Data controller within the scope of privacy law, specifically the EU General Data Protection Regulation (GDPR):
Olivia Höfling
Hotel Landhaus Christl
Sonnenfeldweg 11
D-83707 Bad Wiessee
Tel.: +49 (0)8022 1880890
info@landhauschristl.de
Your Rights
You can exercise the following rights:
- request information about any personal data we hold and process about you,
- request rectification of any inaccuracies within the personal data we hold about you,
- request deletion of your personal data from our systems,
- restrict data processing, in cases where we are not allowed to delete your data entirely due to applicable law,
- revoke your consent to data storage and processing,
- request data transfer, in case you have agreed to data processing or have signed a contract with us.
You have the right to revoke your consent at any time.
You can file a complaint with your responsible regulatory authority, should you feel that we have violated your privacy rights.
Scope of Data Processing by Data Controller and Third Parties
Personal data is processed within the scope of this privacy policy only. Your personal information will not be disclosed to third parties for other than the specified purposes. We may disclose your personal data to third parties if
- you have expressly given consent,
- it is required to fulfill our contract with you,
- it is required to fulfill a legal requirement,
- it ensures our legitimate interest and there is no reason to presume any predominant protectable interest from your side against disclosure.
In cases where data is transferred to third countries, this happens within the scope of legal or contractual permissions and if special prerequisites are met according to art. 44 GDPR and subsequent articles. Specifically, data is processed based on guarantees and official recognition of the applicable data protection level matching the EU (e.g. “Privacy Shield” for the USA).
Deletion and Suspension of Data
We uphold the principles of data reduction and data economy. Therefore, your personal information is stored only as long as it is required for achieving the purposes described herein or as is mandated by law. After the particular purpose ceases or the statutory terms expire, all date is routinely deleted or suspended according to regulations.
Acquisition of General Information During a Visit to our Website
When accessing our website, general information is recorded automatically. This information (server log files) contains, among others, your web browser type, the operating system in use, the domain name of your internet service provider and similar data. This is information does not enable us to make any conclusion about you personally.
This data is technically required, to deliver the requested content of websites correctly and are obligatory when using the internet. They are processed for the following purposes:
- ensuring a working connection with the website is established,
- ensuring proper use of our website,
- analysis of system security and stability,
- additional administrative purposes.
Processing of your personal information is based on our legitimate interest to achieve the aforementioned purpose. We do not use your personal information to reach any conclusions about you as a person. Recipients of the data are the data controller and our webhosting provider as a commissioned data processor.
Anonymized information of this kind may be used by us statistically, in order to optimize our website and the technology used.
Server log files are stored for security reasons (e.g. to resolve cases of abuse or fraud) for a max. of 7 days. They are deleted afterwards, unless they are required as proof until final resolution of specific cases.
Cookies
Like many other websites we use so-called “cookies“. Cookies are small text files send to your local hard drive by a web server. This automatically provides us with certain data, like IP-address, browser, operating system used and your internet connection.
Cookies cannot be used to open programs or transfer viruses to another computer. Based on the information contained in the cookies however we can simplify navigation for you and ensure or website is correctly displayed. Mainly, this concerns so-called “session cookies”, which are solely used to facilitate the correct functionality of the website and are deleted once you leave our website or close the browser.
In no case will we disclose the data collected to third parties or, without your consent, create a connection to your personal information.
Of course, you can visit our website without cookies in general. Internet browsers are commonly set up to accept cookies. Typically, you can disable the use of cookies in your browser settings. Please use the help function of your browser to find out how to change these settings. Please be advised that some functions of our website might not work properly once cookies are disabled.
In order to withdraw the cookie consent you’ve set in the cookie banner, please click the following link:
SSL Encryption
To ensure the safety of your information during transmission, we use common state of the art encryption methods via HTTPS (SSL/TLS).
Newsletter
Based on your explicit consent we will send you our periodic newsletter or comparable information via email to your provided email address.
To receive our newsletter, we only require your email address. For the purposes of addressing you personally within the newsletter, we optionally ask you to provide your name as well. When registering for our newsletter, the information provided will be solely used for this purpose. Subscribers may also be informed about certain circumstances relevant for the service or the registration (e.g. changes to the newsletter or technical issues).
We require a valid email address for an effective registration. In order to verify that a registration has been made by the legitimate holder of the email address, we use the so-called “double opt-in” method. For this purpose, we record the newsletter registration, sending of a confirmation email and the receipt of the hereby requested response. Additional data is not collected. The data is solely used for the purposes of sending the newsletter and is not disclosed to third parties.
You can revoke your consent to saving your personal information for the purposes of receiving the newsletter at any time. You will find a corresponding link in each newsletter. Also, you can unsubscribe directly on our website or tell us by using the contact information at the end of our privacy policy.
The newsletter is dispatched by our newsletter service provider “MailChimp”. It is operated by Rocket Science Group LLC, 675 Ponce De Leon Ave NW #5000, Atlanta, GA 30308, USA. MailChimp is certified under the “Privacy Shield” treaty and therefore guarantees compliance with European data protection levels. The service is being used based on a data processing agreement according to art. 28 par. 3 p. 1 GDPR.
MailChimp can use the subscription data in an anonymized form, meaning, that they cannot be allocated to an individual user, for the purpose of optimizing their own services (e.g. improving campaign transmissions, better newsletter rendering, or statistical purposes). The data of our subscribers is not used for contact purposes by MailChimp or for third-party disclosure.
Our newsletters contain a small file, which is retrieved from the MailChimp servers. This allows us to improve our service based on technical data, target audience analysis or access times. The data collected includes statistics on, if, and when newsletters are opened. Although it is possible to match this information to individual subscribers, the data collected is explicitly used solely for the purpose of adjusting our contents to our subscribers’ reading habits and interests. There is no surveillance of individual subscribers by either us or MailChimp.
Privacy Policy of MailChimp:
https://mailchimp.com/legal/privacy/
Privacy Shield certification of MailChimp:
https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active
Contact Form
Should you contact us via email or via the contact form for any reason, you give consent to us saving the information provided. The collected data is used to allocate and subsequently respond to your enquiry. Providing any additional data is optional. The data provided by you will be saved in order to handle your inquiry as well as any subsequent follow-up questions. After concluding your inquiry, your personal information will be automatically deleted.
Booking System
Our booking system is provided by the third party provider hope (hope Software GmbH, Waldstr. 26, 74867 Neunkirchen, Germany), based on a data processing agreement according to art. 28 par. 3 p. 1 GDPR. hope’s place of business is located in the EU. They process the data of our guests based on contractual obligations, guaranteeing specific organizational and technical measures. The use of hope as a third party provider is based on our legitimate interest as well as the legitimate interest of our guests to use an efficient and reliable booking system.
Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google USA“). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States.
As IP anonymization is activated on this website, your IP-address will be truncated within the area of Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases the whole IP-address will be first transferred to a Google server in the USA and truncated there.
Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing them with other services relating to website activity and internet usage. The IP-address, that your browser conveys within the scope of Google Analytics, will not be associated with any other data held by Google.
The reason for processing this data is to evaluate the website use and create activity reports. Based on the use of the website and the internet, additional services will be provided. The data processing is based on the legitimate interest of the website operator. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You may further also opt-out from the information collected through the tracking cookie (including your IP-address) being submitted to, or processed by, Google Analytics by downloading and installing the Google Analytics Opt-out browser add-on for your current web browser: Browser add on to disable Google Analytics.
Additionally, within browsers on mobile devices or as an alternative to the browser add on, you can disable tracking by Google Analytics on our website by [google_analytics_optout]clicking this link[/google_analytics_optout]. An opt-out cookie will be stored on your device. This will prevent tracking by Google Analytics for this website and this browser in the future, as long as the cookie remains installed in your browser. The opt-out applies only for this browser and within this domain only.
Google is certified under the “Privacy Shield” treaty and therefore guarantees compliance with European data protection levels.
Personal information of our website users is deleted or anonymized after 14 months.
Privacy Policy of Google:
https://policies.google.com/privacy?hl=en
Privacy Shield certification of Google USA:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Third Party Content and Services
For the purpose of an optimized rendering, our website utilizes third-party content (“Third Party Suppliers“), such as fonts, maps and videos. This entails that the provider(s) of such are capable of identifying an incoming IP-address, without which this content cannot be transmitted to the browser being used to visit the website. Identification of the IP-address is therefore a technical requirement for the provision of this content. We attempt to select and use only such content in which the respective Third-Party Suppliers are committed to registering the IP-address solely for the purpose of providing this content. Third Party Suppliers may furthermore save data for statistical purposes. Some browsers give you the possibility to limit or modify the type and amount of data transmitted to Third Party Suppliers, however, this depends on the browser you use.
Use of Google Fonts
In order to display our content correctly and in an appealing design, this website utilizes fonts provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google USA“). Requests are saved for statistical purposes, however no personal information is stored and there is no connection or correlation to other Google services used. Detailed information can be found here: https://developers.google.com/fonts/faq#what_does_using_the_google_fonts_api_mean_for_the_privacy_of_my_users
Google is certified under the “Privacy Shield” treaty and therefore guarantees compliance with European data protection levels.
Privacy Policy of Google:
https://www.google.com/policies/privacy/
Privacy Shield certification of Google USA:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Use of Adobe Typekit
We use Adobe Typekit for designing our website. Typekit is a service provided by Adobe Systems Software Ireland Ltd., 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland (“Adobe“), parent company: Adobe Inc., 345 Park Avenue, San Jose, CA 95110, USA (“Adobe USA“), giving us access to a font library. In order to use the fonts, your browser needs to connect to one of Adobe’s servers in the USA and load the fonts. Hereby, Adobe will gain knowledge about our website being loaded from your IP-address. You can find further information on Adobe Typekit in Adobe’s Privacy Policy: https://www.adobe.com/privacy/policies/adobe-fonts.html
Adobe is certified under the “Privacy Shield” treaty and therefore guarantees compliance with European data protection levels.
Privacy Shield certification of Adobe USA:
https://www.privacyshield.gov/participant?id=a2zt0000000TNo9AAG&status=Active
Use of Monotype (MyFonts & fonts.com)
This website utilizes fonts provided by Monotype Imaging Holdings Inc., 600 Unicorn Park Drive, Woburn, MA 01801, USA. In order to use the fonts, your browser needs to connect to one of Monotype’s servers in the USA. Our website contains a Monotype user counter, collecting data on the amount of site visitors on our website. In order to use the required fonts, we are contractually obligated to implement this counter. Hereby, Monotype will gain knowledge about our website being loaded from your IP-address. Such collected data is saved in encrypted logfiles for 30 days in order to extract the amount of page views and subsequently deleted.
Privacy Policy of Monotype:
https://www.monotype.com/legal/privacy-policy/
Privacy Policy Webfont Tracking:
https://www.monotype.com/legal/privacy-policy/web-font-tracking-privacy-policy/
Use of Google Maps
This website utilizes the Google Maps API, in order to visually provide geographical information. By using Google Maps, Google may record, save and use data on how users use the map functions. Further information about data processing by Google can be found in Google’s Privacy Policy (see below). You can also modify your personal Privacy Settings in Google’s Privacy Centre.
Privacy Policy of Google:
https://www.google.com/policies/privacy/
You can find detailed instructions on managing your personal data in context with Google products here.
Embedded YouTube Videos
On some of our pages we provide embedded YouTube videos. The provider of the respective plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page containing a YouTube plugin, a connection to the YouTube servers will be established. YouTube will gain knowledge on which pages you visit. Should you be logged into a YouTube account, YouTube can match your browsing behavior to you personally. You can prevent this by logging out of your YouTube account prior to visiting our website.
When a YouTube video is played, the provider will place a cookie and collect references to user behaviour.
Should you have deactivated cookies for the Google Ad Program, there will also be no cookies when watching YouTube videos in your case. However, YouTube does save non-personal usage information in other cookies. If you want to prevent this, you must disable cookies in your browsers.
Further information about YouTube’s data protection can be found in the provider’s Privacy Policy: https://www.google.de/intl/de/policies/privacy/
Changes to our Privacy Policy
We reserve the right to amend and adjust this Privacy Policy, to keep it up to date with legal requirements or to reflect changes to our services (e.g. when introducing additional services). For your next visit, a possible new Privacy Policy takes effect.
Questions about Privacy
Should you have questions regarding the protection of your personal data, please send us an email or contact the person responsible for data protection in our organization directly:
Olivia Höfling
info@landhauschristl.de
This Privacy Policy was created on May 18, 2018, in part with the Privacy Policy Generator by activeMind AG and subsequently translated into English.
Last updated on November 23, 2021