Privacy Policy

The protection of your personal data is important to us.

The protection of your personal data is important to us as a responsible company. In the following, we, the Hotel Oberkirch, inform you about how we collect, process and use your personal data (collectively referred to as «use»).

Decisive for the use of your data are the applicable legal provisions, in particular the Federal Data Protection Act and the Telemedia Act. Insofar as we use data for a purpose that requires your consent in accordance with these provisions, we will ask for your express consent. You may revoke the given consent at any time with effect for the future and / or object to future uses of your data. You may revoke your consent at any time with future effect. In case of cancellation, your data will be deleted immediately, unless there are legal regulations.

Data storage:

a) hotel reservation:

When you reserve a room with us, we electronically save all associated information except the credit card number up to ten years after your (last) departure. In accordance with the rules of the various credit card companies, there is no electronic storage of credit card details after their retrieval (usually on the day of the reservation or the first opening day after your reservation). The paper-based storage of your credit card data remains unaffected – the destruction of this data after the end of the statutory retention period is in accordance with the provisions of the Data Protection Act.

Your data is collected and stored on the basis of the German “Meldegesetz”, after one year on the basis of commercial law. We may save any wishes or allergies expressed to us in order to make your stay with us as pleasant as possible.

We use GauVendi as booking engine, their privacy policy is to be found here.

b) contact form:

Data that you submit to us via the contact form on our homepage will be stored electronically until the final processing of the request. A transfer to third parties does not take place unless valid data protection regulations warrant a transfer or we are legally obliged to do so. You may revoke your consent at any time with future effect. In case of cancellation, your data will be deleted immediately, unless there are legal regulations. E-mail correspondence resulting therefrom is usually stored securely for possible proof and the possibility of tracking errors or errors even without a reservation for one year, otherwise in accordance with applicable trade and data protection legislation.

For table reservations we use reservino, their privacy policy is to be found here.

Data protection information for the use of our telephone assistant:

With this notice we inform you about which data we collect from you when you use our telephone assistant and how we use your data there.

What data do we collect, for what purpose and for how long?

When using the digital telephone assistant, we process your spoken word (audio) by creating a text from it using speech recognition. This text is used to process and answer your request. The audio data is irrevocably deleted immediately after transcription. The transcript is stored so that your request can be traced. To check and accept reservations, the service records the following data: telephone number, date, time, number of people, first and last name. The storage period is 12 months.

Legal basis for data processing:

The collection of your data by our telephone assistant constitutes the processing of personal data within the meaning of the GDPR. This use is based on a free contractual relationship between you and the responsible body (Art. 6 Para. 1 lit. b GDPR). The contractual relationship consists in the provision of information about our restaurants and the offer to accept reservations, which you request from us as a result of using our telephone assistant. In addition, we rely on an overriding legitimate interest in accordance with Art. 6 Para. 1 lit. f GDPR. We justify this interest with our intention to provide gastronomic services.

Will this data be passed on?
The responsible body works with a processor to carry out data processing. In doing so, we adhere to the provisions of the applicable European data protection law. We also ensure compliance with these provisions through separate agreements with our processor.

Furthermore, reservino’s privacy policy, which can be found here, also applies to the use of the telephone assistant.

Data protection for applications and in the application process

The controller collects and processes the personal data of applicants for the purpose of processing the application process. Processing can also be carried out electronically. This is particularly the case if an applicant submits corresponding application documents to the controller electronically, for example by email or via a web form on the website. If the controller concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the controller does not conclude an employment contract with the applicant, the application documents will be automatically deleted two months after the rejection decision is announced, provided that there are no other legitimate interests of the controller that conflict with deletion. Other legitimate interests in this sense include, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).

Our magazine:

We send our guest magazine by email and by post, depending on which method you have chosen. You can receive our guest magazine at any time by email or letter.

If you would like to receive the guest magazine and/or special mailings, we require an email address from you as well as information that allows us to verify that you are the owner of the specified email address and that you agree to receive the newsletter.

To ensure that emails are sent with consent, we use the so-called double opt-in procedure for online orders. This allows the potential recipient to be added to a mailing list. The user then receives a confirmation email giving them the opportunity to legally confirm their registration. Only if the confirmation is received will the address be actively added to the mailing list.

We use this data exclusively to send the requested information and offers.

ExperienceHotel is used as newsletter software. Their privacy policy can be found here.

You can revoke your consent to the storage of your data, your email address and its use for sending the newsletter at any time, for example via the “Do not receive emails from us” link in the newsletter.

The data protection measures are always subject to technical innovations. For this reason, we ask you to inform yourself about our data protection measures at regular intervals by reading our data protection declaration.

Third-party providers:

It may happen that third-party content, such as videos from YouTube, maps from Google Maps or RSS feeds, is integrated into our website. This always assumes that the providers of this content (hereinafter referred to as “third-party providers”) perceive the IP address of the user. Without the IP address, they would not be able to send the content to the browser of the respective user. We endeavor to only use content whose respective providers only use the IP address to deliver the content. However, we have no influence on whether the third-party providers save the IP address, e.g. for statistical purposes.

Google Analytics:

This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google uses cookies. The information generated by the cookie about the use of the online service by users is usually transferred to a Google server in the USA and saved there. Google will use this information on our behalf to evaluate the use of our online service by users, to compile reports on the activities within this online service
and to provide us with other services related to the use of this online service and internet usage. Pseudonymous user profiles of users can be created from the processed data. Google Analytics is only used on this website with activated IP anonymization. This means that the IP address of users is shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area.
Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The IP address transmitted by the user’s browser is not merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly; users can also prevent Google from collecting the data generated by the cookie and relating to their use of the website and from processing this data by downloading and installing the browser plug-in available under the following link:
http://tools.google.com/dlpage/gaoptout?hl=en. Information on data protection when using Google Analytics can be found at https://www.google.com/analytics/learn/privacy.html?hl=en, Information about data protection in General you can find here:http://www.google.com/intl/de/policies/privacy.

Cookies:

This website uses cookies, i.e. text files that are stored on your computer. Permanent cookies recognize that your PC has already been connected to a website, “session cookies” save the last offers viewed. “Session cookies” are deleted at the end of the session. There are no disadvantages for you when you use cookies in the form we have chosen. You can generally accept or exclude the setting, i.e. saving of cookies, by setting your browser accordingly. If you exclude cookies, this can lead to restrictions in the functionality of the website.

Links:

This website contains links to external third-party websites over whose content we have no influence. Therefore, no liability can be assumed for this external content. The content of external sites linked to here does not reflect the opinion of the website operator, but is merely intended to provide information and illustrate contexts. The respective provider or operator of the site is always responsible for the content of the linked sites. The linked sites were checked for possible legal violations at the time of linking. At the time of linking, no illegal content was recognizable. However, permanent monitoring of the content of the linked sites is not reasonable without concrete evidence of a legal violation. If we become aware of any legal violations, we will remove such links immediately.

Legal basis:

for the processing of personal data in connection with general inquiries by e-mail or contact form: Personal data processed in connection with a general inquiry by e-mail or contact form are processed on the basis of consent, Article 6 GDPR.

Rights of data subjects:

You have the following rights under the General Data Protection Regulation (GDPR):

Right to information:

According to Article 15 GDPR, you can request confirmation as to whether data concerning you is being processed. If this is the case, you have a right to information about the information processed.

Right to withdraw consent:

If the processing of your personal data is based on consent, you have the right to withdraw this consent at any time in accordance with Article 7 GDPR. Right to object: If the processing of your personal data is necessary to protect the legitimate interests of our company, you can object to the processing at any time in accordance with Article 21 GDPR.

Right to erasure:

If you have withdrawn your consent, objected to the processing of your personal data (and there are no overriding legitimate grounds for the processing), your personal data are no longer necessary for the purposes of the processing, there is a corresponding legal obligation or your personal data have been processed unlawfully, you have the right to request the erasure of your personal data in accordance with Article 17 GDPR.

Right to rectification:

If your personal data has been processed incorrectly, you have the right to request the immediate rectification of this data in accordance with Article 16 GDPR.

Right to restriction of processing:

Under the conditions of Article 18 GDPR, you have the right to request the restriction of the processing of your personal data.

Right to data portability:

According to Article 20 GDPR, you have the right to receive the personal data you have provided in a structured, common and machine-readable format.

Right to complain:

According to Article 13 GDPR, you have the right to lodge a complaint with the competent supervisory authority. To assert your rights, you can contact us at the following email address: datenschutz@hotel-oberkirch.de