Data protection

Data protection

Erlebnishotel "Zur Schiffsmühle" GmbH, as the controller, implemented numerous technical and organizational measures to ensure the most complete protection possible for the personal data processed via this website. Nevertheless, internet-based data transmissions can generally have security gaps, so that absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us in alternative ways, for example by telephone.

1. Information about the collection of personal data

Below we inform you about the collection of personal data when using our website. Personal data are all data that can be related to you personally, e.g. B. Name, address, email addresses, user behavior.

Responsible according to Art. 4 para. 7 EU General Data Protection Regulation (GDPR) is:

Erlebnishotel "Zur Schiffsmühle" GmbH
Zur Schiffsmühle 2
04668 Grimma OT Höfgen

You can reach our data protection officer Michael Gey at datenschutzbeauftragter@schiffsmuehle.de or at our postal address with the addition "The data protection officer".

When you voluntarily contact us by e-mail or via the contact / inquiry form, the data you provide (your e-mail address, possibly your name and your telephone number) will be processed by us for the purpose of processing or contacting us saved automatically. We delete the data arising in this context after the storage is no longer necessary, or restrict the processing if there are statutory retention requirements.

If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes. We also state the specified criteria for the storage period.

2. Routine deletion and blocking of personal data

We process and store personal data only for the period of time necessary to achieve the storage purpose or if this has been provided for by the European directive and regulation giver or another legislator in laws or regulations to which the controller is subject.

If the storage purpose ceases to apply or if a storage period prescribed by the European directives and regulations or another competent legislator expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.

3. Your rights

You have the following rights towards us with regard to your personal data:

- right to information,
- right to correction or deletion,
- right to restriction of processing,
- right to object to processing,
- Right to data portability.

You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

4. Collection of personal data when visiting our website

When using the website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you want to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 Para. 1 S. 1 lit. f GDPR ):

- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status / HTTP status code
- amount of data transferred in each case
- Website from which the request comes
- browser
- Operating system and its surface
- Language and version of the browser software.

In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using, and through which certain information flows to the location that sets the cookie (here by us). Cookies cannot run programs or transmit viruses to your computer. They serve to make the Internet offer more user-friendly and effective overall.

Use of cookies:

This website uses the following types of cookies, the scope and functionality of which are explained below:

- Transparent cookies
- Persistent cookies

Transient cookies are automatically deleted when you close the browser. These include session cookies in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This enables your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.

Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.

You can configure your browser settings according to your wishes and e.g. B. refuse to accept third-party cookies or all cookies. We would like to point out that you may not be able to use all functions of this website.

5. Other functions and offers on our website

In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do this, you generally have to provide further personal data that we use to provide the respective service and for which the aforementioned data processing principles apply.

In some cases we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly checked.

We can also pass on your personal data to third parties if we offer contracts or similar services together with partners. You will receive more information on this when you provide your personal data or in the description of the respective offer sent by us.

If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this in the description of the offer.

Online applications:

We also collect and process personal data from applicants for the purpose of handling the application process. Processing can be done electronically. This is particularly the case if an applicant sends us the relevant application documents electronically, for example by e-mail or using a form on the website. If we conclude an employment contract with an applicant, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If we do not conclude an employment contract with the applicant, the application documents will be automatically deleted two months after the announcement of the rejection decision, provided that there are no other legitimate interests on our part. Other legitimate interest in this sense is, for example, an obligation to provide evidence in a procedure under the General Equal Treatment Act (AGG).

6. Objection or revocation against the processing of your data

If you have given your consent to the processing of your data, you can revoke it at any time. Such a revocation affects the admissibility of processing your personal data after you have given your revocation to us.

Insofar as we base the processing of your personal data on the weighing of interests, you can object to the processing. This is the case if the processing is in particular not necessary to fulfill a contract with you. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and will either discontinue or adjust the data processing or show you our compelling reasons worthy of protection, on the basis of which we will continue the processing.

7. Use of our booking tool

If you want to make a reservation in our booking tool, it is necessary for the conclusion of the contract that you provide your personal data, which we need to process your booking. Mandatory information required for the execution of the contracts is marked separately, further information is voluntary. We process the data you provide to process your booking. For this we can pass on your payment details to our house bank. The legal basis for this is Art. 6 para. 1 sentence 1 lit. b GDPR.

Due to commercial and tax regulations, we are obliged to store your address, payment and booking data for a period of ten years. However, after 2 years, we will restrict processing, i.e. H. Your data will only be used to comply with legal obligations.

8. Use of Matomo

This website uses the Matomo web analysis service to analyze and regularly improve the use of our website. Using the statistics obtained, we can improve our offer and make it more interesting for you as a user. The legal basis for the use of Matomo is Art. 6 para. 1 sentence 1 lit. f GDPR.

The website uses Matomo with the "AnonymizeIP" extension. As a result, IP addresses are processed in abbreviated form, which means that they cannot be directly linked to a person. The IP address transmitted by your browser using Matomo will not be merged with other data collected by us. The Matomo program is an open source project. You can find information from the third-party provider on data protection at http://matomo.org/privacy/policy .

For the evaluation, cookies (see section 4.) are stored on your computer. The person responsible stores the information collected in this way only on his server in Germany. The integration of MATOMO and the storage of the analysis cookie takes place only after your approval (opt-in) in the cookie banner (click on "I agree") and only if Javascript is activated in your browser. The setting can be changed at any time by clicking on "Cookies" in the footer of each page - or by clicking on the following link: Show Cooke banner again

This data protection declaration was drawn up in cooperation with the specialist lawyer for industrial property protection David Nourney, law firm Knigge Nourney Böhm, Leipzig .