Source: https://www.wellnesshotels-resorts.de/en/dataprotect
Timestamp: 2019-04-19 14:42:50+00:00

Document:
Protecting personal data is an important concern to us. Processing personal data is therefore carried out in accordance with the applicable European and national laws. You can of course revoke your consent at any time with future effect. To do this, please contact the data controller in accordance with § 1.
Processingis any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Profilingrefers to any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a person, in particular to analyse or predict aspects concerning that person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
The Processorrefers to a legal person, public authority, agency or other body which processes personal data on behalf of the controller.
A third partyis a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
Consentis any freely given, specific, informed and unambiguous indication of the data subject/user's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
The log files contain IP addresses: The data is also stored in the log files of our system. This data is not stored together with other personal user data. The legal basis for temporary storage of log files is Art. 6 para. 1 S. lit. f) GDPR.
The purpose of using technically unnecessary cookies is to improve the quality of our website and its contents. Through the analysis cookies we learn how the website is used and can thus continuously optimise our offer. This information is used when you visit the website again with the same device to automatically recognise you and facilitate navigation. For these purposes, our legitimate interest also lies in the processing of personal data pursuant to Art. 6 para. 1 lit. f GDPR.
(1) With your consent you can subscribe to our newsletter free of charge, with which we inform you of our current interesting offers. The goods and services to be advertised will be named in the consent form.
To subscribe to our newsletter, we use the "double opt-in" procedure. This means that after your registration we will send you an e-mail to the specified e-mail address in which we ask you to confirm that you would like the newsletter to be sent. If you do not confirm your registration within [24 hours], your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and the time of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.The only required information for sending the newsletter is your email address. Any other further information is voluntary and is used to address you personally. The data will be used exclusively for sending the newsletter.
You can cancel the receipt of our newsletters at any time and thus revoke your consent by clicking on the field "Unsubscribe newsletter" in our newsletter unsubscriberor by sending us an email to [post (at) wh-r.com] or a message to the contact details given in the imprint.
Credit agencies to check creditworthiness (name, address, date of birth, etc. are sent). In this case, the data is only sent if we make advance payments for orders (e.g. purchase on account).
The legal basis isArt.6 para. 1S. 1 lit. b) GDPR.With regard to voluntary data, the legal basis for the processing of the data is Art. 6 para. 1 S. 1 lit. a) GDPR.
The data collected is required for the fulfilment of the contract with the user (for sending the goods and confirming the contents of the contract). We therefore use the data to answer your inquiries, to process your order, and if necessary to check the creditworthiness or recovery of a claim and for the purpose of technical administration of the website. The voluntary information was provided to prevent misuse and, if necessary, to investigate criminal offences.We may also process the data you provide in order to inform you of other interesting and similar offers from our own portfolio or to send you emails containing technical information.
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. We are obliged by commercial and tax law to store your address, payment, and order details for a period of ten years after implementing the contract. However, after [two years] we limit the processing of your data, that is, your data will only be used to comply with legal obligations. If there is a continuing obligation between ourselves and the user, we store the data for the entire term of the contract and for ten years thereafter (see above). With regard to the data voluntarily provided, we will delete the data upon expiry of [two] years after execution of the contract, unless another contract is concluded with the user during this period; in this case, the data will be deleted upon expiry of [two] years after implementation of the last contract.
If the data is required for the fulfillment of a contract or the implementation of pre-contractual measures, early erasure of data is only possible insofar as contractual or legal obligations do not preclude erasure.
Otherwise, you are free to have the personal data provided during registration completely deleted from the database of the data controller. The data controller will inform you at any time upon request of which personal data relating to the data subject is stored. Furthermore, the controller shall correct or delete personal data at the request or notice of the data subject, provided that there is no legal obligation to keep such data in safekeeping. You can contact the data controller or the data protection officer pursuant to § 1 at any time by email or post and ask for deletion/modification of the data.
Embedding YouTube videos: We have included YouTube videos in our online offer, which are stored on https://www.youtube.com/channel/UC9OEXYgC0QqHSqSU1FH3YAQ and can be played directly on our website. [They are all integrated in the "Extended Privacy Mode", i.e. no data about you as a user is sent to Youtube if you do not play the videos. Only when you play the videos will the data referred to in paragraph 2 be transmitted. We have no influence on this data transfer.When you visit this website, YouTube receives the information that you have accessed the corresponding subpage of our website.
The integration of the videos serves to make the website clearer for the user and to increase the search engine ranking of the website on Google, YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or requirements-oriented design of its website. Such evaluation also takes place (even for users who are not logged in) for the purposes of providing customised advertising and to inform other social network users about activities on our website.
· Freely selectable telephone no.
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data from the contact form input screen and the data that was sent by e-mail, this is the case when the respective conversation with the user has been completed. The conversation will have ended when it is evident from the circumstances that the matter at hand has been conclusively resolved. Personal data that was additionally collected during the sending procedure will be deleted at the latest after a period of sevendays.
We use what is called the two-click solution. This means that if you visit our site, initially no personal data will be sent to Facebook. We offer you the option of communicating directly with Facebook via the button. Only if you click on the marked field and thereby activate it will Facebook receive the information that you accessed the corresponding website of our online offer.
Data sharing is independent of whether you have a Facebook account and are logged in.
If you click the Facebook "Like" button while logged into your Facebook account, the content of these pages can also be linked to your Facebook profile. In this case, Facebook may also associate the visit to these pages with your user account. When activating the activated button and linking the page, for example, Facebook also stores this information in your user account and communicates this to your contacts in public. We recommend that you log out regularly after using a social network, especially before activating the button, as this way you can avoid it being assigned to your profile.
If you are not a member of Facebook or logged out of Facebook before visiting this page, it is still possible for Facebook to obtain and store your IP address. If you do not want Facebook to associate your visit to our pages with your Facebook account, you must log out of Facebook before visiting our website or you must not activate the plugin.
Browser-related data such as IP address, browser type, operating system, time and date of the request, website visited.
According to Facebook, the IP addresses in Germany will be made anonymous immediately after collection. By activating the plugin, your personal data will be transmitted to Facebook and stored in the USA. Since Facebook collects data mainly via cookies, we recommend that you delete all cookies before clicking on the grayed-out box using your browser's security settings.
We have no influence on the data collected and data processing processes, nor are we aware of the full extent of data collection, the purposes of processing, the storage periods. We also have no information on how Facebook deletes the data collected.
Facebook stores the data collected about you as user profiles and uses it for the purposes of advertising, market research, and/or demand-oriented design of its website. Such evaluation is also made for users who are not logged in, to display customised advertising and to inform other users of the social network about activities on our website. Through the plug-ins we offer you the option of interacting with social networks and other users, so that we can improve our offer and make it more interesting for you as a user.
(5) The legal basis for the use of the plugins is Art. 6 para. 1S. 1 lit. a GDPR. Facebook has submitted to the EU-US privacy shield, https://www.privacyshield.gov/EU-US-Framework.
You have the right to object to the creation of these user profiles, whereby you must contact Facebook to exercise this right.
Settings and objections to the use of data for advertising purposes are possible in the Facebook profile settings under https://www.facebook.com/settings?tap=ads. Further information on the purpose and scope of data collection and processing as well as on your respective rights by and vis-à-vis Facebook is available under http://www.facebook.com/policy.php<g>, http://www.facebook.com/help/186325668085084.
These pages use social media plugins from Google+1 of Google Inc. (Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA). This plugin allows you to bookmark these pages and share them with other members in the social network. The plugin can be recognised by the "+1" character. You can find an overview of the plug-ins from Google and their appearance here: https://developers.google.com/+/web/.
We use what is called the two-click solution. This means that if you visit our site, initially no personal data will be sent to Google. We offer you the option of communicating directly with Google via the button. Only if you click on the marked field and thereby activate it will Google receive the information that you accessed the corresponding website of our online offer.
If you click the "+1" button while logged into your Google account, the content of these pages can also be linked to your Google profile. In this case, Google may also associate the visit to these pages with your user account. When activating the activated button and linking the page, for example, Google also stores this information in your user account and communicates this to your contacts in public. We recommend that you log out regularly after using a social network, especially before activating the button, as this way you can avoid it being associated with your profile.
By activating the plugin, your personal data will be transmitted to Google and stored in the USA. Since Google collects data mainly via cookies, we recommend that you delete all cookies before clicking on the grayed-out box using your browser's security settings.
Google stores the data collected about you as user profiles and uses it for the purposes of advertising, market research and/or demand-oriented design of its website and, if necessary, for sending to partner companies. Such evaluation is also made for users who are not logged in, to display customised advertising and to inform other users of the social network about activities on our website. Through the plug-ins we offer you the option of interacting with social networks and other users, so that we can improve our offer and make it more interesting for you as a user.
You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
Further information on the purpose and scope of data collection and processing and on your respective rights by and towards Google is available athttps://www.google.com/policies/privacy/partners/?hl=en.
We use what is called the two-click solution. This means that if you visit our site, initially no personal data will be sent to Twitter. We offer you the option of communicating directly with Twitter via the button. Only if you click on the marked field and thereby activate it will Twitter receive the information that you accessed the corresponding website of our online offer.
If you click the Twitter button while logged into your Twitter account, the content of these pages can also be linked to the Twitter profile. In this case, Twitter may also associate the visit to these pages with your user account. When activating the activated button and linking the page, for example, Twitter also stores this information in your user account and communicates this to your contacts in public. We recommend that you log out regularly after using a social network, especially before activating the button, as this way you can avoid it being associated with your profile.
By activating the plugin, your personal data will be transmitted to Twitter and stored in the USA.
We have no influence on the data collected and data processing processes, nor are we aware of the full extent of data collection, the purposes of processing, the storage periods. We also have no information on how Twitter deletes the data collected.
Twitter stores the data collected about you as user profiles and uses it for the purposes of advertising, market research, and/or demand-oriented design of its services. Such an evaluation takes place in particular for representing demand-oriented advertisement and to inform other users of the social network about your activities. Through the plug-ins we offer you the option of interacting with social networks and other users, so that we can improve our offer and make it more interesting for you as a user.
(5) The legal basis for the use of the plugins is Art. 6 para. 1S. 1 lit. a GDPR.Twitter has submitted to the EU-US privacy shield, https://www.privacyshield.gov/EU-US-Framework.
You have the right to object to the creation of these user profiles, whereby you must contact Twitter to exercise this right.
Further information on the purpose and scope of data collection and processing and on your respective rights through and vis-à-vis Twitter is available at https://twitter.com/privacy. You can change your privacy settings on Twitter at any time at http://twitter.com/account/settings.
This website uses social plugins from the social media network Instagram of Instagram Inc. (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA). This plugin allows you to bookmark these pages and share them with other members in the social network. You can recognise the plugin by the square camera, sometimes with the lettering "Instagram".
We use what is called the two-click solution. This means that if you visit our site, initially no personal data will be sent to Instagram. We offer you the option of communicating directly with Instagram via the button. Only if you click on the marked field and thereby activate it will Instagram receive the information that you accessed the corresponding website of our online offer.
If you click the Instagrambutton while logged into your Instagramaccount, the contents of these pages can also be linked to your Instagramprofile. In this case, Instagrammay also associate the visit to these pages with your user account. When activating the activated button and linking the page, for example, Instagram also stores this information in your user account and communicates this to your contacts in public. We recommend that you log out regularly after using a social network, especially before activating the button, as this way you can avoid it being associated with your profile.
If you are not a member of Instagramor logged out of Instagrambefore visiting this page, it is still possible that Instagramdetects and stores your IP address. If you do not want Instagramto associate your Instagramuser account with your visit to our website, you must log out of Instagramor must not activate the plugin.
By activating the plugin, your personal data will be transmitted to Instagram and stored in the USA.
We have no influence on the data collected and data processing processes, nor are we aware of the full extent of data collection, the purposes of processing, the storage periods. We also have no information on how Instagram deletes the data collected.
Instagram stores the data collected about you as user profiles and uses it for the purposes of advertising, market research, and/or demand-oriented design of its website. Such evaluation is also made for users who are not logged in, to display customised advertising and to inform other users of the social network about activities on our website. Through the plug-ins we offer you the option of interacting with social networks and other users, so that we can improve our offer and make it more interesting for you as a user.
(5) The legal basis for the use of the plugins is Art. 6 para. 1S. 1 lit. a GDPR.
You have the right to object to the creation of these user profiles, whereby you must contact Instagram to exercise this right.
Further information about the purpose and scope of data collection and processing and your respective rights by and towards Instagram is availableat http://instagram.com/about/legal/privacy/.
(5.1) On these pages are social plugins of the social network Pinterest of Pinterest Europe Ltd. Palmerston House, 2nd Floor Fenian Street Dublin 2, Ireland. This plugin allows you to bookmark these pages and share them with other social network participants. The plugin can be identified by the word "Pinterest" on the "P".
(5.2) We use the so-called two-click solution. This means that when you visit our site, initially no personal data will be passed on to Pinterest. We give you the opportunity to communicate directly with Pinterest via the button. Only if you click on the marked field and activate it, Pinterest receives the information that you have called up the corresponding website of our online offer.
The information generated by the cookie about the use of this website by the user is generally transmitted to and stored in a Google server in the USA.
This website uses Google Analytics with the extension "_anonymizeIp()". The software is set in such a way that the IP addresses are not stored completely, but only in a shortened form. In this way it is no longer possible to assign the shortened IP address to the calling computer. The full IP address will be sent to a Google server in the USA and abbreviated there only in exceptional cases. The IP address sent by your browser for the purposes of Google Analytics is not combined with any other Google data.
The legal basis for processing personal data is your consent under Art. 6 para. 1 S. 1 lit. f) GDPR. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework , for exceptional cases in which personal data is transferred to the USA.
On our behalf Google will use this information to evaluate your use of the website and to compile reports on website activity. We are in a position to compile information about the use of the individual components of our website by evaluating the data obtained. This helps us to continuously improve our website and its user-friendliness. For these purposes, our legitimate interest also lies in the processing of personal data pursuant to Art. 6 para. 1 lit. f) GDPR. By anonymising the IP address, users' interest in protecting their personal data is sufficiently taken into account.
„This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”).
Further information can be found under https://www.google.com/analytics/terms/gb.html (Google Analytics Terms of Service & Privacy).

References: § 1
 Art. 6
 Art. 6
 Art. 6
 § 1
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6