Data protection

Allgemeine Information über die Verarbeitung Ihrer Daten

We are legally obligated to inform you about the processing of your personal data (hereinafter “data”) when using our website. This data protection notice informs you about the details of the processing of your data, as well as about your statutory rights in this respect. For terms such as “personal data” and “processing”, the legal definitions in Article 4 GDPR are controlling. We reserve the ability to modify the Data Protection Policy with prospective effect, particularly in the event that the website is enhanced, when new technologies are used, or when the statutory bases or corresponding legislation changes. We recommend that you read the Data Protection Polich from time to time and place a print-out or copy in your documents.

Scope

The Data Protection Policy applies to all pages of www.hotel-huebner.de. It does not cover any websites of other providers that we link to.

Controller

The controller responsible for the processing of personal data within the scope of this Data Protection Policy is:

Hotel Hübner GmbH

Seestraße 12

18119 Warnemünde

Tel.: 0381 5434 0

Email: info@hotel-huebner.de

Questions about data protection

Should you have questions about the topic of data protection with respect to our company or our website, you can contact our data protection officer:

SPIRIT LEGAL Rechtsanwaltsgesellschaft mbH

Attorney and data protection office

Peter Hense

Postal address:

Data protection officer

c/o Hotel Hübner GmbH

Seestraße 12

18119 Warnemünde

Contact using the encrypted online form:

Contact the data protection officer

Security

We have taken comprehensive technical and organisational precautions to protect your personal data against unauthorised access, misuse, loss and other external disruptions. In this regard, we review our security measures on a regular basis and adjust them to conform to the state of the art.

Your rights

You have the following rights with respect to the personal data concerning you that you can assert against us:

  • Right of access: In accordance with Article 15 GDPR, you can obtain access to your personal data that we process.
  • Right to rectification: Should the information concerning you not be, or no longer be, accurate, you can obtain rectification under Article 16 GDPR. Should your data be incomplete, you can obtain completion.
  • Right to erasure: In accordance with Article 17 GDPR, you can obtain the erasure of your personal data.
  • Right to restriction of processing: In accordance with Article 18 GDPR, you have the right to obtain a restriction of the processing of your personal data.
  • Right to object to processing: In accordance with Article 21(1) GDPR, you have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data that takes place on the basis of Article 6(1)(e) or (f) GDPR. In such case, we will no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms. Further processing also takes places if the processing serves the establishment, exercise or defence of legal claims (Article 21(1) GDPR). Furthermore, in accordance with Article 21(2) GDPR, you have the right to object at any time to processing of your personal data for direct marketing purposes; this also applies to any profiling to the extent that it is related to such direct marketing. We point out to you the right to object in this DPP in connection with the respective processing.
  • Right to withdraw your consent: In accordance with Article 7(3) GDPR, you have a right of withdrawal where you have given your consent to processing.
  • Right to data portability: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format (“data portability”) and have the right to transmit those data to another controller if the conditions in Article 20(1)(a) and (b) GDPR are met (Article 20 GDPR).

You can assert your right by giving notice using the contact details set forth in the section “Controller” or to the data protection office appointed by us.

If you believe that the processing of your personal data is in violation of data protection law, then in accordance with Article 77 GDPR, you also have the right to complain to a data protection supervisory authority of your choice. This also includes the data protection supervisory authority responsible for the controller:

Landesbeauftragter für Datenschutz und Informationsfreiheit Mecklenburg-Vorpommern, Lennéstraße 1, Schloss Schwerin, 19053 Schwerin, Tel: 0385/59494-0, email: info@datenschutz-mv.de, https://www.datenschutz-mv.de.

Use of our website

As a general rule, you may use our website for purely informational purposes without disclosing your identity. If you visit individual pages of the website in this sense, only access data are transmitted to our webspace providers so that the website can be displayed to you. The following data are processed in this regard:

  • Browser type / browser version
  • Operating system being used
  • Language and version of the browser software
  • Date and time of day of access,
  • Host name of the accessing device
  • IP address
  • Content of the request (specific website)
  • Access status/HTTP status code
  • Websites that are accessed via the website
  • Referrer URL (the previously visited website),
  • Report whether access was successful and
  • Amount of data transferred

The temporary processing of these data is necessary in order to make it technically possible to visit the website and display it to your end device. The access data will not be used to identify individual users or be combined with other data sources. Further storage in log files takes place in order to ensure the functioning of the website and the security of the IT systems. Legal basis for processing is Article 6(1)(f) GDPR. Our legitimate interests consist of ensuring the functioning of the website and the integrity security of the website. The storage of access data in log files, particularly the IP address, for an extended period of time enables us to identify and prevent misuse. This includes defending against requests that overwhelm the service or possible bot use. The accessed data are erased once they are no longer needed for fulfilling the purpose for which they were processed. If data are collected in order to provide the website, this is the case when the website visit ends. As a rule, data in log files are directly retained in a manner that is accessible only to administrators and then erased after at most 30 days. Thereafter, they are available only indirectly through the reconstruction of back-ups and will be definitively erased after at most four weeks.

You can object to the processing. Your right to object exists in the event of grounds relating to your particular situation. You can send us your objection using the contact details set forth in the section “Controller”.

End device information

Beyond the aforementioned access data, technologies are utilised in connection with use of the website that store information on your end device (e.g. desktop PC, laptop, tablet or smartphone) or access information that is already stored on your end device. These technologies may involve e.g. cookies, pixels, localStorage, sessionStorage, indexedDB or browser fingerprinting technologies. These technologies may be used to recognise you across devices and websites.

Pursuant to section 25 (1) of the German Act on Data Protection and Privacy of Telecommunication and Telemedia Services (TTDSG), we require as a rule your consent to the use of these technologies. In accordance with section 25 (2) TTDSG, such consent is required only if the technologies either enable transmission of a message over a public telecommunications network or are essential for providing a telemedia service expressly requested by you.

Technically unnecessary end device information

In addition, we use elements on this website that are not technically necessary. Pursuant to statutory requirements, we employ these technologies only with your consent. You can find information about the individual technologies and functions in our “data protection settings” as well as, broken down by individual functions, in the following information:

Consent management platform Consentmanager

We use the consent tool Consentmanager to retrieve consents on our website to the use of your end device information and personal data by means of cookies and other tracking technologies. With the aid of Consentmanager, you have the ability to approve or refuse the processing of your end device information and personal data by means of cookies or other tracking technologies for the purposes listed in Consentmanager. Such processing purposes may include the integration of external elements, integration of streaming content, statistical analysis, reach measurement, customised product recommendations or customised advertising. With the aid of Consentmanager, you can grant or refuse your approval for individual purposes or grant or refuse your consent individual services or individual third-party providers. The settings you make can also be subsequently changed by you. The purpose of integrating Consentmanager is to leave it up to users of our website to decide about the setting of cookies and similar features and, in connection with further use of our website, to offer them the ability to change settings they have already made. In the course of using Consentmanager, personal data and information about the end device being used are processed by us. In this regard, your data are also sent to Consentmanager (consentmanager GmbH, Eppendorfer Weg 183, 20253 Hamburg). Information about the settings that you have made is moreover stored on your end device. The legal basis for processing is Article 6(1)(c) GDPR in conjunction with Article 7(1) GDPR, to the extent that the processing serves compliance with statutory evidentiary obligations for the granting of consent. In addition, Article 6(1)(f) GDPR is the relevant legal basis. Our legitimate interests in processing consist of the storage of user settings and preferences with respect to the use of cookies and the analysis of consent ratios. Twelve months after the user settings are made, approval is again requested. The user settings that are made will then again be stored for this period of time unless you yourself first erase the information about your user settings in the end device capacities envisaged for this purpose.

Contacting our company

If you contact our company, e.g., by email or using the contact form on the website, the personal data you communicated to us will be processed by us in order to respond to your enquiry. For handling enquiries submitted using the contact form, it is essential that you provide your first and last name, a valid email address, postal address and phone number. When the message is sent to us, the data and time of registration are also processed. Legal basis for processing is Article 6(1)(f) GDPR, or Article 6(1)(b) GDPR if contact is made with the aim of concluding a contract. If the enquiry is aimed at concluding a contract, the provision of your data is necessary and obligatory. In the event of failure to provide the data, contract conclusion and performance and the handling of your enquiry are not possible. We use the other data processed during the sending operation in order to prevent misuse of the contact form and to ensure the security of our IT systems. We erase the data generated in this regard once processing is no longer necessary – normally, two years after communication ends – or limit processing, where appropriate, to compliance with existing mandatory statutory retention obligations.

You can object to the processing. Your right to object exists in the event of grounds relating to your particular situation. You can send us your objection using the contact details set forth in the section “Controller”.

Application process

As part of the application procedure, we process your contact data, such as name, address, email address, phone number(s), data from your application documents, particularly letters of reference, CV, covering letter, date of birth and gender, possibly special categories of personal data, such as marital status and degree of disability. The purpose of processing is to review your suitability for a position in our company, as well as for the purpose of carrying out the application procedure. In the case of an (unsolicited) application by email, we moreover also process meta data in your email, such as date and time, for the purpose of carrying out the application procedure. In addition, in the case of an application through our career portal on our website, the access data listed in the section”Use of our website” are processed in order to be able to digitally submit other documents to us in connection with the application procedure.

Legal basis for processing is Article 6(1)(b) GDPR in conjunction with section 26 (1) of the German Federal Data Protection Act (BDSG), to the extent that data processing is necessary for establishing and carrying out the employment relationship. With regard to the processing of special categories of personal data, the legal basis is Article 9(2)(b) GDPR in conjunction with section 26 (3) BDSG. The provision of your data is necessary and obligatory for contract conclusion and performance. In the event of failure to provide the data, you cannot apply with us. 

We store your data for as long as this is necessary in connection with the application procedure. Normally, we erase your personal data once they are no longer required for the aforementioned purposes and to the extent not required otherwise by statute. In particular, we retain your personal data for as long as we require them for the purpose of asserting legal claims or defending claims. Thereafter, we erase the data of applicants in the event of a rejection six months after the rejection notice is sent. Legal basis for processing for purposes of prosecuting legal actions is Article 6(1)(b) GDPR in conjunction with section 26 (1) BDSG. With regard to the processing of special categories of personal data, particularly of possible disabilities, the legal basis is Article 9(2)(b) GDPR in conjunction with section 26 (3) BDSG or Article 9(2)(f) GDPR.

In the case of an application acceptance, we store your data for the ensuring employment relationship in our HR department. You can find further information in the data protection information for employees.

In the course of applying through our website, you can also use your data stored by Facebook or Instagram (provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, and Meta Platforms Inc. 1601 Willow Rd, Menlo Park, California, USA, hereinafter “Facebook”, “Instagram” and “Meta”) and by kleinanzeigen (kleinanzeigen.de GmbH, Albert-Einstein-Ring 26, 14532 Kleinmachnow; hereinafter “kleinanzeigen”). If you choose this feature, Meta or kleinanzeigen receives information that you are accessing our website on Facebook, Instagram or kleinanzeigen. In addition, your data stored with Meta or kleinanzeigen (such as name, photos, profile slogans and your current position, as well as your email address linked with Meta or kleinanzeigen) are transferred to us. The transfer of data by Meta or kleinanzeigen to us takes place on the basis of your consent in the course of forwarding and thus on the legal basis of Article 6(1)(a) GDPR. Your IP address is transmitted to Meta or kleinanzeigen on the basis of Article 6(1)(f) GDPR. The purpose of this processing is to enable the integration of Meta and kleinanzeigen on our website. Our legitimate interests in processing consist of the improvement of our service offering and the more attractive and more user-friendly design of our website. Meta also processes data in part in the USA. Standard data protection clauses have been concluded with Meta Platforms Inc. in order to obligate Meta Platforms Inc. to maintain an appropriate level of data protection. You can request a copy of the standard data protection clauses from Facebook at https://www.facebook.com/help/contact/341705720996035.

You may at any time withdraw your consent to the processing of your data by sending a message to us (see the contact details in the section “Controller”). The lawfulness of the processing remains unaffected up until exercise of the withdrawal. In addition, you have a right to object to the processing of your other data, provided that the processing is based on Article 6(1)(f) GDPR. Your right to object exists in the event of grounds relating to your particular situation. You can send us your objection using the contact details set forth in the section “Controller”.

If we do not have an open position that needs to be filled but are generally interested in working together with you, we process your application documents following your consent in our applicant pool in order to contact you in the event of a vacancy. In order to obtain your consent, we get in touch with you separately. Legal basis is your consent pursuant to Article 6(1)(a) GDPR. Your data will be deleted from the applicant pool after two years, unless you have consented to a longer storage period.

You may at any time withdraw your consent to processing by notifying us using the contact details set forth under “Controller”. The lawfulness of the processing remains unaffected up until exercise of the withdrawal.

Career portal via Stepstone

For the purpose of recruitment and for the application process through the career portal on our website, we use the specialised software provider StepStone (StepStone Deutschland GmbH, Völklinger Straße 1, 40219 Düsseldorf; hereinafter, “StepStone”). The processing purposes are the provision of a simple input form for applicants and the digital organisation and carrying out of job listing and placement. You can enter the personal data required for the application in the StepStone input form. When the application is sent through the career portal, your data from the input form and your IP address are also processed by StepStone. StepStone acts as our processor and is contractually limited in its power to use your personal data for purposes other than providing the services for us in conformity with the applicable data processing contract. Legal basis for processing is Article 6(1)(f) GDPR. Our legitimate interest in the integration of the external service provider consists of the optimisation of our digital application procedure. You can find further information about data protection and the storage duration at StepStone at: https://www.stepstone.de/e-recruiting/rechtliches/datenschutzerklarung/.

You can object to the processing, to the extent it is based on Article 6(1)(f) GDPR. Your right to object exists in the event of grounds relating to your particular situation. You can send us your objection using the contact details set forth in the section “Controller”.

Processing for contractual purposes

We process your personal data if and to the extent that this is necessary for initiating, establishing, performing and/or terminating a contract with our company. The legal basis for this results from Article 6(1)(b) GDPR. The provision of your data is necessary for contract conclusion, and you are contractually obligated to provide your data. In the event of failure to provide your data, contract conclusion and/or performance is not possible. After the purpose is achieved (e.g. contract execution), the personal data will be blocked for further processing or erased, unless we are empowered to process them further based on consent granted by you (e.g. consent to the processing of the email address for sending electronic marketing mail), a contractual agreement, a statutory authorisation (e.g. authorisation to send direct marketing) or based on legitimate interests (e.g. retention to enforce claims).

Your personal data will be transferred to third parties if

  • it is necessary for establishing, performing or terminating a contract with our company (e.g. with regard to the transfer of data to a payment service provider/a mail-order company for the purpose of executing a contract with you) pursuant to Article 6(1)(b) GDPR or
  • a subcontractor or agent that we use solely in connection with the provision of the offers or services that you desire needs these data (unless expressly communicated to you otherwise, such auxiliary persons are entitled to process your data only where this is necessary for providing the offer or service) or
  • there is an enforceable official directive to do so (Article 6(1)(c) GDPR) or
  • there is an enforceable judicial directive to do so (Article 6(1)(c) GDPR) or
  • we are obligated by law to do so (Article 6(1)(c) GDPR) or
  • processing is necessary in order to protect the vital interests of the data subject or of another natural person (Article 6(1)(d) GDPR) or
  • processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller (Article 6(1)(e) GDPR) or
  • we can invoke our overriding legitimate interests or that of a third party for the transfer (Article 6(1)(f) GDPR).

Your personal data are not transferred beyond this to other persons, companies or entities unless you have effectively consented to such transfer. Legal basis for processing is Article 6(1)(a) GDPR. In connection with this data protection information as regards the respective processing event, we make you aware of the respective recipients.

Online store

If you would like to place an order in our online store, it is necessary and obligatory for contract initiation and contract conclusion that you provide personal data, such as your first and last name, your address and your email address. The mandatory information required for order and contract execution are specially marked. Other information is provided voluntarily. We process your data for the purpose of order execution, and for this purpose, we will transfer, in particular, payment data to the payment service provider you chose and to our company bank. Legal basis for processing is Article 6(1)(b) GDPR. The provision of your data is necessary and obligatory for contract conclusion and performance. In the event of failure to provide your data, contract conclusion and/or performance is not possible. In order to prevent your personal data from being accessed by unauthorised third parties, the order process on the website is encrypted with SSL technology.

We delete these data once storage is no longer necessary, or if we are subject to statutory duties to retain them, we restrict their processing. Owing to mandatory provisions of commercial and tax law, we are obligated to retain your address, payment and order data for a period of up to 10 years. Two years after the end of the contract, we restrict the processing and reduce the processing to compliance with existing statutory obligations.

Oracle shopping system

We process your data to carry out orders through the Oracle shopping system (Oracle America, Inc., 1001 Sunset Blvd, Rocklin, California 95765, USA; hereinafter, “Oracle”) so that the data provided in connection with the order, such as first and last name, postal address, email address and information from your shopping cart, can also be processed by Oracle. Legal basis for the use of Oracle is Article 6(1)(f) GDPR. Our legitimate interests in the use of Oracle consist of offering customer-friendly, swift order execution. In addition, we process the data through Oracle also for the purpose of analysing customer orders after the purchase is completed. In this regard, we process your data provided in connection with the order as well as your shopping cart for the purpose of analysing our customer basis and analysing the placed orders. Legal basis for this subsequent data processing is Article 6(1)(f) GDPR. Our legitimate interests consist of the optimisation of our offer in the online store based on the interests of our customer base and the placed orders. Your data that are processed in this connection will be erased once they are no longer required for the processing purpose. Oracle processes your personal data also in the USA. Standard data protection clauses have been concluded with Oracle in order to obligate Oracle to maintain an appropriate level of data protection. You can view a copy of the standard data protection clauses at Oracle at https://www.oracle.com/fr/a/ocom/docs/corporate/privacy-shield-statement-071720.pdf. You can find more extensive information about the purpose and scope of processing by Oracle at https://www.oracle.com/de/legal/privacy/.

You can object to the processing, to the extent that the processing is based on Article 6(1)(f) GDPR. Your right to object exists in the event of grounds relating to your particular situation. You can send us your objection using the contact details set forth in the section “Controller”.

Contests

If you would like to participate in a contest, you must provide the following data in the input form:

  • First and last name
  • Postal address and
  • Email address

In connection with contests, we process your data solely for the purpose of designing, carrying out and executing the contest. Legal basis for processing is Article 6(1)(b) GDPR. Processing is necessary and obligatory for contract conclusion. In the event of failure to provide your data, participation in the contest and its execution are not possible. As a rule, your data will not be transferred to third parties. Where it is necessary to send prices, we will transfer your data to mail-order service providers in particular. We erase these data once processing is no longer necessary – normally, after the contest drawing – or if we are subject to statutory duties to retain them, we restrict their processing.

Payment service provider (PSP) 

PayPal 

On our website, we offer you payment via PayPal (PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg as well as PayPal Holdings, Inc., 2211 North First Street, 95131 San Jose, California, USA; hereinafter, “PayPal”). In order to pay, you must log into your PayPal account. The payment details provided at PayPal will be processed by PayPal for the purpose of payment execution. You can obtain further information concerning data processing by PayPal here: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

In order to be able to assign your payment, we process your delivery/billing address, email address and the chosen payment method. We delete these data once storage is no longer necessary, or if we are subject to statutory duties to retain them, we restrict their processing. Owing to mandatory provisions of commercial and tax law, we are obligated to retain your address, payment and order data for a period of up to 10 years. Two years after the end of the contract, we restrict the processing and reduce the processing to compliance with existing statutory obligations.

Legal basis is Article 6(1)(b) GDPR. The provision of your payment data is necessary and obligatory for contract conclusion and performance. In the event of failure to provide payment data, contract conclusion and/or performance is not possible with the PayPal payment method.

PayPal processes your data also in the USA. Standard data protection clauses have been concluded with PayPal Holdings, Inc. in order to obligate PayPal Holdings, Inc. to maintain an appropriate level of data protection. You can view a copy of the standard data protection clauses at PayPal at https://www.paypal.com/de/smarthelp/contact-us/privacy. You can find further information, including about the storage duration, in the PayPal data protection provisions at https://www.paypal.com/de/smarthelp/contact-us/privacy.

Hosting

We use external hosting services of the provider JAKOTA Design Group GmbH (Strandstrasse 87, 18055 Rostock), which enable provision of the following services: infrastructure and platform services, computing capacity, storage resources and database services, security services and technical maintenance services. For these purposes, all data – inter alia, the access data listed under the item “Use of our website” – are processed that are necessary for the operation and use of our website. Legal basis for processing is Article 6(1)(f) GDPR. With the use of external hosting services, we pursue efficient, secure provision of our website.

You can object to the processing. Your right to object exists in the event of grounds relating to your particular situation. You can send us your objection using the contact details set forth in the section “Controller”.

Integration of third-party content

The website integrates third-party content, such as recordings of our webcam, of other websites. This integration always presupposes that the providers of such content (“third-party providers”) detect the IP addresses of users. This is because without the IP address, they cannot send the content to the browser of the respective user. Thus, the IP address is necessary for displaying such content. In the following, we inform you about the services of external providers currently being used on our website as well as about the respective processing in a given case and about your existing abilities to object and withdraw:

Livespotting Webcam

We use the website services of livespotting.tv (provider is FOSS GmbH, Ruggernstrasse 8, CH-8113 Boppelsen, Switzerland; hereinafter, “livespotting.tv”) to show the weather via recordings by our webcam. The webcam recording of livespotting.tv is integrated through an iFrame. With the integration, we pursue the purpose of integrating visual content in order to show the weather live on our website. If you visit one of our websites with the livespotting.tv iFrame, a connection is established with the livespotting.tv servers. livespotting.tv uses cookies, which are stored on your end device. In this regard, information is transmitted to the livespotting.tv server about which website you visited. In addition, the data listed in the section “Use of our website” are transmitted in part. Without these data, it would not be technically possible for livespotting.tv to deliver the services to your end device and guarantee trouble-free establishment of a connection and smooth use.

With respect to the storage of and access to information on your end device, your consent is the legal basis pursuant to section 25 (1) TTDSG; for further processing, your consent is likewise the legal basis pursuant to Article 6(1)(a) GDPR. livespotting.tv also processes your data on servers in Switzerland. Legal basis for the data transmission to Switzerland is the adequacy decision of the EU Commission, see Article 45 GDPR. The data are erased once they are no longer needed for the processing purposes. You can find further information about the storage duration and about data processing at livespotting.tv at https://livespotting.com/de/datenschutzerklaerung.

You may withdraw your consents at any time by sliding back the controller in the “data protection settings” of the consent tool for the respective third-party provider. The lawfulness of the processing remains unaffected up until exercise of the withdrawal.

Services for statistics, analysis and marketing purposes

We use services of third-party providers for statistics, analysis and marketing purposes. This enables us to make user-friendly, optimised use of the website possible for you. To manage their services, the third-party providers use cookies, pixels, browser fingerprinting and other tracking technologies. In the following, we inform you about the services of external providers currently being used on our website as well as about the respective processing in a given case and about your existing abilities to withdraw.

Hosting with external service providers

We use the hosting services of the Jakota Design Group GmbH, Strandstraße 87, 18055 Rostock.

A processing contract has been concluded with the host. This is intended to ensure that your data are processed in conformity with current data protection legislation and that we maintain control over the data stored on the servers of the hosting service provider.

The services are used in the interest of a stable provision of our services. This is a legitimate interest within the meaning of Article 6(1)(f) GDPR.

Web analysis software Matomo

We use the web analysis software Matomo, an open-source software application, for the purpose of statistically analysing visitor accesses in order to design our website in a better, more user-friendly manner. The provider is Innocraft (Innocraft Ltd., 150 Willis Street, 6011 Wellington, New Zealand, contact@innocraft.com). Matomo is an open-source software application that enables statistical analyses on our website, particularly regarding visitor accesses, page views, downloads and previously visited website, as well as in order to measure the success of entries in search engines. The analysed information and statistics are processed solely on our own web servers and databases. The Matomo tool records, analyses and categorises information about the use of our website received from the user’s end device, which is generated with the aid of technologies, like fingerprinting, and interactions with our website, as well as access data, particularly IP address, browser information, previously visited website, date and time of server request, for the purpose of statistical analysis and reach measurement of advertisements in search engines. With respect to the storage of and access to information on your end device, your consent is the legal basis pursuant to section 25 (1) TTDSG; for further processing, your consent is likewise the legal basis pursuant to Article 6(1)(a) GDPR. We use Matomo with an extension that processes shortened IP addresses in order to make it difficult to draw a direct connection to a person. The storage period amounts to six months. You can find further information about the data processing and storage duration at Matomo at https://matomo.org/gdpr-analytics/.

You may withdraw your consents at any time by sliding back the controller in the “data protection settings” of the consent tool for the respective third-party provider. The lawfulness of the processing remains unaffected up until exercise of the withdrawal.

Copyright by Spirit Legal

Data protection officer

Mandatory disclosures under Article 37(7) of the
General Data Protection Regulation (GDPR)
Spirit Legal LLP Rechtsanwälte
Attorney and data protection office
Peter Hense

Mailing address: Neumarkt 16-18, 04109 Leipzig
Contact using encrypted online form:

Contact the data protection officer

datenschutz@spiritlegal.com

Rights of those affected

Your data will be processed in accordance with Article 6 Paragraph (1) a), b) and, if applicable, c) GDPR. The personal ones Data will be stored until the contract has been fully fulfilled or the selected service has been terminated or until tax or commercial law recording and retention requirements have been met. You have the following rights towards the aforementioned responsible party: the right to information about personal data concerning you, the right to have your personal data corrected or deleted, the right to restrict the processing of your personal data, the right to have your personal data transferred, the right to object to the processing of your personal data the right to withdraw consent at any time, without affecting the lawfulness of the processing carried out based on consent until its withdrawal


2. Bereitstellung der Website

SSL-Verschlüsselung

Diese Seite nutzt aus Sicherheitsgründen und zum Schutz der Übertragung vertraulicher Inhalte, wie zum Beispiel Buchungsanfragen, die Sie an uns als Seitenbetreiber senden, eine SSL-Verschlüsselung. Eine verschlüsselte Verbindung erkennen Sie daran, dass die Adresszeile des Browsers von “http://” auf “https://” wechselt und an dem Schloss-Symbol in Ihrer Browserzeile.

Wenn die SSL- Verschlüsselung aktiviert ist, können die Daten, die Sie an uns übermitteln, nicht von Dritten mitgelesen werden.

Aufruf der Webseite/Applikation

Hier wird beschrieben, wie wir Ihre personenbezogenen Daten beim Aufrufen unserer Services verarbeiten. Besonders weisen wir darauf hin, dass die Übermittlung von Zugriffsdaten an externe Inhaltanbieter (siehe Empfänger der personenbezogenen Daten) aufgrund der technischen Funktionsweise der Informationsübertragung im Internet unumgänglich ist.

1. Informationen zur Verarbeitung

Die Zugriffsdaten werden zum Zweck des Verbindungsaufbaus, der Darstellung der Inhalte des Services, der Aufdeckung von Angriffen auf unsere Seite anhand ungewöhnlicher Aktivitäten sowie zur Fehlerdiagnose verarbeitet. Hierbei greift als Rechtsgrundlage Art. 6 Abs. 1 f DSGV.

Unser Interesse gilt der ordnungsgemäßen Funktion des Services, der Sicherheit von Daten und Geschäftsprozessen, der Verhinderung von Missbrauch, der Verhütung von Schäden durch Eingriffe in Informationssysteme.

2. Empfängerinformationen

Empfänger  der Zugriffsdaten sind auch externe Inhaltanbieter, die Inhalte (z.B. Bilder, Videos, eingebettete Postings aus sozialen Netzwerken, Schriftarten, Updateinformationen) bereitstellen, die zur Anzeige des Service erforderlich sind. Als Rechtsgrundlage gilt die Auftragsverarbeitung (Art. 28 DSGVO).

Das Interesse gilt der ordnungsgemäßen Funktion der Services, (beschleunigte) Darstellung der Inhalte und der Verhinderung von Angriffen durch Ausnutzen von Sicherheitslücken/ Schwachstellen.

Kontaktformular

Wenn Sie uns per Kontaktformular Anfragen zukommen lassen, werden Ihre Angaben aus dem Anfrageformular inklusive der von Ihnen dort angegebenen Kontaktdaten zwecks Bearbeitung der Anfrage und für den Fall von Anschlussfragen bei uns gespeichert. Diese Daten geben wir nicht ohne Ihre Einwilligung weiter.

Die Verarbeitung der in das Kontaktformular eingegebenen Daten erfolgt somit ausschließlich auf Grundlage Ihrer Einwilligung (Art. 6 Abs. 1 lit. a DSGVO). Sie können diese Einwilligung jederzeit widerrufen. Dazu reicht eine formlose Mitteilung per E-Mail an uns. Die Rechtmäßigkeit der bis zum Widerruf erfolgten Datenverarbeitungsvorgänge bleibt vom Widerruf unberührt.

Die von Ihnen im Kontaktformular eingegebenen Daten verbleiben bei uns, bis Sie uns zur Löschung auffordern, Ihre Einwilligung zur Speicherung widerrufen oder der Zweck für die Datenspeicherung entfällt (z.B. nach abgeschlossener Bearbeitung Ihrer Anfrage). Zwingende gesetzliche Bestimmungen – insbesondere Aufbewahrungsfristen – bleiben unberührt.

Cookies

Zur Optimierung unseres Internetauftritts setzen wir Cookies ein. Es handelt sich dabei um kleine Textdateien, welche auf Ihrem Computer/Endgerät gespeichert werden. Diese Cookies werden nach dem Schließen des Browsers wieder gelöscht. Andere Cookies verbleiben auf Ihrem Rechner/Endgerät (Langzeit-Cookies) und erkennen ihn beim nächsten Besuch wieder. Cookies werden zur anonymisierten Auswertung der Nutzung unserer Webseite verwendet und sind höchstens 24 Monate gültig. Das Speichern von Cookies können Sie verhindern, indem Sie in Ihren Browser-Einstellungen "Cookies blockieren" wählen. Dies kann aber eine Funktionseinschränkung unserer Angebote zur Folge haben.

Hotjar: Dieser Cookie ist mit der Webanalysefunktion verknüpft. Er identifiziert während einer einzelnen Browsersitzung einen einzelnen Nutzer und schlägt vor, ihn in eine Zielgruppenauswahl aufzunehmen.

Weitere Informationen zu Hotjar und dem Datenschutz finden Sie unter https://www.hotjar.com/privacy. Wenn Sie nicht möchten, dass Ihre Daten für das Tracking verfügbar sind, können Sie dies jederzeit deaktivieren, indem Sie einen „Do Not Track“-Header verwenden. Eine Anleitung dazu finden Sie unter https://www.hotjar.com/opt-out.

Webfont von Fast.Fonts.Net bzw. Fonts.com

Diese Seite nutzt zur einheitlichen Darstellung von Schriftarten so genannte Web Fonts, die von der Monotype GmbH (fonts.com bzw. fast.fonts.net) bereitgestellt werden. Beim Aufruf einer Seite lädt Ihr Browser die benötigten Web Fonts in Ihren Browsercache, um Texte und Schriftarten korrekt anzuzeigen. Zu diesem Zweck muss der von Ihnen verwendete Browser Verbindung zu den Servern von fonts.com aufnehmen. Hierdurch erlangt fonts.com Kenntnis darüber, dass über Ihre IP-Adresse unsere Website aufgerufen wurde. Die Nutzung von Fonts.com Web Fonts erfolgt im Interesse einer einheitlichen und ansprechenden Darstellung unserer Online-Angebote. Dies stellt ein berechtigtes Interesse im Sinne von Art. 6 Abs. 1 lit. f DSGVO dar. Wenn Ihr Browser Web Fonts nicht unterstützt, wird eine Standardschrift von Ihrem Computer genutzt. Weitere Informationen zu diesen Web Fonts finden Sie unter https://www.fonts.com/info/legal und in der Datenschutzerklärung von Fonts.comhttps://www.fonts.com/info/legal/privacy und in der Datenschutzerklärung von Monotype GmbH:  https://www.monotype.com/legal/privacy-policy.

Werbetracker Quantcast

Wir nutzen die Dienste der elektronischen Publishing-Plattform Issuu (Kollwitzstraße 75, 10435 Berlin, Germany) für die Blättervariante von "Hübners Aktuelle" und "Die Geschichte des Strand-Hotel Hübner".

Es werden von Issuu Cookies (u.a. Quantcast) gesetzt und Browserdaten an Issuu in die USA übertragen. Wenn Sie das nicht wollen, blockieren Sie auf den entsprechenden Seiten das Script. Alternativ können Sie auch im Browser die Do-not-track-Funktion aktivieren. Anleitung für den Firefox.

Informationen zu den Datenschutzbestimmungen der Issuu Inc können unter folgendem Link eingesehen werden: https://issuu.com/legal/terms

Auskunft

Nach dem Bundesdatenschutzgesetz haben Sie ein Recht auf unentgeltliche Auskunft über Ihre gespeicherten Daten sowie ggf. ein Recht auf Berichtigung, Sperrung oder Löschung dieser Daten. Fragen können Sie z.B. über die folgende E-Mail-Adresse stellen: datenschutz@hotel-huebner.de.

Google Maps/ Google Earth

Google Maps/Google Earth ermöglichen es Ihnen, eine Vielzahl von Inhalte zu betrachten. Dazu gehören Kartenmaterial und Geländedaten, Bildmaterial, Brancheneinträge, Verkehrsinformationen, Rezensionen und sonstige Informationen, die Ihnen von Google, den entsprechenden Lizenzgebern und Benutzern zur Verfügung gestellt werden (die "Inhalte").

Indem Sie auf Google Maps/Google Earth zugreifen oder diese Inhalte nutzen oder herunterladen, erklären Sie sich einverstanden mit:

  1. den Google Nutzungsbedingungen ("allgemeine Bedingungen"),
  2. diesen Zusätzlichen Nutzungsbedingungen für Google Maps/Google Earth ("Zusätzliche Nutzungsbedingungen für Google Maps/Google Earth"),
  3. den rechtlichen Hinweisen für Google Maps/Google Earth ("rechtliche Hinweise"), sowie
  4. der Google Datenschutzerklärung ("Datenschutzerklärung").

Bitte lesen Sie sich jedes dieser vier Dokumente aufmerksam durch und fangen Sie dabei mit den allgemeinen Bedingungen an. In den allgemeinen Bedingungen werden z. B. Ihre geistigen Eigentumsrechte an den von Ihnen hochgeladenen Inhalten sowie Ihre Pflichten bei der Nutzung von Inhalten von Google oder der Inhalte Dritter erklärt. Ferner werden die Pflichten erläutert, die durch die Nutzung von Google Maps/Google Earth während des Fahrens entstehen.

Diese Seite nutzt über eine API z.B. den Kartendienst Google Maps oder die Virtuellen Rundgänge von Google Earth. Anbieter ist die Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Zur Nutzung der Funktionen von Google Maps/ Google Earth ist es notwendig, Ihre IP Adresse zu speichern. Diese Informationen werden in der Regel an einen Server von Google in den USA übertragen und dort gespeichert. Der Anbieter dieser Seite hat keinen Einfluss auf diese Datenübertragung.

Die Nutzung von Google Maps/ Googel Earth erfolgt im Interesse einer  ansprechenden Darstellung unserer Online-Angebote und an einer leichten Auffindbarkeit der von uns auf der Website angegebenen Orte.