DATA PROTECTION
We are pleased you are visiting our homepage, and thank you for your interest in LINDENBERG. Dealing with our customers and interested parties is a matter of trust. The trust placed in us is very important to us and therefore the importance and obligation to handle your data carefully and to protect it from misuse. So that you feel safe and comfortable when visiting our website, we take the protection of your personal data and their confidential treatment very seriously. Therefore we act in accordance with the applicable legislation on the protection of personal data and data security. With this information on data protection, we would like to inform you about when we store which data and how we use it – of course in compliance with the applicable German case law. Data protection at LINDENBERG Hospitality GmbH takes into account the European level of data protection and is based, in particular, on the current Federal Data Protection Act (BDSG) and data protection law (GDPR). When using the Internet, we orient ourselves to protecting your personal data on the Telemedia Act (TMG ) of the Federal Republic of Germany.
SCOPE OF COLLECTION AND PROCESSING OF PERSONAL DATA
In principle, you can visit our websites without telling us who you are. Our web servers automatically store information of a general nature. This includes the type of web browser, the operating system used, the domain name of your Internet service provider, the website from which you are visiting us, the websites you are visiting on our site and the date and duration of the visit. This is exclusively information that does not allow any conclusions to be drawn about your person. We only evaluate this data for statistical purposes and only in an anonymous form. Personal data is inventory data, such as your name, address, account number, ID number or telephone number, email address or IP number. We only collect, process or use personal data from you if you voluntarily provide it to us and it is also permitted by law, or you have given your consent. This usually happens when you enter into a business relationship with us or make an inquiry with us.
To the extent that your personal data is processed in our central guest database, the data will also be disclosed to the other companies that operate brands owned by Lindenberg Hospitality (Lindenberg, Libertine Lindenberg, Lindley). The respective operators of each of these hotels can be seen on the website under “Selection of hotels”.
Service providers used by us (e.g. as part of order processing in accordance with Art. 28 GDPR) and vicarious agents may also receive personal data for these purposes. These are companies in the categories of credit services and payment processing, IT services, cleaning services, logistics, printing services, telecommunications, debt collection, advice and consulting, as well as sales and marketing. The respective service providers can be seen from the list of service providers/processors, which is updated regularly.
PURPOSE OF USE OF DATA COLLECTED
We use the personal data you provide exclusively for the stated or agreed purposes, i.e., to process the contract concluded with you or to answer your inquiry.
If you use our services, as a rule, only data that we need to provide the services is collected. If we ask you for further data, this is voluntary information. The processing of personal data takes place exclusively to fulfil the requested service and to protect legitimate business interests.
ARE PERSONAL DATA FORWARDED TO THIRD PARTIES
Your data will only be processed and used for consulting, advertising and market research purposes with your express consent. Your data will not be sold, rented or made available to third parties in any other way. Transfers of personal data to state institutions and authorities only take place within the framework of mandatory national legislation.
PERIOD OF STORAGE OF PERSONAL DATA AND CRITERIA FOR DETERMINING THIS PERIOD
We process and store your personal data for as long as it is necessary to fulfil our contractual and legal obligations. If the data is no longer required for the fulfilment of contractual obligations, they are regularly deleted unless their limited further processing is required due to commercial and tax law retention periods (including the Commercial Code (HGB) and the Fiscal Code (AO). The periods specified there for storage or documentation is two to ten years
STORAGE DURATION / NEWSLETTER
The data you have stored with us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers after you have cancelled the newsletter.
YOUR RIGHTS AS A DATA SUBJECT
According to Art. 15 DS-GVO, every data subject whose personal data is processed has the right to information from the person responsible about the personal data concerned; according to Art. 16 DS- GVO, the right to correction, according to Art. 17 DS-GVO, the right to deletion, according to Art. 18 DS- GVO the right to restriction of processing, according to Art. 21 DS-GVO the right to object to the processing as well as according to Art. 20 DS-GVO the right to data portability. The restrictions according to §§ 34 and 35 BDSG-new also apply to the right to information and the right to deletion.
RIGHT TO DATA PORTABILITY
You have the right to have data we process based on your consent or in fulfilment of a contract handed over to you or a third party in a standard, machine-readable format. If you request the direct transfer of the data to another person responsible, this will only be done to the extent that it is technically feasible.
ADDITIONAL INFORMATION ABOUT YOUR RIGHT TO OBJECT IN ACCORDANCE WITH ART. 21 DS-GVO
You have the right, for reasons arising from your particular situation, to object at any time to the
processing of personal data relating to you, which is based on Article 6 (1) sentence 1 lit. e) GDPR (data processing in the public interest). Or Art. 6 (1) sentence 1 lit. f) GDPR (data processing based on a balance of interests) to file an objection; this also applies to profiling based on this provision in accordance with Art. 4 Para. 4 DS-GVO.
If you file an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or
The processing serves to assert, exercise or defend legal claims. If we process your personal data in order to operate direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising. The objection is form-free and should be addressed to our data protection officer using the contact details given in Section 2.
THE RESPONSIBLE AUTHORITY FOR DATA PROCESSING ON THIS WEBSITE IS:
LINDENBERG Hospitality GmbH Mainzer Landstrasse 86 60327 Frankfurt am Main
datenschutz@das-lindenberg.de T +49.69.430 591 530
The responsible body is the natural or legal person who, alone or together with others, decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).
LEGAL DATA PRIVACY OFFICER
We have a data protection officer in our company:
Mr. Muschik
Johannes-Gutenberg-Straße 1
63128 Dietzenbach
T +49 6074 30 40 6-81
WITHDRAWAL OF YOUR CONSENT TO DATA PROCESSING
You can revoke consent that you have already given at any time without giving reasons. An informal message by email to us is sufficient. If deletion is not possible due to legal requirements of tax and commercial law, your data will only be processed for the obligations arising for us from the law. Processing for commercial purposes will no longer take place after an objection.
RIGHT OF APPEAL TO THE RELEVANT SUPERVISORY AUTHORITY
In the event of violations of data protection law, the person concerned has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based.
RIGHT TO DATA PORTABILITY
You have the right to have data that we process on the basis of your consent or in fulfilment of a contract handed over to you or a third party in a standard, machine-readable format. If you request the direct transfer of the data to another person responsible, this will only be done to the extent that it is technically feasible.
SSL – BZW. TLS-ENCRYPTION
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.
SECURITY
LINDENBERG Hospitality GmbH stores information relevant to data protection exclusively on secure systems in Germany. Access to it is only possible for a few authorized persons and persons responsible for the technical, administrative or editorial support of data and who are responsible for special data protection.
YOUTH PROTECTION
Children and young people with limited legal capacity are not permitted to transmit any personal data to our website without the consent of their parents or guardian. Under no circumstances will LINDENBERG Hospitality GmbH knowingly collect personal data from children or adolescents with limited legal capacity, use it in any way or disclose it to third parties without authorization.
USER CONSENT
By using our website and the offers contained therein, you agree that the personal data you have voluntarily transmitted will be stored by us and processed and used in compliance with this data protection declaration.
RIGHT TO INFORMATION / PUBLIC PROCEDURE DIRECTORY
According to § 34 and § 6b BDSG, you have the unrestricted right to free information about your data stored by us and, according to § 35 BDSG, the right to delete or block inadmissible data or the right to correct incorrect data. Upon request, we are also willing to inform you in writing whether and which personal data we have stored about you. Where possible, we will take appropriate steps to update or correct the information we hold about you at short notice.
USE OF COOKIES
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and enable an analysis of your use of the website. Cookies do not damage your computer and do not contain viruses. The information generated by the cookie about your use of this website (including your IP address) is transmitted to a Google server in the USA and stored there. Google will use this information to evaluate your use of the website, to compile reports on website activity for website operators and to provide other services related to website activity and internet usage. Google may also transfer this information to third parties if required to do so by law or if third parties process this data on Google’s behalf. Under no circumstances will Google associate your IP address with other Google data. You can prevent the installation of cookies by setting your browser software accordingly; we would like to point out to you, however, that in this case, you can, if applicable, not use all functions of this website in full. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.
GOOGLE ANALYTICS
On the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 Para. 1 lit. f. DSGVO), we use Google Analytics, a web analysis service provided by Google LLC (“Google”). Google uses cookies. The information generated by the cookie about the use of the online offer by the user is usually transmitted to a Google server in the USA and stored there. Google is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with other services related to the use of this online offer and internet usage. Pseudonymous user profiles can be created from the processed data.
We only use Google Analytics with activated IP anonymization. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there.
The IP address transmitted by the user’s browser is not merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly; In addition, users can prevent the data generated by the cookie and related to their use of the online offer from being collected and processed by Google by downloading and installing the browser plugin available under the following link: http://tools .google.com/dlpage/gaoptout?hl=en.
As an alternative to the browser add-on or within browsers on mobile devices, please click this link to prevent future detection by Google Analytics within this website: Analytics-Opt-InAnalytics-Opt-Out. An opt-out cookie is stored on your device. If you delete your cookies, you must click this link again.
You can find more information on data used by Google, setting and objection options in Google’s data protection declaration (https://policies.google.com/technologies/ads) and in the settings for the display of advertisements by Google (https:// adssettings.google.com/authenticated).
GOOGLE MAPS
This site uses the Google Maps map service via an API. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
In order to use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.
Google Maps is used in the interest of an attractive presentation of our online offers and to make it easier to find the places we have indicated on the website. This represents a legitimate interest within the meaning of Article 6 (1) (f) GDPR.
You can find more information on handling user data in Google’s data protection declaration: https://www.google.de/intl/de/policies/privacy/.
SOCIAL MEDIA PLUG-INS
The plugin provider stores the data collected about you as usage profiles and uses them for advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) to display needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plugin provider as listed below to exercise this right. With the plugins, we offer you the opportunity to interact with social networks and other users so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plugins is Article 6 Paragraph 1 Clause 1 Letter f GDPR.
The data is passed on regardless of whether you have an account with the plugin provider and are logged in there. If you are logged in to the plugin provider, your data collected from us will be assigned directly to your existing account with the plugin provider. If you press the activated button and, e.g. B. link the page, the plugin provider also stores this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network. Still, especially before activating the button, as this way, you can avoid being assigned to your profile with the plugin provider.
The website uses social plugins (hereinafter referred to as “plugins”) from the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (hereinafter referred to as “Facebook”). The plugins are recognizable by one of the Facebook logos (white “f” on a blue tile or a “thumbs up” sign) or are marked with the addition “Facebook Social Plugin”. The list and appearance of the Facebook social plugins can be viewed here: https://developers.facebook.com/docs/plugins/
When a user calls up a page on our website that contains such a plugin, their browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted directly from Facebook to the user’s browser, which integrates it into the website. The provider therefore has no influence on the amount of data that Facebook collects using this plugin. According to the current knowledge of the provider, Facebook proceeds as follows:
By integrating the plugins, Facebook receives the information that a user has accessed the corresponding page of the provider’s website. If the user is logged into Facebook, Facebook can assign the visit to his Facebook account. If users interact with the plugins, e.g. press the so-called Like button or make a comment, the corresponding information is transmitted directly from the user’s browser to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook will find out and save their IP address. According to Facebook, only an anonymous IP address is stored in Germany.
The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as the relevant rights and setting options for the protection of the privacy of the users, can be found in Facebook’s data protection information https://www.facebook.com/about/privacy/.
Suppose a user is a member of Facebook and does not want Facebook to collect data about him via the provider’s website and link it to his member data stored on Facebook. In that case, he must log out of Facebook before visiting the website. It is also possible to block Facebook social plugins with add-ons for the user’s browser, e.g. with the “Facebook Blocker”.
The website uses plugins from Instagram operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”). The plugins are marked with an Instagram logo, for example in the form of an “Instagram camera”.
If you access a page of this website that contains such a plugin, your browser establishes a direct connection to the Instagram servers. The content of the plugin is transmitted directly from Instagram to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted directly from your browser to an Instagram server in the USA and stored there.
If you are logged in to Instagram, Instagram can immediately assign your visit to our website to your Instagram account. If you interact with the plugins, for example by pressing the “Instagram” button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed to your contacts there.
The purpose and scope of the data collection and the further processing and use of the data by Instagram as well as your rights as a user and setting options for protecting your privacy can be found in Instagram’s data protection information: https://help.instagram.com/155833707900388/
If you do not want Instagram to directly assign the data collected via our website to your Instagram account, you must log out of Instagram before visiting our website. You can also prevent the Instagram plugins from loading with add-ons for your browser, e.g. B. with the script blocker “NoScript” (http://noscript.net/).
FURTHER QUESTIONS?
If you have any problems or questions, contact us directly. We’re here to help.
OUR SERVICE PROVIDERS/CONTRACTORS
Protel Air – Hotelsoftware GmbH,/ Dortmund / Hotel software for bookings and reservations
C.L.E.A.N Frankfurt Reinigung GmbH & Co. KG / Frankfurt / Room and hotel cleaning Ebuero AG – Das Büro der Zukunft / Hamburg / Telephone Support
Booking.com – Booking Holding Inc. / Frankfurt / Online Travel Agent HRS GROUP / Köln / Online Travel Agent
Expedia Inc. / Washington / Online Travel Agent Secret Escapes / London / Online Travel Agent Travelzoo / New York / Online Travel Agent HotelTonight / San Francisco / Online Travel Agent Tablet Hotels / New York / Online Travel Agent
HotelNet Solutions GmbH / Berlin / Homepage Provider/Channel Manager Datev eG / Nürnberg / data processing v. Accounting and tax records
Stefert, Sättele & Partner GmbH / Kelheim / data processing v. wages and taxes BFS Bader, Forster, Schubert / Offenbach / declarations and financial statements ICO Innovative Computer GmbH / Dietz / IT Support
Dataworxx / Bruchköbel / IT Support
Ariane Systems Group / Paris / Check In Kiosk
Cocardis GmbH / Eschborn / Provision of KK readers / billing turnover Orderbird AG / Berlin /Bereitstellung KK-Lesegeräte / Billing and cash bookings