We are very pleased about your inter­est in our com­pa­ny. The man­age­ment of Hotel & Gasthof Dan­ner­wirt Schwe­in­steiger OHG attach­es great impor­tance to data pro­tec­tion. A use of the Inter­net pages of the Hotel & Gasthof Dan­ner­wirt Schwe­in­steiger OHG is basi­cal­ly pos­si­ble with­out any indi­ca­tion of per­son­al data. How­ev­er, if a per­son con­cerned wish­es to use spe­cial ser­vices of our com­pa­ny via our web­site, it may be nec­es­sary to process per­son­al data. If it is nec­es­sary to process per­son­al data and there is no legal basis for such pro­cess­ing, we gen­er­al­ly obtain the con­sent of the per­son concerned.

The pro­cess­ing of per­son­al data, for exam­ple the name, address, e‑mail address or tele­phone num­ber of a per­son con­cerned, is always car­ried out in accor­dance with the basic data pro­tec­tion reg­u­la­tion and in com­pli­ance with the coun­try-spe­cif­ic data pro­tec­tion reg­u­la­tions applic­a­ble to Hotel & Gasthof Dan­ner­wirt Schwe­in­steiger OHG. By means of this data pro­tec­tion dec­la­ra­tion, our com­pa­ny wish­es to inform the pub­lic about the type, scope and pur­pose of the per­son­al data col­lect­ed, used and processed by us. Fur­ther­more, this data pro­tec­tion dec­la­ra­tion informs affect­ed per­sons about the rights to which they are entitled.

Hotel & Gasthof Dan­ner­wirt Schwe­in­steiger OHG, as the par­ty respon­si­ble for pro­cess­ing, has imple­ment­ed numer­ous tech­ni­cal and orga­ni­za­tion­al mea­sures to ensure the com­plete pro­tec­tion of per­son­al data processed via this web­site. Nev­er­the­less, Inter­net-based data trans­mis­sions can gen­er­al­ly have secu­ri­ty gaps, so that absolute pro­tec­tion can­not be guar­an­teed. For this rea­son, every per­son con­cerned is free to trans­mit per­son­al data to us by alter­na­tive means, such as by telephone.

1. Definitions

The data pro­tec­tion dec­la­ra­tion of Hotel & Gasthof Dan­ner­wirt Schwe­in­steiger OHG is based on the terms used by the Euro­pean guide­lines and ordi­nances when the basic data pro­tec­tion reg­u­la­tion (DS-GVO) was issued. Our data pro­tec­tion dec­la­ra­tion should be easy to read and under­stand both for the pub­lic and for our cus­tomers and busi­ness part­ners. To ensure this, we would like to explain the terms used in advance.

We use the fol­low­ing terms, among oth­ers, in this pri­va­cy policy:

• a) Personal data

  Per­son­al data is any infor­ma­tion relat­ing to an iden­ti­fied or iden­ti­fi­able nat­ur­al per­son (here­inafter “data sub­ject”). An iden­ti­fi­able nat­ur­al per­son is one who can be iden­ti­fied, direct­ly or indi­rect­ly, in par­tic­u­lar by ref­er­ence to an iden­ti­fi­er such as a name, an iden­ti­fi­ca­tion num­ber, loca­tion data, an online iden­ti­fi­er, or one or more fac­tors spe­cif­ic to the phys­i­cal, phys­i­o­log­i­cal, genet­ic, men­tal, eco­nom­ic, cul­tur­al or social iden­ti­ty of that nat­ur­al person.

• b) Person concerned

  Data sub­ject means any iden­ti­fied or iden­ti­fi­able nat­ur­al per­son whose per­son­al data are processed by the controller.

• c) Processing

  Pro­cess­ing is any oper­a­tion or set of oper­a­tions, car­ried out with or with­out the aid of auto­mat­ed means, relat­ing to per­son­al data such as col­lec­tion, record­ing, organ­i­sa­tion, organ­i­sa­tion, fil­ing, stor­age, adap­ta­tion or alter­ation, retrieval, con­sul­ta­tion, use, dis­clo­sure by trans­mis­sion, dis­sem­i­na­tion or oth­er­wise mak­ing avail­able, align­ment or com­bi­na­tion, restric­tion, dele­tion or destruction.

• d) Restriction of processing

  Restric­tion of pro­cess­ing is the mark­ing of stored per­son­al data with the aim of restrict­ing their future processing.

• e) Profiling

  Pro­fil­ing is any auto­mat­ed pro­cess­ing of per­son­al data con­sist­ing of the use of such per­son­al data to eval­u­ate cer­tain per­son­al aspects relat­ing to a nat­ur­al per­son, in par­tic­u­lar to analyse or pre­dict aspects relat­ing to the job per­for­mance, eco­nom­ic sit­u­a­tion, health, per­son­al pref­er­ences, inter­ests, reli­a­bil­i­ty, con­duct, where­abouts or change of loca­tion of that nat­ur­al person.

• f) Pseudonymisation

  Pseu­do­nymi­sa­tion is the pro­cess­ing of per­son­al data in such a way that the per­son­al data can no longer be assigned to a spe­cif­ic data sub­ject with­out the use of addi­tion­al infor­ma­tion, pro­vid­ed that this addi­tion­al infor­ma­tion is kept sep­a­rate­ly and is sub­ject to tech­ni­cal and orga­ni­za­tion­al mea­sures that ensure that the per­son­al data is not assigned to an iden­ti­fied or iden­ti­fi­able nat­ur­al person.

• g) Controller or data controller

  Con­troller or data con­troller is the nat­ur­al or legal per­son, pub­lic author­i­ty, agency or any oth­er body which alone or joint­ly with oth­ers deter­mines the pur­pos­es and means of the pro­cess­ing of per­son­al data. Where the pur­pos­es and means of such pro­cess­ing are deter­mined by Union law or by the law of the Mem­ber States, the con­troller or the spe­cif­ic cri­te­ria for its des­ig­na­tion may be pro­vid­ed for by Union law or by the law of the Mem­ber States.

• h) Order Processor

  Proces­sor is a nat­ur­al or legal per­son, pub­lic author­i­ty, agency or oth­er body that process­es per­son­al data on behalf of the controller.

• i) Receiver

  The recip­i­ent is a nat­ur­al or legal per­son, author­i­ty, insti­tu­tion or oth­er body to whom per­son­al data is dis­closed, whether or not it is a third par­ty. How­ev­er, pub­lic author­i­ties which may receive per­son­al data in the course of a spe­cif­ic inves­ti­ga­tion man­date under Union or nation­al law shall not be con­sid­ered as recipients.

• j) Third party

  Third par­ty means any nat­ur­al or legal per­son, pub­lic author­i­ty, agency or body oth­er than the data sub­ject, the con­troller, the proces­sor and the per­sons who, under the direct author­i­ty of the con­troller or the proces­sor, are autho­rized to process the per­son­al data.

• k) Consent

  Con­sent is any freely giv­en, informed and unequiv­o­cal expres­sion of will by the data sub­ject in a spe­cif­ic case, in the form of a dec­la­ra­tion or oth­er unequiv­o­cal affir­ma­tive act by which the data sub­ject sig­ni­fies his or her con­sent to the pro­cess­ing of per­son­al data relat­ing to him or her.

2. Name and address of the controller

The per­son respon­si­ble with­in the mean­ing of the Basic Data Pro­tec­tion Reg­u­la­tion, oth­er data pro­tec­tion laws applic­a­ble in the mem­ber states of the Euro­pean Union and oth­er reg­u­la­tions of a data pro­tec­tion nature is:

Hotel & Gasthof Dan­ner­wirt Schwe­in­steiger OHG

Kirch­platz 4

83126 Flints­bach am Inn

Ger­many

Phone: +49 (0)8034 9060–0

E‑mail: info@dannerwirt.de

Web­site: dannerwirt.de

3. Cookies

The inter­net pages of the Hotel & Gasthof Dan­ner­wirt Schwe­in­steiger OHG use cook­ies. Cook­ies are text files, which are filed and stored on a com­put­er sys­tem via an inter­net browser.

Many web­sites and servers use cook­ies. Many cook­ies con­tain a so-called cook­ie ID. A cook­ie ID is a unique iden­ti­fi­er for the cook­ie. It con­sists of a string of char­ac­ters which can be used to assign Inter­net pages and servers to the spe­cif­ic Inter­net brows­er in which the cook­ie was stored. This enables the Inter­net pages and servers vis­it­ed to dis­tin­guish the indi­vid­ual brows­er of the per­son con­cerned from oth­er Inter­net browsers that con­tain oth­er cook­ies. A spe­cif­ic Inter­net brows­er can be rec­og­nized and iden­ti­fied by the unique cook­ie ID.

Through the use of cook­ies, Hotel & Gasthof Dan­ner­wirt Schwe­in­steiger OHG can pro­vide the users of this web­site with more user-friend­ly ser­vices, which would not be pos­si­ble with­out the set­ting of cookies.

By means of a cook­ie, the infor­ma­tion and offers on our web­site can be opti­mized in the inter­est of the user. As already men­tioned, cook­ies enable us to rec­og­nize the users of our web­site. The pur­pose of this recog­ni­tion is to make it eas­i­er for users to use our web­site. For exam­ple, the user of a web­site that uses cook­ies does not have to enter his or her access data each time he or she vis­its the web­site, because this is done by the web­site and the cook­ie stored on the user’s com­put­er sys­tem. Anoth­er exam­ple is the cook­ie of a shop­ping cart in the online store. The online store uses a cook­ie to remem­ber the items that a cus­tomer has placed in the vir­tu­al shop­ping cart.

The per­son con­cerned can pre­vent the set­ting of cook­ies by our web­site at any time by means of a cor­re­spond­ing set­ting in the Inter­net brows­er used and thus per­ma­nent­ly object to the set­ting of cook­ies. Fur­ther­more, cook­ies that have already been set can be delet­ed at any time via an Inter­net brows­er or oth­er soft­ware pro­grams. This is pos­si­ble in all com­mon inter­net browsers. If the per­son con­cerned deac­ti­vates the set­ting of cook­ies in the Inter­net brows­er used, it is pos­si­ble that not all func­tions of our web­site can be used to their full extent.

4. Collection of general data and information

The web­site of the Hotel & Gasthof Dan­ner­wirt Schwe­in­steiger OHG col­lects a num­ber of gen­er­al data and infor­ma­tion with each call of the web­site by a per­son con­cerned or an auto­mat­ed sys­tem. These gen­er­al data and infor­ma­tion are stored in the log files of the serv­er. The (1) brows­er types and ver­sions used, (2) the oper­at­ing sys­tem used by the access­ing sys­tem, (3) the web­site from which an access­ing sys­tem access­es our web­site (so-called refer­rer), (4) the sub-web­sites that are accessed via an access­ing sys­tem on our web­site, (5) the date and time of an access to the Inter­net site, (6) an Inter­net pro­to­col address (IP address), (7) the Inter­net ser­vice provider of the access­ing sys­tem and (8) oth­er sim­i­lar data and infor­ma­tion which serve to pre­vent dan­ger in the event of attacks on our infor­ma­tion tech­nol­o­gy systems.

When using this gen­er­al data and infor­ma­tion, Hotel & Gasthof Dan­ner­wirt Schwe­in­steiger OHG does not draw con­clu­sions about the per­son con­cerned. This infor­ma­tion is rather required to (1) deliv­er the con­tents of our web­site cor­rect­ly, (2) opti­mize the con­tents of our web­site as well as the adver­tis­ing for it, (3) to ensure the per­ma­nent func­tion­al­i­ty of our infor­ma­tion tech­nol­o­gy sys­tems and the tech­nol­o­gy of our web­site as well as (4) to pro­vide law enforce­ment agen­cies in case of a cyber attack with the nec­es­sary infor­ma­tion for pros­e­cu­tion. These anony­mous­ly col­lect­ed data and infor­ma­tion are there­fore sta­tis­ti­cal­ly eval­u­at­ed by Hotel & Gasthof Dan­ner­wirt Schwe­in­steiger OHG on the one hand and also with the aim of increas­ing data pro­tec­tion and data secu­ri­ty in our com­pa­ny, in order to ulti­mate­ly ensure an opti­mal lev­el of pro­tec­tion for the per­son­al data processed by us. The anony­mous data of the serv­er log files are stored sep­a­rate­ly from all per­son­al data pro­vid­ed by a per­son concerned.

5. Contact possibility via the website

Due to legal reg­u­la­tions, the web­site of Hotel & Gasthof Dan­ner­wirt Schwe­in­steiger OHG con­tains infor­ma­tion that enables quick elec­tron­ic con­tact with our com­pa­ny as well as direct com­mu­ni­ca­tion with us, which also includes a gen­er­al address of the so-called elec­tron­ic mail (e‑mail address). If a data sub­ject con­tacts the data con­troller by e‑mail or via a con­tact form, the per­son­al data trans­mit­ted by the data sub­ject is auto­mat­i­cal­ly stored. Such per­son­al data trans­mit­ted vol­un­tar­i­ly by a data sub­ject to the data con­troller are stored for the pur­pos­es of pro­cess­ing or con­tact­ing the data sub­ject. This per­son­al data is not dis­closed to third parties.

6. Routine deletion and blocking of personal data

The con­troller shall process and store per­son­al data of the data sub­ject only for the peri­od of time nec­es­sary to achieve the pur­pose of stor­age or if pro­vid­ed for by the Euro­pean Direc­tives and Reg­u­la­tions or any oth­er leg­is­la­tor in laws or reg­u­la­tions to which the con­troller is subject.

If the pur­pose of stor­age ceas­es to apply or if a stor­age peri­od pre­scribed by the Euro­pean Direc­tive and Reg­u­la­tion Giv­er or any oth­er com­pe­tent leg­is­la­tor expires, the per­son­al data will be blocked or delet­ed rou­tine­ly and in accor­dance with legal requirements.

7. Rights of the data subject

• a) Right to confirmation

  Every data sub­ject has the right, grant­ed by the Euro­pean Direc­tives and Reg­u­la­tions, to obtain con­fir­ma­tion from the con­troller as to whether per­son­al data relat­ing to him are being processed. If a data sub­ject wish­es to exer­cise this right of con­fir­ma­tion, he or she may at any time con­tact an employ­ee of the data controller.

• b) Right to information

  Every per­son affect­ed by the pro­cess­ing of per­son­al data has the right, grant­ed by the Euro­pean Direc­tive and Reg­u­la­tion Giv­er, to obtain at any time and free of charge infor­ma­tion from the data con­troller about the per­son­al data stored about him and a copy of this infor­ma­tion. Fur­ther­more, the Euro­pean Direc­tive and Reg­u­la­tion Giv­er has grant­ed the data sub­ject access to the fol­low­ing information:

  • the pro­cess­ing purposes
  • the cat­e­gories of per­son­al data processed
  • the recip­i­ents or cat­e­gories of recip­i­ents to whom the per­son­al data have been or will be dis­closed, in par­tic­u­lar to recip­i­ents in third coun­tries or inter­na­tion­al organizations
  • if pos­si­ble, the planned dura­tion for which the per­son­al data will be stored or, if this is not pos­si­ble, the cri­te­ria for deter­min­ing this duration
  • the exis­tence of a right of rec­ti­fi­ca­tion or era­sure of per­son­al data con­cern­ing him or her or of a right to have the pro­cess­ing lim­it­ed by the con­troller or to object to such processing
  • the exis­tence of a right of appeal to a super­vi­so­ry authority
  • if the per­son­al data are not col­lect­ed from the data sub­ject: All avail­able infor­ma­tion about the ori­gin of the data
  • the exis­tence of auto­mat­ed deci­sion-mak­ing, includ­ing pro­fil­ing, in accor­dance with Arti­cle 22(1) and (4) of the DPA and, at least in these cas­es, mean­ing­ful infor­ma­tion about the log­ic involved and the scope and intend­ed impact of such pro­cess­ing on the data subject

  Fur­ther­more, the data sub­ject has the right of infor­ma­tion as to whether per­son­al data has been trans­ferred to a third coun­try or to an inter­na­tion­al orga­ni­za­tion. If this is the case, the data sub­ject shall also have the right to obtain infor­ma­tion on the appro­pri­ate safe­guards in con­nec­tion with the transfer.

  If a data sub­ject wish­es to exer­cise this right of access, he or she may con­tact an employ­ee of the data con­troller at any time.

• c) Right of rectification

  Every per­son affect­ed by the pro­cess­ing of per­son­al data has the right, grant­ed by the Euro­pean Direc­tives and Reg­u­la­tions, to request the imme­di­ate rec­ti­fi­ca­tion of incor­rect per­son­al data con­cern­ing him. Fur­ther­more, the data sub­ject has the right to request the com­ple­tion of incom­plete per­son­al data, also by means of a sup­ple­men­tary dec­la­ra­tion, tak­ing into account the pur­pos­es of the processing.

  If a data sub­ject wish­es to exer­cise this right of rec­ti­fi­ca­tion, he or she may con­tact an employ­ee of the con­troller at any time.

• d) Right of deletion (right to be forgotten)

  Any per­son affect­ed by the pro­cess­ing of per­son­al data has the right, grant­ed by the Euro­pean Direc­tives and Reg­u­la­tions, to obtain from the con­troller the imme­di­ate era­sure of the per­son­al data con­cern­ing him/her, if one of the fol­low­ing rea­sons applies and if the pro­cess­ing is not necessary:

  • The per­son­al data has been col­lect­ed or oth­er­wise processed for pur­pos­es for which it is no longer necessary.
  • The data sub­ject with­draws his or her con­sent on which the pro­cess­ing was based pur­suant to Art. 6 para. 1 let­ter a DS-GVO or Art. 9 para. 2 let­ter a DS-GVO, and there is no oth­er legal basis for the processing.
  • The data sub­ject lodges an objec­tion to the pro­cess­ing pur­suant to Arti­cle 21(1) of the DPA and there are no over­rid­ing legit­i­mate rea­sons for pro­cess­ing, or the data sub­ject lodges an objec­tion to the pro­cess­ing pur­suant to Arti­cle 21(2) of the DPA.
  • The per­son­al data were processed unlawfully.
  • The dele­tion of per­son­al data is nec­es­sary to com­ply with a legal oblig­a­tion under Union law or the law of the Mem­ber States to which the con­troller is subject.
  • The per­son­al data was col­lect­ed in rela­tion to infor­ma­tion soci­ety ser­vices offered in accor­dance with Art. 8 para. 1 DS-GVO.

  If one of the above rea­sons applies and a data sub­ject wish­es to have per­son­al data stored by Hotel & Gasthof Dan­ner­wirt Schwe­in­steiger OHG delet­ed, he/she can con­tact an employ­ee of the data con­troller at any time. The employ­ee of Hotel & Gasthof Dan­ner­wirt Schwe­in­steiger OHG will ensure that the request for dele­tion is com­plied with immediately.

  If the per­son­al data has been made pub­lic by Hotel & Gasthof Dan­ner­wirt Schwe­in­steiger OHG and our com­pa­ny is the respon­si­ble par­ty accord­ing to art. 17 para­graph. 1 DS-GVO, Hotel & Gasthof Dan­ner­wirt Schwe­in­steiger OHG is oblig­ed to delete the per­son­al data, Hotel & Gasthof Dan­ner­wirt Schwe­in­steiger OHG will take rea­son­able mea­sures, includ­ing tech­ni­cal mea­sures, tak­ing into account the avail­able tech­nol­o­gy and the imple­men­ta­tion costs, to inform oth­er data con­trollers who process the pub­lished per­son­al data that the data sub­ject has request­ed these oth­er data con­trollers to delete all links to this per­son­al data or copies or repli­ca­tions of this per­son­al data, unless the pro­cess­ing is nec­es­sary. The employ­ee of the Hotel & Gasthof Dan­ner­wirt Schwe­in­steiger OHG will take the nec­es­sary steps in indi­vid­ual cases.

• e) Right to limit processing

  Any per­son affect­ed by the pro­cess­ing of per­son­al data has the right, grant­ed by the Euro­pean Direc­tives and Reg­u­la­tions, to request the con­troller to lim­it the pro­cess­ing if one of the fol­low­ing con­di­tions is met:

  • The accu­ra­cy of the per­son­al data is con­test­ed by the data sub­ject, for a peri­od of time that allows the data con­troller to ver­i­fy the accu­ra­cy of the per­son­al data.
  • The pro­cess­ing is unlaw­ful, the data sub­ject refus­es the dele­tion of the per­son­al data and instead requests the restric­tion of the use of the per­son­al data.
  • The con­troller no longer needs the per­son­al data for the pur­pos­es of the pro­cess­ing, but the data sub­ject needs them in order to assert, exer­cise or defend legal claims.
  • The data sub­ject has lodged an objec­tion to the pro­cess­ing pur­suant to Art. 21 (1) DS-GVO and it is not yet clear whether the legit­i­mate rea­sons of the con­troller out­weigh those of the data subject.

  If one of the above-men­tioned con­di­tions is met and a data sub­ject wish­es to request the restric­tion of per­son­al data stored by Hotel & Gasthof Dan­ner­wirt Schwe­in­steiger OHG, he/she may con­tact an employ­ee of the data con­troller at any time. The employ­ee of Hotel & Gasthof Dan­ner­wirt Schwe­in­steiger OHG will arrange for the restric­tion of the processing.

• f) Right to data transferability

  Any per­son affect­ed by the pro­cess­ing of per­son­al data has the right, grant­ed by the Euro­pean Direc­tives and Reg­u­la­tions, to receive the per­son­al data con­cern­ing him/her, which have been pro­vid­ed by the data sub­ject to a data con­troller, in a struc­tured, com­mon and machine-read­able for­mat. He/she also has the right to have this data com­mu­ni­cat­ed to anoth­er con­troller with­out hin­drance by the con­troller to whom the per­son­al data has been made avail­able, pro­vid­ed that the pro­cess­ing is based on the con­sent pur­suant to Art. 6 para­graph 1 let­ter a DPA or Art. 9 para­graph 2 let­ter a DPA or on a con­tract pur­suant to Art. 6 para­graph 1 let­ter b DPA and that the pro­cess­ing is car­ried out with the aid of auto­mat­ed pro­ce­dures, unless the pro­cess­ing is nec­es­sary for the per­for­mance of a task car­ried out in the pub­lic inter­est or in the exer­cise of offi­cial author­i­ty vest­ed in the controller.

  Fur­ther­more, when exer­cis­ing their right to data trans­fer in accor­dance with Art. 20 Para­graph 1 of the DS-GVO, the data sub­ject has the right to request that per­son­al data be trans­ferred direct­ly from one per­son respon­si­ble to anoth­er, inso­far as this is tech­ni­cal­ly fea­si­ble and pro­vid­ed that this does not affect the rights and free­doms of oth­er persons.

  To assert the right to data trans­fer­abil­i­ty, the per­son con­cerned can con­tact an employ­ee of Hotel & Gasthof Dan­ner­wirt Schwe­in­steiger OHG at any time.

• g) Right of objection

  Every per­son affect­ed by the pro­cess­ing of per­son­al data has the right, grant­ed by the Euro­pean Direc­tive and Reg­u­la­tion Giv­er, to object at any time, for rea­sons aris­ing from his or her par­tic­u­lar sit­u­a­tion, to the pro­cess­ing of per­son­al data con­cern­ing him or her that is car­ried out on the basis of Art. 6(1)(e) or (f) of the DPA. This also applies to pro­fil­ing based on these provisions.

  Hotel & Gasthof Dan­ner­wirt Schwe­in­steiger OHG no longer process­es per­son­al data in the event of an objec­tion, unless we can prove com­pelling rea­sons for pro­cess­ing wor­thy of pro­tec­tion, which out­weigh the inter­ests, rights and free­doms of the per­son con­cerned, or the pro­cess­ing serves to assert, exer­cise or defend legal claims.

  If Hotel & Gasthof Dan­ner­wirt Schwe­in­steiger OHG process­es per­son­al data in order to car­ry out direct adver­tis­ing, the per­son con­cerned has the right to object at any time to the pro­cess­ing of per­son­al data for the pur­pose of such adver­tis­ing. This also applies to pro­fil­ing, inso­far as it is con­nect­ed with such direct adver­tis­ing. If the data sub­ject objects to Hotel & Gasthof Dan­ner­wirt Schwe­in­steiger OHG pro­cess­ing for the pur­pos­es of direct adver­tis­ing, Hotel & Gasthof Dan­ner­wirt Schwe­in­steiger OHG will no longer process the per­son­al data for these purposes.

  In addi­tion, the data sub­ject has the right to object, for rea­sons aris­ing from his/her par­tic­u­lar sit­u­a­tion, to the pro­cess­ing of per­son­al data con­cern­ing him/her car­ried out at Hotel & Gasthof Dan­ner­wirt Schwe­in­steiger OHG for sci­en­tif­ic or his­tor­i­cal research pur­pos­es or for sta­tis­ti­cal pur­pos­es in accor­dance with Art. 89, para­graph 1 of the DS-GVO, unless such pro­cess­ing is nec­es­sary for the per­for­mance of a task car­ried out in the pub­lic interest.

  In order to exer­cise the right to object, the per­son con­cerned may direct­ly con­tact any employ­ee of Hotel & Gasthof Dan­ner­wirt Schwe­in­steiger OHG or any oth­er employ­ee. The data sub­ject is also free to exer­cise his/her right of objec­tion in con­nec­tion with the use of infor­ma­tion soci­ety ser­vices, notwith­stand­ing Direc­tive 2002/58/EC, by means of auto­mat­ed pro­ce­dures involv­ing tech­ni­cal specifications.

• h) Automated decisions in individual cases including profiling

  Every per­son con­cerned by the pro­cess­ing of per­son­al data has the right, grant­ed by the Euro­pean Direc­tives and Reg­u­la­tions, not to be sub­ject to a deci­sion based sole­ly on auto­mat­ed pro­cess­ing, includ­ing pro­fil­ing, which pro­duces legal effects con­cern­ing him or her or sig­nif­i­cant­ly affects him or her in a sim­i­lar way, pro­vid­ed that the deci­sion (1) is not nec­es­sary for the con­clu­sion or per­for­mance of a con­tract between the data sub­ject and the con­troller, or (2) is autho­rised by Union or nation­al leg­is­la­tion to which the con­troller is sub­ject and such leg­is­la­tion pro­vides for ade­quate safe­guards of the rights and free­doms and legit­i­mate inter­ests of the data sub­ject, or (3) is tak­en with the explic­it con­sent of the data subject.

  If the deci­sion (1) is nec­es­sary for the con­clu­sion or ful­fill­ment of a con­tract between the per­son con­cerned and the respon­si­ble per­son or (2) is made with the express con­sent of the per­son con­cerned, Hotel & Gasthof Dan­ner­wirt Schwe­in­steiger OHG shall take appro­pri­ate mea­sures to pro­tect the rights and free­doms as well as the legit­i­mate inter­ests of the per­son con­cerned, includ­ing at least the right to obtain the inter­ven­tion of a per­son on the part of the respon­si­ble per­son, to present its own stand­point and to con­test the decision.

  If the data sub­ject wish­es to exer­cise rights relat­ing to auto­mat­ed deci­sions, he or she may at any time con­tact an employ­ee of the controller.

• i) Right to revoke a data protection consent

  Every per­son affect­ed by the pro­cess­ing of per­son­al data has the right, grant­ed by the Euro­pean Direc­tives and Reg­u­la­tions, to revoke his/her con­sent to the pro­cess­ing of per­son­al data at any time.

  If the data sub­ject wish­es to exer­cise his or her right to with­draw con­sent, he or she may con­tact an employ­ee of the con­troller at any time.

8. Privacy policy on the use and application of Facebook

The data con­troller has inte­grat­ed com­po­nents of the com­pa­ny Face­book on this web­site. Face­book is a social network.

A social net­work is a social meet­ing place oper­at­ed on the Inter­net, an online com­mu­ni­ty that gen­er­al­ly allows users to com­mu­ni­cate with each oth­er and inter­act in vir­tu­al space. A social net­work can serve as a plat­form for the exchange of opin­ions and expe­ri­ences or it enables the Inter­net com­mu­ni­ty to pro­vide per­son­al or com­pa­ny-relat­ed infor­ma­tion. Face­book enables users of the social net­work to cre­ate pri­vate pro­files, upload pho­tos and net­work via friend requests, among oth­er things.

The oper­at­ing com­pa­ny of Face­book is Face­book, Inc. 1 Hack­er Way, Men­lo Park, CA 94025, USA. The per­son respon­si­ble for pro­cess­ing per­son­al data, if a data sub­ject lives out­side the USA or Cana­da, is Face­book Ire­land Ltd, 4 Grand Canal Square, Grand Canal Har­bour, Dublin 2, Ireland.

Each time the data con­troller calls up one of the indi­vid­ual pages of this Inter­net site, which is oper­at­ed by the data con­troller and on which a Face­book com­po­nent (Face­book plug-in) has been inte­grat­ed, the Inter­net brows­er on the infor­ma­tion tech­nol­o­gy sys­tem of the data sub­ject is auto­mat­i­cal­ly prompt­ed by the respec­tive Face­book com­po­nent to down­load a rep­re­sen­ta­tion of the cor­re­spond­ing Face­book com­po­nent from Face­book. A com­plete overview of all Face­book plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=de_DE. As part of this tech­ni­cal process, Face­book is informed which spe­cif­ic sub­page of our web­site is vis­it­ed by the per­son concerned.

If the per­son con­cerned is logged in to Face­book at the same time, Face­book rec­og­nizes which spe­cif­ic sub­page of our web­site the per­son con­cerned is vis­it­ing each time the per­son con­cerned calls up our web­site and for the entire dura­tion of their stay on our web­site. This infor­ma­tion is col­lect­ed by the Face­book com­po­nent and assigned by Face­book to the respec­tive Face­book account of the per­son con­cerned. If the data sub­ject clicks on one of the Face­book but­tons inte­grat­ed on our web­site, for exam­ple the “Like” but­ton, or if the data sub­ject makes a com­ment, Face­book assigns this infor­ma­tion to the per­son­al Face­book user account of the data sub­ject and stores this per­son­al data.

Face­book receives infor­ma­tion via the Face­book com­po­nent about the fact that the data sub­ject has vis­it­ed our web­site when­ev­er the data sub­ject is logged in to Face­book at the same time when he or she access­es our web­site; this takes place regard­less of whether the data sub­ject clicks on the Face­book com­po­nent or not. If the data sub­ject does not want this infor­ma­tion to be trans­mit­ted to Face­book, he or she can pre­vent the trans­mis­sion by log­ging out of his or her Face­book account before access­ing our website.

The data pol­i­cy pub­lished by Face­book, which is avail­able at https://de-de.facebook.com/about/privacy/, pro­vides infor­ma­tion about the col­lec­tion, pro­cess­ing and use of per­son­al data by Face­book. It also explains which set­ting options Face­book offers to pro­tect the pri­va­cy of the per­son con­cerned. In addi­tion, var­i­ous appli­ca­tions are avail­able that make it pos­si­ble to sup­press data trans­mis­sion to Face­book. Such appli­ca­tions can be used by the data sub­ject to sup­press data trans­fer to Facebook.

9. Legal basis of the processing

Art. 6 I lit. a DS-GVO serves our com­pa­ny as a legal basis for pro­cess­ing oper­a­tions for which we obtain con­sent for a spe­cif­ic pro­cess­ing pur­pose. If the pro­cess­ing of per­son­al data is nec­es­sary for the per­for­mance of a con­tract to which the data sub­ject is a par­ty, as is the case, for exam­ple, with pro­cess­ing oper­a­tions nec­es­sary for the sup­ply of goods or the pro­vi­sion of anoth­er ser­vice or con­sid­er­a­tion, the pro­cess­ing is based on Art. 6 I lit. b DS-GVO. The same applies to such pro­cess­ing oper­a­tions which are nec­es­sary for the imple­men­ta­tion of pre-con­trac­tu­al mea­sures, for exam­ple in cas­es of inquiries about our prod­ucts or ser­vices. If our com­pa­ny is sub­ject to a legal oblig­a­tion which makes it nec­es­sary to process per­son­al data, for exam­ple to ful­fil tax oblig­a­tions, the pro­cess­ing is based on Art. 6 I lit. c DS-GVO. In rare cas­es, the pro­cess­ing of per­son­al data might be nec­es­sary to pro­tect vital inter­ests of the data sub­ject or anoth­er nat­ur­al per­son. This would be the case, for exam­ple, if a vis­i­tor to our com­pa­ny were to be injured and his name, age, health insur­ance details or oth­er vital infor­ma­tion would then have to be dis­closed to a doc­tor, hos­pi­tal or oth­er third par­ty. In this case the pro­cess­ing would be based on Art. 6 I lit. d DS-GVO. Final­ly, pro­cess­ing oper­a­tions could be based on Art. 6 I lit. f DS-GVO. Pro­cess­ing oper­a­tions which are not cov­ered by any of the above legal bases are based on this legal basis if the pro­cess­ing is nec­es­sary to safe­guard a legit­i­mate inter­est of our com­pa­ny or of a third par­ty, pro­vid­ed that the inter­ests, fun­da­men­tal rights and free­doms of the data sub­ject do not pre­vail. We are per­mit­ted to car­ry out such pro­cess­ing oper­a­tions in par­tic­u­lar because they have been specif­i­cal­ly men­tioned by the Euro­pean leg­is­la­tor. In this respect, it took the view that a legit­i­mate inter­est could be assumed if the data sub­ject is a cus­tomer of the per­son respon­si­ble (Recital 47 Sen­tence 2 DS-GVO).

10. Legitimate interests in the processing pursued by the controller or a third party

If the pro­cess­ing of per­son­al data is based on Arti­cle 6 I lit. f DS-GVO, our legit­i­mate inter­est is to car­ry out our busi­ness activ­i­ties for the ben­e­fit of the well-being of all our employ­ees and our shareholders.

11. Duration for which the personal data is stored

The cri­te­ri­on for the dura­tion of stor­age of per­son­al data is the respec­tive legal reten­tion peri­od. After this peri­od has expired, the cor­re­spond­ing data is rou­tine­ly delet­ed if it is no longer required for the ful­fill­ment or ini­ti­a­tion of a contract.

12. Legal or contractual provisions on the provision of the personal data; necessity for the conclusion of the contract; obligation of the data subject to provide the personal data; possible consequences of nonprovision

We would like to inform you that the pro­vi­sion of per­son­al data is part­ly required by law (e.g. tax reg­u­la­tions) or can also result from con­trac­tu­al reg­u­la­tions (e.g. infor­ma­tion on the con­trac­tu­al part­ner). Some­times it may be nec­es­sary for a con­tract to be con­clud­ed that a data sub­ject pro­vides us with per­son­al data, which must sub­se­quent­ly be processed by us. For exam­ple, the per­son con­cerned is oblig­ed to pro­vide us with per­son­al data if our com­pa­ny con­cludes a con­tract with him/her. Fail­ure to pro­vide the per­son­al data would mean that the con­tract with the per­son con­cerned could not be con­clud­ed. Before the per­son con­cerned makes per­son­al data avail­able, the per­son con­cerned must con­tact one of our employ­ees. Our employ­ee will inform the data sub­ject on a case-by-case basis whether the pro­vi­sion of the per­son­al data is required by law or con­tract or is nec­es­sary for the con­clu­sion of the con­tract, whether there is an oblig­a­tion to pro­vide the per­son­al data and what the con­se­quences would be if the per­son­al data were not provided.

13. Existence of an automated decision making process

As a respon­si­ble com­pa­ny, we avoid auto­mat­ic deci­sion mak­ing or profiling.

14. Use of Google Analytics

We use the web analy­sis ser­vice Google Ana­lyt­ics of Google LLC on our web­site. (1600 Amphithe­atre Park­way, Moun­tain View, CA 94043, USA; “Google”).
As far as you have your habit­u­al res­i­dence in the Euro­pean Eco­nom­ic Area or Switzer­land, Google Ire­land Lim­it­ed (Gor­don House, Bar­row Street, Dublin 4, Ire­land) is the per­son respon­si­ble for your data. Google Ire­land Lim­it­ed is there­fore the com­pa­ny affil­i­at­ed with Google which is respon­si­ble for pro­cess­ing your data and for ensur­ing com­pli­ance with the applic­a­ble data pro­tec­tion laws.
The data pro­cess­ing serves the pur­pose of analysing this web­site and its vis­i­tors. To this end, Google will use the infor­ma­tion obtained on behalf of the oper­a­tor of this web­site to eval­u­ate your use of the web­site, to com­pile reports on web­site activ­i­ty and to pro­vide fur­ther ser­vices to the web­site oper­a­tor in con­nec­tion with web­site and inter­net use. The IP address trans­mit­ted by your brows­er with­in the frame­work of Google Ana­lyt­ics is not com­bined with oth­er data from Google.
Google Ana­lyt­ics uses cook­ies that enable an analy­sis of your use of the web­site. The infor­ma­tion gen­er­at­ed by the cook­ies about your use of this web­site is usu­al­ly trans­ferred to a Google serv­er in the USA and stored there. IP anonymiza­tion is acti­vat­ed on this web­site. As a result, your IP address will be short­ened by Google with­in mem­ber states of the Euro­pean Union or in oth­er sig­na­to­ry states of the Agree­ment on the Euro­pean Eco­nom­ic Area before. Only in excep­tion­al cas­es will the full IP address be trans­ferred to a Google serv­er in the USA and short­ened there.
Google has cer­ti­fied itself under the US-EU Pri­va­cy Shield Agree­ment and is thus com­mit­ted to com­ply­ing with the Euro­pean data pro­tec­tion guide­lines.
You may refuse the trans­fer of data gen­er­at­ed by the cook­ie and relat­ing to your use of the web­site (includ­ing your IP address) to Google and the pro­cess­ing of this data by Google by down­load­ing and installing the brows­er plug-in avail­able at the fol­low­ing link [https://tools.google.com/dlpage/gaoptout?hl=de].
To pre­vent data col­lec­tion and stor­age by Google Ana­lyt­ics across devices, you can set an opt-out cook­ie. Opt-out cook­ies pre­vent the future col­lec­tion of your data when you vis­it this web­site. You must opt-out on all sys­tems and devices in use to be ful­ly effec­tive. If you delete the opt-out cook­ie, requests will again be sent to Google. If you click here, the opt-out cook­ie will be set: Dis­able Google Ana­lyt­ics.
More infor­ma­tion on terms of use and data pro­tec­tion can be found at https://www.google.com/analytics/terms/de.html and at https://www.google.de/intl/de/policies/.

This pri­va­cy pol­i­cy was cre­at­ed by the Pri­va­cy Pol­i­cy Gen­er­a­tor of the DGD Deutsche Gesellschaft für Daten­schutz GmbH, which acts as EXTERNAL DATA PROTECTION OFFICER , in coop­er­a­tion with the ADVOCATE FOR DATA PROTECTION Chris­t­ian Solmecke.