We, Broermann Health & Heritage Hotels GmbH, take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory provisions of the relevant data protection laws, in particular the European General Data Protection Regulation (GDPR) and this privacy policy.
This privacy policy covers the use of the digital services of Broermann Health & Heritage Hotels GmbH including our social media profiles via PC, smartphones, tablets and all other Internet-enabled mobile devices.
The digital offers may contain links to other services or websites of third party service providers to which our data protection information does not refer.
1. responsible person
1.1 Data processing in our area of responsibility
The controller responsible for the processing of your personal data on our websites is
Broermann Health & Heritage Hotels GmbH
Debusweg 6-18
61462 Königstein/Falkenstein im Taunus
If you have any questions about data protection at our company, please write to us at the above postal address with the addition "Data protection" or at the e-mail address DATENSCHUTZ@BROERMANN-HOTELS.COM.
2. purpose of the processing of personal data
2.1 Data processing for the provision of contractual services
We process personal data in order to process the contractual relationships, in particular the booking of hotel rooms and the sale of vouchers, and to be able to submit contract offers in line with requirements. The data is collected in particular to conclude a contract.
For all forms, we only collect the personal data that is absolutely necessary for processing the contractual relationship or for your request for information. This information is marked with an asterisk where applicable. The collection of data that is not absolutely necessary, but in which we have an interest in order to optimize the fulfillment of the purpose, is only optional. In this case, you decide on a voluntary basis whether and which data you wish to provide us with. We may require your correct name, address and payment details for your order. We ask for your e-mail address and telephone number so that we can communicate with you if we have any questions or problems regarding the service you have commissioned.
The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.
2.2 Data processing for communication with you
In addition to the contract data, we process your communication data (name, address, and/or telephone and/or fax number and/or e-mail address) in order to process your request and/or to be able to contact you. Personal data that you provide to us by e-mail or via a contact form will only be processed for correspondence with you or only for the purpose for which you have provided us with the data.
The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.
2.3 Comment function, guestbook
On some of our websites, we offer you the opportunity to leave your opinion in the form of comments. When you submit a comment, in addition to your comment, information about the time the comment was created, the IP address assigned to you, your website URL if applicable, your e-mail address if applicable and the name you provided will be stored. As we do not check comments on our site before they are activated, we need this data in order to be able to take action against the author in the event of legal violations such as insults or propaganda.
The comments and the associated above-mentioned data are stored until the commented content has been completely deleted or the comments must be deleted for legal reasons.
The comments are stored on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time. All you need to do is send us an informal email. The legality of the data processing operations already carried out remains unaffected by the revocation.
2.4 Newsletter
With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The respective content of a newsletter is explained in the respective declaration of consent. If you would like to receive a newsletter offered by us, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. For this purpose, we will send you an e-mail with a confirmation link (double opt-in) to the e-mail address you have provided. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month.
The only mandatory information for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and is used to address you personally. In addition, we store the IP addresses you use and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data. We do not collect any other data in this context. We use this data exclusively for sending the requested newsletter. If we use a processor to send the newsletter, we will of course comply with the applicable data protection laws.
The data processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent to the sending of a newsletter at any time and cancel the respective subscription. You can declare your revocation by clicking on the link provided in each email or by sending us a message using the contact details given in section 1. The legality of the data processing operations that have already taken place remains unaffected by the revocation.
2.5 Cookies
We use so-called cookies on some of our websites, among other things to be able to offer you website-specific services, to recognize you when you return to our website, and/or to adapt our offer to your personal preferences.
Cookies are small text files that are stored on a visitor's computer and contain data about the respective user in order to give them access to various functions. Both session cookies and persistent cookies are used on our website. A session cookie is temporarily stored on the computer you are using while you navigate through the website. A session cookie is deleted as soon as you close your Internet browser or as soon as your session has expired after a certain period of time. A persistent cookie remains on your computer until it is deleted. Storing a cookie ensures that you do not have to repeatedly enter your personal settings and preferences each time you visit. This saves you time and makes using our website more convenient for you.
You can delete permanently installed cookies via your browser settings. Most browsers accept cookies automatically - so if you want to suppress the use of cookies, you may have to actively delete or block cookies or prevent the storage of cookies by setting your browser software. Please note, however, that if you refuse the use of cookies, you may still be able to visit our website, but some functions may not work properly.
The use of the aforementioned cookies is in the interest of a uniform presentation and functionality of our websites. The basis for data processing is Art. 6 para. 1 lit. f GDPR, which permits the processing of data for the purposes of the legitimate interests pursued by the controller, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.
2.6 Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc (hereinafter referred to as "Google"). Google Analytics uses cookies (see above), which enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
However, since IP anonymization is activated on our website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. We also use the "demographic features" function of Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and from visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section "Objection to data collection".
Google has been certified in accordance with the current EU-US Privacy Shield (see HTTPS://WWW.PRIVACYSHIELD.GOV/PARTICIPANT?ID=A2ZT000000001L5AAI) and has thus created the legal requirements for the adequacy of the level of data protection, including for the provision of the Google Analytics service by way of order processing. We have concluded an order processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Further information on terms of use and data protection can be found at HTTP://WWW.GOOGLE.COM/ANALYTICS/TERMS/DE.HTML or at HTTPS://WWW.GOOGLE.DE/INTL/DE/POLICIES/.
The data transmitted by your browser as part of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your anonymized IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: HTTP://TOOLS.GOOGLE.COM/DLPAGE/GAOPTOUT?HL=EN. You can also prevent Google Analytics from collecting data by clicking on the following link. An opt-out cookie will be set to prevent the future collection of your data when you visit this website: [insert a link via the code here]
The storage of Google cookies and the analysis for statistical purposes is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the analysis of user behavior in order to optimize both our offer and, if necessary, advertising for our offer.
2.7 Google Remarketing Tags
We use Google Remarketing Tags. These are services provided by Google that use cookies, which are stored on your computer and enable your use of the website to be analyzed. The information collected by the cookie about your use of this website is transmitted to a Google server in the USA and stored there. The IP address is then shortened by Google by the last three digits, so that a clear assignment of the IP address is no longer possible. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Third-party providers, including Google, place advertisements on websites on the Internet. Third-party providers, including Google, use stored cookies to place ads based on a user's previous visits to this website. Google will not associate your IP address with any other data held by Google. You can object to the collection and storage of data at any time with effect for the future. You can deactivate the use of cookies by Google by visiting the page to DISABLE GOOGLE ADVERTISING. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. You can object to the collection and storage of data at any time with effect for the future. Further information on Google's provisions can be found HERE. As an alternative to the browser plugin or within browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent Google Analytics from collecting data within this website in the future (this opt-out cookie only works in this browser and only for this domain, if you delete your cookies in this browser, you must click this link again): Deactivate Google Analytics. (insert link)
Further information on terms of use and data protection can be found at HTTP://WWW.GOOGLE.COM/ANALYTICS/TERMS/DE.HTML or at HTTPS://WWW.GOOGLE.DE/INTL/DE/POLICIES/.
The storage of Google cookies and the analysis for statistical purposes is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the analysis of user behavior in order to optimize both our offer and, if necessary, advertising for our offer.
2.8 Google reCAPTCHA
In the context of the comment function, we use "Google reCAPTCHA" (hereinafter "reCAPTCHA") from Google on our websites. reCAPTCHA is used to check whether the data input is made by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent on the website by the website visitor or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place.
Further information on Google reCAPTCHA and Google's privacy policy can be found in the following links: HTTPS://WWW.GOOGLE.COM/INTL/DE/POLICIES/PRIVACY/ and HTTPS://WWW.GOOGLE.COM/RECAPTCHA/INTRO/ANDROID.HTML.
Data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in protecting our website from abusive automated spying and from so-called SPAM.
2.9 Google Double-Click (including Floodlight and Spotlight), Google AdWords Conversion, Google Dynamic Remarketing
We also use Google Analytics to analyze data from the Google AdWords and DoubleClick services for statistical purposes. This allows us to analyze what happens after a user clicks on our ad in order to improve our offers, e.g. whether the user has purchased our product or accessed the ad from a cell phone. You will also receive interest-based advertising via these services. If you do not want this, you can deactivate it via the GOOGLE ADVERTISING PREFERENCES MANAGER.
DoubleClick places a cookie on your computer to record your surfing behavior on various websites (tracking) and to display interest-based advertising. If you want to permanently prevent this, you can DOWNLOAD a PLUG-IN under the following link to deactivate the DoubleClick cookie.
Information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. This tells us the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. We do not receive any information with which users can be personally identified. If you do not wish to participate in tracking, you can object to this use by easily deactivating the Google Conversion Tracking cookie via your Internet browser under user settings or by deactivating it via the aforementioned plugins or settings.
The storage of Google cookies and the analysis for statistical purposes are carried out on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the analysis of user behavior in order to optimize both our offer and, if necessary, advertising for our offer.
2.10 Google Maps
This website uses the Google Maps map service via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.
You can find more information on the handling of user data in Google's privacy policy: HTTPS://WWW.GOOGLE.DE/INTL/DE/POLICIES/PRIVACY/.
The use of Google Maps is in the interest of making it easy to find the places we have indicated on the website. The basis for data processing is Art. 6 para. 1 lit. f GDPR, which permits the processing of data for the purposes of the legitimate interests pursued by the controller, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.
2.11 Log files
Each time our websites are accessed, usage data is transmitted by the respective Internet browser and stored in log files, the so-called server log files. The stored data records contain the following data: Browser type and browser version, operating system used, referrer URL, time of server request, shortened IP address.
This data cannot be assigned to specific persons. This data is not merged with other data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use.
The basis for data processing is Art. 6 para. 1 lit. f GDPR, which permits the processing of data to safeguard the legitimate interests of the controller, provided that the interests or fundamental rights and freedoms of the data subject do not prevail.
2.12 Zendesk
This website uses the ticket system and/or chat Zendesk or Zendesk Chat, a customer service platform of Zendesk Inc, 1019 Market Street, San Francisco, CA 94103, USA, to process customer inquiries. For this purpose, personal data such as surname, first name, address, telephone number, e-mail address are collected via our website in order to be able to answer your support ticket or chat request. We may obtain your consent before using your data. Zendesk is certified in accordance with the Privacy Shield specified by the US Department of Commerce. You can find more information on data processing by Zendesk in Zendesk's privacy policy at HTTPS://WWW.ZENDESK.DE/COMPANY/CUSTOMERS-PARTNERS/PRIVACY-POLICY or PRIVACY@ZENDESK.COM.
The basis for data processing is Art. 6 para. 1 lit. f GDPR, which permits the processing of data to safeguard the legitimate interests of the controller, provided that the interests or fundamental rights and freedoms of the data subject do not prevail.
2.13 Data processing in the context of our Facebook company website
We operate a company page (fan page) on the social network facebook.com. We are jointly responsible with Facebook for the operation of the Facebook fan page within the meaning of Art. 26 GDPR. The agreement on joint responsibility can be found here HTTPS://WWW.FACEBOOK.COM/LEGAL/TERMS/PAGE_CONTROLLER_ADDENDUM. Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook") is primarily responsible for data processing.
The nature and scope of the information you provide to Facebook, the associated purposes of data processing by Facebook, its legality and information on exercising your rights can be found in the data policy, as well as other information provided by Facebook on the processing of "Insights data". HTTPS://EN-EN.FACEBOOK.COM/POLICY.PHP
Facebook provides us with so-called Page Insights for our site. Page Insights (HTTPS://WWW.FACEBOOK.COM/BUSINESS/A/PAGE/PAGE-INSIGHTS) is summarized data that allows us to gain insight into how people interact with our page. Facebook is responsible for generating and providing these Page Insights; we have no influence over this. This also applies to data processing, which is carried out exclusively for the purposes of Facebook. Facebook also assumes all obligations under the GDPR with regard to the processing of Insights data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR).
The purpose of the data processing of the data provided by Facebook by us is the statistical evaluation of the use of our fan page. This enables us, for example, to determine the preferred visiting and posting times of our users and to use this information to optimize our posts and our fan page. In addition, we process personal data made publicly available by you on Facebook (e.g. real names in the user profile) as well as data directly related to activities on our fan page (e.g. contributions, posts, likes, tags), also for the purpose of communicating with you.
The basis for data processing is Art. 6 para. 1 sentence 1 lit. a GDPR, provided that you have given Facebook your consent. You can revoke your consent to Facebook at any time with effect for the future. Otherwise, our data processing is based on Art. 6 para. 1 sentence 1 lit. f GDPR, which permits the processing of data to safeguard the legitimate interests of the controller, provided that the interests or fundamental rights and freedoms of the data subject do not prevail. Our interest lies in the provision of content and communication with Facebook users and in improving the reach and effectiveness of our posts.
Please assert your rights to information, correction, deletion, restriction of processing and data portability of your stored Insights data against Facebook, as Facebook has assumed the corresponding obligations:
Facebook Inc.
1601 S. California Ave
Palo Alto, CA 94304, USA
Privacy policy: HTTPS://WWW.FACEBOOK.COM/ABOUT/PRIVACY/
Opt-out: HTTPS://WWW.FACEBOOK.COM/SETTINGS?TAB=ADS
Privacy Shield: HTTPS://WWW.PRIVACYSHIELD.GOV/PARTICIPANT?ID=A2ZT0000000GNYWAAC&STATUS=ACTIVE
2.14 Online presence in other social networks
We have set up online presences in various social networks in order to communicate with you, interested parties and customers and to provide information about our services and current offers. In addition to our interaction with you, the social networks process data from visitors to their websites for the purpose of market research and advertising, i.e. a user profile may be created by the respective operator of the social network from the respective visit or usage behavior and the preferences and interests of a visitor derived from this. Such user profiles can be used, among other things, to display advertisements customized to the respective user profile within the respective social network and possibly on other websites. Cookies (see above) may be stored on visitors' devices, which can be used to collect data on user behavior. This data can also be collected across several browsers and/or end devices used by a user, especially for logged-in members of the respective social network. Even if a visitor does not have a profile with the respective social network, it cannot be ruled out that personal data relating to this visitor will be stored when they visit the respective website. Requests for information regarding the data stored via our online presences in social networks or the exercise of other data subject rights in this regard (see below) can be addressed to the provider of the respective service. Only the providers of the social networks have access to the respective data stored there and can provide the relevant information. With regard to the purpose and scope of data processing by the various social networks, we also refer to their respective data protection notices and the respective contact options:
Instagram
Facebook Ireland Ltd.
4 Grand Canal Square
Dublin 2, Ireland
Privacy policy: HTTPS://WWW.FACEBOOK.COM/ABOUT/PRIVACY/
Contact: HTTPS://WWW.FACEBOOK.COM/HELP/CONTACT/540977946302970
Opt-out: HTTPS://WWW.FACEBOOK.COM/SETTINGS?TAB=ADS
Twitter Inc.
795 Folsom St., Suite 600
San Francisco, CA 94107, USA
Privacy policy: HTTPS://TWITTER.COM/DE/PRIVACY
Opt-out: HTTPS://TWITTER.COM/PERSONALIZATION
Privacy Shield: HTTPS://WWW.PRIVACYSHIELD.GOV/PARTICIPANT?ID=A2ZT0000000TORZAAO&STATUS=ACTIVE
XING AG
Dammtorstrasse 29-32
20354 Hamburg, Germany