This data protection declaration informs users about the nature, scope and purpose of the collection and use of personal data by the responsible provider
Moselschlösschen Spa & Resort
An der Mosel 15
on this website (hereinafter referred to as the "Offer"). The legal basis for data protection can be found in the General Data Protection Regulation (DSGVO) and the German Telemedia Act (TMG).
Access data/ Server log files
The provider (or its web space provider) collects data about each access to the offer (so-called server log files) for statistical analysis for the purpose of operation, security and optimization of the offer. The access data includes:
- Name of the accessed website
- Date and time of the server request
- browser type and browser version
- operating system used
- IP address and the requesting provider
- Referrer URL (Internet address of the previously visited page)
- Name of the retrieved file and amount of data transferred
- Message whether the retrieval was successful
The provider reserves the right to check the log data subsequently if there is a justified suspicion of unlawful use based on concrete indications.
This data is not merged with other data sources.
The basis for data processing is Art. 6 para. 1 lit. b DSGVO, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.
A complete protection of your data against access by third parties cannot be guaranteed during data transmission on the Internet (e.g. e-mail communication) due to possible security gaps.
Handling of personal data
When using the website, confidential, personal data is collected that may enable personal identification. This includes, for example, name, telephone number, address, as well as all data that you transmit to us during registration, payment processing, execution of a contract and when creating your customer account.
To protect the security of your personal data during transmission, we use SSL encryption (Secure Socket Layer).
Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested (e.g. shopping cart function) are stored on the basis of Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services.
Google Analytics cookies are stored on the basis of Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its web offer and its advertising in a targeted manner.
This offer uses Google Analytics, a web analytics service provided by Google Inc ("Google"). Google Analytics uses "cookies", which are text files placed on users' computers, to help the website analyze how users use the site. The information generated by the cookie about the use of this website by users is usually transmitted to a Google server in the USA and stored there.
In the event that IP anonymization is activated on this website, however, Google will truncate the user's IP address beforehand within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. IP anonymization is active on this website. On behalf of the operator of this website, Google will use this information for the purpose of evaluating the use of the website by users, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
As an alternative to the browser add-on or within browsers on mobile devices, please click on the following link to prevent the collection by Google Analytics within this website in the future. This will place an opt-out cookie on your device. If you delete your cookies, you must click the link again.
The website operator uses Google Ads. Google Ads is an online promotional program of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads enables us to display ads in the Google search engine or on third-party websites, if the user enters certain search terms into Google (keyword targeting). It is also possible to place targeted ads based on the user data Google has in its possession (e.g., location data and interests; target group targeting). As the website operator, we can analyze these data quantitatively, for instance by analyzing which search terms resulted in the display of our ads and how many ads led to respective clicks. The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your consent at any time. Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.
Google Ads Remarketing
This website uses the functions of Google Ads Remarketing. The provider of these solutions is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
With Google Ads Remarketing, we can assign people who interact with our online offering to specific target groups in order to subsequently display interest-based advertising to them in the Google advertising network (remarketing or retargeting).
Moreover, it is possible to link the advertising target groups generated with Google Ads Remarketing to device encompassing functions of Google. This makes it possible to display interest-based customized advertising messages, depending on your prior usage and browsing patterns on a device (e.g., cell phone) in a manner tailored to you as well as on any of your devices (e.g., tablet or PC). If you have a Google account, you have the option to object to personalized advertising under the following link: https://www.google.com/settings/ads/onweb/.
The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your consent at any time. 13 / 18 For further information and the pertinent data protection regulations, please consult the Data Privacy Policies of Google at: https://policies.google.com/technologies/ads?hl=en.
Formation of Target Groups with Customer
Reconciliation For the formation of target groups, we use, among other things, the Google Ads Remarketing customer reconciliation feature. To achieve this, we transfer certain customer data (e.g., email addresses) from our customer lists to Google. If the respective customers are Google users and are logged into their Google accounts, matching advertising messages within the Google network (e.g., YouTube, Gmail or in a search engine) are displayed for them to view.
Integration of third-party services and content
It may happen that third-party content, such as videos from YouTube, maps from Google Maps, RSS feeds or graphics from other websites are integrated within this offer. This always requires that the providers of this content (hereinafter referred to as "third-party providers") perceive the IP address of the user. Without the IP address, they could not send the content to the browser of the respective user. The IP address is thus necessary for the display of this content. We endeavor to use only such content whose respective providers use the IP address only for the delivery of the content. However, we have no influence if the third-party providers store the IP address, e.g. for statistical purposes. Insofar as this is known to us, we inform the users about it.
When contacting the provider (for example, via contact form or e-mail), the user's details are stored for the purpose of processing the request and in the event that follow-up questions arise. This data will not be passed on without your consent.
The processing of your data, which you transmit when contacting us, is based on your consent (Art. 6 para. 1 lit. a DSGVO). Your consent can be revoked at any time. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
As long as no request for data deletion is made, the consent for storage is revoked or the purpose for data storage no longer applies, the data transmitted when contacting us will remain with us. Legal retention periods remain unaffected.
We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
The purpose of reCAPTCHA is to verify whether data entry on this website (e.g. in a contact form) is made by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
The reCAPTCHA analyses run entirely in the background. Website visitors are not notified that an analysis is taking place.
The data entered during registration will be used exclusively for order processing. The collected data can be seen from the input mask within the registration.
For important changes, for example, in the scope of the offer or for technically necessary changes, we use the e-mail address provided during registration to inform you in this way. The processing of the data entered, which is necessary for registration, is based on your consent (Art. 6 para. 1 lit. a DSGVO). Your consent can be revoked at any time. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
Your registration data will remain stored by us as long as no request for data deletion is made or consent to storage is revoked. Legal retention periods remain unaffected.
Data transmission upon conclusion of the contract (voucher order)
We transmit personal data to third parties only if this is necessary in the context of the contract, for example, to the payment platform commissioned with the payment processing, the service provider for the processing of the postal dispatch and to the service provider commissioned with the voucher processing.
A further transmission of the data does not take place or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes. The basis for data processing is Art. 6 para. 1 lit. b DSGVO, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.
Data transfer to shipping companies
For the fulfillment of the contract, we pass on your data (title, name, company, billing address, shipping address, photo and dedication) when sending the voucher by mail to the shipping company commissioned with the creation and delivery:
Voucher dispatch by mail
A&M Service GmbH
Hinter dem Entenpfuhl 13/15
Data transfer to payment providers
The transfer of your data takes place exclusively via secure SSL encryption to the payment provider selected by you in the ordering process for the purpose of payment processing.
The transfer of your data to the payment provider is based on Art. 6 para. 1 lit. a DSGVO (consent) and Art. 6 para. 1 lit. b DSGVO (processing for the performance of a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the validity of past data processing operations.
Payment by Visa, Mastercard and American Express
If you choose to pay by credit card, the payment will be processed by the payment provider "Stripe". The data required for this (card number, validity and verification number) are forwarded to the payment provider in encrypted form and cannot be viewed by the website operator. Stripe Payments Europe Ltd is certified according to the Industry Data Security Standard (PCI DSS) and is subject to the Safe Harbour Agreement. The payment provider transfers, processes and stores, if necessary, personal data outside the EU that is required to process the payment. Stripe is solely responsible for the processing of this
Stripe Payments Europe Ltd
Block 4, Harcourt Centre
Payment by PayPal and PayPal Express
If you make the payment by PayPal and PayPal Express, the bank data you have deposited with PayPal will be used by PayPal for the payment. The website operator has no access to this PayPal (Europe) S.à r.l. et Cie, S.C.A. is subject to the Safe Harbour Agreement. The payment provider transfers, processes and stores, if necessary, personal data outside the EU, which are required to process the payment. PayPal is solely responsible for the processing of this
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22-24 Boulevard Royal
Payment by giropay
The processing of the payment giropay takes place via the external payment provider Stripe and additionally via giropay GmbH. The payment provider giropay GmbH transfers, processes and stores, if necessary, personal data that are required for the processing of the payment. Only giropay GmbH is responsible for the processing of this
An der Welle 4
If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Further data is not collected or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.
The processing of the data entered in the newsletter registration form is based exclusively on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.
The data you provide for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after unsubscribing from the newsletter or after the purpose has ceased to exist. We reserve the right to delete or block e-mail addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest pursuant to Art. 6 (1) lit. f DSGVO.
Data that has been stored by us for other purposes remains unaffected by this. After you have unsubscribed from the newsletter distribution list, your e-mail address will be stored by us or the newsletter service provider in a blacklist if necessary to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 (1) f DSGVO). The storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.
ADDITIVE Online Marketing
In addition to our website, we also operate optimized sales landing pages. In order to process your inquiry, booking, order, activation, registration or other submission of a form on such a landing page, as well as to store and retain your data, we use common cloud services and CRM systems as well as software from ADDITIVE OHG, 39011 Lana (BZ), Italy ("ADDITIVE"). By means of these services and systems, your data is also processed and stored, at least in part, outside the EU or the EEA. The appropriate level of data protection results from an adequacy decision of the European Commission ("Privacy Shield") or from the concluded order processing agreements with the respective companies.
Our landing pages use functions of the web analytics service Google Analytics of Google Inc ("Google"). Cookies are used for this purpose, which enables an analysis of the use of the website by its users. The information thus generated is transferred to the provider's server and stored there. You can prevent this by setting up your browser so that no cookies are stored or you are informed about the setting of cookies and you allow this only in individual cases.
Your IP address is recorded, but anonymized immediately (e.g. by deleting the last 8 bits). This means that only a rough localization is possible anymore.
The relationship with the web analytics provider Google is based on adequacy decision of the European Commission (in the case of the USA: "Privacy Shield").
You can prevent the storage of cookies by setting your browser software accordingly. You can also prevent the collection of data generated by the cookie and related to your use of the online offer to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Our landing pages also use functions from ADDITIVE for the cross-channel recording of the use of our websites as well as marketing and sales measures such as landing pages, newsletters and social media presences.
ADDITIVE has insight into the data collected via Google Analytics. This data is not used for purposes other than analyzing the use of our websites and evaluating our marketing and sales measures.
The data processing is carried out on the basis of the legal provisions of Art 6 para 1 lit f (legitimate interest) of the DSGVO.
Our concern in terms of the DSGVO (legitimate interest) is the improvement of our offer and our web presence by analyzing the use of our website as well as sales and marketing measures.
In addition, our landing pages use remarketing functions of Google Inc ("Google") as well as Facebook Inc ("Facebook"). In doing so, it is transmitted to Facebook and Google that you have visited this website. These functions are used to present interest-based advertisements to visitors of the landing pages in the advertising network of Google or in the social network Facebook as well as Instagram.
The data processing in connection with these remarketing functions is based on the legal provisions of Art 6 para 1 lit a (consent) of the DSGVO.
Revocation, changes, deletion and right to information
Within the scope of the applicable legal provisions, the user has the right to receive information free of charge upon request about the personal data, its origin and recipient and the purpose of the data processing. In addition, the user has the right to correct incorrect data, blocking and deletion of his personal data, provided that this does not conflict with any legal obligation to retain