Source: https://www.bookingautomation.com/privacy-policy/?amp;preview=true
Timestamp: 2019-04-20 16:46:23+00:00

Document:
The protection of personal data is important to us. Your personal data will be processed by us when visiting our websites, when using our services and when contacting us as a supplier, service provider or comparable contractual partner. In the following, we would like to inform you about the nature, extent and purpose of the processing of your personal data. The terms we use, such as “Processing” or “Responsible” follow the content of the definitions of the General Data Protection Regulation (Article 4 GDPR).
BookingAutomation (hereinafter also: we) provides its customers with Software as a Service. Our customers can use this service to generate and manage their guests’ bookings which they receive directly, via their own websites or third parties and link these with other processing operations.
Insofar as BookingAutomation processes customers’ booking data, BookingAutomation acts as a data processor. Rights and obligations arising from data processing ensue in this respect from a separate agreement.
I. What types of data are processed for what purpose?
We process personal data only to the extent necessary to provide a functional website, content and services or with the consent of the user. An exception applies in cases where prior consent is not possible or where the processing of the data is permitted by other applicable legal provisions.
The data is collected for statistical purposes and in order to improve our website. Storage in log files is done to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. The server log files are regularly checked to maintain the performance of the server, especially when there are concrete indications of unlawful use. The legal basis for the temporary storage of data and log files is Art. 6 paragraph 1 letter f GDPR.
The legal basis for the processing of personal data using technically necessary cookies is Article 6 (1) letter f GDPR.
Google will use the information we collect on our behalf to evaluate the use of our online offering, to compile reports on the activities within this online offering and to provide us with other services related to the use of the online offering and internet usage. Pseudonymous user profiles can be created from the processed data.
We only use Google Analytics with activated IP anonymization. This means that Google’s IP address will be truncated within member states of the European Union and in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and truncated there.
For more information about data usage by Google, settings and contradictory options, please visit the websites of Google: “Google Uses Your Data When You Use Our Partners Sites or Apps”, ” Advertising “, ” Managing information that Google uses to show you advertising “.
We use features from Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA as part of our online offering. When you visit our pages with Facebook plug-ins, a connection is established between your browser and the Facebook servers, and data is already transferred to Facebook. If you have a Facebook account, this data can be linked to it. If you do not wish to assign this data to your Facebook account, please log out of Facebook before visiting our page. Interactions, in particular the use of a comment function or the clicking on a “like” or “share” button, are also passed on to Facebook. Find out more at www.facebook.com.
As part of our online offer, you can subscribe to a free newsletter.
The data from the sign-up form on our website will be sent to us during the registration. To subscribe to the newsletter, it is sufficient to enter your e-mail address. Supplying a name is optional.
Registration for our newsletter on our website involves a so-called double-opt-in procedure. After registration, you will receive an e-mail asking you to confirm your registration. This confirmation is necessary to ensure that nobody can register with external e-mail addresses. Registration for the newsletter is logged as proof of the registration process in accordance with legal requirements. This includes the storage of the login and the confirmation time, as well as the IP address. Changes to your data stored with the newsletter service provider are also logged.
Providing your e-mail address enables us to deliver our newsletter to you. Should you choose to provide your name, this is used solely to address you personally in the context of our newsletter. The collection of other personal data in the context of the registration process on our website serves to prevent misuse of the services or the email address used. The legal basis for the processing of user data in the scope described is Art. 6 paragraph 1 letter a GDPR.
The legal basis for the transmission of user data is Art. 6 paragraph 1 letter f GDPR.
Our newsletters contain a so-called “web-beacon”, i.e. a pixel-sized file that is retrieved from the server when opening the newsletter from our server, or if we use a newsletter service provider. This call will initially collect technical information, such as information about the browser and your system, as well as your IP address and time of retrieval.
This information is used for the technical improvement of our newsletter service. Statistical surveys also include determining if the newsletters are opened, when they are opened, and which links are clicked. The legal basis for the statistical evaluation of the usage data is Art. 6 paragraph 1 letter f GDPR.
This processing provides us with protection in the event that an author’s comment infringes the rights of third parties and/or illegal content is sold. No information is passed on to third parties. There is also no comparison between data collected in this process with data that may be collected via other components of our site. The legal basis is Art. 6 paragraph 1 letter f GDPR.
Contact information (e.g., e-mail, phone numbers).
Contract data (e.g., contract, term, customer category).
Payment details (e.g., bank details, payment history).
Usage data (e.g., data that includes both the temporal criteria of your use of our service and the extent of its use.).
The processing of this data serves the purpose of enabling the provision of the contractually agreed services; in particular to get in touch with you and to bill for services rendered to you. The legal basis for the processing of the data transmitted in the course of sending an e-mail is Article 6 (1) letter b GDPR.
Contract data (e.g., contract, term, duration).
Who is responsible for processing personal information?
The existence of automated decision-making including profiling under Article 22 (1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended impact of such processing on the data subject.
You have the right to request information about whether the personal data relating to you are transferred to a third country or to an international organization. You can request the appropriate guarantees in accordance with Art. 46 GDPR in connection with such transfers.
You have a right to the correction and/or completion of your personal data by the controller, insofar as the processed personal data concerning you is incorrect or incomplete. The controller must make the correction without delay.
If you have objected to the processing in accordance with Art. 21 (1) GDPR and it is not yet certain whether the legitimate reasons of the person responsible outweigh your reasons.
If the processing of your personal data has been restricted, your personal data may be processed only with your consent, or for the purposes of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person, or for reasons concerning the important public interest of the Union or of a Member State.
If processing is restricted according to the conditions referred to above, you will be informed by the controller before the restriction is lifted.
You revoke your consent to the processing in accordance with Art. 6 paragraph 1 letter a or Art. 9 paragraph 2 letter a GDPR and there is no other legal basis for processing.
You register an objection in accordance with Art. 21 paragraph 1 GDPR to the processing and there are no overriding justifiable reasons for the processing, or you register an objection to the processing in accordance with Art. 21 paragraph 2 GDPR.
The deletion of the personal data concerning you is required to fulfil a legal obligation under European Union law or the law of the Member States to which the controller is subject.
The personal data relating to you were collected in relation to information society services offered in accordance with Article 8 (1) GDPR.
If the controller has made the personal data concerning you public and is obligated to delete this data in accordance with Article 17 (1) of the GDPR, the controller, taking into account the available technology and implementation costs, shall take appropriate measures, including of a technical nature, to inform data controllers who process the personal data that you as an affected person have demanded that such data controllers delete all links to this personal data or to copies or replications of this personal data.
If you have made known to the controller your assertion of your right to the correction, deletion or restriction of the processing of your personal data, the controller is obliged to notify all recipients of your personal data of the correction or deletion of the data concerned or of the restriction of its processing unless this proves impossible or involves disproportionate effort. You have a right to demand that the controller inform you about these recipients.
processing is done by automated methods.
In exercising this right, you also have the right to have the personal data relating to you transmitted directly from one controller to another party, insofar as this is technically feasible. The freedoms and rights of others may not hereby be affected.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the controller.
You have the right at any time, for reasons arising from your particular situation, to register your objection to the processing of personal data concerning you that takes place pursuant to Art. 6 paragraph 1 letter e or f; this also applies to profiling based on these provisions.
The controller will no longer process the personal data relating to you unless he can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing or defending legal claims.
If the personal data relating to you are processed for the purposes of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.
You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent prior to the revocation.
Irrespective of any other administrative or judicial remedy, you have the right to file a complaint with a supervisory authority, in particular in the Member State of its residence, place of work or the place of alleged infringement, if you believe that the processing of your personal data violates the GDPR.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 6