Privacy Policy
1. Data Protection at a Glance
General Information The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data refers to all data with which you can be personally identified. Detailed information on the subject of data protection can be found in our privacy policy set out below this text.
Data Collection on This Website
Who is responsible for data collection on this website? Data processing on this website is carried out by the website operator. You can find the operator’s contact details in the section “Information on the Responsible Party” of this privacy policy.
How do we collect your data? Some of your data is collected when you provide it to us. This can, for example, be data you enter into a contact form. Other data is collected automatically, or after you have given your consent, when visiting the website through our IT systems. This data is mainly technical data (e.g. internet browser, operating system, or time of page access). The collection of this data occurs automatically as soon as you enter this website.
What do we use your data for? Part of the data is collected to ensure the proper functioning of the website. Other data may be used to analyze your user behavior.
What rights do you have regarding your data? You have the right to obtain, at any time and free of charge, information about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you may revoke this consent at any time with future effect. Moreover, under certain circumstances, you have the right to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority. For this purpose, as well as for further questions concerning data protection, you can contact us at any time.
Analytics Tools and Tools from Third Parties When visiting this website, your surfing behavior may be statistically analyzed. This happens primarily through the use of analytics programs. Detailed information about these analytics programs can be found in the following sections of this privacy policy. 2. Hosting We host the content of our website with the following provider:
Onepage The provider is Onepage GmbH, Neue Rothofstr. 13–19, 60313 Frankfurt am Main, Germany (hereinafter referred to as “Onepage”). When you visit our website, Onepage collects various log files including your IP address. Further information can be found in the privacy policy of Onepage: https://onepage.io/de/datenschutzerklaerung The use of Onepage is based on Art. 6 (1)(f) GDPR. We have a legitimate interest in ensuring the most reliable presentation of our website. If corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1)(a) GDPR and § 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.
Data Processing Agreement We have concluded a Data Processing Agreement (DPA) with the above-mentioned provider. This is a contract required by data protection law, ensuring that Onepage processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR. 3. General Notes and Mandatory Information Data Protection The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations as well as this privacy policy. When you use this website, various personal data are collected. Personal data are data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens. We would like to point out that data transmission on the Internet (e.g. communication by e-mail) may have security gaps. Complete protection of data from access by third parties is not possible. Information on the Responsible Party
The responsible party for data processing on this website is:
DWMS GmbH Altonaer Str. 131 24539 Neumünster Germany
Phone: +49 4321 5398912 E-mail: hello@hotelcontentbutlers.com
The responsible party is the natural or legal person who, alone or jointly with others, decides on the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).
Storage Duration Unless a specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods); in the latter case, deletion will occur after these reasons cease to apply.
General Information on the Legal Basis for Data Processing on This Website If you have consented to data processing, we process your personal data on the basis of Art. 6 (1)(a) GDPR or Art. 9 (2)(a) GDPR, provided special categories of data according to Art. 9 (1) GDPR are processed. In the case of explicit consent to the transfer of personal data to third countries, data processing also takes place on the basis of Art. 49 (1)(a) GDPR. If you have consented to the storage of cookies or access to information in your terminal device (e.g. via device fingerprinting), processing will also be based on § 25 (1) TTDSG. Consent may be revoked at any time. If your data is required for the performance of a contract or for the implementation of pre-contractual measures, we process it based on Art. 6 (1)(b) GDPR. Furthermore, if your data is required to fulfill a legal obligation, we process it on the basis of Art. 6 (1)(c) GDPR. Data processing may also take place on the basis of our legitimate interest in accordance with Art. 6 (1)(f) GDPR. The respective legal bases for each individual case are explained in the following sections of this privacy policy.
Notice on Data Transfer to Insecure Third Countries and Transfer to U.S. Companies that Are Not DPF-Certified We use tools from companies based in countries that are not considered secure under data protection law, as well as U.S. providers that are not certified under the EU-U.S. Data Privacy Framework (DPF). When these tools are active, your personal data may be transferred to and processed in these countries. We would like to point out that no level of data protection comparable to that in the EU can be guaranteed in such third countries. We would like to point out that the USA is generally considered a secure third country with a data protection level comparable to that of the EU. Data transfer to the USA is therefore permissible if the recipient is certified under the “EU-U.S. Data Privacy Framework” (DPF). If no certification is in place, other appropriate guarantees must exist. Information on transfers to third countries, including recipients of data, can be found in this privacy policy.
Recipients of Personal Data In the course of our business activities, we work with various external parties. This may also involve the transfer of personal data to these external entities. We only disclose personal data to external recipients when this is necessary for the fulfillment of a contract, when we are legally required to do so (e.g., to tax authorities), or when we have a legitimate interest in such transfer pursuant to Art. 6 (1)(f) GDPR. If processors are engaged, your personal data will be transferred to them on the basis of a valid data processing agreement in accordance with Art. 28 GDPR. In the case of joint processing, a joint controllership agreement has been concluded.
Withdrawal of Your Consent to Data Processing Many data processing operations are only possible with your explicit consent. You may revoke an already granted consent at any time. The lawfulness of the data processing carried out prior to the revocation remains unaffected by the withdrawal.
Right to Object to Data Processing in Particular Cases and to Direct Marketing (Art. 21 GDPR)
IF DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6 (1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims (objection pursuant to Art. 21 (1) GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS CONNECTED WITH SUCH DIRECT MARKETING. If you object, your personal data will no longer be used for the purpose of direct marketing (objection pursuant to Art. 21 (2) GDPR).
Right to Lodge a Complaint with the Competent Supervisory Authority In the event of a breach of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or the place of the alleged infringement. The right to lodge a complaint is without prejudice to other administrative or judicial remedies.
Right to Data Portability You have the right to receive the data that we process automatically on the basis of your consent or in fulfillment of a contract, in a commonly used, machine-readable format, or to have it transmitted to a third party. If you request the direct transfer of the data to another controller, this will only be done where technically feasible.
Access, Rectification, and Erasure Within the framework of the applicable legal provisions, you have the right at any time to obtain information free of charge about your stored personal data, its origin, recipients, and the purpose of data processing, and, if applicable, the right to correction or deletion of this data. For this purpose, as well as for further questions regarding personal data, you may contact us at any time.
Right to Restriction of Processing You have the right to request the restriction of the processing of your personal data. For this purpose, you may contact us at any time. The right to restriction of processing applies in the following cases: • If you contest the accuracy of your personal data stored by us, we usually need time to verify this. During the verification period, you have the right to request the restriction of the processing of your personal data. • If the processing of your personal data was or is unlawful, you may request restriction of processing instead of deletion. • If we no longer need your personal data, but you require it for the establishment, exercise, or defense of legal claims, you have the right to request restriction of processing instead of deletion. • If you have objected pursuant to Art. 21 (1) GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request restriction of the processing of your personal data. If you have restricted the processing of your personal data, such data — apart from its storage — may only be processed with your consent, for the establishment, exercise, or defense of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.
SSL or TLS Encryption For security reasons and to protect the transmission of confidential content — such as orders or inquiries that you send to us as the website operator — this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser’s address line changes from “http://” to “https://” and by the lock icon appearing in your browser’s address bar. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties. 4. Data Collection on This Website Cookies Our website uses so-called “cookies.” Cookies are small data packages that do not cause any harm to your device. They are stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted after your visit ends. Permanent cookies remain stored on your device until you delete them yourself or your web browser automatically deletes them. Cookies may originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies allow the integration of specific services provided by third-party companies within websites (e.g., cookies used for payment processing services). Cookies serve various purposes. Many cookies are technically necessary for certain website functions to work properly (e.g., shopping cart functionality or displaying videos). Other cookies may be used to analyze user behavior or for advertising purposes. Cookies that are required for the performance of the electronic communication process, for providing certain functions you have requested (e.g., shopping cart functionality), or for optimizing the website (e.g., cookies used to measure web audiences) are stored on the basis of Art. 6 (1)(f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to ensure the technically error-free and optimized provision of its services. If consent to store cookies and comparable recognition technologies has been requested, processing is carried out exclusively on the basis of this consent (Art. 6 (1)(a) GDPR and § 25 (1) TTDSG); consent can be revoked at any time. You can configure your browser to inform you when cookies are set, to allow cookies only in specific cases, to exclude cookies generally, or to automatically delete cookies when closing the browser. Disabling cookies may restrict the functionality of this website. Details on which cookies and services are used on this website can be found in this privacy policy.
Consent with Complianz Our website uses the consent management technology Complianz to obtain your consent for storing certain cookies on your device and for using specific technologies in a manner that complies with data protection regulations. The provider of this technology is Complianz B.V., Kalmarweg 14–5, 9723 JG Groningen, Netherlands (hereinafter referred to as “Complianz”). Complianz is hosted on our own servers, meaning that no data connection is established with the servers of Complianz. Complianz stores a cookie in your browser to record and, if necessary, assign your granted or revoked consents. The collected data will be stored until you ask us to delete it, delete the Complianz cookie yourself, or until the purpose of storing the data no longer applies. Mandatory legal retention obligations remain unaffected. The use of Complianz is based on Art. 6 (1)(c) GDPR. The processing serves to obtain the legally required consent for the use of cookies. 5. Analytics Tools and Advertising Google Tag Manager We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Google Tag Manager is a tool that allows us to integrate tracking or analytics tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, does not store cookies, and does not perform independent analyses. It merely facilitates the management and deployment of the tools integrated via it. However, the Google Tag Manager collects your IP address, which may also be transmitted to Google’s parent company in the United States. The use of the Google Tag Manager is based on Art. 6 (1)(f) GDPR. The website operator has a legitimate interest in a quick and straightforward integration and management of various tools on its website. If corresponding consent has been requested, processing takes place exclusively on the basis of Art. 6 (1)(a) GDPR and § 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s device (e.g., via device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time. 6. Plugins and Tools Vimeo This website uses plugins from the video platform Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. When you visit one of our pages that includes a Vimeo video, a connection to the Vimeo servers is established. In doing so, the Vimeo server is informed which of our pages you have visited. In addition, Vimeo obtains your IP address. This occurs even if you are not logged in to Vimeo or do not have an account with Vimeo. The information collected by Vimeo is transmitted to the Vimeo server in the USA. If you are logged in to your Vimeo account, you allow Vimeo to directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your Vimeo account. Vimeo uses cookies or comparable recognition technologies (e.g., device fingerprinting) to recognize website visitors. The use of Vimeo is based on our legitimate interest in providing an appealing presentation of our online offerings (Art. 6 (1)(f) GDPR). If consent has been requested, processing is based exclusively on Art. 6 (1)(a) GDPR and § 25 (1) TTDSG, insofar as consent includes the storage of cookies or access to information on the user’s device (e.g., via device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time. Data transfer to the USA is based on the EU Commission’s Standard Contractual Clauses and Vimeo’s statement on “legitimate business interests.” Details can be found here: https://vimeo.com/privacy For further information on the handling of user data, please refer to Vimeo’s privacy policy: https://vimeo.com/privacy The company is certified under the EU-U.S. Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States that aims to ensure compliance with European data protection standards for data processing in the USA. Each company certified under the DPF is obliged to comply with these data protection standards. Further information can be found here: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GVS2AAO&status=Active
Google Fonts (Local Hosting) This site uses Google Fonts for the uniform display of fonts, which are provided by Google. The Google Fonts are installed locally on this website, meaning no connection to Google’s servers is established. Further information on Google Fonts can be found here: https://developers.google.com/fonts/faq and in Google’s Privacy Policy: https://policies.google.com/privacy?hl=en
Google reCAPTCHA We use “Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. The purpose of reCAPTCHA is to verify whether data entered on this website (e.g., in a contact form) is made by a human being or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. During the analysis, reCAPTCHA evaluates various data (e.g., IP address, duration of the website visit, or user mouse movements). The data collected during the analysis are forwarded to Google. reCAPTCHA analyses run entirely in the background. Website visitors are not informed that such analysis is taking place. The storage and analysis of the data are based on Art. 6 (1)(f) GDPR. The website operator has a legitimate interest in protecting its online offerings from abusive automated spying and spam. If consent has been requested, processing takes place exclusively on the basis of Art. 6 (1)(a) GDPR and § 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s device (e.g., via device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time. Further information on Google reCAPTCHA can be found in the Google Privacy Policy and Terms of Service at the following links: https://policies.google.com/privacy?hl=en https://policies.google.com/terms?hl=en
Google is certified under the EU-U.S. Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States to ensure compliance with European data protection standards for data processing in the USA. Each company certified under the DPF commits to maintaining these standards. For more details, please visit: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active