The privacy policy of georges-essen.de
| 1. Name and contact data of the party responsible for the processing and of the company’s data protection officer This privacy policy information applies to data processing by: Responsible party: Boutique-Hotel Georges Florastrasse 15b D-45131 Essen Germany E-Mail: info(at)georges-essen.de Tel.: +49 (0)201 74737219 Personally liable partner and Data protection officer Hotel Georges Betriebs-Gbr Florastrasse 15b D-45131 Essen Germany General manager: Dr.Dunja Sonnenschein-Bleichroth, Grete Bleichroth Data protection officer: 2. Collection and storage of personal data, together with the nature and purpose of its use a) Visiting the website When you visit our website georges-essen.de, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention, and stored until it is automatically deleted: • IP address of the requesting computer, • date and time of access, • name and URL of the retrieved file, • website from which access is made (referrer URL), • the browser used and, if applicable, the operating system of your computer as well as the name of your access provider. The above-mentioned data will be processed by us for the following purposes: • ensuring a smooth connection of the website, • ensuring convenient use of our website, • evaluation of system security and stability as well as • for other administrative purposes. The legal basis for any data processing is Art. 6 Section 1 Sentence 1 f GDPR (General Data Protection Regulation). relating to legitimate interest. Our legitimate interest is based on the purposes listed above for the data collection. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally. In addition, we use cookies and analysis services when you visit our website. You will find more detailed explanations under sections 4 and 5 of this privacy policy. b) On using our contact form If you have any questions, we offer you the opportunity to contact us using the form provided on the website. A valid email address is required so that we know who sent the request and can respond to it. Further information can be provided voluntarily. The data will be processed for the purpose of contacting us in accordance with Art. 6 Section 1 Sentence 1 a GDPR on the basis of your voluntary consent. If contact is made to carry out pre-contractual measures (e.g. request for an offer), the data will be processed on the basis of Art. 6 Section 1 Sentence 1 b GDPR. The personal data collected by us for the use of the contact form will be automatically deleted after your request has been processed. If the request concerns business correspondence (receipt of commercial mail – obligation to keep records in accordance with § 257 Section 1 No. 2 Commercial Code, obligation to keep records of commercial and business mail § 147 Section 1 No. 2, Section 3 Tax Code for 6 years). 3. Transfer of data Your personal data will not be transmitted to third parties for purposes other than those listed below. We will only pass on your personal data to third parties if: • you have given your express consent in accordance with Art. 6 Section 1 Sentence 1 a GDPR, • disclosure in accordance with Art. 6 Section 1 Sentence 1 f GDPR is necessary to assert, exercise or defend legal claims, if there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data, • in the event that a legal obligation exists for the transfer in accordance with Art. 6 Section 1 Sentence 1 c GDPR, and • this is legally permissible and is necessary for the processing of contractual relationships with you in accordance with Art. 6 Section 1 Sentence 1 b GDPR. 4. Cookies We use cookies on our site. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do no damage to your end device, do not contain viruses, Trojans or other malware. Information is stored in the cookie, in each case in relation to the specifically used terminal device. However, this does not mean that we immediately become aware of your identity. The application of cookies serves on the one hand to make the use of our service more pleasant for you. For example, we use so-called session cookies to recognise that you have already visited individual pages of our website. These cookies are automatically deleted after you leave our site. | In addition, we also use temporary cookies that are stored on your end device for a specified period of time to optimise user-friendliness. If you visit our site again to use our services, it will automatically recognise that you have already been with us, and which entries and settings you have made so that you do not have to enter them again. On the other hand, we use cookies to statistically record the use of our website and to evaluate it for you for the purpose of optimising our offer (see Section 5). These cookies enable us to automatically recognise when you return to our site that you have already visited us. These cookies are automatically deleted after a defined period of time. The data processed by cookies is required for the above-mentioned purposes in order to protect our legitimate interests and those of third parties in accordance with Art. 6 Section 1 S. 1 f GDPR. Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, the complete deactivation of cookies can lead to the fact that you cannot use all functions of our website. Objection: if you do not wish to use cookies or wish to delete existing cookies, you can switch them off and remove them via your Internet browser. For more information on deleting or disabling cookies, see the help texts for your browser or on the Internet, for example under the search words “Deactivate cookies” or “Delete cookies” (instructions for deletion in Microsoft Internet Explorer. How to delete in Mozilla Firefox. Instructions for deletion in Safari). 5. Service providers i) Google Maps plugin We use a plugin of the internet service Google Maps on our website. Google Maps is operated by Google Inc. located in the USA, CA 94043, 1600 Amphitheatre Parkway, Mountain View. By using Google Maps on our website, information about the use of this website and your IP address is transmitted to a Google server in the USA and also stored on this server. We have no knowledge of the exact content of the data transmitted, nor of its use by Google. In this context, the company states that the data is not linked with information from other Google services and that personal data is not collected. However, Google may transfer the information to third parties. If you disable Javascript in your browser, you prevent Google Maps from running. However, you will not be able to use the map display on our website. By using our website, you consent to the collection and processing of the information by Google Inc. Learn more about the privacy policy and terms of use for Google Maps here: https://www.google.com/intl/en_en/help/terms_maps.html. ii) Google Web Fonts This site uses so-called Web Fonts provided by Google to uniformly display fonts. When you call up a page, your browser loads the required Web Fonts into your browser cache to display texts and fonts correctly. To do this, the browser you are using must connect to Google’s servers. This gives Google knowledge that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Section 1 f GDPR. If your browser does not support Web Fonts, a default font is used by your computer. For more information about Google Web Fonts, please visit https://developers.google.com/fonts/faq and read Google’s privacy statement: https://policies.google.com/privacy?hl=en. 6. Your rights as a data subject You have the right: • to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you may request information about the purposes of the processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it has not been collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on the relevant details; • in accordance with Art. 16 GDPR, to demand without delay the correction of incorrect or complete personal data stored by us; • to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims; • in accordance with Art. 18 GDPR, to restrict the processing of your personal data if you dispute the accuracy of the data, if the processing is unlawful but you refuse to delete the data and we no longer need the data, if you need it to assert, exercise or defend legal claims or if you have filed an objection to the processing in accordance with Art. 21 GDPR; • in accordance with Art. 20 GDPR, to receive the personal data that you have provided to us in a structured, current and machine-readable format or to request its transfer to another responsible party; • in accordance with Art. 7 Section 3 GDPR, to revoke your consent to us at any time. As a result, we will no longer be allowed to continue processing data based on this consent in the future and • to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority for your usual place of residence or work, or our office. 7. Right of objection If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 Section 1 Sentence 1 f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this which arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which we will implement without specifying a particular situation. If you would like to make use of your right of revocation or objection, simply send an email to info(at)georges-essen.de 8. Data security / email communication 8.1. We use the most common SSL (Secure Socket Layer) method in connection with the highest level of encryption supported by your browser. Usually this is 256 bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. Whether a single page of our website is transmitted in encrypted form is indicated by the closed display of the key or lock symbol in the lower status bar of your browser. We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments. 8.2 Emails sent via the Internet without additional security measures (encryption) are no more confidential than a postcard. If you communicate with us by email without the additional security of encryption, we will assume that you are aware of this technical circumstance and allow us to answer you by simple email. Basic encryption between email providers However, we also attach great importance to confidentiality in communication by email. Our provider therefore automatically offers you secure email communication via your email provider. Our German hosting provider implements email communication with you using additional security measures. However, the security depends on whether your email provider offers you the same security measures. At https://dane.sys4.de you can test whether your email provider uses the current security standards. If in doubt, we can discuss alternative security measures, e.g. PGP email encryption mentioned below. Regarding the security measures used by our provider, the provider writes: “DNSSEC has been implemented as security measures for email communication (see https://en.wikipedia.org/wiki/Domain_Name_System_Security_Extensions). In addition, in 2015 (see how it works: https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities) DANE was introduced, the next logical step towards greater security. The DANE (DNS-based Authentification of Named Entities) network protocol adds additional security to the SSL/TLS transport protocol frequently used in email traffic. Certificates are directly linked to special DNS entries (TLSA-RR) of a domain and secured via DNSSEC. This ensures that a certificate has not been exchanged in the meantime and that its authenticity can be confirmed. Mail servers that support DANE can now force encrypted connections to each other. This significantly increases security when transmitting emails.” PGP email encryption A better and therefore recommended encryption (cryptography) of data transmission is possible with asymmetric encryption after the exchange of public keys. We will gladly provide you with our public PGP key (PGP: Pretty Good Privacy). You can use this key to encrypt messages. To communicate securely, you must install OpenPGP Software on your computer. Here is a list of possible solutions for different operating systems: • macOS https://gpgtools.tenderapp.com/kb/how-to/first-steps-where-do-i-start-where-do-i-begin-setup-gpgtools-create-a-new-key-your-first-encrypted-mail • Linux https://ssd.eff.org/en/module/how-use-pgp-linux • Windows https://ssd.eff.org/en/module/how-use-pgp-windows-pc • iOS https://itunes.apple.com/app/ipgmail/id430780873?mt=8 • Android https://play.google.com/store/apps/details?id=org.sufficientlysecure.keychain Please import the public key into your local OpenPGP key management to encrypt a message to us. 9. Up-to-date status and modification of this privacy policy This privacy policy is currently valid and was last updated on 22.04.2022. Due to the further development of our website and offers, or due to changed legal or official requirements, it may become necessary to change this privacy policy. |