Source: https://www.cora-apartments.com/privacy-policy
Timestamp: 2019-04-18 14:33:34+00:00

Document:
When you book your stay at the CORA APARTMENTS through our website, we guarantee that you always get our best rate. If you find a better price on any other website, we'll match it and throw in a surprise when you arrive.
We take the protection of your personal data very seriously and treat your personal data confidentially and in accordance with the applicable data protection regulations and this data protection statement.
With the following information, we would like to offer users of this website clarification on the nature, scope and purpose of the collection and use of personal data by us. The legal bases of the data protection are to be found, inter alia, in the German Federal Data Protection Act (BDSG), the Telemedia Act (TMG) and in the European General Data Protection Regulation.
In principle, you can visit this website without informing us of your identity unless you send us an e-mail or send a message using the contact form, register or make a booking via this website. In these cases, we shall only process the data required for responding to your request or for the provision of our services. What data is collected, is clear from the respective input forms. The necessary items of information are marked as mandatory fields. Where we ask you for further information, this shall be voluntary information.
If you make contact or register with us by phone, by post, e-mail or via our website, we shall process your personal data for the purpose of responding to your requests, the provision of information and, if necessary, the sending of information material upon demand.
This shall concern in particular your surname and first name, your contact information, such as phone numbers, e-mail and fax, and possibly the name of the company / institution or organisation for which you work. In some cases, we will entrust a contract processor with the processing.
The legal basis for the processing of personal data Article 6 (1) f) GDPR. The data shall be treated confidentially and shall not be passed on to third parties.
Our legitimate interest in the processing of your personal data lies in providing you with the information you have requested. Your data shall be deleted after the expiry of the statutory limitation periods and any resulting claims.
If you make a booking via our website www.gorkiaparments.co.uk , we shall process your personal data.
This shall involve your surname and first name, you title and academic degree where applicable, your address, contact information, such as your e-mail address and phone number and your credit card details.
The processing is performed for purposes of clear identification of the contractual partner and the initiation, implementation, administration and settlement of contracts, the issuing of invoices/credit notes, the administration and enforcement of claims and compliance with statutory requirements and data protection law (Article 6 (1) b) and c) GDPR). Where necessary, we shall process your data beyond the actual fulfilment of the contract in order to safeguard our legitimate interests or those of third parties for purposes of the assertion of legal claims and of defence in the case of legal disputes, for direct advertising, and in order to guarantee IT security. Furthermore, we shall process your data in order to be able to better design our offers on an individual basis or to more closely match your needs (Article 6 (1) f) GDPR).
In some cases, we shall entrust a contract processor with the processing. The data shall be treated confidentially and shall not be passed on to third parties. We shall store the data for the duration of the contractual relationship with the customer. Should the data no longer be required to fulfil the contractual relationship, we shall delete the data after the expiry of the statutory limitation periods, any resulting claims and the relevant statutory retention obligations.
On our website, it is possible to subscribe to a free newsletter. In doing so, the data from the input screen during registration for the newsletter (first and last name, e-mail address and country) is transmitted to us.
If you would like to receive the newsletter, we shall require a valid e-mail address from you and information that will allow us to verify that you are the owner of the specified e-mail address or that the owner of such agrees to receive the newsletter. When you subscribe to the newsletter, we shall also save your IP address and the date of the registration. This storage shall serve solely to provide evidence in the event that a third party should misuse the e-mail address and register for receipt of the newsletter without the knowledge of the entitled person.
This data shall be used only for the purposes of the newsletter service and shall not be passed on to third parties. The legal basis for the data processing is your consent and thus Art. 6 (1) a) GDPR. In some cases, we shall entrust a contract processor with the processing.
Your consent to the storage of your personal data and the use of such for the forwarding of the newsletter may be revoked at any time. The revocation can be issued via a link in the newsletter itself or by sending a message to the above contact options (see 9.2 special note on revocation in accordance with Article 7 (3) GDPR).
If you unsubscribe to the newsletter, your data shall be permanently deleted.
3.4 Are decisions made automatically including profiling?
We generally do not use any automated decision-making including profiling in accordance with Article 22 GDPR. In the event that we deploy profiling for targeted marketing within the framework of our activities, you shall be informed of such separately.
The provider uses the log data only for statistical purposes and for purposes of the security and optimisation of the offer. The provider reserves the right, however, to subsequently check the log data, should concrete evidence exist regarding a legitimate suspicion of unlawful use. The legal basis for the temporary storage of the data and log files is Art. 6 (1) f) GDPR.
The data shall be deleted as soon as it is no longer required for the achievement of the purpose of the collection of such. Where the data is collected for the provision of the website, this shall be the case once the respective session is finished. The data stored in the log files shall be deleted after 30 days at the latest.
The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. It shall therefore not be possible to object to this.
It may be the case that third-party content, such as YouTube videos, maps from Google Maps, RSS feeds or graphics from other websites may be integrated within this online offer. This shall always presuppose that the providers of such content (hereinafter referred to as the "Third Party Providers") become aware of the IP address of the user. Because without the IP address, they would not be able to send the content to the respective user's browser. The IP address is thus required for the presentation of such content. We strive to only use such content, where the respective provider uses the IP address solely for the delivery of the content. However, we have no influence on whether the third-party provider stores the IP address for statistical purposes, for example. To the extent that we are aware of such, we shall explain this to the user.
In the case of direct or indirect references to other websites ("hyperlinks") which lie outside of our area of responsibility, an obligation to assume liability would take effect exclusively where we had knowledge of the contents and where it would have been technically and reasonably possible to prevent the use in the event of illegal content.
We hereby expressly declare that, at the time of the link being made, no illegal contents were recognisable on the linked pages. We have no influence on the current and future design, contents or authorship of the linked/networked pages.
We therefore expressly dissociate ourselves herewith from all contents of all linked/networked pages which were changed after the link was made. This statement shall apply to all links and references made within the own website and for external entries in our guest books, discussion forums, link directories, mailing lists and all other forms of databases, to whose contents external write accesses are possible. Liability for illegal, incorrect or incomplete contents and especially for damages resulting from the use or non-use of information presented on such a basis shall rest solely with the provider of the page to which the reference was made, not with the person/entity who merely refers to the respective publication via links.
Permanent control of the contents of the linked pages is not reasonable without concrete evidence of a violation of the law. Should we become aware of any violations of the law, we shall immediately remove such links.
The legal basis for the processing of personal data using technically necessary cookies is Art. 6 (1) f) GDPR.
Which third-party modules, plug-ins and tools are used on the website?
Our website uses plug-ins from the Google-operated website, YouTube. The operator of the pages is YouTube, LLC., 901 Cherry Ave, San Bruno, CA 94066, USA.
In order to increase the protection of your data when you visit our website, the YouTube plug-in is integrated into the site by means of a so-called "2-Click" or "Shariff" solution. This integration ensures that when you retrieve a web page containing the YouTube plug-in, no connection is immediately made to the YouTube servers. Only when you click on the “activate video” button does your browser establish a direct connection to the YouTube servers. In doing do, the YouTube server is informed regarding which of our pages you have visited.
If you are logged in to your YouTube account, you shall allow YouTube to assign your surfing behaviour directly to your personal profile. You can avoid this by logging out of your YouTube account.
The use of YouTube is in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 (1) f) GDPR.
Pinterest.com (Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland).
In order to increase the protection of your data when you visit a website within our internet presence, the plug-ins are integrated into the site by means of a so-called "2-Click" or "Shariff" solution. This integration ensures that when you retrieve a web page containing such plug-ins, no connection is immediately made to the Facebook, Twitter, Instagram and Pinterest servers. Only when you activate the plug-ins and thus give your consent to the transfer of data does your browser establish a direct connection to the Facebook, Twitter, Instagram and Pinterest servers.
The content of the respective plug-in is transmitted directly to your browser and is integrated into the website. The plug-in then transmits data (including your IP address) to the operators of the named social networks. We have no influence on the amount of data that the social networks collect with the assistance of plug-ins. To our knowledge, Facebook, Twitter, Instagram and PINTEREST always obtain information on which of our web pages you have currently and previously called up. By calling up the plug-ins, Facebook, Twitter, Instagram and Pinterest then also receive the information that your browser has accessed the relevant page of our website, even if you do not have a profile in the social networks in question or are not currently logged in. This information (including your IP address) is transmitted directly by your browser to a Facebook, Twitter, Instagram or Pinterest server in the USA and is stored there. The information may possibly be published on the respective social network and be shown to your contacts. Because of the transmission abroad, we refer to Point 7 of this data protection statement.
If you are a member of one of the social networks, and you would like to limit the collection of data on our web pages and the merging of your user data with the data stored in the respective social network, you should log out there before you visit our website.
This website uses Google Analytics, a web analytics service provided by Google, Inc., 1600 Amphitheater Parkway, Mountain View, CA 94,043, USA (“Google”).
Google Analytics uses so-called cookies; these are text files which are stored on your computer and which allow analysis of the use of the website. The information generated by the cookie about your use of this website (including your IP address) is sent to a Google server in the USA and is stored there (further information on this can be found under Point 7).
Google uses this information to evaluate your use of the website in order to compile reports about the website activities for the website operator and to provide further services connected to the website usage and internet usage. Where necessary, Google may also transfer this information to third parties where required to do so by law or where such third parties process this data on behalf of Google.
In light of the discussion on the use of analytical tools with complete IP addresses, we would like to point out that this website uses Google Analytics with the extension "_anonymizeIp()" and therefore IP addresses may only be further processed in abbreviated or anonymised form in order to exclude any direct reference to individuals.
Under no circumstances shall your IP address be associated with any other data held by Google.
You may prevent the installation of cookies by selecting the appropriate settings on your browser software; we advise you however that in this case, it will not be possible to make full use of all the features of this website. THE DATA COLLECTION AND STORAGE CAN BE OBJECTED TO AT ANY TIME WITH EFFECT FOR THE FUTURE.
This website uses the open source web analytics service, Matomo. Matomo uses so called "cookies". These are text files which are stored on your computer and which allow analysis of your use of the website. For this purpose, the information generated by the cookie about your use of this web site shall be stored on our server. The IP address is anonymised prior to storage. Matomo cookies shall remain on your device until you delete them.
The storage of Matomo cookies shall be carried out on the basis of Art. 6 (1) f) GDPR.
In accordance with Article 15 GDPR, you have the right to request information about the personal data stored by us about you at any time and free of charge.
Furthermore, in accordance with Article 16 GDPR you may request the rectification of incorrect data and, in accordance with Article 17 GDPR, the deletion of personal data, unless the processing is required for the exercise of the right to freedom of expression and information, for compliance with a legal obligation or for the assertion, exercise or defence of legal claims.
Furthermore, in accordance with Article 18 GDPR, you have the right to request the blocking or restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you reject the deletion and we no longer require the data, but you require this for the assertion, exercise or defence of legal claims, or you have lodged an objection to the processing in accordance with Article 21 GDPR.
Insofar as the conditions of Article 20 GDPR exist, you shall have the right to obtain the personal data with which you have provided us in a structured, common and machine-readable format and to request transmission to another responsible body.
If you are of the opinion that the processing of your personal data by us is not in conformity with applicable law, in accordance with Art. 77 GDPR, you may ultimately raise a complaint with a supervisory authority.
Based on reasons related to your specific situation, you have the right to submit an objection at any time to the processing of personal data affecting you, which takes place in accordance with Article 6 (1) f) GDPR (legitimate interest in a processing of personal data based on a balancing of interests).
Should you object to the processing of personal data, we shall no longer process your personal data, unless we can prove urgent legitimate reasons for said processing, which outweigh your interests, rights and freedoms or that the processing serves the assertion, exercise or defence of legal claims.
Insofar as you have provided us with consent to the processing of your personal data for specific purposes (e.g. newsletter dispatch), the legality of this processing shall be given on the basis of consent.
The consent may be revoked at any time. This shall also apply to the revocation of declarations of consent, which you issued to us before the validity of the GDPR (before 25.05.2018).
The revocation of the granted consent shall only be effective for future data processing, meaning that further data processing shall cease from this point in time. The legality of the processing until the revocation shall however remain unaffected hereby.
We make use of technical and organisational security measures to protect the personal data made available to us against accidental or intentional manipulation, loss, destruction or unauthorised access. Our security measures are continuously improved and adapted according to the state of the art technology.
We would like to point out that data transmission via the Internet (e.g. when communicating by e-mail) can give rise to security loopholes. Complete protection of data against access by third parties is not possible.
The use of the contact data published within the framework of the imprint or comparable information, such as postal addresses, telephone and fax numbers and e-mail addresses by third parties for sending information not expressly requested shall not be permitted. The right to take legal steps against the senders of so-called spam mails in the event of a violation of this prohibition is expressly reserved.
We reserve the right to occasionally adapt this data protection declaration so that it is always in accordance with the latest legal requirements or to implement changes to our services in the data protection declaration, for example, in the event of the introduction of new procedural or processing activities. The new data protection statement shall then apply for your next visit.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 77