Privacy Policy Hotel Bielefelder Hof
Section 1 Information about the collection of personal data
(1)
In the following we will inform you about the collection of personal data through the use of our website. Personal data is all data that can be personally related to you, e.g. name, address, email address, user behaviour.
(2)
In accordance with Art. 4 para. 7 of the EU General Data Protection Regulation (GDPR), the responsible body is:
LFPI Hotels Management Deutschland II GmbH, Am Bahnhof 3, D-33602 Bielefeld, info@bielefelder-hof.de (see our Legal information). You can contact our Data Protection Officer at datenschutz@bielefelder-hof.de
(3)
When you contact us via email or a contact form, we store the data that you share (your email address, your name and telephone number where applicable) in order to respond to your questions. We erase the data received in this context once storage is no longer required, or we restrict processing of the data, if legal retention obligations apply.
(4)
In the event that we engage commissioned service providers for individual functions of our service or would like to use your data for advertising purposes, we will inform you below in detail about the particular processes. We will also state the fixed criteria for retention periods.
Section 2 Your rights
(1)
You have the following rights toward us with regard to the personal data concerning you:
-Right to access,
-Right to amendment or erasure,
-Right to restrict processing,
-Right to object to processing,
-Right to data portability.
(2)
In addition, you have the right to lodge a complaint with a supervisory body for data protection about the processing of
your personal data by us. Section 3 Collection of personal data on visiting our website
(1)
In the event of purely informational use of the website, i.e. when you do not register or otherwise convey information to us, we only collect the personal data that your browser transmits to our server. When you wish to view our website, we collect the following data which is technically required for us to display our website to you and to ensure
stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):
-IP address
-Date and time of the request
-Time zone difference to Greenwich Mean Time
(GMT)
-Content of the request (specific page)
-Access status/HTTP status code
-Volume of data transmitted in each case
-Website that the request comes from
-Browser
-Operating system and its interface
-Language and version of browser software
(2)
In addition to the data mentioned above, we store cookies on your computer when you use our website. Cookies are small text files that are saved on your hard drive assigned to the browser that you are using and through which certain information flows to the page that sets the cookie (us, in this instance). Cookies cannot execute any programmes or
transmit viruses to your computer. They serve to make the website altogether more effective and user-friendly.
(3)
Use of cookies:
a)
This website uses the following types ofcookies, the scope and function of which is explained in the following:
-Transient cookies (see b)
-Persistent cookies (see c)
b)
Transient cookies are automatically erased when you close the browser. In particular, these include session cookies. These store a so-called session ID with which various requests from your browser are assigned to a collective session. This allows your computer to be recognised if you return to our website. Session cookies are erased when you log out or close the browser.
c)
Persistent cookies are automatically erased after a predetermined period of time which may vary depending on the cookie. You can erase cookies in the security settings of your browser at any time.
d)
You can configure your browser settings according to your preferences and refuse to accept third-party cookies or all cookies, for example. Please note that you may not be able to use all of the functions of this website.
e)
We use cookies to be able to identify you in subsequent visits if you have an account with us. Otherwise, you would have to log in again each time you visit. Section 4 Additional functions and services of our website
(1)
Alongside the purely informational use of our website, we offer various services that you can use if you are interested. In general, you have to enter additional personal data that we use to provide the particular service and for which the aforementioned principles of data processing apply.
(2)
We sometimes employ external service providers to process your data. These are carefully selected and commissioned by us, are bound by our instructions and are regularly audited.
(3)
Furthermore, we can forward your personal data to third parties if sale actions, competitions, contract conclusions or other similar services are provided by us in collaboration with partners. You can receive further details when entering your personal data or in the service description below.
(4)
Insofar as our service providers or partners are based in a state outside of the European Economic Area (EEA), we will inform you about the consequences of these circumstances in the service description. Section 5 Objection to or cancellation of processing your data
(1)
If you have given your consent to the processing of your data, you may revoke this at any time. Such a revocation affects the legitimacy of processing your personal data once you have declared it to us.
(2)
Insofar as we base the processing of your personal data on the balancing of interests, you can lodge an objection to
processing. This is the case in particular if processing is not required to fulfil a contract with you, which we will illustrate in the following description of functions. On expressing such an objection, we ask that you provide a statement of reasons as to why we should not process your personal data as we do. In the event of receiving your justified objection, we will review the circumstances and will either cease or adapt the data processing, or demonstrate our compelling and legitimate grounds for continuing processing.
(3)
Naturally, you can object to the processing of your personal data for advertising and data analysis purposes at any time.
You can inform us of your objection to advertising at the following contact details: LFPI Hotels Management Deutschland II GmbH, , Am Bahnhof 3, D-33602 Bielefeld, info@bielefelderhof.de, Tel. +49 (0)521/5282-0, Fax: +49 (0) 521/5282-100.
Section 6 Use of the blog functions
(1)
On our blog, in which we publish different articles on themes related to our activities, you can submit public comments.
Your comment will then be published on the article with your specified username. We recommend using a pseudonym instead of your real name. Entering usernames and email addresses is mandatory, all other information is optional. If you submit a comment, we also save your IP address, which we erase after 2 weeks. Storage is necessary for us in order to be able to defend ourselves against liability claims in the event of the potential publication of illegal content. We
require your email address to contact you if a third party should deem your comment to be illegal. The legal basis is Art. 6 para. 1 sentence 1 lit. b and f GDPR. Comments are not moderated prior to publishing. We reserve the right to
erase comments if they are deemed to be illegal by third parties.
(2)
While writing your comment, you can tick the box for our email service. This allows you to be notified when another user
leaves a comment on the article. We use the so-called double opt-in process for this service, i.e. you receive an email in which you must confirm that you are the owner of this email address and wish to receive these notifications. You may unsubscribe from these notifications at any time by clicking on the link in the email. We store your personal data, including your email address, the time
that you registered for the service and your IP address until you unsubscribe from the information service.
(3)
Our commenting function uses the “Disqus” plug-in which is operated by Big Head Labs Inc., http://www.disqus.com, who are responsible for processing comments (hereinafter: “Disqus”). With Disqus, you can leave a comment on our articles that is stored and shown on our website for as long as the article that you have commented on is on our website, in the event that you do not erase the comment before. You can also use the comment function both as an unregistered guest and as a registered user of Disqus on all websites that use Disqus. In addition, you can log in through your accounts with third-party providers; Facebook, Twitter or Google. By logging in using
the access data of a third-party provider, it will also process your personal data, although we are not aware of the details in this respect. The data collected through the commenting function is made available to us by Disqus. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. Since your personal data is processed in the USA, we have concluded standard data protection clauses. The contact details for the responsible body are: Big Head Labs, Inc., San Francisco, USA. Terms of service: http://helsentencedisqus.com/customer/portal/articles/466260-terms-of-service/ ; Further information on the processing of your personal data can be found in the provider’s Privacy Policy: http://helsentencedisqus.com/customer/portal/articles.466259-privacypolicy. Section
7 Use of our online reservation system
(1)
If you would like to book a hotel room with any other services (e.g. breakfast, additional bed, pets, child’s bed), we use an external service provider to process your data, HotelNetSolutions GmbH, Genthiner Str. 8, D-10785 Berlin,
Tel.: +49 (0)30/770 193 000, Fax: +49 (0)30/770 193 050, Email: info@hotelnetsolutions.de. This company was carefully selected and commissioned by us, it is bound by our instructions and is regularly audited.
(2)
In the event of booking a hotel room online with any other services (e.g. breakfast, additional bed, pets, child’s bed), it is necessary for the conclusion of the contract that you submit the personal data which we require for processing your order. The mandatory details necessary for processing contracts are marked separately, additional details are optional. We process the data that you provide to process your order. In this respect, we may forward your payment data to our house bank. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. b GDPR. You can voluntarily create a customer account by registering, through which we are able to store your data for future bookings. If you create an account, under “My Account”, the data that you provide will be stored revocably. You can always erase all additional data, including your user account, in the customer area. In addition, we can process the data provided by you in order to inform you about other interesting products from our portfolio or to send you emails with technical information. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f GDPR.
(3)
Due to provisions of commercial and tax law, we are obligated to store your address, payment and order data for a period of ten years. However, we restrict processing after two years, i.e. your data is only usedin order to comply with legal obligations.
(4)
To prevent unauthorised access to your personal data by third parties, in particular, financial data, the order process is encrypted using
TLS technology. Section 8
Use of Google Analytics
(1)
This website uses Google Analytics, a web analytics service by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and enable analysis of the use of the website. The
information about your use of this website created by the cookie is usually transferred to a Google server in the USA and stored there. In the event of activating IP anonymisation on this website, your IP address is shortened by Google within the member states of the European Union or in other states signatory to the European Economic Area agreement. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website in order to analyse your use of the website, to compile reports about website activities and to provide the website operator with further services relating to website and Internet use.
(2)
The IP address transmitted by your browser in connection with Google Analytics is not merged with other Google data.
(3)
You can prevent the storage of cookies through a corresponding setting in your browser software; however, please note that in this case, you may not be able to use all of the functions of this website to their full extent. In addition, you can prevent Google from acquiring data created by the cookie and concerning your website usage (including your IP address), as well as the processing of
this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
(4)
This website uses Google Analytics with the “_anonymizeIp()” extension. Your IP address is thereby processed in its shortened form, meaning personal references can be excluded. If a personal reference is assigned to you by the data
collected it is immediately excluded and the personal data promptly erased.
(5)
We use Google Analytics to analyse the use of our website and to be able to regularly improve it. We can improve our service from the statistics obtained and make the website more interesting for you as a user. For exceptional cases
in which personal data is transferred to the USA, Google is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for using Google Analytics is Art. 6 para. 1 sentence 1 lit. f GDPR.
(6)
Details of the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Far: +353 (1) 436 1001. Terms of service: http://www.google.com/analytics/terms/de.html,
Overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html,
and the Privacy Policy: http://www.google.de/intl/de/policies/privacy.
(7)
In addition, this website uses Google Analytics for a cross-device analysis of the flow of visitors, which is performed using a user ID. You can deactivate the cross-device analysis of your use in your customer account under “My data”, “Personal data”.
Section 9 Use of social media plug-ins
(1)
We currently use the following social media plug-ins: Facebook, Google+, Twitter, Pinterest, Tumblr. We use the so-called two-click solution. This means that when you visit our page, in principle, no personal data is forwarded to the
plug-in providers initially. You can recognise the plug-in provider by the mark on the box above its first letter or logo. We offer you the option of communicating directly with the plug-in provider via the button. Only if you click on the marked field and thus activate it does the plug-in provider receive the information that you have
viewed the respective website of our online services. The data specified under Section 3 of this statement is also transmitted. In the case of Facebook and Xing, the IP address is immediately anonymised after collection as directed by
the respective providers in Germany. By activating the plug-ins, your personal data is transmitted to the respective plug-in provider and stored there (for US American providers, in the USA). Since the plug-in provider carries out data
collection specifically via cookies, we recommend that you erase all cookies in the security settings of your browser prior to clicking the grey box.
(2)
We have no influence over the data collected and data processing procedures, nor are we aware of the full extent of data collection, the purposes of processing or the retention periods. We also have no information on the erasure of
collected data by the plug-in provider.
(3)
The plug-in provider stores the data collected about you as a user profile and uses this for the purposes of advertising, market research and/or designing its website in line with demand. Such an analysis takes place in particular (including
for users who aren’t logged in) to display needs-based advertising and to inform other social network users about your activities on our website. You have a right to object to the creation of this user profile. You must address the
respective plug-in provider to exercise this right. Through plug-ins, we offer you the option of interacting with social networks and other users so that we can improve our service and make it more interesting for you as a user.
The legal basis for the use of plug-ins is Art. 6 para. 1 sentence 1 lit. f GDPR.
(4)
Data forwarding takes place regardless of whether you have an account with the plug-in provider and are logged into it. If you are logged in with the plug-in provider, your data that is collected by us is directly assigned to your
existing account with the plug-in provider. When you activate the button and, for example, hyperlink the page, the plug-in provider also stores this information in your user account and publicly shares it with your contacts. We recommend
that you log out regularly after using a social network, in particular, however, prior to activating the button, as you can thereby avoid such an assignment to your profile with the plug-in provider.
(5)
You can obtain further information on purpose and scope of data collection and its processing by plug-in providers in the following privacy policies shared by these providers. There, you can also find additional information on your rights
in this respect and on settings options for protecting your privacy.
(6)
Addresses of the respective plug-in providers and URLs with their privacy policies:
a)Facebook Inc., 1601 S
California Ave, Palo Alto, California 94304, USA;
http://www.facebook.com/policy.php;
further information on data collection:
http://www.facebook.com/help/186325668085084,
http://www.facebook.com/about/privacy/your-info-on-other#applications
and
http://www.facebook.com/about/privacy/your-info#everyoneinfo.
Facebook is subject
to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-USFramework.
b)Google Inc., 1600 Amphitheater Parkway,
Mountainview, California 94043, USA: https://www.google.com/policies/privacy/partners/?hl=de. Google
is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
c)Twitter, Inc., 1355 Market St,
Suite 900, San
Francisco, California 94103, USA;
https://twitter.com/privacy.
Twitter is subject to
the EU-US Privacy Shield,
https://www.privacyshield.gov/EU-US-Framework.
d)Tumblr, Inc., 35 East 21st St.,
10th
Floor, New York, NY 10010, USA;
http://www.tumblr.com/policy/de/privacy.
Section
10 Integration of YouTube videos
(1)
We have integrated YouTube videos into our online service, which are stored onhttp://www.YouTube.com and can be played directly through our website. These are all integrated in “enhanced data protection mode”, meaning that no data about you as a user is transmitted to YouTube if you do not play videos. The data cited in paragraph 2
is only transmitted if you play videos. We have no influence over this transmission of data.
(2)
By visiting the website, YouTube obtains the information that you have viewed the respective subpages of our website. The data specified under Section 3 of this statement is also transmitted. This occurs irrespective of whether YouTube provides a user account that you are logged in to, or you do not have a user account. If you are logged into Google, your data is directly assigned to your account. If you do not want data to be assigned to your profile with YouTube, you must log out before activating the button. YouTube stores your data as a user profile and uses it for advertising purposes, market research and/or designing its website in line with demand. Such an analysis takes place in particular (including for users who are not logged in) to provide needs-based advertising and in order to inform other social network users about your activity on our website. You have the right to object to the creation of this user profile. You must address YouTube to exercise this right.
(3)
You can obtain further information on purpose and scope of data collection and its processing by YouTube in the Privacy Policy. There, you can also find additional information on your rights and settings options for protecting your
privacy:
https://www.google.de/intl/de/policies/privacy. Google
processes your personal data in the USA and is subject to the EU-US Privacy
Shield,
https://www.privacyshield.gov/EU-US-Framework.
Section
11 Integration of Google Maps
(1)
We use the Google Maps service on this website. This allows us to display
interactive maps directly on the website and enables you to use the map
function comfortably.
(2)
By visiting the website, Google obtains the information that you have viewed the respective subpages of our website. The data specified under Section 3 of this statement is also transmitted. This occurs irrespective of whether Google
provides a user account that you are logged in to, or you do not have a user account. If you are logged into Google, your data is directly assigned to your account. If you do not want data to be assigned to your profile with Google,
you must log out before activating the button. Google stores your data as a user profile and uses it for advertising purposes, market research and/or designing its website in line with demand. Such an analysis takes place in particular (including for users who are not logged
in) to provide needs-based advertising and in order to inform other social network users about your activity on our website. You have the right to objectto the creation of this user profile. You must address Google to exercise this right.
(3)
You can obtain further information on purpose and scope of data collection and its processing by plug-in providers in the privacy statements of the providers. There, you can also find additional information on your rights in this respect and on settings options for protecting your privacy:
http://www.google.de/intl/de/policies/privacy.
Google processes your personal data in the USA and is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Section 12 Use of Google AdWords Conversion
(1)
We use the Google AdWords service in order to draw attention to our attractive services on external websites with the help of advertising media (so-called Google AdWords). In relation to the advertising campaign data, we can ascertain how successful individual advertising measures are. We are thereby pursuing the interest of showing you adverts that are of interest to you, making our website
more interesting for you and obtaining a fair calculation of advertising costs.
(2)
This advertising media is delivered by Google via so-called “Ad Server”. To do this, we use Ad Server cookies, through which certain performance parameters can be measured, like the overlay of advertisements or clicks by the user. If you
access our website via a Google advert, a cookie is stored on your PC by Google AdWords. These cookies normally become invalid after 30 days and should not serve to identify you personally. Usually the unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions) and opt-out information (indicators that the user no
longer wants to be approached) are stored to the cookie as analysis values.
(3)
These cookies enable Google to recognise your Internet browser. If a user visits certain website pages of an AdWords customer and the cookie saved on their computer has not yet expired, Google and the customer are able to recognise that the user has clicked on the advert and has been forwarded to this page. Every AdWords customer is assigned another cookie. Thereby, cookies cannot be tracked through
the websites of AdWords customers. We do not collect and process any personal data in the aforementioned advertising measures ourselves. We only receive statistical analyses provided by Google. With these analyses, we can recognise which of the advertising measures used are particularly effective. We do not receive additional data from the use of advertising media, in particular we
cannot identify the user on the basis of this information.
(4)
Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of data that is collected by Google through use of these tools and we are informing you in accordance with our level of knowledge: by integrating AdWords Conversion, Google obtains the information that you have viewed the relevant part of our website or clicked on our advert. Insofar as you are registered with a Google service, Google can assign the visit to your account.
Even if you are not registered with Google or are not logged in, the possibility remains that the provider may learn of your IP address and store it.
(5)
You can prevent participation in this tracking procedure in various ways:
a)
through a relevant setting in your browser software – in particular, the rejection of third-party cookies, ensures that you do not receive adverts from third-party providers;
b)
by deactivating the cookies for conversion tracking whereby your browser adjusts accordingly so that cookies from the domain www.googleadservices.com are blocked, https://www.google.de/settings/ads, whereby this setting is erased if you erase your cookies; c) by deactivating the adverts concerning interests from providers which is part of the self-regulatory campaign “About Ads”, via the link http://www.aboutads.info/choices, whereby this setting is erased if you erase your cookies; d) by permanent deactivation
in your Firefox, Internet Explorer or Google Chrome browser under the link http://www.google.com/settings/ads/plugin. Please
note that in this case, you may not be able to use all of functions of this website.
(6)
The legal basis for processing your data is Art. 6 para. 1 sentence 1 lit. f GDPR. You can find further information on data protection at Google here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de/html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org. Google is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
End of Privacy Policy.
