Privacy Policy
The data controller within the meaning of data protection laws, particularly the General Data Protection Regulation (GDPR), is:
KüstenperleStrandhotel & SpaKahlke-Schneider GmbH & Co. KGDithmarscher Straße 3925761 Büsum
Represented by:Andrea Kahlke – Managing PartnerIsa Schneider – Managing PartnerDavid Schneider – Managing Partner
Contact:Telephone: +49 4834 96 211 0 Fax: +49 4834 96 211 - 600E-mail: info(at)hotel-kuestenperle.de
Your rights as the data subject
- You can exercise the following rights at any time by using the provided details to contact our data protection officer:
- the right to information regarding what personal data we store and how it is processed (Art. 15 GDPR),
- the right to rectification of incorrect personal data (Art. 16 GDPR),
- the right to erasure of data stored by us (Art. 17 GDPR),
- the right to restrict data processing, if we are not yet permitted to erase your data due to legal obligations (Art. 18 GDPR),
- the right to object to your data being processed by us (Art. 21 GDPR) and
- the right to data portability, provided you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR).
If you have given us your consent, you can withdraw this at any time with future effect.
You can lodge a complaint with a supervisory authority, e.g. the responsible authority of the federal state in which you reside or the authority responsible for us as the data controller, at any time.
You can find a list of supervisory authorities (for the non-public sector) and their addresses at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Collection of general information when you visit our website
Type and purpose of processing:
Information of a general nature is automatically collected when you access our website, i.e. when you do not register or otherwise disclose information. This information (server log files) generally includes the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and the like. None of this information can be used to identify you personally.
- It is processed for the following purposes in particular:
- to ensure that a connection to the website can be established without problems,
- to ensure that our website can be used without any issues,
- to analyse system security and stability, and
- for other administrative purposes.
We do not use your data to identify you personally. This type of information is statistically evaluated where appropriate, in order to optimise our website and its underlying technology.
Legal basis:
This data processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.
Recipients:
Data recipients may be technical service providers who have been commissioned as processors, tasked with the operation and maintenance of our website.
Retention period:
The data will be erased as soon as it is no longer required for the purpose for which it was collected. For data used to enable access to the website, this is generally when the respective session ends.
Prescribed or necessary provision of data:
Provision of the aforementioned data is neither required by law nor by contract. However, without the IP address, it is not possible to guarantee the availability and functionality of our website. Furthermore, individual features and services may not be available or only limited use of such may be possible. For this reason, objection is excluded.
Registration on our website
Type and purpose of processing:
When you register to use our personalised services, certain personal data is collected, such as name, address, contact and communications details (e.g. telephone number and e-mail address). If you are registered with us, you can access content and services that we only offer to registered users. Registered users also have the option to amend or delete the data that was provided during the registration process at any time. We will of course also provide you with information about the personal data we hold on file for you at any time.
Legal basis:
The data disclosed during the registration process is processed on the basis of the user's consent (Art. 6 para. 1 lit. a GDPR).
Recipients:
Data recipients may be technical service providers who have been commissioned as processors, tasked with the operation and maintenance of our website.
Retention period:
Data shall only be processed in this context for as long as appropriate consent is granted. After this, it will be erased, provided no statutory storage obligations prevent such. If you wish to make an enquiry in this respect, please use the contact details provided at the end of this Privacy Policy.
Prescribed or necessary provision of data:
Your personal data is provided voluntarily, solely on the basis of your consent. If you do not provide your personal data, we cannot guarantee you access to our offered content and services.
Provision of paid services
Type and purpose of processing:
In order to provide services for which a fee is charged, we will ask you for additional information, e.g. payment details, to enable us to process your order.
Legal basis:
The data processing that is required for conclusion of the contract is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
Recipients:
Data recipients may be processors.
Retention period:
We store this data in our systems until the statutory retention period has expired. This is generally 6 or 10 years on grounds of ensuring proper accounting and complying with the requirements of fiscal law.
Prescribed or necessary provision of data:
Your personal data is provided voluntarily. If you do not provide your personal data, we cannot guarantee you access to our offered content and services.
Newsletter
Type and purpose of processing:
Your data is only used to send you the subscription newsletter via e-mail. Your name is used to address you personally in the newsletter and possibly to identify you if you wish to exercise your rights as the data subject.
You only need to provide your e-mail address in order to receive the newsletter. The data you enter when subscribing to receive our newsletter will only be used for this purpose. Subscribers can also be sent e-mails informing them of circumstances that are relevant to the service or registration (e.g. changes to the newsletter offer or technical conditions).
We require a valid e-mail address to ensure successful registration. In order to check that it is actually the owner of the e-mail address who is registering, we use the "double-opt-in" process. To this end, we log the request to receive the newsletter, the sending of a confirmation e-mail and receipt of the response requested by this e-mail. No other data is collected. The data will only be used to send the newsletter and will not be passed on to third parties.
Legal basis:
We will regularly send you our newsletter or comparable information via e-mail to the e-mail address you have provided on the basis of your explicitly granted consent (Art. 6 para. 1 lit. a GDPR).
You can withdraw your consent for us to store your personal data and to use it to send you the newsletter at any time with future effect. You will find a link for this purpose in every newsletter. You can also unsubscribe at any time by visiting the website directly or by informing us that you wish to withdraw your consent by using the contact details provided at the end of this Privacy Policy.
Recipients:
Data recipients may be processors.
Retention period:
The data shall only be processed in this context for as long as appropriate consent is granted. After this, it will be erased.
Prescribed or necessary provision of data:
Your personal data is provided voluntarily, solely on the basis of your consent. Unfortunately, we are unable to send you our newsletter unless you give your consent to such.
Contact form
Type and purpose of processing:
The data you provide will be stored for the purpose of communicating with you personally. For this you must provide a valid e-mail address and your name. This allows us to assign your enquiry and the subsequent reply to said enquiry. The provision of additional data is optional.
Legal basis:
The data entered in the contact form is processed on the basis of a legitimate interest (Art. 6 para. 1 lit. f GDPR).
We offer the contact form to provide you with a simple way of getting in touch with us. The details you disclose to us will be stored so that your enquiry can be processed and so that any potential follow-up questions can be asked.
If you contact us to request a quote, the data entered in the contact form is processed in order to carry out pre-contractual measures (Art. 6 para. 1 lit. b GDPR).
Recipients:
Data recipients may be processors.
Retention period:
Data will be erased at latest 6 months after the enquiry has been processed.
If the enquiry results in the establishment of a contractual relationship, we are subject to the statutory storage periods as per the terms of the HGB and erase your data following expiry of these periods.
Prescribed or necessary provision of data:
Your personal data is provided voluntarily. However, we are only able to process your enquiry if you provide us with your name, e-mail address and the reason for your enquiry.
Use of Google Analytics
Type and purpose of processing:
This website uses Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter: "Google"). Google Analytics uses "cookies", which are text files that are stored on your computer and which allow your use of the website to be analysed. The information generated by the cookie relating to your use of this website is usually transmitted to a Google server in the USA and stored there. As IP anonymisation is activated on these web pages, your IP address will in fact be truncated by Google beforehand within the member states of the European Union or other countries that have signed the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and be truncated there. Acting on behalf of the operator of this website, Google will use this information to analyse your use of the website in order to compile reports on website activity and to provide other services related to website usage and internet usage for the operator of the website. The IP address communicated by your browser within the framework of Google Analytics will not be merged with other Google data.
The purpose of data processing is to analyse use of the website and to compile reports on website activity. Additional associated services are to be provided on the basis of use of the website and the internet.
Legal basis:
Data processing is carried out on the basis of the user's consent (Art. 6 para. 1 lit. a GDPR).
Recipients:
The data recipient is Google, in the role of processor. We have concluded the appropriate processing contract with Google for this purpose.
Retention period:
The data is erased as soon as it is no longer required for our record-keeping purposes.
Transfer to third countries:
Google processes your data in the USA and has committed to adhere to the EU-US Privacy Shield Framework https://www.privacyshield.gov/EU-US-Framework. We have also agreed upon standard data protection clauses with Google for the use of Google Analytics.
Prescribed or necessary provision of data:
Your personal data is provided voluntarily, solely on the basis of your consent. If you prevent access to such, use of the website's functions may be limited as a result.
Withdrawal of consent:
You can prevent the storage of cookies by adjusting the settings on your browser software correspondingly; however, we advise you that in this case you may not have full use of all of this website's functions. You can also prevent Google from collecting the data generated by the cookie relating to your use of the website (including your IP address), and prevent Google from processing this data, by downloading and installing the browser plug-in available at the following link:Browser add-on for deactivating Google Analytics.
In addition to or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our web pages by clicking on this link. This will cause an opt-out cookie to be installed on your device. This will prevent the future gathering of data by Google Analytics for this website and for this browser, for as long as the cookie remains installed in your browser.
Profiling:
The Google Analytics tracking tool can be used to evaluate the behaviour of visitors to the website and analyse their interests. For this purpose we create a pseudonymous user profile.
Use of Google Maps
Type and purpose of processing:
We use Google Maps on this website. Google Maps is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter: "Google"). This allows us to display interactive maps directly on the website and allows you to use the convenient map functions.
You can find out more about how your data is processed by Google by referring to Google's Privacy Policy. There you can also amend your personal privacy settings in the privacy centre.
You can find detailed instructions on how to manage your own data in connection with Google products here.
Legal basis:
Your consent provides the legal basis for the integration of Google Maps and the associated transfer of data to Google (Art. 6 para. 1 lit. a GDPR).
Recipients:
When you visit the website, Google is notified that you have accessed the corresponding subpage of our website. This takes place regardless of whether Google provides a user account via which you are logged in or whether no user account exists. If you are logged into Google, your data will be assigned directly to your account.
If you do not wish Google to assign the data to your profile, you must log out of Google before activating the button. Google stores your data in the form of a user profile and uses it for the purposes of advertising, market research and/or designing its website in a needs-oriented way. This analysis is carried out particularly (including for users who are not logged in) to produce needs-oriented advertising and to inform other users of the social network about your activities on other websites. You have the right to object to the creation of this user profile. Any request to exercise this right must be directed to Google.
Retention period:
We do not collect any personal data through the integration of Google Maps.
Transfer to third countries:
Google processes your data in the USA and has committed to adhere to the EU-US Privacy Shield Framework https://www.privacyshield.gov/EU-US-Framework.
Withdrawal of consent:
If you do not want Google to collect, process or use data relating to you through our website, you can deactivate JavaScript in your browser settings. However, if you choose to do such, you may not be able to use our website or will have only limited access.
Prescribed or necessary provision of data:
Your personal data is provided voluntarily, solely on the basis of your consent. If you prevent access to such, use of the website's functions may be limited as a result.
Embedded YouTube videos
YouTube videos can be temporarily integrated into this website.
Type and purpose of processing:
We embed YouTube videos into some of our web pages. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter "YouTube"). When you visit a page with the YouTube plugin, a connection to YouTube servers is established. This allows YouTube to see which pages you visit. If you are logged in to your YouTube account, YouTube can assign your surfing behaviour to you personally. You can prevent this by logging out of your YouTube account beforehand.
If a YouTube video is played, the provider uses cookies to gather information on user behaviour.
You can find further information regarding the purpose and scope of data collection and processing by YouTube in the provider's privacy policies. These also include further information regarding your rights in this respect and settings options for protecting your privacy (https://policies.google.com/privacy). Google processes your data in the USA and has committed to adhere to the EU-US Privacy Shield Framework https://www.privacyshield.gov/EU-US-Framework.
Legal basis:
Your consent provides the legal basis for the integration of YouTube and the associated transfer of data to Google (Art. 6 para. 1 lit. a GDPR).
Recipients:
A connection to Google is automatically established when YouTube is accessed.
Retention period and withdrawal of consent:
If you have deactivated the storage of cookies for the Google Ad program, you will not have to deal with these types of cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you wish to prevent this, you need to block the storing of cookies in your browser.
You can find further information about data protection on "YouTube" in the provider's privacy policy, available at https://www.google.de/intl/de/policies/privacy/
Transfer to third countries:
Google processes your data in the USA and has committed to adhere to the EU-US Privacy Shield Framework https://www.privacyshield.gov/EU-US-Framework.
Prescribed or necessary provision of data:
Your personal data is provided voluntarily, solely on the basis of your consent. If you prevent access to such, use of the website's functions may be limited as a result.
Online presence in social media
We maintain an online presence on social networks and platforms in order to communicate with customers, interested parties and users who are active on these networks and platforms and to provide them with information about our services.
Please note that users' data may be processed outside of the European Union. This can present risks for users, as it may make it more difficult for users to exercise their rights, for example. With respect to US providers who are certified under the Privacy Shield Framework, please note that they have committed to maintaining the same standard of data protection that applies within the EU.
Users' data is generally also used for market research and advertising purposes. For example, usage profiles can be created using usage behaviour and the user interests revealed by such. The usage profiles can also be used to place advertisements, both on the platforms and in other locations, which correspond to the users' presumed interests, for example. For these purposes, cookies are generally saved to the users' computers, in which records of usage behaviour and users' interests are stored. Furthermore, data can also be stored in the usage profiles irrespective of the devices used by the users (especially if the users are members of the respective platforms and are logged into these).
The users' data is processed on the basis of our legitimate interests in effectively providing information to users and communicating with users according to Art. 6 para. 1 lit. f. GDPR. If the users of the respective providers are asked to consent to data processing (i.e. to declare their agreement e.g. by ticking a check box or clicking on a button), the legal basis for data processing is Art. 6 para. 1 lit. a, Art. 7 GDPR.
For a detailed description of the respective types of processing and options for opting out, please refer to the following information relating to the providers (links provided below).
Please also note that it is best to contact the providers themselves should you wish to request information or exercise your rights as a user. Only the provider has the required access to users' data and can take appropriate measures directly and provide information. If, however, you still require help, you can contact us.
Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)Privacy Policy: https://www.facebook.com/about/privacy/ Opt-Out: https://www.facebook.com/settings?tab=ads and: http://www.youronlinechoices.com Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA)Privacy Policy/Opt-Out: http://instagram.com/about/legal/privacy/
SSL encryption
In order to ensure the security of your data when it is being transferred, we use the latest encryption methods (e.g. SSL) via HTTPS.
Appointed processors
The following organisations, companies or individuals have been commissioned by the operator of this website to process data.
Programming and support: Factorial GmbH Blücherstr. 11 22767 Hamburg E-Mail: hello@factorial.io Telefon: +49 40 41306797 https://www.factorial.io/de/
Review portal: TrustYou https://www.trustyou.com/ https://www.trustyou.com/wp-content/uploads/2018/06/2018-05-24-trustyou-DSE.pdf
Booking portal: cBooking - HotelNetSolutions https://www.hotelnetsolutions.de/ https://www.hotelnetsolutions.de/Datenschutz/
Changes to our Privacy Policy
We reserve the right to make changes to this Privacy Policy in order to ensure that it is always compliant with current legal requirements or to incorporate changes to our services into the Privacy Policy (e.g. if new services are introduced). The new Privacy Policy will apply to your next visit.
Questions for the Data Protection Officer
If you have any queries regarding data protection, please send us an e-mail or contact the individual responsible for data protection within our organisation directly:
Mr Thomas Holst Company: Datensicherheit Nord UG Siemensstraße 28, 25813 Husum Tel.: +49 (0)4841 896820
This Privacy Policy has been prepared using the activeMind AG privacy policy generator (Version 2018-06-22).