The protection of personal data is important to us. Therefore, the processing of personal data is carried out in accordance with the applicable European and national legislation.
You can of course revoke your declaration of consent at any time with effect for the future. Please contact the responsible person according to § 1.
The following statement provides an overview of what type of data is collected, how this data is used and passed on, what security measures we take to protect your data and how you can obtain information about the information given to us.
Legal basis for processing personal data
Insofar as we obtain the consent of the person concerned for the processing of personal data, Article 6 (1) sentence 1 lit. a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
Article 6 (1) sentence (b) GDPR serves as the legal basis for the processing of personal data required to fulfill a contract to which the data subject is a party. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as processing of personal data is necessary to fulfill a legal obligation to which we are subject, Article 6 (1) sentence 1 lit. c) GDPR serves as the legal basis.
If the processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the first interest, Article 6 Paragraph 1 Clause 1 Letter f) GDPR serves as the legal basis for the processing .
Data Erasure and Storage Duration
The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage no longer applies. Storage can also take place if this has been provided for by European or national legislators in EU regulations, laws or other regulations to which we are subject. The data will also be blocked or deleted if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.
Naming of the responsible body
The responsible body for data processing on this website is:
Hotel Am Markt & Brewery "Stadtkrug"
The responsible body decides alone or together with others on the purposes and means of processing personal data (e.g. names, contact details, etc.).
Revocation of your consent to data processing
Some data processing operations are only possible with your express consent. You can revoke your consent that you have already given at any time. An informal message by e-mail is sufficient for the revocation. The legality of the data processing that took place up until the revocation remains unaffected by the revocation.
Right to lodge a complaint with the competent supervisory authority
As a data subject, you have the right to lodge a complaint with the competent supervisory authority in the event of a breach of data protection law. The competent supervisory authority with regard to data protection issues is the state data protection officer of the federal state in which our company is based. The following link provides a list of data protection officers and their contact details: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to third parties. It is provided in a machine-readable format. If you request the direct transfer of the data to another person responsible, this will only be done to the extent that it is technically feasible.
Right to information, correction, blocking, deletion
You have the right to free information about your stored personal data, the origin of the data, its recipient and the purpose of the data processing and, if necessary, a right to correction, blocking or deletion of this data at any time within the framework of the applicable legal provisions. You can contact us at any time using the contact options listed in the legal notice if you have any further questions on the subject of personal data.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses an SSL or. TLS encryption. This means that data that you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the "https://" address line of your browser and by the lock symbol in the browser line.
Server log files
The provider of the website automatically collects and stores information in server log files, which your browser automatically transmits to us. These are:
This data is not merged with other data sources. The basis for data processing is Article 6 Paragraph 1 Letter b GDPR, which permits the processing of data to fulfill a contract or pre-contractual measures.
Data transmitted via the contact form will be stored, including your contact details, in order to be able to process your request or to be available for follow-up questions. This data will not be passed on without your consent.
The data entered in the contact form is processed exclusively on the basis of your consent (Article 6 (1) (a) GDPR). You can revoke your consent that you have already given at any time. An informal message by e-mail is sufficient for the revocation. The legality of the data processing operations that took place up until the revocation remains unaffected by the revocation.
Data transmitted via the contact form will remain with us until you ask us to delete it, revoke your consent to storage or there is no longer any need for data storage. Mandatory legal provisions - in particular retention periods - remain unaffected.
Some cookies are "session cookies." Such cookies are automatically deleted at the end of your browser session. On the other hand, other cookies remain on your end device until you delete them yourself. Such cookies help us to recognize you when you return to our website.
With a modern web browser you can monitor, restrict or prevent the setting of cookies. Many web browsers can be configured in such a way that cookies are automatically deleted when the program is closed. The deactivation of cookies can result in limited functionality of our website.
The setting of cookies, which are necessary to carry out electronic communication processes or to provide certain functions you want (e.g. shopping cart), takes place on the basis of Art. 6 Para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in the storage of cookies for the technically error-free and smooth provision of our services. If other cookies are set (e.g. for analysis functions), they will be treated separately in this data protection declaration.
Our website uses functions of the web analysis service Google Analytics. The provider of the web analysis service is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
Google Analytics uses "cookies." These are small text files that your web browser stores on your end device and enable analysis of website usage. Information generated by cookies about your use of our website is transmitted to a Google server and stored there. Server location is usually the USA.
Google Analytics cookies are set on the basis of Article 6 (1) (f) GDPR. As the operator of this website, we have a legitimate interest in analyzing user behavior in order to optimize our website and possibly also our advertising.
Google Web Fonts
- visitors to the website
- Optimization of our service performance
- IP address and CSS and font requests are processed
- Legal basis: Article 6 (1) (f) GDPR
- Responsible for Europe: Google Ireland Limited
This site uses so-called web fonts provided by Google for the uniform display of fonts. No cookies are stored in your browser. When you call up a page, your browser loads the required web fonts into your browser cache in order to display text and fonts correctly.
For this purpose, the browser you are using must connect to the Google servers. This gives Google knowledge that our website was accessed via your IP address. Google Web Fonts are used in the interest of a uniform and attractive presentation of our websites.
If you have agreed that Google Fonts may be loaded, this consent is the legal basis (Article 6 (1) (f) GDPR).
If you do not agree to Google Fonts, a standard font will be used by your computer.
Wir setzen Google Analytics in Verbindung mit der Funktion IP-Anonymisierung ein. Sie gewährleistet, dass Google Ihre IP-Adresse innerhalb von Mitgliedstaaten der Europäischen Union oder in anderen Vertragsstaaten des Abkommens über den Europäischen Wirtschaftsraum vor der Übermittlung in die USA kürzt. Es kann Ausnahmefälle geben, in denen Google die volle IP-Adresse an einen Server in den USA überträgt und dort kürzt. In unserem Auftrag wird Google diese Informationen benutzen, um Ihre Nutzung der Website auszuwerten, um Reports über Websiteaktivitäten zu erstellen und um weitere mit der Websitenutzung und der Internetnutzung verbundene Dienstleistungen gegenüber uns zu erbringen. Es findet keine Zusammenführung der von Google Analytics übermittelten IP-Adresse mit anderen Daten von Google statt.
The setting of cookies by your web browser can be prevented. However, this could limit some functions of our website. You can also prevent the collection of data relating to your website use, including your IP address and subsequent processing by Google. This is possible by downloading and installing the browser plugin available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Objection to data collection
You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to our website: Disable Google Analytics.
In order to fully comply with the legal data protection requirements, we have concluded an order processing contract with Google.
Demographic characteristics in Google Analytics
Our website uses the "demographic characteristics" function from Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and from visitor data from third-party providers. An assignment of the data to a specific person is not possible. You can deactivate this function at any time. This is possible via the ad settings in your Google account or by generally prohibiting the collection of your data by Google Analytics, as explained in the point "Objection to data collection". .
On our website we have integrated the online service dirs21 https://www.dirs21.de/ for room booking.
If you would like to book a room with us, it is necessary for the conclusion of the contract that you provide your personal data, which we need to process your booking. Mandatory information required for the processing of the contracts is marked separately, further information is voluntary. The data is entered into an input mask and transmitted to us and stored
Information on the rights of those affected
The data subject has the right to request confirmation from the person responsible as to whether personal data relating to them are being processed; if this is the case, she has a right to information about this personal data and to the information listed in Art. 15 DSGVO.
The data subject has the right to request the person responsible to immediately correct incorrect personal data concerning them and, if necessary, to complete incomplete personal data (Article 16 GDPR).
The data subject has the right to demand that the person responsible delete personal data relating to them immediately if one of the reasons listed in Article 17 GDPR applies, e.g. B. if the data is no longer required for the purposes pursued (right to erasure).
The data subject has the right to demand that the person responsible restrict the processing if one of the conditions listed in Art. 18 GDPR is met, e.g. B. if the data subject has lodged an objection to the processing, for the duration of the examination by the person responsible.
The data subject has the right, for reasons arising from their particular situation, to object at any time to the processing of personal data relating to them. The person responsible then no longer processes the personal data unless he can demonstrate compelling legitimate grounds for the processing which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims (Art 21 GDPR).
Without prejudice to any other administrative or judicial remedy, each data subject has the right to lodge a complaint with a supervisory authority if the data subject believes that the processing of personal data concerning them violates the GDPR (Art. 77 GDPR). The data subject can assert this right with a supervisory authority in the member state of their place of residence, their place of work or the place of the alleged infringement.
We offer job advertisements on our website.
You can send us application documents via email. As part of this, we process the information that we receive from you as well
a) email address
b) Possibly further information, which is transmitted via the e-mail
Your data will initially only be processed to carry out the application process. If your application is successful, the data will be part of the personnel file and can be used to carry out and terminate the employment relationship. If we are currently unable to offer you employment, we will process your data in order to defend ourselves against any legal claims, in particular due to alleged discrimination in the application process. If you receive cost reimbursements, the corresponding accounting documents will be processed to fulfill the commercial and tax storage obligations. The legal basis for data processing is therefore Article 6 Paragraph 1 Letter b) GDPR, insofar as the data processing serves to decide on the establishment of an employment relationship and insofar as the data is then included in the employment relationship. If the storage serves to secure claims, the legal basis is Article 6 (1) (f) GDPR. The legitimate interest here is the receipt of documentary evidence for possible defence. We process information and documents that are not required for the aforementioned purposes on the basis of your implied consent in accordance with Article 6 Paragraph 1 Letter a) GDPR, which you have given us by sending it. Insofar as you receive cost reimbursements from us, the legal basis is Article 6 (1) (c) GDPR.
As of 2022