Source: https://www.novum-hotels.com/en/privacy-statement
Timestamp: 2020-07-04 12:06:09
Document Index: 236856628

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6']

Privacy statement | Novum Hotels
Data Protection Statement of
Note: This text is the attempt to translate the German version of the Data Protection Statement into English. The original version can be found here. We would like to inform you, that all legal obligations, which are associated with EU General Data Protection Regulation, German Federal Data Protection Act and German Telemedia Act are only valid for the German version of the Data Protection Statement. This text is for information only and makes no claim for completeness. We appreciate you visiting our websites and we thank you for your interest in our company. Protection of personal data is a very important issue for us. Therefore, the processing of personal data of a data subject, for instance of names, postal or e-mail addresses and phone numbers, is carried out in accordance with the applicable European and national legislation.
In the following chapters, our company NOVUM Management GmbH would like to inform the general public about nature, extent and purpose of the data processed. In this data protection statement the persons concerned shall furthermore be informed of the rights granted to them.
The data protection statement of our company, NOVUM Management GmbH, is based on the terms, which the European legislative and regulatory authority uses in the EU General Data Protection Regulation (hereinafter called GDPR). Our data protection statement aims to be easy to read and to understand by general public as well as by our guests or business partners. To guarantee this we shall first explain the terms used.
Right to confirmation: Every data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed. If a data subject wishes to make use of this right of confirmation, he/she can contact the controller at any time.
• The data subject withdraws consent on which the processing is based according to GDPR, point (a) of Article 6(1), or point (a) of Article 9(2), and where there is no other legal ground for the processing.
• The data subject objects to the processing pursuant to GDPR, Article 21(1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2).
• The personal data have been collected in relation to the offer of information society services referred to in GDPR, Article 8(1).
If one of the abovementioned reasons applies and the data subject would like to demand erasure of his or her personal data, which have been stored by the NOVUM Management GmbH, he or she can at any time contact the controller. The request of the data subject will be fulfilled promptly.
If the personal data have been made public by our company, NOVUM Management GmbH, and if our company as controller is obliged pursuant to GDPR, article 17, paragraph 1 to erase the personal data, our company, NOVUM Management GmbH, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform other controllers which process the disclosed personal data that the data subject has requested from these other data controllers the erasure of all links to such personal data or of copies or replications of such personal data. This paragraph shall not apply if processing is necessary. The controller will then case-by-case make the necessary arrangements.
• The data subject has objected to processing pursuant to GDPR, Article 21(1) and the verification is pending, whether the legitimate grounds of the controller override those of the data subject.
If one of the abovementioned reasons is present and the data subject would like to request restriction of his or her personal data, which have been stored by the NOVUM Management GmbH, he or she can at any time contact the controller. The restriction of processing will be effectuated without delay.
In case of an objection our company, NOVUM Management GmbH, shall no longer process the personal data, unless we can show compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the purposes of establishment, exercise or defence of legal claims.
Where personal data are processed by our company, NOVUM Management GmbH, for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing. This includes also profiling to the extent that it is related to such direct marketing.
Where the data subject submits an objection to NOVUM Management GmbH against processing for direct marketing purposes, the personal data shall no longer be processed for such purposes by NOVUM Management GmbH.
Where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to GDPR, Article 89(1), the data subject, on grounds relating to his or her particular situation, shall have the right to make an objection to NOVUM Management GmbH against processing of personal data concerning him or her, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
• is necessary for entering into, or performance of, a contract between the data subject and a data controller;
• is based on explicit consent of the data subject
If the decision to enter into, or to perform, a contract between the data subject and the controller is required, or if the decision is made with the explicit consent of the data subject, our company, NOVUM Management GmbH, shall implement suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.
Right to lodge a complaint with a supervisory authority: Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes this Regulation.
The controller processes (in this connection also: stores) the personal data of the data subject only for the period necessary to achieve the purpose of the storage or, if the processing is required by the European legislative and regulatory authorities, or laid down in another law or regulation to which the controller is liable.
Our company, NOVUM Management GmbH, shall take numerous technical and organizational measures in order to protect your personal data against accidental or illegal destruction, alteration, loss, unlawful disclosure or unauthorized access.
This site uses encryption for security reasons and to protect the transmission of confidential content, such as the requests you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http: //" to "https: //" and by the lock symbol in the browser line.
If encryption is activated, the data that you transmit to us cannot be read by third parties.
The provider (or his web space provider) collects data about every access to the offer (so-called server log files). The access data includes: Name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting party provider.
Personal data are also processed by our company, name of the company, when you give these data to us. This occurs for instance each time when you contact us. The personal data we acquire this way shall be used only for the purpose, which you provide us when contacting us. This information shall be communicated only on a voluntary basis and with your consent. In the event that this data is information regarding communication channels (e.g. e-mail address or phone number), you further agree that we may possibly contact you through this channel of communication to answer your questions.
If users leave comments on the blog or other posts, their user data will be saved. This is done for the security of the provider, if someone writes illegal content in comments and contributions (insults, prohibited political propaganda, etc.). In this case, the provider can be sued for the comment or contribution and is therefore interested in the identity of the author.
The legal basis for the processing of this data is our legitimate interests and thus Art. 6 Para. 1 lit. f GDPR.
If you would like to receive the newsletter, we need a valid e-mail address, name and information from you, which allow us to verify that you are the owner of the e-mail address provided or that you are the owner upon receipt of the newsletter agrees. Further data is not collected. This data is only used for sending the newsletter and will not be passed on to third parties.
When you register for the newsletter, we save the date of registration. This storage serves solely as evidence in the event that a third party misuses an email address and registers for the newsletter receipt without the knowledge of the authorized party.
The legal basis for processing personal data that takes place when you use our newsletter is your consent and thus Art. 6 Para. 1 lit. a GDPR.
You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time. The revocation can be made via a link in the newsletter itself or by sending a message to the contact options above.
Data transmission via web form
Our company, NOVUM Management GmbH, is as a supplier responsible for the contents of our own as required by the European and national legislation in force. Our own contents are to be distinguished from links to contents provided by other suppliers. We have no influence over whether or not operators of other websites comply with the European and national data protection regulations in force. Please learn more about the data protection statements on the websites of the respective suppliers.
We use cookies to make our website user-friendly and to optimally adapt it to your needs. Cookies are small text files that are sent to your browser by a web server as soon as you visit a website and are stored locally on your end device (PC, notebook, tablet, smartphone, etc.).
Many websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a character string through which websites and servers can be assigned to the specific web browser in which the cookie was stored. This enables the websites and servers visited to distinguish the individual browser of the data subject from other web browsers that contain other cookies. A specific web browser can be recognized and identified using the unique cookie ID. This information is used if you visit the website again with the same device, automatically recognize you and make navigation easier for you.
You can accept or reject cookies - also for web tracking - via the settings of your web browser. You can configure your browser so that the acceptance of cookies is refused in principle or you are informed in advance if a cookie should be saved. In this case, however, the functionality of the website may be impaired (for example when placing orders). Your browser also offers a function to delete cookies (for example via "Delete browser data"). This is possible in all common web browsers. You can find further information on this in the operating instructions or in the settings of your browser.
First-party cookies: First-party cookies are permanent cookies that are stored on the computer and only lose their validity when the expiry date assigned to them has expired. The word "party" refers to the domain from which the cookie originated. In contrast to third-party cookies, first-party cookies usually come from the website operator itself. They are therefore not accessible to browsers across domains. For example, website A assigns a cookie A, which is not recognized by website B, but can only be recognized by website A. This means that data cannot be passed on to third parties.
Third-party cookies: With a third-party cookie, the cookie is set and recorded by a third party. The downside is that some browsers are set up to not accept this type of tracking. The advantage of third-party cookies, however, is that you do not have to install any code on the landing page. For this reason, the use of third-party cookies is technically easier than that of first-party cookies.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the Browser Add-on. Opt-out cookies will prevent future collection of your data when you visit this website. To prevent Universal Analytics from collecting data across different devices, you must opt-out on all systems used. If you click here, the opt-out cookie will be set: Deactivate Google Analytics.
This website uses the Google Tag Manager. This service allows website tags to be managed through an interface. The Google Tag Manager only implements tags. This means that no cookies are used, and no personal data is collected. The Google Tag Manager triggers other tags, which in turn collect data if necessary. However, the Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it remains valid for all tracking tags if they are implemented with the Google Tag Manager.
The legal basis for the use of Google Maps is our legitimate interest in optimizing our online services and thus Art. 6 para. 1 lit. f GDPR.
Google Fonts (https://fonts.google.com/) are used to visually improve the presentation of various information on this website. The web fonts are transferred to the cache of the browser when the page is called up so that they can be used for display. If the browser does not support Google Fonts or prevents access, the text is displayed in a standard font.
When the page is called up, no cookies are stored by the website visitor. Data that are transmitted in connection with the page view are sent to resource-specific domains such as fonts.googleapis.com or fonts.gstatic.com. You will not be associated with data that may be collected or used in connection with the parallel use of authenticated Google services such as Gmail.
You can set your browser so that the fonts are not loaded by the Google servers (e.g. by installing add-ons such as NoScript or Ghostery). If your browser does not support the Google Fonts or you have prevented access to the Google servers, the text is displayed in the system's standard font.
You can find information on the data protection conditions of Google Fonts at: https://developers.google.com/fonts/faq#Privacy
General information on data protection can be found in the Google Privacy Center at: http://www.google.com/intl/en-EN/privacy/
Our websites use Google Maps for presentation of maps and for creation of driving directions. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
The legal basis for the use of Google Maps is our legitimate interest in optimizing our online services and thus Art. 6 para. 1 lit. f GDPR. The terms of use for Google Maps can be read under:
We use "Google Translate" on our websites. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”).
With Google Translate our website can be translated into different languages.
For this purpose, the browser you are using must connect to the Google servers. This gives Google knowledge that our website has been accessed via your IP address. The website operator has within the meaning of Art. 6 Para. 1 lit. f GDPR has a legitimate interest in making its website available in several languages.
Further information on Google Translate and Google's privacy policy can be found at the following link: https://www.google.com/intl/en/policies/privacy/.
Use of Gstatic
A web service from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Gstatic) is loaded on our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to Gstatic. The legal basis for data processing is Art. 6 Para. 1 lit. f GDPR. The legitimate interest consists in the correct functioning of the website. The data will be deleted as soon as the purpose of their collection has been fulfilled.
Further information on the handling of the transferred data can be found in Gstatic's data protection declaration: https://policies.google.com/privacy.
A web service from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Doubleclick) is loaded on our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to Doubleclick. The legal basis for data processing is Art. 6 Para. 1 lit. f GDPR. The legitimate interest consists in the correct functioning of the website. The data will be deleted as soon as the purpose of their collection has been fulfilled. Further information on the handling of the transferred data can be found in the Doubleclick data protection declaration: https://policies.google.com/privacy.
You can prevent Doubleclick from collecting and processing your data by deactivating the execution of script code in your browser or installing a script blocker in your browser.
Our website uses functions from CloudFlare. The provider is CloudFlare, Inc. 665 3rd St. # 200, San Francisco, CA 94107, USA. CloudFlare offers a worldwide distributed content delivery network with DNS. Technically, the information transfer between your browser and our website is conducted via the CloudFlare network. CloudFlare is thus able to analyze the data traffic between users and our websites, for example to detect and ward off attacks on our services. CloudFlare may also store cookies on your computer for optimization and analysis. This serves to protect our legitimate interests in an optimal marketing of our offer, which predominate in the context of a balance of interests, in accordance with Art. 6 Para. 1 lit. f GDPR.
Cloudflare is a certified participant in the EU-US Privacy Shield Framework. Cloudflare is committed to handling all personal data contained by member states of the European Union (EU) in accordance with the Privacy Shield Framework in accordance with its applicable principles. For more information about the Privacy Shield Framework, see the U.S. Department of Commerce's Privacy Shield List at https://www.privacyshield.gov/.
Cloudflare collects statistical data about your visit to this website. The access data includes: Name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting party provider. Cloudflare uses the log data for statistical evaluations for the purpose of operation, security and optimization of the offer.
You can find information on the data collected there:
You can find information on security and data protection at CloudFlare here:
Party responsible for the processing of personal data for the purposes of the European Union General Data Protection Regulation (GDPR), or of other applicable data protection laws in the Member States of the European Union, and of other provisions relating to protection of personal data, is:
At the Alster 63
Telephone: +49 40 600 80 80
Telephone: 0800 600 80 81
Fax: +49 40 600 80 8 444
Telephone: +49 4101 77 44 70
Hamburg, January 2020