Source: https://hotel-majestic-montreux.com/fr/node/967
Timestamp: 2019-04-22 06:11:43+00:00

Document:
Broermann Health & Heritage Hotels GmbH takes the protection of your personal data very seriously and strictly adheres to the rules of the relevant data protection laws, especially the Regulation (EU) 2016/679 (General Data Protection Regulation) (hereinafter referred to as “GDPR”) and this data protection information.
This data protection information covers the use of the digital services of Broermann Health & Heritage Hotels GmbH including our social media profiles via PC, smartphones, tablets and all other internet-enabled mobile devices.
The digital services may contain links to other third party services or websites which are not covered by our data protection information.
1. Note on the data controller - Who is responsible for the collection of data?
You can contact our data protection officer at the above-mentioned postal address, with the addition "To the data protection officer" or at the e-mail address datenschutz@broermann-hotels.com.
2. Purpose and legal basis of data processing – What do we use your data for?
We process personal data in order to process our contractual relationships, in particular the booking of hotel rooms and the sale of vouchers, and in order to provide contractual offers tailored to requirements. The collection of the data takes place in particular for the completion of a contract.
We collect with all forms obligatorily only those personal data, which are necessary for the completion of the contractual relations and/or for your information inquiry. This questions may be marked with an asterisk. The collection of data, which is not absolutely necessary, but is of interest to us in order to optimise the fulfilment of our services, is only optional. In this case you decide on a voluntary basis if and which data you want to provide. For your order we may need your correct name, address and payment data. We ask for your e-mail address and telephone number so that we can contact you with questions or problems regarding the service you have requested.
The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the provision of a contract or pre-contractual measures.
On some of our websites we offer you the opportunity to leave your opinion in the form of comments. When you submit a comment, your comment will be stored along with information about the time the comment was created, your IP address, your website URL if applicable, your email address if applicable, and the name you provided. Since we do not check comments on our site before activating them, we need this data in order to be able to take action against the author in the event of violations such as insults or propaganda.
The comments and the related data mentioned above will be stored until the commented content has been completely deleted or the comments have to be deleted for legal reasons.
The comments are stored on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time. For this purpose, an informal notification by e-mail to us is sufficient. The legality of the data processing operations that have already taken place remains unaffected by the revocation.
With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The respective content of a newsletter is explained in the respective declaration of consent. If you would like to receive a newsletter offered by us, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. For this purpose, we will send you an e-mail with a confirmation link (double opt-in) to the e-mail address you have entered. If you do not confirm your registration within [24 hours], your information will be blocked and automatically deleted after one month.
Your e-mail address is the only mandatory information for sending the newsletter. The indication of further, separately marked data is voluntary and will be used to address you personally. In addition, we store the IP addresses you use and the dates of registration and confirmation. The purpose of the procedure is to prove your registration and, if necessary, to clarify any possible misuse of your personal data. We do not collect any further data in this context. We use these data exclusively for the dispatch of the requested newsletter. As far as we use an order processor for the dispatch of the newsletter, we will of course comply with the applicable data protection laws.
Data processing takes place on the basis of your consent pursuant to Art. 6 Para. 1 lit. a GDPR. You can revoke your consent to the sending of a newsletter at any time and cancel the respective subscription. You can declare your revocation by clicking on the link provided in every e-mail or by sending us a message under the contact details mentioned under point 1. The legality of the data processing operations that have already taken place remains unaffected by the revocation.
We use so-called cookies on some of our websites, among other things to be able to offer you website-specific services, to recognize you when you visit our website again, and/or to adjust our offer to your personal preferences.
Cookies are small text files that are stored on a user's computer and contain data about the respective user in order to enable access to various functions. Both session cookies and permanent cookies are used on our website. A session cookie is temporarily stored on your computer as you navigate through the site. A session cookie is deleted as soon as you close your Internet browser or as soon as your session has expired after a certain period of time. A permanent cookie remains on your computer until it is deleted. The storage of a cookie ensures that you do not have to repeatedly enter your personal settings and preferences every time you visit our website. This saves you time and makes using our website more convenient for you.
The use of the aforementioned cookies is in the interest of a consistent presentation and functionality of our websites. The data processing is based on Art. 6 para. 1 lit. f GDPR, which permits the processing of data to uphold the legitimate interests of the data controller, provided that the interests or fundamental rights and freedoms of the data subject do not prevail.
However, because IP anonymization is enabled on our website, Google will previously truncate your IP address within member states of the European Union or other states party to the European Economic Area Agreement. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. We also use the "demographic features" function of Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of the site visitors. This data comes from interest-related advertising by Google and from visitor data from third parties. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google Account or generally prohibit the collection of your data by Google Analytics as described under "Objection to data collection".
Google has carried out the certification according to the current EU-US Privacy Shield (see https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI) and thus created the legal prerequisites for the adequacy of the data protection level also for the provision of the service Google Analytics by way of order processing. We have concluded a contract with Google for order processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Google cookies are stored and evaluated for statistical purposes on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in analysing user behaviour in order to optimise both our offer and, where appropriate, advertising for our offer.
In the context of the comment function, we use "Google reCAPTCHA" (hereinafter "reCAPTCHA") from Google on our websites. With reCAPTCHA it is checked whether the data input is done by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor on the basis of various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For analysis, reCAPTCHA evaluates various information (e.g. IP address, length of stay of the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google. The reCAPTCHA analyses run completely in the background. Website visitors are not advised that an analysis is taking place.
Data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in protecting your websites from abusive automated spying and from so-called SPAM.
We also use Google Analytics to evaluate data from the Google services AdWords and DoubleClick for statistical purposes. In order to improve our offers, we can analyse what happens after a user clicks on our ad, e.g. whether the user has purchased our product or accessed the ad from a mobile phone. You also receive interest-related advertising by means of these services. If you don't want this to happen, you can turn it off using Google's Preferences Manager.
DoubleClick places a cookie on your computer in order to record your surfing behaviour on various websites (tracking) and to play out interest-related advertising. If you want to prevent this permanently, you can download a plug-in from the following link to deactivate the DoubleClick cookie.
Information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. This tells us the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. We do not receive any information with which users can be personally identified. If you do not wish to participate in tracking, you can object to this use by easily deactivating the Google Conversion Tracking cookie in your Internet browser under User Settings or by deactivating it using the aforementioned plug-ins or settings.
This website uses the Google Maps service via an API. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.
The use of Google Maps is in the interest of easy locating of the places indicated by us on the website. The data processing is based on Art. 6 para. 1 lit. f GDPR, which permits the processing of data to safeguard the legitimate interests of the data controller, provided that the interests or fundamental rights and freedoms of the data subject do not prevail.
Each time our websites are accessed, usage data is transmitted by the respective web browser and stored in log files, the so-called server log files. The stored data records contain the following data: Browser type and browser version, operating system used, referrer URL, time of server request, shortened IP address.
These data cannot be assigned to specific persons. This data will not be merged with other data sources. We do reserve the right to subsequently check this data if we become aware of concrete indications of illegal use.
The data processing is based on Art. 6 para. 1 lit. f GDPR, which permits the processing of data to safeguard the legitimate interests of the data controller, provided that the interests or fundamental rights and freedoms of the data subject do not prevail.
We run a corporate site (fanpage) in the social network facebook.com. We are jointly responsible with Facebook for the operation of the Facebook fan page within the meaning of Art. 26 GDPR The agreement on joint responsibility can be found here: https://www.facebook.com/legal/terms/page_controller_addendum. The primary data controller is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").
The purpose of the data processing of the data provided by Facebook by us is the statistical evaluation of the use of our fan page. For example, we can determine our users' preferred visiting and contribution times and use them to optimize our contributions and our fan page. In addition, we process personal data made publicly accessible by you on Facebook (e.g. clear names in the user profile) as well as data directly connected with activities on our fan page (e.g. contributions, posts, likes, tags), also for the purpose of communicating with you.
You can send us applications for jobs in our company via our websites and the contact data we have provided there. Insofar as personal data is transferred to us by you in this way or in any other way during applications, we process your data for the purpose of examining, processing and responding to your application and, if necessary, preparing the employment relationship.
Basis for the data processing is Art. 6 Para. 2 GDPR, § 26 Para. 1 BDSG (new) which permits the processing of data for the decision on the establishment, for the establishment as well as for the implementation of employment relationships.
We offer payment by credit card. We process credit card payments via the payment service provider ConCardis GmbH (hereinafter referred to as "ConCardis"), Helfmann-Park 7, 65760 Eschborn, Germany, to whom we pass on the information you provide during the payment process as well as information about your order.
The transmission of your data to ConCardis takes place on the basis of Art. 6 Para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.
Our company regularly checks the creditworthiness when concluding contracts and in certain cases of existing customers if there is a legitimate interest, in order to protect us against the occurrence of payment defaults.
For this purpose, we cooperate with Verband der Vereine Creditreform e.V. (hereinafter referred to as "Creditreform"), Hellersbergstraße 11, 41460 Neuss, Germany, and IHD Gesellschaft für Kredit und Forderungsmanagement mbH (hereinafter referred to as "IHD"), Augustinusstr. 11 B, 50226 Frechen, Germany, from which we receive the necessary data. For this purpose, we may provide names and contact information to one of the above credit rating service providers. The information according to Art. 14 GDPR on data processing at Creditreform can be found at https://en.creditreform.de/eu-gdpr.html. Within the scope of our cooperation with the IHD, we also use automatically generated probability values for the purpose of deciding on the establishment, execution or termination of the contractual relationship, the calculation of which may include address data, among other things. The information according to art. 14 GDPR to the data processing taking place with the IHD is provided at www.ihd.de/datenschutz/Artikel14.html. You can find information about their contractual partners in the field of credit agencies at: www.ihd.de/datenschutz#vertragspartner.
We can decide whether to reject a customer's order as part of the credit check by using an automated process. For example, when a negative credit report is transmitted by a credit agency, the desired order can be rejected automatically. This occurs in particular if the information indicates that the customer has insufficient creditworthiness to meet its payment obligations. You may exercise the right to ask us to manually review the automated decision.
The processing of your data in this context takes place on the legal basis in Art 6 para. 1 lit. b GDPR or the legal basis in Art 6 para. 1 lit. f GDPR, which allows the processing of data to safeguard the legitimate interests of the responsible person, provided that the interests or fundamental rights and freedoms of the person concerned do not prevail.
If open invoices/rates are not paid despite repeated reminders, we can transmit the data necessary for the execution of a collection (name, address, e-mail address, information on the company and if necessary contract and debt data) to a collection agency for the purpose of the sale of the open claims as well as for the purpose of the debt collection processing. When the outstanding claims are sold, the latter then becomes the holder of the claim and asserts the claim in his own name. We work together with the following collection agencies: Verband der Vereine Creditreform e.V., Hellersbergstraße 12, 41460 Neuss and IHD Gesellschaft für Kredit- und Forderungsmanagement mbH, Augustinusstraße 11b, 50226 Frechen. The processing of the data takes place on the legal basis in art. 6 Abs. 1 lit. b and art. 6 Abs. 1 lit. f GDPR.
The processing of the data takes place on the legal basis in Art. 6 Para. 1 lit. b and Art. 6 Para. 1 lit. f GDPR. Transmissions on the basis of Art. 6 Para. 1 lit. f GDPR may take place insofar as this is necessary to safeguard the legitimate interests of our company and does not outweigh the interests of the person concerned, which require the protection of personal data.
We also process your data if it is necessary to protect the legitimate interests of us or of third parties. This may be the case to guarantee IT security and IT operation; for support inquiries; in the event of legal disputes, to be able to understand and prove the facts of the case; for market and opinion polls; to statistically evaluate the use of our website; to promote other products from us or our cooperation partners.
If your data is used for advertising purposes for our offers and products and for other offers and products of our cooperation partners, we may ask for your consent. The data processing then takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time with effect for the future.
In addition, we use your e-mail address for recommendations if you have already booked with us. You will receive these recommendations from us regardless of whether you have subscribed to a newsletter or not. In this way, we would like to provide you with information about our services that may be of interest to you on the basis of your most recent bookings with us. We strictly adhere to the legal requirements. If you do not wish to receive any recommendations and offers or any advertising messages from us, you can object to this at any time. A text message to the contact data mentioned under point 1 (e.g. e-mail, fax, letter) is sufficient for this purpose.
Basis for the data processing is art. 6 Abs. 1 lit. f GDPR, which permits the processing of data for the protection of legitimate interests of the responsible person, provided that the interests or fundamental rights and freedoms of the person concerned do not outweigh.
We also use your data for market and opinion research. Of course we use them exclusively anonymously for statistical purposes and only for Dr. Broermann Hotels & Residences GmbH. Your responses to surveys will not be shared with third parties or published.
Basis for the data processing is Art. 6 Para. 1 lit. c GDPR, which permits the processing for the fulfilment of a legal obligation.
Your personal data will only be passed on to third parties or otherwise transmitted if this is necessary for the purpose of contract processing or billing or if you have given your prior consent or if there is a legal basis for the transfer.
Insofar as it is necessary for the purpose of contract processing or for the dispatch and delivery of products, data will be passed on to partner companies which have been commissioned to support contract processing. Our partners undertake to comply with and observe the provisions of data protection law. Furthermore, our partners are not permitted to use the data in any other way than to process the contract.
Service providers who support us in providing our services to you are sales and marketing companies, file destruction, software (SaaS) providers, IT service providers, in particular service providers for software and hardware maintenance, social media management providers, hosting providers and e-mail service providers.
In principle, we delete your data as soon as they are no longer required for the respective purpose, unless temporary storage is still necessary. For example, we store your data on the basis of legal proof and storage obligations, which arise from the German Commercial Code and the German Tax Code. The storage periods are then up to ten full years. We also retain your data for the period in which claims can be made against our company (statutory limitation period of three or up to thirty years).
Your personal data will be transmitted securely by us through encryption. We use the coding system SSL (Secure Socket Layer). You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. Furthermore, we secure our websites and other systems by technical and organizational measures against loss, destruction, access, alteration or distribution of your data by unauthorized persons.
You can request information about your personal data stored by us and under certain conditions request the correction or deletion of your data by contacting us via our contact data given above. You may also have the right to restrict the processing of your data and to have the data you provide disclosed in a structured, common and machine-readable format. If you have given us your consent to process personal data for specific purposes, you can revoke your consent at any time with effect for the future. You may object to the processing of your data for direct marketing purposes. If we process your data to protect legitimate interests, you may object to such processing for reasons arising from your particular situation. You can also contact a data protection supervisory authority.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 26
 Art. 6
 § 26
 Art. 6
 Art. 14
 art. 14
 Art 6
 Art 6
 art. 6
 art. 6
 Art. 6
 Art. 6
 Art. 6
 art. 6
 Art. 6