Data privacy

Information on data processing pursuant to Art. 13, 14 GDPR

We are pleased that you are visiting our homepage and thank you for your interest. Dealing with our customers and interested parties is a matter of trust. The trust placed in us is very important to us and therefore the importance and obligation to handle your data with care and to protect it from misuse.

To ensure that you feel safe and comfortable when visiting our website, we take the protection of your personal data and its confidential treatment very seriously. Therefore, we act in accordance with the applicable legal provisions on the protection of personal data and data security. With these notes on data protection, we would therefore like to inform you about when we store which data and how we use it - naturally in compliance with the applicable legislation.

AHORN Hotels & Resorts specifically follows the EU General Data Protection Regulation and the current Federal Data Protection Act (BDSG). When using the internet, we follow the Telecommunications Telemedia Data Protection Act (TTDSG) of the Federal Republic of Germany to protect your personal data. In the following, we explain what information we collect during your visit to our websites and how it is used.

Overview

Name and address of the person responsible

General information on data processing

Collection, processing and use of personal data at AHORN Hotels & Resorts

Your stay at the hotel

Online booking via the website

Online booking via other websites

Sending emails before arrival

Contact form/e-mail contact

Chatbot

Table reservation

Wellness booking

Purchase of a voucher via the website

Newsletter service

Support, advice and advertising for corporate clients

Online evaluation

Your online application

Passing on your data to a credit agency

Provision of the website and creation of log files

Use of cookies

Cookie consent with CCM19 cookie

myhotelshop

Use of Google services

Use of social media plugins

Protection of minors

Rights of the data subject

Right to complain to a supervisory authority

Security

Updating and modification

Name and address of the person responsible

The responsible person within the meaning of the GDPR and other national data protection laws of the member states as well as other data protection regulations is:

AHORN Management GmbH

Tauentzienstr. 11

D-10789 Berlin

Germany

Tel. : +49 (0) 30 315 950 73

Mail: info@ahorn-hotels.de

Name and address of the data protection officer

Mr Andreas Thurmann

DataSolution LUD GmbH

Isarstr. 13

D-14974 Ludwigsfelde

Germany

Mail: mail@hoteldatenschutz.de

 

 

General information on data processing

 

Scope of the processing of personal data

As a matter of principle, we collect and use personal data of our users only insofar as this is necessary for the provision of a functional website as well as our contents and services. The collection and use of our users' personal data regularly takes place only with the user's consent. An exception applies in cases where it is not possible to obtain prior consent for actual reasons and the processing of the data is permitted by legal regulations.

Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing operations of personal data, Art. 6 (1) lit. a GDPR serves as the legal basis. When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures. If processing of personal data is necessary for compliance with a legal obligation to which our company is subject (e.g. national registration laws), Art. 6 (1) c GDPR serves as the legal basis. If processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 (1) lit. f GDPR serves as the legal basis for the processing.

Data deletion and storage period

The personal data of the data subject shall be deleted or blocked as soon as the purpose of the storage ceases to apply. Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a necessity for the continued storage of the data for the conclusion or fulfilment of a contract.

 

Collection, processing and use of personal data at AHORN Hotels & Resorts

 

Description and scope of data processing

The object of the hotel group is the operation of several hotels in Germany with joint responsibility. The collection, processing and use of data is carried out for the purpose listed.

AHORN Management GmbH, Tauentzienstr. 11, 10789 Berlin, Germany is responsible for the implementation of central services such as reservations, marketing and personnel management. To increase our services, we manage all data received in our central hotel software within the hotel group as well as in the CRM system. The responsible body is the hotel in which the booking is made. The respective booking data can only be viewed by the responsible body. Access to a guest's master data is used together, e.g. to make a reservation for another hotel at a later date, to rebook or to carry out marketing activities in a centralised manner. For this purpose, central services such as reservations and marketing access this data.

Legal basis for data processing

The legal basis for the processing of the data is the conclusion of an accommodation contract with the guest. The transmitted data is stored in our hotel software and used for the execution of the contract.

Groups of persons, data and categories of data concerned:

The following categories of personal data are collected, processed and used in order to fulfil the stated purpose:

• Guest data (esp. first and last name, address data, contact data, reservation data, guest requests, billing data)
• Other customer data (especially address data, billing and performance data)
• Interested party data (esp. interest in accommodation, address data)

Recipients to whom the data may be disclosed:

Data may be communicated to the following recipients:

• Internal units involved in the execution and fulfilment of the respective business processes (e.g. hotels of the hotel group, central reservations, accounting, sales & marketing, IT organisation)
• Public bodies that receive data on the basis of statutory regulations (e.g. law enforcement agencies, authorities from the public sector)
• External contractors according to Art. 28 GDPR (service companies)
• Other external bodies (e.g. credit institutions, companies insofar as the persons concerned have declared their written consent or transmission is permissible for predominant legitimate interest)

Purpose of the data processing

The main purpose of the collection, processing or use of personal data is the management, care and hospitality of guests within the framework of the accommodation contract.

Duration of storage

The legislator has enacted a variety of retention obligations and periods. After these periods have expired, the corresponding data and data records are routinely deleted or anonymised if they are no longer required for the fulfilment of the contract. For example, the commercial or financial data of a completed business year are deleted in accordance with legal regulations after a further ten years, unless longer retention periods are prescribed or required for justified reasons. Reservation documents can be destroyed after 6 years, the special registration form after one year at the end of the year.

Possibility of objection

You have the option to object to the processing of your data at any time. We have set up the e-mail address widerruf@ahorn-hotels.de for this purpose.

 

Your stay at the hotel

Description and scope of data processing

During the stay in our hotel, we collect and process information about guests in our hotel software. Data of the following groups of persons can be stored:

• Guests, business partners, companies
• Interested parties and potential interested parties (e.g. for requests for proposals)

The data collected may include:

• First and last name
• Date of birth
• Contact details (phone, mobile, email address)
• Address, company if applicable
• Nationality
• Identification and passport data (for foreign guests on the registration form)
• Service data, billing data,
• Data on payment processing (e.g. credit card data)
• Video recordings for the collection of evidence in cases of vandalism, burglary, robbery or other criminal offences

If you have made the booking on a hotel portal, with a tour operator or in a travel agency, your data will be forwarded to us by these providers in order to fulfil the concluded contract.

The city / municipality of a hotel may levy a cultural tax / visitor's tax, i.e. a tax that is charged for paid accommodation. In this case, the guest is the tax debtor. As an accommodation provider, we collect the tax from the guest and pay it to the city/municipality. As a guest, you can exempt yourself from the tax if the stay is for professional reasons. In this case, we collect your personal data and data on your stay in a separate declaration according to the specifications of the city / municipality.

Purposes and legal basis of data processing

We use the personal data provided by you exclusively for the fulfilment of the agreed contractual services, i.e. the management, care and hospitality of guests within the framework of the accommodation contract.

We store your data in our hotel software and in reservation, billing and payment applications. In addition to your personal data, this may include billing data about food and beverages, telephone calls made from the room and/or other hotel-specific services.

Hotels are obliged by the registration regulations (§ 29 ff. Bundesmeldegesetz) to have their guests fill out a registration form on site or online. In addition to the guest's first and last name and address, this form also contains information about the guest's birthday, nationality and family members travelling with the guest. We must also ask foreign guests for their identity card number. All other information is voluntary.

If services are used, as a rule only such data is collected as is required for the provision of the services. If further data is collected, it is voluntary information. Personal data is processed exclusively to fulfil the requested services and to protect our own legitimate business interests in accordance with Art. 6 Para. 1 lit. f GDPR.

Data will be used for the following purposes:

• Registration on arrival and departure incl. completion of the registration form
• The handing out of the room card for yourself and fellow travellers
• Implementation of requested services
• Processing of the payment modalities
• Accounting and reporting within the framework of the cultural levy / visitor's tax
• Storage of preferences for future hotel stays

Contact details of our guests may be used for advertising purposes at a later date. The use of the e-mail address requires your consent.

Processing of data for purposes other than those mentioned will only take place insofar as such processing is permissible pursuant to Art. 6 (4) GDPR and is compatible with the original purposes of the contractual relationship. We will inform you about these processing operations prior to any such further processing of your data.

Recipients to whom the data may be disclosed:

• Public bodies that receive data due to legal regulations (e.g. city administration or municipal administration, law enforcement agencies, authorities from the public sector)
• Internal units involved in the execution and fulfilment of the respective business processes (e.g. administration, accounting, sales & marketing, IT organisation)
• Associated hotels (master data in PMS)
• External contractors according to Art. 28 GDPR (service companies)
• Other external bodies (e.g. credit institutions)

Data deletion

The legislator has enacted a variety of retention obligations and periods. After these periods have expired, the corresponding data and data records are routinely deleted if they are no longer required for the fulfilment of the contract. For example, the commercial or financial data of a completed financial year are deleted in accordance with legal regulations after a further ten years, unless longer retention periods are prescribed or required for justified reasons. Reservation documents can be destroyed after 6 years, the registration form after one year at the end of the quarter. If data is not affected by this, it will be deleted without being requested if the aforementioned purposes cease to apply.

Video recordings are stored for 72 hours.

Possibility of objection

You have the option to object to the processing of your data at any time. We have set up the e-mail address widerruf@ahorn-hotels.de for this purpose.

 

 

Online booking via the website

 

Description and scope of data processing

Our website offers the possibility to book rooms and arrangements for each AHORN hotel. If you take advantage of this option, the data entered in the input mask will be transmitted to us and stored. These data are: Salutation, first and last name, e-mail address, telephone, address, number of fellow travellers, expected time of arrival, wishes, method of payment, date and time of reservation.

 

We use payment service providers to process the purchase. You can select the payment method yourself. We would like to point out that your payment data may be transmitted to servers of the payment service providers in the USA and processed there.

 

If you make an online booking from our websites, this is done through the online reservation system cbooking of HotelNetSolutions GmbH, Genthiner Str. 8, 10785 Berlin, Germany. All booking data entered by you is transmitted in encrypted form.

 

Legal basis for data processing

The legal basis for the processing of the data is the conclusion of an accommodation contract.

 

To increase our services, we manage all data received in our central CRM software within AHORN Hotels & Resorts. The responsible body is the hotel in which the booking is made. The respective booking data can only be viewed by the responsible party. Access to a guest's master data is used together, e.g. to make a reservation for another hotel at a later date, to rebook or to carry out marketing activities in a centralised manner. For this purpose, central services such as reservation and marketing access this data. The legal basis for processing the data is our legitimate interest in data processing within the framework of central administration and use of the data of our customers and business partners within the hotel group.

 

Purpose of the data processing

The processing of the personal data from the input mask serves us solely to process the booking request and to handle the payment transaction.

 

Duration of storage

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of a contractual relationship, we will delete the data received as soon as national, commercial law, statutory or contractual retention requirements have been fulfilled. The transmitted data will be stored in our hotel software and used for the execution of the contract. If there is no contractual relationship, we will delete the data after one year at the end of the year.

 

Possibility of objection

You have the option to object to the processing of your data at any time. We have set up the e-mail address widerruf@ahorn-hotels.de for this purpose. We would like to point out that in the event of an objection, the booking cannot be completed or the conversation cannot be continued.

 

 

Online booking via other websites

 

Description and scope of data processing

AHORN Hotels & Resorts gives interested parties the opportunity to book rooms and arrangements for each AHORN hotel via hotel reservation portals (third-party providers). If you take advantage of this option, the data entered in the input mask will be transmitted to us and stored to the extent permitted by the respective hotel reservation portal in accordance with its own data protection regulations. Data can be: Salutation, first and last name, e-mail address, telephone, address, number of fellow travellers, expected time of arrival, wishes, payment data (credit card).

 

Legal basis for data processing

The legal basis for the processing of the data is the conclusion of an accommodation contract.

 

To increase our services, we manage all data received in our central CRM software within AHORN Hotels & Resorts. The responsible body is the hotel in which the booking is made. The respective booking data can only be viewed by the responsible party. Access to a guest's master data is used together, e.g. to make a reservation for another hotel at a later date, to rebook or to carry out marketing activities in a centralised manner. For this purpose, central services such as reservation and marketing access this data. The legal basis for processing the data is our legitimate interest in data processing within the framework of central administration and use of the data of our customers and business partners within the hotel group.

 

Purpose of the data processing

The processing of the personal data from the input mask serves us solely to process the booking request and to handle the payment transaction.

 

Duration of storage

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of a contractual relationship, we will delete the data received as soon as national, commercial law, statutory or contractual retention requirements have been fulfilled. The transmitted data will be stored in our hotel software and used for the execution of the contract. If there is no contractual relationship, we will delete the data after one year at the end of the year.

 

AHORN Hotels & Resorts has no influence on the storage periods of the respective hotel reservation portal.

 

Possibility of objection

You have the option to object to the processing of your data at any time. We have set up the e-mail address widerruf@ahorn-hotels.de for this purpose. Please note that in the event of an objection, the booking cannot be completed or the conversation cannot be continued.

 

 

Sending emails before arrival

 

Description and scope of data processing

Before the arrival of our guests, we would like to send a welcome email to those from whom we have received an email address as part of the booking. A few days before arrival, the guest will receive a reservation overview and information about the reservation and available additional services by email.

 

When we send these e-mails, we do so via the RIMS platform of MP-Network GmbH, Anemonenweg 5, D-85586 Poing, Germany.

 

Legal basis for data processing

The legal basis for the processing of the data is our legitimate interest in the processing of data within the framework of the booking, i.e. the contract initiation relationship.

 

Purpose of the data processing

By contacting us, we would like to give the guest important information about their stay in advance and give them the opportunity to book additional services quickly and conveniently.

 

Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose.

 

Possibility of objection

The enquirer has the possibility to object to the processing of his/her personal data at any time. We have set up the e-mail address widerruf@ahorn-hotels.de for this purpose.

 

 

Contact form/e-mail contact

 

Description and scope of data processing

Our website contains a contact form that can be used to contact us electronically. If you use this option, the data entered in the input mask will be transmitted to us and stored. These data are: Hotel, title, first and last name, e-mail address, the request as mandatory fields and the telephone number as voluntary information.

 

Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored.

 

Legal basis for data processing

The legal basis for the processing of the data is firstly our legitimate interest in the processing of the data within the framework of the establishment of contact on the part of the enquirer. If the contact is aimed at the conclusion of a contract, the additional legal basis for processing is in the context of a contract initiation relationship or contractual relationship.

 

Purpose of the data processing

The processing of the personal data from the input mask serves us solely to process the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data.

 

The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

 

Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is deemed to have ended when it is clear from the circumstances that the matter in question has been conclusively clarified.

 

If the contact is a pre-contractual relationship (offer or reservation request), the transmitted data will also be stored in our hotel software and used to execute the contract. If there is no contractual relationship, we delete the data after one year at the end of the year.

 

Possibility of objection

You have the option to object to the processing of your data at any time. We have set up the e-mail address widerruf@ahorn-hotels.de for this purpose. We would like to point out that in the event of an objection, the conversation cannot be continued or we cannot create any offers etc.. All personal data stored in the course of contacting you will be deleted in this case.

 

 

Chatbot

 

Description and scope of data processing

There is a chatbot on our website which can be used for electronic contact. If you use this option, data will be transmitted to us and stored. These data are: First and last name, telephone number, messenger ID, IP address, profile picture and message history.

 

If you contact us from our websites via the chatbot, this is done via the system provider MessengerPeople GmbH, Seidlstrasse 8, D-80335 Munich, Germany. All information you enter is transmitted in encrypted form. An active account with the respective provider is required to use the messenger service. You can find more information in the data protection information of the system provider.

 

Legal basis for data processing

The legal basis for the processing of the data is firstly our legitimate interest in the processing of the data within the framework of the establishment of contact on the part of the enquirer. If the contact is aimed at the conclusion of a contract, the additional legal basis for processing is in the context of a contract initiation relationship or contractual relationship.

 

Purpose of the data processing

The processing of the personal data serves us solely to process the contact. The other personal data processed during the sending process serve to prevent misuse of the chatbot and to ensure the security of our information technology systems.

 

Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

 

If the contact is a pre-contractual relationship (offer or reservation request), the transmitted data will also be stored in our hotel software and used to execute the contract. If there is no contractual relationship, we delete the data after one year at the end of the year.

 

Possibility of objection

You have the option to object to the processing of your data at any time. We have set up the e-mail address widerruf@ahorn-hotels.de for this purpose. We would like to point out that in the event of an objection, the conversation cannot be continued or we cannot create any offers etc.. All personal data stored in the course of contacting you will be deleted in this case.

 

 

Table reservation

 

Description and scope of data processing

On our website there is the possibility to reserve a table for our restaurants in selected hotels. If you take advantage of this option, the data entered in the input mask will be transmitted to us. These data are: First and last name, e-mail address, table reservation details (day, time, number of people, restaurant), remarks.

 

When you make table reservations from our websites, this is done through the online reservation system of resmio GmbH, Gneisenaustr. 66 - 67, D-10961 Berlin, Germany. All order data entered by you is transmitted in encrypted form. You can find more information in the data protection information of the system provider.

 

Legal basis for data processing

The legal basis for processing the data is our legitimate interest in data processing. If the person making the reservation gives their consent to receive news about the restaurant in the future, this consent serves as the legal basis for us.

 

Purpose of the data processing

The processing of personal data is solely for the purpose of table reservations.

 

Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

 

Possibility of objection

You have the option to object to the processing of your data at any time. For this purpose, we have set up the e-mail address widerruf@ahorn-hotels.de.

 

 

Wellness booking

 

Description and scope of data processing

On our website there is the possibility to reserve our wellness offers. If you take advantage of this option, the data entered in the input mask will be transmitted to us. These data are: Salutation, first and last name, e-mail address, telephone number, booking details (day, time, application, price).

 

If you make bookings for our wellness offers from our websites, this is done through the online booking system Termin2go of Termin2go GmbH, Radinkendorf 20, 15848 Beeskow. All order data entered by you is transmitted in encrypted form. You can find more information in the data protection information of the system provider www.termin2go.com/de-DE/datenschutzhinweise.

 

Legal basis for data processing

The legal basis for processing the data is our legitimate interest in processing the data.

 

Purpose of the data processing

The processing of personal data is solely for the purpose of booking massage treatments.

 

Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

 

Possibility of objection

You have the option to object to the processing of your data at any time. For this purpose, we have set up the e-mail address widerruf@ahorn-hotels.de.

 

 

Purchase of a voucher via the website

 

Description and scope of data processing

On our website there is the possibility to buy vouchers. If you take advantage of this option, the data entered in the input mask will be transmitted to us and stored. These data are: Salutation/company, first and last name, date of birth, e-mail address, address, telephone/fax, voucher value, personalisation of the voucher (personal details for the recipient), shipping options, payment data via third-party providers.

 

If you make a voucher purchase from our websites, this is done through the online ordering platform of FIRMEDIA®.com - Webservices, Zum Ritzhagen 5, D-34508 Willingen, Germany. All order data entered by you will be transmitted in encrypted form. You can find more information in the data protection information of the system provider.

 

We use payment service providers to process the purchase. You can select the payment method yourself. We would like to point out that your payment data may be transmitted to servers of the payment service providers in the USA and processed there.

 

Legal basis for data processing

The legal basis for the processing of the data is the conclusion of a purchase contract.

 

Purpose of the data processing

The processing of the personal data from the input mask serves us solely to process the voucher purchase and to handle the payment transaction.

 

Duration of storage

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of a contractual relationship, we will delete the data received as soon as national, commercial law, statutory or contractual retention requirements have been fulfilled.

 

Possibility of objection

You have the option to object to the processing of your data at any time. We have set up the e-mail address widerruf@ahorn-hotels.de for this purpose.

 

 

Newsletter service

 

Description and scope of data processing

On our website you have the option of subscribing to our newsletter service in various ways. If you take advantage of this option, the data entered in the input mask (e-mail address) will be transmitted to us and stored.

 

If we otherwise receive an email address where the recipient clearly tells us that they would like to receive our newsletter, we will collect their details via the input mask on our website.

 

Legal basis for data processing

The legal basis for the processing of the data is the existence of the recipient's consent. This is ensured by a double-opt-in procedure.

 

Purpose of the data processing

The processing of personal data is solely for the purpose of sending individual newsletters.

 

Duration of storage

The data will be deleted as soon as the newsletter service is cancelled.

 

Possibility of objection

As a recipient of a newsletter, you have the option of objecting to the processing of your data or revoking your consent at any time. You can unsubscribe from the newsletter service with each newsletter. In addition, we have set up the e-mail address abmelden@ahorn-hotels.de. Please let us know the e-mail address here.

 

 

Support, advice and advertising for corporate clients

 

Description and scope of data processing

For the support, advice and advertising of corporate customers, we collect and use the contact person, telephone number and postal address in addition to the business partner or potential business partner. We obtain the information from various sources, either through an enquiry (e-mail or telephone), but also via events, trade fairs, business cards that our sales employees receive, etc.

 

Legal basis for data processing

The legal basis for the processing of the data is firstly our legitimate interest in the processing of data in the context of contacting the enquirer. If the contact is aimed at the conclusion of a contract, the additional legal basis for processing is in the context of a contract initiation relationship or contractual relationship.

 

To increase our services, we manage all data received in the central CRM module within AHORN Hotels & Resorts. The responsible entity is the hotel with which a business contact exists. Central services such as sales, banqueting, reservations and marketing access this data. The legal basis for processing the data is our legitimate interest in data processing within the framework of central administration and use of the data of our customers and business partners within the hotel group.

 

Purpose of the data processing

We use this contact data exclusively for our own purposes and for the needs-based design of our own sales activities within the framework of the statutory provisions.

 

Duration of storage

In principle, no deletion period is foreseen. However, if our sales department has not had any contact with the company contact within 3 years, the sales department will decide whether the contact person of the company contact will be deleted.

 

If the contact is a pre-contractual relationship (offer or reservation request), the transmitted data will also be stored in our hotel software and used to execute the contract. If there is no contractual relationship, we delete the data after one year at the end of the year.

 

Possibility of objection

As a company contact, you have the option to object to the processing of your data at any time. We have set up the e-mail address widerruf@ahorn-hotels.de for this purpose. All personal data of the contact person that has been stored for the business partner will be deleted in this case.

 

 

Online evaluation

 

Description and scope of data processing

Former guests can leave a review at our hotel after check-out. For this purpose, we would like to send you an email within 14 days after departure to ask you to submit a hotel review on HolidayCheck. Each review can be published anonymously if you wish. If you did not feel comfortable in one of our hotels, we would like to take the opportunity to contact you.

 

If you, as a former guest, take advantage of this online evaluation option, your data will be stored in the evaluation mask. These data are: E-mail address as well as voluntary details such as first name, last name, language and the details of the rating.

 

Legal basis for data processing

The legal basis for processing the data is our legitimate interest.

 

Purpose of the data processing

The purpose of the hotel evaluation is to communicate and summarise opinions of hotel guests via our website, so that interested parties can form their own opinion about our performance and services. In addition, the results serve our internal quality management.

 

Duration of storage

The data will not be deleted.

 

Possibility of objection and removal

It is possible to have the publication of the review deleted at any time (right to be forgotten). To do this, please contact HolidayCheck. You can find more information in the data protection information.

 

 

Your online application

 

Description and scope of data processing

If you provide us with personal data as part of the application process, this will be divided into the following data types and data categories for collection, processing and / or use:

 

• Personal data (first and last name, date of birth, address, school-leaving qualification)
• Communication data (telephone, mobile, fax, e-mail address)
• Information (from third parties, e.g. credit agencies or public directories)
• Data on assessment and evaluation in the application procedure
• Data on education (school, vocational training, civilian/ military service, studies, doctorate)
• Data on your professional career to date, training and work references
• Information on other qualifications (e.g. language skills, PC skills, voluntary work)
• Application photo
• Details of the desired salary
• Application history

 

If you make an online application from our websites, this is done through the softgarden online application system of softgarden e-recruiting GmbH, Tauentzienstraße 14, D- 10789 Berlin, Germany. All booking data entered by you is transmitted in encrypted form. softgarden has undertaken to handle your transmitted data in accordance with data protection regulations. It takes all organisational and technical measures to protect your data.

 

We use the personal data you provide exclusively for processing your application for the advertised position. Your personal data will only be disclosed to persons involved in the application process. All employees entrusted with data processing are obliged to maintain the confidentiality of your data. We do not pass on your personal data to third parties unless you have consented to the passing on of data or we are obliged to pass on data due to legal provisions and/or official or court orders.

 

If an applicant fits the profile of another job advertisement published by a company affiliated with us, we will be happy to forward the application documents. For this purpose, we will obtain the applicant's consent beforehand. The data will otherwise be used exclusively for processing the application by the specialist department and for communication.

 

Legal basis for data processing

The legal basis for processing the data is the contract initiation relationship or the conclusion of a contract with the user. For the forwarding of the application documents to an affiliated company, we will obtain consent beforehand.

 

Purpose of the data processing

The processing of the personal data from the input mask serves us solely to process the application.

 

Duration of storage

Your data will be automatically deleted within six months after completion of the specific application procedure. This does not apply insofar as legal provisions oppose deletion, which require further storage for the purpose of evidence or you have expressly consented to longer storage. There will be no notification of the deletion of the data.

 

Possibility of objection

The user has the option to object to the processing of his or her personal data at any time. We have set up the e-mail address widerruf@ahorn-hotels.de for this purpose. We would like to point out that in the event of an objection, the application cannot be completed or the conversation cannot be continued.

 

 

Passing on your data to a credit agency

 

Description, scope and purpose of data processing

In the event of a credit risk (name, address, e-mail address, details of the company and, if applicable, contract and receivables data), we transmit your data to IHD Gesellschaft für Kredit und Forderungsmanagement mbH, Augustinusstr. 11 B, 50226 Frechen, and, if applicable, to other cooperating credit agencies, for the purpose of credit assessment and to check the deliverability of the specified address and for the purpose of debt collection processing.

 

For the purpose of deciding on the establishment, implementation or termination of the contractual relationship, we also collect or use automatically generated probability values, the calculation of which may include address data.

 

Legal basis for data processing

The legal basis for this transfer is Art 6 Iit. b GDPR and Art 6 Iit. f GDPR. Transfers on the basis of Art. 6 Iit. f GDPR may only take place insofar as this is necessary to safeguard the legitimate interests of our company and the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, are not overridden.

 

Possibility of objection

Detailed information on our contractual partner, the IHD, within the meaning of Art 14 GDPR, i.e. the business purpose, the purpose of the data storage there, the legal basis, the data recipients of the IHD, the right to self-disclosure and the right to deletion and correction as well as profiling can be found at www.ihd.de/datenschutz.

 

 

Provision of the website and creation of log files

 

Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:

 

• Information about the browser type and version used
• The operating system of the user
• The IP address of the user
• Date and time of access
• Websites from which the user's system accesses our website
• Websites that are accessed by the user's system via our website

 

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user. Personal user profiles cannot be formed. The stored data is only evaluated for statistical purposes.

 

Legal basis for data processing

The legal basis for the temporary storage of the data and the log files is our legitimate interest in data processing in the context of the provision of our Internet pages.

 

Purpose of the data processing

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

 

The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

 

These purposes are also our legitimate interest in processing data to provide our internet pages.

 

Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

 

In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated so that an assignment of the calling client is no longer possible.

 

Possibility of objection and removal

The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.

 

 

Use of cookies

 

Description and scope of data processing

Cookies are small files that enable us to store specific information related to you, the user, on your computer while you are visiting one of our websites. Cookies help us to determine the frequency of use and the number of users of our website, as well as to make our offers as convenient and efficient as possible for you.

 

We also use cookies on our website that enable an analysis of the user's surfing behaviour. The following data can be transmitted in this way: Search terms entered, frequency of page views, use of website functions. The user data collected in this way is pseudonymised by technical precautions. Therefore, it is no longer possible to assign the data to the calling user. The data is not stored together with other personal data of the user. When accessing our website, the user is informed about the use of cookies for analysis purposes and his or her consent to the processing of personal data used in this context is obtained. In this context, a reference to this data protection declaration is also made.

 

Legal basis for data processing

The legal basis for the processing of personal data using technically necessary cookies is our legitimate interest in data processing.

 

The legal basis for the processing of personal data using cookies for analysis purposes is the existence of a relevant consent of the user.

 

Purpose of the data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change. The user data collected through technically necessary cookies are not used to create user profiles.

 

Analysis cookies are used to improve the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus constantly optimise our offer.

 

Duration of storage, possibility of objection and elimination

Cookies are stored on the user's computer and transmitted to our site by the user. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

 

Below we describe in more detail which cookies we use on the site.

These cookies allow us to tailor the features and content of the site to you by storing your preferences. For example, these cookies can be used to store your user data in our forum or to make a language selection. Furthermore, they may be used to offer interactive information, such as viewing our virtual catalogues or videos.

 

Overview of the cookies used

When operating this website, we use various cookies as described above. In the Consent Manager, you can call up information on the cookies used for the respective services.

 

 

Cookie consent with CCM19 cookie

Our website uses the cookie consent technology of CCM19 Cookie to obtain your consent to the storage of certain cookies in your browser and to document this in a data protection compliant manner. The provider of this technology is Papoo Software & Media GmbH - Dr. Carsten Euwens. Bornschein, Auguststr. 4, 53229 Bonn, Germany.

 

When you enter our website, a CCM19 cookie is stored in your browser, which stores the consents you have given or the revocation of these consents. This data is not shared with CCM19.

 

The collected data will be stored until you request us to delete it or delete the CCM19 cookie yourself, or until the purpose for storing the data no longer applies. Mandatory legal retention periods remain unaffected.

 

The CCM19 cookie consent technology is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 p. 1 lit. c GDPR in conjunction with § 25 TTDSG.

 

 

myhotelshop

Our websites use the "myhotelshop" service to check availability and bookings. The provider of "myhotelshop" is myhotelshop GmbH, Flossplatz 6, 04107 Leipzig, Germany.

 

We use the MHS tracking pixel from myhotelshop on our booking confirmation page. For this purpose, we use cookies from myhotelshop in accordance with the "Cookies" section. The integration of the MHS tracking pixel enables us to determine the conversion rate, i.e. how many website visitors have made a transaction in order to improve our service.

 

We process your data with the help of myhotelshop for the purpose of optimising our website and for marketing purposes based on your consent in the Consent Manager pursuant to Art. 6 para.1 lit a GDPR in conjunction with. § 25 TTDSG.

 

The processing is carried out for the purposes of measuring the web audience and the demand-oriented design of websites. The data is processed by myhotelshop to fulfil its contractual obligations with us and deleted on request, unless there are legal obligations to retain the data.

 

For further information on the purpose and scope of processing by the provider, please refer to the privacy policy of myhotelshop.

 

 

Use of Google services

 

GoogleTagManager

We use GoogleTagManager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. GoogleTagManager is used to manage website tags through one interface and allows us to control the precise integration of services on our website

 

This allows us to flexibly integrate additional services to evaluate user access to our website.

 

The use of GoogleTagManager is based on your consent in the Consent Manager in accordance with Art. 6 para. 1 lit a GDPR in conjunction with. § 25 TTDSG. If services are started from the Google Tag Manager that require your consent, you grant us this consent by setting the use of cookies (cookie banner / Consent Manager), with which you can also declare your revocation at any time with effect for the future in accordance with Art. 7 Para. 3 GDPR.

 

The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in Google's privacy policy.

 

 

Google Analytics

Our website uses Google Analytics, a web analysis service provided by Google Inc ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookies about the use of this website by the users is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymisation is activated on this website, however, Google will truncate the user's IP address beforehand within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. IP anonymisation is active on this website.

 

We process your data with the help of Google Analytics for the purpose of optimising our website on the basis of your consent pursuant to Art. 6 para. 1 lit a GDPR in conjunction with. § 25 TTDSG. Your consent. You give your consent by setting the use of cookies (cookie banner / Consent Manager), with which you can also declare your revocation at any time with effect for the future in accordance with Art. 7 Para. 3 GDPR.

 

The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in Google's privacy policy.

 

On behalf of the operator of this website, Google will use this information for the purpose of evaluating the use of the website by users, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

 

Users may refuse the use of cookies by selecting the appropriate settings on their browser, however please note that if you do this you may not be able to use the full functionality of this website. Users may also prevent the collection of data generated by the cookie and relating to their use of the website (including their IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. As an alternative to the browser add-on or within browsers on mobile devices, please click this link to prevent the collection of data by Google Analytics within this website in the future. This will place an opt-out cookie on your device.

 

 

Google DoubleClick

We have integrated components of DoubleClick by Google on our website. DoubleClick is a brand of Google, under which mainly special online marketing solutions are marketed to advertising agencies and publishers. DoubleClick by Google transfers data to the DoubleClick server with each impression as well as with clicks or other activities.

 

Each of these data transfers triggers a cookie request to the browser of the data subject. If the browser accepts this request, DoubleClick sets a cookie in your browser.

 

DoubleClick uses a cookie ID, which is required to process the technical procedure. The cookie ID is required, for example, to display an advertisement in a browser. DoubleClick can also use the cookie ID to record which advertisements have already been displayed in a browser in order to avoid duplicate placements. Furthermore, the cookie ID enables DoubleClick to record conversions. Conversions are recorded, for example, if a DoubleClick ad has previously been displayed to a user and the user subsequently makes a purchase on the advertiser's website using the same internet browser.

 

A DoubleClick cookie does not contain any personal data, but may contain additional campaign identifiers. A campaign identifier serves to identify the campaigns with which you have already been in contact on other websites. As part of this service, Google obtains knowledge of data that Google also uses to generate commission statements. Among other things, Google can track that you have clicked on certain links on our website. In this case, your data will be passed on to the operator of DoubleClick, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

 

We process your data with the help of the Double-Click cookie for the purpose of optimising and displaying advertising on the basis of your consent pursuant to Art. 6 Para.1 lit a GDPR in conjunction with. § 25 TTDSG. You give your consent by setting the use of cookies (cookie banner / Consent Manager), with which you can also declare your revocation at any time with effect for the future in accordance with Art. 7 para. 3 GDPR.

 

The cookie is used, among other things, to serve and display user-relevant advertising and to create reports on advertising campaigns or to improve them. Furthermore, the cookie is used to avoid multiple displays of the same advertisement. Each time you call up one of the individual pages of our website on which a DoubleClick component has been integrated, your browser is automatically prompted by the respective DoubleClick component to transmit data to Google for the purpose of online advertising and the settlement of commissions. There is no legal or contractual obligation to provide your data. If you do not give us your consent, it will be possible to visit our website without restriction, but not all functions may be fully available.

 

The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in Google's privacy policy.

 

 

Google AdWords Remarketing

We have integrated Google AdWords Remarketing on our website. Google AdWords Remarketing is a service provided by Google Ireland Limited to display targeted advertising to users. Google AdWords Remarketing uses cookies and other browser technologies to analyse user behaviour and recognise users.

 

Google AdWords Remarketing collects information about visitor behaviour on various websites. This information is used to optimise the relevance of advertising. Furthermore, Google AdWords Remarketing delivers targeted advertising based on behavioural profiles and geographical location. Your IP address and other identifiers such as your user agent are transmitted to the provider.

 

If you are registered with a Google Ireland Limited service, Google can associate the visit with your account. Even if you are not registered with Google Ireland Limited or have not logged in, it is possible that the provider will find out and store your IP address and other identification features. In this case, your data will be passed on to the operator of Google Ads, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

 

We process your data using Google AdWords Remarketing for the purpose of advertising, analysis, conversion tracking and remarketing. This information is used to optimise the relevance of advertising. Furthermore, Google Ads Remarketing delivers targeted advertising based on behavioural profiling and geographic location.

 

The data processing is based on your consent in accordance with Art. 6 Para. 1 lit a GDPR in conjunction with. § 25 TTDSG . You give your consent by setting the use of cookies (cookie banner / Consent Manager), with which you can also declare your revocation at any time with effect for the future in accordance with Art. 7 Para. 3 GDPR.

 

The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in Google's privacy policy.

 

 

Google AdWords Conversation

We have integrated Google AdWords Conversation on our website. Google AdWords Conversation is a conversion marketing service provided by Google Ireland Limited. The service helps website operators to convert website visitors into paying customers.

 

The date and time of the visit, IP address, browser type, browser language, cookie ID, ads clicked on, web request, success rates of advertising campaigns and number of purchases made through ads are collected and processed by Google.

 

If you are registered with a Google Ireland Limited service, Google can associate the visit with your account. Even if you are not registered with Google Ireland Limited or have not logged in, it is possible that the provider will find out and store your IP address and other identification features. In this case, your data will be passed on to the operator of Google AdWords Conversation, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

 

We process your data using Google AdWords Conversation for the purpose of advertising, analysis and conversion tracking. This information is used to optimise the relevance of advertising.

 

The data processing is based on your consent in accordance with Art. 6 Para. 1 lit a GDPR in conjunction with. § 25 TTDSG . You give your consent by setting the use of cookies (cookie banner / Consent Manager), with which you can also declare your revocation at any time with effect for the future in accordance with Art. 7 Para. 3 GDPR.

 

The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in Google's privacy policy.

 

 

Google Ads Conversation Tracking

We have integrated Google Ads conversation tracking on our website. Google Ads Conversation Tracking is a service provided by Google Ireland Limited to track user conversions by mobile phone, for example when a customer clicks on a phone number on a contact page to make a call from their mobile device. User data is collected for cross-device tracking.

 

The date and time of the visit, IP address, browser type, browser language, cookie ID, ads clicked on, web request, success rates of advertising campaigns and number of purchases made through ads are collected and processed by Google.

 

If you are registered with a Google Ireland Limited service, Google can associate the visit with your account. Even if you are not registered with Google Ireland Limited or have not logged in, it is possible that the provider will find out and store your IP address and other identification features. In this case, your data will be passed on to the operator of Google Ads, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

 

We process your data using Google Ads conversation tracking for the purpose of advertising, analytics, conversion and phone tracking. This information is used to optimise the relevance of advertising.

 

The data processing is based on your consent in accordance with Art. 6 Para. 1 lit a GDPR in conjunction with. § 25 TTDSG. You give your consent by setting the use of cookies (cookie banner / Consent Manager), with which you can also declare your revocation at any time with effect for the future in accordance with Art. 7 Para. 3 GDPR.

 

The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in Google's privacy policy.

 

 

Google CDN

We use Google CDN to properly deliver the content of our website. Google CDN is a service of Google Ireland Limited, which acts as a content delivery network (CDN) on our website.

 

A CDN helps to provide content of our online offer, in particular files such as graphics or scripts, more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Google CDN.

 

The Content Delivery Network is used for the purpose of optimising our website on the basis of your consent pursuant to Art. 6 para. 1 lit a GDPR in conjunction with. § 25 TTDSG. You give your consent by setting the use of cookies (cookie banner / Consent Manager), with which you can also declare your revocation at any time with effect for the future in accordance with Art. 7 Para. 3 GDPR.

 

The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google CDN.

 

 

Google Fonts

We use Google Fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a service to provide fonts for our online offering. To obtain these fonts, we provide them on our own web servers.

 

The use of Google Fonts is based on our legitimate interests, i.e. interest in a uniform provision and optimisation of our online offer.

 

 

Google reCAPTCHA

We have integrated components of Google reCAPTCHA on our website. Google reCAPTCHA is a service of Google Ireland Limited and enables us to distinguish whether a contact request originates from a natural person or is automated by means of a program. When you access this content, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. Furthermore, Google reCAPTCHA records the user's browsing time and mouse movements in order to distinguish automated requests from human ones. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Google reCAPTCHA.

 

The service is used on the basis of your consent in the Consent Manager in accordance with Art. 6 para. 1 lit a GDPR in conjunction with. § 25 TTDSG for the protection during the transmission of forms.

 

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google reCAPTCHA.

 

 

Use of social media plugins

 

The use of social media plugins is in the interest of an appealing presentation and expansion of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

 

Use of Facebook plugins

Plugins of the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA are integrated on our pages. You can recognise the plugins by the logo on our page. You can find an overview of the plugins here.

 

We have no influence on the data collection and further processing by Facebook. Furthermore, it is not apparent to us to what extent, where and for how long the data is stored, to what extent Facebook complies with existing deletion obligations, what evaluations and links are made with the data and to whom the data is passed on. If you would like to avoid Facebook processing personal data that you have transmitted to us, please contact us by other means.

 

You can find more information on this in Facebook's privacy policy. If you do not want Facebook to be able to assign your visit to our pages to your user account, please log out of your respective user account!

 

Facebook fan page

On our Facebook fan page at: https://de-de.facebook.com/AHORNhotels/ we use plugins from the provider Facebook.com, which are provided by the company Facebook Inc., 1601 S. California Avenue, Palo Alto, CA 94304 in the USA.

 

By using the fan page, data is forwarded to the Facebook servers, which contain information about your visits to our fan page. For logged-in users, this results in the usage data being assigned to their personal Facebook account. As soon as you actively use the Facebook plugin as a logged-in Facebook user, e.g. by clicking on the "Facebook" logo or using the comment function, this data is transferred to your Facebook account and published. You can only avoid this by logging out of your Facebook account first.

 

We do not know exactly what data Facebook stores and uses. As a user of the fan page, you must therefore expect that Facebook also stores your actions on the fan page without gaps.

 

In all other respects, the General Terms of Use of Facebook Ireland Limited, Hanover Reach, 5-7 Hanover Quay, Dublin 2, Ireland apply.

 

The legal basis for this data processing is Art. 6 para. 1 lit. a, f) GDPR.

 

Every person depicted as well as other third parties have the possibility to object to the publication of their personal data (photos) at any time. We have set up the e-mail address widerruf@ahorn-hotels.de for this purpose. The right to object applies in particular to the publication of pictures for the future.

 

It can always happen that we accidentally publish pictures of people where no consent has been given. If publication is not desired, we will immediately do everything possible to comply with your right. In the case of group pictures, we reserve the right to distort faces.

 

Instagram fan page

Our Instagram fan page https://www.instagram.com/ahornhotels/ is a service of the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA. On Instagram, we like to publish photos and information of our events and activities as well as of selected people. The photos may include staff, guests, photo models but also third parties.

 

By using the fan page, data is forwarded to the Instagram servers, which contain information about your visits to our fan page. For logged-in users, this results in the usage data being assigned to their personal Instagram account. As soon as you actively use the Instagram plugin as a logged-in Instagram user, e.g. by clicking on the "Instagram" logo, this data is transferred to your Instagram account. You can only avoid this by logging out of your Instagram account first.

 

When you visit the Instagram page, Facebook records your IP address, among other things. Together with other information that Facebook receives through cookies, Facebook, as the operator of the Instagram page, provides statistical information about the use of this Instagram page (so-called page insights). These are aggregated data that show how users interact with the page. These page insights may be based on personal data collected by Facebook in connection with a user's visit to or interaction with our Instagram page and its content.

 

We can use Page Insights to anonymously evaluate reach, page views, time spent on video posts, actions (likes, comments, sharing of posts) and by age, gender and location (as indicated by users in their respective Instagram profiles). In doing so, settings can be made for the evaluation of the reach or corresponding filters can be set with regard to the selection of a time period, the consideration of a specific post as well as demographic groupings (e.g. female, 20-30 years old). This data is anonymised, aggregated and abstracted. These settings therefore do not allow us to draw any conclusions about individuals. The evaluation serves to optimally design the offer on the Instagram page for the purpose of public relations.

 

The legal basis for this data processing is Art. 6 para. 1 lit. a, f) GDPR.

 

We expressly point out that Facebook stores the data of the users of its services (e.g. personal information, IP address, etc.) and may also use this data for business purposes. You can find more information about Facebook's data processing on Instagram in Instagram's privacy policy.

 

Every person depicted as well as other third parties have the possibility to object to the publication of their personal data (photos) at any time. We have set up the e-mail address widerruf@ahorn-hotels.de for this purpose. The right to object applies in particular to the publication of images for the future.

 

It can always happen that we accidentally publish pictures of people where no consent has been given. If publication is not desired, we will immediately do everything possible to comply with your right. In the case of group pictures, we reserve the right to distort faces.

 

Twitter

Our website uses social plugins ("plugins") of the social network Twitter, offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.

 

By using the fan page, data is forwarded to the Twitter server, which contains information about your visits to our fan page. For logged-in users, this means that the usage data is assigned to their personal Twitter account. As soon as you actively use the Twitter plugin as a logged-in Twitter user, e.g. by clicking on the "Twitter" logo, this data is transferred to your Twitter account. You can only avoid this by logging out of your Twitter account first.

 

Content such as images, videos or texts and buttons belong to the plugins with which you can announce your liking of content, subscribe to the authors of the content or our posts. If you are a member of the Twitter platform, Twitter can assign the call-up of the above-mentioned content and functions to your profile. We can also integrate scipts and measures that allow us to use marketing and statistical functions in Twitter.

 

The legal basis for this data processing is Art. 6 para. 1 lit. a, f) GDPR.

 

Every person depicted as well as other third parties have the possibility to object to the publication of their personal data (photos) at any time. We have set up the e-mail address widerruf@ahorn-hotels.de for this purpose. The right to object applies in particular to the publication of pictures for the future.

 

It can always happen that we accidentally publish pictures of people where no consent has been given. If publication is not desired, we will immediately do everything possible to comply with your right. In the case of group pictures, we reserve the right to distort faces.

 

If you do not want Twitter to collect information about you via our website, you must log out of Twitter before visiting our website or activate the opt-out on Twitter.

 

You can find more information on how Twitter handles user data in Twitter's privacy policy.

 

YouTube video

We have integrated YouTube Video on our website. YouTube Video is a component of the video platform of YouTube, LLC, on which users can upload content, share it over the internet and receive detailed statistics.

 

YouTube Video allows us to integrate content from the platform into our website.

 

YouTube Video uses cookies and other browser technologies to analyse user behaviour, recognise users and create user profiles. This information, such as IP address, device information, referrer URL, videos watched, IP address, information about the terminal device used and videos watched, is used, among other things, to analyse the activity of the content listened to and to create reports. If a user is registered with YouTube, LLC, YouTube Video can associate the videos played with the profile.

 

When you access this content, you connect to servers of YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street Dublin 4 Ireland, where your IP address and, if applicable, browser data such as your user agent are transmitted.

 

The service is used on the basis of your consent in accordance with Art. 6 para. 1 lit a GDPR in conjunction with. § 25 TTDSG for the purpose of integrating and displaying image films on our websites and evaluating the retrieval of the films. You give your consent by setting the use of cookies (cookie banner / Consent Manager), with which you can also declare your revocation at any time with effect for the future in accordance with Art. 7 para. 3 GDPR.

 

The concrete storage period of the processed data cannot be influenced by us, but is determined by YouTube, LLC. Further information can be found in the privacy policy for YouTube Video.

 

LinkedIn

The "LinkedIn button" is used on this website. When you access this website, your browser establishes a connection to servers of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (hereinafter referred to as "LinkedIn").

 

When you visit our pages, a direct connection is established between your browser and the LinkedIn server via the plugin. LinkedIn thereby receives the information that you have visited our site with your IP address. If you click the LinkedIn button while you are logged into your LinkedIn account, you can link the content of our pages on your LinkedIn profile. This enables LinkedIn to assign the visit to our pages to your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by LinkedIn. You can find more information on this in LinkedIn's privacy policy.

 

Xing

The "XING Button" is used on this website. When you access this website, your browser establishes a connection to servers of XING SE, Dammtorstraße 30, 20354 Hamburg, Germany ("XING").

 

When you visit our pages, a direct connection is established between your browser and the XING server via the plugin. LinkedIn thereby receives the information that you have visited our site with your IP address. If you click on the XING button while logged into your XING account, you can link the content of our pages on your XING profile. This enables XING to assign the visit to our pages to your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by LinkedIn.

You can find more information on this in XING's privacy policy.

 

 

Protection of minors

This service is mainly aimed at adults. We do not currently market any specific areas for children. Accordingly, we do not knowingly collect age-identifying information, nor do we knowingly collect personal information from children under the age of 16. However, we caution all visitors to our website under the age of 16 not to disclose or provide any personally identifiable information through our service. In the event that we discover that a child under the age of 16 has provided us with personal information, we will delete the child's personal information from our files to the extent technically feasible.

 

 

Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

 

• You have a right to information about the personal data stored about you, about the purposes of processing, about any transfers to other bodies and about the duration of storage.

• If data is inaccurate or no longer necessary for the purposes for which it was collected, you may request that it be corrected, erased or restricted from processing. Where provided for in the processing procedures, you may also consult your data yourself and correct them if necessary.

• Should grounds against the processing of your personal data arise from your particular personal situation, you may, insofar as the processing is based on a legitimate interest, object to it. The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.

• If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object to the processing for direct marketing or profiling purposes, the personal data concerning you will no longer be processed for these purposes.

 

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

 

If you have any questions about your rights and how to exercise them, please contact:

 

AHORN Head Office	Data Protection Officer
AHORN Management GmbH Tauentzienstr. 11 D-10789 Berlin Germany   Mail: info@ahorn-hotels.de	DataSolution LUD GmbH Isarstr. 13 D-14974 Ludwigsfelde Germany   Mail: mail@hoteldatenschutz.de

 

 

Right to complain to a supervisory authority

As a data subject, without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence or of the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes data protection.

 

The supervisory authority to which the complaint is submitted will inform you of the status and outcome of your complaint, including the possibility of a judicial remedy.

 

You can find more information on the website of the Federal Commissioner for Data Protection and Freedom of Information. Follow the link.

 

 

Security

AHORN Hotels & Resorts uses technical and organisational security measures in accordance with Art. 32 GDPR to protect your data managed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorised persons. Our security measures are continuously improved in line with technological developments. Access is only possible for a few authorised persons and persons who are obliged to provide special data protection and who are involved in the technical, administrative or editorial care of data.

 

 

Updating and modification

We reserve the right to change, update or amend this privacy notice at any time. Any revised information on data processing will only apply to personal data collected or modified after the effective date.

 

 

Status | January 2023