Privacy

Description of the data processing

Einwilligungen widerrufen oder bearbeiten

In order to enable the best possible use of our website, the booking and the overnight stay in our flats, it’s necessary to store some personal data.

We would like to inform you more detailed in the following.

1. Person responsable

The responsible party for data processing on this website is:
Dipl.-Kaufmann Ellio Schneider
Managing Director

The general partner is Waldburg-Zeil Kliniken GmbH
Sitz: Leutkirch
Registergericht: Ulm
Registernummer: HRB 610012

Telefon: + 49 (0) 7562 71 11109
E-Mail: geschaeftsfuehrer@wz-kliniken.de

2. Data Protection Commissioner

The data protection officer of the data controller is:
Thomas Röder
Waldburg-Zeil Clinics
Central
Data Protection Officer
Quality Management Officer

Telefon: +49 (0) 7562 71-1042
E-Mail: datenschutz@wz-kliniken.de

3. Provision of the website and creation of log files

  1. Description of the data processing
    Each time our website is called up, our system automatically collects data and information from the computer system of the calling computer and stores this in the log files of our system. The following data is collected:

    • Browser type and version
    • Operating system used
    • Name of the website accessed
    • Referrer URL (the previously visited page)
    • Host name of the accessing computer
    • amount of data transferred
    • Date and time of the server request
    • Message about successful retrieval
    • Internet service provider
    • IP address

    The data is stored in the log files of our system. This data is not stored together with other personal data of the user.

  2. Purpose:

    • Correct delivery of the website to the user’s computer
    • Ensuring the functionality of the website and the security of our information technology systems
  3. Legal basis for data processingLegitimate interest; Art. 6 para. 1 lit. f DSGVO
    Our legitimate interest lies in the above-mentioned purposes of data processing.
  4. Storage period
    7 Days

4. Booking and Check-In

  1. Description of the data processing
    We work together with the provider apaleo (apaleo GmbH, Dachauerstr. 15 A, 80335 Munich) for booking. They provide a platform for booking on which you can enter the necessary data and make your payment. apaleo processes your data on our behalf.
    For check-in, your data is automatically transferred to the system of another cooperation partner, which also processes it on our behalf: Hotelbird (Hotelbird GmbH, Plinganserstrasse 150, 81369 Munich). This enables an independent check-in via a tablet upon arrival.
  2. Purpose:
    Enabling the booking (=preparation and conclusion of the contract), preparing the check-in, check-in, recording the legally required data, invoicing, fulfilling verification obligations, completing the registration form.
  3. Legal basis for data processing
    Pre-contractual measures and conclusion of contract: Accommodation contract; Art. 6 para. 1 lit. f DSGVO Legal obligation; Art. 6 para. 1 lit. c DSGVO in conjunction with. § 147 AO, § 257 HGB
  4. Storage period
    10 Days

5. Registration form or electronically collected data pursuant to section 29 (5) BMG

  1. Description of the data processing
    Upon arrival, you must either fill out a registration form or electronically collected data (usually collected as part of card-based payment) will be stored. The information must be made available to certain authorities upon request.
  2. Purpose:
    Fulfilment of legal obligations
  3. Legal basis for data processing
    Legal obligation; Art. 6 para. 1 lit. c DSGVO in conjunction with. § Section 29 (2) BMG, Section 29 (5) no. 1 BMG, Section 30 BMG
  4. Storage episode
    1 Day

6. Data transmission Ammergau Alps Tourist Office

We do not transmit any personal data. Only the number of people and the days spent with us are passed on for statistical purposes.

You will receive your tourism card directly at check-in.

7. E-Mail Contact

  1. Description of data processing
    You have the option of contacting us via the e-mail address provided. In doing so, we store the personal data transmitted with your e-mail:

    • Your e-mail address
    • your name, the date and time you contacted us, and
    • The other personal data provided in your e-mail.

    The data will be used exclusively for processing your enquiry.

  2. Purpose of the data processing
    The above-mentioned personal data is processed for the purpose of processing your enquiry.
  3. Legal basis for data processing
    Legitimate interest; Art. 6 para. 1 lit. f DSGVO
    Our legitimate interest lies in the above-mentioned purposes of data processing.
    Pre-contractual measures and conclusion of contract: Accommodation contract; Art. 6 para. 1 lit. f DSGVO.
  4. Storage period
    The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For personal data sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is terminated when it can be inferred from the circumstances that the matter in question has been conclusively clarified. Mandatory legal provisions – in particular retention periods – remain unaffected.

8. Contact form

  1. Description of the data processing
    Our website contains a contact form that can be used for electronic contact. If a user makes use of this option, the data entered in the input mask is transmitted to us and stored: In addition, the date of the contact request is saved. The data is used exclusively for processing your request.
  2. Purpose of the data processing
    The processing of the above-mentioned personal data is carried out for the purpose of processing enquiries.
  3. Legal basis for data processing
    Legitimate interest; Art. 6 para. 1 lit. f DSGVO
    Our legitimate interest lies in the above-mentioned purposes of data processing.
    Pre-contractual measures and conclusion of contract: Accommodation contract; Art. 6 para. 1 lit. f DSGVO
  4. Storage period
    The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent via the contact form, this is the case when the respective conversation with the user has ended. The conversation is ended when the circumstances indicate that the matter in question has been conclusively clarified. Mandatory legal provisions – in particular retention periods – remain unaffected.

9. Technically necessary cookies

Cookies are text files that are stored on the user’s terminal device when a website is called up by the browser and can be read out again when the website is called up again by the user with the same terminal device. The characteristic character sequence contained in the cookie enables the user to be recognised across pages and, if necessary, across sessions.

Our websites set technically necessary cookies that serve to recognise the user during a session. They are deleted when the browser is closed.

Some cookies are also stored for a little longer (maximum X days) so that you can continue a booking later if you were interrupted in the process, lost your internet connection, or similar.

In particular, when you log in to one of the websites, cookies are stored for up to X days for recognition purposes.

These cookies are also considered technically necessary.

The legal basis for the use of the aforementioned cookies is Art. 6 (1) lit. f DSGVO. The legitimate interest lies in the provision of a functional and user-friendly website.

  • Cookie name: pll_language
  • Domain: apartmenthaus-oberammergau.de
  • Classification: technically necessary
  • Validity/storage period: Session
  • Description and purpose: Stores the language specified by your terminal device in order to deliver the website in the correct language.

10. Technically unnecessary cookies

Cookies are text files that are stored on the user’s terminal device when a website is called up by the browser and can be read out again when the website is called up again by the user with the same terminal device. The characteristic character sequence contained in the cookie enables the user to be recognised across pages and, if necessary, across sessions.

We use other cookies as part of services such as Google Analytics and Google Maps. These cookies are only set with your consent (Art. 6 para. 1 lit. a DSGVO) and are used to evaluate your user behaviour and optimise our website. The storage period is up to X days.

Cookie name: _ga_#
Domain: ammerglück.de
Classification: Analysis tool and tracker: Google Analytics
Validity/storage period: 2 years
Description and purpose: Collects data on how often a user has visited a website, as well as data for the first and last visit.

11. Google Maps

  1. Description of the data processing
    We use “Google Maps” from the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter “Google”, on our website. In order to make the use of Google Maps more privacy-friendly, the map is not loaded directly when the page is called up, but only when you allow this by clicking on it. Your data will then only be forwarded to Google after your confirmation. Our responsibility only extends to the collection and forwarding of your data to Google. However, we have no influence on what data is processed by Google. To our knowledge, however, this is at least the following:

    • Internet address of the calling website
    • IP address
    • Date and time of the visit to the website in question.

    If you are logged in to your Google account when using Google Maps, Google may link this data to your account. Please also refer to Google’s privacy policy. If you do not consent to the transfer of data to Google, you will not be able to use Google Maps.

  2. Purpose of the data processing
    This map makes it easier to view the locations of our facilities at the site of our facility. It also allows you to quickly determine a route to our locations.
  3. Legal basis for data processing
    Consent according to Art. 6 para. 1 lit. a DSGVO § 6 para. 1 lit. b KDG § 6 para. 1 lit. b KDR-OG § 6 no. 2 DSG-EKD.
  4. Storage period
    We do not store any personal data when displaying the map service. The data protection provisions of Google Maps apply to their data processing.

12. Google Analytics

  1. Description of the data processing
    Our website uses the Google Analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”). With the help of the Google Analytics web analysis service, we analyse how visitors use our website in order to better understand user behaviour and optimise the design of our website. Google collects and processes data from visitors to our website (including pages viewed, referrers, access time, browser, operating system and IP address). Google Analytics uses cookies that are set after your consent (see “Technically unnecessary cookies”). In our configuration of Google Analytics, we use the function “_anonymizeIp”. This means that the IP address of the calling computer is shortened and thus anonymised before processing by Google Analytics.
  2. Purpose of data processing
    On our behalf, Google uses the information collected to evaluate the use of the website and to compile reports on website activity to enable us to optimise our website.
  3. Legal basis of the processing
    Consent, Art. 6 para. 1 lit. a DSGVO
    You can revoke your consent at any time with effect for the future.
  4. Storage period
    The data will be stored for a maximum period of 14 months.
  5. Data transfer to the USA
    The personal data collected by Google is usually transmitted to a Google server in the USA and stored there. There is currently neither an adequacy decision nor suitable guarantees for this transfer. For this reason, it cannot be ensured that a level of protection equivalent to the GDPR is guaranteed for this personal data. In particular, there is a risk that the data is not protected from access by US authorities.

13. Instagram

Instagram is a service provided by Meta Platforms Ireland Ltd (Meta). Instagram is a social network that allows the creation of private profiles, company pages and groups. Users can upload photos, videos and posts to their own profiles and pages. Other users can share and comment on this content. In addition, users can get in touch with each other by writing public or private messages or using the chat offered.

Meta itself processes your IT usage data (e.g. IP address, browser and device information, page views, etc.) in addition to the entries and information you provide there (e.g. posts, photos and messages). Meta also obtains information from other sources in order to show you personalised advertising, for example. Meta also evaluates your user behaviour through the use of tracking and analysis tools.
Unfortunately, we have no influence on the data processing by Meta and therefore cannot guarantee the deletion of such data.

We process your personal data when you contact us via Instagram (by public or private message), when you comment on our posts, when you publish a post on one of our pages, when you RSVP to an event, or when you leave a reaction.

The data accrued in the course of a private message will be deleted by us in the Instagram chat six months after the last message.

We would like to point out that the content of a private message on Instagram always becomes known to Meta. We have no influence on how Meta handles this information.

Apart from this, we do not delete your personal data on Instagram (e.g. in the case of a public message), but you have the option to delete it yourself. The data is then no longer visible to us or to other users, but Meta may continue to store the data. We have no influence on this.

The legal basis for processing your data in this regard is Art. 6 (1) lit. a and f DSGVO. We process the data in our common interest in order to provide you with relevant information.

If you have any questions about data protection, please contact our data protection officer. If you have any questions about data processing by Meta, please contact Meta directly.

Meta provides more detailed information on this at the following link: https://help.instagram.com/519522125107875?helpref=page_content.

Meat describes what information Meta receives and how it is used in its data policy for Instagram. There you will also find information on how to contact Meta. The data policy is available at the following link: https://help.instagram.com/519522125107875?helpref=page_content

The data collected about you may be transferred by Meta to countries outside the European Union.

14. Your rights

  1. Right to information
    You may request confirmation from us as to whether personal data concerning you is being processed by us. If such processing is taking place, you may request information from the controller about the information referred to in Art. 15 DSGVO.
  2. Right to rectification
    You have a right to rectification in accordance with Art. 16 DSGVO and/or completion, insofar as the processed personal data concerning you are incorrect or incomplete. We must carry out the rectification without delay.
  3. Right to erasure
    You may request that we delete personal data relating to you without undue delay and we are obliged to delete such data without undue delay under the conditions set out in Article 17 of the GDPR.
  4. Right to restrict processing
    Under the conditions set out in Article 18 of the GDPR, you may request the restriction of the processing of personal data relating to you. Where the processing of personal data concerning you has been restricted, such data may be processed, with the exception of storage, only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the Union or a Member State.
  5. Right to data portability
    Pursuant to Article 20 of the GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without hindrance from the controller to whom the personal data was provided.
  6. Right to withdraw consent
    You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
  7. Right to complain to the supervisory authority
    Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR. The competent data protection supervisory authority for the responsible body is: Bayerisches Landesamt für Datenschutzaufsicht Promenade 18, 91522 Ansbach Tel: 0981 180093-147 Fax: 0981 180093-847 www.lda.bayern.de
  8. Right of appeal
    You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) DSGVO; this also applies to profiling based on these provisions. We will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

15. Linking to external pages

On our website we link to information and websites of other providers, for example specialist information, press reports or other websites. These links are marked as such. When you click on them, you leave our website. The respective responsible party of the linked page is responsible for data processing.