1. Name and contact details of the data controller and the company data protection officer
This data protection information applies to data processing by:
Controller: Gasthof Zufriedenheit Betriebsgesellschaft mbH, represented by Managing Director Dr. Andreas E. Zielke – Steinweg 26, D – 06618 Naumburg (Saale)
Mobile: +49 152 33 88 27 45
Tel: +49 3445 7912052
Fax: +49 3445 7912054
You can reach the responsible data protection officer at:
DSB | Bunzel Datenschutz – Mommsenstraße 55, 10629 Berlin – Tel. 030/88773618
office@bunzel-datenschutz.de
2. Collection and storage of personal data as well as the nature, purpose, and use thereof
When you use our services and contact us by phone, fax, email, or through any hotel reservation system, or in person on-site to explore or conclude a accommodation contract, we collect the following data from you:
Title, first name, last name,
a valid email address,
address,
phone number (landline and/or mobile),
information about the nature of your stay with us (private or business-related),
information about the duration of your stay, including the number of persons,
information relevant to your stay with us (e.g., breakfast, wake-up call).
The collection of this data is carried out:
to identify you as our guest;
to provide appropriate service to you;
to fulfill your stay with us according to the contract;
for correspondence with you;
for invoicing;
for handling any potential liability claims and asserting any claims against you;
Data processing is carried out upon your request and is necessary under Art. 6(1)(b) of the GDPR for the proper processing of the hotel reservation contract or its initiation and for the mutual fulfillment of obligations arising from the hotel reservation contract or its initiation.
The collected personal data is stored until the expiration of statutory retention periods and then deleted, unless, according to Art. 6(1)(s) lit. c of the GDPR, we are obligated to a longer storage due to tax and commercial storage and documentation obligations (from the German Commercial Code, Penal Code, or Fiscal Code) or you have consented to storage beyond that according to Art. 6(1)(a) of the GDPR.
3. Disclosure of data to third parties
The disclosure of personal data to third parties only occurs if it is necessary for the processing of the accommodation contract with you according to Art. 6(1)(b) of the GDPR. This includes, for example, the disclosure to your employer if the accommodation was business-related, the objectively necessary disclosure to state audit authorities (e.g., tax office in the context of any tax audits), the courts, and other public authorities, as well as insurance companies for the purpose of correspondence and the assertion and defense of your rights under the accommodation contract or the assertion of our rights under the accommodation contract.
If necessary for the processing of the order with you according to Art. 6(1)(s) lit. b of the GDPR, your personal data will be disclosed to third parties. The disclosed data may only be used by the third party for the specified purposes.
4. Rights of data subjects
You have the right to:
withdraw your consent given to us under Art. 7(3) of the GDPR at any time. This will result in us no longer being allowed to continue the data processing based on this consent in the future;
request information about your personal data processed by us under Art. 15 of the GDPR. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage duration, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data, if it was not collected by us, as well as the existence of automated decision-making, including profiling, and meaningful information about its details;
request the immediate correction of incorrect or incomplete personal data stored by us under Art. 16 of the GDPR;
request the deletion of your personal data stored by us under Art. 17 of the GDPR, unless the processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
request the restriction of the processing of your personal data under Art. 18 of the GDPR, if the accuracy of the data is disputed by you, the processing is unlawful, but you oppose its erasure, and we no longer need the data, but you need it for the assertion, exercise, or defense of legal claims, or you have objected to the processing under Art. 21 of the GDPR;
receive your personal data provided to us in a structured, common, and machine-readable format or to request the transmission to another controller under Art. 20 of the GDPR and
lodge a complaint with a supervisory authority under Art. 77 of the GDPR. As a rule, you can contact the supervisory authority at your usual place of residence or work or our company headquarters in case of data protection violations. The competent supervisory authority for data protection issues is in any case the state data protection commissioner of the federal state in which our company is located.
5. Right to object
If your personal data is processed on the basis of legitimate interests according to Art. 6(1)(s) lit. f of the GDPR, you have the right to object to the processing of your personal data under Art. 21 of the GDPR, provided that there are reasons for this arising from your particular situation.
If you wish to exercise your right to object, an email to b.scheffel@gasthof-zufriedenheit.de is sufficient.
