Startseite › Data protection

Data protection

Hotel

Edit cookie settings

[borlabs-cookie type="btn-cookie-preference" title="Edit settings"/]

Privacy policy and information according to Art. 13 of the General Data Protection Regulation

 

Name and contact details of those responsible
Gräflicher Park GmbH & Co. KG
Brunnenallee 1
33014 Bad Driburg
Telephone : +49 5253 95-230
Telefax : +49 5253 95-23205
E-Mail : info(at)graeflicher-park.de

 

Data protection officer details
Oliver Baldner
Telephone: +49 5251 6889480
E-Mail: oliver.baldner(at)bits.gmbh

 

Purposes for which personal data is processed along with legal basis for processing:

  • Contacting of visitors to the website with the responsible person via our online contact form.
    Art. 6 para. 1 lit. b of the GDPR (required for the fulfilment of pre-contractual measures)
  • Upload and transmission of application documents
    Art. 88 of the GDPR along with Section 26 (1) of the
    Federal Data Protection Act (BDSG, establishment of an employment relationship)
  • Uploading files
    The legal basis depends on the type of files uploaded. Potential legal bases may include:
    Art. 6 para. 1 lit. b of the GDPR (required for the performance of a contract or for the implementation of pre-contractual measures)
    Art. 88 GDPR in conjunction with Section 26 para. 1 of the BDSG (establishment of an employment relationship)
  • Carrying out evaluations of usage behaviour with Google Analytics.
    Art. 6 para. 1 lit. f of the GDPR (legitimate interest of the responsible party)
  • Processing of technical information in order to be able to provide the service and optimise the presentation of the information retrieved by the visitor on the specific end device of the visitor to the website.
    Art. 6 para. 1 lit. f of the GDPR (legitimate interest of the responsible party)
  • Integration of external fonts from Google
    Art. 6 para. 1 lit. f of the GDPR (legitimate interest of the responsible party)
  • Usage of maps from the “Google Maps” service
    Art. 6 para. 1 lit. f of the GDPR (legitimate interest of the responsible party)
  • Connection of videos from the “YouTube” platform
    Art. 6 para. 1 lit. f of the GDPR (legitimate interest of the responsible party)
  • Execution of external code of the “jQuery” JavaScript framework
    Art. 6 para. 1 lit. f of the GDPR (legitimate interest of the responsible party)
  • Control of the website and needs-based design of the processes during use through utilising the cookies
    Art. 6 para. 1 lit. f of the GDPR (legitimate interest of the responsible party)

Insofar as your personal data is processed to protect the legitimate interests of the controller pursuant to Art. 6 (1) lit. f of the GDPR, the legitimate interests are to permanently analyse and improve the website and to optimise user-friendliness. If techniques for range measurement are used, you will be informed separately about this in this data protection declaration and you will be given the opportunity to object. Our legitimate interest in measuring the reach of our website is the analysis, optimisation and economic operation of our website.

 

Categories of personal data being processed
For organisational and technical reasons, the following data is processed when using our website:

  • Visitor IP address
  • Name of the site accessed
  • Date and time of access
  • Name of the browser used
  • Name of the operating system
  • Search engine or external link name
  • Name of the files downloaded

Insofar as you transmit data via our online forms, the personal data you have made available will be processed in order to fulfil the intended purpose.

If you have not objected to tracking by Google Analytics and the use of cookies, we will evaluate the use of our website. These include:

  • site accessed
  • bounce rate
  • time spent on the relevant site

The user's identity is not known to us and we also take no measures to obtain relevant information elsewhere. We assess this technical data anonymously and for statistical purposes only, for the continuous improvement of our website and in order to be able to make our online offers even more appealing. This anonymous data is saved separately from personal information on secured systems. Our personal data and your private sphere are therefore protected at every time.

 

Recipients of your personal data

Any transmission of your personal data to third parties will be carried out exclusively as a result of your consent being provided or due to a legal permitted use. Your personal data will only be transferred to state institutions and authorities entitled to receive information within the framework of the relevant laws or if we are obliged to do so by a court decision. Our employees are obliged to confidentiality and to comply with the provisions of the laws on data protection. We have involved a number of companies to process data on our behalf for the technical implementation of the services made available. These are:

  • Hosting provider: ALL-INKL.COM - Neue Medien Münnich, hosting the website
  • Google Ireland Ltd., web tracking with Google Analytics

 

Newsletter subscription
If you have subscribed to our newsletter, we use your email address and the voluntary information about yourself in order to send you our newsletter on a regular basis. Providing your email address is sufficient in order to receive our newsletter.

A link can be found at the end of each newsletter through which you can process your subscription data at any time or unsubscribe from the newsletter. You can also unsubscribe by notifying us accordingly using the contact details provided in the legal notice.

 

Use of cookies
This website uses what are known as cookies. These are small text files transmitted by our website to your browser and which are saved on your computer’s hard disk. This ensures no personal data is saved, only an individual pseudonym. This information is used, for example, to recognise you once again while navigating our website and to make navigation easier for you.

You can set your browser to inform you of when cookies are saved. This ensures that the use of cookies is transparent. Alternatively, you can also view this website without cookies. You can preset this in your respective browser. Please note that this may mean that certain website functions become wholly or partially inaccessible.

 

Google Analytics traffic analysis
This website uses Google Analytics, a web analytics service by Google Inc. (“Google”). Google Analytics uses what are known as “cookies” - text files saved on our computer and that enable your use of the website to be analysed. The information generated by the cookie regarding your use of this website is usually transmitted to a Google server in the USA and stored there. IP anonymisation is activated for this website. For this purpose, your IP address is shortened and stored without the last octet. This allow us to know from which network a request comes, but not from which computer. As a rule, your IP address will be shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of this website’s operator, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to this website’s operator. The IP address shared by your browser within the framework of Google Analytics is not merged with other data from Google. You may refuse the use of cookies by selecting the relevant settings on your browser, however please note that if you do so, you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available via the following link:
http://tools.google.com/dlpage/gaoptout?hl=de

 

Use of external services
Our website uses content from third-party providers. This may include videos, fonts or scripts. We have explained in detail the respective purposes as well as the legal basis we use as a principle for utilising this content in the “Purposes for which personal data is processed along with legal basis for processing”. In order to display the content of the third-party offers used, it is necessary for technical reasons that your IP address is transmitted to the respective provider for this purpose. We have no influence on how the relevant third-party provider uses your personal data. However, you can find an overview of all third-party services used by this website below. If available, we will also provide you with the respective link to the data protection declaration of the third-party provider so that you can access the information on the processing of your personal data there and, if available, highlight an existing option to object.

  • External code of the “jQuery” JavaScript framework, provided by the third-party provider jQuery Foundation, https://jquery.org

 

Links to other websites
Our website contains links to other websites. We have no influence on whether their operators comply with data protection regulations. Despite careful control of the content, we assume no liability for the content of external links. The operators of the linked pages are solely responsible for their content.

 

Your safety
We protect your data by taking technical and organisational measures for unauthorised access, loss, manipulation or disruption. Our security measures are constantly updated in line with technological developments. The entire communication between your end device and our servers takes place in an encrypted manner. This applies both to downloading documents or information that we provide to you via our website, along with information that you make available to us via the contact form or the application form.

 

Storage duration
The personal data that you have made available to us is automatically deleted if the purposes of the processing have ceased to apply. In detail, the following storage periods apply:

  • Technical data and protocols to ensure the operation of the website
    Deletion deadline: 6 months
  • Web tracking data
    Deletion deadline: Your IP address is anonymised by deleting the last octet even at the time of web tracking. Therefore, no personal data is processed in the further course of the analysis.
  • Content that you provide to us via the contact or application form.
    Deletion deadline: The storage periods for this content depend on the type of information transmitted and the statutory retention periods applicable to it in each case. If an application received does not lead to the signing of an employment contract, the data will be automatically deleted 6 months after the conclusion of the application procedure. If you request deletion at an earlier point in time within the scope of your data subject rights, the data will be deleted immediately on your request.

 

Data subject rights
You have the right to information regarding the personal data stored about you at any time. In accordance with Articles 16 - 20 of the GDPR, you also have the right to correct incorrect data, the right to delete your personal data, the right to restrict the processing of your personal data and the right to data portability.

 

Right to revoke consent
You have the right at any time to revoke any consent you have provided. The revocation shall apply with immediate effect for the future. The legitimacy of the processing performed on the basis of consent until revocation shall not be affected by the revocation.

 

Right of appeal
If you are of the view that the processing of your personal data is in infringement of the GDPR, you have the right of appeal to a regulatory authority.

 

Provision of your personal data
Personal data includes information on your identity. This includes details such as name, address, telephone number or email address. It is not necessary for you to disclose personal data in order to use this website. In certain cases, we do require your name and address along with further details in order to provide the services requested.

This applies, for example, to the use of our contact form, the transmission of information, to answer individual questions or for the use of our form for online applications. We will inform you accordingly where this is required. In addition, we only save and process data that you have voluntarily or automatically made available. If you make use of advisory services, as a rule only such data is collected as is required for the provision of the services. If we ask you for further data, this is voluntary information. The personal data made available by you is only used for the purposes that you have shared and explained.

 

Amendments to data protection regulations
We reserve the right to amend the safety and data protection measures at any time, especially to the extent that this becomes necessary for technical development. In these cases, we will also adapt these notes on data protection accordingly if necessary. Please therefore note the current version of this data protection declaration.

 

Questions, suggestions, complaints
If you have any further questions regarding the notes on data protection and the processing of your personal data, you can contact our data protection officer directly using the contact details provided above.