Source: https://www.lindner.de/en/privacy-policy.html
Timestamp: 2019-04-24 12:01:07+00:00

Document:
Data protection is a matter of trust and your trust is important to us. We respect your private sphere and privacy rights. The protection of your personal data that is collected, processed and used in compliance with the law, is therefore of great importance to us. In order to ensure that you feel comfortable when using our websites, we observe strict compliance with the statutory provisions when processing your personal data, and we should now like to inform you about the collection and use of your data here.
We are committed to compliance with the DS-GVO (Datenschutz Grundverordnung [General Data Protection Regulation - GDPR]) as well as the nationally valid data protection laws. For us the topic of data protection has an extremely high priority throughout our company and we work together exclusively with partners who can demonstrate an equally stringent data protection level in their processing procedures. We process your data only if you have given us your express permission to do so and it is necessary for the purposes of processing a contract or it relates to pre-contractual measures on a service-provision basis, or insofar as the relevant laws permit and/or require this respectively. The following data protection information contains both the current national legal framework that applies, as well as the provisions of the EU General Data Protection Regulation (GDPR) that came into force Europe wide on 25 May 2018. Reference to the legal principles of the GDPR are relevant from 25 May 2018. Under no circumstances will we sell your data or pass it on to unauthorised third parties. In the following we should like to inform you in detail about how we handle your data in our business units.
You can print or save this document by using the standard functionality of your browser. In the following Data Protection Declaration, you will find out which data we record on our website and how we process and use the different data.
Fundamentally we collect and use the personal data of our users only insofar as this is required for the provision of a fully functional website and for our contents and services. The collection and use of the personal data of our users is carried out on a regular basis but only following the consent of the user. An exception applies in cases where prior consent cannot be obtained for specific reasons and the processing of the data is permitted by statutory provisions.
Insofar as we obtain the consent of the person affected for the processing of personal data, Art. 6 para. 1a of the EU General Data Protection Regulation (GDPR) serves as a legal basis for the processing of said personal data.
In the case of the processing of the personal data that is required for the fulfilment of a contract, the contracting party of which is the affected person, Art 6 para. 1b GDPR serves as the legal basis. This also applies for processing procedures that are required for the execution of pre-contractual measures.
Insofar as the processing of personal data is required for the fulfilment of a legal obligation to which our company is subject, Art 6 para. 1c GDPR serves as the legal basis.
In the event that the vital interests of the affected person or another natural person make the processing of the personal data necessary, Art 6 para. 1d GDPR serves as the legal basis.
If processing is required in order to maintain a justified interest of our company or a third party and if the interests, basic rights and basic freedoms of the affected person do not take precedence over the aforementioned interest, Art 6 para. 1f GDPR serves as the legal basis for the processing.
The personal data of the person affected is deleted or blocked as soon as the reason for the data to be stored is no longer valid. However, they can continue to be stored if this is provided for in the European or national legislature, or in specific rules, directives or other provisions of European Union law to which the responsible person is subject. The blocking or deletion of the data is also carried out if the storage date prescribed by the aforementioned norms expires, unless there is a requirement for the data to continue to be stored for the conclusion or the performance of a contract.
Every time our internet site is accessed, our system automatically records data and information from the computer system of the calling PC.
The data is also stored in the log files of our system. This data is not stored together with the other personal data of the user.
The legal basis for the temporary storage of the data and log files is Art. 6 para. 1f of GDPR.
The temporary storage of the IP address by the system is required in order to enable a delivery from the website to the user’s computer. Therefore, the user’s IP address must remain stored for the whole duration of the visit.
Storage in log files is carried out in order to guarantee the functionality of the website. In addition, the data helps us to optimise the website and to guarantee the security of our information technology systems. No evaluation of the data for marketing purposes is carried out in connection with this.
For these purposes our justified interests in data processing are in accordance with Art. 6 para. 1f GDPR.
The data is deleted as soon as it is no longer required for the purposes for which it was collected. In the case of collecting the data in order to make the website accessible to the visitor, they are deleted once the visit has ended.
In the case of storing the data in log files, this is the case after seven days at the latest. Further storage is possible. In this case the user’s IP addresses are either deleted or anonymised, so that it is no longer possible to allocate them to the visiting client.
The collection of data in order to make the website available and the storage of said data in log files is required for the proper functioning of the website. Therefore, the user does not have a right to contest the data in this case.
The user data collected in this way are pseudonymised by means of technical precautions. This means that the data can no longer be allocated to the user accessing the site. The data is not stored together with the user’s other personal data.
Our websites use cookie technology to collect data to optimise our advertising and online content. This data is not used to identify you personally but serve purely as an aid in the evaluation of the use of our homepage on a pseudonymised basis. Your data is never amalgamated with your personal data that we have stored. Using this technology, we can present you with advertising and/or special offers and services, the contents of which are based on the information that has been obtained via clickstream analysis (e.g. advertising that is based on the fact that sports shoes have been viewed exclusively in the last few days). Our aim in this is to structure our online offering in the most attractive way possible and to present you with advertising that corresponds to your areas of interest.
We use various advertising partners who help us to make our websites and internet offers even more interesting for you. Therefore, the cookies of partner companies are also stored on your hard drive when you visit our websites. These are temporary/permanent cookies that are deleted automatically after a defined period of time. These temporary and permanent cookies (life cycle 14 days up to 10 years) are stored on your hard drive and are deleted automatically after a defined period of time. Also the cookies for our partner companies only have pseudonyms and most even have anonymised data. For example, this could be data about which products you have viewed, whether you bought anything, which products you searched for, etc. Some of our advertising partners also use the websites to collect data on which pages you visited prior to visiting them or which products you were interested in, so that they can then show you the advertising that you are most likely to be interested in. These pseudonymised data is never amalgamated with your personal data. The sole purpose of such data is to enable our partners to present you with advertisements that will really be of interest to you.
In this our websites use so-called re-targeting technologies. We use these technologies in order to make the internet offers more interesting for you. This technology makes it possible for us to address internet users who have already shown an interest in us and our products on the internet sites of our partners. We are convinced that the insertion of personalised, internet-related advertising is generally more interesting for the internet user than advertising that does not have any such personal connection. The insertion of such advertising on our partner pages is carried out on the basis of cookie technology and an analysis of the previous user behaviour. This form of advertising is completely anonymised. No user profiles are amalgamated with your personal data. By using our pages, you agree that so-called cookies can be placed and that your particular usage data can be collected, stored and used. In addition, your data is stored in cookies after the end of the browser session so that they can be called up once again when you re-visit the websites, for example. You can revoke your consent at any time with immediate effect, by setting your browser preferences so that the acceptance of cookies is refused.
3. How can you prevent cookies from being stored?
Depending on the browser you use, you can set the settings in such a way that the storing of cookies is accepted only if you have agreed to this. If you want to accept exclusively our cookies, but not those of our service providers and partners, you can select the setting "Block cookies from third parties" in your browser. As a rule, using the Help function in the menu bar in your web browser you can see how to refuse new cookies and to switch off those you have already received. You can find detailed information on how you can customise the settings in your browser via the following link. If you are using shared computers that are set to accept cookies and flash cookies, we recommend that you should always make sure that you have completely logged out after you have finished your session.
The user data collected by the technically required cookies are not used to create user profiles.
The reason for the use of the analysis cookies is in order to improve the quality of our websites and their contents. By using the analysis cookies, we can see how the website is being used and so we are able to continually optimise our offers.
For these purposes our justified interests in the processing of personal data are in accordance with Art. 6 para. 1f GDPR.
The transmission of flash cookies cannot be prevented using the browser settings but by changing the settings for Flash Player.
You have the option of subscribing to our newsletter free of charge on our website. When registering for the newsletter the data from the input screen is passed on to us.
Your consent for the processing of your data is obtained during the registration process and reference is made to this Data Protection Declaration.
If you order goods or services on our internet site and provide your email address, we can subsequently use this for the dispatch of the newsletter. In such a case, exclusively direct advertising for our own similar goods or services will be sent via the newsletter. In addition, email addresses that have been collected can be used for advertising purposes in online marketing and social media.
No data is passed on to third parties in connection with the data processing for the dispatch of the newsletter. The data is used exclusively for the dispatch of the newsletter and for advertising purposes in online marketing and social media.
The legal basis for the processing of the data following registration for the newsletter by the user, and following receipt of the user’s consent, is Art. 6 para. 1a GDPR. The legal basis for the dispatch of the newsletter following the purchase of goods or services is § 7 para. 3 UWG (Gesetz gegen den unlauteren Wettbewerb [Unfair Competition Act]).
The recording of the user’s email address is so that the newsletter can be sent. The collection of other personal data within the framework of the registration process is to prevent any misuse of the services or of the email address used.
The data is deleted as soon as it is no longer required for the purpose for which it was collected. The email address of the user is stored for as long as the subscription to the newsletter remains active. The other personal data collected as part of the registration procedure is generally deleted after a period of seven days.
The subscription to the newsletter can be cancelled by the affected user at any time. There is a corresponding link for this in the newsletter. This also offers the opportunity to revoke consent for the storage of the personal data that was collected during the registration procedure.
As part of the registration process the user’s consent to the processing of this data is obtained.
The legal basis for the processing of the data following receipt of the user’s consent, is Art. 6 para. 1a GDPR. If the registration is for the purposes of the fulfilment of a contract, of which the contractual party is the user, or for the purposes of carrying out pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1b GDPR.
The registration of the user is required for the provision of certain contents and services on our website. These contents and services are linked to registration for the Nights programme. Therefore, the identification of the user is required for these contents and services to be provided.
The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is the case for data that is collected during the registration procedure, if the registration is cancelled or changed on our website.
As a user you have the option of cancelling your registration at any time. You can have your personal data changed at any time.
Once registration has been carried out on our website, the user profile can be amended immediately. You can delete your profile by calling +49 211 44755 200 or emailing nights@lindner.de.
Your consent for the processing of your data is obtained during the send process and reference is made to this Data Protection Declaration.
Alternatively, it is possible to make contact using the email address provided. In this case the personal details of the user that are transmitted in the email are stored.
This data is not passed on to third parties in this connection. The data is used exclusively for processing the conversation.
The legal basis for the processing of the data following receipt of the user’s consent, is Art. 6 para. 1a GDPR.
The legal basis for the processing of the data that is transmitted by email, is Art. 6 para. 1f GDPR. If the email contact should result in the conclusion of a contract, the additional legal basis for the processing of the data is Art. 6 para. 1b GDPR.
The processing of personal data from the input screen is used by us exclusively for the purpose of processing the contact. In the case of contact by email, this also includes the necessary justified interest in the processing of the data.
The other personal data processed during the send process are used to prevent any misuse of the contact form and to guarantee the security of our IT systems.
The data is deleted as soon as it is no longer required for the purpose for which it was collected. With regard to personal data from the input screen for the contact form and that sent by email, this is the case once the relevant conversation with the user has ended. This conversation is ended, once it is clear from the circumstances that the relevant matter has been definitively clarified.
The additional personal data that is collected during the send process is deleted after a period of seven days at the latest.
The user has the option of revoking their consent to the processing of personal data at any time. If the user gets in touch with us by email, they can contest the storage of personal data at any time. In such a case it is impossible for the conversation to be continued. It is possible to have a profile deleted by emailing info.ecommerce@lindner.de. All the personal data that was stored during the contact process is deleted in this case. In addition, any enquiries over an interval of one month are completely deleted from our system.
In order to make our website as user-friendly and easy to use as possible, we also include individual services from external service providers. As a result, you have the option of viewing their data protection provisions on the application and use of the services and functions they provide, so that you can also exercise your rights here as well, if necessary.
Google Analytics is a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses "cookies", i.e. text files that are stored on your computer and enable Google to carry out an analysis of the use of our offer. The information provided by the cookies on the use of our websites (including your IP address) are generally transmitted to a Google server in the USA, where they are stored. We should like to point out that Google Analytics has the additional code “gat._anonymizeIp();;” on our websites, so that the IP addresses can be recorded in an anonymised form (so-called IP masking). Therefore, with our permission, your IP address is recorded only in an abbreviated form, which guarantees that it is anonymised and that it is impossible to trace it back to you. In the case of the activation of IP anonymisation on our websites, your IP address is abbreviated in advance by Google within the member states of the European Union or within the other contracting parties to the Agreement across the European Economic Area. Only in exceptional cases is your full IP address transmitted to a Google server in the USA, where it is then abbreviated. Google uses the aforementioned information to evaluate your use of our websites, to compile reports for us on the website activities and to provide us with further services linked to the use of websites and the internet. The IP address transmitted by your browser to Google Analytics is not amalgamated with other data held by Google. The forwarding of this data by Google to third parties is carried out only within the framework of statutory provisions or the processing of contractual data. Google will never amalgamate your data with other data held by Google. By using these websites, you declare that you agree to the processing of your personal data by Google and to the aforementioned type and manner of data processing as well as the purpose thereof already mentioned. You can prevent the storage of cookies by changing the settings in your browser software; however, we should like to point out that this may result in certain functionalities of our websites not being fully operational for you. You can also prevent the recording and processing of the data regarding your use of these websites collected by the cookie (incl. your IP address) by Google, by downloading and installing the browser plugin that is available at the following link.
You will find further information on Google Analytics and data protection at http://tools.google.com/dlpage/gaoptout?hl=de.
This website uses the online advertising programme “Google AdWords”, which also includes conversion tracking. The cookie for conversion tracking is placed when a user clicks on an advertisement placed by Google. These cookies remain valid for 30 days only and are not used for personal identification. If the user visits specific pages of the website and the cookie has not yet expired, we and Google are able to see that the user has clicked on the advertisement and was directed to this webpage. Every Google AdWords client is given a different cookie. This means that cookies cannot be tracked via the websites of AdWords clients. The information obtained with the help of conversion cookies helps us to compile conversion statistics for AdWords clients who have opted for conversion tracking. These clients are given the total number of users who have clicked on their advertisement and were directed to a page that contains a conversion tracking tag. However, they do not receive any information that could help them to identify the individual users personally. Users who do not want to participate in tracking can easily deactivate the cookie for Google conversion tracking via the user settings in their internet browser. These users are then not recorded in the conversion tracking statistics. Find out more about Google’s Data Protection Provisions.
Our websites use Google Maps to display area maps and to create routes for journeys. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. By using this website, you agree to the recording, processing and use of the data automatically collected by Google, or by one of its representatives or third-party suppliers, or the data supplied by you to Google, or one of its representatives or third-party suppliers. You will find the conditions of use for Google Maps at Google Maps Conditions of use. You will find further details at the data protection centre for google.de: Transparency and options as well as data protection provisions.
The provider of this website uses the services of etracker GmbH, Hamburg, Germany(https://www.etracker.com) for the analysis of its user data. Cookies are set for this that enable the statistical analysis of the use of this website by its users as well as the display of user-related contents or advertising. Cookies are small text files that are saved in the internet browser of the user’s end device. etracker cookies do not contain any information that would make the identification of the user possible.
The data collected with etracker is processed and saved by etracker exclusively in Germany on behalf of the provider of this website and is therefore subject to the stringent German and European data protection laws and standards. etracker has been independently examined and certified and awarded the data protection seal https://www.eprivacy.eu/kunden/vergebene-siegel/firma/etracker-gmbh/.
The data processing is carried out on the legal basis of Art. 6 para. 1f (justified interest) of the EU General Data Protection Regulation (EU GDPR). Our justified interest is based on the optimisation of our online offers and web presence. Since the private sphere of our users is of paramount importance to us, the IP address with etracker is anonymised as soon as possible and registration or device recognition is converted to a specific key that cannot be traced back to a person. Any other use or amalgamation with other data, or the forwarding of data to third parties, is not carried out by etracker.
You can contest the aforementioned data processing at any time, insofar as this is related to you personally. You will not suffer any disadvantageous consequences from this.
If you enable web push notifications in your browser, a service of that particular browser will be used to provide this feature. For sending push messages, only anonymous or pseudonymous data is transmitted. You can object to the receipt of notifications at any time through the settings of your browser. For information about opting out of web push notifications for each browser, see Google Chrome, Mozilla Firefox, Apple Safari & Opera.
You will find further information on data protection with etracker here.
Our internet site uses social plugins (“plugins”) from different social networks. With the help of these plugins you can share contents or recommend products, for example. The plugins on our websites are deactivated as standard and therefore do not transmit any data. By clicking on the "Activate Social Media" button you can activate the plugins. Naturally, the plugins can be activated with a simple click as well.
If these plugins are activated, your browser creates a direct link with the servers of the relevant social networks as soon as they call up one of the websites in our internet presence. The contents of these plugins are transmitted directly to your browser and linked by this to the website.
By linking the plugins, the social network receives the information that you have called up via the corresponding page in our internet presence. If you are logged in to the social network, this can assign the visit to your account. If you interact with the plugins, for example, if you click the “Like” button on Facebook or leave a comment, the corresponding information is transmitted to the social network by your browser, where it is then stored.
Please consult the relevant networks and/or websites for details of the purpose and scope of the data collection and the further processing and use of the data by said social networks as well as their rights and setting options in this regard for the protection of your private sphere. You will find the relevant links below.
Even if you are not registered with the social networks, data can be sent to these networks by websites with active social plugins. A cookie with an identification key is set by an active plugin at every visit to the website. Since your browser automatically sends this cookie with every link to a network server, in principle it would be possible for the network to create a profile on which websites the user with this identification key has visited. And then it would also be absolutely possible to trace back this identification key later on to a person, via a subsequent registration with a social network, for example.
If you do not want social networks to collect your data via active plugins, you can either deactivate the social plugins by simply clicking on our website or click on the function "Blockcookies from third-party service providers" in your browser settings. Then your browser will not send any cookies to the server in the case of embedded contents of other providers. However, by enabling this setting it is possible that other cross-page functions will no longer operate, in addition to the deactivated plugins.
We use plugins for the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). You will find the link to the data protection declaration for Facebook here: Data protection declaration for Facebook.
We use plugins for the social network Twitter, which is operated by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA (“Twitter”). You will find the link to the data protection declaration for Twitter here: Data protection declaration for Twitter.
We use plugins for the social network Pinterest, which is operated by Pinterest Inc., 635 High Street, Palo Alto, CA, USA (“Pinterest”). You will find the link to the data protection declaration for Pinterest here: Data protection declaration for Pinterest.
We use plugins for the social network instagram.com, which is operated by Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025 USA (“Instagram”). You will find the link to the data protection declaration for Instagram here: Data protection declaration for Instagram.
We use plugins for the social network Linkedin, which is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). You will find the link to the data protection declaration for LinkedIn here: Data protection declaration for LinkedIn.
We use plugins for the social network xing.com, which is operated by XING SE, Dammtorstraße 30, 20354 Hamburg, Germany (“XING”). You will find the link to the data protection declaration for XING here: Data protection declaration for XING.
Our website uses plugins for YouTube, which is operated by Google. The operator of these pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit other pages that have a YouTube plugin, a connection to the YouTube servers is created. This means that the YouTube server is informed of which of our pages you have visited If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your profile. You can prevent this by logging out of your YouTube account. You will find further details on how your user data is used in the Data Protection Declaration for YouTube.
The provider of this website uses the services of IgnitionOne, Inc. (https://www.ignitionone.com/) for the analysis of user data. The operator of this site is IgnitionOne, Inc., 470 Park Avenue South, 6th floor, New York, NY 10016, USA. When you visit our websites, you are requested to register for our newsletter on an individual and anonymous basis. In addition, displays are shown based on retargeting lists and returning users are shown the most recently displayed content. In addition, by grouping user interests, it is possible to show them user-appropriate advertising. You will find further information on the data protection declaration for IgnitionOne Inc. here.
To correctly record sales and/or leads, affilinet places a cookie on the client’s computer (visitor’s) computer. This cookie is set by the domain partners.webmaster-plan.com and/or banners.webmasterplan.com. This cookie complies with the currently valid data protection guidelines. The cookies used by affilinet are accepted in the standard setting of the internet browser. If you do not want these cookies to be stored, please deactivate the acceptance of the cookies for the corresponding domains in your internet browser. affilinet tracking cookies do not store any personal data but only the ID of the referring partner as well as the order number for the advertising medium (banner, text link, etc.) clicked by the visitor, which are required for payment processing. The partner ID is required at the conclusion of a transaction in order to be able to allocate the commission to be paid to the referring partner concerned. You can find further details on the Awin cookie regulations here.
Data is collected and stored on our website using the technology of Bing Ads, from which user profiles are created on a pseudonymised basis. This is a service from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. This service allows us to track the activities of users on our website, if they have accessed our website via advertisements from Bing Ads. If you access our website via such an advertisement, a cookie is set on your computer. A Bing UET tag is integrated in our website. This is a code, via which, in conjunction with the cookie, some non-personal data about the use of the website is stored. This includes among others the time spent on the website, which pages on the website were visited and which advertisements led the users to the website. Information on your identity is not recorded. The information collected is transmitted to the Microsoft server in the USA and stored there. You can prevent the recording of the data collected by the cookie relating to your use of the website and well as the processing of this data by deactivating the setting of cookies. However, this can also result in the functionality of the website being limited. In addition, in certain circumstances Microsoft can trace your user behaviour using so-called cross-device tracking via several of your electronic devices and thus is able to integrate personalised advertising into its websites and apps, for example. You can deactivate this functionality via http://choice.microsoft.com/de-de/opt-out.
For more information on the analysis data of Bing, please visit the Bing Ads website (https://help.bingads.microsoft.com/#apex/3/de/53056/2). You will find more information on data protection at Microsoft and Bing in the data protection provisions for Microsoft (https://privacy.microsoft.com/de-de/privacystatement).
The provider of this website uses the services of Searchmetrics GmbH (https://www.searchmetrics.com/de/) for the storage and processing of the data of competitors. The operator of this website is Searchmetrics GmbH, Greifswalder Straße, 10405 Berlin, Germany. Searchmetrics records the websites of competitors in order to create new content on this website. You will find further information on the data protection declaration for Searchmetrics here.
This website uses the services of the webshop provider TAC for the provision of applications and vouchers for Binshof Spa (https://shop.tac.eu.com/demo/4/shop/). The operator of this website is TAC I The Assistant Company GmbH, Schildbach 111, 8230 Hartberg, Austria. The personal data that you provided with your order during the purchase process is used for the purposes of dispatch, accounting and customer care as well as for market observation and the optimisation of the sales system. You will find further information on the data protection declaration for TAC I The Assistant Company GmbH here.
This website uses the software provider ORACLE for the provision of an online booking machine (https://www.oracle.com/de/index.html). The operator of the website is Oracle Corporation, 500 Oracle Parkway, Redwood Shores, CA 94065, USA. The personal data that you provided with your order during the purchase process is used for the purposes of business processing. You will find further information on the data protection declaration for Oracle Corporation here.
This website uses the SITPAY cash accounting system for e-payments and customer loyalty programmes (http://www.sit-pay.de/) for processing purchases with vouchers. The operator of this website is SIT Solution for IT-Payment GmbH, Eiffestr. 74, D-20537 Hamburg. The personal data that you provided with your voucher purchase during the purchase process is used for the purposes of business processing. You will find further information on the data protection declaration for SIT Solution for IT-Payment GmbH here.
This website uses the data warehouse Serenata for customer relationship management (CRM) (https://www.serenata.com/). The operator of this website is Serenata IntraWare GmbH, Neumarkter Str. 18, 81673 Munich. Serenata saves and processes your data with your registration for our newsletter or the Lindner Nights Programme. You will find further information on the data protection declaration for Serenata IntraWare GmbH here.
Our website contains virtual tours of hotels connected via the portal my.matterport.com. The operator of this portal is Matterport, Inc., 352 E. Java Dr. Sunnyvale, CA 94089, USA.
When you visit our pages that include a virtual tour, a link is created to the Matterport servers. This means that the Matterport server is informed which of our pages you have visited. Matterport also receives your IP address. This occurs even if you are not logged into Matterport or do not have an account with Matterport. The information recorded by Matterport is sent to the Matterport servers in the USA.
If you are logged into your Matterport account, you enable Matterport to assign your surfing behaviour directly to your profile. You can prevent this by logging out of your Matterport account.
Our website uses the IT facilities of our partner companies Expedia Inc. and meetago GmbH, in order to be able to efficiently implement your enquiries/bookings.
By using this website, you agree to the recording, processing and use of the data automatically collected by our partner companies, or by one of their representatives or third-party suppliers, or the data supplied by you to partner companies, or one of their representatives or third-party suppliers. Our partner companies ensure that the processing and use of your data is carried out for the purposes of advice, advertising and market research only with your express consent. Your data will not be sold, rented out or made available to third parties in any other way. You can refuse the use of your data by our partner companies at any time.
The terms and conditions of use and the information on data protection for Expedia Meeting Market can be found in the Disclaimer for Expedia Inc., USA.
You can find details on the meeting portal tagungshotel.com in the Disclaimer for meetago GmbH.
Pursuant to Art.15 GDPR in conjunction with § 34 BDSG (Bundesdatenschutzgesetz [Federal Data Protection Act]) you have the unrestricted right to information, which is free of charge, on the personal data that we hold on file on you as well as pursuant to § 35 BDSG the right to the deletion or blocking of inadmissible data and/or the right to the correction of any erroneous data respectively.
Upon application, we will be happy to provide you in writing with details on whether and what personal data we have filed on you. As far as possible, we shall take appropriate measures to update and or correct any data that we hold on you in the shortest time possible. Please send all information requests, enquiries regarding information or complaints about data processing, by email, stating your full postal address, directly to our data protection officer.
You can request a confirmation from the person responsible whether personal data that affects you is being processed by us.
the existence of an automated decision-making process including profiling pursuant to Art. 22 para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved as well as the scope and the envisaged impact of such processing for the affected person.
You have the right to request information whether the personal data that affects you is being transmitted to a third country or to an international organisation. In this connection you can request to be informed about the appropriate guarantees pursuant to Art. 46 GDPR in connection with the transmission.
You have a right to rectification and/or completion vis-à-vis the person responsible, insofar as the personal data that affects you being processed is wrong or incomplete. The person responsible must carry out the rectification as quickly as possible.
if you have submitted a complaint concerning the processing pursuant to Art. 21 para. 1 GDPR and it is not yet clear whether the justified reasons of the person responsible take precedence over your reasons.
If the processing of the personal data that affects you is restricted, this data – apart from its storage – may only be processed with your consent or in order to enforce, execute or defend legal claims or for the protection of the rights of another natural person or legal entity or for reasons of an important public interest on the part of the European Union or another member state.
If the limitation in the processing pursuant to the aforementioned conditions is restricted, you will be informed by the person responsible before said restrictions are lifted.
the personal data that affects you is no longer required for the purposes for which they were collected or for which they were processed in another manner.
You revoke your consent on which the processing is based pursuant to Art. 6 para. 1a or Art. 9 para. 2a GDPR and there is no other legal basis for the processing.
Pursuant to Art. 21 para. 1 GDPR you have submitted a complaint regarding the processing and there are no overriding reasons that justify the processing, or you have submitted a complaint regarding the processing pursuant to Art. 21 para. 2 GDPR.
The personal data that affects you was unlawfully processed.
The deletion of the personal data that affects you is required for the fulfilment of a legal duty according to the law of the European Union or the law of a member state to which the person responsible is subject.
The personal data that affects you was collected in connection with services offered by the information society pursuant to Art. 8 para. 1 GDPR.
If the person responsible has made the personal data that affects you publicly and if they are obliged to delete it pursuant to Art. 17 para. 1 GDPR, they shall implement appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform the officers involved in the data processing who are processing the personal data that, as the affected person, you have requested that they should delete all the links to this personal data as well as any copies or replicas thereof.
for the enforcement, execution and defence of legal claims.
If you have exercised your right for correction, deletion or restriction in processing vis-à-vis the person responsible, the latter is obliged to inform all the recipients of the personal data that affects you of this correction or deletion of the data or the restriction in processing, unless this should prove to be impossible or it entails a disproportionate amount of time and effort.
You have the right to be informed of these recipients by the person responsible.
(2) the processing is carried out with the aid of an automated procedure.
In exercising this right, you also have the right to insist that the personal data that affects you is transferred directly from the one person responsible to the other, insofar as this is technically possible. The rights and freedoms of others must not be restricted by this.
The right of data transferability does not apply for the processing of personal data that are required for the execution of a task that is in the public interest or is a result of the exercise of public authority with which the person responsible has been entrusted.
You have the right to object at any time to the processing based on Art. 6 para. 1e or f GDPR of the personal data that affects you, for reasons that are pertinent to your particular situation; this also applies for any profiling based on these provisions.
The person responsible shall no longer process the personal data that affects you unless they are able to provide irrefutable reasons sustaining the worthiness of the protection of the processing that supersede your own interests, rights and freedoms, or the processing is for the purpose of the enforcement, execution or defence of legal claims.
If the personal data that affects you is processed for direct marketing purposes, you have the right at any time to object to the use of the personal data that affects you for the purpose of such advertising; this also applies for any profiling, insofar as it is carried out in connection with such direct advertising.
If you object to the processing for the purpose of direct advertising, the personal data that affects you will no longer be processed for these purposes.
You have the option, in connection with the use of services of the information society – irrespective of Directive 2002/58/EC – to exercise your right to object by means of an automated procedure in which technical specifications are used.
You have the right to revoke your data protection declaration of consent at any time. The legality of the processing up until the point of the revocation of your consent is not affected by this.
is carried out with your express consent.
However, these decisions may not be based on specific categories of personal data pursuant to Art. 9 para. 1 GDPR, if Art. 9 para. 2a or g applies and appropriate measures for the protection of your rights and freedoms as well as your justified interests were met.
With regard to the cases mentioned in (1) and (3) the person responsible shall take appropriate measures to maintain your rights and freedoms as well as your justified interests, whereby the right to intercede on behalf of a person by the person responsible, to the presentation of a personal point of view and to challenge the decision is included at least.
Irrespective of any other legislative or regulatory judicial remedies, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place where the alleged violation took place, if you are of the opinion that the processing of the personal data that affects you has violated the GDPR.
The supervisory authority to whom the complaint is submitted shall inform the complainant about the status and the results of the complaint, including the possibility of any judicial remedy pursuant to Art. 78 GDPR.
As part of the application process we only process your personal data that are connected with your application and which are required to determine your professional and personal capabilities in relation to the job being filled. We only use the information you have sent us directly. This may also include information you have provided on online career networks or other job portals.
Our objective is to make the application process as simple as possible for you. We will also be happy to consider your application for other positions at Lindner Hotels AG. If interested, you can join our talent community (talent pool) as part of the application process by giving your consent for this purpose. The same applies to speculative applications that you send us as part of our talent community. You decide actively whether we may contact you for specific job proposals.
With an online application you enter your personal data in the online form and upload the relevant documents. With your online application, as an alternative to entering your personal data manually or uploading a document, you can also transfer your profile from a social network or job portal (LinkedIn, Indeed, etc.).
We carry out an online assessment for selecting management positions. In order to implement the online test process, we work together with our partner AS Profiling, Andrea Schmelzenbach Personalberatung, Alpspitzstrasse 1, 82347 Bernried am Starnberger See, Germany, with whom we have a contractual relationship. People who have applied to us are invited to take part in the online test by AS Profiling by email on our behalf. We share the information required for the invitation and implementation of the online test process (first name, surname and email address) with AS Profiling solely for this purpose.
We collect your personal data that are relevant to the application process. These may be general data about you (such as name, address and contact details), information about your professional education and qualifications, information about your professional training or other information about your professional career that you send us in connection with your application. In the case of a speculative application that does not relate to a specific position, we also ask about your preferences (e.g. departments you are interested in) so that we can consider you for other suitable jobs.
If we ask you about your gender as part of the application process in the form of your preferred title, the only reason for doing so is because we wish to write to or address you correctly. If you have a nationality from outside the EU, a work permit for Germany will be required. We therefore also ask you about your nationality as part of the application process.
We process the data specified under XII 1. for the purposes of deciding whether to establish an employment relationship and – if an employment relationship is created between you and us – to implement or terminate the employment relationship and to exercise or meet our statutory rights and duties based on § 26 of the German Data Protection Act [Bundesdatenschutzgesetz (BDSG)]. We may also process personal data about you if this is necessary to establish or defend legal claims arising from the application process. The legal basis for this is Art. 6 (1) f) GDPR (EU General Data Protection Regulation). The legitimate interest is to preserve our legal positions.
Commissioned processors: Service providers whom we use to perform services, for example in the fields of technical infrastructure and the maintenance of our IT systems.
Public bodies: Public authorities and government institutions, such as social security agencies, the courts or authorities to which we are obliged to send personal data for mandatory legal reasons.
Private bodies: Tax advisers, insurance companies or similar auxiliaries to whom data are sent based on a consent or a legal basis.
Your personal data are treated in strict confidence and only supplied to the people who are responsible for and involved in the application process, and contractors who perform the services required for the selection process (e.g. providers of online tests).
If you are considered for a position, the subsequent use or sharing of your personal data are restricted to purely job-related purposes and to the group of people who must be made aware of it as part of the appointment. This also applies to information disclosed to internal or external service providers for the necessary pre-contractual verification processes and based on legal or official requirements.
If you do not send your application to us directly, but via an external online portal or an external recruiter, we initially collect your data via these third parties.
We delete your personal data at the end of the application process, unless a legal authority or your consent allows a longer retention period. In both of these cases we delete your personal data once the legal authority no longer exists or you withdraw your consent.
If you set up your own profile as part of an online application for a specific position, you can delete your data and the attachments (such as your CV) yourself at any time. You also have the option of asking us to delete your data. If you wish us to delete your applicant profile immediately, please contact hr@lindner.de.
Our standard deletion period for an application is six months after completion of the application process or after completion of a recruitment event. Fourteen days before your profile is deleted, you will receive an email from us informing you of the impending deletion. With this email you have the option of asking for your data to continue to be stored as part of our talent community.
If you have asked us to delete your data as part of an application for a management position, we will inform our partner for the compulsory online assessment, AS Profiling, immediately, with a note that your data must also be deleted immediately at AS Profiling. The deletion period for AS Profiling is immediate.
If you have filed your data and CV in our talent pool as part of the “talent community” function, we will contact you by email 12 months after you have become a member of our talent community and ask you to renew your consent. If you do not update your data, it is deleted completely no later than after 18 months.
The data you provide (e.g. CV and emergency contacts) and data created as part of your service relationship (e.g. salary data, sickness absences, leave in order to care for dependents and grace periods) are processed as part of your employment relationship.
The data are processed and transferred for the payment of wages, salaries and fees, and to comply with our recording, notification and reporting duties, providing this is required based on laws or standards for the collective shaping of law or employment contract obligations, including text documents created and archived with the assistance of automated processes (such as correspondence) in these matters. We cannot conclude or implement the contract with you without these data. This also applies to all voluntary social benefits paid by the employer and external training and in-service training offers.
We collect and use our employees’ personal data in principle only to the extent required to establish and implement the employment relationship. In all other respects, as a rule we only collect and use our employees’ personal data with the employee’s consent. An exception applies in those cases where prior consent cannot be obtained for objective reasons and the processing of the data is permitted by statutory regulations.
Processing is based on a change of purpose (Art. 6 (4) GDPR).
The processing is carried out to establish an employment relationship (see § 26 (1) clause 1 BDSG).
The processing is carried out to implement or terminate an employment relationship (see § 26 (1) clause 1 BDSG).
The processing is required to exercise or fulfil rights and duties to represent the interests of the employee arising from a law, tariff agreement or works agreement (see § 26 (1) clause 1 BDSG).
The processing is carried out to uncover criminal offences within the employment relationship (see § 26 (1) clause 2 BDSG).
The processing is carried out on the basis of the employee’s consent (see § 26 (2) BDSG).
The processing is carried out on the basis of collective agreements (see § 26 (4) BDSG).
Processing is based on consent (Art. 9 (2) a) GDPR) - with no employee context.
Processing is carried out in the context of social law (Art. 9 (2) b) GDPR in conjunction with § 22 (1) subsection 1a BDSG).
To fulfil statutory duties arising from employment law or social law (Art. 9 (2) b) GDPR in conjunction with § 26 (3) BDSG) “employee context”.
Processing is based on a tariff agreement or a works agreement (Art. 9 (2) b) in conjunction with § 26 (4) BDSG) “employee context”.
There are vital interests / no consent is possible (Art. 9 (2) c) GDPR).
Processing is carried out in accordance with Art. 9 (2) d) GDPR.
Processing relates to personal data which is manifestly made public by the data subject (Art. 9 (2) e) GDPR).
Processing is required for the establishment, exercise or defence of legal claims (Art. 9 (2) f) GDPR).
Processing is carried out in accordance with Art. 9 (2) g) GDPR.
Processing is carried out in accordance with Art. 9 (2) h) GDPR in conjunction with § 22 (1) subsection 1b BDSG.
Processing is necessary for archiving purposes in the public interest, or in scientific or historical research purposes or for statistical purposes (Art. 9 (2) j) GDPR).
If you do not send your employee data to us directly, but via an external online portal or an external recruiter, we initially collect your data via these third parties.
Public bodies: Public authorities and government institutions, such as social security agencies, the courts or authorities to whom we are obliged to send personal data for mandatory legal reasons.
Private bodies: Tax advisers, insurance companies or similar auxiliaries to whom data is sent based on consent or a legal basis.
Employees’ personal data are deleted or blocked as soon as the purpose for storing the data no longer exists. However, they may continue to be stored if this is provided for by the European or national legislation, in directives, laws or other regulations under EU law to which the data controller is subject. The data are also blocked or deleted if the retention period stipulated by the regulations referred to expires, unless there is a requirement for the data to continue to be stored for the conclusion or the performance of a contract.
* Lindner Hotels AG includes Lindner Hotels & Resorts and the me and all hotels.
** For better readability, we do not use male and female formulations at the same time. However, all descriptions apply to both sexes.
If parts of our internet presence are offered in languages other than German, this is meant exclusively as a service for our clients, employees and prospective clients, who are not German speakers.
Do you want to receive information about the personal data stored about you in our IT systems, or do you want to delete your personal data?

References: Art. 6
 Art 6
 Art 6
 Art 6
 Art 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 § 7
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art.15
 § 34
 § 35
 Art. 22
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 17
 Art. 6
 Art. 9
 Art. 9
 Art. 78
 § 26
 Art. 6
 § 26
 § 26
 § 26
 § 26
 § 26
 § 26
 § 22
 § 26
 § 26
 Art. 9
 Art. 9
 Art. 9
 § 22