Previous slide
Next slide
Your personal rights are our highest priority and we do our best to protect these rights. Herewith we would like to inform you about the type, purpose and scope of processing of personal data within our online offer (website and integrated services and functions).

 

We have implemented numerous technical and organisational measures to ensure the most complete possible protection of the personal data processed. Our security measures are continuously improved in line with technological developments. Nevertheless, data transmission on the Internet may have security gaps, so that absolute protection cannot be guaranteed. You are therefore free to transmit personal data to us by other means, e.g. by telephone.

German version with Google Translate
Version française avec Google Translate
Nederlandse versie met Google Translate

Table of contents

 

Nature and purpose of the data processed

Nature of the data processed

  • Address data (first and last name, address, telephone number, e-mail)
  • Text entries (messages), photographs (uploads)
  • Usage data, websites visited, access times
  • IP addresses and metadata (device information)

Persons concerned

  • Visitors and users of our online offer

Purpose of the processing

  • Provision of the online presence with contents and functions
  • Processing of bookings and orders
  • Processing of contact requests and sent messages
  • Security measures
  • Statistical evaluations

 

Person responsible for the processing

is the controller within the meaning of the basic data protection regulation:

Hotel Schmuckkästchen
Konstantinos Nikou
Hauptstraße 185
63897 Miltenberg
Tel: +49 (9371) 5500
Fax: +49 (9371) 65511
Handy: +49 (176) 64176195
info@hotel-schmuckkaestchen.de

 

Definition of terms

  • "Personal data" is all information that can be identified on persons known to us or by means of data stored with us.
  • "processing' means any operation, whether manual or automatic, whereby personal data are loaded, allocated, stored or modified
  • As "controller" we refer to persons, authorities or institutions that decide on the purposes and means of processing personal data.

 

your rights

  • You have the right to obtain confirmation of whether your data is being processed by us, to be informed of this information and to receive a copy of the data (Art. 15 DSGVO)
  • You have the right to correct or complete data concerning you (Art. 16 DSGVO)
  • You have the right to have your data deleted immediately (Art. 17 DSGVO) or to demand a restriction on their processing (Art. 18 DSGVO).
  • You have the right to receive your personal data as a file or to request that it be communicated to other responsible parties (art. 20 DSGVO)
  • You have the right to object to future processing of your data at any time (Art. 21 DSGVO)
  • You have the right to revoke consents granted in accordance with Art. 7 Para. 3 DSGVO with effect for the future
  • Under Art. 77 DSGVO, they also have the right to lodge a complaint with the competent supervisory authority.

 

Legal basis of the processing

Art. 6 of the DSGVO serves our company as the legal basis for all processing operations. We process your data only if:

  • you have given your consent to the processing of your personal data for one or more specific purposes
  • the processing is necessary for the performance of a contract or for carrying out pre-contractual measures taken in response to your request
  • the processing is necessary for the fulfilment of a legal obligation to which you are subject
  • the processing is necessary to protect your vital interests or those of another person
  • the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us (Reporting Act)
  • processing is necessary for the protection of our legitimate interests or those of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.

 

Duration of storage

We adhere to the respective legal retention period for the maximum duration of storage of your personal data. After this period has expired, the corresponding data is routinely deleted if it is no longer required for the fulfilment or initiation of a contract.

 

Deletion

All personal data processed by us will be deleted or restricted for further processing in accordance with Art 17 & 18 DSGVO. In concrete terms this means: personal data will be deleted when they are no longer required to fulfil the desired purposes or when the legal obligation to retain them has expired. This applies in particular to invoices, accounting vouchers and business records.

 

Cooperation with contract processors

If a transmission of the data to third parties is necessary for the fulfilment of the contract, this will only take place:

  • on the basis of the legal permit pursuant to Art. 6 Para. 1 lit. b DSGVO
  • on the basis of your consent
  • where a legal obligation so provides
  • on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.)

If we commission third parties with processing on the basis of a so-called "contract processing agreement", this is done on the basis of Art. 28 DSGVO.

 

Software and services of ALL-INKL.com

For the operation of this website and the associated software we use the products of our technical service provider All-inkl (registered office: Hauptstraße 68, 02742 Friedersdorf) on the basis of our legitimate interests pursuant to Art. 6 Para. 1 lit. f DSGVO and a contract processing agreement pursuant to Art. 28 Para. 3 sentence 1 DSGVO. The service provider does not use the personal data processed in this way itself or pass them on to third parties.

Together with all-incl technical and organizational security measures in accordance with § 9 BDSG, we use your data managed by us against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously improved in accordance with technological developments. We store data protection-relevant information exclusively on secured EDP systems in Germany. Access to this data is only possible for a few authorized persons who are responsible for the technical, administrative or editorial maintenance of data and who are obliged to observe special data protection regulations.

 

Hosting, access data and log files

For the purpose of operating this online offer, we use hosting services from all-inkl for the following services:

  • Provision of our online platform
  • Provision of software, computing capacity, storage space and database
  • Security services and technical maintenance

In doing so, we or our hosting provider process the data on the basis of our legitimate interests in an efficient and secure provision of this online offer in accordance with Art. 6 Para. 1 letter f DSGVO in conjunction with Art. 28 DSGVO content data, personal data, contract data, usage data, meta and communication data of customers, interested parties and visitors of this online offer. In particular, every access to the server on which this service is located is stored in a log file. In detail the following is stored:

  • Name of the web page or file retrieved
  • Date and time of retrieval
  • transmitted data volume, message about successful retrieval
  • Browser type and version and the operating system used
  • the address of the previously visited website
  • the IP address of the visitor at the provider used

For security reasons (e.g. to clarify misuse or fraud), log file information is stored for a maximum period of 30 days and then deleted. Data whose further storage is required for evidence purposes is excluded from deletion until the respective incident has been finally clarified.

 

Use of cookies

Our website uses cookies. Cookies are small text files which are stored on your computer system via your internet browser. A specific internet browser can be recognized and identified by the unique cookie ID. The purpose of this recognition is to make it easier for users to use our website. In detail, this is how we use cookies:

  • We assign the contents of your shopping cart to your browser so that you can continue a booking or order you have started at a later date.
  • If you make settings on our site (e.g. the travel period in the booking mask), we will assign these to your browser so that you do not have to enter them again on your next visit
  • When you access our site via a link from another site, we associate the previous address with your cookie, and read this information in the event of a booking, order or inquiry to statistically determine how our customers became aware of us.
  • If you use a login function, you do not have to enter your access data every time you visit your website

You can prevent the setting of cookies by our website at any time by means of a corresponding setting in the Internet browser used and thus permanently object to the setting of cookies. In addition, cookies that have already been set can be deleted from your Internet browser at any time. If you permanently deactivate the setting of cookies, it is possible that not all functions of our website can be used.

 

SSL Encryption

To protect the security of your data during transmission, we use state-of-the-art encryption procedures (e.g. SSL) via HTTPS.

 

Contact forms

The processing of our contact forms is done with a software from Tramino (Seat: Weststrasse 30, D-87561 Oberstdorf, Privacy policy). If you contact us (e.g. by contact form, e-mail, telephone or via social media), the user's details will be processed for the purpose of handling the contact request and its processing in accordance with Art. 6 Para. 1 lit. b DSGVO. The user's details are stored in a customer relationship management system ("CRM system"). We delete the enquiries if they are no longer necessary to fulfil your requests. We review the necessity every two years; furthermore, the statutory archiving obligations apply.

 

booking & ordering system

The processing of our bookings or orders is done with DIRS21 software. This service provider is used on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. f DSGVO and an order processing contract in accordance with Art. 28 para. 3 sentence 1 DSGVO and does not use the resulting personal data itself or pass it on to third parties.

Data collected during a booking or order (address data with address, communication data such as telephone number and e-mail address) as well as information on accompanying persons (names, dates of birth) are stored in a customer relationship management system ("CRM system"). If you provide special personal data relevant to the performance of our services, e.g. allergy-related incompatibilities, this will also be stored. We will delete this data if it is no longer required to fulfil your requests. We check the necessity every two years; furthermore, the statutory archiving obligations apply.

 

Our presence in social networks

We are involved in social networks and platforms in order to communicate with the customers and interested parties active there and to be able to inform them about our services. When using the respective networks or platforms, the terms and conditions and privacy policies of their respective operators apply. We only process the data of users when they communicate with us in social networks or platforms, write articles or send us messages.

 

Using YouTube

On our website videos of the platform YouTube of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google is bound by the Privacy Shield Agreement certified and thus offers a guarantee of compliance with European data protection law. Please note the Privacy policy from Google.

When you visit a page with the YouTube plugin, a connection to servers of YouTube is established. This tells Youtube which pages you visit. If you are logged in to your YouTube account, Youtube can assign your surfing behavior to you personally. You can prevent this by first logging out of your Youtube account. If a Youtube video is started, the provider uses cookies that collect information about user behaviour. If you've disabled cookies for the Google Ad program, you won't be able to expect to receive cookies when you watch Youtube videos. However, Youtube also stores non-personal usage information in other cookies. If you want to prevent this, you must block the storage of cookies in your browser.

 

Use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google is under the Privacy Shield Agreement certified and thus offers a guarantee of compliance with European data protection law. Please also note the Privacy policy from Google.

Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website (including your IP address) is transferred to a Google server in the USA and stored there. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. By using this website, you agree to the processing of the data collected about you by Google in the manner and for the purpose described above.

The Google tracking codes of this website use the function "_anonymizeIp()", thus IP addresses are only processed in abbreviated form in order to exclude the possibility of direct personal references. The collection and storage of data can be objected to at any time with effect for the future. By clicking the button "Deactivate", tracking is completely disabled. In order for the objection to be made permanently, your browser must accept cookies. Alternatively, you can consent to data collection by using a Google Browser Plugins contradict.

Disable Google Analytics

 

 

Use of Google Maps

We bind the maps of the service "Google Maps" of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google is subject to the Privacy Shield Agreement certified and thus offers a guarantee of compliance with European data protection law. Please also note the Privacy policy from Google.

We use the Google Maps API to visually display geographic information. When using Google Maps, Google also collects, processes and uses data on the use of the map functions by visitors. For more information about data processing by Google, you can download the Google Privacy Notice from the container. There you can also change your personal data protection settings in the data protection center.

 

Use of Google Fonts

We integrate the fonts of the "Google Fonts" service. provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google is covered by the Privacy Shield Agreement certified and thus offers a guarantee of compliance with European data protection law. Please also note the Privacy policy from Google.

 

Use of Google ReCaptcha

We bind the function for the recognition of bots, e.g. for entries in online forms ("ReCaptcha") of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google is subject to the Privacy Shield Agreement certified and thus offers a guarantee of compliance with European data protection law. Please also note the Privacy policy from Google.

 

Validity of the privacy policy

By using our website, you consent to the use of data as described above. It may become necessary to amend this privacy policy due to the further development of our website or the implementation of new technologies. We reserve the right to change the privacy policy at any time with effect for the future. We therefore recommend that you read the data protection declaration again regularly.

en_GBEnglish