Privacy policy
In this privacy policy, we inform you about the processing of your personal data.
If you would like to change your data protection settings (grant consent or revoke consent already granted), click here to change your settings.
Responsible
Ulrich Blatter, Wellnesshotel Sonnenhof & Sonnhalde, Hohlgasse 3, 79777 Ühlingen-Birkendorf, Germany, info@sonnenhof-sonnhalde.de, 0774392010
Data Protection Officer
You can reach our data protection officer at
z. For the attention of Maurice Blatter,
Hohlgasse 3
79777 Ühlingen-Birkendorf
Phone: 0774392010
E-mail address: info@sonnenhof-sonnhalde.de
Hosting
1&1 IONOS SE
We host our website with our processor 1&1 IONOS, 1&1 IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.
Connection data is processed for the purpose of providing and delivering the website. For the sole purpose of delivering and providing the website, the data is not stored beyond the call.
The legal basis for data processing is the legitimate interest (absolute technical necessity for the provision and delivery of the "website" service expressly requested by you by calling it up) in accordance with Art. 6 Para. 1 lit. f GDPR.
In order to operate the website, the connection data and other personal data are also processed as part of various other functions and services. Detailed information on this is provided in this privacy policy for the individual functions and services.
Server Log Files
Connection data is processed for the purpose of monitoring the technical function and increasing the operational security of our web host. The duration of processing is limited to 30 days.
The legal basis for data processing is the legitimate interest (absolute technical necessity of a server log file as a basic database for error analysis and for security measures in the context of the "website" service expressly requested by your call) in accordance with Art. 6 Para. 1 lit. f GDPR.
Contact form
On our website, you have the option of contacting us directly using a contact form. After submitting the contact form, the personal data entered by you will be processed by the controller for the purpose of processing your enquiry on the basis of the consent given by you by submitting the form in accordance with Art. 6 para. 1 lit. a GDPR until revoked.
There is no legal or contractual obligation to provide personal data. The only consequence of not providing it is that you will not be able to submit your request and we will not be able to process it.
Security services
On this website, we use the services of security service providers such as Captcha services to avoid non-human and automated entries.
Facebook Pixel
This website uses Facebook's visitor action pixel to measure conversions. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the data collected is also transferred to the USA and other third countries.
This allows the behaviour of site visitors to be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimised.
The data collected is anonymous for us as the operator of this website; we cannot draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with the
Facebook Data Usage Policy
can use. This enables Facebook to place adverts on Facebook pages and outside of Facebook. This use of the data cannot be influenced by us as the site operator.
Facebook Pixel is used on the basis of Art. 6 para. 1 lit. f GDPR (without the use of cookies). The website operator has a legitimate interest in effective advertising measures including social media. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum
and
https://de-de.facebook.com/help/566994660333381
You can find further information on protecting your privacy in Facebook's privacy policy:
https://de-de.facebook.com/about/privacy/
You can also use the remarketing function "Custom Audiences" in the ad settings section under
https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen
deactivate it. You must be logged in to Facebook to do this.
If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance:
http://www.youronlinechoices.com/de/praferenzmanagement/
Facebook Ads
The website operator uses Facebook Ads. Facebook Ads is an online advertising programme of Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Facebook Ads enables us to display adverts on the social network "Facebook" when the user enters certain search terms on Facebook (keyword targeting). Furthermore, targeted adverts can be displayed based on the user data available on Facebook (e.g. location data and interests) (target group targeting). As the website operator, we can evaluate this data quantitatively by analysing, for example, which search terms led to the display of our ads and how many ads led to corresponding clicks.
The use of Facebook Ads is based on Art. 6 para. 1 lit. a GDPR.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum
and
https://de-de.facebook.com/help/566994660333381
You can find further information on protecting your privacy in Facebook's privacy policy:
https://de-de.facebook.com/about/privacy/
Google reCAPTCHA
If you give your consent, we will process your data with the service Google reCaptcha, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as joint controllers of your personal data for the purpose of preventing non-human and automated input. In doing so, we enable the service to set cookies, collect connection data and data from your web browser. We also enable the service to calculate a user ID to uniquely identify the user within the advertising network operated by Google. Data is stored on your device for a period of up to two years.
The legal basis for data processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR. If you do not give your consent, you will not be able to use reCaptcha and the associated forms.
You can revoke any consent you have already given by sending the Data protection settings change.
The Google Group transfers your personal data to the USA. The legal basis for the transfer of data to the USA is your consent in accordance with Art. 49 para. 1 lit a in conjunction with Art. 6 para. 1 lit a GDPR in conjunction with §25 TTDSG. You were already informed before giving your consent that the USA does not have a level of data protection equivalent to the standards of the EU. In particular, US intelligence services can access your data without you being informed and without you being able to take legal action against this. For this reason, the European Court of Justice has declared the previous adequacy decision (Privacy Shield) invalid in a judgement.
Newsletter services
Rapidmail
Once you have given your consent, your personal data will be processed for the purpose of sending electronic direct advertising (e.g. sending newsletters) until you withdraw your consent.
For the purpose of sending the newsletter, we use the processor Rapidmail, rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg, Germany.
The legal basis for the processing is the consent given by you in accordance with Art. 6 para. 1 lit. a GDPR. There is no legal or contractual obligation to grant consent. The only consequence of not granting consent is that you will not receive a newsletter from us.
Right of objection
If your personal data is processed on the basis of legitimate interest, you have the right to object to this processing.
If there are no compelling legitimate grounds for the processing on our part, the processing of your data will be discontinued on the basis of this legal basis.
You also have the right to object to the processing of your personal data for the purpose of direct marketing. If you object, your personal data will no longer be processed for the purpose of direct marketing.
The legality of the data processed prior to the objection is not affected by the objection.
Right of cancellation
You have the right to withdraw any consent you have already given at any time by contacting the Data protection settings change.
If you have consented to receiving electronic advertising, you can withdraw your consent by clicking on the unsubscribe link. In this case, processing will be discontinued unless there is another legal basis.
The legality of the data processed up to the time of cancellation is not affected by the cancellation.
Rights of data subjects
You also have the right to information, correction, deletion and restriction of the processing of personal data.
If the legal basis for the processing of your personal data is your consent or a contract concluded with you, you also have the right to data portability.
You also have the right to lodge a complaint with the supervisory authority. You can find more information about the supervisory authorities in the European Union at here.
Who we are
The Address of our website is: https://sonnenhof-sonnhalde.de.
Comments
When visitors post comments on the website, we collect the data displayed in the comment form, the visitor's IP address and the user agent string (which identifies the browser) to help detect spam. An anonymised character string (also known as a hash) can be created from your email address and sent to the Gravatar service to check whether you are using it. You can find the Gravatar service's privacy policy here: https://automattic.com/privacy/. After your comment has been approved, your profile picture will be publicly visible in the context of your comment.
Media
If you are a registered user and upload photos to this website, you should avoid uploading photos with an EXIF GPS location. Visitors to this website could download photos stored on this website and extract their location information.
Cookies
If you write a comment on our website, this can be a consent to save your name, e-mail address and website in cookies. This is a convenience feature so that you don't have to re-enter all this data when you write another comment. These cookies are stored for one year. If you have an account and log in to this website, we will set a temporary cookie to determine if your browser accepts cookies. This cookie does not contain any personal data and is discarded when you close your browser. When you log in, we will set up some cookies to save your login information and display options. Login cookies expire after two days and cookies for display options after one year. If you select "Stay logged in" when you log in, your login will be maintained for a fortnight. When you log out of your account, the login cookies are deleted. If you edit or publish an article, an additional cookie will be stored in your browser. This cookie does not contain any personal data and only refers to the post ID of the article you have just edited. The cookie expires after one day.
Embedded content from other websites
Posts on this website may contain embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves exactly as if the visitor had visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking services and record your interaction with this embedded content, including your interaction with the embedded content if you have an account and are logged in to this website.
Who we share your data with
If you request a password reset, your IP address will be included in the reset email.
How long we store your data
When you write a comment, it is saved indefinitely, including metadata. This allows us to automatically recognise and approve follow-up comments instead of holding them in a moderation queue. For users who register on our website, we also store the personal information they provide in their user profiles. All users can view, change or delete their personal information at any time (the user name cannot be changed). Website administrators can also view and change this information.
What rights you have to your data
When you have an account on this website or have written comments, you can request an export of your personal data from us, including all data that you have provided to us. In addition, you can request the deletion of all personal data that we have stored about you. This does not include data that we need to store for administrative, legal or security reasons. must be kept for the necessary purposes.
Where your data is sent
Visitor comments could be generated by an automated Service for spam detection can be analysed.
