In the context of running our website, we receive and process personal data.
I. The data controller is
Designhotel Laurichhof
Hauptplatz 4
01796 Pirna
Owner: Annette Katrin Seidel
Contact details: info@laurichhof.de
Tel. +49 3501 77090-77
Fax +49 3501 77090-99
Contact details of data protection officer: Datenschutz@laurichhof.de
II. General information about data processing
1. Scope of processing of personal data
In principle, we only process our users’ personal data to the extent that this is necessary to provide a functioning website and our content and services. We primarily strive to only collect personal data after obtaining the user’s consent; in all other respects we are contractually or legally entitled to collect data.
1.1. Log files
Every time our website is accessed, our system automatically collects data and information from the requesting computer system.
This involves the following data being collected:
(1) Information about the browser type and version used
(2) The user's operating system
(3) The user's Internet service provider
(4) The user’s IP address
(5) Date and time of access
(6) Website referring the user’s system to our website
(7) Websites accessed by the user's system from our website
The data are also stored in log files by our provider.
1.1.1. Legal basis for data processing
The legal basis for the temporary storage of data and log files is Article 6 (1f) of the GDPR.
1.1.2. Purpose of the data processing
The system needs to temporarily store the IP address to allow the website to be delivered to the user’s computer. To this end, the user's IP address must be stored for the duration of the session.
The log files are stored to ensure that the website functions. The data are also used for statistical analysis, to improve the website and to ensure that our information technology systems are secure. These purposes also form the basis of our legitimate interest in the processing of data under Article 6 (1f) of the GDPR. In this context, the data are not analysed for marketing purposes.
1.2.1. Bookings / reservation
If you book or reserve rooms via our website or by telephone, we collect personal data from you. We only collect the data you provide us with. In the case of the website, data are collected via the web forms which are displayed. If you make bookings or reservations by telephone, we will request the same information from you during the conversation.
1.2.2. Gutscheine
Wenn Sie einen Gutschein über unsere Website erwerben, dann erheben wir personenbezogene
Daten von Ihnen. Wir erheben grundsätzlich nur die Daten, die Sie uns
zur Verfügung stellen. Die Erhebung der Daten erfolgt über die angezeigten Eingabemasken.
Die Datenerhebung erfolgt ausschließlich zu dem Zweck, den mit Ihnen geschlossen
Vertrag erfüllen zu können.
1.2.3.
The legal basis for the data collection is Article 6 (I) (2) of the GDPR
1.2.4.
In the case of a booking or a reservation, clicking the relevant window or making your call, respectively, suffices to create a contractual bond between you and us. This also results in contractual obligations for us. In order to fulfil these, we require your personal data. Without this information, we would not even be able to connect the contract to a contracting party.
1.3. Newsletter
If you have subscribed to our newsletter, your specified e-mail address will be processed. This is required to provide you with the newsletter. The collection of these data is based on your consent.
1.4. Feedback Formular
Wenn Sie unser Feedbackformular nutzen, haben Sie die Möglichkeit Ihren Namen und Ihre E-Mail-Adresse mit anzugeben, allerdings ist dies für die Nutzung der Feedbackfunktion nicht von Nöten. Wenn Sie uns die Informationen hinterlassen, können wir mit Ihnen Kontakt aufnehmen und Ihr Feedback nochmals besprechen. Die Datenerhebung beruht in diesem Fall auf Ihrer Einwilligung.
III. Use of cookies
Our website uses cookies. Cookies are text files that are stored in the Internet browser, or stored on the user's computer system by the Internet browser. When a user visits a website, a cookie may thus be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be identified unambiguously when the website is re-accessed.
We use cookies to make our website more user-friendly. Some functions of our website thus require the browser making the request to be re-identified when you move to a new page.
The cookies used by our website store or transmit information on whether data in forms have been successfully sent.
As the user, you also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transfer of cookies. Cookies which have already been saved can be deleted at any time. This can also be carried out automatically. If cookies are disabled for our website, it may not be possible to use all the functions of the website to the full.
IV. Recipient(s)
Within our company, employees only have access to your data if they are responsible for processing your specific query. Your data are only transferred to external third parties if you have consented thereto, if this is necessary to fulfil your contract or if we are legally obliged to do so.
We do not operate our website on our own servers, but instead use the service of an external web host. Our website also requires maintenance and checking. To this end, we use the services of an external service provider. While carrying out its activities, this provider has the possibility to access your personal data. This possibility is neither desired nor specifically intended by any of the parties, but cannot be avoided for technical reasons.
Web host
Netcup GmbH
Daimlerstraße 25
D-76185 Karlsruhe
Germany
IT-Support
4koepfe Borsdorf, Tetzl GbR
Gerichtsstraße 4
01796 Pirna
Germany
If you pay by credit card, payment transactions are also processed by an external service provider. This company is certified in accordance with the PCI DSS.
Google Maps
This website uses the Google Maps API to visually display geographic information.
Google Maps is a service provided by
Google LLC,
1600 Amphitheatre Parkway,
Mountain View, California 94043, USA
When Google Maps is used, information about the use of this website may be transferred to Google in the USA. This includes your IP address and the address / address of the starting point that is entered as part of the route planning function. If you access a page on our website that contains Google Maps, your browser creates a direct connection with the Google servers. Google sends the map content straight to your browser, which integrates it into the page. For this reason, we have no control over the scope of data collected by Google in this manner.
Under the following link, Google explains the scope of the data collected from you, in some cases including personal data:
https://policies.google.com/privacy?hl=en-gb&gl=en-gb
We do not have any control over the further processing and use of the data by Google, and can thus accept no responsibility for this.
If you do not wish Google to collect, process or use data about you via our website, you can disable JavaScript in your browser settings. If you do so, however, you will not be able to use the map display.
For the purpose and scope of data collection and the further processing and use of the data by Google, and for your rights in this regard and options for adjusting the settings in order to protect your privacy, please see the Google privacy policy and the Google Maps terms of service at:
https://www.google.com/intl/en_GB/help/terms_maps.html (links accessed on 25 May 2018)
Google Analytics
On the basis of our legitimate interests in improving and analysing our website pursuant to Article 6 (1f) of the GDPR, this website uses the “Google Analytics” service provided by
Google LLC,
1600 Amphitheatre Parkway,
Mountain View, California 94043, USA
This service (Google Analytics) uses “cookies” – text files that are stored on your device. The information collected by the cookies is usually sent to a Google server in the USA and stored there.
Google LLC complies with European data protection law and is certified under the Privacy Shield Framework:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
This website uses IP anonymisation. Within the member states of the EU and the European Economic Area and in the other states parties to the agreement, users’ IP addresses are truncated. In individual cases only, Google first transmits the full IP address to a server in the USA, where it is truncated. This truncation means that the IP address can no longer be used to identify you. The user’s IP address, as transmitted by the browser, is not brought into combination with other data stored by Google.
As part of the external processing agreement which we, the website operator, have concluded with Google Inc., the latter uses the information collected to compile an analysis of website use and website activity, and carries out services related to Internet use.
The data collected by Google on our behalf are employed to analyse the way our website is used by individual users, e.g. to create reports about activity on the website and thus improve our online offerings.
You have the option to prevent cookies from being stored on your device by adjusting the appropriate settings in your browser. If your browser does not accept cookies, there is not guarantee that you will be able to use all the functions of this website without restriction.
In addition to this, you can use a browser plugin to prevent the information collected by cookies (including your IP address) from being sent to and used by Google Inc. The following link takes you to the plugin in question:
https://tools.google.com/dlpage/gaoptout?hl=de
Here, you will also find more information about data usage by Google LLC:
Data collected by Google Partners:
https://policies.google.com/privacy/partners?hl=de
Settings for ads you are shown:
https://adssettings.google.de/authenticated
Use of cookies in ads:
https://policies.google.com/technologies/ads?hl=de
V. Duration of storage
In principle, your data will only be stored for as long as is necessary to fulfil a specific request. However, due to statutory retention periods we may be obliged to store them for longer.
Your IP address will be deleted after 7 days. After that period, we will only use an anonymised form of your IP address for our statistical analysis.
If you have subscribed to our newsletter, we will store your e-mail address until you withdraw your consent.
When we receive data from you in the context of bookings and reservations, the duration of their storage depends on how the process develops. In principle, we will only retain your data for the time they are required to fulfil or to process your contract. For example, after you have stayed at your hotel, with no disruptions, we no longer need your data to fulfil the contract. However, even in this case, we are sometimes required to keep your data for longer periods due to statutory retention periods.
Statutory retention periods
1. Pursuant to Section 14b of the German Value Added Tax Act (UStG), we are obliged to keep a duplicate of the invoices which we issue to you for 10 years.
This retention period starts at the end of the calendar year in which the invoice is issued.
2. Pursuant to Article 147 III of the German Fiscal Code (AO), we must comply with a 10-year retention period for books and records, inventories, annual accounts, management reports, the opening balance sheet, any work instructions and other organisational documents required for your understanding, accounting documents and the documents defined in Article 15 (1) and Article 163 of the Union Customs Code.
3. Pursuant to Section 147 III of the AO, we must comply with a 6-year retention period for any commercial or business letters we receive, reproductions of the commercial or business letters sent and other documents to the extent that these are of importance for taxation.
The retention periods in 2. and 3. start at the end of the calendar year in which the last entry was made in the book, the inventory, the opening balance sheet, the annual accounts or the management report; in which the commercial or business letter was received or sent or in which the accounting document was produced; or in which the records were made or the other documents created
4. In exceptional cases, in order to preserve evidence, a 30-year retention period may be required. This is based on Section 195 ff. of the German Civil Code (BGB).
After the respective deadline, we will erase or destroy your data.
VI. Transfer to third countries – automated decision-making
In addition to this, your data will only be sent to third countries after obtaining your consent. Automated decision-making, including but not limited to profiling, shall not take place.
VII. Rights of the data subject
As a data subject, you have the following rights:
1. The right of access pursuant to Article 15 of the GDPR, subject to the restrictions of Sections 34 and 35 of the Federal Data Protection Act (BDSG).
2. The right to rectification pursuant to Article 16 of the GDPR
3. The right to erasure pursuant to Article 17 of the GDPR, subject to the restrictions of Sections 34 and 35 of the BDSG
4. The right to restriction of processing pursuant to Article 18 of the GDPR
5. The right to object pursuant to Article 21 of the GDPR
6. The right to data portability conform to Article 20 of the GDPR
7. The right to lodge a complaint with the competent data protection supervisory authority pursuant to Article 77 of the GDPR in conjunction with Article 19 of the BDSG
8. If we collect your data on the basis of your consent, you may withdraw your consent at any time. This can be done in writing and by electronic means using the controller’s address.