Privacy

We, HBB Hotelbetriebsgesellschaft Battenberg GmbH, take the protection of your personal data very seriously and adhere strictly to the rules of data protection laws. They include, in particular, the General Data Protection Regulation (‘GDPR’, Regulation (EU) 2016/679 of the European Parliament and of the Council.

We only collect, process and use personal data of the users of our website if we have obtained legal permission to do so or if they have given us their consent. Under no circumstances will the data collected be sold. The legal basis for the processing of your data is based on your consent in accordance with Art. 6 (1) a GDPR in order to provide you with information or products requested in accordance with Article 6 (1) b of the GDPR or in our legitimate interests in accordance with Article 6 (1) f of the GDPR. Article 6 (1) f GDPR permits the processing of personal data within the framework of the “legitimate interest” of the controller, unless your fundamental rights, freedoms or interests prevail. You can object to this data processing at any time if there are reasons that exist in your particular situation and that speak against the processing of data. All you need to do is send an e-mail to the Data Protection Officer.

The following statement gives you an overview of how we ensure the protection of your personal data and what kind of personal data we collect and for what purpose. It is valid for all websites for which we are responsible. Our websites may contain links to websites of other providers, which are not covered by this data protection statement.

What are personal data?

The concept of personal data is defined in the General Data Protection Regulation (GDPR). Personal data are individual details of the personal or material circumstances of a specific or identifiable natural person or other data related to this person. Examples are your name, your address, your telephone number or your e-mail address.

1. The use of personal data

(1) We will collect personal data if you provide us with them as part of your online booking, reservation inquiries, requests for further offers or your contact request. If the data processing is required for the performance of the contract with you, the legal basis is article 6 (1) b GDPR.

(2) Within the framework of your online booking, we require the following personal data from you: first and last name, address, e-mail address, telephone number and credit card details for verification purposes. Further details are voluntary; with your consent, we process these data in accordance with Article 6 (1) a GDPR. Your data will be deleted two years after completion of the booking and after expiry of the statutory retention periods, unless your consent is given to us for further use or we are required by law to store the data.

(3) Within the framework of your reservations for our restaurants, conferences, events or our SPA offers, we require the following personal data from you: first and last name, address, e-mail address, telephone number. If the data processing is required for the performance of the contract with you, the legal basis is Article 6 (1) b GDPR. Further details are voluntary; with your consent, we process these data in accordance with Article 6 (1) a GDPR. Two years after completion of the booking and after expiry of the statutory retention periods, your data will be deleted, unless your consent is given to us for further use or we are required by law to store the data.

(4) Within the framework of your request for vouchers or our hotel brochure, we require the following personal data from you: first and last name and your address. If the data processing is required for the performance of the contract with you, the legal basis is Article 6 (1) b GDPR. Further details are voluntary; with your consent, we process these data in accordance with Article 6 (1) a GDPR. Your data will be deleted two years after completion of the booking and after expiry of the statutory retention period, unless your consent is given to us for further use or we are required by law to store the data.

(5) Within the framework of your contact request, we need your first and last name as well as your e-mail address and, should you wish to receive information material, your postal address, too. If the data processing is required for the performance of the contract with you, the legal basis is Article 6 (1) b GDPR. Further details are voluntary; with your consent, we process these data in accordance with Article 6 (1) a GDPR. For example, you can tell us your phone number so that we can contact you. Your data will be deleted two years after completion of the booking and after expiry of the statutory retention periods.

(6) If you send us your application via e-mail, we collect, process and use your data exclusively for the purpose of the application and will delete your data after a reasonable period of time (no later than six months after receipt). If you explicitly allow us to use your application for future job offers, the data will not be deleted but will continue to be used with your consent in accordance with Art. 6 (1) a GDPR.

(7) We have set up a customer login in which we save your existing data, e.g. your bookings. If the data processing is required for the performance of the contract with you, the legal basis is Article 6 (1) b GDPR. In addition, you will receive offers exclusively designed for you. This will happen, of course, only with your prior consent; the legal basis is your consent in accordance with Article 6 (1) a GDPR.

2. Newsletter

(1) If you order our e-mail newsletter, your e-mail address will be used for our promotional purposes until you unsubscribe from the newsletter. The legal basis for this is your consent, Art. 6 (1) a GDPR. Your subscription to the newsletter and your consent to the storage and use of your e-mail address can be revoked at any time. In the event that you wish to revoke your consent, please send your revocation to datenschutz@sonne-frankenberg.de.

(2) Online subscription to the newsletter is done by a double opt-in. To subscribe, enter your e-mail address to which the newsletter should be sent. After sending off the subscription form via e-mail, you will receive a confirmation e-mail. This e-mail will contain a confirmation link in addition to the complete copy of the declaration of consent. Only when you click on this link will the registration process be completed. Your subscription for the newsletter will be logged in order to prove that the subscription process was carried out in accordance with the legal requirements. This includes the storage of the login and the confirmation time, as well as the IP address. The legal basis for this is Article 6 (1) f GDPR. Our legal interest lies in being able to prove the existence of consent. You can object to this data processing at any time if there are reasons that exist in your particular situation and that speak against the processing of data. All you need to do is send an e-mail todatenschutz@sonne-frankenberg.de.

(3) You can revoke your consent to the storage of your e-mail address and its use for the dispatch of the newsletter at any time. You can do this by using the unsubscribe link within the newsletter e-mail or by clicking on the unsubscribe function on the website.

3. Data transfers to third parties

(1) Any transfer of your data to third parties will not take place, unless we are legally obliged to do so or it is necessary in order to fulfil our contractual obligations or perform your chosen services.

(2) You can use our website to make room reservation inquiries for our hotel. For this purpose, we use the service of Saber GLBL, the program SynXis (https://www.sabrehospitality.com/solutions/hotel-central-reservation-systems). Your data will be collected, processed and used in our Property Management System Ophelia Suite 8 for reservations and guest administration. Your details will be used by us before your stay for a pre-stay e-mail. The legal basis for this is Article 6 (1) b GDPR. After your stay, the data will be used to invite you to you rate your stay online if you have agreed to do that on departure. The legal basis for this is your consent in accordance with Article 6 (1) a GDPR.

(3) You can use the inquiry form “Table reservation” on our website to make inquiries for our restaurants. You have two options. On the one hand, you can make a reservation request by sending an e-mail to our table reservation department. Your data will be used in our Property Management System Ophelia Suite 8 for reservations and guest management. If the data processing is required for the performance of the contract with you, the legal basis is Article 6 (1) b GDPR.

(4) On the other hand, you can make the reservation request for a table reservation through the portal of our service provider Book A Table. Your data will then be forwarded to Book A Table. Book A Table also uses your data for its own purposes. For further information, please refer directly to the data protection statement and terms of use of Use of Book A Table GmbH & Co. KG at https://www.bookatable.com/de/datenschutz. The legal basis for this is your consent in accordance with Art. 6 (1) a GDPR.

(05) You can use our website to order vouchers online and have them e-mailed to you as a PDF file so you can then print them off or have them posted to you. This is done via the portal of our service provider Idea Creation GmbH (“E-GUMA”). Your data will then be forwarded to Idea Creation. Idea Creation also uses your data for its own purposes. For more information, please refer directly to the data protection statement and terms of use of Idea Creation GmbH at https://www.e-guma.ch/datenschutz. The legal basis for this is your consent in accordance with Art. 6 (1) a GDPR.

4. E-mail communication

If you wish to contact us by e-mail, you are welcome to do so using the addresses provided. Please note, however, that unencrypted e-mails sent via the Internet are not adequately protected against unauthorised third-party access during their transmission.

5. Access data/log files

HBB Hotelbetriebsgesellschaft Battenberg GmbH automatically collects and stores information in so-called server log files, which your browser automatically transmits to us.

They are:

• browser type/version
• the operating system used
• referrer URL (the page previously visited)
• the host name of the accessing computer (IP address)
• time of server request.

This data will likewise not be merged with other data sources.

The personal data of the server log files are processed on the basis of on Art. 6 (1) f GDPR. This statutory permission allows the processing of personal data in the context of the “legitimate interest” of the controller, unless your fundamental rights, freedoms or interests prevail. Our legitimate interest lies in facilitating administration and the chance to detect and pursue cases of hacking. You can object to this data processing at any time if there are reasons that exist in your particular situation that speak against the processing of data. All you need to do is send an e-mail to the Data Protection Officer. Our legitimate interest follows from the data collection purposes listed above. In no event do we use the data collected for the purpose of drawing conclusions about you.

The server log files with the above-mentioned data are automatically deleted after 30 days or, if used for statistical purposes, anonymised. We reserve the right to store the server log files for longer if there are facts that suggest the assumption of unauthorised access (such as the attempt of a case of hacking or a so-called DDoS attack).

6. Cookies

(1) Our website uses cookies. They serve to make our offer more user-friendly, effective and secure. Cookies are text files that are stored on your hard drive so that they can identify you when you visit the website repeatedly. The cookie, therefore, processes information about your user behaviour. You may refuse the installation of cookies by selecting the appropriate settings on your browser.

(2) In this case, however, you may not be able to use the full functionality of this website. By using the website without previously refusing cookies by changing your browser settings, you agree to the use of cookies and the information obtained being used for the purpose described. The legal basis for this is your consent in accordance with Article 6 (1) a GDPR. Your consent can be revoked at any time by changing your browser settings; if you change the browser settings, cookies will no longer be placed on your device.