Data protection

Generally

As the operator of this website and as a company, we come into contact with your personal data. This means all data that says something about you and with which you can be identified. In this privacy policy, we would like to explain to you how, for what purpose and on what legal basis we process your data. The person responsible for data processing on this website and in our company is:

SK Hotelbetriebs GmbH & Co KG

Hollersbach 17

5731 Hollersbach

Telephone: 43(0)6562/8117-0

Email: info@kaltenhauser.com

General information

SSL or TLS encryption

When you enter your data on websites, place online orders or send emails over the Internet, you must always expect that unauthorized third parties will access your data. There is no complete protection against such access. However, we do everything we can to protect your data as best as possible and to close security gaps as far as we can.

An important protection mechanism is the SSL or TLS encryption of our website, which ensures that data that you send to us cannot be read by third parties. You can recognize the encryption by the lock icon in front of the Internet address entered in your browser and by the fact that our Internet address begins with https:// and not with http://.

Encrypted payment transactions

Payment data, such as account or credit card numbers, are particularly in need of protection. This is why we only process payments using common payment methods via an encrypted SSL or TLS connection.

How long do we store your data?

At some points in this privacy policy we inform you how long we or the companies that process your data on our behalf store your data. If such information is missing, we store your data until the purpose of the data processing no longer applies, you object to the data processing or you withdraw your consent to the data processing.

However, in the event of an objection or revocation, we may continue to process your data if at least one of the following conditions is met:

We have compelling legitimate grounds for continuing the data processing which override your interests, rights and freedoms (only if you object to data processing; if the objection is directed against direct marketing, we cannot provide legitimate grounds).

The data processing is necessary to assert, exercise or defend legal claims (does not apply if your objection is directed against direct marketing).

We are legally obliged to retain your data.



In this case, we will delete your data as soon as the requirement(s) no longer apply.

Data transfer to the USA

We also use tools on our website from companies that transmit your data to the USA, store it there and possibly process it further. This is particularly important for you because your data does not enjoy the same level of protection in the USA as it does within the EU, where the General Data Protection Regulation (GDPR) applies. For example, US companies are obliged to release personal data to security authorities without you as the data subject being able to take legal action against this. It is therefore possible that US authorities (e.g. secret services) process, evaluate and permanently store your data on US servers for surveillance purposes. We have no influence on these processing activities.

Data Protection Officer

We have appointed a data protection officer for our company:SK Hotelbetriebs GmbH & Co KG

Hollersbach 17

5731 Hollersbach



Telephone: 43(0)6562/8117-0

Email: info@kaltenhauser.com

Your rights

Objection to data processing

IF YOU READ IN THIS PRIVACY POLICY THAT WE HAVE LEGITIMATE INTERESTS IN PROCESSING YOUR DATA AND THEREFORE BASE THIS ON ART. 6 PARAGRAPH 1 SENTENCE 1 LIT. F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THIS ACCORDING TO ART. 21 GDPR.

ALSO APPLIES TO PROFILING THAT IS CARRIED OUT ON THE BASIS OF THE ABOVE-MENTIONED PROVISION. THE CONDITION IS THAT YOU PROVIDE REASONS FOR THE OBJECTION THAT ARISE FROM YOUR PARTICULAR SITUATION. NO REASONS ARE NECESSARY IF THE

OBJECTION TO THE USE OF YOUR DATA FOR DIRECT MARKETING.

THE CONSEQUENCE OF THE OBJECTION IS THAT WE ARE NO LONGER PERMITTED TO PROCESS YOUR DATA. THIS ONLY DOES NOT APPLY IF ONE OF THE FOLLOWING CONDITIONS APPLIES:

WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS.

THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS.

THE EXCEPTIONS DO NOT APPLY IF YOUR OBJECTION IS DIRECTLY TO DIRECT MARKETING OR TO PROFILING RELATED TO IT.

Further rights

Revocation of your consent to data processing

Many data processing operations are carried out on the basis of your consent. You give this, for example, by ticking the appropriate box on online forms before sending the form or by allowing certain cookies when you visit our website. You can revoke your consent at any time without giving reasons (Art. 7 Para. 3 GDPR). From the time of revocation, we are no longer permitted to process your data. The only exception: we are legally obliged to keep the data for a certain period of time. Such retention periods exist in particular in tax and commercial law.

Right to complain to the competent supervisory authority

If you believe that we are violating the General Data Protection Regulation (GDPR), you have the right to complain to a supervisory authority under Art. 77 GDPR. You can contact a supervisory authority in the member state of your residence, your place of work or the place where the alleged violation occurred. The right to complain exists in addition to administrative or judicial remedies.

Right to data portability

We must hand over data that we process automatically on the basis of your consent or in fulfillment of a contract to you or a third party in a common machine-readable format if you request this. We can only transfer the data to another responsible party if this is technically possible.

Right to data information, deletion and correction

According to Art. 15 GDPR, you have the right to receive information free of charge about which personal data we have stored about you, where the data comes from, to whom we transmit the data and for what purpose it is stored. If the data is incorrect, you have the right to rectification (Art. 16 GDPR); under the conditions of Art. 17 GDPR, you can request that we delete the data.

Right to restriction of processing

In certain situations, you can request that we restrict the processing of your data in accordance with Art. 18 GDPR. The data may then only be processed as follows - apart from storage:

with your consent to assert, exercise or defend legal claims to protect the rights of another natural or legal person for reasons of important public interest of the European Union or a Member State

The right to restrict processing exists in the following situations:

You have disputed the accuracy of your personal data stored by us and we need time to check this. In this case, you have the right to object for the duration of the check.

Your personal data is being processed unlawfully or has been processed unlawfully in the past. In this case, you have the alternative right to have the data deleted.

We no longer need your personal data, but you require it to exercise, defend or assert legal claims. In this case, you have the alternative right to have the data deleted.

You have lodged an objection in accordance with Art. 21 Paragraph 1 GDPR and now your interests and ours must be weighed against each other. This right exists as long as the result of the balancing has not yet been determined.

Hosting und Content Delivery Networks (CDN)

Externes Hosting

Our website is hosted on a server of the following Internet service provider (hoster):

Amazon Web Services (AWS) Germany GmbH

Krausenstr. 36

10117 Berlin

Has a contract for order processing been concluded with the hoster?

And

How do we process your data?

The host stores all data from our website. This includes all personal data that is collected automatically or through your input. This can include in particular: your IP address, pages accessed, names, contact details and queries as well as meta and communication data. When processing data, Amazon Web Services (AWS) Germany GmbH adheres to our instructions and only processes the data to the extent that this is necessary to fulfill its obligation to provide services to us.

On what legal basis do we process your data?

Since we address potential customers and maintain contact with existing customers via our website, the data processing by our host serves to initiate and fulfill the contract and is therefore based on Art. 6 Para. 1 lit. b) GDPR. In addition, it is our legitimate interest as a company to provide a professional Internet offering that meets the necessary requirements for security, speed and efficiency. In this respect, we also process your data on the basis of Art. 6 Para. 1 lit. f) GDPR.

Cloudflare

What is Cloudflare?

Content Delivery Network (CDN) mit Domain-Name-System (DNS)

Who processes your data?

Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA

Has a data processing agreement been concluded with Cloudflare?

And

Where can I find more information about Cloudflare’s privacy practices?

https://www.cloudflare.com/privacypolicy/

On what basis do we transfer your data to the USA? Based on the standard contractual clauses of the European Commission (see https://www.cloudflare.com/media/pdf/cloudflare-customer-dpa.pdf)

How do we process your data?

We use the services of Cloudflare for our website. The global content delivery network ensures that all the content we provide online reaches you quickly, even if large amounts of data have to be moved over long distances. This is made possible by the fact that Cloudflare, with all its technical capabilities and servers around the world, is placed between our website and your browser, analyzes the data traffic and filters out malicious data before it reaches our server. In doing so, Cloudflare also comes into contact with personal data collected via our website. The company can also use cookies or other technologies to recognize Internet users. Data processing by Cloudflare always serves the sole purpose of enabling fast data traffic.

On what legal basis do we process your data?

We have a legitimate interest in providing visitors to our website with the fastest and most efficient online service possible. Data processing is therefore carried out on the basis of Art. 6 (1) (f) GDPR.

Data collection on this website

Use of cookies

Our website places cookies on your device. These are small text files that are used for different purposes. Some cookies are technically necessary for the website to function at all (necessary cookies). Others are required to be able to carry out certain actions or functions on the site (functional cookies). For example, without cookies it would not be possible to use the advantages of a shopping cart in an online shop. Still other cookies are used to analyze user behavior or optimize advertising measures. If we use third-party services on our website, e.g. to process payment transactions, these companies can also leave cookies on your device when you visit the website (so-called third-party cookies).

How do we process your data?

Session cookies are only stored on your device for the duration of a session. As soon as you close the browser, they disappear automatically. Permanent cookies, on the other hand, remain on your device if you do not delete them yourself. This can, for example, lead to your user behavior being analyzed permanently. You can influence how it handles cookies via the settings in your browser:

Would you like to be informed when cookies are set?

Do you want to exclude cookies generally or in certain cases?

Do you want cookies to be automatically deleted when you close your browser?

If you deactivate or do not allow cookies, the functionality of the website may be limited.

If we use cookies from other companies or for analysis purposes, we will inform you about this in this privacy policy. We will also ask for your consent when you visit our website.

On what legal basis do we process your data?

We have a legitimate interest in ensuring that our online offerings can be used by visitors without technical problems and that all the desired functions are available to them. Necessary and functional cookies are therefore stored on your device on the basis of Art. 6 Paragraph 1 Letter f) GDPR. We use all other cookies on the basis of Art. 6 Paragraph 1 Letter a) GDPR, provided that you give us your consent. You can revoke this consent at any time with effect for the future. If you have consented to the placement of necessary and functional cookies when asked for consent, these cookies will also be stored exclusively on the basis of your consent.

Cookie consent with Usercentrics

What is Usercentrics?

Consent Management Platform (CMP) for obtaining, processing and forwarding GDPR-compliant consents

Who processes your data?

Usercentrics GmbH, Rosental 4, 80331 Munich, Germany

Where can you find more information about data protection at Usercentrics?

https://usercentrics.com/de/datenschutzerklaerung/

How do we process your data?

We use the consent management platform Usercentrics to obtain your consent to store cookies on your device and to document it in compliance with data protection regulations. When you visit our website and close the Usercentrics cookie window requesting your consent, the following data is transmitted to the company:

Your consent(s) or the revocation of your consent(s)Your IP addressInformation about your browserInformation about your deviceThe time of your visit to the website

In addition, Usercentrics stores a cookie in your browser in order to be able to assign the consent granted or its revocation to your browser. All data collected is stored until the cookies are no longer needed, you delete the Usercentrics cookie or you ask us to delete the data. This only does not apply if we are legally obliged to retain the data.

On what legal basis do we process your data?

We are legally obliged to obtain the consent of our website visitors for the use of certain cookies. In order to fulfil this obligation, we use Usercentrics. The legal basis for data processing is therefore Art. 6 Para. 1 lit. c) GDPR.

Server log files

Server log files record all requests and accesses to our website and record error messages. They also contain personal data, in particular your IP address. However, this is anonymized by the provider after a short time so that we cannot assign the data to you personally. The data is automatically transmitted from your browser to our provider.

How do we process your data?

Our provider stores the server log files in order to be able to track the activities on our website and to identify errors. The files contain the following data:

Browser type and versionOperating system usedReferrer URLHost name of the accessing computerTime of the server requestIP address (possibly anonymized)

We do not combine this data with other data, but use it solely for statistical evaluation and to improve our website.

On what legal basis do we process your data?

We have a legitimate interest in ensuring that our website runs error-free. It is also our legitimate interest to obtain an anonymized overview of access to our website. The data processing is therefore lawful in accordance with Art. 6 Para. 1 lit. f) GDPR.

contact form

You can send us a message using the contact form on this website.

How do we process your data?

We save your message and the information from the form in order to process your request, including follow-up questions. This also applies to the contact details provided. We will not pass the data on to other people without your consent.

How long do we store your data?

We will delete your data as soon as one of the following occurs:

Your request has been finally processed.You request that we delete the data.You revoke your consent to storage.



This only does not apply if we are legally obliged to retain the data.

On what legal basis do we process your data?

Inquiry by email, telephone or fax

You can send us a message by email or fax or call us.

How do we process your data?

We save your message as well as your self-provided contact details or the telephone number you provided in order to be able to process your request, including follow-up questions. We will not pass the data on to other people without your consent.

How long do we store your data?

We will delete your data as soon as one of the following occurs:

Your request has been finally processed.You request that we delete the data.You revoke your consent to storage.



This only does not apply if we are legally obliged to retain the data.

On what legal basis do we process your data?

If your request is related to our contractual relationship or serves to carry out pre-contractual measures, we process your data on the basis of Art. 6 Para. 1 lit. b) GDPR. In all other cases, it is our legitimate interest to process requests addressed to us effectively. The legal basis for data processing is therefore Art. 6 Para. 1 lit. f) GDPR. If you have consented to the storage of your data, Art. 6 Para. 1 lit. a) GDPR is the legal basis. In this case, you can revoke your consent at any time with effect for the future.

Analysis tools and advertising

We use the following tools to analyze the behavior of our website visitors and show them advertising.

Google Tag Manager

What is Google Tag Manager?

Tag management system for integrating tracking codes and conversion pixels from Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Irland

Where can you find more information about data protection at Google Tag Manager?

https://policies.google.com/privacy

On what basis do we transfer your data to the USA?

Based on the standard contractual clauses of the European Commission (https://privacy.google.com/businesses/compliance)

How do we process your data?

We use the Google Tag Manager. The tool helps us to integrate tracking codes and conversion pixels into our website, to manage them and to display them. The Google Tag Manager does not create user profiles itself, does not place cookies on your device and does not analyze your behavior as a user. However, it does record your IP address and transmit it to Google servers in the USA.

On what legal basis do we process your data?

We have a legitimate interest in the quick and uncomplicated integration and management of various tools on our website. The use of Google Tag Manager is therefore lawful according to Art. 6 Para. 1 lit. f) GDPR. If you have consented to the transmission of your IP address, we will process your data exclusively on the basis of Art. 6 Para. 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future.

Google Analytics

What is Google Analytics?

Tool for analyzing user behavior from Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Irland

Where can you find more information about privacy at Google Analytics?

https://support.google.com/analytics/answer/6004245?hl=de

On what basis do we transfer your data to the USA?

Based on the standard contractual clauses of the European Commission (https://privacy.google.com/businesses/compliance)

How can you prevent data collection?

Among other things, with a browser plug-in: https://tools.google.com/dlpage/gaoptout?hl=de

How do we process your data?

We are always interested in optimizing our web offering for visitors to our website and placing advertising in the best possible way. Google Analytics helps us with this, a tool that analyzes user behavior and provides us with the necessary data basis for adjustments. The tool provides us with information about the origin of our visitors, their page views and the length of time they spend on the pages, as well as the operating system they use.

Standard processing

To collect the data, Google Analytics uses cookies, device fingerprinting or other technologies to recognize users. The data is transmitted to Google servers in the USA and, using the IP address also recorded, is compiled into a profile that can be assigned to you or your device.

You can prevent Google from processing your data by installing a browser plug-in provided by Google: https://tools.google.com/dlpage/gaoptout?hl=de.

How long do we store your data?

According to Google's own information, data stored at user and event level that is linked to cookies, user identifications (e.g. user IDs) or advertising IDs is deleted or anonymized according to ## No information ## (see https://support.google.com/analytics/answer/7667196?hl=de).

On what legal basis do we process your data?

As a website operator, we have a legitimate interest in analyzing user behavior for the purpose of optimizing our website and the advertising placed there. The data processing is therefore lawful according to Art. 6 Para. 1 lit. f) GDPR. In the event that you have, for example, consented to the storage of cookies or otherwise consented to data processing by Google Analytics, Art. 6 Para. 1 lit. a) GDPR is the sole legal basis. You can revoke your consent at any time with effect for the future.

Google Ads

What is Google Ads?

Online advertising program of Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Irland

Where can you find more information about privacy at Google Ads?

https://policies.google.com/privacy?hl=de&gl=de

On what basis do we transfer your data to the USA?

Google adheres to the European Commission’s standard contractual clauses (https://privacy.google.com/businesses/compliance)

How do we process your data?

We use Google Ads. Google's advertising program enables us to display advertisements in the Google search engine or on third-party websites when visitors to our website enter certain search terms into Google (keyword targeting). We can also place targeted advertisements based on the user data available to Google (e.g. location data and interests) (target group targeting). We evaluate the collected data quantitatively, for example by analyzing which search terms led to the display of our advertisements and how many advertisements led to corresponding clicks.

On what legal basis do we process your data?

As a website operator, we have a legitimate interest in placing and evaluating advertisements. The data processing is therefore lawful according to Art. 6 Para. 1 lit. f) GDPR. In the event that you have, for example, consented to the storage of cookies or otherwise consented to data processing by Google, Art. 6 Para. 1 lit. a) GDPR is the sole legal basis. You can revoke your consent at any time with effect for the future.

Google Analytics Remarketing

What is Google Analytics Remarketing?

Tool for personalized advertising from Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Irland

Where can you find more information about data protection in Google Analytics Remarketing?

https://www.google.de/intl/de/policies/privacy/ and https://policies.google.com/technologies/ads

On what basis do we transfer your data to the USA?

Google adheres to the European Commission’s standard contractual clauses (https://privacy.google.com/businesses/compliance)

How can you prevent data processing?

By opting out of personalized advertising in your Google account or on this site: https://www.google.com/settings/ads/onweb/

How do we process your data?

We are always interested in placing our advertising in the best possible way. The remarketing function of Google Analytics helps us with this.

Standard processing

Remarketing means that we analyze your behavior on our website in order to assign you to a specific advertising target group and then show you suitable advertising messages when you visit other websites. In addition, we link the advertising target groups with cross-device functions from Google. This enables us to display interest-based, personalized advertising messages that have been tailored to you based on your usage and surfing behavior on one device (e.g. your mobile phone) on another device (e.g. a tablet or PC).

Object to personalized advertising

You can adjust the advertising settings in your Google account. To do so, click on the following link and log in: https://adssettings.google.com/authenticated. Outside of your Google account, you can object to personalized advertising at the following link: https://www.google.com/settings/ads/onweb/ (the setting then only applies to the device and browser currently being used).

On what legal basis do we process your data?

As a website operator, we have a legitimate interest in the effective marketing of our services and products. The data processing is therefore lawful according to Art. 6 Para. 1 lit. f) GDPR. In the event that you have, for example, consented to the storage of cookies or otherwise consented to data processing by Google Analytics Remarketing, Art. 6 Para. 1 lit. a) GDPR is the sole legal basis. You can revoke your consent at any time with effect for the future.

Google Conversion Tracking

Was ist Google Conversion Tracking?

Tool for analyzing user behavior from Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Irland

Where can you find more information about data protection with Google Conversion Tracking?

https://www.google.de/intl/de/policies/privacy/

On what basis do we transfer your data to the USA?

Google adheres to the European Commission’s standard contractual clauses (https://privacy.google.com/businesses/compliance)

How do we process your data?

We are always interested in optimizing our website for users and placing advertising in the best possible way. For this purpose, we also use Google Conversion Tracking. With its help, we can record whether and how often visitors to our website have clicked on certain buttons and which products have been viewed and purchased particularly frequently (conversion statistics). In the course of data collection and storage, we do not receive any information with which we can personally identify individual visitors. Google itself uses cookies or similar recognition technologies for identification.

On what legal basis do we process your data?

As a website operator, we have a legitimate interest in analyzing user behavior for the purpose of optimizing our website and the advertising placed there. The data processing is therefore lawful according to Art. 6 Para. 1 lit. f) GDPR. In the event that you have, for example, consented to the storage of cookies or otherwise consented to data processing by Google Conversion Tracking, Art. 6 Para. 1 lit. a) GDPR is the sole legal basis. You can revoke your consent at any time with effect for the future.

Google DoubleClick

What is Google DoubleClick?

Tool for personalized advertising from Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Irland

Has a data processing contract been concluded with Google DoubleClick?

And

Where can you find more information about data protection at Google DoubleClick?

https://www.google.de/intl/de/policies/privacy/ and https://policies.google.com/technologies/ads

On what basis do we transfer your data to the USA?

Google adheres to the European Commission’s standard contractual clauses (https://privacy.google.com/businesses/compliance)

How can you prevent data processing?

By objecting to personalized advertising in your Google Account or on the page https://www.google.com/settings/ads/onweb/

How do we process your data?

We use DoubleClick to show you advertising across the entire Google advertising network that is tailored to your interests. The ads appear, for example, in Google search results or in advertising banners that are connected to DoubleClick. In order to show you the right advertising, Google DoubleClick must recognize you. This is why the tool places cookies on your computer or uses other technologies to

Recognition, e.g. device fingerprinting. Google creates pseudonymous user profiles from the collected data.

On what legal basis do we process your data?

As a website operator, we have a legitimate interest in targeted advertising measures. The data processing is therefore lawful according to Art. 6 Para. 1 lit. f) GDPR. In the event that you have, for example, consented to the storage of cookies or otherwise consented to data processing by Google DoubleClick, Art. 6 Para. 1 lit. a) GDPR is the sole legal basis. You can revoke your consent at any time with effect for the future.

Facebook Pixel

What is Facebook Pixel?

User behavior analysis tool that measures the effectiveness of advertising on Facebook

Who processes your data?

Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Irland

Has a data processing contract been concluded with Facebook Pixel?

And

Where can you find more information about Facebook Pixel privacy?

https://de-de.facebook.com/about/privacy/

On what basis do we transfer your data to the USA and other third countries?

Facebook adheres to the standard contractual clauses of the European Commission (see https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381)

How can you prevent data processing?

If you have a Facebook account: Deactivate the remarketing function “Custom Audiences” in the

Advertising settings area (https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen).

If you do not have a Facebook account: Disable usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

How do we process your data?

We use the Facebook Pixel on our website. The analysis tool helps us to learn more about the behavior of visitors to our website after they have clicked on one of our advertisements on Facebook.

This allows us to measure how effective our Facebook advertising is and to align future advertising measures with the knowledge gained. The data that Facebook collects via the pixel is anonymous to us as the operator of this website. This means that we cannot identify you as a visitor. However, the data is stored and processed by Facebook. Facebook uses the pixel to establish a connection to your Facebook account and also uses the data to place advertisements within and outside the network (see Facebook data usage policy). During storage and processing, Facebook also transmits the data to the USA and other third countries.

If you have a Facebook account, you can deactivate the “Custom Audiences” remarketing function in the Ad Settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen.

If you do not have a Facebook account, you have the option of deactivating usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

On what legal basis do we process your data?

As a website operator, we have a legitimate interest in effective advertising measures in social networks. The data processing is therefore lawful according to Art. 6 Para. 1 lit. f) GDPR. In the event that you have, for example, consented to the storage of cookies or otherwise consented to data processing by Facebook, Art. 6 Para. 1 lit. a) GDPR is the sole legal basis. You can revoke your consent at any time with effect for the future.

Plugins and tools

YouTube (with enhanced data protection)

What is YouTube?

Video platform

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Irland

Where can you find more information about privacy at YouTube?

https://policies.google.com/privacy?hl=de

How do we process your data?

You can watch YouTube videos on our website. Google, as the provider of YouTube, collects and stores certain information about you. However, since we use YouTube in enhanced data protection mode, this only happens when you start a video. In concrete terms, the following happens in this case:

Google's servers are informed which of our pages have been visited from your device. If you are logged into your YouTube account while surfing, Google can assign your surfing behavior directly to your personal profile. If you do not want this, you must log out of your YouTube account before you continue surfing the Internet.

Google receives information about visitors to our website through cookies, device fingerprinting or similar recognition technologies. The company then uses this information to create video statistics, make its application more attractive to users and prevent fraud attempts.

Your data may also be processed beyond this scope. However, we are not aware of the details. We also have no influence on the processing.

Even if you do not start a YouTube video on our website, Google will establish a connection to its DoubleClick network and possibly also to other partners. The enhanced data protection mode does not mean that Google does not process any of your data at all when you visit our website.

On what legal basis do we process your data?

By embedding YouTube videos, we want to make our website and our services and offers more appealing. This is our legitimate interest as a company and is therefore lawful according to Art. 6 (1) (f) GDPR.

If you have consented to data processing, we will process your data exclusively on the basis of Art. 6 Paragraph 1 Letter a) GDPR. You can revoke your consent at any time. From the time of revocation, we are no longer permitted to process your data.

OpenStreetMap

What is OpenStreetMap?

Map service of the OpenStreetMap Foundation

Who processes your data?

OpenStreetMap-Foundation (OSMF), 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, Großbritannien

Where can you find more information about data protection at OpenStreetMap?

https://wiki.osmfoundation.org/wiki/Privacy_Policy

How do we process your data?

We use maps from the OpenStreetMap Foundation on our website. This means that your IP address and information about your surfing behavior are forwarded to the Foundation and stored there when you visit our website. For this purpose, the Foundation leaves cookies on your device or uses comparable recognition technologies. If you have allowed your

If the location can be determined, OpenStreetMap also stores this data.

On what legal basis do we process your data?

The OpenStreetMap maps ensure that the locations indicated on our website are easier for visitors to find. As a company, we have a legitimate interest in this. The data processing is therefore lawful according to Art. 6 Para. 1 lit. f) GDPR.



If you have consented to data processing, we will process your data exclusively on the basis of Art. 6 Paragraph 1 Letter a) GDPR. You can revoke your consent at any time. From the time of revocation, we are no longer permitted to process your data.

Google reCAPTCHA

What is Google reCAPTCHA?

Test tool for distinguishing between people and computers from Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Irland

Where can you find more information about privacy at Google?

https://policies.google.com/privacy?hl=de

On what basis do we transfer your data to the USA?

Google adheres to the European Commission’s standard contractual clauses (https://privacy.google.com/businesses/compliance)

How do we process your data?

We use Google reCAPTCHA to check whether data entered into forms on our website comes from a human or a computer. For you, this means that the test tool analyzes your behavior as a visitor to our website based on various characteristics. The analysis does not begin when you use the test tool, but rather when you visit our website. Various data is recorded, such as the IP address, the length of time spent on our website and mouse movements made. The data is forwarded to Google.

On what legal basis do we process your data?

As a company, we have a legitimate interest in protecting our web offerings from spam and abusive spying. Data processing is therefore lawful according to Art. 6 Para. 1 lit. f) GDPR. If you have consented to data processing, we will process your data exclusively on the basis of Art. 6 Para. 1 lit. a) GDPR. You can revoke your consent at any time. From the time of revocation, we are no longer permitted to process your data.

Online bookings and booking enquiries

Our website uses the booking technology of GMS Hotelsoftware Division GmbH Co OG, Schillerstr. 25-27, 5020 Salzburg ("GMS"). We have concluded a data processing agreement with GMS.

If you make an online booking or a booking request via our website, we require your email address, your travel dates, the product you have booked and your title, first and last name, in order to process your booking. In individual cases, we will also ask for your telephone number so that we can contact you quickly, particularly in the event of unforeseeable circumstances that affect your booking.

To calculate the valid travel price, we need the dates of your stay, the product you have chosen, the number of people traveling and whether they are adults or children. If you are traveling with children, we will also ask you for the children's ages to calculate the correct travel price. We will also ask you for the desired payment method for the trip. If an advance payment is required for your travel parameters, you will be forwarded to a payment service provider for the secure processing of the advance payment after selecting the desired payment method. Any other information provided in the form is voluntary.

Your data for online booking and online booking requests is processed on the basis of Art. 6 Paragraph 1 Letter b of GDPR and serves to fulfill a contract or to carry out pre-contractual measures. The data you send to us will remain with us until the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular statutory retention periods - remain unaffected. In order to ensure that processing complies with data protection regulations, we have concluded a contract for order processing with GMS.

Giggles

Our website uses the booking technology of Giggle GmbH, Müllerstraße 1, 6020 Innsbruck (Giggle). We have concluded a data processing agreement with Giggle.

If you make an online booking for an event or service via our website, we will need your email address, your travel dates, the product you have booked, your title, and your first and last name to process your booking. In individual cases, we will also ask for your telephone number so that we can contact you quickly, particularly in the event of unforeseeable circumstances that affect your booking.

Your data for online booking is processed on the basis of Art. 6 Paragraph 1 Letter b of GDPR and serves to fulfill a contract or to carry out pre-contractual measures. The data you send to us will remain with us until the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular statutory retention periods - remain unaffected.

Userlike

This site uses chat software from Userlike UG (limited liability), Probsteigasse 44-46, 50670 Cologne, Germany. You can use the chat like a contact form to chat with our employees in almost real time. When you start the chat, the following personal data is collected:



Date and time of access, browser type/version, IP address, operating system used, URL of the previously visited website, amount of data sent. And if specified: first name, last name, and email address.

Depending on the course of the conversation with our employees, additional personal data may be entered in the chat. The type of data depends largely on your query or the problem you describe to us. The processing of all this data serves to provide you with a quick and efficient contact option and thus to improve our customer service.

All of our employees have been and will continue to be trained on data protection and how to handle customer data safely and confidentially. All of our employees are obliged to maintain confidentiality and have signed an addendum to their employment contracts committing to maintaining confidentiality and observing data protection.

When you visit the kaltenhauser.com website, the chat widget is loaded in the form of a JavaScript file from AWS Cloudfront. The chat widget technically represents the source code that runs on your computer and enables the chat.

In addition, we save the chat history for a period of 90 days. This serves the purpose of saving you from having to provide extensive information about the history of your request and for constant quality control of our chat offer. The processing is therefore permitted in accordance with Art. 6 Paragraph 1 Letter f GDPR. If you do not want this, you can let us know using the contact details listed below. Saved chats will then be deleted by us immediately.

The storage of chat data also serves the purpose of ensuring the security of our information technology systems. This is also our legitimate interest, which is why processing is permitted under Art. 6 (1) (f) GDPR.

Commerce and payment providers

Customer and contract data

How do we process your data?

If we conclude a contract with you, we require certain personal data from you. We only collect, process and use this data to the extent that it is necessary to establish our legal relationship, to shape its content or to change it. If you can only use our services via our website or if the services are billed via the website, we also collect usage data if this is necessary to enable you to use our services or to bill for the service used.

How long do we store your data?

We will store your data until our legal relationship ends, unless we are legally obliged to keep the data for a longer period.

On what legal basis do we process your data?

We store your data in order to fulfil the contract with you or to carry out pre-contractual measures. The basis for data processing is therefore Art. 6 Para. 1 lit. b) GDPR.

Data transfer when using services and digital content

How do we process your data?

To process the payment, we transmit your data to a payment service or the credit institution responsible for processing the payment. We only pass on data that is absolutely necessary for the payment process. If we want to pass on additional data, we will obtain your consent.

On what legal basis do we process your data?

We pass on your data in order to fulfil the contract we have concluded with you. The basis for data processing is therefore Art. 6 Para. 1 lit. b) GDPR. If you have consented to the transfer of your data, the data processing is based on Art. 6 Para. 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future.

This GDPR-compliant privacy policy was created with the intelligent data protection generator of the PRIVE data protection software.