Privacy Notice
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.
When you use this website, various personal data is collected. Personal data is data with which you can be personally identified, e.g. your name and address, but also, for example, your Internet address (IP address) with which you are currently “surfing” the web. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
Data controller
The data controller on this website and all websites integrated therein is:
Seehuus GmbH & Co. KG
Strandstraße 69
23669 Timmendorfer Strand/Niendorf
Phone: 04503 801260
Fax: 04503 801261
E-mail: info@seehuus-hotel.de
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
DATA PROTECTION QUESTIONS
If you have any questions about data protection with regard to our company or our websites, we will be happy to answer your questions at any time.
You can address your concerns to our data protection officer using the following contact details:
Seehuus GmbH & Co. KG
Data protection
Strandstraße 69
23669 Timmendorfer Strand/Niendorf
E-Mail: datenschutz@seehuus-hotel.de
YOUR RIGHTS
You have the following rights with regard to personal data concerning you:
Right to information (Art. 15 GDPR)
You have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of the data processing, including a copy of the personal data that is the subject of the processing.
Right of rectification (Art. 16 GDPR)
You have the right to have incorrect personal data concerning you corrected or incomplete personal data completed at any time.
Right to erasure (Art. 17 GDPR)
We delete your personal data immediately
– if you revoke your consent to lawful processing and there are no other legal grounds for storage.
– if you object to the processing. As long as the objection is upheld and the matter is not resolved, a blocking of their data will occur. You can withdraw your objection by giving your written consent.
– if they are no longer needed for the purposes for which they were collected or otherwise processed.
– if the processing is inadmissible for other legal reasons.
Right to restrict processing (Art. 18 GDPR)
You have the right to restrict the processing of your personal data if
– you dispute the accuracy of your personal data for a period of time that allows us to verify the accuracy.
– the processing is unlawful, but you refuse to have your personal data erased and instead of erasure you request restriction of use.
– we no longer need your personal data for the purposes but require it for the assertion, exercise or defence of legal claims.
– you have objected to the processing but it is not yet clear whether our legitimate grounds override your grounds.
You can remove the restriction by giving your written consent.
RIGHT TO DATA TRANSFERABILITY (Art. 20 GDPR)
You have the right to receive your personal data that you have provided to us or to transfer it to another controller if the conditions of Art. 20 (1) lit. a, b GDPR apply.
RIGHT TO OBJECTION (Art. 21 GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Article 6 (1) lit. or (f) GDPR; this also applies to profiling based on these provisions.
The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
You have the possibility, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object by means of automated procedures using technical specifications.
Right to withdraw your consent (Art. 7 Abs. 3 GDPR)
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until revocation.
Automated decision in individual cases including profiling (Art. 22 GDPR)
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
This shall not apply if the decision
1. is necessary for the conclusion or performance of a contract between you and the responsible person,
2. is authorised by Union or Member State legislation to which the controller is subject and that legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests or
3. is made with your express consent.
However, these decisions must not be based on special categories of personal data pursuant to Article 9 (2)(a) or (g) GDPR and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.
With regard to the cases referred to in (1) and (3), the controller shall take reasonable steps to safeguard the rights and freedoms of, and your legitimate interests, including at least the right to obtain the intervention of a person on the part of the controller, to express his or her point of view and to contest the decision.
Right to complain to a supervisory authority (Art. 77 GDPR)
You can contact the supervisory authority responsible for you at any time with a complaint about the processing of your personal data carried out by us. A list of the supervisory authorities (for the non-public sector) with address can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
If you wish to exercise one or more of your rights against us, please let us know. To do so, use the contact details listed in the section “Data controller” or in the section “Data protection questions”.
ENCRYPTION
This website uses TLS encryption for security reasons and to protect the transmission of confidential content, such as enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If TLS encryption is activated, the data you transmit to us cannot be read by third parties.
ERVER-LOG-FILES
Our web space provider automatically collects and stores information in so-called server log files. We collect and store the following data automatically transmitted to us by your browser:
– Browser type and version
– Operating system used
– Referrer URL (website through which you came to us)
– Host name of the accessing computer (IP address)
– Time of the server request
The temporary processing of the IP address by the system is necessary to technically enable delivery of the website to your computer. Processing of your IP address for the duration of the session is necessary for this. The legal basis is Art. 6 para. 1 Sentence 1 lit. f GDPR.
This data is not merged with other data sources. The storage is limited in time and only takes place for optimisation and to ensure the security of our IT systems.
Cloudflare
We use the Content Delivery Network (CDN) of Cloudflare Germany GmbH, Rosental 7, c/o Mindspace, 80331 Munich Germany (Cloudflare) to increase the security and delivery speed of our website. This corresponds to our legitimate interest (Art. 6 (1) f) GDPR). A CDN is a network of [globally] distributed servers that is able to deliver optimized content to the website user. For this purpose, personal data may be processed in server log files by Cloudflare.
Cloudflare is the recipient of your personal data and acts as a processor for us. This corresponds to our legitimate interest within the meaning of Art. 6 (1) f) GDPR not to operate a content delivery network ourselves.
You have the right to object to the processing. Whether the objection is successful is to be determined within the framework of a balancing of interests.
The processing of the data provided under this section is not required by law or contract. The functionality of the website is not guaranteed without the processing.
Your personal data will be stored by Cloudflare for as long as necessary for the purposes described.
You can find more information about objection and removal options towards Cloudflare at: Cloudflare DPA.
The company Cloudflare is certified under the EU-US Data Privacy Framework. Thus the adequacy decision according to Art. 45 GDPR applies, so that a transfer of personal data may also take place without further guarantees or additional measures.
LINKS TO OTHER WEBSITES
Our website may contain links to the websites of other providers. We cannot influence their compliance with data protection regulations, which is why our data protection declaration does not extend to them.
EXISTENCE OF AUTOMATED DECISION-MAKING
As a responsible company, we do not use automated decision-making or profiling.
JOB APPLICATION
The controller collects and processes the personal data of applicants for the purpose of handling the application procedure. The processing may also be carried out electronically. This is particularly the case if an applicant sends the relevant application documents to the controller electronically, for example by e-mail or via a contact form on the website.
For the contact form we use the online application of the company Jotform Ltd. (Jotform), 4 Embarcadero Center, Suite 780, San Francisco CA 94111. The data is transferred to Jotform in the USA for processing. Jotform only processes your personal data on behalf of and on the instructions of the data controller.
Jotform has submitted to the EU-U.S. Privacy Shield. You can find more information at the following link: https://www.privacyshield.gov/welcome. To protect your data in the USA, we have concluded an order processing agreement with Jotform based on the European Commission’s standard contractual clauses to enable the transfer of your personal data to Jotform.
If the data controller concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the controller does not conclude an employment contract with the applicant, the application files shall be deleted six months after the notification of the rejection decision, unless otherwise justified by the legitimate interests of the controller. If the controller does not conclude an employment contract with the applicant, the application files shall be deleted six months after the notification of the rejection decision, unless otherwise justified by the legitimate interests of the controller.
The legal basis for the processing is Art. 6 (1) lit. a GDPR.
Applicant data is processed to fulfil our (pre-)contractual obligations within the scope of the application procedure within the meaning of Art. 6 (1) lit. b GDPR, Art. 6 (1) lit. f GDPR (1) lit. data processing becomes necessary for us, e.g. within the scope of legal procedures (in Germany, Section 26 BDSG also applies).
Your personal data will not be transferred to third parties unless we are legally obliged to do so, or the transfer of data is necessary for the implementation of the contractual relationship, or you have previously expressly consented to the transfer of your data.
COOKIES
Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.
Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent cookies from being stored and the data they contain from being transmitted. Cookies that have already been saved can be deleted at any time. However, we would like to point out that you may then not be able to use all the functions of this website to their full extent.
You can find out how to manage (including disabling) cookies in the main browsers by following the links below:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Technically necessary cookies
Unless otherwise stated in the privacy policy below, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognise your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change.
The use of cookies or comparable technologies is based on Section 25 (2) TTDSG (Germany). The processing of your personal data is based on Art. 6 (1) lit. f GDPR from our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our offer. You have the right to object to the processing of your personal data at any time on grounds relating to your particular situation.
Cookie Consent Manager (CCM19)
We use CCM19 to obtain your consent to the storage of certain cookies on your terminal device or to the use of certain technologies and to document this in accordance with data protection law. The provider of this technology is Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn (hereinafter “CCM19”).
When you enter our website, a connection is established to the servers of CCM19 in order to obtain your consent and other declarations regarding cookie use.
The following data is transmitted to the provider:
- your IP address (from which your country is also determined)
- the browser used
- the language used
- the web page called up
Subsequently, CCM19 stores a cookie in the local storage in your browser, in order to be able to assign the given consents or their revocation to you. This cookie “CCM_CONSENT” is stored for one year.
The data collected in this way will be stored until you request us to delete it, delete the CCM19 cookie yourself, or until the purpose for storing the data no longer applies. Mandatory legal storage obligations remain unaffected. You can make changes to consent you have already given and revoke your consent by clicking on the icon at the bottom left of your browser.
We have concluded an order processing agreement (AVV) with the above-mentioned provider. This is a contract required by data protection law, which ensures that this provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
We are legally obligated to obtain the prescribed consents for the use of cookies and cookie-based applications that require consent. In order to comply with this obligation, we use CCM19. This is also our legitimate interest according to Art. 6 (1) 1f) GDPR.
GOOGLE ANALYTICS
We use the web analytics service Google Analytics from Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) for the purpose of increasing the user-friendliness and optimising our website.
Google Analytics uses so-called “cookies”, which are stored on your computer and which enable an analysis of your use of the website.
The information generated about your use of this website is transmitted to a Google server in the USA and processed there.
In the event that IP anonymisation is activated on this website, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing us with other services relating to website activity and internet usage.
The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. This website uses Google Analytics with the extension “_anonymizeIp()”. This means that IP addresses are processed in abbreviated form, which means that they cannot be linked to a specific person. Insofar as the data collected about you has a personal reference, this is therefore immediately excluded and the personal data is thus immediately deleted.
The company Google Inc. is certified under the EU-US Data Privacy Framework. Thus the adequacy decision according to Art. 45 GDPR applies, so that a transfer of personal data may also take place without further guarantees or additional measures.
You have the right to object. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
You can find more information from the third-party provider Google at:
https://www.google.com/analytics/terms/de.html
https://support.google.com/analytics/answer/6004245?hl=de
https://policies.google.com/privacy?hl=de&gl=de
The legal basis for the processing is Art. 6 1 Sentence 1 lit. a GDPR.
GOOGLE FONTS
External fonts, Google Fonts, are used on this website. Google Fonts is a service of Google Inc. („Google“). The integration of these web fonts takes place via a server call, usually a Google server in the USA. This transmits to the server that you have visited our website. The IP address of the end device of the visitor to this website is also stored by Google.
You can find more information in Google’s privacy policy, which you can access here:
https://fonts.google.com/about#
https://policies.google.com/privacy?hl=en
The legal basis for the processing is Art. 6 1 Sentence 1 lit. a GDPR.
PRIVACY POLICY ON THE USE AND APPLICATION OF YOUTUBE
The controller has integrated YouTube components on this website. YouTube is an Internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment on them, also free of charge. YouTube allows the publication of all kinds of videos, which is why complete film and television programmes, but also music videos, trailers or videos made by users themselves can be accessed via the Internet portal. The operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. Each time a data subject accesses one of the individual pages of this website operated by the data controller on which a YouTube component (YouTube video) has been integrated, the internet browser on the data subject’s information technology system is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information on YouTube can be found at https://www.youtube.com/yt/about/de/. Within the scope of this technical procedure, YouTube and Google receive information about which specific sub-page of our website is visited by the data subject. If the data subject is logged into YouTube at the same time, YouTube recognises which specific sub-page of our website the data subject is visiting when a sub-page containing a YouTube video is called up. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject. YouTube and Google always receive information via the YouTube component that the data subject has visited our website if the data subject is logged into YouTube at the same time as calling up our website; this takes place regardless of whether the data subject clicks on a YouTube video or not. If the data subject does not want this information to be transmitted to YouTube and Google, he or she can prevent the transmission by logging out of his or her YouTube account before accessing our website. The data protection provisions published by YouTube, which can be accessed at https://www.google.de/intl/de/policies/privacy/, provide information on the collection, processing and use of personal data by YouTube and Google.
PRIVACY POLICY ON THE USE AND APPLICATION OF INSTAGRAM
The controller has integrated components of the Instagram service on this website. Instagram is a service that qualifies as an audiovisual platform and allows users to share photos and videos and also to redistribute such data on other social networks. The operating company of the Instagram services is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA. Each time one of the individual pages of this website operated by the data controller is called up and on which an Instagram component (Insta button) has been integrated, the internet browser on the information technology system of the data subject is automatically caused by the respective Instagram component to download a representation of the corresponding component from Instagram. As part of this technical procedure, Instagram receives information about which specific sub-page of our website is visited by the data subject. If the data subject is logged in to Instagram at the same time, Instagram recognises which specific sub-page the data subject is visiting each time the data subject calls up our website and for the entire duration of the respective stay on our website. This information is collected by the Instagram component and assigned by Instagram to the respective Instagram account of the person concerned. If the data subject activates one of the Instagram buttons integrated on our website, the data and information thus transmitted will be assigned to the personal Instagram user account of the data subject and stored and processed by Instagram. Instagram always receives information via the Instagram component that the data subject has visited our website if the data subject is simultaneously logged into Instagram at the time of calling up our website; this takes place regardless of whether the data subject clicks on the Instagram component or not. If the data subject does not want this information to be transmitted to Instagram, he or she can prevent the transmission by logging out of his or her Instagram account before accessing our website. Further information and Instagram’s applicable privacy policy can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.
VIMEO (VIDEOS)
Plugins of the video portal Vimeo of Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA are integrated on our website. When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the Vimeo servers. The content of the plugin is transmitted by Vimeo directly to your browser and integrated into the page. Through this integration, Vimeo receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Vimeo account or are not currently logged in to Vimeo. This information (including your IP address) is transmitted by your browser directly to a Vimeo server in the USA and stored there.
If you are logged in to Vimeo, Vimeo can directly assign your visit to our website to your Vimeo account. If you interact with the plugins (such as pressing the start button of a video), this information is also transmitted directly to a Vimeo server and stored there.
If you do not want Vimeo to assign the data collected via our website directly to your Vimeo account, you must log out of Vimeo before visiting our website.
For videos from Vimeo that are embedded on our site, the tracking tool Google Analytics is automatically integrated. This is Vimeo’s own tracking, to which we have no access and which cannot be influenced by our site. Google Analytics uses so-called “cookies” for tracking, which are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
These processing operations are carried out exclusively upon the granting of explicit consent in accordance with Art. 6 para. (1) lit. a GDPR.
You can view Vimeo’s privacy policy at: https://vimeo.com/privacy.
WPML
We use WPML provided by OnTheGoSystems Limited, 22/F 3 Lockhart Road, Wanchai, Hong Kong (hereinafter referred to as: WPML). WPML is a multi-language plugin for WordPress. We use WPML to display our website in different languages. When you visit our website, WPML stores a cookie on your terminal device to save the language setting you have selected.
Personal data can be stored and evaluated, especially the activity of the user (in particular which pages have been visited and which elements have been clicked on) as well as device and browser information (in particular the IP address and the operating system). Further information on the collection and storage of data by WPML can be found here: Privacy Policy and GDPR Compliance – WPML.
The legal basis for data processing is Art. 6 (1) f) GDPR. Our legitimate interest lies in addressing visitors to our website in their native language. WPML stores cookies on your terminal device. Information on the storage duration of the cookies can be found at: Privacy Policy and GDPR Compliance – WPML.
CHANGES TO THE PRIVACY NOTICE
We reserve the right to update the privacy notice from time to time with effect for the future, in particular in the event of further development of the website, the use of new technologies or changes to the legal basis or the relevant case law.
August 2023