Data Protection Statement
Data Protection Statement
- Data protection at a glance
The following provides a simple overview of what happens with your personal data when you visit our website. Personal data means all the information by which you can be personally identified. You can find detailed information about data protection from the Data Protection Statement provided under this text.
Data capture on our website
Who is responsible for data capture on this website?
Data on this website is processed by the website operator. The operator’s contact details are given in the Legal Information for this website.
How do we capture your data?
Firstly, your data is captured when you enter it. This could be data that you enter in a contact form, for example.
Other data is automatically captured by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time when the page was accessed). This data is captured automatically as soon as you enter our website.
What do we use your data for?
Some data is collated so that we can make sure that the website functions without errors. Other data may be used to analyse your user behaviour.
What rights do you have when it comes to your data?
You have the right at all times to be given, free of charge, information about the origin, recipients and purpose of your stored personal data. You also have a right to demand rectification, restriction or erasure of such data. For this, or if you have any questions about data protection, you can contact us at any time at the address provided in the ‘Legal Information’. Furthermore, you have a right to complain to the competent supervisory authority.
In addition, you have the right, under certain circumstances, to demand the restriction of processing of your personal data. You can find more details of this in the Data Protection Statement under “Right to restriction of processing”.
Analysis tools and third-party supplier tools
When you visit our website, your surfing behaviour may be statistically evaluated. This is done primarily using cookies and with analysis programs. Your surfing behaviour is generally analysed anonymously; this surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. You will find detailed information in the following Data Protection Statement.
You can object to this analysis. We will inform you about possibility for objection in this Data Protection Statement.
- General notes and mandatory information
The operators of these pages take the protection of your personal data very seriously. We treat your personal data as confidential and in line with the statutory data protection regulations and this Data Protection Statement.
When you use this website, certain personal data is collated. Personal data means the information by which you can be personally identified. This Data Protection Statement explains which data we collate and what we use it for. It also explains how and for what purpose this is done.
We would also point out that data transmission within the internet (e.g. communicating by e-mail) may be vulnerable to security loopholes. It is not possible to fully protect data from access by third parties.
Information about the data controller
The controller for data processing on this website is:
Hotel Restaurant Sonne
Telephone: +49 (0)781-93216-0
The controller is the natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of personal data (such as name, e-mail addresses or similar).
Revocation of your consent to data processing.
Many data processing operations are only possible if you give your express consent. You may cancel any consent you may have given at any time. You merely need to notify us by e-mail. The legality of the data processing carried out until cancellation of consent is not affected by your cancellation.
Right to object to data collation in particular cases and to direct marketing (Art. 21 GDPR).
If data processing is carried out on the basis of point (e) or (f) of Article 6(1), GDPR, you have the right at any time to object, on grounds relating to your particular situation, to processing of your personal data, including profiling based on those provisions. The legal basis in each case for such processing is provided in this Data Protection Statement. If you make such an objection, we will cease to process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims (objection under Art. 21 (1), GDPR).
If your personal data is processed for direct marketing purposes, your have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object, your personal data will then no longer be used for direct marketing purposes (objection under Art. 21 (2), GDPR).
Right to complain to the competent supervisory authority
In the event of violations of the GDPR, the data subjects have a right to complain to a supervisory authority, especially in the member state of your usual place of residence, your workplace or the place where the violation is alleged to have occurred. The right to complain exists irrespective any other administrative or statutory legal remedy.
Right to data portability
You have the right to have data that we automatically process on the basis of your consent or in fulfilment of a contract handed to yourself or a third party in a standard machine-readable format. If you request the direct transmission of data to another controller, this is only done in so far as it is technically feasible.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries, for example, that you send to us as the website operator, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser address line changes from “http:/” to “https:/” and the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data that you forward to us cannot be read by third parties.
Information, blocking, erasure and rectification
Within the valid statutory provisions, you have the right at any time to be provided free of charge with information about your stored personal data, where it came from, who received it and the purpose of the data processing and, if applicable, to the rectification, blocking or erasure of such data. For this, or if you have any further questions about personal data, you can contact us at any time at the address provided in the ‘Legal Information’.
Right to restriction of processing
You have the right to demand the restriction of processing of your personal data. For this, you can contact us at any time at the address provided in the ‘Legal Information’. You have a right to restriction of processing in the following cases:
- If you think that your personal data stored by us is incorrect, we generally need time to verify this. While this is being verified, you have the right to demand the restriction of processing of your personal data.
- If your personal data was/is being processed illegally, you may demand restriction of data processing instead of erasure.
- If we no longer need your personal data, but you require it for the establishment, exercise or defence of legal claims, you have the right to demand restriction of the processing of your personal data instead of erasure.
- If you have submitted an objection under Art. 21 (1), GDPR, your and our interests must be mutually considered. Pending verification of whose interests are overriding, you have the right to demand the restriction of processing of your personal data.
If you have restricted the processing of your personal data, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.
- Data capture on our website
Websites often use “cookies”, as they are called. Cookies do not cause any damage on your computer and do not contain viruses. Cookies are used to make our website safer, more user-friendly and more effective. Cookies are small text files that are placed on your computer and stored by your browser.
Most of the cookies used by us are “session cookies”. They are automatically deleted once your visit is over. Other cookies remain on your terminal until you delete them. These cookies allow us to recognise your browser next time you visit us.
You can set your browser in such a way that you are informed about the placing of cookies and only allow cookies in individual cases, accept cookies in certain cases or generally exclude them, and activate the automatic deletion of cookies when you close your browser. Deactivating cookies may restrict the functionality of this website.
Cookies that are essential for executing electronic communication processes or for the provision of certain functions required by you (such as shopping basket function) are stored on the basis of point (f) of Art. 6 (1) GDPR. The website operator has a justified interest in the storage of cookies for the technically error-free, optimised provision of its services. If other cookies (such as cookies to analyse your surfing behaviour) are stored, these are treated separately in this Data Protection Statement.
Server Log Files
The provider of the website automatically collates and stores information in server log files which your browser automatically forwards to us. This information is:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of server request
- IP address
This data is not combined with other data sources.
The data is captured on the basis of Art. 6 (1) (f), GDPR. The website operator has a justified interest in the technically error-free presentation and optimisation of its website – and the server log files must be captured for this.
Inquiry by e-mail, telephone or fax
If you contact us by e-mail, telephone or fax, your inquiry including all the personal data associated with it (name, inquiry) is stored and processed by us so that we can handle your query. We do not pass this data on without your consent.
This data is processed on the basis of Art. 6 (1) (b), GDPR, if your query is connected to the fulfilment of a contract or if it is necessary for carrying out pre-contractual measures. In all other cases, processing is subject to your consent (Art. 6 (1) (a), GDPR) and/or on our justified interests (Art. 6 (1) (f) GDPR) as we have a justified interest in the effective handling of the queries sent to us.
The data sent to us by you in contact inquiries remains with us until you ask us to delete it, revoke your consent to its storage or there is no longer any purpose for data to be stored (e.g. once we have completely dealt with your inquiry). Mandatory statutory provisions – especially statutory retention periods – are not affected by this.
- Analysis tools and advertising
This website uses functions provided by the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses what we call “cookies”. These are text files that are stored on your computer and which allow your use of the website to be analysed. The information generated by the cookie about the use of this website is generally transmitted to one of Google’s servers in the USA and stored there.
Google Analytics cookies are stored and this analysis tool is used on the basis of Art. 6 (1) (f), GDPR. The website operator has a justified interest in the analysis of user behaviour in order to optimise its web services and its advertising.
We have activated IP anonymisation on this website. This means that your IP address is abbreviated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area before being forwarded to the USA. Only in exceptional cases is the full IP address forwarded to a Google server in the USA and abbreviated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports about website activities and provide further services associated with the use of the website and the internet to the website operator. The IP address forwarded by your browser within Google Analytics is not combined by Google with other data.
You can prevent the storage of cookies by changing the settings on your browser software; however, we must point out that, if you do so, you may not be able to use all the functions of this website in full. In addition, you can prevent the capture of the data generated by the cookie and relating to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in provided here: https://tools.google.com/dlpage/gaoptout?hl=de.
Objection to data capture
You can prevent the capture of your data by Google Analytics by clicking on the following link. An opt-out cookie is set which blocks the capture of your data on future visits to this website: Deactivate Google Analytics.
You will find more information about handling user data at Google Analytics in Google’s data protection statement: https://support.google.com/analytics/answer/6004245?hl=de.
We have concluded a contract with Google concerning order processing and implement the strict requirements laid down by the German data protection authorities in full as regards use of Google Analytics.
Data stored by Google at user and incident level that is linked with cookies, user designations (such as user ID) or advertising IDs (e.g. double-click cookies, Android advertising ID) is anonymised/deleted after 14 months. Details can be viewed by clicking: https://support.google.com/analytics/answer/7667196?hl=de
If you wish to receive the newsletter offered on the website, we need you to give us an e-mail address and information that allows us to check that you are the owner of the specified e-mail address and are happy to receive the newsletter. Further data is not collated or only collated on a voluntary basis. We use this data solely for sending the information requested and do not forward it to third parties.
The data entered in the newsletter registration form is processed solely on the basis of your consent (Art. 6 (1) (a), GDPR). You can cancel your consent to storage of the data and e-mail address and its use for sending the newsletter at any time, e.g. via the “Unsubscribe” link in the newsletter. The legality of the data processing procedures carried out previously is not affected by your cancellation.
The data saved by us for the purpose of sending the newsletter remains with us until you unsubscribe from the newsletter and then deleted. Data that was stored by us for other purposes is not affected by this.
- Plug-ins and tools
This site uses the Google Maps map service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Your IP address must be stored in order to use the Google Maps functions. This information is generally forwarded to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.
Google Maps are used in order to present our website attractively and to allow the places named on our website to be easily located. This represents a justified interest as defined in Art. 6 (1) (f), GDPR.
You will find more information on handling user data in Google’s data protection statement: https://policies.google.com/privacy?hl=de.