Data Protection

§ 1 Information about the collection of personal data

(1) In the following we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. B. name, address, e-mail addresses, user behavior.

(2) You can find the contact details of those responsible in accordance with Article 4 (7) of the EU General Data Protection Regulation (GDPR) at our Imprint entnehmen.

(3) The data protection officer of the person responsible is:

Ricardo Graf
ACP IT Solutions GmbH
Schnorrstr. 70
01069 Dresden
Germany
Phone: 0351 6 46 39 – 100
datenschutz@primestar-hotels.com

(4) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, possibly your name and telephone number) will be stored by us in order to answer your questions. We delete the data arising in this context after the storage is no longer necessary, or restrict the processing if there are statutory storage obligations.

(5) If we use commissioned service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail below about the respective processes. We also state the specified criteria for the storage period.

§ 2 Your rights

(1) Sie haben gegenüber uns folgende Rechte hinsichtlich der Sie betreffenden personenbezogenen Daten:

– Right to information,

– Right to rectification or erasure,

– Right to restriction of processing,

– Right to object to processing,

– Right to data portability.

 (2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us. The contact details of the supervisory authorities responsible for those responsible can be found here:

Berlin               https://www.bfdi.bund.de/SharedDocs/Adressen/LfD/Berlin.html?nn=5217144

§ 3 Collection of personal data when visiting our website

(1) If you only use the website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you want to view our website, we collect the following data that is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 Para. 1 S. 1 lit. f GDPR ):

- IP address

– The date and time of the request

– Content of the request (specific page)

- Access Status/HTTP Status Code

– Website from which the request comes

–   Browser

– called domain

This data is automatically deleted after 90 days.

(2) Use of cookies:

This website uses cookies from various services. We use the Cookiebot service to obtain your consent. By agreeing to the use of cookies, you also give your consent to the processing of your personal data by the relevant services.

For further explanations on this, we refer to the "Cookiebot" section in §5 of this declaration.

§ 4 Use of other functions of our website

(1) Contact form

Wenn Sie das Kontaktformular auf unserer Webseite nutzen, so erfassen wir folgende personenbezogenen Daten:

a) mandatory fields

• Name
• Your e-mail address

b) optional fields:

• Subject
• Phone number
• Your message

This data is used by us to answer your request. They remain stored in our system for as long as is necessary to answer the request itself or for the contractual obligations that may result from it. If no contractual obligations arise from the request, the data will be deleted from our system after three months at the latest. The legal basis is Art. 6 Para. 1 S. 1 lit. b GDPR.

(2) Online applications

Wenn Sie das Bewerbungsformular auf unserer Webseite nutzen, so erfassen wir folgende personenbezogenen Daten:

a) mandatory fields

• First and Last Name
• Your e-mail address
• Phone number
• Adressdaten: Straße, Postleitzahl, Ort

b) Optional fields:

• Your message
• Your submitted application documents

We use this data to process your application. The legal basis for this is Art. 6 Para. 1 S. 1 lit. f GDPR. Our legitimate interest here is the recruitment of qualified personnel.

If your application is successful, this data will be transferred to your personnel documents to carry out your employment relationship. The legal basis is Section 26 (1) BDSG.

If your application is unsuccessful, this data will remain in our system for six months to defend against any legal claims and will then be deleted. The legal basis for this legitimate interest is Article 6 Paragraph 1 Sentence 1 Letter f GDPR.

§ 5 Use of External Functions

(1) Google

a)Google Fonts

We use Google Fonts (formerly Google Web Fonts) on our website, a service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as "Google"). Google Fonts enables us to use external fonts, which are loaded into the browser cache by your web browser when you access our website. This is necessary to enable your browser to display our texts in a visually improved manner. If your browser does not support this function, a standard font will be used by your computer for display.

These fonts are integrated by a server call, usually on a Google server in the USA. This transmits to the server which of our Internet pages you have visited. The IP address of the browser end device is also stored by Google. We have no influence on the scope and further use of the data collected and processed by Google through the use of Google Web Fonts.

We use Google Fonts for optimization purposes, in particular to improve the use of our website for you and to make it more user-friendly. This is also our legitimate interest in the processing of the above data by the third-party provider. The legal basis is Art. 6 paragraph 1 sentence 1 lit. f GDPR.

b) Google Maps

On this website we use the offer of Google Maps. This enables us to show you interactive maps directly on the website and enables you to conveniently use the map function. The legal basis is Art. 6 paragraph 1 sentence 1 lit. f GDPR.

If you call up the corresponding sub-page of one of our hotels, Google will receive the information specified under Section 3 (1) from you, whereby the IP address will not be transmitted anonymously. This information will be transmitted independently of any user account that may exist with Google. If you are logged in to Google, this data will be linked to your user account. If you do not want this, you must log out of Google before calling up the relevant page.

Google stores your data as usage profiles and uses them for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

c) Google Analytics

This website uses the "Google Analytics" service to analyze how users use the website. The service uses "cookies" - text files that are stored on your end device. The information collected by the cookies is usually sent to a Google server in the USA and stored there.

You can agree or object to the use of the corresponding cookies, and thus the above-mentioned service, in the Cookiebot consent tool. In this respect, the processing of your personal data takes place on the basis of your consent in accordance with Article 6 (1) sentence 1 lit. a GDPR.

IP anonymization takes effect on this website. The IP address of the user is shortened within the member states of the EU and the European Economic Area. This shortening eliminates the personal reference to your IP address. As part of the agreement on the order data agreement, which the website operators have concluded with the third-party provider, the website operator uses the information collected to evaluate website usage and website activity and provides services related to internet usage.

You have the option of preventing the storage of cookies on your device by making the appropriate settings in your browser. There is no guarantee that you will be able to access all functions of this website without restrictions if your browser does not accept cookies.

You can also use a browser plug-in to prevent the information collected by cookies (including your IP address) from being sent to and used by the third-party provider. The following link takes you to the corresponding plugin:

https://tools.google.com/dlpage/gaoptout?hl=de

Alternatively, you can prevent by clicking on 

<a onclick="“alert(‚Google" analytics wurde deaktiviert‘);“ href="/en/“javascript:gaOptout()“/">diesen Link</a>,

that Google Analytics collects data about you within this website. By clicking on the link above, you download an "opt-out cookie". Your browser must therefore always allow the storage of cookies. If you delete your cookies regularly, you will need to click the link again each time you visit this website.

d) Information on the third-party provider Google:

Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Irland

Further information on data protection can be found in Google's data protection declaration:

https://policies.google.com/privacy?hl=de&gl=de

(2) Mailchimp

We use Mailchimp to send our newsletter. This enables us to contact you directly. In addition, we analyze your usage behavior of our newsletter in order to optimize our offer.

For this we pass on the following personal data to Mailchimp:

E-mail address
First name
Last name

Our e-mails contain a link with which you can update your personal data.

Mailchimp is the recipient of your personal data and works for us as a processor when it comes to sending our newsletter. The processing of the data specified under this section is not required by law or contract. We cannot send you a newsletter without your consent and the transmission of your personal data.

In addition, Mailchimp collects the following personal data using cookies and other tracking methods: Information about your device (IP address, device information, operating system, browser ID, information about the application you use to read your emails and other information via hardware and internet connection. Usage data is also collected, such as the date and time when you opened the email/campaign and browsing activities (e.g. which emails/web pages were opened). Mailchimp needs this data to ensure the security and reliability of the Systems to ensure compliance with the terms of use and the avoidance of misuse. This corresponds to the legitimate interest of the provider (according to Art. 6 Para. 1 lit. f DSGVO) and serves to execute the contract (according to Art. 6 Para. 1 lit. b GDPR). Mailchimp also evaluates performance data, such as the delivery statistics of emails and other communication data. This information is used to compile usage and performance statistics of the Services.

Mailchimp also collects information about you from other sources. In an unspecified period and scope, personal data is collected via social media and other third-party data providers. We have no influence on this process.

The legal basis for this processing is your consent in accordance with Article 6 (1) (a) GDPR. You can revoke your consent to the processing of your personal data at any time. There is a corresponding link in all mailings. In addition, the revocation can be made via the specified contact options. By declaring the revocation, the legality of the processing that has taken place so far is not affected.

Your data will be processed as long as you have given your consent. Apart from that, these will be deleted after the end of the contract between us and Mailchimp, unless legal requirements require further storage.

Mailchimp has implemented compliance measures for international data transfers. These apply to all worldwide activities in which mailchimp processes personal data of natural persons in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs).

Third Party Information

The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE Suite 5000, Atlanta, GA 30308 USA

Further information on data protection can be found in the following statements by the provider:

https://mailchimp.com/help/mailchimp-intuit-privacy-faq/

(3) Cookiebot

We use the Cookiebot consent management service to obtain your consent to the setting of cookies for various services. You can find out which services these are specifically in the corresponding Cookiebot dialogue when you visit our website for the first time.

We are legally obliged to obtain your consent. Accordingly, the legal basis for this is Art. 6 Para. 1 S. 1 lit. c GDPR.

The following data is processed here:

• Anonymized IP address
• Date & time of your consent
• Browser user agent
• URL from which consent was sent
• Randomly generated, anonymous and encrypted key
• Your consent status

The key mentioned above and your consent status are stored in the cookie "CookieConsent" in your browser for 12 months. With this cookie, your consent can be traced. If you delete this cookie, the Cookiebot dialog will appear again the next time you visit our website.

Third Party Information

Cybot A/S, Havnegade 39, 1058 Kopenhagen, Dänemark

https://www.cookiebot.com/de/privacy-policy/

§ 6 Use of social media links

On our website we use links to our company's appearances on various social media platforms. If you use these links, you leave our website and thus the scope of this data protection declaration.

If you visit one of our social media sites, the respective platform operator will process your personal data. Here we are jointly responsible with this operator for the data processing operations within the meaning of Art. 26 GDPR, provided that we actually make a joint decision with the operator of the social network about data processing and we also have an influence on data processing. As far as possible, we have concluded agreements on joint responsibility with the platform operators in accordance with Art. Art. 26 GDPR.

We would like to point out that, despite the joint responsibility according to Art. 26 GDPR, we do not have full influence on the data processing of the individual providers. Our options here are significantly influenced by the company policies of the respective platform operators.

In principle, you can assert your rights both against us and against the respective platform operator. If you assert this against us, we only have the option of forwarding it to the operator. We have no influence on the further procedures of the operator.