Scope
This privacy policy informs users about the nature, scope and purposes of the collection and use of personal data by the responsible provider
Moselschlösschen Spa & Resort
An der Mosel 15
56841 Traben-Trarbach
+49 (6541) 832-0
info@moselschloesschen.de
on this website (hereinafter referred to as the “offering”). The legal basis for data protection can be found in the General Data Protection Regulation (GDPR; German: DSGVO) and the German Digital Services Act (Digitale-Dienste-Gesetz, DDG).
External data protection officer
ffp digital consulting GmbH
Ms Anne Fischer
Gebäude 890 – 55483 Flughafen Hahn
www.ffp-digital.de
Tel.: 0049 6543 500 886 0
Email: datenschutz@moselschloesschen.de or datenschutz@ffp-digital.de
Access data / server log files
The provider (or its web hosting provider) collects data on every access to the offering (so-called server log files) for statistical evaluation for the purpose of operating, securing and optimising the offering. The access data include:
- name of the web page accessed
- date and time of the server request
- browser type and browser version
- operating system used
- IP address and the requesting provider
- referrer URL (web address of the previously visited page)
- name of the file retrieved and amount of data transferred
- notification of whether the retrieval was successful
The provider reserves the right to check the log data retrospectively if there is a justified suspicion of unlawful use based on concrete indications.
These data are not merged with other data sources.
The legal basis for the data processing is Art. 6(1)(b) GDPR, which permits the processing of data for the performance of a contract or of pre-contractual measures.
When transmitting data over the internet (e.g. email communication), complete protection of your data against access by third parties cannot be guaranteed due to possible security gaps.
Handling of personal data
When the website is used, confidential personal data are collected that may enable personal identification. These include, for example, name, telephone number, address and all data that you provide to us during registration, payment processing, the performance of a contract and when creating your customer account.
SSL encryption
To protect the security of your personal data during transmission, we use SSL encryption (Secure Socket Layer).
Cookies
Cookies are small text files that make it possible to store specific, device-related information on the user's device. On the one hand, they serve the user-friendliness of websites and thus the users (e.g. storing login data). On the other hand, they serve to record statistical data on website usage so that it can be analysed in order to improve the offering. A basic distinction is made between two types of cookies: so-called session cookies, which are deleted as soon as you close your browser, and cookies that remain stored on your device until you delete them. Users can influence the use of cookies. Most browsers have an option that restricts or completely prevents the storage of cookies. However, we would like to point out that our website and services will only function to a limited extent if you block the use of cookies.
Cookies that are necessary to carry out the electronic communication process or to provide certain functions you have requested (e.g. the shopping cart function) are stored on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimised provision of its services.
You can manage many online advertising cookies from companies via the US website aboutads.info/choices or the EU website youronlinechoices.com/uk/your-ad-choices.
Revoke cookie settings
Matomo
We use Matomo (formerly Piwik) for web analysis, a service of InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, NZBN 6106769 (“Matomo”), by means of cookie technology. The protection of your data is important to us, which is why we have additionally configured Matomo so that your IP address is only recorded in shortened form. We therefore process your personal usage data in anonymised form. It is not possible for us to draw conclusions about your person. Further information on Matomo's terms of use and data protection regulations can be found at: https://matomo.org/privacy/
Facebook Pixel
On the basis of our legitimate interests in the analysis, optimisation and economic operation of our online offering, we use the “Facebook Pixel” of the operator Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) on our website.
This allows the behaviour of page visitors to be tracked after they have been redirected to the provider's website by clicking on a Facebook advert. In this way, the effectiveness of Facebook adverts can be evaluated for statistical and market research purposes and future advertising measures can be optimised.
The data collected are anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of users. However, the data are stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with Facebook's data use policy. This enables Facebook to display adverts on Facebook pages as well as outside Facebook. We as the site operator have no influence on this use of the data.
Further information on protecting your privacy can be found in Facebook's privacy policy: https://www.facebook.com/about/privacy/.
You can also deactivate the “Custom Audiences” remarketing function in the ad settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do so, you must be logged in to Facebook.
Alternatively, please click this link to prevent Facebook from collecting data on this website in the future. An opt-out cookie will be stored on your device. If you delete your cookies, you will need to click this link again.
Integration of third-party services and content
Content from third parties, such as videos from YouTube, maps from Google Maps, RSS feeds or graphics from other websites, may be integrated into this offering. This always requires that the providers of this content (hereinafter referred to as “third-party providers”) perceive the IP address of the users, because without the IP address they would not be able to send the content to the respective user's browser. The IP address is therefore required to display this content. We endeavour to use only content whose respective providers use the IP address solely to deliver the content. However, we have no influence on whether third-party providers store the IP address, e.g. for statistical purposes. Insofar as we are aware of this, we inform users accordingly.
Use of JavaScript
On this website we use active JavaScript content from external providers. When you visit our website, these external providers may receive personal information about your visit. Data may be processed outside the EU in this context. You can prevent this by installing a JavaScript blocker such as the browser plug-in “NoScript” (www.noscript.net) or by deactivating JavaScript in your browser. However, we would like to point out that our website and services will only function to a limited extent if you block the use of JavaScript.
Contacting us
When you contact the provider (for example via the contact form or by email), the user's details are stored for the purpose of processing the enquiry and in case follow-up questions arise. These data will not be passed on without your consent.
The data you provide when contacting us are processed on the basis of your consent (Art. 6(1)(a) GDPR). You can revoke your consent at any time. The lawfulness of the data processing carried out up to the time of revocation remains unaffected by the revocation.
The data provided when contacting us remain with us until you request their deletion, revoke your consent to storage or the purpose for storing the data no longer applies. Statutory retention periods remain unaffected.
Google Fonts (local hosting)
For the uniform display of fonts, this site uses so-called Google Fonts provided by Google. The Google Fonts are installed locally. No connection to Google servers is established in the process.
Further information on Google Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=en.
ReGuest
ReGuest is a software application that ensures that all non-binding enquiries and reservations are answered in the best possible way. The provider is Zeppelin Technology GmbH, Kuperionstr. 34, I-39012 Merano, South Tyrol – Italy. To this end, ReGuest supports the hotel's reservations department with a series of (semi-)automated messages. These include emails regarding reminders, deposits, the waiting list, arrival and departure. For this purpose, data from the enquiry and the reservation (salutation, first name, surname, email, telephone, address, date of birth, correspondence) are stored in ReGuest. In order to keep the number of service emails as low as possible, it is recorded whether a message has been read. As soon as a reservation is made, your data are transferred to the hotel software (PMS system) so that the hotel can make all arrangements for your stay. You can revoke your consent to the storage of the data and the email address and their use for answering enquiries and sending service emails at any time free of charge. The revocation can be made by means of an informal email in reply to any email sent from ReGuest.
Further information on how your data are handled by ReGuest can be found at https://www.re-guest.com/de/information/datenschutzerklärung/7-0.html
KunLeiSys
We use the KunLeiSys guest club software of GASTROpoint GmbH, Pommernstraße 17, 83395 Freilassing, Germany, to manage our guest club and for guest loyalty and communication.
For this purpose, personal data such as salutation, first name, surname, email address and stay and booking data may be stored and processed in KunLeiSys. This includes in particular the management of guest profiles, loyalty points and benefits as well as the sending of automated emails in connection with the guest club.
The data are processed on the basis of your consent pursuant to Art. 6(1)(a) GDPR. You can revoke your consent at any time free of charge. You can unsubscribe from the guest club via the corresponding unsubscribe link in the emails.
We have concluded a data processing agreement with GASTROpoint GmbH in accordance with Art. 28 GDPR.
Further information on how your data are handled by KunLeiSys can be found at https://www.kunleisys.com/datenschutz/.
Google reCAPTCHA
We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
The purpose of reCAPTCHA is to check whether data entered on this website (e.g. in a contact form) is entered by a human or by an automated program. To do this, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, length of time the visitor spends on the website or mouse movements made by the user). The data collected during the analysis are forwarded to Google.
The reCAPTCHA analyses run entirely in the background. Website visitors are not informed that an analysis is taking place.
The data are stored and analysed on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated spying and from spam. If consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR; consent can be revoked at any time. For more information about Google reCAPTCHA, please refer to the Google privacy policy and the Google terms of service at the following links: https://policies.google.com/privacy?hl=en and https://policies.google.com/terms?hl=en.
Registration function
The data entered during registration are used exclusively for processing orders. The data collected can be seen in the input form used for registration.
In the event of important changes, for example to the scope of the offering or technically necessary changes, we use the email address provided during registration to inform you. The data entered that are necessary for registration are processed on the basis of your consent (Art. 6(1)(a) GDPR). You can revoke your consent at any time. The lawfulness of the data processing carried out up to the time of revocation remains unaffected by the revocation.
Your registration data remain stored with us until you request their deletion or revoke your consent to storage. Statutory retention periods remain unaffected.
Data transfer when concluding a contract (voucher orders)
We only transfer personal data to third parties if this is necessary in the context of processing the contract, for example to the payment platform commissioned with processing payments, to the service provider handling postal dispatch and to the service provider commissioned with voucher processing.
The data will not be transferred any further, or only if you have expressly consented to the transfer. Your data will not be passed on to third parties without your express consent, for example for advertising purposes. The legal basis for the data processing is Art. 6(1)(b) GDPR, which permits the processing of data for the performance of a contract or of pre-contractual measures.
Transfer of data to shipping companies
In order to fulfil the contract, when the voucher is sent by post we pass on your data (salutation, name, company, billing address, delivery address, photo and dedication) to the shipping company commissioned with production and delivery:
Voucher dispatch by post
A&M Service GmbH
Hinter dem Entenpfuhl 13/15
65604 Elz
Germany
Transfer of data to payment service providers
Your data are transferred exclusively via secure SSL encryption to the payment service provider you selected during the ordering process for the purpose of processing the payment.
Your data are transferred to the payment service providers on the basis of Art. 6(1)(a) GDPR (consent) and Art. 6(1)(b) GDPR (processing for the performance of a contract). You can revoke your consent to the data processing at any time. A revocation does not affect the validity of data processing operations carried out in the past.
Payment by Visa, Mastercard and American Express
If you pay by credit card, the payment is processed via the payment service provider “Stripe”. The data required for this (card number, expiry date and security code) are forwarded in encrypted form to the payment service provider and cannot be viewed by the website operator. Stripe Payments Europe Ltd is certified according to the Payment Card Industry Data Security Standard (PCI DSS) and is subject to the Safe Harbour Agreement. The payment service provider may transfer, process and store personal data required to process the payment outside the EU. Stripe alone is responsible for the processing of these data.
Stripe Payments Europe Ltd
Block 4, Harcourt Centre
Harcourt Road
Dublin 2
Ireland
Details on payment with Stripe can be found in the payment service provider's terms and conditions and privacy policy at: https://stripe.com/gb/legal
Payment by PayPal and PayPal Express
If you pay using PayPal or PayPal Express, the bank details you have stored with PayPal are used by PayPal for the payment. The website operator has no access to these data. PayPal (Europe) S.à r.l. et Cie, S.C.A. is subject to the Safe Harbour Agreement. The payment service provider may transfer, process and store personal data required to process the payment outside the EU. PayPal alone is responsible for the processing of these data.
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22-24 Boulevard Royal
L-2449 Luxembourg
Luxembourg
Details on payment with PayPal can be found in the payment service provider's terms and conditions and privacy policy at: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full
Newsletter data
If you would like to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter. No further data are collected, or only on a voluntary basis. We use these data exclusively for sending the requested information and do not pass them on to third parties.
The data entered in the newsletter registration form are processed exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You can revoke your consent to the storage of the data and the email address and their use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter. The lawfulness of the data processing operations already carried out remains unaffected by the revocation.
The data you have stored with us for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe or once the purpose no longer applies. We reserve the right to delete or block email addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest pursuant to Art. 6(1)(f) GDPR.
Data stored by us for other purposes remain unaffected by this. After you have been removed from the newsletter distribution list, your email address may be stored by us or the newsletter service provider in a blacklist if this is necessary to prevent future mailings. The data from the blacklist are used only for this purpose and are not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). Storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.
Revocation, changes, deletion and right of access
Within the framework of the applicable statutory provisions, the user has the right to obtain information free of charge, upon request, about the personal data stored, their origin and recipients and the purpose of the data processing. In addition, the user has the right to have incorrect data corrected and to have his or her personal data blocked and deleted, unless this is precluded by a statutory obligation to retain data.