Privacy policy

I. General information on data protection & rights of data subjects
§1 General information
§2 General overview of data and processing operations
§3 Your rights
§4 General legal basis
II. Website
§5 General information
§6 Third-party services
§7 Hotel bookings
§8 Email contact
III. Newsletter subscribers
§9 Newsletter
IV. Status of the privacy policy

 

I. General information on data protection & rights of data subjects

 

§1 General information

 

Data protection is an important topic. In the following, we provide information about the collection and processing of personal data. Personal data is all data that can be related to you personally.

 

Controller pursuant to Art. 4 para. 7 GDPR

SV Hotel GmbH
Geschäftsführung
Sandra Vondran and Silke Vormann
Grimbergstr. 52a
44797 Bochum
Tel 02 34 / 97 96-0 | Fax 02 34 / 97 96-293
info@lottental.de

 

Data Protection Officer

You can reach our company's personally appointed data protection officer at the following address

Mr. Patrick Grihn
grihn@dsb.ruhr
DSB Ruhr
℅ nextindex GmbH & Co. KG
Grabenstr. 12
44787 Bochum

If you have any questions about processing, security or a request for information, you can contact him directly in confidence.

 

§2 General overview of data and processing operations

 

We want to offer you the required clarity in accordance with Art. 12 GDPR. Therefore the following overview of processing:

 

Types of data processed:

• Usage data or communication data (when accessing a website, IP address, device information, access time and time of access, etc.)

• Contact data when registering or entering data

• Inventory data (name, company, address)

• Communication data (possibly metadata about calls, emails)

• Content data (in particular when sending e-mails)

 

Furthermore (internally) the following additional data for our customers, interested parties, suppliers and business partners for the provision of services in the areas of quotation and contract management, service and marketing, direct advertising and customer care:

• Contract data

• Customer inventory data (CRM)

• supplier data

• payment data

• Order data and invoice data

 

Data subjects (categories)

• Users of this website (also referred to as visitors)

• guests

• suppliers

 

Purposes

• Operating the website and providing information

• Ensuring the operation of the website and our systems (e.g. firewall)

• Communication with our customers

• Responding to inquiries

• Optimization and analysis of the website

• Providing information for our (potential) customers

 

§3 Your rights

 

You have the following rights vis-à-vis us with regard to your personal data:

 

Briefly:

• Right of access,

• Right to rectification or erasure,

• Right to restriction of processing,

• Right to object to processing,

• Right to data portability,

• Right to complain to the data protection supervisory authority about the processing of your personal data by us.

 

Detailed rights:

• Pursuant to Art. 15 GDPR, to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;

• in accordance with Art. 16 GDPR, to demand the immediate correction of incorrect or incomplete personal data stored by us

• in accordance with Art. 17 GDPR, to demand the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims

• in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;

• in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller

• in accordance with Art. 7 para. 3 GDPR, to revoke your consent to us at any time. As a result, we may no longer continue the data processing that was based on this consent in the future and

• to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority at your usual place of residence or workplace or at the registered office of our law firm.

 

Exceptions:

The right to erasure does not exist if the processing is necessary

• for exercising the right of freedom of expression and information

• for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller

• for reasons of public interest in the area of public health pursuant to Art. 9 (2) (h) and (i) and Art. 9 (3) GDPR

• for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or

• for the assertion, exercise or defense of legal claims

 

§4 General legal bases

 

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.

Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis.

 

II. Website

 

§5 General information

 

General data when accessing the website

When using the website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server in order to display our website to you and to ensure stability and security. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest).

 

Log files

Data is stored in log files to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest).

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymized so that it is no longer possible to identify the accessing client.

 

Cookies

In addition to the aforementioned data, cookies may be stored on your computer when you use our website.

We use technically necessary cookies for the purpose of security and the technical implementation of the website. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest).

These cookies are usually deleted after logging out or closing the browser.

We also use cookies for the purpose of analyzing user behavior or for marketing purposes.

These cookies are deleted after a specified period.

Unless otherwise stated in this privacy policy, processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest). Otherwise on the basis of consent pursuant to Art. 6 para. 1 lit. a GDPR

You can delete the cookies stored on your computer at any time in the browser settings.

You can also configure your browser so that it either deletes cookies when you close the browser or generally rejects cookies.

We would like to point out that you may not be able to use some functions of our website properly without cookies.

 

§6 Services from third-party providers

 

Google services

We use various services of the provider Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland on our website. A company incorporated and operated under Irish law (registration number: 368047).

Google services are only used with your informed consent on the basis of Art. 6 para. 1 lit. a GDPR.

Google uses cookies in connection with the services and functions, which can be stored on your end device. The information generated by the cookies (e.g. about your use of the website) may be transferred to a server in the USA and stored there. This may also include your IP address. As a rule, your IP address is stored anonymously. Google has submitted to the “Data Privacy Framework”. The transfer takes place under certification of the Data Privacy Framework on the basis of Art. 45 GDPR (adequacy decision). Further information on the Data Privacy Framework can be found at https://www.dataprivacyframework.gov/s/

 

We use the following Google services and functions

 

Google Analytics

We use Google Analytics to analyze and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user.

We use Google Analytics with the extension “_anonymizeIp()”. This means that IP addresses are further processed in abbreviated form, thus excluding the possibility of personal references. If the data collected about you is personally identifiable, it is immediately excluded and the personal data is deleted immediately.

This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under “My data”, “Personal data”.

 

Google Tag Manager
We use the Google Tag Manager. This service is used to efficiently manage so-called “tags” (small code elements on the website). This service makes it easier for us to use other Google services, among other things.

 

Options to object:

You have several options to object to or restrict the collection and processing of your data by Google.

• You can prevent the storage of cookies by setting your browser software accordingly (this may mean that not all functions of the website can be used)

• You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

• (Only applies to data collected and processed by Google Analytics)

• You can withdraw your consent to the processing of data by Google services at any time. You can do this by deleting the cookies in your browser and not giving your consent the next time you visit our website.

• If you have a Google account, you can make settings for the type, scope and storage of data by Google in the account management under the menu item “Data & personalization”.

Further information on the purpose and scope of data collection and processing can be found in Google's privacy policy (https://policies.google.com/privacy?hl=de&gl=de).

 

§7 Hotel bookings

 

You can easily book a room via our booking portal.

We process your personal data for the purpose of processing the booking and accommodation on the basis of Art. 6 para. 1 lit. b GDPR, for the purpose of improving service quality and for advertising and marketing purposes on the basis of Art. 6 para. 1 lit. f GDPR. If necessary, we process your data due to legal requirements on the basis of Art. 6 para. 1 lit. c GDPR.

 

Forwarding of data (also recipients)

Your data will be made available in the necessary places within the responsible body.

In the course of a request for information from a credit agency, the notification of a payment default, in the course of tax advice or the defense of rights, the data may be passed on to third parties for corresponding purposes.

 

Storage period

The data is deleted when it is no longer required to fulfill the purpose of processing.

 

§8 E-mail contact

 

We offer you the opportunity to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored.

We process the respective personal data for the purpose of processing the conversation (contact, reply) on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest) or on the basis of Art. 6 para. 1 lit. b GDPR (fulfillment of a contract or pre-contractual measures).

The data will be deleted if it is no longer required to fulfill the purpose of processing.

 

III. Newsletter subscribers

 

§9 Newsletter

 

We offer a newsletter that you can subscribe to on our website.

We process your e-mail address for the purpose of sending the newsletter. Optionally, you can also provide voluntary information about your name and title. We process this data for the purpose of addressing you personally.

We only send the newsletter with your express consent in accordance with Art. 6 para. 1 lit. a GDPR.

You can revoke your consent to receive the newsletter at any time. You can revoke your consent by clicking on the link provided in every newsletter e-mail or on our website.

Your data will only be used for sending the newsletter.

 

IV Status of the privacy policy

 

The privacy policy is amended from time to time to reflect changes in the business process and the legal situation. You will always find the latest version on the website.

Status: September 2023