Data Protection

Privacy Policy

1 Information about the collection of personal data

(1) In the following, we provide you with information about the collection of personal data when using our website. Personal data is all data that relates to you personally, e.g. name, address, email addresses, user behaviour.

(2) The Controller in accordance with Art. 4 para. 7 of the EU General Data Protection Regulation (GDPR) is 

The Fontenay Hotelgesellschaft mbH

Fontenay 10

20354 Hamburg

Managing directors: Karl Gernandt, Thies Sponholz

Telephone: +49 (0) 40 605 6 605 0

Fax: +49 (0) 40 605 6 605 888

Email: info@thefontenay.de 

(see our legal notice). You can contact our data protection officer at Datenschutz@thefontenay.de or by using our postal address and addressing your letter to ‘der Datenschutzbeauftragte’ (the data protection officer).

(3) When you contact us by email or using our contact form, the data you include (your email address, name and telephone number) will be stored by us to answer your questions. We delete the data connected to this once storage is no longer necessary, or we limit the processing if a legal obligation exists to retain it.

(4) If we make use of contracted service providers for individual functions related to our offers or if we use your data for advertising purposes, we will inform you in detail of the respective process below. For this, we also list the determined criteria for the retention period.

2 Your rights

(1) You have the following rights in relation to your personal data:

–  right to information,

–  right to rectification or erasure,

–  right to restriction of processing,

–  right to object to processing,

–  right to data portability.

(2) Additionally, you have the right to lodge a complaint with a supervisory authority about the processing of your personal data by us.

3 Collection of personal data when visiting our website

(1) If you just visit our website for informational purposes, i.e. you do not register or transmit any other information to us, we only collect personal data that is transmitted to our server by your browser. If you wish to view our website, we collect the following data, which is technically necessary for us to display the website to you and to ensure stability and security (legal basis is Art. 6 para. 1 clause 1 f GDPR):

–  IP address

–  date and time of enquiry

–  time zone difference to Greenwich Mean Time (GMT)

–  content of the request (specific page)

–  access status/HTTP status code

–  respective data volume transferred

–  website from which the request originates

–  browser

–  operating system and its interface

–  language and version of the browser software

(2) In addition to the data mentioned above, cookies will also be stored on your system when you visit our website. Cookies are small text files that your browser stores on your hard drive. The entity that places the cookie (us in this case) can then obtain certain information from it. Cookies cannot execute programmes or infect your computer with viruses. They help to make the website more effective and user-friendly overall.

(3) Use of cookies:

a) This website uses the following types of cookies, the scope and functionality of which are described below:

–  transient cookies (see b)

–  persistent cookies (see c).

b) Transient cookies are automatically deleted when you close your browser. This type of cookie includes session cookies in particular. Session cookies store a session ID that is used to assign different requests from your browser to the same session. Through this process, your device can be recognised again if you return to our website. Session cookies are deleted once you log out or close your browser.

c) Persistent cookies are automatically deleted after a pre-determined period of time that can differ depending on the cookie. You can delete cookies at any time via your browser’s security settings.

d) You can configure your browser settings according to your preferences and reject the acceptance of third party cookies or all cookies, for example. However, you are made aware that you might not be able to use all the functions of our website if you do so.

4 Other functions and offers on our website

(1) In addition to purely informational usage of our website, we also offer various services that might be of interest to you. For these, the submission of further personal data is usually necessary, which we use to provide the respective service and for which the above-mentioned legal bases for data processing apply.

(2) In some instances, we engage external service providers to process your data. These providers have been carefully chosen and contracted by us, are subject to our instructions and are regularly audited.

(3) Furthermore, we may share your personal data with third parties if sales campaigns, competitions, contract conclusions or similar services are offered by us together with partners. You receive further information on these when providing your personal data or in the description at the bottom of the offer.

(4) If our service provider or partner is based in a country outside of the European Economic Area (EEA), we will inform you of the consequences of these circumstances in the offer description.

5 Objection to data processing; withdrawal of consent

(1) If you have agreed to your data being processed, you can withdraw your consent at any time. Such a withdrawal affects the legitimacy of processing your personal data once you have notified us of this withdrawal.

(2) If we base our need to process your personal data on a weighing up of interests, you can file an objection to the processing. This is particularly the case if the processing is not required to fulfil a contract with you, which is described by us in each case in the following description of the functions. Should you make such an objection, we ask you to specify the reasons for which we should not process your personal data in this way. In the case of a reasoned objection by you, we will examine the situation and then either cease or adjust the data processing, or explain the compelling legitimate grounds on which we will continue to process this data.

(3) You can, of course, object to the processing of your personal data for promotional or data analysis purposes at any time. You can inform us of your objection to advertising using the following contact: datenschutz@thefontenay.de

6 Newsletter

(1) By consenting, you can subscribe to our newsletter, in which we inform you of the latest interesting offers. The advertised goods and services are listed in the declaration of consent.

(2) Subscribing to our newsletter involves the so-called ‘double opt-in’ process. This means that we send you an email to the address you specified when you subscribed, in which we ask you to confirm that you wish to receive the newsletter. Beyond this, we store the IP addresses that you used as well as the time of your registration and confirmation. The purpose of this process is to prove that you signed up and to clarify any possible misuse of your personal information.

(3) The only compulsory field that is required in order to send you the newsletter is your email address. The submission of any further, separately marked data is voluntary and will be used to enable us to contact you personally. Once you have confirmed, we save your email address for the purpose of sending you the newsletter. The legal basis for this is Art. 6 para. 1 clause 1 a GDPR.

(4) You can at any time withdraw your consent to receiving the newsletter and unsubscribe from the newsletter. You can submit your withdrawal by clicking on the link in any newsletter, sending an email to lifestyle@thefontenay.de or sending a message using the contact details given in the legal notice.

(5) You are made aware that we analyse your user behaviour when sending out the newsletter. For this analysis, web beacons (or tracking pixels) are contained within the sent emails. Tracking pixels are single-pixel graphics that are stored on our website. We link the data specified in item 3 and the web beacons with your email address and individual ID for the purposes of this analysis. With the data obtained in this manner, we create a user profile so that we can tailor the newsletter to your individual interests. This involves us recording when you read our newsletter and which links you clicked on, which in turn enables us to draw conclusions regarding your personal interests. We link this data with the actions you have taken on our website.

You can object to this tracking at any time by clicking on the separate link that is displayed in every email or by informing us using another method of contact. The information will be stored for as long as you are subscribed to the newsletter. If you unsubscribe, we will store the data anonymously for pure statistical purposes.

7 Use of Google Analytics

(1) This website uses Google Analytics, a web analysis service provided by Google Inc. (‘Google’). Google Analytics uses so-called ‘cookies’, text files that are stored on your computer and enable your website usage to be analysed. The information about your use of this website which is collected by the cookie is usually transmitted to a Google server in the USA and stored there. If IP anonymisation is activated on this website, your IP address will first be truncated by Google within member states of the European Union or in other countries party to the Agreement on the European Economic Area. The full IP address will only be transmitted to a Google server in the USA and truncated there in exceptional cases. On behalf of the operator of this website, Google will use this information to analyse your use of the website, generate reports on website activity, and provide the website operator with other services related to the use of the website and the internet.

(2) The IP address transmitted by your browser within the framework of Google Analytics will not be combined with other Google data.

(3) You can prevent the storage of cookies by changing the appropriate setting in your browser software; we advise, however, that in this case, you may not be able to use all the functions of this website to the full extent. In addition, you can prevent the data that is generated by the cookie and which relates to your use of the website (including your IP address) from being sent to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin from the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

(4) This website uses Google Analytics with the extension ‘_anonymizeIp()’. This means that further processing of IP addresses takes place in a truncated form, which prevents personal identification. If the data collected from you does identify you personally, it is immediately excluded and the personal data deleted immediately.

(5) We use Google Analytics to analyse the use of our website and make regular improvements to it. Using the statistics gained, we can improve our offer and make it more interesting for you as a user. If personal data is transferred to the USA in exceptional cases, Google is compliant with the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework. The legal basis for the usage of Google Analytics is Art. 6 para. 1 clause 1 f GDPR.

(6) Information about third party providers: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001. Terms of Service: https://marketingplatform.google.com/about/analytics/terms/us/, Overview of data privacy: https://www.google.com/analytics/learn/privacy.html?hl=en-GB, and the Privacy Policy: https://policies.google.com/privacy?hl=en&gl=en.

8 Facebook

(1) Links to this service are made available on our website. We do not share your personal data with third parties. No social plugins are used on our site; this means that no data will be transmitted to the specified services if you do not follow the relevant links.

(2) If you do follow the links, your browser will connect to the relevant social media network or service. Data such as your IP address will be transmitted for this purpose, so that your visit to our site can be linked to an existing user account. You can prevent this by logging out of the corresponding user account.

9 Integration of Google Maps

(1) We use the Google Maps service on our website. This allows us to display an interactive map directly within the website and enable convenient use of the map function.

(2) When you visit the website, Google is notified that you have accessed the appropriate sub-site on our website. Additionally, the data listed under item 3 of this Privacy Policy is transmitted. This takes place regardless of whether Google provides a user account via which you are logged in or whether no such user account exists. If you are logged into a Google account, your data will be linked directly to your account. If you do not want your profile to be linked to Google, you must log out before activating the button. Google saves your data as a user profile and uses it for the purpose of advertising, market research and/or tailoring its website to requirements. This analysis takes place in particular (even for users who are not logged in) for the purpose of providing interest-based advertising and informing other users of social networks about your activities on our website. You have the right to object to the creation of such user profiles by contacting Google directly.

(3) Further information about why and to what extent data is collected and processed by the plugin provider can be found in the provider’s privacy policy. There, you will also find further information about your rights as well as configuration options for protecting your privacy: policies.google.com/privacy. Google also processes your personal data in the USA and is compliant with the EU-US Privacy Shield:https://www.privacyshield.gov/EU-US-Framework.

10 Use of Google Adwords conversion

(1) We use Google Adwords to attract attention to our desirable offers on external websites in the form of ads. On the basis of the ad campaign data, we can determine how successful individual advertising measures are. Our intention is to show you advertising that interests you, to design our website in a more interesting way for you, and to achieve a fair calculation of advertising costs.

(2) These advertising materials are delivered by Google using so-called ‘Ad Servers’. We also use Ad Server cookies, with which specific performance parameters can be measured, such as ad impressions or clicks. If you land on our website via a Google ad, a cookie will be stored on your PC by Google Adwords. These cookies usually expire after 30 days and do not serve to identify you personally. The analysis data stored in this cookie usually includes the unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions) and opt-out information (flagging that the user would not like to be contacted any more).

(3) These cookies enable Google to recognise your internet browser. If a user visits certain pages of the website of an AdWords customer and the cookie stored on their computer is still valid, Google and the customer can recognise that they clicked on the ad and were redirected to this page. Each AdWords customer is allocated a different cookie. Thus, cookies cannot be tracked across AdWords customers’ websites. We ourselves do not collect or process personal data as part of the mentioned advertising measures. We occasionally receive statistical analysis provided by Google. On the basis of this analysis, we can recognise which of the deployed advertising measures are particularly effective. We do not receive further data from the use of advertising measures; in particular, we cannot identify users from this information.

(4) Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data that Google collects through this tool, and we therefore inform you according to our level of knowledge: Through the integration of AdWords Conversion, Google is informed that you accessed the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google can link your visit to your account. Even if you are not registered with Google or are not logged in, there is a possibility that the provider will detect and store your IP address.

(5) You can prevent participation in this tracking process in a number of ways: a) by changing the appropriate settings in your browser software; in particular, rejecting third-party cookies will ensure that you do not receive any ads from third-party providers; b) by deactivating cookies for conversion tracking – this is done by configuring your browser to block cookies from the domain ‘www.googleadservices.com’, https://adssettings.google.de/authenticated, whereby these settings will be deleted when you delete your cookies; c) by deactivating the interest-based ads from providers that take part in the ‘About Ads’ self-regulation campaign using the link http://www.aboutads.info/choices, whereby these settings will be deleted when you delete your cookies; d) through permanent deactivation in your Firefox, Internet Explorer or Google Chrome browser using the link https://support.google.com/ads/answer/7395996. However, you are made aware that you might not be able to use all the functions of the website to their full extent if you do so.

The legal basis for the processing of your data is Art. 6 para. 1 clause 1 f GDPR. Further information about data privacy at Google can be found here: policies.google.com/privacy and services.google.com/sitestats/en.html. Alternatively, you can visit the Network Advertising Initiative website (NAI) at https://www.networkadvertising.org/. Google is compliant with the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework. 

11 Online bookings

(1) We use the Seekda booking machine (Seekda GmbH, Neubaugasse 10/15, 1070 Vienna) so that you can book your stay with us easily online. Your data will be collected, processed and used exclusively to legitimate, carry out and process the contractual relationship validated by the reservation. Further information about data privacy at Seekda can be found in its privacy statement at seekda.com/en/data-privacy-statement/.

(2) If you wish to book an overnight stay online, the corresponding contract can only be concluded if you provide the personal data that is needed to process your order. Information that is compulsory for the fulfilment of contracts is highlighted separately; any other information is voluntary. We will process your submitted data for the purpose of fulfilling your order. We may also provide our company’s bank with your payment data for this purpose. The legal basis for this is Art. 6 para. 1 clause 1 b GDPR.

(3) We use Bookatable (Bookatable GmbH & Co.KG, Deichstraße 48-50, 20459 Hamburg) as a service provider for table reservations. If you click on the ‘book a table’ button on our website, the browser links to a Bookatable website where you can make a reservation; you must submit your contact and credit card details for this purpose. This data will be processed by Bookatable. Further information about data privacy at Bookatable can be found in its privacy policy at www.bookatable.com/de/datenschutz. By agreeing to be forwarded to Bookatable when making a reservation on our website, you agree that data collected during your visit to our website (item 3) will be forwarded to Bookatable.

12 Contact form

You can contact us using our contact form. The entry of data is expressly voluntary. The personal data submitted will be treated confidentially and used for the intended purpose in accordance with the relevant and applicable data protection provisions. We do not share your data with third parties outside of our company.

13 Security

THE FONTENAY takes technical and organisational security measures to protect the data that you provide against accidental or malicious manipulation, loss, destruction or access by unauthorised parties. These security measures are improved regularly in line with technological developments. In addition, all employees and vicarious agents are obliged to data secrecy in accordance with the Federal Data Protection Act.

14 Amendments to this Privacy Policy

THE FONTENAY reserves the right to amend this Privacy Policy. The current version of the Privacy Policy can be accessed permanently on THE FONTENAY website at https://www.thefontenay.de/en/meta/data-protection/.

 

Current version: May 2018

THE FONTENAY