Privacy Policy


Effective date: 1 September 2019

Overview and responsible party

The collection and use of your personal data is carried out in strict compliance with data protection regulations. Personal data is only collected, processed and used by us and the service providers commissioned by us if a legal provision permits this or you have given your prior consent.

The responsible party (“we”, “us”, “our”) for data processing on this website (“service”, “page”, “service”) is:

Ledererhof HotelbetriebsGmbH
Schwaighofstraße 89
83684 Tegernsee
Germany

Phone: +49 (0)8022 92240
Email: servus@derledererhof.de

Here we would like to inform you when and for what purpose we process your data and how you can make use of your data protection rights.

We have tried to present everything clearly and explain it as clearly as possible. However, if in doubt, we will be happy to answer any questions you may have. You can find more information by clicking on the following sub-items.

General information

Data collection, scope, storage period and legal basis

Scope

As a matter of principle, we collect and use personal data of our users only insofar as this is necessary for the provision of a functional website as well as our contents and services. The collection and use of our users’ personal data regularly only takes place with the user’s consent.

An exception applies in those cases in which it is not possible to obtain prior consent for actual reasons and the processing of the data is permitted by legal regulations.

Data deletion and storage period

The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws or other regulations to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or performance of a contract.

Legal basis

Insofar as we obtain the consent of the data subject for processing operations of personal data, Art. 6 (1) lit. a EU General Data Protection Regulation (DSGVO) serves as the legal basis for the processing of personal data.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) (b) DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

If processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) c DSGVO serves as the legal basis.

If processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 (1) lit. f DSGVO serves as the legal basis for the processing.

Amendment of this declaration

We reserve the right to adapt this data protection declaration. If a revised version is created, we will ensure that this adaptation is clearly announced and provide information about the most important changes. We also indicate when the declaration was last amended.

Data from under 18s

Our services do not address persons under the age of 18 and we do not knowingly collect personal data from persons under the age of 18. If you are a ward of such a person and you become aware that such data has been sent to us, please contact us. If we become aware that we have collected information from anyone under 18 without the consent of a parent or guardian, we will remove that information from our systems.

Your rights

Withdrawal of your consent to data processing

Many data processing operations are only possible with your explicit consent. You can revoke consent you have already given at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right of objection

You may object to the future processing of data relating to you in accordance with Art. 21 DSGVO at any time. The objection can be made in particular against the processing for purposes of direct advertising.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done insofar as it is technically feasible.

Information, correction, blocking, deletion

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of the data processing as well as, if applicable, a right to correction, blocking or deletion of this data, insofar as this is possible within the framework of the legal storage obligations. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time at the above address or by e-mail.

Right of complaint to the competent supervisory authority

In the event of violations of data protection law, the data subject has a right of appeal to the competent supervisory authority. The competent supervisory authority in matters of data protection law is the State Data Protection Commissioner of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Data security

We do everything commercially reasonable to protect your data. However, please be aware that no method of data transmission over the Internet can guarantee complete security.

This site always uses SSL or TLS encryption to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

Data collection and use

When using our services (log files & cookies)

Usage data (server log files)

This website collects a series of general data and information each time a website is accessed by a data subject or an automated system. This general data and information is stored in the log files of the web server. The types and versions of browsers used, the operating system used by the accessing system, the website from which an accessing system accesses our website (so-called referrer), the sub-websites which are accessed via an accessing system on our website, the date and time of an access to the website, an Internet protocol address (IP address), the Internet service provider of the accessing system and other similar data and information which serve to avert danger in the event of attacks on our information technology systems may be recorded.

When using these general data and information, no conclusions are drawn about the data subject. Rather, this information is required in order to deliver the content of our website correctly, to optimise the content of the website as well as the advertising for it, to ensure the permanent functionality of our information technology systems and the technology of our website as well as to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack. Therefore, the data and information collected anonymously are, where applicable, evaluated statistically on the one hand, and on the other hand, with the aim of increasing data protection and data security, so as to ensure an optimal level of protection for the personal data we process.

The anonymous data of the server log files are stored separately from any personal data provided by a data subject.

Tracking & Cookies

This site uses so-called cookies, which are stored on your computer. Cookies” are small text files that can be stored locally by a website in the memory of your internet browser on the computer you are using. Cookies serve to make our offer more user-friendly, effective and secure. In particular, cookies enable the recognition of the internet browser. The cookies on our website do not collect any personal data about you or your use. Once cookies have been set, you can delete them yourself at any time by calling up the corresponding menu item in your internet browser or deleting the cookies on your hard drive. You can find details on this in the help menu of your internet browser. Of course, you can also use our website without cookies being used. To do this, you can generally reject the use of cookies at any time via the settings of your internet browser (“deactivate”) or have the setting of cookies displayed and then decide on a case-by-case basis whether you accept cookies (“cookie warning”). You can find details on this in the help menu of your Internet browser. Rejecting or displaying cookies may affect the functionality of our website.

Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies enable us to recognise your browser on your next visit.

Cookies that are required to carry out the electronic communication process or to provide certain functions you have requested (e.g. booking function) are stored on the basis of Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in storing cookies for the technically error-free and optimised provision of its services.

Further information and the possibility to revoke your consent to the storage of cookies can be found in our Cookie Policy.

Please note our information on the use of the Google Analytics service, which also uses cookies.

When registering or sending forms

Generally

While using our Services, you may be asked to share personal information with us, which may include, but is not limited to, the following information:

  • Your email address
  • First and last name
  • Your telephone number

The collection of such data is usually based on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

Creating a customer account

You may create a customer account on this site in order to use additional functions on the site (e.g. viewing the order status). In doing so, you may give us the following consent: “Yes, I would like to open a customer account and accept the privacy policy.”

If you open a customer account, you agree that your inventory data such as name, address, e-mail address as well as your usage data (user name, password) are stored. This enables you to order from us using your e-mail address or your customer number as well as your personal password.

The processing of the data entered during registration is based on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke your consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing already carried out remains unaffected by the revocation.

The data collected during registration will be stored by us for as long as you are registered on our website and will then be deleted. Legal retention periods remain unaffected.

Contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We do not pass on this data without your consent.

The processing of the data entered in the contact form is therefore based exclusively on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

The data you entered in the contact form will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory legal provisions – in particular retention periods – remain unaffected.

Comments and contributions

When users leave comments or other contributions, their IP addresses are stored for 7 days on the basis of our legitimate interests as defined in Art. 6 para. 1 lit. f. DSGVO are stored for 7 days.

This is done for our security in case someone leaves unlawful content in comments and posts (insults, prohibited political propaganda, etc.). In this case, we ourselves can be prosecuted for the comment or post and are therefore interested in the identity of the author.

Data transfer and third parties

Generally

Data transfer

General

As a matter of principle, personal data is not shared with third parties. If data is nevertheless shared, this is only done because it is necessary for the fulfilment of an agreement or a legal requirement. With organisations that process your data on behalf of the organisation, precautions are taken to ensure that your data is also well protected there. This is done by means of a so-called processing agreement or a privacy statement in the general terms and conditions of this third party.

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or do so in the context of using third-party services or disclosing or transferring data to third parties, this will only be done if it is done in order to fulfil our (pre-)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we only process or allow the processing of data in a third country if the special requirements of Art. 44 ff. DSGVO are met. This means, for example, that the processing is carried out on the basis of special guarantees, such as the officially recognised determination of a level of data protection corresponding to that of the EU (e.g. for the USA through the “Privacy Shield”) or compliance with officially recognised special contractual obligations (so-called “standard contractual clauses”).

Data transfer upon conclusion of a contract

Personal data that you provide to us, e.g. when placing an order (e.g. your name, your address or your e-mail address), will only be transferred to third parties if this is necessary in the context of processing the contract, e.g. to the companies entrusted with the delivery of the goods or to the credit institution entrusted with the processing of payments. Further transmission of data does not take place or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

The basis for data processing is Art. 6 para. 1 lit. b DSGVO, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

Disclosure of data

We may disclose your personal data under certain circumstances if, taking into account the principles of good faith, we believe that this is necessary to achieve the following objectives:

  • to comply with a legal obligation
  • to protect and defend the rights or property of our company
  • to prevent or investigate possible misconduct involving the Service
  • to protect the personal safety of users of the Service or the public
  • to avoid liability claims

Transfer of data to third parties

EasyBooking

The enquiry form as well as the booking form is provided by easybooking (zadego GmbH, easybooking department, Tschamlerstraße 4, A-6020 Innsbruck, Austria) and integrated on our pages.

The data you enter in the forms will be used by us exclusively to answer the contact in the context of your request to us. We do not use this data for any other purpose than to answer your enquiry. Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO on the basis of your voluntarily given consent and, in the case of booking enquiries, on the basis of Art. 6 para. 1 p. 1 lit. b for the implementation of pre-contractual measures.

Information on data transfer to easybooking and processing of your data can be found at https://www.easy-booking.at/wo/Services/com/eBook/legalDocs/legalDoc.php?legalDocName=PrivacyPolicy&legalDocType=widgets&legalDocCategory=guest&localeName=de_AT&content=textHTML&c_id=7830

Analytics (Google Analytics)

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), on our website on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our application within the meaning of Art. 6 (1) f) DSGVO).

Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. However, by activating IP anonymisation on this website, your IP address will be shortened so that it can no longer be assigned to a connection.

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly. In addition, you can prevent the collection of the data generated by the cookie and related to your use of the website (incl. your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link (http://tools.google.com/dlpage/gaoptout?hl=de).

Alternatively, you can prevent the collection by Google Analytics on this site by clicking on the following link. An opt-out cookie will be set, which will prevent the future collection of your data when visiting this website:

Google Analytics opt-out

Google is certified under the Privacy Shield agreement and thus guarantees to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

For more information on Google’s terms of use and data protection, please visit http://www.google.com/analytics/terms/de.html bzw. unter https://www.google.de/intl/de/policies/. We would like to point out that the code “anonymizeIp” has been added to Google Analytics on this website to ensure anonymised collection of IP addresses (so-called IP masking).

Maps (Google Maps)

Some of our pages use the map service Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). To use the functions of Google Maps, it is necessary to transmit your IP address. This information is usually transmitted by your internet browser to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission. The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy location of the places indicated by us on the website. This constitutes a legitimate interest within the meaning of Art. 6 Para. 1 lit. f DSGVO. More information on the handling of user data can be found in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/.

Instagram

Some of our pages embed images from Instagram, a service provided by Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, Instagram can associate your visit to our pages with your user account. You can prevent this by logging out of your Instagram account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Instagram; the interaction takes place directly between the user’s browser and Instagram. Privacy policy: http://instagram.com/about/legal/privacy/.

The integration of the images makes our service more appealing and informative. This constitutes a legitimate interest pursuant to Art. 6 (1) (f) of the DSGVO.