GENERAL PRIVACY POLICY

We are pleased that you are visiting our website.

The protection of your personal data is very important to us. Our aim is not only to provide you with an interesting and comprehensive online offering, but also to protect your personal rights. The legal basis for the processing is in particular the EU General Data Protection Regulation (GDPR) and the German Telemedia Act (TMG).

The following data protection information provides you with an initial overview of the processing of your data. You will then find the complete information organised by topic.

General information

What data do we collect?

When you access / use the website, we collect access and device data to provide our website.

If you consent to this, we create user profiles under a pseudonym with the help of tracking services and cookies. Such a user profile contains information about a visitor's behaviour on the website. Beyond this, we only collect data based on your entries on our website.

Controller

The controller within the meaning of Art. 4 No. 7 GDPR is

Hotel Ritter Durbach GmbH & Co. KG

Tal 1

77770 Durbach

info@ritter-durbach.de

The data protection officer of the controller is

Mr Wolfgang Harter

E-mail: w.harter@ritter-durbach.de

We expressly point out that when using this e-mail address, the contents are not exclusively taken note of by our data protection officer. If you wish to exchange confidential information, please contact us directly via this e-mail address first.

Purposes and legal basis

We collect and use our users' personal data only insofar as this is necessary to provide a functional website and our content and services and to customise and improve our offering. This also constitutes our legitimate interest in data processing.

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis.

When processing personal data that is necessary for the fulfilment of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

If processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject, the legal basis for processing is Article 6(1)(f) GDPR.

Insofar as the TMG is applicable to the collection and use of personal data for the provision of our website, the processing of personal data is also based on Sections 12 and 15 TMG.

Recipients

The Hotel Ritter Durbach GmbH uses service providers who support the provision of the technical infrastructure, the design of our websites and the implementation of our services and who may have access to your personal data in the process.

It may be necessary to pass on your personal data to contractual partners in order to process your enquiries or commissioned services. You can find out more in the respective modules.

Storage period

Your personal data will be deleted or blocked as soon as the purpose of storage no longer applies and there are no statutory retention periods to prevent deletion. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

Rights of data subjects

You can exercise your rights to information, rectification, erasure, restriction of processing and data portability of your stored data at any time, provided that the requirements of Art. 15 et seq. GDPR are met.

To do so, please contact us at: w.harter@ritter-durbach.de

If you believe that the processing of your personal data violates legal provisions, you have the right to contact the competent supervisory authority.

Consent

If you have consented to processing operations, you can withdraw your consent at any time with effect for the future. Further details can be found in the following sections.

If you no longer agree to us using technologies to improve our offering and website analysis and optimisation, you will also find deactivation links in the section on technologies.

Data security

We take technical and organisational measures to protect your personal data from loss, unauthorised access and misuse. Your data is transmitted in encrypted form. This protects the communication between you and our web server and helps to prevent misuse of the data by third parties. We use TLS (Transport Layer Security) for encryption.

Data collection on our website

On the basis of Art. 6 Para. 1 lit. a, b, f GDPR or Sections 12, 15 TMG, we use our own technologies and technologies from third parties that support us in improving our offer and website analysis and optimisation, among other things by creating and evaluating pseudonymised user profiles.

If your consent is required for the use of the technologies (Art. 6 para. 1 lit. a GDPR), we will ask you to decide whether you agree to their use when you first access the site. You can revoke your consent at any time with effect for the future by deleting the cookies set or using the respective opt-out links. Further information on the various technologies and your options for subsequently excluding tracking is provided below.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are

Browser type and browser version

Operating system used

Referrer URL

Host name of the accessing computer

Time of the server enquiry

IP address

This data is not merged with other data sources.

The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR or § 15 para. 1, 3 TMG to provide the website, to ensure system stability, to ensure data and operational security and to implement legal requirements.

Contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact data you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass on this data without your consent.

The data entered in the contact form is therefore processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. All you need to do is send us an informal email. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory statutory provisions - in particular retention periods - remain unaffected.

If you send us your application by e-mail, we collect, process and use your data exclusively for the purpose of the application and delete your data after a reasonable period of time (max. six months after receipt), unless you have expressly authorised us to use your application for subsequent job offers.

Online booking and reservation enquiries

As part of your online booking, we require the following personal data from you: First and last name, address, e-mail address, telephone number and credit card details, which are used for verification purposes. Further details are voluntary.

Once the booking has been fully processed and the statutory retention periods have expired, your data will be completely deleted unless we have your consent for further use or we are legally obliged to do so.

As part of your reservations for our restaurants, conferences, events or for our SPA offers, we require the following personal data from you: First and last name, address, e-mail address, telephone number. Further details are voluntary.

Once the booking has been fully processed and the statutory retention periods have expired, your data will be completely deleted.

The data is processed on the basis of Art. 6 para. 1 lit. b GDPR.

Data transfer upon conclusion of a contract for services and digital content

We only transfer personal data to third parties if this is necessary in the context of contract processing, for example to the credit institution responsible for processing payments.

Any further transmission of data will not take place or will only take place if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

Newsletter

We are happy to inform you regularly by e-mail. You can subscribe to our newsletter for this purpose. By doing so, you consent to the use of your personal data for the creation and sending of the newsletter (Art. 6 para. 1 lit. a GDPR). We collect your IP address to confirm your registration and your email address to send you the newsletter. We use the "double opt-in" procedure to check that a registration is actually made by the owner of an email address. For this purpose, we log the newsletter order, the dispatch of a confirmation e-mail and the receipt of the reply requested.

The data is used exclusively for sending the newsletter. Your data will of course not be passed on to third parties. You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. There is a corresponding link in every newsletter. The data stored about you will then be deleted. If you do not confirm your registration, your data will be deleted after a maximum of 14 days, so that a new registration is required.

Technologies

Some of the Internet pages use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognise your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

We have concluded a contract with Google for commissioned data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable your use of the website to be analysed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there for 36 months.

The storage of Google Analytics cookies is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.

IP anonymisation

We have activated the IP anonymisation function on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Browser plugin

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpag....

Objection to data collection

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this website: Deactivate Google Analytics.

You can find more information on how Google Analytics handles user data in Google's privacy policy: https://support.google.com/ana....

Demographic characteristics with Google Analytics

This website uses the "demographic characteristics" function of Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and from visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section "Objection to data collection".

Google Analytics Remarketing

Our websites use the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google AdWords and Google DoubleClick. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

This function makes it possible to link the advertising target groups created with Google Analytics Remarketing with the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-based, personalised advertising messages that have been adapted to you depending on your previous usage and surfing behaviour on one end device (e.g. mobile phone) can also be displayed on another of your end devices (e.g. tablet or PC).

If you have given your consent, Google will link your web and app browsing history to your Google account for this purpose. In this way, the same personalised advertising messages can be displayed on every device on which you sign in with your Google account.

To support this function, Google Analytics collects Google-authenticated user IDs that are temporarily linked to our Google Analytics data in order to define and create target groups for cross-device advertising.

You can permanently object to cross-device remarketing/targeting by deactivating personalised advertising in your Google account by following this link: https://www.google.com/setting....

The data collected in your Google account is summarised exclusively on the basis of your consent, which you can give or revoke at Google (Art. 6 para. 1 lit. a GDPR). For data collection processes that are not merged in your Google account (e.g. because you do not have a Google account or have objected to the merging), the collection of data is based on Art. 6 para. 1 lit. f GDPR. The legitimate interest arises from the fact that the website operator has an interest in the anonymised analysis of website visitors for advertising purposes.

Further information and the data protection provisions can be found in Google's privacy policy at: https://www.google.com/policie....

Google AdWords and Google conversion tracking

This website uses Google AdWords. AdWords is an online advertising programme of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google").

As part of Google AdWords, we use what is known as conversion tracking. When you click on an advert placed by Google, a cookie is set for conversion tracking. Cookies are small text files that the Internet browser stores on the user's computer. These cookies lose their validity after 30 days and are not used to personally identify the user. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user has clicked on the ad and has been redirected to this page.

Each Google AdWords customer receives a different cookie. The cookies cannot be tracked via the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers are told the total number of users who clicked on their advert and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can object to this use by easily deactivating the Google Conversion Tracking cookie via your Internet browser under user settings. You will then not be included in the conversion tracking statistics.

The storage of "conversion cookies" is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.

You can find more information about Google AdWords and Google Conversion Tracking in Google's privacy policy: https://www.google.de/policies....

Plugins and tools

In order to be able to offer you a comprehensive service, we refer to other websites or their offers on our site. We expressly emphasise that our employees or other persons involved in this website have no influence whatsoever on the design and content of the linked pages.

We accept no responsibility for third-party content made available for use via links and do not adopt their content as our own. The provider of the linked website is solely liable for illegal, incorrect or incomplete content and for damages resulting from the use or non-use of the information.

Our data protection notice only applies to our website. Please observe the data protection provisions and notes on the linked pages. Your data will not be transmitted to third parties unless we are legally obliged to do so or it is done to fulfil our contractual obligations or in the performance of the services you have selected.

Hotel Net Solutions GmbH

You can make room reservations for our hotel on our website. We use the service of Hotel Net Solutions GmbH (https://www.hotelnetsolutions....) for this purpose.

Your data is collected, processed and used in our Protel property management system for reservations and guest management.

You can view the data protection provisions of Hotel Net Solutions GmbH at https://www.hotelnetsolutions.... a.

DialogShift chat application on our website

Our website uses the chat application of DialogShift GmbH, Rheinsberger Str. 76/77, 10115 Berlin. This application processes and stores data for the purpose of web analysis, operating the chat application and responding to enquiries.

To operate the chat function, the chat texts are saved and a cookie with a unique ID is set - this is used to recognise you as a customer.

A cookie is a small text file that is stored locally in the cache on your device. With the help of this cookie, our application recognises the device and can call up past chat logs. This cookie is stored for 90 days since it was last used. You can deactivate the storage of cookies in your browser settings. However, the chat function cannot be executed without the use of cookies.

The possible disclosure of e.g. name, e-mail address or a telephone number is voluntary and with the consent to temporarily use and store this data for the purpose of establishing contact until the end of the contact. This personal data will be deleted after 90 days.

The legal basis for data processing is Art. 6 para. 1 lit. F GDPR based on our legitimate interest in effective customer support, for statistical analysis of user behaviour and for optimisation purposes of our offers.

DialogShift offers under

https://www.dialogshift.com/da...;

for further information on the collection and use of data as well as your rights and options for protecting your privacy.

Aleno

This site uses the online reservation system Aleno via an API. The provider is Aleno AG, Steinackerweg 18, 8047 Zurich, Switzerland.

When you call up a page, your browser loads the required scripts into your browser cache in order to display the quick reservation function correctly.

For this purpose, the browser you are using must connect to the Aleno AG servers. This gives Aleno AG knowledge that our website has been accessed via your IP address. Aleno is used in the interest of making the booking process as simple and quick as possible. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

You can find more information about Aleno at https://www.aleno.me/

Social media data protection notice

We are pleased that you are visiting our company presence on social media platforms. The protection of your personal data is very important to Hotel Ritter Durbach. Our aim is not only to provide you with an interesting and comprehensive online offering, but also to protect your personal rights.

From the perspective of data protection law, a distinction must be made between processing that takes place in the area of responsibility of Hotel Ritter Durbach and processing that takes place exclusively in the area of responsibility of the platform operators. In addition, when you visit our company website, processing may be carried out under the joint responsibility of the respective platform operator.

Data processing at Hotel Ritter Durbach:

Hotel Ritter Durbach uses third-party platforms to provide you with information about our company and our products and services. Hotel Ritter Durbach processes all messages, likes and content that you send, share or otherwise add on our social media sites.

Insofar as the processing of personal data takes place in the context of communication between Hotel Ritter Durbach and the end user/applicant, it serves to process customer feedback about our products and services, to improve our offers and to provide applicant information. Data processing is based on Article 6(1)(a) (consent), (b) (fulfilment of a contract and implementation of pre-contractual measures), (c) (fulfilment of legal obligations) and (f) (safeguarding a legitimate interest of our company or a third party without overriding the interests and fundamental rights of the data subject) of the GDPR.

The data collected will only be passed on to service providers that are used by Hotel Ritter Durbach for a specific purpose. If service providers are based in a third country, the appropriate level of data protection is ensured by concluding standard contractual clauses. Detailed information is available on request at the email address provided in the "Data subject rights" section.

Your data will only be stored in personalised form for as long as is necessary for the purposes for which it is processed, for example until the expiry of any guarantee, warranty, limitation and statutory retention periods, unless otherwise specified in these data protection provisions.

We provide you with information on your rights as a data subject in the "Rights of data subjects" section.

Data processing on the basis of analyses:

We process the data provided by the operators of the third-party platforms for the purpose of presenting statistically processed data on the basis of Art. 6 para. 1 lit. f GDPR. We receive aggregated data without personal reference, which provides us with information about the success of our measures (e.g. total number of measures played out by the platform operator, preferred visit and contribution times) and is used to optimise our contributions. Hotel Ritter Durbach has no influence over the creation and provision of this data. The associated personal data processing takes place exclusively in the area of responsibility of the platform operators. The type and scope of your information provided to the operators of the third-party platforms, the associated purposes of the data processing, its legality and information on exercising your rights can be found in the data guidelines and further information provided by the platform operators:

TikTok: https://www.tiktok.com/legal/p...

Instagram: https://privacycenter.instagra...

YouTube: https://policies.google.com/pr...

Pinterest: https://policy.pinterest.com/d...

LinkedIn: https://www.linkedin.com/legal...

Joint responsibility with Facebook:

In the case of the Facebook fan page, we use the Facebook platform and are jointly responsible for the operation of the page. Hotel Ritter Durbach uses the page primarily as a communication platform with customers and applicants. We also receive mostly generic information from Facebook about how successful the posts are (e.g. number of page views, number of "likes"). The way in which this data is collected and processed is the responsibility of Facebook. This naturally also applies to the processing of the data, which is carried out exclusively for the purposes of Facebook.

The obligations of the controllers resulting from the joint responsibility can be found in the following link:

https://www.facebook.com/legal...

Controller:

The controllers within the meaning of Art. 26 EU GDPR are

Primary controller: Facebook Ireland Ltd.

4 Grand Canal Square

Grand Canal Harbour

Dublin 2 Ireland

Hotel Ritter Durbach GmbH & Co. KG

Valley 1

77770 Durbach

Data processing by Facebook:

The generation and provision of "Insights data" (https://www.facebook.com/busin...) is the responsibility of Facebook. As the fan page operator, Hotel Ritter Durbach has no influence on the generation and provision of this data. The associated personal data processing takes place exclusively on Facebook.

The type and scope of the information you provide to Facebook, the associated purposes of the data processing, its legality and information on exercising your rights can be found in the data policy and other information provided by Facebook on the processing of "Insights data":

https://de-de.facebook.com/pol...

You can find information on page statistics at: https://www.facebook.com/busin... .

You can exercise your rights in connection with the "Insights data" generated and provided by Facebook vis-à-vis Facebook.

As a registered and logged-in Facebook user, you can obtain information on exercising your rights via your user account or by contacting Facebook at www.facebook.com.

YouTube

Our website uses plugins from YouTube, which is operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.

The plug-in is integrated in "extended data protection mode". By integrating in "extended data protection mode", no information about your visit to our website is stored by the third-party provider until the plugin is activated.

We would like to point out that we, as the website provider, do not transmit any of your personal data to YouTube. Communication takes place exclusively between your end device and the third-party provider's systems. We have no possibility of influencing or knowledge of the content of the data transmitted between your end device and the operators of the network platforms (third-party providers) and their processing by the third-party providers. The purpose and scope of further data processing by the respective platform operator as well as your rights in this regard and setting options for protecting your privacy can be found in the data protection notices of the third-party providers via the links to the privacy policies (data protection declarations) provided by the respective third-party providers.

Google Maps

This site uses the Google Maps map service via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Hotel Ritter Durbach Gmbh & Co. KG does not process any personal data.

When using these services, personal data is transferred to the third-party card provider and processed exclusively by this provider on its own responsibility. The data processing of the third-party provider includes at least the following types of data:

Information about the use of our website

Your IP address

You have the option of deactivating the interactive map service and preventing the transfer of data to the third-party provider. To do this, deactivate JavaScript in your browser. In this case, you will no longer be able to use the interactive map service.

You can find more information on the handling of user data in Google's privacy policy: https://www.google.de/intl/de/....

This website uses cookies. We use cookies to personalise content and advertisements, to offer social media functions and to analyse access to our website. We also share information about your use of our website with our social media, advertising and analytics partners. Our partners may combine this information with other data that you have provided to them or that they have collected as part of your use of the services. You consent to our cookies if you continue to use our website.

Cookies are small text files used by websites to make the user experience more efficient.

By law, we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies, we need your permission.

This site uses different types of cookies. Some cookies are placed by third parties that appear on our pages.

You can change or withdraw your consent at any time from the cookie statement on our website.

Find out more about who we are, how you can contact us and how we process personal data in our privacy policy.

Your consent applies to the following domains: www.ritter-durbach.de

Necessary

Necessary cookies help to make a website usable by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

Statistics cookies

Statistic cookies help website owners understand how visitors interact with websites by collecting and reporting information anonymously.

Marketing cookies

Marketing cookies are used to follow visitors to websites. The intention is to show adverts that are relevant and engaging to the individual user and therefore more valuable to publishers and third party advertisers.