Privacy Policy
This privacy policy applies to the online services of Hotel Goldener Karpfen OHG and to the collection of personal data via this website. For websites of other providers linked on this site, their own privacy notices and policies apply.
Name and Contact Details of the Controller
The controller responsible for the processing of personal data on these websites is:
Maria and Renate Tünsmeier
Simpliziusbrunnen 1
36037 Fulda, Germany
Phone: +49 (661) 86800
Fax: +49 (661) 868100
Email: info@hotel-goldener-karpfen.de
Contact Details of the Data Protection Officer
Our Data Protection Officer, Gernot Hillenbrand, can be reached as follows:
Phone: +49 (661) 9766-0
Fax: +49 (661) 9766-34
Email: ra-hillenbrand@kanzlei-karras.de
I. Web Hosting
Our website is hosted by 1&1 Internet AG, Brauerstraße 48, 76135 Karlsruhe, which provides technical services on our behalf and according to our instructions.
II. Processing of Personal Data: Type, Purpose, and Legal Basis
When visiting the website
When you access our website, the browser used on your device automatically sends information to our server. This information is temporarily stored in a log file. The following data is collected without your input and stored until automated deletion:
- IP address of the requesting device
- Date and time of access
- Name and URL of the requested file
- Referring website (referrer URL)
- Browser used and, if applicable, your device’s operating system and your internet service provider
These data are processed for the following purposes:
- Ensuring a smooth connection
- Ensuring a comfortable user experience
- System security and stability analysis
- Other administrative purposes
The legal basis for processing is Art. 6(1)(f) GDPR. Our legitimate interest follows from the purposes listed above. We do not use these data to identify individuals.
When contacting us via email
If you contact us via email, we store the personal data you provide as long as necessary to process your request, carry out pre-contractual measures, or fulfill an existing contract.
Legal basis: Art. 6(1)(a) GDPR and, if the contact relates to the initiation of a contract, also Art. 6(1)(b) GDPR.
III. Disclosure of Personal Data
Your personal data will not be shared with third parties for purposes other than those listed below.
We only disclose your data if:
- You have given your express consent under Art. 6(1)(a) GDPR
- Disclosure is necessary under Art. 6(1)(f) GDPR to assert, exercise, or defend legal claims and there is no reason to assume an overriding interest in not disclosing your data
- A legal obligation exists under Art. 6(1)(c) GDPR
- It is legally permitted and necessary for fulfilling a contract under Art. 6(1)(b) GDPR
IV. Cookies
We use cookies on our website. Cookies are small files automatically created by your browser and stored on your device when you visit our site.
Cookies store information related to the specific device used. This does not mean we gain knowledge of your identity.
Types of cookies used:
- Session cookies: Recognize that you have visited certain pages. Deleted automatically after leaving the site.
- Temporary cookies: Improve usability by remembering settings and inputs across sessions. Deleted after a set period.
- Analytics cookies: Used for statistical purposes and service optimization. Recognize return visits. Automatically deleted after a defined time.
Legal basis: Art. 6(1)(f) GDPR – necessary for the stated purposes.
Most browsers accept cookies automatically, but you can adjust settings to block cookies or to display a warning before storing them. Disabling cookies may impair website functionality.
V. Your Rights
Right to Access (Art. 15 GDPR)
You may request access to your personal data and details about processing purposes, categories, recipients, storage duration, and any profiling involved.
Right to Rectification (Art. 16 GDPR)
You may request immediate correction or completion of inaccurate data.
Right to Erasure (Art. 17 GDPR)
You may request the deletion of your personal data unless required for legal obligations, public interest, or legal claims.
Right to Restriction of Processing (Art. 18 GDPR)
You may request restriction if the data is inaccurate, processing is unlawful, data is no longer needed, or you have objected to processing.
Right to Data Portability (Art. 20 GDPR)
You may request your data in a structured, commonly used, machine-readable format or transfer it to another controller.
Right to Withdraw Consent (Art. 7(3) GDPR)
You may withdraw consent at any time, and we will cease the processing based on that consent.
Right to Lodge a Complaint (Art. 77 GDPR)
You may contact the supervisory authority of your residence, workplace, or our registered office. Our competent authority is the Data Protection Commissioner of Hesse.
Right to Object (Art. 21 GDPR)
You may object to processing based on legitimate interest if reasons arise from your particular situation or if your data is used for direct marketing (in the latter case, no justification is required).
To exercise any of these rights, simply send an email to us.
VI. Data Security
We use SSL (Secure Socket Layer) encryption with the highest level supported by your browser (typically 256-bit; otherwise 128-bit v3). You can recognize secure pages by the closed padlock symbol in your browser.
We also use technical and organizational measures to protect data against manipulation, loss, destruction, or unauthorized access. These measures are continuously improved in line with technological developments.
Use of DIRS21 Online Booking Tool
Our website uses the DIRS21 online booking tool (OBT) provided by TourOnline AG, Borsigstraße 26, 73249 Wernau, Germany (www.dirs21.de) to enable online bookings and inquiry management.
TourOnline AG is the controller for any data processed via the OBT. You can find their privacy policy within the OBT or at www.dirs21.de/datenschutz.
VII. Other
Validity of this Privacy Policy
This privacy policy is currently valid as of May 2018.
Amendments
We may need to update this policy as we further develop our website or due to legal or regulatory changes.