PRIVACY POLICY

General information

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data with which you can be personally identified. For detailed information on data protection, please refer to our privacy policy listed below this text.

§ 1 Warning regarding content
The free and freely accessible content of this website has been created with the greatest possible care. However, the provider of this website assumes no liability for the accuracy and timeliness of the free and freely accessible journalistic guides and news provided. Articles identified by name reflect the opinion of the respective author and not always the opinion of the provider. By merely accessing the free and freely accessible content, no contractual relationship between the user and the provider arises; thus, there is no legal binding intent on the part of the provider.

§ 2 External links
This website contains links to third-party websites ("external links"). These websites are subject to the liability of their respective operators. When the external links were first established, the provider checked the third-party content for any legal violations. At that time, no legal violations were apparent. The provider has no influence on the current and future design and content of the linked pages. The setting of external links does not mean that the provider adopts the content behind the reference or link. Permanent monitoring of external links is not reasonable for the provider without specific evidence of legal violations. Upon becoming aware of legal violations, however, such external links will be removed immediately.

§ 3 Copyright and ancillary copyrights
The content published on this website is subject to German copyright and ancillary copyright law. Any use not permitted by German copyright and ancillary copyright law requires the prior written consent of the provider or the respective rights holder. This applies in particular to reproduction, processing, translation, storage, processing or reproduction of content in databases or other electronic media and systems. Third-party content and rights are identified as such. Unauthorised reproduction or transmission of individual content or complete pages is not permitted and is punishable. Only the production of copies and downloads for personal, private and non-commercial use is permitted. The presentation of this website in third-party frames is only permitted with written authorisation.

§ 4 Special terms of use
Insofar as special conditions for individual uses of this website deviate from the aforementioned paragraphs, this is expressly indicated at the appropriate place. In this case, the special terms of use shall apply in the respective individual case.
Source: Imprint Generator from JuraForum.de
Below we inform you, in accordance with the legal requirements of data protection law (in particular according to BDSG (new) and the European General Data Protection Regulation 'GDPR'), about the type, scope and purpose of the processing of personal data by our company. This privacy policy also applies to our websites and social media profiles. Regarding the definition of terms such as "personal data" or "processing", we refer to Art. 4 GDPR.
Name and contact details of the controller
Our controller (hereinafter "Controller") within the meaning of Art. 4 No. 7 GDPR is:

Aleksandr Mirumjan
Birkenweg 29
82110 Germering, Germany
Email address: info [at] hotel-eurodom [dot] de

Below we inform you about the type, scope and purpose of the collection, processing and use of personal data.

1. Types of data we process
Master data (name, address etc.), contact data (telephone number, email, fax etc.), communication data (IP address etc.).

2. Purposes of processing pursuant to Art. 13 (1)(c) GDPR
Optimise the website technically and economically, enable easy access to the website, fulfil legal retention obligations, optimisation and statistical evaluation of our services, improve user experience, design website to be user-friendly, process contact requests, provide websites with functions and content, ensure uninterrupted, secure operation of our website.

3. Categories of affected persons pursuant to Art. 13 (1)(e) GDPR Visitors/users of the website, customers, prospects

The affected persons are referred to collectively as "users". Legal basis for processing personal data:
If we have obtained your consent for the processing of personal data, Art. 6 (1) sentence 1 letter (a) GDPR is the legal basis.
If processing is necessary for the performance of a contract or for the implementation of pre-contractual measures carried out at your request, Art. 6 (1) sentence 1 letter (b) GDPR is the legal basis.
If processing is necessary to fulfil a legal obligation to which we are subject (e.g. statutory retention obligations), Art. 6 (1) sentence 1 letter (c) GDPR is the legal basis.
If processing is necessary to protect the vital interests of the data subject or another natural person, Art. 6 (1) sentence 1 letter (d) GDPR is the legal basis.
If processing is necessary to safeguard our legitimate interests or those of a third party, and your interests or fundamental rights and freedoms do not prevail, Art. 6 (1) sentence 1 letter (f) GDPR is the legal basis.

Disclosure of personal data to third parties and order processors:
Without your consent, we generally do not pass on data to third parties. Should this nevertheless occur, the disclosure is based on the aforementioned legal grounds, e.g. when transferring data to online payment providers for contract fulfilment, due to a court order, or due to a legal obligation to release data for the purpose of criminal prosecution, danger prevention, or to enforce intellectual property rights.
We also use order processors (external service providers, e.g. for web hosting of our websites and databases) to process your data. If, within the framework of an order processing agreement, data is passed to processors, this is always done in accordance with Art. 28 GDPR. We carefully select our order processors, monitor them regularly and have been granted the right to issue instructions regarding the data. In addition, the order processors must have taken suitable technical and organisational measures and comply with the data protection regulations of the BDSG (new) and the GDPR.

With the adoption of the European General Data Protection Regulation (GDPR), a uniform basis for data protection in Europe has been created. Your data is therefore predominantly processed by companies to which the GDPR applies. Should processing nevertheless take place by services of third parties outside the European Union or the European Economic Area, they must meet the special requirements of Art. 44 ff. GDPR. This means that processing takes place on the basis of special guarantees, such as the EU Commission's officially recognised determination of an EU-equivalent level of data protection or compliance with officially recognised special contractual obligations, the so-called "standard contractual clauses". For US companies, submission to the so-called "Privacy Shield", the data protection agreement between the EU and the USA, fulfils these requirements.

Unless expressly stated in this privacy policy, your personal data will be deleted or blocked as soon as the purpose for storage no longer applies, unless their further retention is required for evidence purposes or contradicts statutory retention obligations. This includes commercial retention obligations of business letters under § 257 (1) HGB (6 years) and tax law retention obligations under § 147 (1) AO for documents (10 years). When the prescribed retention period expires, your data will be blocked or deleted, unless storage is still required for the conclusion of a contract or for the performance of a contract.

Existence of automated decision-making:
We do not use automated decision-making or profiling.

Provision of our website and creation of log files:
If you only use our website for informational purposes (i.e. no registration and no other transmission of information), we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data: • IP address;
• internet service provider of the user;
• date and time of access;
• browser type;
• language and browser version;
• content of the access;
• time zone;
• access status/HTTP status code;
• amount of data;
• websites from which the request comes;
• operating system.
These data are not stored together with other personal data of yours.

This data serves the purpose of user-friendly, functional and secure delivery of our website to you with functions and content as well as their optimisation and statistical evaluation. The legal basis for this is our legitimate interest in data processing pursuant to Art. 6 (1) sentence 1 letter (f) GDPR. We store this data in server log files for security reasons for a storage period of 365 days. After this period, they are automatically deleted, unless we need to retain them for evidence purposes in the event of attacks on the server infrastructure or other legal violations.

We use so-called cookies during your visit to our website. Cookies are small text files that your internet browser stores on your computer. When you access our website again, these cookies provide information to automatically recognise you. The information thus obtained serves the purpose of optimising our web offerings technically and economically and providing you with easier and more secure access to our website. We inform you when accessing our website by means of a notice in our privacy policy about the use of cookies for the aforementioned purposes and how you can object to or prevent their storage ("opt-out"). Our website uses session cookies, persistent cookies and third-party cookies:

• Session cookies: We use cookies to recognise multiple uses of an offer by the same user (e.g. when you have logged in to identify your login status). When you re-access our page, these cookies provide information to automatically recognise you. The information thus obtained serves to optimise our offers and provide you with easier access to our page. When you close the browser or log out, the session cookies are deleted.

• Persistent cookies: These are automatically deleted after a predetermined duration that may differ depending on the cookie. You can delete cookies at any time in the security settings of your browser.

• Third-party cookies: According to your wishes, you can configure your browser settings and, for example, refuse acceptance of third-party cookies or all cookies. We point out, however, that you may not be able to use all features of this website. Read more about these cookies in the respective privacy policies of the third parties.

The legal basis for this processing is Art. 6 (1) sentence 1 letter (b) GDPR if cookies are set for contract initiation, e.g. for orders. Otherwise, we have a legitimate interest in the effective functionality of the website, in which case Art. 6 (1) sentence 1 letter (f) GDPR is the legal basis.

Objection and "opt-out": You can generally prevent the storage of cookies on your hard drive by selecting "do not accept cookies" in your browser settings. However, this may result in functional restrictions of our offerings. You can object to the use of third-party cookies for advertising purposes via an "opt-out" via this American website (https://optout.aboutads.info) or this European website (http://www.youronlinechoices.com/de/praferenzmanagement/).

Contact via contact form / email / fax / post
When contacting us via contact form, fax, post or email, your data will be processed for the purpose of handling the contact request.

The legal basis for processing the data is, in the presence of your consent, Art. 6 (1) sentence 1 letter (a) GDPR. The legal basis for processing data transmitted in the course of a contact request or email, letter or fax is Art. 6 (1) sentence 1 letter (f) GDPR. The Controller has a legitimate interest in processing and storing the data in order to be able to respond to user enquiries, for evidence preservation for liability reasons and to be able to fulfil any legal retention obligations for business letters. If the contact aims at the conclusion of a contract, the additional legal basis for processing is Art. 6 (1) sentence 1 letter (b) GDPR.

We may store your information and contact request in our customer relationship management system ("CRM system") or a comparable system.

The data will be deleted as soon as it is no longer required for the achievement of the purpose of its collection. For personal data from the input mask of the contact form and those sent by email, this is the case when the respective conversation with you has ended. The conversation is ended when it can be inferred from the circumstances that the relevant matter has been finally clarified. Enquiries from users who have an account or contract with us are stored until two years after the end of the contract. In the case of statutory archiving obligations, deletion takes place after their expiry: end of commercial (6 years) and tax law (10 years) retention obligation.

You have the right at any time to revoke your consent under Art. 6 (1) sentence 1 letter (a) GDPR for the processing of personal data. If you contact us by email, you can object to the storage of your personal data at any time.

Contact by telephone
When contacting us by telephone, your telephone number will be processed for the handling of the contact request and stored or displayed temporarily in the RAM/cache of the telephone device/display. The storage takes place for liability and security reasons in order to be able to provide evidence of the call and for economic reasons in order to enable a callback. In the case of unauthorised advertising calls, we block the numbers. The legal basis for processing the telephone number is Art. 6 (1) sentence 1 letter (f) GDPR. If the contact aims at the conclusion of a contract, the additional legal basis for processing is Art. 6 (1) letter (b) GDPR. The device cache stores calls for 365 days and successively overwrites or deletes old data. When the device is disposed of, all data is deleted and the memory is destroyed if necessary. Blocked telephone numbers are checked annually for the necessity of blocking.

You can prevent the display of the telephone number by calling with a suppressed number.

To manage the cookies and similar technologies (tracking pixels, web beacons etc.) used and the corresponding consents, we use the consent tool "Real Cookie Banner". Details on how "Real Cookie Banner" works can be found at https://devowl.io/de/rcb/datenverarbeitung/.

The legal basis for processing personal data in this context is Art. 6 (1) (c) GDPR and Art. 6 (1) (f) GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the corresponding consents.

The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide personal data. If you do not provide the personal data, we cannot manage your consents.

We have integrated maps from "Google Maps" (Google Ireland Limited, Reg. No.: 368047, Gordon House, Barrow Street, Dublin 4, Ireland) on our website. This allows us to display the location of addresses and a route description directly on our website in interactive maps and to enable you to use this tool.

When you visit our website where Google Maps is integrated, a connection to Google's servers in the USA is established. Your IP and location may be transmitted to Google. In addition, Google receives the information that you have accessed the corresponding page. This also occurs without a user account with Google. If you are logged into your Google account, Google can assign the above data to your account. If you do not want this, you must log out of your Google account. Google creates user profiles from such data and uses this data for advertising, market research or to optimise its websites.

The legal basis for this is our legitimate interest in data processing pursuant to Art. 6 (1) sentence 1 letter (f) GDPR.

You have a right of objection to Google against the creation of user profiles. Please contact Google directly via the privacy policy listed below. You can opt out of advertising cookies in your Google account here:
https://adssettings.google.com/authenticated.

In the Google Maps Terms of Use at https://www.google.com/intl/de_de/help/terms_maps.html and Google's privacy policy on advertising at https://policies.google.com/technologies/ you will find further information on the use of Google cookies and their advertising technologies, storage period, anonymisation, location data, functionality and your rights. Google's general privacy policy: https://policies.google.com/privacy.

Google is certified under the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework) and is therefore obliged to comply with European data protection law.

We maintain profiles or fan pages on social media in order to communicate with users connected and registered there and to inform them about our products, offers and services. The US providers are certified under the so-called Privacy Shield and are therefore obliged to comply with European data protection. When you use and access our profile on the respective network, the respective data protection notices and terms of use of the respective network apply.

We process your data, which you send us via these networks, in order to communicate with you and to respond to your messages there.

The legal basis for processing personal data is our legitimate interest in communicating with users and our external presentation for advertising purposes pursuant to Art. 6 (1) sentence 1 letter (f) GDPR. To the extent that you have given the controller of the social network consent to the processing of your personal data, the legal basis is Art. 6 (1) sentence 1 letter (a) and Art. 7 GDPR.

The data protection notices, information options and objection options (opt-out) of the respective networks can be found here:

• Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) Privacy policy: https://www.facebook.com/about/privacy/, Opt-out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

• Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) – Privacy policy/Opt-out: http://instagram.com/about/legal/privacy/.

• XING (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany) – Privacy policy/Opt-out: https://privacy.xing.com/de/datenschutzerklaerung.

• LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland) – Privacy policy: https://www.linkedin.com/legal/privacy-policy, Cookie Policy and Opt-out: https://www.linkedin.com/legal/cookie-policy, Privacy Shield of the US company LinkedIn Inc.: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active.

Social media plug-ins

We use social media plug-ins from social networks on our website. We use the so-called "two-click solution" Shariff from c't or heise.de. When our website is accessed, no personal data is transferred to the providers of the plug-ins. Next to the logo or brand of the social network, you will find a slider with which you can activate the plug-in by clicking. After activation, the provider of the social network receives the information that you have accessed our website and your personal data is transferred to the provider of the plug-in and stored there. These are so-called third-party cookies. With some providers such as Facebook and XING, your IP is anonymised immediately after collection, according to their information.

The data collected about the user is stored by the plug-in provider as usage profiles. These are used for advertising, market research and/or needs-based design of its website. Such an evaluation takes place in particular (also for users who are not logged in) for the display of needs-based advertising and to inform other users of the social network about the user's activities on our website. The user has a right of objection to the creation of these usage profiles, whereby they must contact the respective plug-in provider to exercise this right.

The legal basis for the use of the plug-ins is our legitimate interest in improving and optimising our website by increasing our visibility through social networks as well as the possibility of interaction with you and users among themselves via social networks pursuant to Art. 6 (1) sentence 1 letter (f) GDPR.

We have no influence on the data collected and the data processing operations. We also have no knowledge of the scope of data collection, the purpose of processing and the storage periods. We also have no information regarding the deletion of the data collected by the plug-in provider.

Regarding the purpose and scope of the data collection and processing, we refer to the respective privacy policies of the social networks. There you will also find information on your rights and setting options for protecting your personal data.

Facebook

We have integrated plug-ins from the social network Facebook.com (head office in the EU: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) on our website as part of the so-called "two-click solution" by Shariff. You can recognise these by the Facebook logo "f" or the addition "Like", "Gefällt mir" or "Share".

As soon as you intentionally activate the Facebook plug-in, a connection from your browser to Facebook's servers is established. Facebook receives the information, including your IP, that you have accessed our website and transmits this information to Facebook servers in the USA, where it is stored. If you are logged into your Facebook account, Facebook can assign this information to your account. When using the functions of the plug-in, e.g. operating the "Like" button, this information is also transmitted by your browser to Facebook's servers in the USA and stored there as well as displayed in your Facebook profile and possibly to your friends.

You can find the purpose and scope of data collection and the further processing and use of the data by Facebook, as well as your rights and setting options for protecting your privacy, in Facebook's privacy notices: https://www.facebook.com/about/privacy/. Data collection on the "Like" button: https://www.facebook.com/help/186325668085084. You can manage and object to your settings regarding the use of your profile data for advertising purposes on Facebook here: https://www.facebook.com/ads/preferences/.

If you log out of Facebook before visiting our website and delete your cookies, no data about visiting our website will be assigned to your Facebook profile when activating the plug-in.

You can also prevent the loading of the Facebook Plug-In by so-called "Facebook Blockers", which you can install as an add-on for your browser: Facebook Blocker for Firefox, Chrome and Opera or 1blocker for Safari, iPad and iPhone.

Facebook has submitted to the Privacy Shield, thus ensuring that European data protection law is complied with: https://www.privacyshield.gov/EU-US-Framework.

Instagram

We have integrated plug-ins from the social network Instagram (Instagram LLC., 1601 Willow Road, Menlo Park, CA, 94025, USA) on our website as part of the so-called "two-click solution" by Shariff. You can recognise these by the Instagram logo in the form of a square camera.

If you intentionally activate the plug-in, a connection from your browser to Instagram's servers is established. Instagram receives the information, including your IP address, that you have visited our page and transmits the information to Instagram servers in the USA, where it is stored. If you are logged into your Instagram account, Instagram can assign this information to your account, and you can click the Instagram button to share and store the content of our pages on your Instagram account and, if applicable, display it to your friends there. We have no knowledge of the exact content of the data transmitted, its use and storage period by Instagram.

If you log out of Instagram before visiting our website and delete your cookies, no data about visiting our website will be assigned to your profile on Instagram when activating the plug-in.

You will receive further information in Instagram's privacy policy at https://help.instagram.com/519522125107875 and on the privacy settings here: https://help.instagram.com/196883487377501.

To the extent that processing is based on your consent under Art. 6 (1) sentence 1 letter (a), Art. 7 GDPR, you have the right to revoke your consent at any time. The lawfulness of the processing carried out on the basis of consent until revocation is not affected.

Insofar as we base the processing of your personal data on the balancing of interests pursuant to Art. 6 (1) sentence 1 letter (f) GDPR, you can object to the processing. This is the case if processing is not necessary in particular for the performance of a contract with you, which is presented by us in each case in the following description of the functions. When exercising such an objection, we ask you to state the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either stop or adjust the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.

You can object at any time to the processing of your personal data for advertising purposes and data analysis. You can exercise the right of objection free of charge. You can inform us of your advertising objection using the following contact details:

Aleksandr Mirumjan
Birkenweg 29
82110 Germering, Germany
Email address: info [at] hotel-eurodom [dot] de

Right of access
You have the right to demand confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have a right to information about your personal data stored by us in accordance with Art. 15 GDPR. This includes in particular the information on the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage duration and the origin of your data, insofar as it was not collected directly from you.

Right to rectification
You have a right to rectify incorrect data or to complete correct data in accordance with Art. 16 GDPR.

Right to erasure
You have the right to delete your data stored by us in accordance with Art. 17 GDPR, unless legal or contractual retention periods or other legal obligations or rights to further storage stand in the way.

Right to restriction
You have it if you have lodged an objection to the processing pursuant to Art. 21 (1) GDPR and it has not yet been determined whether the legitimate reasons of the controller outweigh your reasons.

Right to data portability
You have a right to data portability in accordance with Art. 20 GDPR, which means that you can receive the personal data stored about you in a structured, commonly used and machine-readable format or request transmission to another controller.

Right to lodge a complaint
You have a right to lodge a complaint with a supervisory authority. Generally, you can contact the supervisory authority of the member state of your habitual residence, place of work or the place of the alleged infringement.

Data security
In order to protect all personal data transmitted to us and to ensure that data protection regulations are observed by us, but also by our external service providers, we have taken appropriate technical and organisational security measures. Therefore, all data between your browser and our server is transmitted in encrypted form via a secure SSL connection.