booking now

DATA PROTECTION

BETTER SAFE THAN SORRY

1. Data protection overview

Introduction

The following information is designed to give you a simple overview of what happens to your personal data when you visit our website. Personal data is any data that identifies you as an individual. More detailed information about data protection can be found in our privacy policy below.

Data collection on our website

Who is responsible for data collection on our website?

Data from our website is processed by the website operator. Their contact details are listed in the site’s ‘Legal notice’.

How do we collect your data?

Some data is collected when you provide it to us, e.g. when you enter your data in a contact form.

Other data is collected automatically by our IT systems when you visit our website. This data is primarily technical data, such as details of your internet browser or operating system or the time that you visited our website. This data is collected automatically as soon as you enter our site.

What do we use your data for?

Some data is collected to help us keep our website running properly. Other data is collected so that we can analyse how visitors use our site.

What are your rights regarding your data?

You have the right to request information, at any time and free of charge, about your personal data, its origin, its recipients and the purpose of its collection. You also have the right to request that your data be corrected, blocked or deleted. If you wish to invoke these rights or have any other questions about data protection, you can contact us at any time at the address listed in the site’s ‘Legal notice’. You also have the right to lodge a complaint with the responsible supervisory authorities.

Analytics and third-party tools

We use statistical analyses to evaluate the way that visitors use our site. For this, we mostly use cookies and analytics programs. Any analysis of your user behaviour is usually anonymous, i.e. this data cannot be traced back to you. You can opt out of this analysis or prevent it by rejecting the use of certain tools. More detailed information about this can be found in our privacy policy below.

You can opt out of this analysis. To find out how, please read the information in our privacy policy.

2. General and mandatory information

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your data as confidential and process it in line with both data protection legislation and the terms of this privacy policy.

When you use this website, various items of your personal data will be collected. Personal data is any data that identifies you as an individual. The following privacy policy explains what data we collect and what we use it for. It also explains how we collect your data and for what purpose.

Please note that any data transmitted via the internet (e.g. by email) may be subject to security breaches. It is impossible to completely protect your data against third-party access.

Responsible party

The party responsible for data processing on this website is:

ConventGarten Verwaltungs GmbH
Hindenburgstrasse 38-42
24768 Rendsburg, Germany

Telephone: +49 4331-59050
Email: 

The responsible party is the natural or legal person with sole or joint responsibility for deciding on the purposes for which, and means by which, your personal data (names, email addresses, etc.) is processed.

3. Data protection regulations

The data you enter in the hotel registration form is processed on the following legal basis:

Home address: data processed on the basis of Section 30 of the German Federal Registration Act (Bundesmeldegesetz, BMG) and stored for one year.

Home address/billing address: data processed on the basis of Article 6(1)(b & c) of the GDPR and stored for 10 years in line with Section 147 of the German Fiscal Code (Abgabenordnung, AO) and Section 257 of the German Commercial Code (Handelsgesetzbuch, HGB)

Voluntary declaration of consent: data processed on the basis of Article 6(1)(a) of the GDPR and stored until consent is withdrawn

3.1 The following data is included in the hotel registration form in line with Section 29 et seq. of the German Federal Registration Act (Bundesmeldegesetz, BMG):

  • Date of arrival and planned departure date
  • Last name
  • First name
  • Date of birth
  • Nationality
  • Address
  • Number of accompanying persons and their nationalities, where applicable under Section 29(2)(sentences 2 & 3) of the German Federal Registration Act (Bundesmeldegesetz, BMG)
  • Serial number of recognised and valid passport or passport substitute for foreign nationals
  • Written signature

3.2 Under the General Data Protection Regulation (GDPR), you enjoy the following rights:

Right of access: Under Article 15 of the GDPR, you may obtain confirmation as to whether or not your personal data is being processed. If your data is being processed, you have the right to access this data.*

Right to withdraw consent: Where processing of your personal data is based on consent, you have the right to withdraw this consent at any time under Article 7 of the GDPR.*

Right to object: Where processing of your personal data is necessary for the purposes of the legitimate interests pursued by our company, you have the right to object to this processing at any time under Article 21 of the GDPR.*

Right to erasure: Under Article 17 of the GDPR, you have the right to obtain the erasure of your personal data in the following situations: if you have withdrawn your consent; if you have objected to the processing of your personal data (and there are no overriding legitimate grounds for the processing); if your personal data is no longer necessary for the purposes for which it is being processed; if there is a legal obligation to erase your data; or if your personal data has been unlawfully processed.*

Right to rectification: If your personal data is being processed inaccurately, you have the right to obtain, without undue delay, the rectification of this data under Article 16 of the GDPR.*

Right to the restriction of processing: Subject to the conditions set out in Article 18 of the GDPR, you have the right to request that the processing of your personal data be restricted.*

Right to data portability: Under Article 20 of the GDPR, you have the right to receive any personal data concerning you, which you provided to us, in a structured, commonly used and machine-readable format.*

Right to lodge a complaint: Under Article 77 of the GDPR, you have the right to lodge a complaint with a responsible supervisory authority.*

*If you wish to invoke your rights under the GDPR, you can contact us using the following details:

ConventGarten Verwaltungs GmbH
Hindenburgstrasse 38-42
24768 Rendsburg, Germany

Fax: +49 4331-5905 65
Email:

Objection to the sending of promotional materials

The sending of unsolicited advertising or communications materials to the contact details listed in the ‘Legal notice’ of this website is expressly prohibited. The website operator reserves the right to take legal action if such unsolicited advertising materials, e.g. spam emails, are received.

3. Data protection officer

Statutory data protection officer

The designated data protection officer for our company is:

Ms Nicole Guckuk
Hindenburgstrasse 38-42
24768 Rendsburg, Germany

Telephone: +49 4331-5905-0
Fax: +49 4331-5905-65
Email:

4. Data collection on our website

Cookies

Some of our webpages use cookies. These do not cause any damage to your computer and do not contain any viruses. Cookies help us make our website more user friendly, efficient and secure. They are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are ‘session cookies’. These are automatically deleted when you leave our website. Other cookies stay stored on your device until you delete them. These cookies enable us to recognize your browser when you next visit our site.

You can configure your browser to alert you to the use of cookies, so that you can decide on a case-by-case basis whether to accept or reject them. Alternatively, you can set your browser to automatically accept cookies under certain conditions or to always reject them, or to automatically delete cookies when you close your browser. Disabling cookies might mean you can't access some of our website's features.

Cookies which are necessary for electronic communications or certain features you wish to access (such as the shopping basket) are stored on the basis of Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in storing these cookies, since they enable them to optimise their website service and keep the site running properly. The storage of other cookies (such as those used to analyse the behaviour of website users) is covered elsewhere in this privacy policy.

Server log files

Your browser automatically transmits certain data. The website provider automatically collects and stores this information in server log files. This data includes:

  • Browser type and browser version
  • Operating system
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server query
  • IP address

This data is not combined with other data sources.

The legal basis for the data processing is Art. 6(1)(f) of the GDPR, which permits data processing for the purposes of the performance of a contract or to complete steps prior to entering into a contract.[A1] 

Online bookings

Our website uses the online booking system OnlineRes, which is provided by our partner Hotelfinder.de GmbH & Co KG, Birkenallee 135, 48432 Rheine, Germany.
Any data that you enter in the system is encrypted before being transmitted elsewhere.
To enable our hotel staff to process your booking, we are sent the following personal data: name, address, email address, IP address, phone number (if applicable) and credit card number (if applicable).

If you’re paying using a payment provider (e.g. a credit card company), this data is also forwarded on to said payment provider. All data is anonymised 30 days after your departure date.

Our online booking partner is committed to processing your personal data in line with data protection legislation, and will take all organisational and technical steps necessary to keep your data safe.

Contact form

If you send us an enquiry using our contact form, we store any data entered in the form, including your contact details, for the purposes of processing your enquiry and any follow-up questions. We will not forward this information on without your consent.

Data provided via the contact form is processed exclusively on the basis of your consent (Article 6(1)(a) of the GDPR). You can withdraw your consent at any time by simply sending us an email. The withdrawal of consent does not affect the lawfulness of any data processing prior to this withdrawal.

We will store any data provided by you in the contact form until you request that we delete it or withdraw your consent to its storage, or until the purpose of the data processing no longer applies (e.g. your enquiry has been closed). Statutory requirements, in particular those governing retention periods, always take precedence.

 

Use of Cookiebot

Cookiebot is an online service that helps us ensure that our use of cookies and our online tracking of these cookies complies with the relevant data protection regulations. When using this service, which is provided by Cybot A/S (Havnegade 39, 1058 Copenhagen, Denmark), your browser transfers personal data to the aforementioned company. The legal basis for this data processing is Article 6 (1f) GDPR, whereby our legitimate interest lies in ensuring that our website is running properly. Data is deleted as soon as the purpose for which it was collected has been fulfilled. Further information about how cookiebot.com handles your data can be found in the company’s privacy policy at: www.cookiebot.com/en/privacy-policy/. You can prevent cookiebot.com from collecting and processing your data by disabling the execution of script code in your browser or by installing a script blocker (available from websites such as www.noscript.net or www.ghostery.com)).
You have the right to change or withdraw your consent at any time.

5. Analytics tools and advertising

Google Analytics

This website uses Google Analytics, a web analytics service operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses cookies. These are text files that are stored on your computer and enable Google Analytics to analyse your use of our website. Usually, the information generated by the cookies about your use of our website is transmitted to and stored on a Google server in the USA.

The legal basis for storing Google Analytics cookies on your computer is Article 6(1)(f) of the GDPR, since the website operator has a legitimate interest in analysing the way visitors use the website in order to optimise the site and its advertising.

Browser plugin

You can prevent these cookies from being stored on your computer by selecting the appropriate setting in your browser software. Please note, however, that doing so may prevent you from making full use of all of the features on our website. You can also prevent Google from collecting and processing the data generated by these cookies about your use of our website (including your IP address) by downloading and installing the browser plugin available at the following link (https://tools.google.com/dlpage/gaoptout?hl=en).

Data collection opt-out

You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be stored on your computer to prevent your data from being collected if you visit our website again in future: Disable Google Analytics.

Further information about how Google Analytics handles your data can be found in Google’s privacy policy at:https://support.google.com/analytics/answer/6004245?hl=en.

Data processing agreement

We have concluded a data processing agreement with Google and comply fully with the stringent requirements of the German data protection authorities when using Google Analytics.

‘Demographics’ feature in Google Analytics

This website uses the ‘Demographics’ feature provided by Google Analytics. This can be used to generate reports containing information on the age, gender and interests of our site visitors. The data comes from interest-based advertising by Google and visitor data provided by third parties. It cannot be traced back to a specific individual. You can disable this feature at any time through the ad settings in your Google account or generally prevent Google Analytics from collecting your data as outlined above under ‘Data collection opt-out’.

6. Plugins and tools

YouTube

Our website uses plugins provided by the Google-owned website YouTube. The website is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

Each time you visit one of our web pages with a YouTube plugin, our site will establish a connection to the YouTube servers, informing them which of our pages you have visited.

If you are logged into your YouTube account, YouTube will directly link your activity on our site to your personal account. You can prevent this by logging out of your YouTube account.

We use YouTube to help us generate attractive online content. This constitutes a legitimate interest as defined under Article 6(1)(f) of the GDPR.

Further information about how YouTube handles your data can be found in YouTube’s privacy policy at:https://www.google.com/policies/privacy/.

Google Web Fonts

We use Google Web Fonts to keep our fonts consistent across our website. When you open a page, your browser loads the required web fonts into your browser cache so that the texts and fonts are displayed correctly.

To do this, your browser must establish a connection with the Google servers. This means Google knows that your IP address has accessed our website. We use Google Web Fonts to help us generate consistent and attractive online content. This constitutes a legitimate interest as defined under Article 6(1)(f) of the GDPR.

If your browser does not support Web Fonts, your computer will use a standard font type instead.

Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy at https://www.google.com/policies/privacy/.

Google Maps

This website uses a Google Maps API operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To enable the use of the Google Maps features, your IP address must be stored. This information is usually transmitted to a Google server in the USA and stored there. The website operator has no control over the transmission of this data.

We use Google Maps to help us generate attractive online content and to make it easier for visitors to find the locations mentioned on our website. This constitutes a legitimate interest as defined under Article 6(1)(f) of the GDPR.

Further information about how Google Maps handles your data can be found in Google’s privacy policy at:https://www.google.com/policies/privacy/.