Privacy

Who we are

The address of our website is: https://chiemsee-chalet.de

 

What personal data we collect and why we collect it

 

Comments

When visitors post comments on the website, we collect the data displayed in the comment form, the visitor’s IP address and the user agent string (which identifies the browser) to help detect spam.

The responsible body within the meaning of the data protection laws is

Chiemsee Chalet GmbH & Co. KG
Managing Directors: Hendrik Heidenreich & Joachim Erlach
Sagberg 2
83112 Frasdorf, Germany

Phone: +49 (0)8052620
E-mail: info@chiemsee-chalet.de

Data protection officer: Hendrik Heidenreich
i.s.d. DSGVO: info@chiemsee-chalet.de

Data collection when visiting our website

When you visit our website, we regularly collect the data automatically transmitted by your browser to our web server (server log files), such as your IP address, the URLs of the websites from which you accessed our websites, the browser used, browser language, the operating system and interface used, the access device with which the services are used, the date and time of access, the pages of our websites accessed and the time you spend on our websites. The legal basis for the processing of this data is our legitimate interest in accordance with Art. 6 para. 1f GDPR, which follows from the purposes listed below.  We use this information to enable you to call up and visit the website, to continuously improve the websites and offers technically and to further adapt them to the needs of our users, to carry out internal quality controls, to recognise, remedy and prevent errors, malfunctions and possible misuse. The data is stored for a period of one year and then automatically deleted.

Cookies, web beacons and similar procedures

Like almost all service providers, we use cookies, web beacons or similar procedures when you visit our websites or use our services.

Cookies are small text files that are stored on your computer or mobile device by your browser and that enable your computer or device to be recognised across different websites. The cookies do not contain any personal data. Some of the cookies we use are deleted again at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies to recognise your browser on your next visit (persistent cookies).

You can prevent the use of cookies by selecting the appropriate settings in your browser software. However, it is possible that certain areas of the websites or offers may then not function as intended.

Web beacons are small graphic files (‘pixels’) which may be integrated into our website and which can be used to record user behaviour. Similar procedures are e.g. Flash cookies, HTML5 cookies or other local (browser or device) storage procedures in which – comparable to cookies – data can be stored in your browser or end device in order to recognise your browser or device on your next visit or during a session.

The use of cookies and similar procedures enables us to collect information about users in order to make it easier and more convenient for them to use the websites or to make certain offers possible in the first place.

We use cookies for the following purposes, among others: booking function, login/customer areas, etc. Service providers we use for web analysis, retargeting and conversion tracking may also use cookies (see below).

Contact form

If you contact us via the contact options offered, some personal data such as name, address, contact and communication data such as telephone number and e-mail address will be collected so that they can be used to process and answer your enquiry and for possible follow-up questions. Data processing is carried out in accordance with Art. 6 para. 1b GDPR. We only store personal data that we process as part of a general contact enquiry by email or contact form for as long as is necessary for the respective correspondence, usually for a period of one year after answering your enquiry.

Direct booking option and booking enquiries on the hotel website

Personal data requested by us in connection with a room booking will only be stored for as long as is necessary for the fulfilment of the contract and any subsequent contract-related correspondence (usually one year) or, in the case of documents relevant under commercial and/or tax law that contain personal data, for as long as the statutory periods of the German Commercial Code and the German Fiscal Code provide for the retention of these documents (usually 6 to 10 years). Legal basis for the processing of personal data in connection with a room booking: Personal data processed in connection with a room booking is required for the fulfilment of the corresponding contract, Article 6 (1b) GDPR. We also process booking data in accordance with Art. 6 para. 1f GDPR on the basis of our legitimate interests in fraud prevention, the enforcement of our legal claims, accounting and risk management purposes. In accordance with Art. 6 para. 1c GDPR to fulfil legal obligations, e.g. to comply with retention obligations under commercial and tax law or to fulfil obligations to disclose data due to a legally binding court order or official order.

Direct booking option on a hotel website, combined with direct advertising via newsletter:

If you have registered for our newsletter, you will receive a regular newsletter and marketing emails from us by email, with which we will inform you about offers and news from our hotel. The legal basis in this case is your consent in accordance with Art. 6 para. 1a GDPR. In addition, we use the email address you provide when making a booking for the purpose of direct advertising for our own similar offers, provided you have not already objected to this use. In this case, the legal basis is our legitimate interest in direct advertising in accordance with Art. 6 para. 1f GDPR.

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter.

We use the so-called double opt-in procedure to ensure that the newsletter is sent with your consent. This involves the potential recipient being added to a mailing list. The user then receives a confirmation e-mail to confirm the registration in a legally secure manner. The address will only be actively included in the mailing list if confirmation is received.

We use this data exclusively for sending the requested information and offers.

Newsletter2Go is used as the newsletter software. Your data will be transmitted to Newsletter2Go GmbH. Newsletter2Go is prohibited from selling your data and using it for purposes other than sending newsletters. Newsletter2Go is a German, certified provider that has been selected in accordance with the requirements of the General Data Protection Regulation and the Federal Data Protection Act.

You can find more information here: https://www.newsletter2go.de/informationen-newsletter-empfaenger/

You can revoke your consent to the storage of your data, email address and their use for sending the newsletter at any time, for example via the ‘Unsubscribe’ link in the newsletter.

The data protection measures are always subject to technical updates, which is why we ask you to inform yourself about our data protection measures at regular intervals by consulting our privacy policy.

You can revoke your consent to receive such emails at any time and free of charge or object to the receipt of such emails, e.g. via the unsubscribe link in our emails. Your e-mail address will be stored for the new

Use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google IncLLC. (hereinafter: Google). The legal basis is our legitimate interest pursuant to Art. 6 (1f) GDPR in analysing and evaluating the use of our website.

Google Analytics uses ‘cookies’, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on these websites, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: the current link is http://tools.google.com/dlpage/gaoptout?hl=de

Deactivate Google Analytics

In addition or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages.

[OPT-OUT-BUTTON] Deactivate Google Analytics

This will install an opt-out cookie on your device. This will prevent Google Analytics from collecting data for this website and for this browser in the future as long as the cookie remains installed in your browser.

The personal data collected by Google and linked to cookies, user ID or advertising ID (e.g. DoubleClick cookies, Android Advertising ID, Apple Advertising ID) will be automatically deleted after 14 months.

Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield,  https://www.privacyshield.gov/EU-US-Framework.

Use of Google web fonts

We use external fonts integrated via Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (‘Google’) on the basis of Art. 6 (1f) GDPR for the purpose of designing and optimising our pages to meet your needs. Your Internet browser automatically establishes a connection to Google’s servers, during which the above-mentioned data is transferred from your browser to Google. If you have a Google user account and are logged in to Google, your data may be assigned to your account by Google. We have no influence on this data transfer and further data processing by Google

Further information on the purpose and scope of data collection and its processing by Google, your rights and setting options to protect your privacy can be found here:  https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield,  https://www.privacyshield.gov/EU-US-Framework

Use of Google Maps

We use the ‘Google Maps’ component provided by Google on our website for the purpose of customising our website in accordance with Art. 6 para. 1f GDPR.

Each time the ‘Google Maps’ component is called up, Google sets a cookie to process user settings and data when the page on which the ‘Google Maps’ component is integrated is displayed. As a rule, this cookie is not deleted when the browser is closed, but expires after a certain period of time unless you delete it manually beforehand.

When you visit the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the above-mentioned data is transmitted from your browser to Google. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or customising its website. Such an analysis is carried out in particular (even for users who are not logged in) to provide customised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

Further information on the purpose and scope of data collection and its processing by Google, your rights and setting options to protect your privacy can be found here: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Embedded YouTube videos

This website embeds a ‘YouTube plugin’ in its information offering. This YouTube software uses cookies for data collection and statistical data analysis. YouTube uses cookies to collect reliable video statistics, prevent fraud and improve user-friendliness, among other things. YouTube cookies provide the website operator with statistical values on the retrieval of individual videos embedded in the website without any reference to the respective user. The legal basis for the use of YouTube plugins is our legitimate interest in an interesting and needs-based design of our website in accordance with Art. 6 para. 1f GDPR.

We use embedded YouTube videos in extended data protection mode. This means that no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will the following data be transmitted. We have no influence on this data transfer

By playing the video, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned above under ‘Server log files’ is transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or customising its website. Such an analysis is carried out in particular (even for users who are not logged in) to provide customised advertising and to inform other users about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

Further information on the purpose and scope of data collection and its processing by

YouTube can be found in the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework

Social plugins

We use sharing features on our website with the following social media providers:

Facebook: Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA, http://de-de.facebook.com/about/privacy/

Further information on data collection: http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo.

Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework

Google+: Google LLC, 1600 Amphitheater Parkway, Mountainview, California 94043, USA, https://www.google.com/policies/privacy/partners/?hl=de  Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework

Instagram: Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA

https://help.instagram.com/155833707900388/

Instagram has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework

Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA (“Pinterest”) https://developers.pinterest.com/docs/getting-started/introduction/

Pinterest has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework

Through the plugins, we offer you the opportunity to interact with social networks and other users, allowing us to improve our services and make them more interesting for you as a user. The legal basis for the use of the plugins is Art. 6 para. 1f GDPR.

We use the so-called two-click solution. That means, when you visit our site, no personal data is initially shared with the providers of the plugins. You can identify the provider of the plugin by the marking on the box with its initial letter or logo. We offer you the opportunity to communicate directly with the plugin provider through the button. Only if you click on the marked field and thereby activate it, will the plugin provider receive the information that you have accessed the corresponding website of our online offer. In addition, the log data mentioned above in this statement will be transmitted. These include, for example:

• Address of the website where the activated link is located,
• Date and time of the website visit or the link activation,
• Information about the browser used and the operating system used,
• IP addresse.

By activating the plugin, your personal data is transmitted to the respective plugin provider and stored there (in the case of US providers, in the USA).

To the extent that you are logged in to the respective social media provider at that time, they may be able to associate your visit to our website and your further interaction with the social media provider (e.g., clicking the “Like” button) with your user profile (e.g., your Facebook account).

We have no influence over the data collected and the data processing procedures, nor are we aware of the full extent of the data collection, the purposes of processing, or the retention periods. We also do not have any information regarding the deletion of the collected data by the social media provider. Further information on the purpose and scope of data collection and its processing by the social media provider can be found in the privacy policies of these providers mentioned above. There you will also find further information about your rights and options for protecting your privacy.

The servers of the social media services are located in the USA and other countries outside the European Union. The data can therefore also be processed by the provider of the social media service in countries outside the European Union. Please note that companies in these countries are subject to data protection laws that generally do not protect personal data to the same extent as in the member states of the European Union.

Conversion Tracking

We use the services of external advertising partners to draw attention to our offers on external websites with the help of advertising materials. We also use marketing tools to determine how successful the individual advertising measures are (“conversion tracking”).

We aim to show you advertisements that are of interest to you, make our website more appealing to you, and achieve a fair calculation of advertising costs. The legal basis is Article 6(1)(f) GDPR.

For this purpose, our advertising partners set cookies and web beacons (see above), through which certain parameters for measuring success, such as ad impressions or user clicks, can be measured. These cookies are not intended to personally identify you. As long as the cookie is valid, the advertising partner can recognize that you clicked on an ad and reached a specific landing page (e.g., form submission, confirmation page, newsletter signup). Through the cookie, conversion statistics are created by the advertising partner. In these statistics, the number of users who have clicked on one of our ads is recorded. In addition, it counts how many users reached a target page that has been tagged with a “conversion tag” (remarketing tag, see above). However, the statistics do not contain any data that would allow you to be identified.

We do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from our advertising partners. Based on these evaluations, we can identify which of the advertising measures used are particularly effective. Further data from the use of the advertising materials is not available to us, in particular, we cannot identify the users based on this information. Due to the use of conversion tracking tools, your browser automatically establishes a direct connection with the server of the advertising partners. We have no influence over the scope and further use of the data collected by the advertising partners through the use of this tool. By integrating the marketing tools, the advertising partner receives information that you have accessed the relevant part of our website or clicked on one of our ads. If you are registered with our advertising partner (for example, on Facebook or Google), the advertising partner can associate the visit with your account. Even if you are not registered or logged in, there is a possibility that the provider can obtain and store your IP address.

We use conversion tracking from the following advertising partners:

Google Adwords

Google LLC, 1600 Amphitheater Parkway, Mountainview, California 94043, USA

Further information on data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can prevent conversion tracking by Google Adwords by disabling cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com,” https://www.google.de/settings/ads, noting that these settings will be deleted if you delete your cookies, or permanently disable them in your browsers Firefox, Internet Explorer, or Google Chrome at the link http://www.google.com/settings/ads/plugin.

Facebook

Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA.  For more information on Facebook’s privacy policy, visit: http://de-de.facebook.com/about/privacy/. If you do not want Facebook to associate the collected information with your Facebook account, you can disable this here: https://www.facebook.com/settings/?tab=ads

To do this, you need to be logged into Facebook. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework

Use of Google Remarketing

Our websites use so-called “retargeting tags” to display interest-based advertising on third-party websites. The legal basis is our legitimate interest in advertising measures in accordance with Art. 6 para. 1f GDPR.

A retargeting tag is referred to as a JavaScript element that is placed in the source code of the website. If a user visits a page on such a website that contains a retargeting tag, an online advertising provider (“retargeting provider,” e.g., Google, Facebook) places a cookie on the user’s computer and assigns it to the corresponding retargeting audience lists. The respective retargeting providers use the cookie to collect interest data (e.g., the pages visited on our website or search queries) using pseudonyms. Based on this information, interest-based advertising will then be displayed to you by the retargeting providers. No directly personal data is stored, and no usage profiles with personal data about you are compiled. However, the retargeting provider may be able to identify you and associate your usage behavior on our website with you, especially if you are a registered user of the retargeting provider (e.g., if you have a Google or Facebook account).

We use the following retargeting providers:

Facebook Retargeting

Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA            Your IP address and the pages you view on the GoEuro website are transmitted to Facebook. You can find more information about data processing by Facebook and your rights and options to protect your personal data in Facebook’s privacy policy at: http://de-de.facebook.com/about/privacy/

If you do not want Facebook to associate the collected information with your Facebook account, you can disable the retargeting features here:

https://www.facebook.com/settings/?tab=ads

You need to be logged into Facebook for this.

Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework

Google Remarketing (DoubleClick)

Google LLC, 1600 Amphitheater Parkway, Mountainview, California 94043, USA. Users of this website can disable the use of cookies by Google and retargeting by visiting “Google Ads Settings” (http://www.google.com/ads/preferences/). For more information about data processing by Google, please visit https://www.google.com/intl/en/policies/technologies/ads/ and https://policies.google.com/privacy/partners.

Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Newsletter

When you sign up for our newsletter, the data you provide will be used exclusively to regularly send you a newsletter and marketing emails with advertisements and information about our offers via email. Subscribers may also be informed via email about circumstances relevant to the service or registration (for example, changes to the newsletter offer or technical conditions).

For a valid registration, we require a valid email address. To verify that a registration is indeed made by the owner of an email address, we use the “double-opt-in” procedure. To do this, we log the order of the newsletter (data entered in the registration form, such as salutation, first name, last name, email), the sending of a confirmation email, and the receipt of the requested response. No further data is collected. The data will be used exclusively for sending the newsletter.

The legal basis for data processing is your consent in accordance with Art. 6 para. 1a GDPR.

You can revoke your consent to the storage of your personal data and its use for the newsletter dispatch at any time. In each newsletter, there is a corresponding link for this. Additionally, the revocation can be carried out through the other contact options provided on the website. Your data will then be deleted from our system immediately.

Raffle

On our website, you have the opportunity to participate in an in-house hotel raffle. The data provided in the contest form will be used exclusively to determine a winner. To this end, we log the completed entry form (data entered into the input mask, such as salutation, first name, last name, email, postal address), the sending of a confirmation email, and the receipt of the requested response. No further data will be collected. The data will be used exclusively for the duration of the contest and will not be shared with third parties. After the end of the contest, your data will be deleted. The legal basis is Art. 6 para. 1b GDPR.

1. Processing of Personal DataBy participating in our contest, we collect your personal data (name, contact details, and email address) only to the extent you provide them. The data processing serves the purpose of properly conducting the raffle and to notify you in the event of a win.This data processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consents at any time by notifying us without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation. Your data will then be deleted.Data will not be shared with third parties.(Would you like to publish the profile name or the first and last name of the winner on Instagram?)Would you like to publish the profile name or the first and last name of the winner on Instagram? Storage duration
2. Storage duration
   We store your personal data as long as it is necessary for the decision regarding the contest. Your data will subsequently be deleted no later than three months after, unless you have consented to further processing and use and/or we have no legitimate interest in retaining it.
3. Rights of the Data SubjectsIf the legal requirements are met, you have the following rights under Articles 15 to 20 of the GDPR: the right to access, the right to rectification, the right to erasure, the right to restriction of processing, and the right to data portability. Additionally, you have the right to object under Art. 21 para. 1 GDPR to processing based on Art. 6 para. 1 lit. f GDPR, as well as to processing for the purpose of direct marketing.

Right to lodge a complaint with the supervisory authority

You have the right, according to Art. 77 GDPR, to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.

Right to object

If the personal data processing listed here is based on our legitimate interest according to Art. 6 para. 1 lit. f GDPR, you have the right, for reasons arising from your particular situation, to object to these processing activities at any time with effect for the future.

After a successful objection, the processing of the affected data will be terminated, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.

Data recipients

We make use of external service providers, particularly technical and commercial service providers. This includes, in particular, hosting providers, statistics and analytics services, service providers for managing service desk and support data, service providers for providing CRM systems, for newsletter distribution, for voucher ordering, for spam and abuse prevention, as well as IT maintenance and development service providers. The service providers act solely on our behalf and are not permitted to process personal data for their own purposes. In the context of a booking, we transmit data to payment service providers, financial authorities, and local administration. The data processing may also involve the transfer of data to data recipients outside the European Union. The data transfer is carried out in accordance with the principles of the so-called Privacy Shield (https://www.privacyshield.gov/welcome) or based on the so-called standard contractual clauses of the EU Commission (http://ec.europa.eu/justice/data-protection/international-transfers/transfer/index_en.htm).

Your rights

In addition to the right to withdraw your consents granted to us, you have the right to access under Art. 15 GDPR, to rectification under Art. 16 GDPR, to erasure under Art. 17 GDPR, to restriction of processing under Art. 18 GDPR, the right to object under Art. 21 GDPR, and the right to data portability under Art. 20 GDPR, provided the respective legal requirements are met.

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data based on Art. 6 para. 1f GDPR. (Art. 21 Abs. 1 DSGVO).

Insofar as we process your personal data for the purposes of direct marketing in accordance with Art. 6 para. 1f GDPR, you have the right to object to this at any time, even without providing reasons. (Art. 21 Abs. 2 DSGVO).

In addition, there is a right to lodge a complaint with the data protection supervisory authorities under Art. 77 GDPR.

Questions about data protection

If you have any questions about data protection, please send us an email at

info@chiemsee-chalet.de