Imprint
von Deska Townhouses GmbH & Co. KG
Ivy House
Klosterallee 70 / 72
D-20144 Hamburg
T +49 (0)40 423 292 00
F +49 (0)40 422 5757
townhouses@vondeska.de
White House
Rothenbaumchaussee 197
D-20149 Hamburg
T +49 (0)40 180 390 210
F +49 (0)40 180 390 233
townhouses@vondeska.de
HRA 104734 - Hamburg Local Court
UID (VAT): EN 250143034
Personally liable partner:
von Deska Hotelverwaltungsgesellschaft mbH
Managing Director with power of representation:
Karin Siegle-Kvarnström and Valerie Siegle
HRB 98786 - Hamburg Local Court
Information on online dispute resolution pursuant to Art. 14 para. 1 ODR-VO: The European Commission provides a platform for online dispute resolution (OS), which can be found at https://ec.europa.eu/consumers/odr/ .
Privacy Policy
1. General
The protection and security of personal data is important to us. We treat your personal data confidentially and in accordance with the legal data protection regulations as well as this data protection declaration.
This data protection declaration only refers to our website. If you are forwarded to other sites via links on our pages, please inform yourself there about the respective handling of your data.
2. Definitions of terms
In our privacy policy, we use terms that are explained below:
a) Personal data
Personal data means any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, online identifier or one or more specific characteristics which express the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.
(b) Processing
Processing" means any operation or set of operations which is carried out with or without the aid of automated means relating to personal data, such as collection, recording, organisation, sorting, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or association, qualification, erasure or destruction.
c) Person responsible
The controller shall be the natural or legal person, public authority, agency or other body which alone or jointly with others decides on the purposes and means of the processing of personal data; where the purposes and means of such processing are laid down by Union law or by the law of the Member States, the controller or the specific criteria for his designation may be laid down in Union law or in the law of the Member States.
(d) Recipient
The recipient is a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not that person is a third party. However, authorities which may receive personal data in the course of a specific investigation task under Union or national law shall not be considered as recipients and the processing of such data by those authorities shall be carried out in accordance with the applicable data protection rules and in accordance with the purposes of the processing.
(e) Third parties
Third party means any natural or legal person, public authority, agency or other body, other than the data subject, the controller, the processor and the persons authorised to process the personal data under the direct responsibility of the controller or processor.
(f) Profiling
Profiling is any automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to the work performance, economic situation, health, personal preferences, interests, reliability, conduct, whereabouts or movements of that natural person.
(g) Consent
The "consent" of the data subject shall mean any voluntary, informed and unambiguous expression of his or her will in the particular case, in the form of a statement or other unambiguous act of confirmation by which the data subject indicates his or her consent to the processing of his or her personal data.
3. The name and contact details of the controller and of the company data protection officer
This data protection information applies to data processing by:
Responsible:
von Deska Townhouses GmbH & Co. KG (in the following: von Deska Townhouses)
Rothenbaumchaussee 197
D- 20149 Hamburg
Germany
Email: townhouses@vondeska.de Phone: +49 (0)40 180 390 210
Phone: +49 (0)40 180 390 210
Fax: +49 (0)40 180 390 233
The responsible contact persons can be found in the imprint.
4. The collection and storage of personal data and the nature and purpose of their use
a) When visiting the website
When you visit our website https://www.vondeska-townhouses.de, the browser used on your terminal device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until it is automatically deleted:
- IP address of the requesting computer
- Date and time of access,
- Name and URL of the retrieved file,
- Website from which access is made (referrer URL),
- browser used and, if applicable, the operating system of your computer as well as the name of your access provider.
The data mentioned will be processed by us for the following purposes:
- Guarantee of a smooth connection setup of the website,
- Ensure comfortable use of our website,
- Evaluation of system safety and stability as well as
- for other administrative purposes.
The legal basis for data processing is Art. 6 Para. 1 S. 1 lit. f DSGVO. Our legitimate interest follows from the purposes listed above for the collection of data. In no case do we use the collected data for the purpose of drawing conclusions about your person.
In addition, we use cookies and analysis services when you visit our website. You will find more detailed information on this under sections 6 and 7 of this data protection declaration.
b) When registering for our newsletter
If you have expressly consented in accordance with Art. 6 para. 1 sentence 1 lit. a DSGVO, we will use your e-mail address to send you our newsletter on a regular basis. For
the receipt of the newsletter the specification of an e-mail address is sufficient.
You can unsubscribe at any time, for example via a link at the end of each newsletter. Alternatively, you can also send your unsubscribe request at any time to datenschutz@vondeska.de by e-mail.
c) When using our booking request
If you send us enquiries via a booking enquiry, your details from the enquiry form including the contact data provided by you there will be stored by us for the purpose of processing the enquiry and in the event of follow-up enquiries. These data will not be passed on without your consent.
The data entered in the contact form is processed both to fulfil our pre-contractual or contractual obligations (Art. 6 Para. 1 lit. b DSGVO) and also on the basis of your consent (Art. 6 Para. 1 lit. a DSGVO). You can revoke this consent at any time. An informal e-mail notification to us is sufficient for this purpose. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
The data entered by you in the contact form will remain with us until you request deletion, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected.
d) When using our booking system
For room reservations we use the service "protel Web Booking Enging", which is operated by protel hotelsoftware GmbH, Europaplatz 8, 44269 Dortmund, Germany. This enables you to make a room reservation directly on our website. In the course of the reservation the following personal data will be collected from you:
- Account data
- name
- Address
- Telephone and fax number
- email address
- free text
This data is transmitted to protel. Further information on data protection at protel can be found here: http://www.protel.net/de/impressum/
You can register with protel by entering your personal data. Then you do not have to re-enter your data every time you make a reservation.
For the new registration we collect master data (e.g. name, address), communication data (e.g. e-mail address) and access data (user name and password).
In order to ensure your proper registration and to prevent unauthorized registrations by third parties, you will receive an activation link by e-mail after your registration to activate your account. Only after successful registration do we permanently store the data you have transmitted in our system.
You can have us delete a customer account once it has been created at any time without incurring any costs other than the transmission costs according to the basic tariffs. A message in text form to the contact data mentioned under point 3 (e.g. e-mail, fax, letter) is sufficient for this. We will then delete your stored personal data insofar as we do not yet have to store it for the processing of orders or due to legal storage obligations.
The legal basis for data processing in accordance with the above paragraphs is Art. 6 Para. 1 S. 1 lit. a, b and f DSGVO. Our interests in data processing are in particular the initiation, conclusion and performance of contracts.
The simple reservation of rooms also constitutes our legitimate interest pursuant to Art. 6 Para. 1 S. 1 lit. f DSGVO.
An order processing contract exists with protel and we have carefully selected our contractors.
5. Passing on data
Your personal data will not be transferred to third parties for purposes other than those listed below.
We will only pass on your personal data to third parties if:
- you have given your express consent to this pursuant to Art. 6 para. 1 sentence 1 lit. a DSGVO,
- the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f DSGVO is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
- in the event that there is a legal obligation to pass on data pursuant to Art. 6 para. 1 sentence 1 lit. c DSGVO, and
- this is legally permissible and necessary for the processing of contractual relationships with you pursuant to Art. 6 Para. 1 S. 1 lit. b DSGVO.
6. Cookies we set on our side
We partly use cookies on our website. These are small files which your browser automatically creates and which are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware.
Information is stored in the cookie, which results in each case in connection with the specifically used terminal device. This does not mean, however, that we will gain immediate knowledge of your identity.
The use of cookies serves on the one hand to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages on our website. These are automatically deleted after leaving our site.
In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your terminal device for a specified period of time. If you visit our site again in order to use our services, it is automatically recognized that you have already been with us and which inputs and settings you have made so that you do not have to enter them again.
On the other hand, we use cookies in order to statistically record the use of our website and to evaluate it for the purpose of optimizing our services for you (see Section 6). These cookies enable us to automatically recognize that you have already visited our site when you visit it again. These cookies are automatically deleted after a defined period of time.
The data processed by cookies are necessary for the purposes mentioned to safeguard our legitimate interests and those of third parties in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR.
Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. The complete deactivation of cookies may, however, result in you not being able to use all the functions of our website.
7. analysis tools
(a) tracking tools
The tracking measures listed below and used by us are carried out on the basis of Art. 6 Para. 1 S. 1 lit. f GDPR. With the tracking measures used, we want to ensure that our website is designed to meet requirements and is continually optimised. On the other hand, we use the tracking measures in order to statistically record the use of our website and to evaluate it for you for the purpose of optimising our offer. These interests are to be regarded as legitimate within the meaning of the aforementioned provision.
The respective data processing purposes and data categories can be found in the corresponding tracking tools.
aa) Google Analytics
We use Google Analytics, a web analysis service provided by Google Inc., for the purpose of tailoring our pages to meet your needs and continually optimising them. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as "Google"). In this context, pseudonymised user profiles are created and cookies (see Section 6) are used. The information generated by the cookie about your use of this website such as:
- Browser type/version,
- operating system used,
- referrer URL (the previously visited page),
- Host name of the accessing computer (IP address),
- Time of the server request,
is transferred to a Google server in the USA and stored there. This information is used to evaluate the use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage for market research purposes and to tailor these internet pages to meet requirements. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of third parties. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymised so that an allocation is not possible (IP masking).
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en).
As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on this link (https://tools.google.com/dlpage/gaoptout). An opt-out cookie is set that prevents your data from being collected in the future when you visit this website. The opt-out cookie applies only to this browser and only to our website and is placed on your device. If you delete the cookies in this browser, you will need to set the opt-out cookie again.
Further information on data protection in connection with Google Analytics can be found in the Google Analytics help (https://support.google.com/analytics/answer/6004245?hl=en).
bb) Google Adwords Conversion Tracking
We also use Google Conversion Tracking to record the use of our website statistically and to evaluate it for you for the purpose of optimising our website. Google Adwords places a cookie (see paragraph 6) on your computer if you have reached our website via a Google advertisement.
These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages on the AdWords customer's website and the cookie has not expired, Google and the customer will be able to tell that the user clicked on the ad and was directed to that page.
Each Adwords customer receives a different cookie. Cookies cannot therefore be traced via the websites of Adwords customers. The information collected using the conversion cookie is used to generate conversion statistics for Adwords customers who have opted for conversion tracking. Adwords customers will know the total number of users who clicked on their ad and were directed to a page tagged with a conversion tracking tag. However, you will not receive any information that personally identifies users.
If you do not wish to participate in the tracking procedure, you can also refuse to set a cookie as required for this purpose - for example by setting your browser to generally deactivate the automatic setting of cookies. You can also deactivate cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com". Google's privacy policy on conversion tracking can be found here (https://services.google.com/sitestats/de.html).
b) Squarespace Analytics
This website uses Squarespace Analytics, a web analytics service provided by Squarespace Ireland Ltd. Le Pole House, Ship Street Great, Dublin 8, Ireland ("Squarespace"). Squarespace Analytics uses cookies. The data generated by cookies about the use of our website is transferred to a Squarespace server in the USA and stored there. Squarespace is certified under the EU-US Privacy Shield and is committed to complying with EU data protection legislation. Squarespace uses the data to evaluate the visitor's use of the website, to compile reports on the visitor's activities on the website and to provide other services related to the use of the website.
If Squarespace is legally obliged to do so or if third parties process the data on behalf of Squarespace, the data will be transferred to third parties. Under no circumstances will Squarespace associate your IP address with any other data held by Squarespace. You have the possibility to prevent the storage of cookies on your computer by appropriate browser settings. Our website will then still be accessible, but our service will then only function to a limited extent or no longer at all.
By using the website, you consent to the processing of data about you by Squarespace in the manner and for the purposes set out above, in order to compile visitor statistics on the use of the website and to improve the website. You can find out more at https://www.squarespace.com/privacy/
8. Social media plug-ins
We use social plug-ins of the social networks Facebook, Pinterest and Instagram on our website on the basis of Art. 6 Para. 1 S. 1 lit. f GDPR in order to make our company better known. The advertising purpose behind this is to be regarded as a legitimate interest in the sense of the GDPR. The responsibility for the data protection-compliant operation is to be guaranteed by their respective providers.
a) Facebook
On our website, social media plugins from Facebook are used to make their use more personal. For this we use the "LIKE" or "SHARE" button. This is an offer from Facebook. If you call up a page on our website that contains such a plugin, your browser establishes a direct connection with the Facebook servers. The content of the plugin is transmitted directly from Facebook to your browser and integrated into the website by it.
By integrating the plugins, Facebook receives the information that your browser has called the corresponding page of our website, even if you do not have a Facebook account or are not logged on to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there.
If you are logged in to Facebook, Facebook can assign your visit to our website directly to your Facebook account. If you interact with the plugins, for example by clicking the "LIKE" or "SHARE" button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your Facebook friends.
Facebook may use this information for the purpose of advertising, market research and tailoring Facebook pages to meet your needs. To this end, Facebook creates usage, interest and relationship profiles, e.g. to evaluate your use of our website with regard to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website and to provide other services associated with the use of Facebook.
If you do not want Facebook to associate the information collected through our website with your Facebook account, you must log out of Facebook before visiting our website. The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your rights in this regard and setting options to protect your privacy can be found in Facebook's data protection information (https://www.facebook.com/about/privacy/).
b) Pinterest
On our site we use social plugins of the social network Pinterest, which is operated by Pinterest Inc., 808 Brannan Street San Francisco, CA 94103-490, USA ("Pinterest"). If you access a page that contains such a plugin, your browser establishes a direct connection to Pinterest's servers.
The plugin transmits protocol data to the Pinterest server in the USA. This log data may include your IP address, the address of the websites visited, which also contain Pinterest functions, browser type and settings, date and time of the request, your use of Pinterest and cookies.
Further information on the purpose, scope and further processing and use of the data by Pinterest as well as your related rights and possibilities for the protection of your privacy can be found in Pinterest's privacy policy: https://about.pinterest.com/de/privacy-policy
c) Instagram
Our website also uses social plugins ("Plugins") from Instagram, which is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram").
The plugins are marked with an Instagram logo, for example in the form of an "Instagram camera".
When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to Instagram's servers. Instagram transmits the content of the plugin directly to your browser and integrates it into the page. This integration tells Instagram that your browser has visited the appropriate page on our site, even if you do not have an Instagram profile or are not logged into Instagram.
This information (including your IP address) is sent directly from your browser to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can directly associate your visit to our website with your Instagram account. When you interact with the plugins, for example by clicking the "Instagram" button, this information is also sent directly to an Instagram server and stored there.
The information is also published to your Instagram account and displayed to your contacts there.
If you do not want Instagram to associate the data collected through our website directly with your Instagram account, you must log out of Instagram before visiting our website.
For more information, see Instagram's Privacy Policy (https://help.instagram.com/155833707900388).
9. Web tools
a) Use of Google Web Fonts
This website uses so-called web fonts provided by Google for the uniform display of fonts. When you access a page, your browser loads the web fonts you need into its browser cache to display text and fonts correctly.
For this purpose, the browser you are using must connect to Google's servers. This gives Google knowledge that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
If your browser does not support web fonts, a standard font will be used by your computer.
Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy.
b) Use of Google Maps
This website uses the Google Maps map service via an API. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.
The use of Google Maps takes place in the interest of an appealing presentation of our online offers and at an easy findability of the places indicated by us on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
More information on the handling of user data can be found in Google's data protection declaration: https://www.google.de/intl/de/policies/privacy/.
c) Use of ajax.googleapis.com
This website uses Ajax and jQuery technologies to optimize the loading speeds. In this respect, program libraries are accessed from Google servers. The CDN (Content delivery network) of Google is used. If you have previously used jQuery on another page of the Google CDN, your browser will use the cached copy. If this is not the case, it will require downloading, whereby data from your browser will be sent to Google Inc. "("Google") will be transmitted. Your data will be transferred to the USA. You can find out more under: https://developers.google.com/speed/libraries/#jquery as well as under the data protection regulations of google.de.
d) Use of code.jquery.com
Our website uses the Java-Script extension jQuery, which is reloaded by the website code.jquery.com. In this respect, program libraries are called from StackPath servers. When a page is called, your browser loads the required program libraries into your browser cache. For this purpose, the browser you are using must connect to the StackPath servers located in the USA.
The use of jQuery is in the interest of an optimized and appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. Further information on jQuery can be found at www.jquery.com and in the StackPath privacy policy at www.stackpath.com/privacy-statement/
e) Adobe Typekit Web Fonts
Our website uses so-called web fonts from Adobe Typekit for the uniform display of certain fonts. The provider is Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe).
When you access our pages, your browser loads the required fonts directly from Adobe in order to display them correctly on your device. Your browser establishes a connection to the Adobe servers in the USA. This enables Adobe to know that your IP address has been used to access our website. According to Adobe, no cookies are stored when the fonts are provided.
Adobe is certified under the EU-US Privacy Shield. The Privacy Shield is an agreement between the United States of America and the European Union to ensure compliance with European data protection standards. For more information, please visit: https://www.adobe.com/de/privacy/eudatatransfers.html.
The use of Adobe Typekit Web Fonts is necessary to ensure a consistent font appearance on our website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
Further information on Adobe Typekit Web Fonts is available at: https://www.adobe.com/de/privacy/policies/typekit.html.
Adobe's privacy policy can be found at: https://www.adobe.com/de/privacy/policy.html
10. rights of data subjects
You have the right:
- to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you may request information on the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of complaint, the origin of your data, unless it has been collected from us, as well as the existence of an automated decision-making process including profiling and, if applicable, meaningful information on its details;
- to immediately request the correction of incorrect or incomplete personal data stored by us in accordance with Art. 16 GDPR;
- to demand the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
- to demand the restriction of the processing of your personal data in accordance with Art. 18 GDPR if the correctness of the data is disputed by you, the processing is unlawful but you refuse its deletion and we no longer need the data but you need it to assert, exercise or defend legal claims or you have lodged an objection against the processing in accordance with Art. 21 GDPR;
- in accordance with Art. 20 GDPR, to receive your personal data which you have provided to us in a structured, common and machine-readable format or to request the transfer to another responsible person;
- in accordance with Art. 7 para. 3 GDPR, to revoke your consent once given to us at any time. The consequence of this is that we may no longer continue the data processing based on this consent in the future, and
- to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority at your usual place of residence or workplace or at our company headquarters.
11. Right of objection
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR if there are reasons for doing so which result from your particular situation or if the objection is directed against direct advertising. In the latter case, you have a general right of objection, which is implemented by us without stating a particular situation.
If you would like to make use of your right of revocation or objection, simply send an e-mail to datenschutz@vondeska.de
12. Data security
We use the widespread SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser when visiting our website. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed representation of the key or lock symbol in the lower status bar of your browser.
We also make use of suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.
13. Topicality and change of this data security explanation
This data protection declaration is currently valid and as of July 2018.
Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can call up and print out the current data protection statement at any time on our website at https://www.vondeska-townhouses.de
Von Deska Townhouses GmbH & Co. KG
July 2018