case, the communication cannot be continued.
The objection or withdrawal of consent may be sent by email to:
info@seehotel-heidehof.de
All personal data stored in the course of the communication will be deleted in this case, unless statutory retention obligations or another legal basis prevent deletion.
1. Description and scope of data processing
Our website contains a contact form that can be used to contact us electronically. If a user makes use of this option, the data entered into the form will be transmitted to us and stored.
The following data is stored when the message is sent:
Consent to the processing of the data is obtained during the submission process, and reference is made to this privacy policy.
Alternatively, it is possible to contact us using the email address provided. In this case, the user’s personal data transmitted with the email will be stored.
The data will be used exclusively for processing the communication.
2. Purpose of data processing
The personal data entered into the contact form is processed solely for the purpose of handling the enquiry.
In the case of contact by email, the processing of the data also constitutes our necessary legitimate interest in handling the communication.
Any additional personal data processed during submission is used to prevent misuse of the contact form and ensure the security of our information technology systems.
3. Legal basis for data processing
Where the user has given consent, the legal basis for processing the data is Article 6(1)(a) GDPR.
The legal basis for processing data transmitted in the course of sending an email is Article 6(1)(f) GDPR.
If the contact is intended to lead to the conclusion of a contract, Article 6(1)(b) GDPR additionally serves as the legal basis for processing.
4. Storage period
The data will be deleted as soon as it is no longer required for the purpose for which it was collected.
For personal data entered into the contact form or sent by email, this is the case when the respective communication with the user has ended. The communication is considered to have ended when it can be inferred from the circumstances that the matter in question has been conclusively resolved.
Any additional personal data collected during the submission process will be deleted after no more than seven days.
5. Options for objection and removal
The user may withdraw consent to the processing of personal data at any time.
If the user contacts us by email, they may object to the storage of their personal data at any time. In such a case, the communication cannot be continued.
The objection or withdrawal of consent may be sent by email to:
info@seehotel-heidehof.de
All personal data stored in the course of contacting us will be deleted in this case, unless statutory retention obligations or another legal basis prevent deletion.
1. Scope of the processing of personal data
Our website contains an application form that can be used to submit applications electronically. If an applicant makes use of this option, the data entered into the form will be transmitted to us and stored.
The following data is processed:
Consent to the processing of the data is obtained during the submission process, and reference is made to this privacy policy.
Alternatively, you may send us your application by email. In this case, we will process your email address and the personal data and documents provided in the email.
After submitting your application, you will receive confirmation that we have received your application documents by email.
Your data will not be passed on to third parties. The data will be used exclusively for processing your application.
2. Purpose of data processing
Personal data entered into the application form is processed solely for the purpose of handling your application.
In the case of an application by email, the processing of the data also constitutes our necessary legitimate interest in handling the application.
Any additional personal data processed during the submission process is used to prevent misuse of the application form and ensure the security of our information technology systems.
3. Legal basis for data processing
The legal basis for processing your data is the initiation of an employment relationship at the request of the data subject in accordance with Article 6(1), sentence 1, point (b) GDPR and Section 26(1), sentence 1 of the German Federal Data Protection Act (BDSG).
4. Storage period
After completion of the application process, the data will be stored for up to two months. Your data will be deleted no later than two months after completion of the application process.
Where a legal obligation requires longer storage, the data will be stored for the duration prescribed by the applicable legal provisions.
Any additional personal data collected during the submission process will be deleted after no more than seven days.
5. Options for objection and removal
Applicants may object to the processing of their personal data at any time.
If an applicant contacts us by email, they may object to the storage of their personal data at any time. In such a case, the application can no longer be considered.
Applicants may request the correction or deletion of their data by sending an informal email to: info@seehotel-heidehof.de
All personal data stored in connection with the electronic application will be deleted in this case, unless statutory retention obligations or another legal basis prevent deletion.
Instagram, part of Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
On our company profile, we provide information and offer Instagram users the opportunity to communicate with us.
If you carry out an action on our Instagram company profile, for example by posting comments or content or clicking the “Like” button, you may thereby make personal data, such as your real name or profile picture, publicly available.
As we generally have no or only limited influence over the processing of your personal data by Instagram, the company jointly responsible for the Seehotel Heidehof GmbH company profile, we cannot provide any binding information about the purpose and scope of the processing of your data.
Our company profile on social networks is used for communication and the exchange of information with existing and potential customers. In particular, we use the company profile for:
Publications on the company profile may include:
Each user is free to publish personal data through their activities.
The legal basis for data processing is Article 6(1), sentence 1, point (a) GDPR.
We store activities and personal data published through our Instagram company profile until consent is withdrawn. Statutory retention periods remain unaffected.
We further process data from our company profile in our own systems. This data is stored there for the following period: indefinitely.
You may object at any time to the processing of personal data that we collect in connection with your use of our Instagram company profile and exercise the rights described in section IV of this privacy policy.
Please send an informal email to: info@seehotel-heidehof.de
Further information about the processing of your personal data by Instagram and the corresponding options for objection can be found at:
Instagram:
https://help.instagram.com/519522125107875
Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland
On our company profile, we provide information and offer Pinterest users the opportunity to communicate with us.
If you carry out an action on our Pinterest company profile, for example by posting comments or content or clicking the “Like” button, you may thereby make personal data, such as your real name or profile picture, publicly available.
As we generally have no or only limited influence over the processing of your personal data by Pinterest, the company jointly responsible for the Seehotel Heidehof GmbH company profile, we cannot provide any binding information about the purpose and scope of the processing of your data.
Our company profile on social networks is used for communication and the exchange of information with existing and potential customers. In particular, we use the company profile for:
Publications on the company profile may include:
Each user is free to publish personal data through their activities.
The legal basis for data processing is Article 6(1), sentence 1, point (a) GDPR.
We store activities and personal data published through our Pinterest company profile until consent is withdrawn. Statutory retention periods remain unaffected.
We further process data from our company profile in our own systems. This data is stored there for the following period: indefinitely.
You may object at any time to the processing of personal data that we collect in connection with your use of our Pinterest company profile and exercise the rights described in section IV of this privacy policy.
Please send an informal email to: info@seehotel-heidehof.de
Further information about the processing of your personal data by Pinterest and the corresponding options for objection can be found at:
Pinterest:
https://policy.pinterest.com/en/privacy-policy
Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland
On our company profile, we provide information and offer Twitter users the opportunity to communicate with us.
If you carry out an action on our Twitter company profile, for example by posting comments or content or clicking the “Like” button, you may thereby make personal data, such as your real name or profile picture, publicly available.
As we generally have no or only limited influence over the processing of your personal data by Twitter, the company jointly responsible for the Seehotel Heidehof GmbH company profile, we cannot provide any binding information about the purpose and scope of the processing of your data.
Our company profile on social networks is used for communication and the exchange of information with existing and potential customers. In particular, we use the company profile for:
Publications on the company profile may include:
Each user is free to publish personal data through their activities.
The legal basis for data processing is Article 6(1), sentence 1, point (a) GDPR.
We store activities and personal data published through our Twitter company profile until consent is withdrawn. Statutory retention periods remain unaffected.
We further process data from our company profile in our own systems. This data is stored there for the following period: indefinitely.
You may object at any time to the processing of personal data that we collect in connection with your use of our Twitter company profile and exercise the rights described in section IV of this privacy policy.
Please send an informal email to: info@seehotel-heidehof.de
Further information about the processing of your personal data by Twitter and the corresponding options for objection can be found at:
Twitter:
https://twitter.com/en/privacy
YouTube
YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, United States
On our company profile, we provide information and offer YouTube users the opportunity to communicate with us.
If you carry out an action on our YouTube company profile, for example by posting comments or content or clicking the “Like” button, you may thereby make personal data, such as your real name or profile picture, publicly available.
As we generally have no or only limited influence over the processing of your personal data by YouTube, the company jointly responsible for the Seehotel Heidehof GmbH company profile, we cannot provide any binding information about the purpose and scope of the processing of your data.
Our company profile on social networks is used for communication and the exchange of information with existing and potential customers. In particular, we use the company profile for:
Publications on the company profile may include:
Each user is free to publish personal data through their activities.
The legal basis for data processing is Article 6(1), sentence 1, point (a) GDPR.
We store activities and personal data published through our YouTube company profile until consent is withdrawn. Statutory retention periods remain unaffected.
We further process data from our company profile in our own systems. This data is stored there for the following period: indefinitely.
You may object at any time to the processing of personal data that we collect in connection with your use of our YouTube company profile and exercise the rights described in section IV of this privacy policy.
Please send an informal email to: info@seehotel-heidehof.de
Further information about the processing of your personal data by YouTube and the corresponding options for objection can be found at:
YouTube:
https://policies.google.com/privacy?gl=DE&hl=en
1. Scope of data processing
We maintain company profiles on the following professional networks:
LinkedIn Ireland Unlimited Company
Wilton Place
Dublin 2
Ireland
XING SE
Dammtorstraße 30
20354 Hamburg
Germany
On our company profiles, we provide information and offer users the opportunity to communicate with us.
The company profiles are used for applications, information and public relations as well as active sourcing.
We have no information about the processing of your personal data by the companies jointly responsible for the respective company profile. Further information can be found in the privacy policies of:
LinkedIn:
https://www.linkedin.com/legal/privacy-policy
XING:
https://privacy.xing.com/en/privacy-policy
If you carry out an action on one of our company profiles, for example by posting comments or content or clicking the “Like” button, you may thereby make personal data, such as your real name or profile picture, publicly available.
2. Legal basis for data processing
The legal basis for processing your personal data in connection with the use of our company profiles is Article 6(1), sentence 1, point (f) GDPR.
3. Purpose of data processing
Our company profiles are used to inform users about our services.
Each user is free to publish personal data through their activities on the respective platform.
4. Storage period
We store activities and personal data published through our company profiles until consent is withdrawn. Statutory retention periods remain unaffected.
5. Options for objection and removal
You may object at any time to the processing of personal data that we collect in connection with your use of our company profiles and exercise the rights described in section IV of this privacy policy.
Please send an informal email to: info@seehotel-heidehof.de
Further information about the available options for objection and removal can be found at:
LinkedIn:
https://www.linkedin.com/legal/privacy-policy
XING:
https://privacy.xing.com/en/privacy-policy
The website is hosted on servers operated by a service provider commissioned by us.
Our service provider is:
Erste Heimat GmbH
Ottobrunner Straße 28
82008 Unterhaching
Germany
The servers automatically collect and store information in server log files, which your browser automatically transmits when you visit the website.
The following information is stored:
This data is not combined with other data sources.
The collection of this data is based on Article 6(1), point (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of the website. The collection of server log files is necessary for this purpose.
The website server is geographically located in Germany.
We use the IP address and other information provided by the user, particularly the postal code entered during registration or ordering, for regional targeting, known as “geotargeting”.
Regional targeting is used, for example, to automatically display regional offers or advertising that is often more relevant to users.
The legal basis for using the IP address and, where applicable, other information provided by the user, particularly the postal code, is Article 6(1), point (f) GDPR.
Our legitimate interest lies in ensuring more precise targeting and thereby providing users with offers and advertising that are more relevant to them.
In this process, part of the IP address and the additional information provided by the user, particularly the postal code, are merely read and are not stored separately.
You can prevent geotargeting by using a VPN or proxy server that prevents precise localisation.
Depending on the browser used, you may also disable location access in the relevant browser settings, provided that this function is supported by the browser.
We use geotargeting on our website for the following purpose:
We also use the following partner programmes:
We use plugins for various purposes. The plugins used are listed below.
Use of Google Analytics
1. Scope of the processing of personal data
We use Google Analytics, a web analytics service provided by Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5 Dublin, Ireland, hereinafter referred to as “Google”.
Google Analytics examines, among other things, the origin of visitors, the time they spend on individual pages and the use of search engines. This enables us to better monitor the success of advertising campaigns.
Google places a cookie on your device.
This may result in personal data being stored and evaluated, particularly:
The information generated by the cookie about your use of this website may be transmitted to and stored by Google on servers in the United States.
Where IP anonymisation is activated on this website, Google will first shorten your IP address within the Member States of the European Union or other states party to the Agreement on the European Economic Area.
Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and shortened there.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports about website activity and provide the website operator with other services relating to website and internet use.
The IP address transmitted by your browser as part of Google Analytics will not be combined with other Google data.
You can prevent cookies from being stored by selecting the appropriate settings in your browser. Please note, however, that you may then be unable to use all functions of this website in full.
Further information about the processing of personal data by Google can be found at:
https://policies.google.com/privacy
2. Purpose of data processing
The purpose of processing personal data is to specifically address a target group that has already expressed an initial interest by visiting the website.
3. Legal basis for processing personal data
The legal basis for processing users’ personal data is the user’s consent in accordance with Article 6(1), sentence 1, point (a) GDPR.
4. Storage period
Your personal information will be stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law.
Advertising data in server logs is anonymised by Google deleting parts of the IP address after nine months and cookie information after 18 months.
5. Options for withdrawal and removal
You have the right to withdraw your consent to the processing of personal data at any time.
The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before it was withdrawn.
You can prevent Google from collecting and processing your personal data by preventing third-party cookies from being stored on your device, using the “Do Not Track” function of a compatible browser, disabling the execution of script code in your browser or installing a script blocker such as NoScript or Ghostery.
You can also prevent the data generated by the cookie and relating to your use of the website, including your IP address, from being transmitted to and processed by Google by downloading and installing the browser plugin available at:
https://tools.google.com/dlpage/gaoptout?hl=en
You can manage the use of your personal data by Google at:
https://adssettings.google.com/
Further information about the available options for objection and removal can be found at:
https://policies.google.com/privacy
Use of Google Maps
1. Scope of the processing of personal data
We use the online map service Google Maps provided by Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5 Dublin, Ireland, hereinafter referred to as “Google”.
We use the Google Maps plugin to visually display geographical information and embed it into our website.
When Google Maps is used on our website, information about your use of our website, your IP address and any addresses entered into the route-planning function is transmitted to a Google server and stored there.
Further information about the processing of personal data by Google can be found at:
https://policies.google.com/privacy
2. Purpose of data processing
The Google Maps plugin is used to improve the user-friendliness and visual presentation of our website.
3. Legal basis for processing personal data
The legal basis for processing users’ personal data is the user’s consent in accordance with Article 6(1), sentence 1, point (a) GDPR.
4. Storage period
Your personal information will be stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law.
5. Options for withdrawal and removal
You have the right to withdraw your consent to the processing of personal data at any time.
The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before it was withdrawn.
You can prevent Google from collecting and processing your personal data by preventing third-party cookies from being stored on your device, using the “Do Not Track” function of a compatible browser, disabling the execution of script code in your browser or installing a script blocker such as NoScript or Ghostery.
You can manage the use of your personal data by Google at:
https://adssettings.google.com/
Further information about the available options for objection and removal can be found at:
https://policies.google.com/privacy
Use of Google reCAPTCHA
1. Scope of the processing of personal data
We use Google reCAPTCHA, a service provided by Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5 Dublin, Ireland.
This tool is used to determine whether data entered on our website has been entered by a natural person or by an automated program.
For this purpose, Google reCAPTCHA analyses and evaluates the behaviour of visitors to our website on the basis of various characteristics.
This may result in personal data being stored and evaluated, particularly:
The data is not combined with data that may be collected or used in connection with the simultaneous use of authenticated Google services such as Gmail.
Further information about the processing of personal data by Google can be found at:
https://policies.google.com/privacy
2. Purpose of data processing
Google reCAPTCHA is used to protect our website against misuse and automated access.
3. Legal basis for processing personal data
The legal basis for processing users’ personal data is the user’s consent in accordance with Article 6(1), sentence 1, point (a) GDPR.
4. Storage period
Your personal information will be stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law.
5. Options for withdrawal and removal
You have the right to withdraw your consent to the processing of personal data at any time.
The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before it was withdrawn.
You can prevent Google from collecting and processing your personal data by preventing third-party cookies from being stored on your device, using the “Do Not Track” function of a compatible browser, disabling the execution of script code in your browser or installing a script blocker such as NoScript or Ghostery.
You can manage the use of your personal data by Google at:
https://adssettings.google.com/
Further information about the available options for objection and removal can be found at:
https://policies.google.com/privacy
Use of YouTube
1. Scope of the processing of personal data
We use the YouTube plugin operated by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, United States, and its representative in the European Union, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.
We use the YouTube plugin to embed YouTube videos into our website. When you visit our website and activate YouTube content, your browser establishes a connection to YouTube’s servers.
This may result in personal data being stored and evaluated, particularly:
We have no influence over the processing carried out by YouTube.
If you are logged into your YouTube account while visiting our website, YouTube may associate your visit with your account. When you interact with the plugin, the relevant information is transmitted directly to YouTube and stored there.
Further information about the processing of personal data by Google can be found at:
https://policies.google.com/privacy
2. Purpose of data processing
The YouTube plugin is used to improve the user-friendliness and visual presentation of our website.
3. Legal basis for processing personal data
The legal basis for processing users’ personal data is the user’s consent in accordance with Article 6(1), sentence 1, point (a) GDPR.
4. Storage period
Your personal information will be stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law.
5. Options for withdrawal and removal
You have the right to withdraw your consent to the processing of personal data at any time.
The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before it was withdrawn.
You can prevent Google from collecting and processing your personal data by preventing third-party cookies from being stored on your device, using the “Do Not Track” function of a compatible browser, disabling the execution of script code in your browser or installing a script blocker such as NoScript or Ghostery.
You can manage the use of your personal data by Google at:
https://adssettings.google.com/
Further information about the available options for objection and removal can be found at:
https://policies.google.com/privacy
Use of Google Tag Manager
1. Scope of the processing of personal data
We use Google Tag Manager, a service provided by Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5 Dublin, Ireland, hereinafter referred to as “Google”.
Google Tag Manager enables tags from Google services and third-party providers to be managed and integrated into our website.
Tags are small code elements that may be used, among other things, to:
When a user visits our website, the current tag configuration is transmitted to the user’s browser. It contains instructions about which tags are to be activated.
Google Tag Manager triggers other tags that may in turn collect personal data. Information about this processing can be found in the sections relating to the respective services in this privacy policy.
Google Tag Manager does not access the data processed by these services.
Further information about Google Tag Manager can be found at:
https://www.google.com/intl/en/tagmanager/faq.html
Google’s privacy policy can be found at:
https://policies.google.com/privacy
2. Purpose of data processing
The purpose of processing is the organised and efficient management and integration of third-party services.
3. Legal basis for processing personal data
The legal basis for processing users’ personal data is the user’s consent in accordance with Article 6(1), sentence 1, point (a) GDPR.
4. Storage period
Your personal information will be stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law.
Advertising data in server logs is anonymised by Google deleting parts of the IP address after nine months and cookie information after 18 months.
5. Options for withdrawal and removal
You have the right to withdraw your consent to the processing of personal data at any time.
The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before it was withdrawn.
You can prevent Google from collecting and processing your personal data by preventing third-party cookies from being stored on your device, using the “Do Not Track” function of a compatible browser, disabling the execution of script code in your browser or installing a script blocker such as NoScript or Ghostery.
You can also use the following Google settings and information pages:
https://tools.google.com/dlpage/gaoptout?hl=en
https://adssettings.google.com/
https://policies.google.com/privacy
Interactive conversations with ReGuest Messenger
We provide you with a chat function so that we can assist you with your enquiry or visit to our website.
If a chat connection to reception is established, a connection is made to our communication software. At no time will your browser be accessed.
As part of the chat, you have the option of choosing different communication channels by selecting the corresponding menu items.
By using the chat, information is transmitted to the messenger server, which is managed on our behalf by ReGuest AG. This data consists of information required for the technical processing of the chat.
The standardised data collection takes place solely for the purpose of online consultation. We store the data required for the functions described above exclusively for these purposes.
Further evaluations are carried out only in anonymous form for statistical purposes.
The owner of all data collected during the use of ReGuest Messenger is Seehotel Heidehof GmbH.
The stored chat logs, which we must retain as evidence for both you and us, are not passed on to third parties.
The provider of the “ReGuest Messenger” tool is:
ReGuest AG
Kuperionstraße 34
39012 Merano
Italy
Further information can be found on the provider’s website:
https://www.reguest.io/
The provider’s privacy policy can be found at:
https://www.reguest.io/en/information/privacy-policy/5-0.html
Use of the online table reservation service provided by Gastronovi GmbH
1. Scope of the processing of personal data
We use functions provided by:
Gastronovi GmbH
Buschhöhe 6
28357 Bremen
Germany
Hereinafter referred to as “Gastronovi”.
We use an iframe through which a Gastronovi website is integrated into our website to provide an online table reservation function.
When you select the reservation function, you may be redirected to a Gastronovi page where you can complete the reservation process.
Gastronovi may process the following personal data:
Further information about the processing of personal data by Gastronovi can be found at:
https://www.gastronovi.com/en/data-protection/
2. Purpose of data processing
We use Gastronovi to provide an online table reservation service.
3. Legal basis for processing personal data
The legal basis for processing is the performance of a contract or the implementation of pre-contractual measures at the request of the data subject in accordance with Article 6(1), sentence 1, point (b) GDPR.
4. Storage period
Your personal information will be stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law, particularly for tax and accounting purposes.
5. Options for objection and removal
You have the right to object to the processing of your personal data at any time.
Please send an informal email to: info@seehotel-heidehof.de
Please note that if you object to processing that is necessary for the reservation, the reservation or associated contract cannot be carried out.
Further information about the available options for objection and removal can be found at:
https://www.gastronovi.com/en/data-protection/
Alveni AI Telephone Assistant (Call Forwarding)
What data is processed?
The hotel’s telephone system uses the telephone assistant provided by:
Alveni AG
R2 Tower
Richtistrasse 2
8304 Wallisellen
Switzerland
https://alveni.ai/
Under certain conditions, this service enables incoming calls to be forwarded to an AI-supported telephone response solution.
When the telephone assistant is active, only the data that you voluntarily provide during the call or that is technically required to handle the call is processed. This may include:
This information is processed in encrypted form and is used exclusively to forward your request to the responsible hotel team, enable callbacks or answer enquiries.
No further use, such as for advertising purposes, profiling or training AI models, takes place.
Technically required data processing
The following information is processed for the technical operation of the telephone assistant:
Processing and storage
All processing takes place on servers within the European Union. The AI models used are operated locally.
Personal data is transferred to third countries only on the basis of EU Standard Contractual Clauses or other appropriate safeguards in accordance with Article 46 GDPR.
By default, transcripts and metadata stored by Alveni AI are automatically deleted after 30 days. Earlier deletion is possible upon request.
The email summary received by the hotel is subject to the hotel’s respective retention obligations.
No voice recognition is performed. No voice profiles are created, and no audio signatures are used for identification purposes.
No AI model training is carried out using personal data. The processed data is not used for profiling purposes.
For certain functions, Alveni AG uses technical subprocessors, for example for hosting or telephony infrastructure. These subprocessors are contractually bound in accordance with Article 28 GDPR and receive only the data strictly necessary for technical provision.
Tracking and cookies
No cookies or tracking tools are used for the telephone function.
No fully automated decision-making with legal effect takes place.
Callers are clearly informed at the beginning of the call that they are speaking with an AI-supported assistant. At any time, they may request to be transferred to a human employee.
Legal basis
Data processing is carried out on the basis of Article 6(1)(f) GDPR.
Our legitimate interest lies particularly in ensuring reliable telephone availability and the efficient handling of incoming enquiries.
Where processing is required for the initiation or performance of a contract, for example in connection with a reservation enquiry, processing is additionally based on Article 6(1)(b) GDPR.
Voluntary nature and right to object
Providing personal data during the call is voluntary. You decide which information you wish to disclose.
You have the right to object to the processing of your personal data at any time with effect for the future.
Please send your request or objection to:
privacy@alveni.ai
Further information
Detailed information about data protection at Alveni AG can be found at: https://alveni.ai/datenschutz/