Source: https://homburgerhof.com/en/datenschutz/
Timestamp: 2019-04-26 06:18:04+00:00

Document:
We are very pleased about your interest in our company. Data protection is of particular importance for the management of the Homburger Hof. A use of the internet pages of the Homburger Hof is basically possible without any indication of personal data. However, if a data subject wishes to use our company's special services through our website, personal data processing may be required. If the processing of personal data is required and there is no legal basis for such processing, we generally seek the consent of the data subject.
The Homburger Hof, as controller, has implemented numerous technical and organizational measures to ensure the most complete protection possible for personal data processed via this website. Nevertheless, Internet-based data transmissions can generally have security holes, so that absolute protection can not be guaranteed. For this reason, every person concerned is free to submit personal data to us by alternative means, for example by telephone.
By using cookies, the Homburger Hof can provide users of this website with more user-friendly services that would not be possible without the cookie setting.
The website of the Homburger Hof collects a series of general data and information each time the website is accessed by an affected person or an automated system. This general data and information is stored in the log files of the server. The (1) browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system accesses our website (so-called referrers), (4) the sub-web pages, which can be accessed via (5) the date and time of access to the website, (6) an Internet Protocol (IP) address, (7) the Internet service provider of the accessing system and (8) other similar data and information used in the event of attacks on our information technology systems.
When using this general data and information, the Homburger Hof does not draw any conclusions about the person concerned. Rather, this information is required in order to (1) correctly deliver the contents of our website, (2) to optimize the content of our website and to advertise it, (3) to ensure the continued functioning of our information technology systems and the technology of our website, and ( 4) to provide law enforcement authorities with the necessary information for prosecution in case of a cyberattack. This anonymously collected data and information is therefore statistically and further evaluated by the Homburger Hof with the aim of increasing data protection and data security in our company in order to ultimately ensure the best possible level of protection for the personal data processed by us. The anonymous data of the server log files are stored separately from all personal data provided by an affected person.
Due to legal regulations, the website of the Homburger Hof contains information that enables quick electronic contact to our company as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If an affected person contacts the data controller by e-mail or through a contact form, the personal data provided by the data subject will be automatically saved. Such personal information provided on a voluntary basis by a data subject to the controller is stored for the purposes of processing or contacting the data subject. There is no disclosure of this personal data to third parties.
The data subject withdraws the consent on which the processing was based in accordance with Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR and lacks any other legal basis for the processing.
According to Art. 21 (1) GDPR, the data subject submits an objection against the processing, and there are no legitimate reasons for the processing, or the person concerned objects to the processing pursuant to Art. 21 (2) GDPR.
If one of the above reasons is correct and an affected person wishes to arrange for the deletion of personal data stored at the Homburger Hof, they may at any time contact an employee of the controller. The employee of the Homburger Hof will arrange that the extinguishing request be fulfilled immediately.
If the personal data have been made public by the Homburger Hof and if our company is responsible for deleting personal data as the person responsible pursuant to Art. 17 (1) DSGVO, the Homburger Hof takes appropriate measures, including technical ones, taking into account the available technology and the implementation costs in order to inform other data controllers processing the published personal data that the data subject has requested the deletion of all links to such personal data or copies or replications of such personal data from those other data controllers unless the processing is required. The employee of the Homburger Hof will arrange the necessary in individual cases.
If one of the above-mentioned conditions exists and an affected person wishes to request the restriction of personal data stored at the Homburger Hof, he may at any time contact an employee of the controller. The employee of the Homburger Hof will cause the restriction of processing.
Any person affected by the processing of personal data shall have the right granted by the European Di- rective and Regulatory Authority to receive the personal data concerning him / her provided to a controller by the data subject in a structured, common and machine-readable format. It also has the right to transmit this data to another person without hindrance by the controller to whom the personal data was provided, provided that the processing is based on the consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) Subparagraph (a) of the DSGVO or on a contract pursuant to Article 6 (1) (b) of the GDPR and processing by means of automated procedures, unless the processing is necessary for the performance of a public-interest or public-authority task; which has been transferred to the person responsible.
Furthermore, in exercising their right to data portability under Article 20 (1) of the GDPR, the data subject has the right to obtain that the personal data is transmitted directly from one controller to another, insofar as this is technically feasible and if not so the rights and freedoms of others are impaired.
To assert the right to data portability, the data subject may at any time contact an employee of the Homburger Hof.
In the event of an objection, the Homburger Hof will no longer process personal data unless we can prove that there are compelling reasons for processing that outweigh the interests, rights and freedoms of the data subject, or the processing is for assertion, exercise or defense of legal claims.
If the Homburger Hof processes personal data in order to operate direct mail, the data subject has the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to the profiling, as far as it is associated with such direct mail. If the data subject objects to the Homburger Hof for processing purposes for direct marketing purposes, the Homburger Hof will no longer process the personal data for these purposes.
In addition, the data subject has the right, for reasons arising from his or her particular situation, to process personal data relating to him or her at the Homburger Hof for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) GDPR To object, unless such processing is necessary to fulfill a public interest task.
In order to exercise the right of opposition, the data subject may directly contact any member of the Homburger Hof or any other employee. The data subject is also free, in the context of the use of information society services, notwithstanding Directive 2002/58 / EC, to exercise his right of opposition by means of automated procedures using technical specifications.
If the decision (1) is required for the conclusion or performance of a contract between the person concerned and the controller or (2) it takes place with the express consent of the data subject, the Homburger Hof shall take appropriate measures to safeguard the rights and freedoms and the authorized persons Interests of the data subject, including at least the right to obtain the intervention of a person by the controller, to express his / her own position and to contest the decision.
The controller has integrated the Google+ button as a component on this website. Google+ is a so-called social network. A social network is an Internet-based social meeting place, an online community that usually allows users to communicate with each other and interact in virtual space. A social network can serve as a platform for sharing views and experiences, or allows the Internet community to provide personal or business information. Google+ allows social network users to create private profiles, upload photos, and socialize through friend requests, among other things.
The operating company of Google+ is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.
Each visit to one of the pages of this website operated by the controller and incorporating a Google+ button will cause the internet browser on the subject's information technology system to be automatically triggered by the respective Google+ button, a representation of the corresponding Google+ Download button from Google. As part of this technical process, Google will be aware of which specific bottom of our website is visited by the person concerned. More detailed information about Google+ is available at https://developers.google.com/+/.
If the person is logged in to Google+ at the same time, Google recognizes with each visit to our website by the data subject and during the entire duration of the respective stay on our website, which specific bottom of our website visited the person concerned. This information is collected through the Google+ button and assigned by Google to the relevant Google + account for the data subject.
If the person concerned activates one of the Google + buttons integrated on our website and thus makes a Google + 1 recommendation, Google assigns this information to the personal Google + user account of the person concerned and stores this personal data. Google will store the Google +1 recommendation of the data subject and make it publicly available in accordance with the conditions accepted by the data subject. A Google +1 referral made by the data subject on this website is subsequently provided together with other personal information, such as the name of the Google + 1 account used by the data subject and the photo in other Google services stored therein, For example, the search engine results of the Google search engine, the Google account of the data subject or other places, such as on websites or in connection with advertisements stored and processed. Furthermore, Google is able to link the visit to this website with other personal data stored on Google. Google also records this personal information for the purpose of improving or streamlining Google's various services.
Google always receives information via the Google + button that the person concerned has visited our website if the person concerned is simultaneously logged in to Google+ at the time of access to our website; this happens regardless of whether the person clicks the Google + button or not.
If the person concerned is simultaneously logged into Instagram, Instagram recognizes with each visit to our website by the data subject and during the entire duration of the respective stay on our website, which specific subpage the person concerned visits. This information is collected through the Instagram component and assigned through Instagram to the affected person's Instagram account. If the person concerned activates one of the Instagram buttons integrated on our website, the data and information transmitted with it are assigned to the personal Instagram user account of the person concerned and saved and processed by Instagram.
Art. 6 I lit. A GDPR serves our company as the legal basis for processing operations in which we obtain consent for a particular processing purpose. If the processing of personal data is necessary to fulfill a contract of which the data subject is a party, as is the case, for example, in processing operations necessary for the supply of goods or the provision of any other service or consideration, processing shall be based on Art. 6 I lit. b DSGVO. The same applies to processing operations that are necessary to carry out pre-contractual measures, for example in the case of inquiries about our products or services. If our company is subject to a legal obligation which requires the processing of personal data, such as the fulfillment of tax obligations, the processing is based on Art. 6 I lit. c DSGVO. In rare cases, the processing of personal data may be required to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our premises were injured and his or her name, age, health insurance or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6 I lit. d DSGVO are based.
Ultimately, processing operations could be based on Art. 6 I lit. f DSGVO are based. Processing operations that are not covered by any of the above legal bases are based on this legal basis if processing is necessary to safeguard the legitimate interests of our company or a third party, unless the interests, fundamental rights and fundamental freedoms of the person concerned prevail. Such processing operations are particularly permitted because they have been specifically mentioned by the European legislator. In that regard, it considered that a legitimate interest could be assumed if the data subject is a customer of the controller (recital 47, second sentence, DSGVO).
Is the processing of personal data based on Article 6 I lit. f DSGVO is our legitimate interest in conducting our business for the benefit of all of our employees and our shareholders.
We clarify that the provision of personal data is partly required by law (eg tax regulations) or can also result from contractual regulations (eg information about the contracting party).

References: Art. 21
 Art. 21
 Art. 17
 Art. 6
 Art. 9
 Art. 89

Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6