of the Hirsch Hotel
The term "personal data" refers to any information relating to an identified or identifiable natural person. Consequently, personal information shall be deemed to include any data allowing us to identify the user personally, such as, for example the name, postal address and email address.
"Data processing" refers to any operation or set of operations involving personal data, for example the collection, storage, use and deletion of data, regardless of whether the information is being processed with or without the help of automated systems.
1. General advice on the collection, processing and use of data on our website
Unless otherwise stated in this document, our website can be used without providing personal data.
Generally, we only collect personal data that is provided by the user personally and with the explicit consent of the user. The processing and exploitation of such data, in accordance with article 6, paragraph 1, letter b, GDPR (General Data Protection Regulation), are aimed at the execution of an agreement or the fulfilment of pre-contractual duties. The provision of personal data is essential for the conclusion of an agreement. If the user fails to provide such information, it is not possible to sign an agreement. The data collected through this website will be deleted upon signature of the agreement or its completion, notwithstanding the retention periods stipulated by Tax Law or Commercial Law.
In order to make sure that our website is working smoothly and correctly and improve our services, user data are automatically recorded each time our website is accessed. We collect primarily technical data, such as the browser type and the time of the server request. These data do not enable us to identify the user personally.
For security reasons, notably the protection of the transmission of personal data and confidential messages, this website uses the SSL/TSL encryption. The effectiveness of this encryption is indicated by the string of characters "https://" and the padlock symbol in the address bar of the browser. With this encryption being activated, no unauthorised person will be able to read your messages.
Please note, however, that the data transmission in the internet, such as the communication via email, is not completely secure. It is not possible to guarantee full protection against the unauthorised interception of messages by a third party.
2. Organisation (Manager) responsible for the Data Processing on this Website
Hotel Hirsch GmbH & Co. KG
Mr Harald Schwecke
D - 87629 Füssen
Telephone: +49 (0) 8362 9398-0
It may be a natural person or a legal entity that is responsible for data protection issues. Decisions regarding the purposes of data processing and the means deployed in pursuit of the goals may be made individually or collectively.
3. Transfer of Personal Data to a Third Party
The transfer of personal data to a third party or a service provider shall be strictly limited to the following cases:
- The transfer of personal data is explicitly authorised or imposed by law.
- The transfer of data is essential for the fulfilment of an agreement in accordance with article 6, paragraph 1, letter b, GDPR (General Data Protection Regulation).
- The user has expressly given the consent to the data transfer.
- We have a legitimate interest in the data transfer as set out in article 6, paragraph 1, letter f, GDPR.
Article 6, paragraph 1, letter f, GDPR constitutes together with article 28, GDPR the legal basis for webhosting services. The use of the hosting services delivered by our internet service provider is essential to ensure a reliable, correct and safe operation of our website. For this purpose, our service provider collects and processes various data on our behalf, including master data, user data, communication data and contract data as well as material data regarding the clients and visitors of our pages.
The transfer of personal information for data processing purposes due to a data processing agreement signed with a third party shall be authorised in accordance with the article 28, GDPR.
4. Server Log Files
Each time our website is accessed, the browser of the user transmits automatically user data to our server. These data are stored in so-called "server log files". The information recorded includes the following:
- Name of the page requested
- Date and time of the access
- Data amount transmitted
- Referrer URL (the page from which our page is accessed)
- Browser type and version
- Operating system of the user
- Host name of the server from which the request is made
- IP address
The processing of these data shall be deemed to be authorised pursuant to article 6, paragraph 1, letter f, GDPR, given our legitimate interest in the improvement of the usability of our online services.
This website uses "Webalizer", a web analytics tool designed to analyse the data mentioned above. This software allows us to carry out a statistical analysis of the traffic on our website and compile charts including the number of visitors, the number of pages visited and the number of requests of pages and files. The data processing is solely performed for internal statistical purposes and the optimisation of our website. These activities are carried out in accordance with article 6, paragraph 1, letter f, GDPR, given our legitimate interest to enhance the quality of our services.
The data recorded in the server log files, in particular personal information, will not be associated with other data sources. The data generated by server log files is stored by our internet service provider, the Germany-based "Schimpel Online Marketing" Agency. It will not be transferred outside the European Union or passed on to any third party.
Our website uses so-called cookies, These are small text files that are placed on the computer system of the user by the web browser each time our website is accessed. The cookies help us make our online services more user-friendly, efficient and safer.
Most of the cookies used on our website are so-called "session cookies" that are automatically deleted when the user leaves our website or closes the browser. There are, however, other cookies that remain on the user device beyond the closure of the browser, thereby enabling us to recognise the user on subsequent visits of our website.
If you do not want your computer to generate and store cookies, you can disable the cookies by modifying the setting of your browser software. Cookies that are saved on your device can be deleted at any time. Alternatively, you can adjust the setting of your browser software to ensure that you get informed of the generation of cookies by websites or that cookies are only created under specific circumstances or deleted automatically upon closure of the web browser. Please note, however, that the functionality of this website will be affected whey you decide to disable cookies altogether. Certain functions of this website (for example the contact form) will then no longer work correctly.
At the following links you will find instruction regarding the handling of cookies and options for disabling them for the most common browser types:
Google Chrome: https://support.google.com/chrome/answer/95647?hl=en&hlrm=en
Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Internet Explorer: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies
6. Contact Form
When you send us an enquiry using our contact form, we will store the information and your contact details provided by you to deal with your enquiry and answer subsequent questions. When submitting an enquiry, you are deemed to agree to the processing of the data provided therein.
The data provided via our contact form will be processed with your implicit consent in accordance with article 6, paragraph 1, letter a, GDPR. We will not pass on the data to any third party without your prior consent.
You can withdraw your consent at any time sending us an informal message (for example via email). The lawfulness of the data processing prior to the revocation shall not be affected by the withdrawal of the consent.
Your data will be deleted as soon as we have answered your enquiry, unless you have agreed to the continued processing of your data or otherwise provided by law (for example statutory retention periods).
7. Use of "Google Analytics"
On this website we use "Google Analytics", a web analytics tool provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
"Google Analytics" uses so-called "cookies", small text files that are stored on your computer, allowing us to analyse the traffic on our website. Usually, the information generated by the cookie relating to your use of this website is transmitted to and stored by Google on a server in the United States. Google is certified according to the "Privacy-Shield" Agreement on data protection, which is aimed at ensuring the compliance with enforceable data protection standards within the European Union.
The use of the "Google Analytics" tool and the generation of cookies shall be deemed to be authorised pursuant to the article 6, paragraph 1, letter f, GDPR, given our legitimate interest in analysing the website traffic with the aim to enhance the design and usability of our website.
Google will use the information generated by the cookies on our behalf to analyse your use of the website, to compile reports on the website traffic and to develop and provide further services for the use of websites and the internet for the benefit of the website operators. The IP address, transmitted by your browser to a server of Google due to the use of "Google Analytics", will not be associated to any other data held by Google.
The IP anonymization (masking) feature is activated on this website. This means that Google will truncate the IP address within the member states of the European Union and in countries having signed the Agreement on the European Economic Area before being transmitted to a server of Google. Only in exceptional cases, your full IP address will be transmitted to a server of Google in the United States and abbreviated there.
You can disable cookies by adequately adjusting the setting of your browser software. Please note, however, that you will then no longer be able to use all functions of this website to their full extent. You can also prevent the generation of data (including your IP address) by cookies and their subsequent processing by Google by downloading and installing the opt-out browser add-on which is available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en
Instead of installing the browser add-on, you can set an opt-out cookie to prevent the "Google Analytics" tool from collecting data upon your visit of our website. You need to place the opt-out cookie in all browsers and devices of your system to ensure a complete protection. If you should delete such a cookie by inadvertence, you must reinstall it. Please click on the following link to download and install the opt-out cookie: Deactivate Google Analytics
Data Processing Agreement
Having signed a data processing agreement with Google, we use the "Google Analytics" tool in compliance with the stringent terms and conditions laid down by the German Data Protection Authorities.
8. YouTube Plugin
We use the YouTube plugin to embed videos in our website. The operator of the video platform is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA ("YouTube"). The YouTube LLC Company is a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
When you access a page containing a YouTube plugin, a connection to the servers of YouTube is established. YouTube receives the information that you are visiting a specific page of our website. If you are logged in to your YouTube account, the operator of the platform can assign your activities on our website to your personal profile. You can prevent this by logging out from your YouTube account before visiting our website.
The use of the YouTube plugin shall be deemed to be authorised in accordance with article 6, paragraph 1, letter f, GDPR, given our legitimate interest in ensuring an attractive and visually appealing presentation of our website.
9. Use of Google Maps
On this website, we have embedded maps provided by "Google Maps". This function enables us to display geographical information and interactive maps. The service is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
When you access a page containing a "Google Maps" feature, data regarding your visit of the website (for example your IP address) are recorded and stored. Generally, these data are transmitted to and stored by Google on a server in the United States. Google is certified according to the "Privacy-Shield" Agreement on data protection, which shall guarantee the compliance with enforceable data protection standards within the European Union.
The use of the "Google Maps" services shall be authorised pursuant to article 6, paragraph 1, letter f, GDPR, given our legitimate interest in ensuring an attractive and appealing presentation of our website and providing useful information regarding the location of our hotel to facilitate the access.
10. Use of Google Web Fonts
On this website we use so-called "Web Fonts" provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). This enables us to accurately display the texts and characters in the same layout on all our pages.
When you access a page of our website, your browser downloads the web fonts required in the cache to display the texts and characters correctly. Therefore, your browser sets up a connection to the servers of Google in the United States. In consequence thereof, Google receives the information that our website has been accessed from your device (IP address). Google is certified according to the "Privacy-Shield" Agreement on data protection, which shall guarantee the compliance with the enforceable data protection standards within the European Union.
The use of the "Google Web Fonts" service shall be deemed to be authorised pursuant to article 6, paragraph 1, letter f, GDPR, given our legitimate interest in presenting accurately all pages of our website in the same layout. In the event that your browser does not support the web fonts, your device will use standard fonts.
11. Rights of the Data Subject
According to the applicable data protection legislation, you have a series of rights regarding the processing of your personal data (for example the right to request information or deletion as well as the right to object).
You have the following rights:
Right to Request for Information in Accordance with Article 15, GDPR
You have the right to obtain a confirmation as to whether or not your personal data is being processed. Furthermore, you are entitled to request for a documentation of the data that is subject to processing.
You can notably ask for information about the following issues:
- The purposes of the data processing
- The categories of the personal data that are being processed
- The recipient or the categories of recipients to whom the data are or will be disclosed
- The retention schedules
- The existence of the right to correction, deletion, restriction of and objection to the processing as well as the right to lodge a complaint with the competent authority
- The origin of personal data that has been forwarded to us by a third party
- The existence of an automated decision-making process, including profiling, as well as meaningful and detailed information on this subject matter
- The right to be informed on the nature of the safeguards adopted to secure the transmission of data to foreign countries according to article 46, GDPR
Right to Rectification in Accordance with Article 16, GDPR
You have the right to have inaccurate personal data corrected as well as the right to have incomplete personal data completed.
Right to Erasure in Accordance with Article 17, GDPR
You have the right to require us to erase immediately your personal data. The right to erasure is not enforceable, if the data processing is essential for the exercise of the right to freedom of expression and information, for the pursuance of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims.
Right to Restriction of the Data Processing in Accordance with Article 18, GDPR
You have the right to obtain the restriction of the processing of personal data under the following circumstances:
- The accuracy of the data is contested by you. In such an event, the restriction of processing shall be limited to the period the controller needs to verify the accuracy of the data.
- You object to the erasure of the personal data considering that the data has been unlawfully processed, requiring instead the restriction of the processing of the personal data concerning you.
- You need the data to assert, exercise or defend legal claims, with the data no longer being necessary for the purposes underlying the processing.
- You have raised a legitimate objection to the data processing due to specific personal circumstances pursuant to article 21, paragraph 1, GDPR. In such an event, you can require the restriction of the data processing until it is established whether or not our legitimate interests prevail.
Right to Data Portability in Accordance with Article 20, GDPR
You have right to receive a document containing the personal data concerning you in a structured format of common use and machine-readable. You shall also be entitled to require the direct transfer of the personal data from one controller to another, provided that it is technically feasible.
Right to Withdraw Consent in Accordance with Article 7, Paragraph 3, GDPR
You have the right to withdraw at any time the consent previously given to the processing of your personal data by sending us an informal message (for example via email). The revocation shall not affect the lawfulness of the data processing prior to the withdrawal of the consent.
Right to Objection in Accordance with Article 21, GDPR
You have the right to object at any time, for reasons relating to your specific personal situation, to the future processing of your personal data.
When you exercise your right to objection, we will cease the processing of your data, unless there are compelling legitimate grounds for the continuation of the data processing overriding your interests, rights and freedoms or if the data processing is essential to assert, exercise or defend legal claims.
You have also the right to object to the processing of personal data concerning you, in the event that your personal data is being processed for direct mailing purposes.
When you exercise your right to object, we will cease to use your personal data for direct marketing purposes.
Right to Lodge a Complaint with a Competent Authority in Accordance with Article 77, GDPR
You shall have the right to lodge a complaint with a competent authority, if you consider that the processing of the personal data concerning you is unlawful, infringing the applicable provisions of the GDPR.
12. Retention Period
The data will be kept in compliance with the statutory retention schedules, notably the retention periods established in Tax Law or Commercial Law. Once the relevant retention periods have expired, the data will be erased, unless they are still essential for the execution of an agreement or the fulfilment of pre-contractual duties or if you have agreed to the continued processing and use of your personal data.