Privacy Policy

This privacy policy applies to data processing by:
Data Controller
Hendrik van Bebber

Phone +49 2801 78-0
info@hotel-nibelungenhof.de

a) When visiting the website

When you visit our website www.hotel-nibelungenhof.de the browser on your device automatically sends information to our website’s server. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted:

• IP address of the requesting computer,
• date and time of access,
• name and URL of the retrieved file,
• the website from which the request originated (referrer URL),
• the browser you are using and, if applicable, your computer’s operating system, as well as the name of your Internet service provider.

We process the data listed above for the following purposes:

• Guarantee that the website loads smoothly,
• Guarantee to use our website comfortably,
• Assessment of system security and stability, as well as
• to further administrative purposes.

The legal basis for data processing is Article 6(1), first sentence, subparagraph (f) of the GDPR. Our legitimate interest stems from the purposes of data collection listed above. Under no circumstances do we use the collected data to draw conclusions about your identity.

In addition, we use cookies and analytics services when you visit our website. For more information, please see sections 4 and 5 of this Privacy Policy.

b) When using one of our contact or booking forms

If you have any questions, we offer you the option to contact us using the forms provided on our website. You must enter a valid email address so that we know who sent the inquiry and can respond to it. Additional information is optional.

Data processing when you contact us is carried out in accordance with Article 6(1), first sentence, subparagraph (a) of the GDPR, based on your voluntary consent.

The personal data we collect when you use the contact form will be automatically deleted once your inquiry has been processed.

c) In addition, we process:

aa) any contract details, such as the subject matter of the contract, the term, and any customer information.

bb) Payment data, such as your bank account information and the individual payments you have already made on behalf of all customers, prospective customers, and our other business and cooperation partners, in order to provide you with contractual services quickly and efficiently. This data is also used to ensure service and customer care, but is likewise used for advertising and research purposes.

Your personal data will not be disclosed to third parties for any purposes other than those listed below. We will only disclose your personal data to third parties if:

• You have given your explicit consent pursuant to Article 6(1), first sentence, subparagraph (a) of the GDPR to,
• the disclosure is necessary under Article 6(1), first sentence, of the GDPR to assert, exercise, or defend legal claims, and there is no reason to believe that you have an overriding legitimate interest in preventing the disclosure of your data,
• in the event that there is a legal obligation to disclose information pursuant to Article 6(1), first sentence, subparagraph (c) of the GDPR, as well as
• this law is not permitted and is necessary for the performance of contractual relationships with you pursuant to Article 6(1), first sentence, subparagraph (b) of the GDPR.

We use the services of the online reservation provider Online Res, operated by Hotelfinder GmbH & Co. KG, Birkenallee 135, 48432 Rheine. When you use our contact form, your data is first transmitted to OnlineRes and stored on OnlineRes’s servers. Your inquiry is then forwarded to us. For more details, please refer to the privacy policy: https://www.onlineres.de/de/datenschutz

We use cookies on our website. These are small files that are automatically created in your browser and stored on your device (laptop, tablet, smartphone, or similar) when you visit our website. Cookies do not cause any damage to your device and do not contain viruses, Trojans, or other malware.

The cookie stores information related to the specific device being used. However, this does not mean that we thereby gain direct knowledge of your identity.

The use of cookies serves, on the one hand, to make your experience with our website more enjoyable. For example, we use so-called session cookies in accordance with Article 6(1), first sentence, letter a of the GDPR to recognize that you have already visited individual pages on our website. These are automatically deleted when you leave our website.

In addition, to optimize user-friendliness, we also use temporary cookies that are stored on your device for a specific, predetermined period of time. When you visit our website again to use our services, we automatically recognize that you have visited us before and recall the information and settings you entered, so you do not have to re-enter them.

In addition, we use cookies to collect statistical data on the use of our website and to analyze this data in order to optimize our offerings for you (see Section 5). These cookies allow us to automatically recognize that you have visited our website before when you return. These cookies are automatically deleted after a specified period of time.

The data processed by cookies is necessary for the stated purposes to safeguard our legitimate interests and those of third parties pursuant to Article 6(1), first sentence, subparagraph (f) of the GDPR.

Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or so that a notification always appears before a new cookie is created. Please note, however, that completely disabling cookies may prevent you from using all the features of our website.

We process personal data (e.g., names, addresses, and contact information of users) and contract data (e.g., services used, names of contact persons, payment information) for the purpose of fulfilling our contractual obligations.

When you use our online services, we store your IP address and the time of the respective user action. This data is stored in the mutual interest of both parties—to document your user actions and to protect you from misuse and other unauthorized use (e.g., access by unauthorized third parties, hackers, or other electronic attacks). We do not, as a general rule, disclose this information to third parties. Exceptions to this may include legal obligations under Article 6(1)(c) of the GDPR or the need to pursue our own claims.

We process usage data (e.g., the web pages visited on our website, interests in our products) and content data (e.g., entries in the contact form) for advertising purposes in a separate user profile in order to provide the user with, for example, product recommendations based on their previous browsing behavior on our site.

Data is deleted once statutory warranty obligations and similar obligations have expired; we review the necessity of retaining the data every three years. In cases where statutory retention obligations apply, the data is not deleted until the retention period has expired. All information in the customer account is retained until the expiration date.

As part of our online offerings, we use content from third-party providers such as YouTube, Google Maps, and social media platforms like Twitter and Instagram based on our legitimate interests within the meaning of Article 6(1)(f) of the GDPR, in order to integrate the content and services provided by these third parties—such as videos and, in particular, fonts—into our website.

For integration purposes, it is essential that the IP address be recognized by third-party providers; otherwise, your browser will not be able to display the relevant content. The IP address is therefore used solely to ensure the proper display of our website.

We make every effort to use only third-party content providers that use IP addresses solely for the purpose of delivering that content.

However, third-party providers may also use so-called pixel tags. These are typically invisible graphics, but may also be web beacons. They are used to collect information such as the number of visitors to our website. This information may also be stored in cookies on the user’s device. These cookies then contain specific information about the browser and operating system used, referring websites, and the time of the visit to our website. They may also be linked to information from other sources.

We use fonts (“Google Fonts”) provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Privacy Policy: https://www.google.com/policies/privacy,/

If you do not wish to use these fonts, you can opt out. To do so, please click on the following link: https://adssettings.google.com/authenticated authenticated. However, this may prevent our website from displaying properly.

To improve coordination and enable you to quickly evaluate our offer, we use the services of an online review portal through our partner, who:

CA Customer-Alliance GmbH
Ullsteinstraße 118, Tower B
12109 Berlin, Germany.

You can find Customer Alliance’s Privacy Policy at
https://www.customer-alliance.com/de/datenschutzbestimmungen/

When you use our review portal, the data you enter is automatically forwarded to Customer-Alliance and stored there for the purpose of processing your request.

You have the right to:

• pursuant to Article 15 of the GDPR, to request information about your personal data that we process. In particular, you may request information regarding the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, the existence of a right to rectification, erasure, restriction of processing, or objection; the existence of a right to lodge a complaint; the origin of your data, if it was not collected by us; and the existence of automated decision-making, including profiling, and, where applicable, meaningful information regarding its details;
• in accordance with Article 16 of the GDPR, to request without delay the correction of inaccurate personal data or the completion of your personal data stored by us;
• to request, pursuant to Article 17 of the GDPR, the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to assert, exercise, or defend legal claims;
• to request the restriction of the processing of your personal data pursuant to Article 18 of the GDPR, provided that you contest the accuracy of the data, the processing is unlawful but you oppose its erasure and we no longer need the data, but you need it to assert, exercise, or defend legal claims, or you have objected to the processing pursuant to Article 21 of the GDPR;
• in accordance with Article 20 of the GDPR, to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request that it be transferred to another controller;
• In accordance with Article 7(3) of the GDPR, you may withdraw your consent at any time. As a result, we may no longer continue processing the data based on that consent in the future, and
• to file a complaint with a supervisory authority pursuant to Article 77 of the GDPR. As a general rule, you may contact the supervisory authority in your usual place of residence, your place of work, or the location of our law firm’s headquarters.

If your personal data is processed on the basis of legitimate interests pursuant to Article 6(1), first sentence, letter f of the GDPR, you have the right, pursuant to Article 21 of the GDPR, to object to the processing of your personal data, provided there are grounds arising from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will honor without requiring you to specify a particular situation.

If you wish to exercise your right of withdrawal or right to object, simply send an informal email to:
info@hotel-nibelungenhof.de.

During your visit to our website, we use the widely adopted SSL (Secure Sockets Layer) protocol in conjunction with the highest encryption level supported by your browser. This is typically 256-bit encryption. If your browser does not support 256-bit encryption, we will fall back to 128-bit V3 technology instead. You can tell that a specific page on our website is being transmitted securely by the closed key or lock icon displayed in the status bar at the bottom of your browser.

We also employ appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

This Privacy Policy is currently in effect and is dated May 2018.

Due to further developments to our website and the services offered through it, or due to changes in legal or regulatory requirements, it may become necessary to amend this Privacy Policy. You can view and print the most current version of the Privacy Policy at any time on our website at https://hotel-nibelungenhof.de/en/privacy-policy.