Privacy Policy
The responsible body within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is: Sarah Dehren-Mencütek
Your Rights as a Data Subject
Using the contact details provided for our data protection coordinator, you can exercise the following rights at any time:
-
Access to your data stored by us and its processing (Art. 15 GDPR).
-
Rectification of incorrect personal data (Art. 16 GDPR).
-
Erasure of your data stored by us (Art. 17 GDPR).
-
Restriction of processing, if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR).
-
Objection to the processing of your data by us (Art. 21 GDPR).
-
Data portability, provided you have consented to the data processing or have entered into a contract with us (Art. 20 GDPR).
If you have given us your consent, you can withdraw it at any time with effect for the future. You may also lodge a complaint with a supervisory authority at any time, such as the competent authority in your state of residence.
Collection of General Information when Visiting our Website
Nature and purpose of processing: When you access our website (without registering or submitting information), information of a general nature is automatically collected via server log files. This includes your web browser type, operating system, the domain name of your internet service provider, your IP address, and similar data. This is processed for:
-
Ensuring a smooth connection and use of the website.
-
Evaluating system security and stability.
-
Administrative purposes.
Legal basis: Processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in improving website stability and functionality.
Recipients: Technical service providers acting as processors for the operation and maintenance of our website.
Consent Tool: Real Cookie Banner
To manage used cookies and similar technologies (tracking pixels, web beacons, etc.) and related consents, we use the “Real Cookie Banner” tool. Details can be found at devowl.io/rcb/data-processing/. The legal basis is Art. 6 (1) (c) and (f) GDPR.
Contact Form
Nature and purpose of processing: Data entered (name, email) is stored for individual communication and to process your inquiry. Legal basis: Processing is based on a legitimate interest (Art. 6 (1) (f) GDPR) or for pre-contractual measures (Art. 6 (1) (b) GDPR) if you are requesting a quote.
Online Dispute Resolution
The European Commission provides a platform for online dispute resolution (OS): https://ec.europa.eu/consumers/odr. We are not obliged to participate in dispute resolution proceedings before a consumer arbitration board.
Right of Withdrawal (Cancellation)
According to § 312g (2) No. 9 BGB, there is no right of withdrawal for contracts relating to the provision of services in connection with accommodation activities for purposes other than residential use, if the contract provides for a specific date or period.
Google Web Fonts
To display content attractively across browsers, we use Google Web Fonts. Legal basis: Your consent (Art. 6 (1) (a) GDPR). Third-country transfer: Google processes data in the USA based on the EU-US Data Privacy Framework. You can find Google’s privacy policy here: google.com/policies/privacy/.
Social Plugins
We use “Shariff” social media buttons to protect your data. These are integrated as static graphics; data is only sent to providers (Facebook, Twitter, etc.) if you actively click the button.
SSL Encryption
To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g., SSL) via HTTPS.
Processors
The following organization has been commissioned to process data: Alfahosting GmbH, Ankerstraße 3b, 06108 Halle (Saale).
Questions for the Data Protection Coordinator
If you have any questions, please email us directly: post@chateau-esprit.de