Data protection declaration
Name and contact details of the data controller
The controller under the EU General Data Protection Regulation (GDPR) is:
Hotel Villa Orange, Owner Christiane Hütte, Hebelstraße 1, 60318 Frankfurt am Main
(hereinafter referred to as “we”)
Phone: 069 40584 0
Collection of general information
When you access our website, information of a general nature is automatically collected. This information (server log files) includes the type of web browser, the operating system used, the domain name of your internet service provider and similar information. This is exclusively information which does not allow any conclusions to be drawn about you personally. This information is technologically necessary in order to correctly execute the content of websites you have requested and is absolutely necessary when using the internet. We statistically evaluate anonymous information of this kind in order to optimize our internet presence and the technology behind it.
Cookies, data recipients and transfer of data to third countries
This website uses what are called cookies. These are small text files that are transferred to your hard drive from a website server. This automatically provides us with certain data, such as IP address, browser used, operating system via your computer and your connection to the internet.
Cookies cannot be used to start programs or to transmit viruses to a computer. Based on the information contained in cookies, we can make navigation easier for you and enable our website to be displayed correctly.
The recipients of data are employees within our company who need them to process the tasks listed in the following. In addition, we also process your booking data via Hotelpartner Deutschland GmbH, Neuer Wall 32, 20354 Hamburg, so that this company is also the recipient of your data on our behalf. The data will only be processed in third countries if this is necessary to fulfill the contract (for payment purposes, for example).
The data we collect will not be passed on to third parties. Furthermore, we do not create any links to personal data without your consent.
Email/contact form; purposes for which we process personal data; legal basis and processing categories
If you contact us by email or contact form, the information you provide will only be processed for the purpose of processing your contact request and for possible follow-up questions.
Within the scope of balancing interests to protect the legitimate interests of the data controller or a third party pursuant to Art. 6 para. 1 letter f of the GDPR, we process your data for the purpose of processing your request.
On the basis of your consent pursuant to Art. 6 para. 1 letter a of the GDPR, the lawfulness is given on the basis of the consent given to us in each case for the purposes stated in the consent. Any consent given to us can be withdrawn at any time with effect for the future.
If we process personal data about you for the purpose of your application for an employment relationship, this will only be done to the extent necessary for the decision of establishing an employment relationship. The legal basis for this is Section 26 (1) in conjunction with Par. 8 p. 2 of the Federal Data Protection Act.
Furthermore, we may process your personal data insofar as this is necessary to defend against legal claims asserted against us arising from the application process. The legal basis for this is Art. 6 Para. 1 letter f of the GDPR; the legitimate interest is, for example, the burden of proof in proceedings under the General Act on Equal Treatment (AGG).
Insofar as an employment relationship between you and us comes to exist, we may process the personal data already received from you for the purposes of the employment relationship in accordance with Section 26 (1) of the German Federal Data Protection Act if this is necessary for the performance or termination of the employment relationship or for the exercise or fulfillment of the rights and obligations of the employees’ representation of interests resulting from the law or a collective labor agreement, company or employment agreement (collective bargaining agreement).
We process data in connection with your application. This may include general information about you (such as your name, address and contact details), information about your professional qualifications and school education or information about continuing professional education or other information you provide us in connection with your application. We may also process job-related information you make publicly available, such as a profile on professional social media networks.
Registration and processing of online reservations and booking
When you make a reservation through our online booking engine, we process your personal data to enable your reservation for the selected period.
The processing takes place for the purpose of providing the contractual services, to process your reservation and your stay, for example to process your payment, to ensure that your room is available, to provide you with the related customer service, or to send you a confirmation or a message in connection with your reservation before your arrival.
The data processed includes last name, first name, address, email address, phone number, age, credit card details.
Processing is carried out on the basis of Art. 6 Para. 1 letter b (execution of order processes) and letter c (legally required archiving) of the GDPR. The information designated as required is required to establish and fulfil the contract. We only disclose the data to third parties within the framework of the booking service, payment or within the scope of legal permits and obligations towards legal advisors and authorities.
When you make a reservation, re-register or use our online booking engine, we store the IP address and the time of the respective user activity. The data is stored on the basis of our legitimate interests as well as the user’s protection against misuse and other unauthorized use. This data is not passed on to third parties in principle, unless it is necessary to pursue our claims or there is a legal obligation to do so pursuant to Art. 6 para. 1 letter c of the GDPR.
Time period for which personal data is stored
We adhere to the principles of data avoidance and data minimization. We therefore only store your personal data for as long as this is necessary to achieve the purposes stated here or to fulfill our contractual or legal obligations. After the respective purpose has ceased or these obligations have expired, the corresponding data will be blocked or deleted as a matter of routine and in accordance with legal regulations.
We will store the personal data you provide for the purpose of your application for as long as it is necessary in order to make a decision regarding your application. If an employment relationship between you and us does not materialize, we may also further store data, insofar as this is necessary to defend against possible legal claims. The application documents will be deleted four months after notification of the rejection of the application, unless longer storage is required as a result of legal disputes.
The deletion of your personal data in connection with registration and reservation processing via our online booking engine takes place after the expiry of legal warranty obligations and comparable obligations. The need for data storage is reviewed every three years; in the case of statutory archiving obligations, the data is deleted after their expiry (end of the retention obligation under commercial law (6 years) and under tax law (10 years)).
Usage of Google Analytics
You can disable the storage of cookies by adjusting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: Browser-Add-on to disable Google Analytics.
In addition to or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages bydiesen Link anklicken. An opt-out cookie is installed on your device. This will prevent Google Analytics from collecting data for this website and for this browser in the future as long as the cookie remains installed in your browser.
Use of script libraries (Google Web Fonts)
In order to present our contents correctly and in a graphically appealing way for all browsers, we use script libraries and font libraries on this website, such as Google Web Fonts (https://www.google.com/webfonts/). Google Web Fonts are transferred to your browser’s cache to avoid multiple loading. If your browser does not support Google Web Fonts or does not allow access, content will be displayed in a default font.
Accessing script libraries or font libraries automatically triggers a connection to the library operator. In theory, it is possible that operators of corresponding libraries collect data, but it is currently also unclear whether and, if so, for what purposes.
We use the online advertising program “Google AdWords” and conversion tracking as part of Google AdWords. Google Conversion Tracking is an analysis service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). If you have reached our website via an ad placed by Google, Google AdWords places a cookie on your computer. The conversion tracking cookie is placed when a user clicks on an ad served by Google. These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can see that the user has clicked on the ad and has been redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot therefore be traced through the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers see the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.
If you do not wish to participate in tracking, you can refuse the placement of a cookie required for this, for example via browser settings that generally deactivate the automatic setting of cookies or set your browser so that cookies are blocked by the domain “googleleadservices.com”.
Please note that you may not delete the opt-out cookies as long as you do not wish measurement data to be recorded. If you have deleted all your cookies in your browser, you must set the respective opt-out cookie again.
Usage of Google Maps
Detailed instructions for managing your own data in connection with Google products can be found here.
Your rights under the GDPR
You have the following rights:
- Right of access under Article 15 of the GDPR,
- Right of rectification under Article 16 of the GDPR
- Right of erasure under Article 17 of the GDPR
- Right to restrict processing under Article 18 of the GDPR
- Right to data portability under Article 20 of the GDPR
The rights to access and erasure are subject to the restrictions of Sections 34 and 35 of the German Federal Data Protection Act. In addition, you have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 of the GDPR in accordance with Section 19 of the German Federal Data Protection Act.
You have the right to object to the processing of your personal data at any time for grounds relating to your particular situation, insofar as the processing of your personal data takes place on the basis of Art. 6 para 1 letter f of the GDPR. We will then no longer process this personal data unless we can prove compelling legitimate grounds for the processing, which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims. The objection can be raised at any time in any form with the data controller.
You can withdraw your consent to the processing of personal data given to us at any time with effect for the future.
No automated decision-making
There is no automated decision-making in individual cases within the scope of Art. 22 of the GDPR.
To protect the security of your data during transmission, we use state-of-the-art encryption methods (such as SSL) via HTTPS.
Changes to our data protection policy
We reserve the right to occasionally adapt this data protection declaration to ensure that it continuously complies with current legal requirements, or to implement changes to our services in the data protection declaration, for example when introducing new services. The new data protection declaration will then apply for your next visit.
Data protection officer
For all questions related to the processing of your personal data and the exercising of your rights under the GDPR, please send us an email or contact our data protection officer directly:
Attorney Stefan Hohl, Brunnenstraße 23, 63477 Maintal