Privacy

Our GDPR measures:

Privacy Policy

With this privacy statement we would like to inform you about the nature, scope and purpose of the processing of personal data on our website. Personal data is any data that has a personal reference to you, such as name, address, e-mail address or user behavior.

The responsible party within the meaning of the General Data Protection Regulation (DSGVO) and national data protection laws of the member states as well as other data protection regulations is:

kult’otel marketing- und hotelbetriebs GmbH c/o Penck Hotel Dresden
Antoni Knobloch
Ostra Allee 33
01067 Dresden
Germany
0049 351 49220
hello@penckhotel.de

Contact details of our data protection officer

You can contact our data protection officer by e-mail at dsgvo@goldmarie.de or at our postal address with the addition of “to the data protection officer”

Processing your data as part of our company’s core activities

We process your personal data transferred to us within the framework of the contractual and pre-contractual relationships existing between us. The scope, nature, purpose and necessity of the processing depends on the respective underlying contractual relationship. For this purpose, we store and process your data in the computer systems used by us. The data processed by us includes all those data that were provided by you for the purpose of using the contractual or pre-contractual services and are required to process your request or the contract concluded between us.

This may include in particular the following data:

  • Name and address
  • Email address and telephone number
  • Contract details
  • Payment details

The processing is limited to those data that are necessary and appropriate to respond to requests and/or to fulfill a contract concluded between you and us. Personal data will only be disclosed to third parties if this is necessary for the purpose of providing the service or as part of the organization of our business to handle financial accounting and compliance with legal obligations. In this case, only those data will be transferred to external service providers that are necessary and appropriate for the fulfillment of the contract or for the handling of financial accounting as well as compliance with legal obligations. The processing by us is carried out in accordance with your instructions or the legal requirements. Legal basis: The processing of your personal data as well as the transfer to third parties is carried out in accordance with Art. 6 para. 1 lit. b) DSGVO and serves to fulfill the contract between you and us. Incidentally, we only pass on data to third parties if there is a legal obligation to do so, Art. 6 para. 1 lit. c) DSGVO or if there is a legitimate interest in this, Art. 6 para. 1 lit. f. DSGVO. This is the case, for example, if this is necessary to pursue our claims. Deletion: The deletion of your data will take place as soon as the data is no longer required for the fulfillment of contractual or legal duties of care and for dealing with any warranty and comparable obligations. This does not affect the statutory retention obligations.

Webhosting

We use an Internet service provider to maintain our online presence, on whose server the website is stored (hosting) and which makes our site available on the Internet. In doing so, the internet service provider processes contact data, content data, contract data, usage data, inventory data as well as meta and communication data on our behalf. Name and address of the Internet service provider: FASTBOOKING SAS 14/16, boulevard Poissonnière, 75009 Paris France You can view its privacy policy here: https://www.fastbooking.com/legal-notices/ The Internet service provider is based outside the EU. It is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law.Legal basis:
The internet service provider processes the aforementioned data on our behalf, Art. 28 DSGVO. The data processing is based on our legitimate interest in an efficient and secure provision of our website, Art. 6 para. 1 lit. f) DSGVO.

If you use our website for information purposes only, our internet service provider will only collect the personal data that the browser you are using transmits to its server.

This is the following data:

    • IP address
    • The date and time of access to our website
    • Time zone difference from Greenwich Mean Time (GMT)
    • Access status (HTTP status)
    • the amount of data transferred
    • the Internet service provider of the accessing system
    • the type of browser you are using and its version
    • the operating system you are using
    • the website from which you may have accessed our website
    • the pages or sub-pages which you visit on our website

The aforementioned data is stored as log files on the servers of our Internet service provider. This is necessary to be able to display the website on the terminal device you are using, as well as to ensure stability and security. In the above purposes lies our legitimate interest in data processing. Legal basis: The data processing is carried out on the basis of our legitimate interest in an efficient and secure provision of our Internet offer a, Art. 6 para 1 lit. f) DSGVO. Duration: The above data for the provision of our website will be stored for a period of 7 days and then deleted.

Cookies

Our website uses cookies. Cookies are small text files, consisting of a series of numbers and letters, which are filed and stored on the terminal device you use. Cookies do not transmit viruses nor can they execute programs. Rather, their primary purpose is to exchange information between the end device you are using and our website in order to make our Internet offering more user-friendly and effective for you. A distinction must be made between temporary (transient) cookies and persistent cookies. Transient cookies include, in particular, session cookies. These store a so-called session ID, with which various requests of your browser can be assigned to the common session. This allows our website to recognize your computer when you return to our website. Session cookies are deleted when you log out or close your browser. Persistent cookies are deleted automatically after a specified period of time, which may differ depending on the cookie. You have the option to delete these cookies at any time in the security settings of your browser.

The cookies are used to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. In particular, information on language settings or log-in information may be stored in these cookies.

In addition, we also use cookies on our website that enable an analysis of your visit to our Internet pages. In particular, these cookies may store information about search terms entered, frequency of page views or the use of website functions. These cookies enable us to track how often and in what way the website and its functions are used. They thus serve to improve the quality and user-friendliness of our website, especially its content and functions. This enables us to continuously optimize our offer. The data collected in this way is pseudonymized by technical precautions. Therefore, an assignment of the data to your person is not possible. The data is not stored together with other personal data concerning you.

In the above purposes lies our legitimate interest in data processing. The legal basis for this is Art. 6 para. 1 p. 1 lit. f DSGVO.

Since cookies are stored on your computer, you as a user also have full control over the use of cookies. You have the option to specify via the security settings of your browser whether cookies are stored at all. For example, you can choose not to accept cookies from the outset or only accept them on request, or you can specify that cookies are deleted each time you close your browser. If cookies are deactivated for our website, it may no longer be possible to fully use all the functions of the website.

Storage period/deletion

We delete or block your personal data as soon as the purpose of storage has been achieved or is no longer applicable. Any storage beyond this will only take place if we are required to do so by national or European regulations. In this case, the data will be blocked or deleted when the storage period prescribed by the respective regulations has expired, unless we need your data for the performance of a contract concluded between us or if this is necessary for the assertion, exercise or defense of legal claims.

Information about the contact options we provide

If you contact us via e-mail, social media, telephone, fax, mail, our contact form or otherwise and provide us with personal data such as your name, telephone number or e-mail address or provide further information about yourself or your request, this data will be stored and processed in our company for the purpose of processing your request. Legal basis: If you have made your request via our contact form, the legal basis for the processing of your data is Art. 6 para.1 lit. a DSGVO. If you make your request in the context of contractual or pre-contractual relations with us, the legal basis for the processing of your data is Art. 6 para. 1 lit. b. DSGVO. Unless your request falls under one of the aforementioned categories, our legitimate interest in processing your data is to respond to your request properly and in your interest, Art. 6 para. 1 lit. f DSGVO. Deletion: The personal data collected by us will be deleted if they are no longer necessary. We review the necessity every 2 years. In addition, you can revoke the data processing at any time.

Registration

You have the option to register on our website and create a user account in order to access specific content on our website. For this purpose, the specification of personal data is necessary, which results from the input mask. The data requested there includes in particular your name, password and e-mail address. This data is stored and processed by us to enable you to access your user account. The data can be changed or deleted by you at any time. The data will not be disclosed to third parties except for the purpose of processing the contract. In order to protect you and us from abusive registrations, we store the IP address used during registration, as well as the date and time of registration. This data will not be passed on to third parties. Legal basis: We process your data on the basis of Art. 6 para. 1 lit. b DSGVO for the purpose of providing your user account. Deletion: The personal data, as well as IP address, date and time will be stored until the purpose for this no longer applies. The deletion of the data collected as part of the registration will take place as soon as the associated account on our website is deleted or changed: You can delete your account at any time or request deletion by the aforementioned controller.

Your rights under the GDPR

Under the GDPR, you are entitled to the rights listed below, which you may exercise at any time by contacting the controller mentioned in section 1. of this privacy statement:

Your rights under the GDPR

Under the GDPR, you are entitled to the rights listed below, which you can exercise at any time by contacting the controller mentioned in section 1. of this privacy statement:

  • Right of access: According to Art. 15 DSGVO, you can request confirmation as to whether and which of your personal data we process. In addition, you can request information from us free of charge about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint and the origin of your data, if it was not collected by us. Furthermore, you have the right to information as to whether your personal data has been transferred to a third country or to an international organization. If this is the case, you have the right to receive information about the appropriate safeguards in connection with the transfer.
  • Right to rectification: Pursuant to Art. 16 DSGVO, you may request the rectification of inaccurate or the completion of incomplete personal data stored by us and concerning you.
  • Right to erasure: Pursuant to Art. 17 DSGVO, you have the right to request the erasure of your personal data stored by us, insofar as we do not require their processing for the following purposes:
  • to comply with a legal obligation,
  • for the assertion, exercise or defense of legal claims,
  • to exercise the right to freedom of expression and information, or
  • for reasons of the cases of public interest referred to in Article 17 (3) lit c and d DSGVO.
  • Right to restriction: Pursuant to Art. 18 of the GDPR, you have the right to request the restriction of the processing of your personal data if
  • the accuracy of the data is contested by you for a period enabling us to verify the accuracy of the personal data,
  • the processing of your data is unlawful, but you object to its erasure and instead request the restriction of the use of the data,
  • we no longer need the personal data for the purposes of processing, but you need the data to assert, exercise or defend legal claims
  • you have objected to the processing of your data in accordance with Article 21 of the GDPR, but it is not yet clear whether the legitimate grounds that entitle us to further processing despite your objection outweigh your rights.
  • Right to be informed: If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged to inform all recipients to whom the personal data concerning you have been disclosed of the rectification or erasure of the data or restriction of processing requested by you, unless this proves impossible or involves a disproportionate effort. You have the right to be informed by us about these recipients.
  • Right to data portability: Pursuant to Art. 20 DSGVO, you may request that we receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, or request that it be transferred to another controller.
  • Right of complaint: According to Art. 77 DSGVO, you have the right to complain to a supervisory authority. For this, you can contact the supervisory authority of your usual place of residence, your place of work or our registered office.

Right of withdrawal

According to Art. 7 (3) DSGVO, you have the right to revoke your given consent to the processing of your data at any time to us. The revocation declared by you does not change the lawfulness of the processing of your personal data carried out until the revocation.

Right of withdrawal

According to Art. 7 (3) DSGVO, you have the right to revoke your consent to the processing of your data at any time. The revocation declared by you does not change the lawfulness of the processing of your personal data carried out until the revocation.

Right of withdrawal

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of a balance of interests (Article 6(1)(f) DSGVO). This is particularly the case if the data processing is not necessary for the performance of a contract. If you exercise your right to object, we ask you to explain the reasons. We will then no longer process your personal data unless we can prove to you that compelling reasons worthy of protection in the data processing outweigh your interests and rights.

Independently of the above, you have the right to object at any time to the processing of your personal data for purposes of advertising and data analysis.

Please address your objection to the contact address of the data controller indicated above.

YouTube

We use components of YouTube on this website, a service of YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA.

The use of YouTube allows us to embed various videos and clips provided on the Internet platform www.youtube.de. After a page or sub-page of our website is called up on which such an embedding has taken place, the Internet browser used by you will be prompted to download video components of the respective embedded video or clip. During your visit to our website and its subpages, both YouTube and Google are informed about which page or subpage you have accessed by transmitting your IP address to Google’s external servers in the USA. This information transfer takes place regardless of whether the videos or clips displayed are actually viewed or clicked on, or you are logged into your Youtube or Google account. Google is a participant in the Privacy Shield agreement and is certified to process data according to European standards. This information is collected and assigned to your Google account, provided you are logged into it during your visit. Purpose: The use of Youtube components on our website serve to provide you with videos and clips of the website www.youtube.de on our website for the purpose of viewing and interaction. Legal basis: We use Youtube based on our legitimate interest in the optimization and design of our online offer, Art. 6 para 1 lit. f DSGVO. Prevention: You can prevent the data transmission at any time by logging out of your Youtube account, or under the following link https://adssettings.google.com/authenticated after logging into your Google account by pressing the unsubscribe button set an opt-out cookie.

Third Party Provider Information:

Located within the EU: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Google Maps

We use components of “Google Maps” on our website, a service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as: “Google”).

Geographical information is displayed visually by Google Maps. Here, Google collects and processes the IP address of the visitor. This is transmitted to Google regardless of whether the use of Google Maps actually takes place or you are logged into your Google account. Your IP address will be assigned to your Google account if you are logged into it when you visit our website. This data is transferred to external Google servers in the USA. Google is a participant in the Privacy Shield agreement and is certified to process data according to European standards. Google may share this data collected via the technical procedure with third parties. Purpose: The integration of Google Maps serves the simplified visualization and navigation in the context of a visit to our site. The data processing of Google is for the purpose of advertising, market research, the design of the website and provision of tailored advertising. Legal basis: We use Google Maps based on our legitimate interest in the optimization and design of our online offer, Art. 6 para 1 lit. f DSGVO. Prevention: You can prevent the allocation of data by refraining from using Google Maps on our website and logging out of your Google account before your visit. In addition, you can disable JavaScript in your browser to prevent the map display. Further, we refer to Google’s privacy policy at the following link http://www.google.com/intl/de_de/help/terms_maps.html

Third Party Provider Information:

Located within the EU: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Our online presences on social networks

We operate online presences within the social networks listed below. If you visit one of these presences, your usage data will be collected and processed by the respective provider. This is usually done by cookies that are stored on the terminal device you use. For the term cookie, see above under the corresponding heading. With the cookies, your usage behavior and interests are stored and corresponding usage profiles are created. In the usage profiles, data can also be stored regardless of the device you use. This is particularly the case if you are a member of the respective platform and logged in to it.

We have embedded plugins on our website in the form of. “Social media buttons” of the providers we use. You can recognize which plugin belongs to which provider by the respective logo with which the plugin is marked. We have deactivated the social media plugins on our website by default, so that data is not automatically transmitted to the provider of the plugin when our pages are called up. For this purpose, we use the so-called Shariff solution. Only when you click on the “social media button” of the respective provider, the collection of information and its transmission to the provider is triggered. If you click on one of these buttons, data may be sent to the operator of the social network even if you do not have an account there or have an account there but are not logged in there at the moment you visit our website.

The collected data is generally used by the provider for the purposes of advertising and market research by creating usage profiles from your usage behavior. These in turn can be used by the providers to play interest-based advertising to you. You have a right of revocation against the creation of user profiles. To exercise this right, you must contact the respective provider. If you have an account with the provider, your usage data may be linked to it. To prevent such linking of your data, you can log out of the provider’s service before visiting our site.

For what purpose and to what extent data is collected by the provider, you can see the respective, in the following communicated, privacy statements of the providers. We ourselves have no influence on what data is collected and how this data is used by the provider. If you wish to request information here in detail or exercise your data subject rights, you can do this most effectively with the respective providers themselves, as only the respective providers have access to your data.

We would like to point out that your user data may be transferred and processed outside the area of the European Union. In this case, there is a risk that the enforcement of your data subject rights may become more difficult. Those U.S. providers that are certified under the Privacy Shield have committed to comply with EU data protection standards. Information on whether the respective provider has such a certificate can be found in the information on the providers listed below.

Legal basis: If you have been asked for consent to data processing by one of the providers listed below, the legal basis for the processing is Art. 6 (1) lit. a DSGVO. Otherwise, the processing of your data is based on our legitimate interests to contact you and communicate with you, Art. 6 para. 1 lit. f. DSGVO. Prevention: For the respective objection options (opt-out), we refer to the information of the providers linked below.

We maintain online presences on the following social networks:

Twitter

Twitter is a service of Twitter Inc, 795 Folsom St., Suite 600, San Francisco, CA 94107 – USA

Headquarters in the EU: Twitter Inc, 26 Fernian St, Dublin – Ireland

We maintain online presences on the following social networks:

Twitter

Twitter is a service of Twitter Inc, 795 Folsom St., Suite 600, San Francisco, CA 94107 – USA

Headquarters in the EU: Twitter Inc, 26 Fernian St, Dublin – Ireland

Instagram

Instagram is a service of Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025 – USA

XING

XING is a service of XING AG, Gänsemarkt 43, 20354 Hamburg – Germany

LinkedIn

LinkedIn is a service of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043 – USA

Headquarters in the EU: LinkedIn, Hofstatt 4th Floor, Sendlinger Str. 12, 80331 Munich – Germany

Facebook

Facebook is a service of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304 – USA.

Located in the EU: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 – Ireland

Google Analytics

We use “Google Analytics” on our website, a service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

p style=”text-align: left;”>We use Google Analytics to record and statistically evaluate the flow of visitors to our website. Among other things, Google Analytics collects data about the website from which you accessed our website (so-called referrer), which subpages of the website you accessed or how often and for how long a subpage was viewed and what interactions you made. In order to collect and store this data, Google Analytics sets a cookie on the terminal device you use (see the term above under the heading Cookies). We use the AnonymizeIP function to anonymize your IP address so that it is shortened and can no longer be assigned to your visit to our website. Further transmitted information is not assigned to or linked with the anonymized IP address by Google. The information thus generated is transferred to Google servers in the USA and stored there. Google may pass on this personal data collected via the technical procedure to third parties. We have concluded an order processing agreement with Google. Accordingly, Google is entitled and obliged to evaluate the information obtained for us and to create statistical reports for us on the type and extent of website use. These statistics enable us to continuously improve our offer, to carry out a cost-benefit analysis of our internet marketing and to make our internet presence more interesting and user-friendly for you as a user. Legal basis: We obtain your consent to the use of this service via a so-called opt-in. This means that the cookie, the tracking pixel or similar procedures with which your personal data is processed via this service will only be activated if you have consented to this. The legal basis is Art. 6 para. 1 lit. a DSGVO. If you are in Germany and have not yet reached the age of 16 (in Austria and Switzerland the age of 14), you are not yet in a position to give effective consent under data protection law according to the evaluation of the respective national legislator. We evaluate your opt-in as your reasonable expectation regarding the use of cookies. In this case, we invoke Art. 6 (1) lit. f DSGVO as the legal basis. Our legitimate interests in this case lie in the user-friendly design of our online offer as well as our business interest in the collection, storage and evaluation of the data material. Deletion: The data collected and transmitted by us in this way will be automatically deleted after 26 months. Prevention: You can prevent the storage of cookies by downloading and installing the browser add-on provided by Google. This is available at https://tools.google.com/dlpage/gaoptout?hl=de. However, you may subsequently no longer be able to use all the functions of our website in full. Alternatively, you can prevent the storage of cookies by setting a so-called opt-out cookie, which will prevent data from you being collected on our website in the future. To do this, please click on the following <link>. In addition, you have the option to prevent the storage of cookies by setting this in your browser. Cookies that have already been set can be deleted by you at any time.

Information about the third-party provider:

Located within the EU: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Google Ads

We use “Google Ads”, a service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

on our website.

Google Ads is a service for displaying Internet advertising in the form of ads. The ads are displayed as search results in the search engine results or in the Google advertising network. Through Google Ads, we specify certain keywords. Our ads are then played out by Google in the search engine results when you use Google’s search engine to retrieve a search result that is related to the keyword. In the display network, the ad is displayed on pages related to the topic. If you click on one of the ads, you will be redirected to the website advertised by us. In doing so, Google Ads sets a cookie (see the term above under the heading Cookies). This allows both Google and us to track whether you have reached our site via our ad and whether you have taken any further actions here, such as buying something, using a contact form or calling us. For this purpose, the pages you visit, including your IP address, are collected by the cookie and transferred to Google servers in the USA (conversion tracking). Google evaluates this data to produce a report with statistical statements about the number of visitors generated by the advertising and the success of the advertising measure. The reports show, among other things, the total number of users who were redirected to our website via our ads. In addition, the reports contain information on the end devices and browsers of the users, at which locations the users were located, at which times the advertisement was clicked. However, the reports do not contain any information that would personally identify you as a user of our site. Purpose: The aforementioned interests constitute the purpose of the use of Google Ads.

Legal basis: We obtain your consent to the use of this service via a so-called opt-in. This means that the cookie, the tracking pixel or similar procedures with which your personal data is processed via this service will only be activated if you have consented to this. The legal basis is Art. 6 para. 1 lit. a DSGVO. If you are in Germany and have not yet reached the age of 16 (in Austria and Switzerland the age of 14), you are not yet in a position to give effective consent under data protection law according to the evaluation of the respective national legislator. We evaluate your opt-in as your reasonable expectation regarding the use of cookies. In this case, we invoke Art. 6 (1) lit. f DSGVO as the legal basis. Our legitimate interests in this case lie in the user-friendly design of our online offer and our business interest in the collection, storage and analysis of the data material. Prevention: Cookies already set can be deleted at any time via the settings in your browser.

Third-party provider information:

Located within the EU: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

PayPal

We offer on our website the processing of payment through the payment service provider PayPal (PayPal (Europe) S.à.r.l. &amp; Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg).

If you have decided to pay via PayPal, the following of your data will be transmitted to PayPal as part of the order: First and last name, address, date of birth, email address, phone number, IP address and the data necessary for the processing of the respective order. The transmission of this data takes place so that PayPal can perform an identity check for the processing of your purchase. This provides, among other things, the opportunity to detect fraudulent activities and prevent the misuse of data. In addition, the data is transmitted so that PayPal can assess your creditworthiness, if necessary, or PayPal can pass on the data to credit agencies to assess your creditworthiness in the form of a credit check. PayPal uses the result of the credit check in terms of the statistical probability of non-payment for the purpose of deciding whether to provide the respective payment method. The collected data may also be used by PayPal for analysis purposes, in particular for customer analysis, risk analysis, data analysis for the purposes of developing and improving the services offered by PayPal. Legal basis: The legal basis for the aforementioned use of the data is Art. 6 para 1 lit b DSGVO. Deletion:
Deletion: The data collected and transmitted by us in this way will be automatically deleted after 26 months. Revocation: You can revoke your consent to the use of personal data at any time to PayPal. Despite revocation, PayPal remains entitled, if necessary, to process, use and transmit the personal data that are absolutely necessary for the contractual payment processing.

Information on the third-party provider:

Security measures

We also take technical and organizational security measures in accordance with the state of the art in order to comply with the provisions of data protection laws and to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties.

Updates and changes to this privacy policy

This privacy policy is currently valid and has the status of January 2019. Due to changes in legal or regulatory requirements, it may become necessary to adapt this privacy policy.

This privacy policy was created with the help of SOS Recht. The privacy statement generator can be found here. SOS Recht is a service of Mueller.legal Rechtsanwälte Partnerschaft based in Berlin.