Source: https://hotel-graefratherhof.de/contact/data-privacy/?lang=en
Timestamp: 2019-04-18 19:01:20+00:00

Document:
We are delighted to welcome you to our website. SILAG Handel AG considers the protection and security of your personal data very important. The SILAG Handel AG website can be used without the need to provide any personal data. However, if the person in question wishes to make use of particular services of our company via our website, it may become necessary to process personal data. If the processing of personal data is necessary, and there is no statutory basis for such processing, we generally obtain the consent of the affected person.
The processing of personal data such as the name, address, email address or telephone number of an affected person is always carried out in conformity with the General Data Protection Regulation and in accordance with the country-specific data protection regulations applicable to SILAG Handel AG. By means of this data protection declaration our company would like to inform the public about the type, scope and purpose of the personal data collected, used and processed by us. Furthermore, those persons affected will be informed of their rights by means of this Data Protection Declaration.
SILAG Handel AG, as data controller, has implemented numerous technical and organisational measures to ensure the most complete protection of personal data processed via this website.
The SILAG Handel AG website collects a series of general data and information each time a person or an automated system accesses the website.
SILAG Handel AG does not draw any conclusions about the person concerned when using this general data and information. Rather, this information is required to (a) correctly deliver the contents of our website, (b) optimise the contents of our website, (c) ensure the permanent functionality of our information technology systems and the technology of our website and (d) provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber attack. These anonymously collected data and information are therefore evaluated statistically by SILAG Handel AG on the one hand and also with the aim of increasing data protection and data security in our company in order ultimately to ensure an optimal level of protection for the personal data processed by us. We store the anonymous data of the server log files separately from all personal data provided by the person concerned.
Due to legal regulations, the SILAG Handel AG website contains information that enables prompt electronic contact and direct communication with our company, which also includes an address for electronic mail (email address). If a person concerned contacts us by email, the personal data transmitted by the person concerned will be automatically stored. Such personal data transmitted on a voluntary basis by a person concerned are stored for the purpose of processing, or for contacting the the person concerned. There is no transfer of this personal data to third parties.
Personal data of the person concerned will be processed and kept only for the period necessary to achieve its purpose, unless this is required by the European Directive and Regulations, or another legislator in laws or regulations under which the data controller processes and stores the data.
You can request the data controller to confirm whether we will process personal data that concerns you.
(8) the existence of automated decision making including profiling pursuant to Art. 22 para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and the scope and intended effects of such processing for the person concerned.
(4) if you object to the processing pursuant to Art. 21 para. 1 GDPR pending verification as to whether the data controller’s legitimate grounds override your reasons for the objection.
(2) You revoke your consent to the processing pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR , and where there is no other legal ground for the processing.
(3) You object pursuant to Art. 21 para. 1 GDPR, you object to the processing and there are no overriding justifiable reasons for the processing, to the processing pursuant to Art. 21 para. 2 GDPR.
(6) The personal data that concerns you has been collected in connection with services offered by the information company, pursuant to Art. 8 para. 1 GDPR.
If the data controller has made public the personal data relating to you public, and if he is obliged under Art. 17, para. 1 GDPR to delete it, he shall take appropriate measures, including technical measures, taking into account available technology and implementation costs, to inform those data processors who process the personal data relating to you that you as the person concerned have requested deletion of all links to this personal data including copies or replications of this personal data.
If you have exercised your right to have the data controller correct, delete or limit the processing, he is also obliged to inform all recipients of the personal data that concerns you of this correction or deletion of the data, or restriction on processing, unless this proves impossible or involves a disproportionate expense.
You have the right to be informed by the controller of such recipients.
In exercising this right, you shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible. The freedoms and rights of other persons must not be affected by this.
You have the right, for reasons arising from your specific situation, to object to the processing of personal data concerning you at any time, carried out in accordance with Art. 6 para. 1 lit. e or lit. f, GDPR; the same applies to profiling based on these provisions.
In the context of the use of the services of the information company, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
However, these decisions may not be based on special categories of personal data pursuant to Art. 9, para. 1 GDPR, unless Art. 9 Para. 2 lit. a or g applies and appropriate measures have been taken to protect your rights and freedoms as well as your legitimate interests.
Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside, where you work or where the infringement is suspected, if you believe that the processing of personal data that concerns you is in contravention of GDPR.
Art 6 I lit. a GDPR serves our company as a legal basis for processing operations through which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the person concerned is a party, as is the case for example with processing operations necessary for the delivery of goods or the provision of other services or returns, the processing is based on Art. 6 I lit. b GDPR. The same applies to such processing procedures that are necessary to carry out pre-contractual measures, for example in cases of enquiries about our products or services. If our company is subject to a legal obligation which requires the processing of personal data, for example to fulfil tax obligations, the processing is based on Art. 6 I lit. c GDPR. In rare cases, the processing of personal data may become necessary to protect the vital interests of the person concerned, or another natural person. This would be the case, for example, if a visitor were injured in our company and his name, age, health insurance data or other vital information had to be passed on to a doctor, a hospital or other third parties. The processing would then be based on Art. 6 I lit. d GDPR. Ultimately, processing operations could be based on Art. 6 I lit. f GDPR. Processing operations which are not covered by any of the aforementioned legal clauses are based on this legal clause if processing is necessary to safeguard a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not outweigh them. We are permitted to carry out such processing procedures, in particular because they have been specifically mentioned by the European legislator. In this respect, it took the view that a legitimate interest could be assumed if the person concerned is a customer of the responsible data controller (recital 47, second sentence, GDPR).
Where the processing of personal data is based on Art. 6 I lit. f GDPR our legitimate interest is to carry out our business to the benefit of the welfare of all our employees.
The criterion for the duration of the storage of personal data is the relevant statutory retention period. After the expiry of the time period, the corresponding data will be routinely deleted provided it is no longer required for the fulfilment of the contract or for initiating a contract.
We inform you that the provision of personal data is in part prescribed by law (e.g. tax regulations) or may also result from contractual regulations (e.g. information regarding the contractual partner). In some cases, it may be necessary for a contract to be concluded that a person concerned should provide us with personal data which must subsequently be processed by us. For example, the person concerned is obliged to provide us with personal data if our company enters into a contract with him/her. Failure to provide personal data would mean that the contract with that person could not be concluded. Before providing personal data, the person concerned must contact one of our employees. Our employee will inform the data subject on a case-by-case basis whether the provision of personal data is required by law or contract, or required for the conclusion of the contract, and whether there is an obligation to provide the personal data and what consequences the failure to provide the personal data would have.
This website uses Google Analytics, a web analytics service provided by Google Inc. (hereinafter referred to as Google). Google Analytics uses “cookies”, text files stored on your computer that enable your website use to be analysed. Cookie-generated information about your use of this website is usually transmitted to and stored on a Google server in the USA. However, because IP anonymization is activated on this website, Google will store your IP address in shortened form if you are accessing this site from within the European Union or the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website activity and internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics is not conflated with other Google data.
In addition or as an alternative to the browser add-on, you can prevent Google Analytics tracking on our pages by clicking this link. This will install an opt-out cookie onto your device. This will prevent the collection of data by Google Analytics for this website and for this browser, for as long as the cookie remains installed in your browser.
In order to present our contents correctly and in a graphically appealing way across all browsers, we use script libraries and font libraries such as Google Web Fonts (https://www.google.com/webfonts/) on this website. Google Web Fonts are loaded into your browser’s cache to avoid multiple loading. If your browser does not support Google Web Fonts or does not allow access, content will be displayed in a default font.
This website uses Google Maps API for the display of geographical information. When using Google Maps, Google also collects, processes and uses data about the use of map functions by visitors. For more information about how Google processes your information, please see Google Privacy Notices . There you can also change your personal data protection settings in the Data Protection Centre.
On some of our websites we embed YouTube videos. The operator of the respective plugins is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. As soon as you visit a page with a YouTube plugin, a connection to YouTube servers will be established. This will inform YouTube which pages you are visiting. When you are logged in to your YouTube account, YouTube can recognise your surfing habits. You can prevent this by logging out of your YouTube account beforehand.
If you have deactivated the storage of cookies for the Google Ad program, you do not have to reckon with such cookies when viewing YouTube videos. YouTube also stores information on usage that is not related to individuals in other cookies. If you wish to prevent this, you must block the saving of cookies in your browser.

References: Art. 22
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 17
 Art. 6
 Art. 9
 Art. 9

Art 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6