Privacy policy

We take the protection of your personal data seriously and comply with the rules of the applicable data protection laws, in particular the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), as well as this privacy policy.

The privacy policy gives you an overview of what type of personal data is processed and for what purpose. This privacy policy also explains how we ensure the protection of your personal data.

Name and contact details of the controller

This data protection information applies to data processing by:

Responsible person:

Gut Funkenhof TM Hotels GmbH
Altenhellefelder Straße 10
59846 Sundern

Telefon: +49 (2934)-96176-0
Fax: +49 (2934)-96176-666
info@gutfunkenhof.de
www.gutfunkenhof.de

Collection and storage of personal data and the nature and purpose of its use

a) When you visit our website www.gutfunkenhof.de

If you use our website for purely informational purposes, i.e. if you do not register or otherwise provide us with information about yourself, we only collect the personal data that your browser transmits to our server. When you visit our website

You can visit our website www.gutfunkenhof.de

the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted:

• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the accessed file,
• Website from which the access is made (referrer URL),
• browser used and, if applicable, the operating system of your computer as well as the name of your access provider, language and version of the browser software

We process the aforementioned data for the following purposes:

• Ensuring a smooth connection to the website,
• Ensuring a comfortable use of our website,
• evaluating system security and stability and
• for other administrative purposes.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f) EU GDPR. Our legitimate interest follows from the purposes for data collection listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person.

We also use cookies when you visit our website. Cookies do not cause any damage to your computer and do not contain viruses. You can find more detailed explanations on this in section 4 of this privacy policy.

b) When using our webshop

BWhen you use our web store, e.g. by submitting your offers, by accepting our offers, by registering or through other communication, we process the personal data you provide exclusively for the purpose of initiating or fulfilling a contract.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. b) EU GDPR. According to this, data processing is necessary for the conclusion or performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

When you use our web store, we process the following personal data transmitted by you:

• First and last name (for companies: company)
• Your address
• Telephone number (landline and/or mobile phone number)
• Fax number (only if available)
• e-mail address
• IBAN (only if required for processing payments)
• Credit card number and check digit (only if required for processing payments)

This data is processed for the purpose of fulfilling contractual obligations, in particular for shipping the goods, processing payment including invoicing, processing any warranty claims and for any related correspondence with you.

c) When using our contact form

We have provided a contact form on the website so that you can send us your questions, comments, remarks, etc.. To use it, you must provide your e-mail address and your name so that we know who to reply to; you can provide further information voluntarily.

The legal basis for data processing is your voluntarily given consent (Art. 6 para. 1 sentence 1 lit. a) EU GDPR).

The personal data collected by us for the use of the contact form will be deleted after your inquiry has been dealt with.

Disclosure of data to third parties

Your personal data will not be transferred to third parties for purposes other than those listed below. In particular, your data will not be passed on to third parties, e.g. for advertising purposes, without your express consent.

We only pass on your personal data to third parties if:

• you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a) EU GDPR;
• this is necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b) EU GDPR, e.g. to credit institutions for the processing of contractually agreed payments, to shipping and transport companies for the purpose of transporting goods including shipment tracking, in the event of non-fulfillment of contractually agreed payments for the purpose of legal enforcement to lawyers and legal service providers;
• in the event that there is a legal obligation for disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c) EU GDPR; or
• the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f) EU GDPR is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data.

Cookies

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware.

Information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity.

On the one hand, the use of cookies serves to make the use of our website more pleasant for you. For example, we use session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your end device for a specified period of time. If you visit our site again to make use of our services, it is automatically recognized that you have already visited us and which entries and settings you have made so that you do not have to enter them again.

The data processed by cookies are necessary for the purposes mentioned to protect our legitimate interests and those of third parties in accordance with Art. 6 para. 1 sentence 1 lit. f) EU GDPR.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website.

If you would like to change your cookie settings, please click here: edit cookie settings

Storage period and data deletion

In particular, your personal data will be deleted as soon as they are no longer necessary for the purposes for which they were collected or otherwise processed. The data will then be erased unless storage is necessary for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the establishment, exercise or defense of legal claims. A legal obligation is represented by the statutory retention obligations, which are, for example, 10 years (for accounting data including order and payment data, payroll accounting) or 6 years (for commercial correspondence). The data is blocked for the duration of the retention obligations, after which it is deleted.

Rights of data subjects

You have the right,

• in accordance with Art. 7 para. 3 EU GDPR, to withdraw your consent once given to us at any time. As a result, we may no longer continue the data processing that was based on this consent in the future. The legality of the data processing carried out up to the revocation remains unaffected by your revocation;
• in accordance with Art. 15 EU GDPR, to request information about your personal data processed by us. You can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
• in accordance with Art. 16 EU GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us;
• in accordance with Art. 17 EU GDPR, to demand the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
• in accordance with Art. 18 EU GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;
• in accordance with Art. 20 EU GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller
• to lodge a complaint with a supervisory authority in accordance with Art. 77 EU GDPR. The competent supervisory authority is the state data protection officer of the federal state in which our company is based. An overview of the state data protection officers and their contact details can be found at https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right of objection

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f) EU GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation. In the event of your justified objection, we will examine the situation and either stop or adapt the data processing or point out to you our compelling reasons worthy of protection on the basis of which we will continue the processing.

Data security

We use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

Status and possible changes to this privacy policy

This privacy policy was last updated in May 2018.

Due to technical developments and/or changes in legal or regulatory requirements, it may be necessary to amend this privacy policy. You can tell whether changes have been made if the “Status” of the document has been updated in the first paragraph of this section 9.

Google Analytics

This website uses Google Analytics, a web analysis service of Google Inc (”Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

Click here to deactivate Google Tracking.

Note on online dispute resolution: Click here to deactivate Google Tracking.

According to Art. 14 para. 1 ODR-VO: The European Commission provides a platform for online dispute resolution (ODR), which you can find at https://ec.europa.eu/consumers/odr/.