Privacy Policy

 

General

This Privacy Policy provides a general overview of what happens to your personal data when you visit this website. Personal data is the information that identifies you personally or the data that makes you personally identifiable. We as operators of this site have committed ourselves to informational self-determination and take the protection of your personal data very seriously.
We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. While using this website, various personal data will be collected.

In the following we inform you about the nature of the personal data collected and how we use them. Additionally, we explain how and for what purpose are the personal data being collected.

However, data transmission on the Internet (for example, when communicating via e-mail) may have security vulnerabilities, so that a complete protection of data from access by third parties cannot be guaranteed. 

1. Name and contact details of the party responsible

This privacy policy provides information on the processing of personal data on the homepage of the party responsible. 
The party responsible is: Lindenhof Resort & Events GmbH, Hubmersberg 2, 91224 Pommelsbrunn, Tel. +49 9154 270, gast@hubmersberg.de. The contact details can be found in the imprint of this website.

2. Scope and purpose of personal data processing

2.1 Website search

With every access of our website www.Lindenhof-Hubmersberg.de by you as a person concerned, the Internet browser you use automatically sends data to the server of this website and temporarily stores it in a logfile. Until the automatic deletion, the following data is stored without further input by the visitor:
• Internet Protocol address (IP address) of the visitor’s equipment,
• Date and time of access to the website,
• Name and URL of the page accessed by the visitor,
• Webpage from which the visitor reaches our website (so-called Referrer URL),
• Browser and operating system of the visitor’s equipment as well as name of the Access-Providers used by the visitor.

The personal data processing is justified according to Article 6 (1) lit. f GDPR. The company has a legitimate interest in the data processing for the following purpose:
• to create a fast connection to the website,
• to enable a user-friendly exploitation of the website,
• to verify and ensure safety and stability of the systems, and
• to facilitate and improve the administration of the website.

The data processing is not performed for the purpose of obtaining information (so-called profiling) about the person concerned.

2.2 SSL or TLS encryption

This site uses an SSL or TLS encryption. It is done for the security reasons and in order to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognize an encrypted connection through the change in the address line of the browser from "http: //" to "https: //" and the lock symbol in your browser line. If SSL or TLS encryption is enabled, the data you submit to us cannot be read by third parties.

2.3 Contact form

The visitors can send messages to our company via an online contact form on the website. In order to be able to receive a reply, at least the specification of a valid e-mail address is required. All further information can be given voluntarily. By submitting the message via the contact form, the visitor consents to the processing of the transferred personal data. The data processing is executed exclusively for the purpose of processing and answering inquiries via the contact form. This is done on the basis of the voluntarily granted consent acc. Art. 6 § 1 sentence 1 lit. a GDPR. The personal data collected for the use of the contact form will be automatically deleted as soon as the request has been completed and there are no reasons for further storage (e.g. subsequent commissioning).

2.4 Newsletter 

By subscribing to the newsletter, the visitor agrees to the processing of the transmitted personal data. In order to register for the newsletter, you only need to enter an e-mail address. The legal basis for processing of the visitor’s personal data for the purpose of sending newsletters is the consent according to Article 6 (1) lit. a GDPR.

You can revoke this consent any time by unsubscribing from the newsletter. The legality of the already completed data processing operations remains unaffected by the revocation. You can unsubscribe by using a special link at the end of the newsletter or by sending an e-mail to gast@hubmersberg.de.

2.5 Registration at this website 

You can register on our website to be able to use additional features on the site. We only use the data entered for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be given in full. Otherwise, the registration will be rejected.

In order to inform about important changes, such as the scope of the offer or for technical changes, we use the e-mail address specified during registration.

Processing of the data entered during registration takes place on the basis of your consent (Article 6 (1) lit. a GDPR). You can revoke your consent at any time. An informal message by e-mail is sufficient. The legality of the already completed data processing remains unaffected by the revocation.

The data collected during registration will be stored by us as long as you are registered on our website and will subsequently be deleted. Legal retention periods remain unaffected.

Comments on this website
In addition to your comment, the comment function on this page will also contain information about when the comment was created, your e-mail address and, if not posted anonymously, the username you selected. Our comment function stores the IP addresses of the users who write comments. Since we do not check comments on our site before activation, we need this information in order to be able to act against the author in case of infringements such as insults or propaganda.

Subscribing to comments: as a user of the page, you can subscribe to comments after signing up. You will receive a confirmation email to verify that you are the owner of the given email address. You can unsubscribe from this function at any time via the link in the info mails. The data entered in the course of subscribing to comments will be deleted in this case; however, if you have submitted this data to us for other purposes (e.g. newsletters), they will remain with us.

Terms of comment storage: The comments and related data (e.g. IP address) are stored and remain on our website until the commented content has been completely deleted or the comments must be deleted for legal reasons (e.g. offensive comments).

Legal basis is based on your consent (Article 6 (1) lit. a GDPR). You can revoke your consent at any time. An informal message by e-mail to us is sufficient. The legality of the already completed data processing operations remains unaffected by the revocation.

Registration with Facebook Connect
Instead of registering directly on our website, it is possible to register with Facebook Connect.  Responsible for this service is the Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. If you decide to register with Facebook Connect and click on the "Login with Facebook" / "Connect with Facebook" button, you will be automatically redirected to the Facebook platform, where you can log in with your user data. This links your Facebook profile to our website or services. The link gives us access to your data stored on Facebook.

These are particularly:
• Facebook name
• Facebook profile and cover picture
• Facebook profile picture
• E-mail address stored on Facebook
• Facebook ID
• Facebook Friends lists
• Facebook Likes
• Birthday
• Gender
• Country
• Language

These data are used to set up, prepare and personalize your account. For more information, see the Facebook Terms of Use and the Facebook Privacy Policy. These can be found at: https://de-de.facebook.com/about/privacy/ and https://www.facebook.com/legal/terms/

2.6 Processing data (customer and contract data)

We collect, process and use personal data only insofar as they are necessary for the establishment, content preparation or modification of the legal relationship (inventory data) and in order to enable the site usage or to charge the user for the engagement of the services. This is done on the basis of Article 6 (1) lit. b GDPR, which allows the data processing to fulfill a contract or pre-contractual measures. 
The collected data of the person concerned will be deleted after completion of the order or termination of the business relationship. Legal retention periods remain unaffected.

3. Data transmission

Personal data will be transmitted to third parties, if
• according to Article 6 (1) lit. a GDPR, it was expressly consented to by the person concerned
• according to Art. 6 § 1 sentence 1 lit. f DSGVO, disclosure of the data is required to enact, execute or defend legal claims and there is no reason to believe that the data subject has an overriding legitimate interest in not disclosing their data,
• there is a legal obligation for the transfer of data in accordance with Article 6 (1) lit. c GDPR, and / or
• according to Article 6 (1) lit. b GDPR this is required for the fulfillment of a contractual relationship with the person concerned.

In other cases, the personal data will not be disclosed to the third parties.

4. Cookies 

This website uses so-called cookies. These are text files that are exchanged between the server of the corporate website and the visitor's browser. These are stored on the devices used every time when visiting the website (PC, notebook, tablet, smartphone, etc.). Cookies can cause no damage to the devices used. In particular, they contain no viruses or other malicious software. The cookies contain the information, each resulting in connection with the specific terminal used. Under no circumstances can the company immediately obtain knowledge of the identity of the website visitor.

Cookies are accepted according to the basic settings of the browser. The browser settings can be set up so that cookies are either not accepted on the devices, or with a notification before a new cookie is created. However, the result of cookies deactivation may be inability of usage of all the website features to the fullest extent possible.

The use of cookies makes the use of our web-offers more comfortable. For example, session cookies can be used to track whether the visitor has already visited individual pages on the website. After leaving the website, these session cookies are automatically deleted.

By using cookies, we can provide users of our website with more user-friendly services that would not be possible without cookie-setting. When the website is visited again, it automatically recognizes that the visitor has already visited the site and what inputs and settings have been made so that they do not have to be repeated.

Cookies are also used to analyze website views for statistical purposes and for improving the offer. These cookies make it possible to automatically recognize if the website has already been accessed by this visitor. After a specified time, the cookies are deleted automatically.

The data processing by means of cookies is justified for safeguarding the legitimate interests of the company according to Article 6 (1) lit. f GDPR.

5. Analysis services for websites, tracking

We have integrated the functionalities of Google Analytics on our website. The legal basis for the use of the analysis tools is Article 6 (1) sentence 1 lit. f GDPR. The website analysis is in the legitimate interest of our company and serves for the statistical collection of the page usage for the continuous improvement of our website and services. The analysis of your surfing behavior is usually anonymous; the surfing behavior cannot be traced back to you.

Adobe Systems Inc. ("Adobe")
Adobe is certified after the EU-US Privacy Shield. To disagree with an evaluation by the product Adobe Analytics, you can follow this link: http://www.adobe.com/privacy/opt-out.html

Google Analytics
This website uses functions of the web-analytics service Google Analytics. Provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

Google Analytics sets a cookie on your computer unit. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. For this website, we have activated the function of IP anonymization. As a result, your IP address will be truncated by Google within member states of the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases the full IP address will be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to the website activity and internet usage to the website operator. The IP address provided by Google Analytics will not be merged with other Google data.

Browser Plugin

You may also object to and prevent Google from capturing the data generated by Google Analytics and related to the use of our web site and the processing of such data; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. In addition, you may prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) as well as from processing of this data by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en

Objection of data collection
You can prevent collection of your data by Google Analytics by clicking on the following link. An opt-out cookie which prevents the collection of your data during future visits to this website will be set: disable Google Analytics.

For more information on how to handle user data on Google Analytics, please refer to the Google Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=de

We have entered into a data processing agreement with Google and fully implement strict requirements of the German data protection authorities when using Google Analytics.

Demographics in Google Analytics
This website uses the function “demographic features” of Google Analytics. As a result, reports containing statements on age, gender and interests of the site visitor can be made up. This data comes from Google interest-based advertising and third-party visitor data. This data cannot be assigned to a specific person. You can disable this feature at any time through the ad settings in your Google Account, or prohibit the collection of your data by Google Analytics as outlined in the section "Rejection of Data Collection".

6. Plugins of Social Networks (Social Plugins)

Our corporate website contains plugins from the following social networks: Facebook, Instagram.

The legal basis for the use of social plugins is Article 6 (1) sentence 1 lit. f GDPR. A legitimate interest of our company and purpose of using plugins of social networks is to make our offer known to a wide audience. The social networks are responsible for the privacy-compliant handling of the data of their users.

Facebook plugins (Like & Share button)
We have integrated on our website functionalities of the company Facebook, provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. The Facebook plugins can be recognized by the Facebook logo or the "Like-Button" ("Like") on our site. An overview of the Facebook plugins can be found here: https://developers.facebook.com/docs/plugins/ 

By each visit of one of the individual pages of this internet site, the plugin establishes a direct connection between the user’s browser and the Facebook server. Facebook receives the information about the visit on our site with the given IP address. If the person concerned presses on the Facebook "Like-Button" while being logged into the Facebook account, they can link the contents of our pages to their Facebook profile. As a result, Facebook can assign the visit to our pages to the user’s account. We point out that we as the provider of the website are not aware of the content of the data transmitted and their use by Facebook. For more information, please refer to the Facebook Privacy Policy at: https://de-de.facebook.com/policy.php 

If you do not want Facebook to associate your visit to our pages with your Facebook user account, please log out of your Facebook account.

Instagram Plugin 
Functionalities of the Instagram service are integrated on our site. These features are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, United States. If you are logged into your Instagram account, you can link the contents of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate the visit to our pages with your user account. We point out that we as the provider of the pages do not receive information on the content of the transmitted data and its use by Instagram. For more information, please, see the Instagram Privacy Policy: https://instagram.com/about/legal/privacy/

7. Further Tools

Google Web Fonts
This site uses so-called web fonts, provided by Google, for the universal representation of fonts. When you call up a page, your browser loads the required web fonts into the browser cache to display texts and fonts correctly. To do this, the browser must connect to Google's servers. As a result, Google learns that our website has been accessed via the given IP address. The use of Google Web Fonts is in the interest of a consistent and attractive presentation of our online services. This constitutes a legitimate interest according to Article 6 (1) lit. f GDRP. If your browser does not support web fonts, a default font will be used by your computer. More information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's Privacy Policy: https://www.google.com/policies/privacy/

Google Maps 
This site uses the mapping service Google Maps via an API. Provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. To use the Google Maps features, it is necessary to save your IP address. This information is usually transmitted to and stored on a Google server in the United States. The provider of this site has no influence on this data transfer. The use of Google Maps is in the interest of an attractive presentation of our online offers and an easy findability of the places indicated on the website. This constitutes a legitimate interest within the Article 6 (1) lit. f GDPR. More information on handling user data can be found in the Google Privacy Policy: https://www.google.com/intl/de/policies/privacy/

8. Rights of the person concerned

As far as your personal data are processed during the visit on our website, as the person concerned, you have the following rights within the frames of the GDRP:
8.1 Right of information

Each person concerned has the right to require the controller to get information of the processing of personal data relating to him or her. No right of information exists if the asserted information violates confidentiality obligations under other statutory obligations or if the information must be kept in secret for other reasons, in particular because of a legitimate interest of a third party. There may be an obligation to provide the information if the interests of the person concerned outweigh the interests of secrecy. The right of information is not applicable if the data is stored because it may not be deleted due to legal or statutory retention periods or serve exclusively for data protection or data protection control, if the disclosure would require a disproportionate effort by appropriate technical and organizational measures. If in your case the right of information is not excluded, and your personal data are processed by us, you can request the following information from us:
• purposes of processing,
• categories of personal data processed,
• recipients or categories of recipients to whom your personal data are disclosed, in particular recipients in third countries,
• if possible, planned storage duration, if not possible, the criteria for determining the retention period,
• the right of rectification, deletion or restriction of processing of your personal data or a right of objection against such processing,
• the existence of a right of appeal by a supervisory authority,
• if the personal data has not been collected from you as the data subject, the available information about the origin of the data,
• the existence of automated decision-making, including profiling, meaningful information about the logic involved, and implications of automated decision-making, where appropriate;
• if applicable, in the case of transmission to recipients in third countries, unless there is a decision by the EU Commission on the adequacy of the level of protection pursuant to Article 45 (3) GDRP, information on what guarantees of the personal data protection exist, according to Article 46 (2) GDRP.

8.2 Right to rectification

When discovered that we have inaccurate personal information, any person concerned may require us to promptly correct it. In case of incomplete personal data, completion can be requested.

8.3 Right to deletion (right to be forgotten)

Each person concerned is entitled to delete their data ("right to be forgotten"), unless there is no necessity to implement the right of freedom of expression, the right of information nor to fulfill a legal obligation or perform a task dealing with public interest and provided that one of the following reasons applies:
• The personal data are no longer necessary for the purposes for which they were processed.
• The person concerned revokes the consent to which the processing was based and there is no other legal basis for processing
• The person concerned has objected to the processing of the personal data that we have made public.
•  The person concerned disagrees with the processing and there are no overriding reasons for the processing, or the person concerned disagrees with the processing in the case of direct advertising.
• Your personal data has been processed unlawfully.
• The deletion of personal data is required to fulfill a legal obligation to which we are subject.

There is no claim for deletion if, in the case of legitimate non-automated data processing, deletion is not possible or only possible with outrageous outlay due to the special nature of the storage and the interest in deletion from the side of the person concerned is low. In this case, the deletion is replaced by the restriction of processing.

8.4 Right to limitation of processing

Any person concerned by the processing of personal data has the right to require the controller to restrict the processing if one of the following conditions is met:
 • The correctness of the personal data is disputed by the person concerned, for a period of time, which enables the controller to verify the accuracy of the personal data.
• The processing is unlawful, the person concerned rejects the deletion of the personal data and instead requires the restriction of the use of the personal data
• The party responsible no longer needs the personal data for the purposes of processing, but the individual needs it for the assertion, exercise or defense of legal claims
• The person concerned has appealed against the processing in accordance with article
 Article 21 (1) GDPR. Sie haben Widerspruch gem. Art. 21 Abs. 1 DSGVO eingelegt and it is not yet determined whether the legitimate reasons of the party responsible outweigh those of the person concerned.

Limitation of processing means that the personal data will be processed only with the consent of the person concerned or in order to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest. Before we cease the limitation, we have a duty to inform the person concerned.

8.5 Right to data transferability

Any person concerned has the right to data transferability if the processing is based on their consent (Article 6 (1) lit. a or Article 9 (2) lit. a GDPR) or on a contract the person concerned is a party of and the processing applies automated procedures. The right to data transferability in this case includes the following rights, provided that this does not affect the rights and freedoms of others: the person concerned may require us to receive the personal information provided to us in a structured, common and machine-readable format. Each person concerned has the right to transfer this data to another person without interference from our side. Furthermore, as a person concerned, when exercising your right to transfer data, you have the right to obtain that the personal data are transmitted directly by us as party responsible to another party responsible, to the extent that this is technically feasible and does not affect the rights and freedoms of other persons.

8.6 Right to objection 

If the processing is based on Article 6 (1) lit. e GDPR (exercise of a task in the public interest or in interest of an official authority) or Article 6 (1) lit. f GDPR (legitimate interest of the one to whom concerned or a third party), any person concerned has the right, for reasons that arise from the particular situation, to object to the processing of their personal data at any time. This also applies to reasonable profiling referred to in Article 6 (1) lit. e or lit. f GDPR. Once the right to objection is applied, we will no longer process the personal information unless we can provide compelling legitimate grounds for processing that outweigh interests, rights and freedoms of the person concerned, or the processing is necessary for the purposes of asserting, exercising or defending legal claims.

Any person concerned may object to the processing of their personal data for direct marketing purposes at any time. This also applies to a profiling associated with such advertising. After exercising the right of objection, we will no longer use the personal data for direct marketing purposes.

You as a person concerned have the option of notifying us of the objection by telephone, e-mail or by sending a letter to our postal address listed at the beginning of this Privacy Policy.

8.7 Right to revoke a data protection consent

Any person affected by the processing of personal data has the right to revoke consent to the processing of personal data at any time. The revocation of the consent can be communicated by phone, e-mail or by sending a letter to our postal address in a free form. The revocation does not affect the lawfulness of the data processing which has taken place on the basis of the consent until receipt of revocation. 

8.8 Complaint

Feel free to contact us if you believe that the processing of your personal data is unlawful. In addition, you as the person concerned have the right to complain with the supervisory authorities, irrespective of whether the complaint is administrative or judicial. The supervisory authority for the non-public area in Bavaria is the Bavarian State Office for Data Protection Supervision
Promenade 27 (Castle)
91522 Ansbach
Telefon: +49 981 53 1300
Telefax: +49 981 53 5300
E-Mail: poststelle@lda.bayern.de
Homepage: http://www.lda.bayern.de

9. Status and Update of this Privacy Policy

We reserve the right to update our privacy policy in due course to improve privacy and / or adapt it to changes in regulatory practice or jurisdiction.

Last update 25th May 2018.