1. Data protection overview
Data collection on our website
Who is responsible for data collection on our website?
Data from our website is processed by the website operator. Their contact details are listed in the site’s ‘Legal notice’.
How do we collect your data?
Some data is collected when you provide it to us, e.g. when you enter your data in a contact form.
Other data is collected automatically by our IT systems when you visit our website. This data is primarily technical data, such as details of your internet browser or operating system or the time that you visited our website. This data is collected automatically as soon as you enter our site.
What do we use your data for?
Some data is collected to help us keep our website running properly. Other data is collected so that we can analyse how visitors use our site.
What are your rights regarding your data?
You have the right to request information, at any time and free of charge, about your personal data, its origin, its recipients and the purpose of its collection. You also have the right to request that your data be corrected, blocked or deleted. If you wish to invoke these rights or have any other questions about data protection, you can contact us at any time at the address listed in the site’s ‘Legal notice’. You also have the right to lodge a complaint with the responsible supervisory authorities.
Analytics and third-party tools
2. General and mandatory information
Please note that any data transmitted via the internet (e.g. by email) may be subject to security breaches. It is impossible to completely protect your data against third-party access.
The party responsible for data processing on this website is:
ConventGarten Verwaltungs GmbH
24768 Rendsburg, Germany
Telephone: +49 4331-59050
The responsible party is the natural or legal person with sole or joint responsibility for deciding on the purposes for which, and means by which, your personal data (names, email addresses, etc.) is processed.
3. Data protection regulations
The data you enter in the hotel registration form is processed on the following legal basis:
Home address: data processed on the basis of Section 30 of the German Federal Registration Act (Bundesmeldegesetz, BMG) and stored for one year.
Home address/billing address: data processed on the basis of Article 6(1)(b & c) of the GDPR and stored for 10 years in line with Section 147 of the German Fiscal Code (Abgabenordnung, AO) and Section 257 of the German Commercial Code (Handelsgesetzbuch, HGB)
Voluntary declaration of consent: data processed on the basis of Article 6(1)(a) of the GDPR and stored until consent is withdrawn
3.1 The following data is included in the hotel registration form in line with Section 29 et seq. of the German Federal Registration Act (Bundesmeldegesetz, BMG):
3.2 Under the General Data Protection Regulation (GDPR), you enjoy the following rights:
Right of access: Under Article 15 of the GDPR, you may obtain confirmation as to whether or not your personal data is being processed. If your data is being processed, you have the right to access this data.*
Right to withdraw consent: Where processing of your personal data is based on consent, you have the right to withdraw this consent at any time under Article 7 of the GDPR.*
Right to object: Where processing of your personal data is necessary for the purposes of the legitimate interests pursued by our company, you have the right to object to this processing at any time under Article 21 of the GDPR.*
Right to erasure: Under Article 17 of the GDPR, you have the right to obtain the erasure of your personal data in the following situations: if you have withdrawn your consent; if you have objected to the processing of your personal data (and there are no overriding legitimate grounds for the processing); if your personal data is no longer necessary for the purposes for which it is being processed; if there is a legal obligation to erase your data; or if your personal data has been unlawfully processed.*
Right to rectification: If your personal data is being processed inaccurately, you have the right to obtain, without undue delay, the rectification of this data under Article 16 of the GDPR.*
Right to the restriction of processing: Subject to the conditions set out in Article 18 of the GDPR, you have the right to request that the processing of your personal data be restricted.*
Right to data portability: Under Article 20 of the GDPR, you have the right to receive any personal data concerning you, which you provided to us, in a structured, commonly used and machine-readable format.*
Right to lodge a complaint: Under Article 77 of the GDPR, you have the right to lodge a complaint with a responsible supervisory authority.*
*If you wish to invoke your rights under the GDPR, you can contact us using the following details:
ConventGarten Verwaltungs GmbH
24768 Rendsburg, Germany
Fax: +49 4331-5905 65
Objection to the sending of promotional materials
The sending of unsolicited advertising or communications materials to the contact details listed in the ‘Legal notice’ of this website is expressly prohibited. The website operator reserves the right to take legal action if such unsolicited advertising materials, e.g. spam emails, are received.
3. Data protection officer
Statutory data protection officer
The designated data protection officer for our company is:
Ms Nicole Guckuk
24768 Rendsburg, Germany
Telephone: +49 4331-5905-0
Fax: +49 4331-5905-65
4. Data collection on our website
Most of the cookies we use are ‘session cookies’. These are automatically deleted when you leave our website. Other cookies stay stored on your device until you delete them. These cookies enable us to recognize your browser when you next visit our site.
Server log files
Your browser automatically transmits certain data. The website provider automatically collects and stores this information in server log files. This data includes:
This data is not combined with other data sources.
The legal basis for the data processing is Art. 6(1)(f) of the GDPR, which permits data processing for the purposes of the performance of a contract or to complete steps prior to entering into a contract.[A1]
Our website uses the online booking system OnlineRes, which is provided by our partner Hotelfinder.de GmbH & Co KG, Birkenallee 135, 48432 Rheine, Germany.
Any data that you enter in the system is encrypted before being transmitted elsewhere.
To enable our hotel staff to process your booking, we are sent the following personal data: name, address, email address, IP address, phone number (if applicable) and credit card number (if applicable).
If you’re paying using a payment provider (e.g. a credit card company), this data is also forwarded on to said payment provider. All data is anonymised 30 days after your departure date.
Our online booking partner is committed to processing your personal data in line with data protection legislation, and will take all organisational and technical steps necessary to keep your data safe.
If you send us an enquiry using our contact form, we store any data entered in the form, including your contact details, for the purposes of processing your enquiry and any follow-up questions. We will not forward this information on without your consent.
Data provided via the contact form is processed exclusively on the basis of your consent (Article 6(1)(a) of the GDPR). You can withdraw your consent at any time by simply sending us an email. The withdrawal of consent does not affect the lawfulness of any data processing prior to this withdrawal.
We will store any data provided by you in the contact form until you request that we delete it or withdraw your consent to its storage, or until the purpose of the data processing no longer applies (e.g. your enquiry has been closed). Statutory requirements, in particular those governing retention periods, always take precedence.
You have the right to change or withdraw your consent at any time.
5. Analytics tools and advertising
This website uses Google Analytics, a web analytics service operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
The legal basis for storing Google Analytics cookies on your computer is Article 6(1)(f) of the GDPR, since the website operator has a legitimate interest in analysing the way visitors use the website in order to optimise the site and its advertising.
You can prevent these cookies from being stored on your computer by selecting the appropriate setting in your browser software. Please note, however, that doing so may prevent you from making full use of all of the features on our website. You can also prevent Google from collecting and processing the data generated by these cookies about your use of our website (including your IP address) by downloading and installing the browser plugin available at the following link (https://tools.google.com/dlpage/gaoptout?hl=en).
Data collection opt-out
You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be stored on your computer to prevent your data from being collected if you visit our website again in future: Disable Google Analytics.
Data processing agreement
We have concluded a data processing agreement with Google and comply fully with the stringent requirements of the German data protection authorities when using Google Analytics.
‘Demographics’ feature in Google Analytics
This website uses the ‘Demographics’ feature provided by Google Analytics. This can be used to generate reports containing information on the age, gender and interests of our site visitors. The data comes from interest-based advertising by Google and visitor data provided by third parties. It cannot be traced back to a specific individual. You can disable this feature at any time through the ad settings in your Google account or generally prevent Google Analytics from collecting your data as outlined above under ‘Data collection opt-out’.
6. Plugins and tools
Our website uses plugins provided by the Google-owned website YouTube. The website is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
Each time you visit one of our web pages with a YouTube plugin, our site will establish a connection to the YouTube servers, informing them which of our pages you have visited.
If you are logged into your YouTube account, YouTube will directly link your activity on our site to your personal account. You can prevent this by logging out of your YouTube account.
We use YouTube to help us generate attractive online content. This constitutes a legitimate interest as defined under Article 6(1)(f) of the GDPR.
Google Web Fonts
We use Google Web Fonts to keep our fonts consistent across our website. When you open a page, your browser loads the required web fonts into your browser cache so that the texts and fonts are displayed correctly.
To do this, your browser must establish a connection with the Google servers. This means Google knows that your IP address has accessed our website. We use Google Web Fonts to help us generate consistent and attractive online content. This constitutes a legitimate interest as defined under Article 6(1)(f) of the GDPR.
If your browser does not support Web Fonts, your computer will use a standard font type instead.
This website uses a Google Maps API operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To enable the use of the Google Maps features, your IP address must be stored. This information is usually transmitted to a Google server in the USA and stored there. The website operator has no control over the transmission of this data.
We use Google Maps to help us generate attractive online content and to make it easier for visitors to find the locations mentioned on our website. This constitutes a legitimate interest as defined under Article 6(1)(f) of the GDPR.