Yours Hotel-Garni *** in Bad Staffelstein
Data protection

Privacy policy

Person responsible

The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is

Haus am Heubach
Nedensdorferstrasse 5
96231 Bad Staffelstein

Phone: +49 9573 3315759
E-mail: info@haus-am-heubach.de

Owner according to § 5 TMG:
Petra Weis (sole trader)
Krausenbachstr. 16
96231 Bad Staffelstein

 

Your rights as a data subject

In accordance with the EU General Data Protection Regulation (GDPR), you can exercise the following rights at any time using the contact details provided:

  • Information about your data stored by us and its processing (Art. 15 GDPR),
  • Correction of incorrect personal data (Art. 16 GDPR),
  • Deletion of your data stored by us (Art. 17 GDPR),
  • Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
  • Objection to the processing of your data by us (Art. 21 GDPR) and
  • Data portability, provided that you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR).

If you have given us your consent, you can revoke it at any time with effect for the future.

You can lodge a complaint with a supervisory authority at any time, e.g. with the competent supervisory authority in the federal state of your place of residence or with the authority responsible for us as the controller.

A list of supervisory authorities (for the non-public sector) with addresses can be found at https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Processing activities

Collection of general information when visiting our website

Nature and purpose of processing

When you access our website, i.e. if you do not register or otherwise transmit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and similar.

They are processed in particular for the following purposes:

  • Ensuring a problem-free connection to the website
  • Ensuring smooth use of the website
  • Ensuring and analysing system security and stability, in particular to detect misuse
  • for the technically error-free presentation and optimisation of the website

We do not use your data to draw conclusions about your person. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.

Legal basis and legitimate interest

Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website as well as ensuring system security and detecting misuse.

Receiver

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Storage duration

Data is stored in server log files in a form that makes it possible to identify the data subjects for a maximum of 180 days, unless a security-relevant event occurs (e.g. a DDoS attack).

In the event of such an incident, server log files are stored until the security-relevant incident has been rectified and fully clarified.

Provision prescribed or required

The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted.

Contradiction

Please read the information on your right to object under Art. 21 GDPR below.

Contact us

Nature and purpose of processing

There is a contact form on our website that can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored.

The following data is also stored at the time the message is sent:

  • IP address of the requesting device
  • Date and time of the enquiry
  • URL from which the request was made

It is possible to contact us via the e-mail addresses provided. In this case, the user's personal data transmitted with the e-mail will be stored. This includes the date and time the e-mail was sent, e-mail address, IP addresses and information on the servers involved in the e-mail communication.

You can contact us via the telephone numbers provided. We collect log data that includes your telephone number and the duration of the call.

Regardless of the type of communication selected, we collect the content of your enquiry. Your data will be stored for the purpose of personalised communication with you.

Legal basis

The data is processed on the basis of a legitimate interest (Art. 6 para. 1 lit. f GDPR).

Our legitimate interest in processing your data is to enable you to contact us easily.

If you contact us to enquire about an offer, the data will be processed to carry out pre-contractual measures (Art. 6 para. 1 lit. b GDPR).

Receiver

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Storage duration

Data will be deleted no later than 180 days after the contact has been processed.

If there is a contractual relationship, we are subject to the statutory retention periods. These are generally 6 or 10 years for reasons of proper accounting and tax law requirements.

Provision prescribed or required

The provision of your personal data is voluntary. However, we can only process your enquiry if you provide us with the necessary data and the reason for the enquiry.

Contradiction

Please read the information on your right to object under Art. 21 GDPR below.

Information about your right to object in accordance with Art. 21 GDPR

Individual right of objection

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR (data processing on the basis of a balancing of interests); this also applies to profiling based on this provision within the meaning of Article 4(4) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Recipient of an objection

Haus am Heubach
Nedensdorferstrasse 5
96231 Bad Staffelstein

Phone: +49 9573 3315759
E-mail: info@haus-am-heubach.de

Changes to our privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

Questions about data protection

If you have any questions about data protection, please send an e-mail to the person responsible named above.

Copyright information

This privacy policy was created with the help of activeMind AG - the experts for External data protection officer (Version #2024-10-25).