Data security

Dieter Lacher
Dobler Strasse 38
76332 Bad Herrenalb
Phone: 07083/92510
Fax: 07083/51159
E-Mail: lacher@hotelpensionfidelitas.de
Internet: https://lacher-fidelitas.de

Umsatzsteuer-Identifikationsnummer (VAT identification number) according to §27a of the Umsatzsteuergesetz (UStG, Sales Tax Law): DE144603359

Additional references:

The picture rights of the pictures provided with copyright are with the respective right owner.

This document was created and is updated with technology from janolaw AG.

We will process your personal data (e.g. title, name, address, e-mail address, phone number) solely in accordance with the provisions of the German data protection law and the data protection law of the European Union (EU). The following provisions will inform you, besides the information about the processing purposes, recipients, legal bases and storage periods, also about your rights and the controller for your data processing. This privacy policy applies only to our websites. If you are directed to other sites via links on our pages, please familiarise yourself with the respective use of your data there.

(1) Purpose of data processing

Your personal data you provide us by e-mail, contact form etc., will be processed to answer your inquiries. You are not obliged to provide us with your personal data but we would not be able to answer your inquiries sent by e-mail without your e-mail address.

(2) Legal basis

a) If your explicit consent is given for the processing of your data, the legal ground for this processing is set out in Art. 6 (1) (a) of the GDPR.

b) If your personal data is processed for the purpose of contract performance, the legal ground for this processing is set out in Art. 6 (1) (b) of the GDPR.

c) The legal ground for all other cases (especially when using a contact form) is set out in Art. 6 (1) (f) of the GDPR.

You have the right to object at any time to the processing of data which was performed according to Article 6 (1)(f) of GDPR and which does not serve direct marketing for reasons arising from your particular situation.

In the case of direct marketing, however, you may object to the processing at any time without stating any reasons.

(3) Legitimate interest

Our legitimate interest in data processing is to communicate with you in a timely manner and to answer your queries cost-effectively. If you provide us with your address, we reserve the right to use it for direct postal marketing. You can protect your interest in data protection by transferring of data efficiently (e.g. using a pseudonym).

(4) Recipient categories

Provider of hosting, service provider for direct marketing

(5) Duration of storage

Your data will be deleted if it can be inferred from the circumstances that your queries or questions have been completely clarified.

However, if a contract is concluded, the data required by commercial and tax law will be retained by us for the periods as required by law, i.g. generally for ten years (cf. § 257 HGB, § 147 AO).

(6) Right of revocation

You have the right to revoke your consent for processing at any time in compliance with your consent.

(1) Hosting

The hosting services we use serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services that we use for the purpose of operating the website.
For this purpose, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors of this website on the basis of our legitimate interests in an efficient and secure provision of our website in accordance with Art. 6 Para. 1 S. 1 f) DSGVO in conjunction with Art. 28 DSGVO.

When the website is accessed, the IP addresses of visitors are recorded and stored in log files. The IP addresses of the visitors of the web pages are stored by Strato for a maximum of seven days to detect and defend against attacks.

A contract for processing orders (AVV) was concluded in accordance with Art. 28 DSGVO.

(2) Embedded content from other websites

Contributions on this website may contain embedded content (e.g. videos, images, widgets etc.). Embedded content from other websites behaves exactly as if the visitor had visited the other website. These sites may collect information about you, use cookies, embed additional third-party tracking services, and record your interaction with that embedded content, including your interaction with the embedded content if you have an account and are logged on to this site.

(3) booking.com

To be able to offer you a quick availability check and a faster booking of our hotel, a tool from "Booking.com" has been integrated into our website. This service also uses cookies. More detailed information can be found in the Booking.com privacy policy under this link https://www.booking.com/content/privacy.html#cookie-statement. If you do not wish to do so, please remove or block these cookies according to the functions and options listed above in the privacy policy.

(1) Purpose of data processing

This website uses technically necessary cookies. These are small text files that are stored in or by your Internet browser on your computer system and only serve the functionality of the website. Other cookies remain stored permanently and recognize your browser on your next visit to improve theusability of the website.

(2) Legal basis

The legal basis for such processing is set out in Article 6 (1) (a) of the GDPR.

You have expressly given your consent to the use of cookies on our website as follows:

We use cookies to ensure that we give you best experience on our Website. If you continue to use this site we will assume that you are happy with it.

(3) Duration of storage

The technically necessary cookies are usually deleted when the browser is closed. Permanently stored cookies remain stored from a few minutes to several years.

(4) Right of revocation

If you do not wish these cookies to be stored, please deactivate the use of cookies in your Internet browser. However, this may cause a functional limitation of our website.

Your consent to persistent cookies can be withdrawn at any time by deleting the cookies in your browser settings.

If your personal data is being processed, you are the ‘data subject’ in terms of GDPR and you have the following rights towards us, the controller:

1. Right to information

You may request us to provide information about your personal data processed by us under Article 15 of the GDPR.

2. Right to rectification

If your personal data provided to us is not up to date or not accurate you have the right to ask for modifications to your personal data under Article 16 of the GDPR. You also have the right to request us to complete an incomplete data.

3. Right to erasure

You have the right to have your personal data erased and ask for deletion of your data under Article 17 of the GDPR.

4. Right to restriction of processing

You have the right to restrict the processing your personal data under Article 18 of the GDPR.

5. Right to data portability

You have the right referred to in Article 20 of the GDPR to receive your personal data provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.

6. Right to revoke the consent given under data protection law

You have the right referred to in paragraph 3 of Article 7 to withdraw your given consent based on the data protection provisions at any time. This does not affect the lawfulness of the processing based on consent before its withdrawal.

7. Right to lodge a complaint with a supervisory authority

If you consider that the processing of personal data relating to you infringes the GDPR, you have the right referring to in Article 77 of the GDPR to complain to the supervisory authority against the processing of your personal data (in particular in the Member State of your habitual residence, place of work or place of the alleged infringement ).

Please also note your right of objection under Article 21 GDPR:

a) In general: reasoned objection required

If the processing of personal data concerning you takes place in order

- to perform our overriding legitimate interest (legal basis: Article 6 (1f) GDPR)

or

- to safeguard the public interest (legal basis: Article 6 (1e) GDPR),

you are entitled to object to the processing at any time for reasons arising from your particular situation; this also applies to profiling based on the provisions of the GDPR.

In the event of objection, we will no longer process the personal data concerning you unless we can prove compelling grounds for processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims;

b) Special case of direct marketing: simple objection is sufficient

If the personal data concerning you are processed for the purpose of direct marketing, you have the right to object at any time to the processing and without stating reasons; this includes profiling to the extent that it is related to such direct marketing.

If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

Responsible for data processing:
Dieter Lacher
Dobler Strasse 38
76332 Bad Herrenalb
Phone: 07083/92510
lacher@hotelpensionfidelitas.de

This document was created and is updated with technology from janolaw AG.