Data protection
General
We, Hotel Hohenlohe GmbH, take the protection of your personal data very seriously. Personal data is collected on our website www.hotel-hohenlohe.de only to the extent technically necessary. When you visit the individual pages, only log file information from your browser is transmitted to our server. This includes, in particular, information about your browser type, operating system, referrer URL, IP address and time of access. Hotel Hohenlohe GmbH cannot use this access data to draw conclusions about an identifiable person. In particular, no user profiles are created from the access data, nor is the data combined with other data sources. It is used solely for statistical evaluation and to optimise the use of our website. You can generally use the website of Hotel Hohenlohe GmbH without providing any personal data.
Personal data, such as the name, address, e-mail address or telephone number of a data subject, is always processed in accordance with the General Data Protection Regulation (GDPR) and the country-specific data protection provisions applicable to Hotel Hohenlohe GmbH.
As the controller, Hotel Hohenlohe GmbH has implemented numerous technical and organisational measures to ensure the most complete protection possible of the personal data processed via this website. Nevertheless, internet-based data transmissions may in principle have security gaps, so absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us by alternative means, for example by telephone.
Hosting and server log files
Our website is hosted by Host Europe GmbH, c/o Spaces, Gertrudenstraße 30-36, 50667 Cologne, Germany. The servers are located in data centres in Germany and France and therefore within the European Union.
When you visit our website, the web server automatically records information in so-called server log files: the page or file accessed, date and time of access, amount of data transferred, browser type and version, operating system, the previously visited page (referrer) and your IP address in shortened form. For IPv4 addresses the last block is removed, for IPv6 addresses the last six blocks are removed, so that no conclusions can be drawn about you as a person.
This processing serves to deliver the website, to ensure smooth operation and to analyse errors. The legal basis is our legitimate interest in providing our website in a technically error-free and secure manner (Art. 6(1)(f) GDPR). Access logs are automatically deleted after 14 days, error logs after 7 days.
Use of personal data
Personal data is used if you provide it to us voluntarily (for example when contacting us) or if it is required to establish, perform or terminate a legal transaction with us, in particular to book one of our rooms or other services. Once the contract has been fully processed, the personal data collected or provided by you will be blocked for further use or deleted, unless tax or commercial law provisions require longer retention periods.
Disclosure of personal data
Without your express separate consent, personal data is only disclosed to the extent necessary to process the contract. Personal data is not disclosed to third parties beyond this unless we are obliged to do so by court order or by law.
Contacting us by e-mail or telephone
If you contact us by e-mail or telephone, we process the data you provide (e.g. name, contact details and the content of your enquiry) in order to handle your request. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to the performance of a contract or to steps prior to entering into a contract; otherwise Art. 6(1)(f) GDPR (our legitimate interest in responding to enquiries).
We delete the data once your enquiry has been fully dealt with and no statutory retention obligations apply. Your data will not be passed on to third parties without your consent.
Cookies
To make your visit to our website secure, effective and attractive, we use so-called cookies. These are small text files containing a sequence of numbers that are stored locally on your device or in the cache of your web browser. Cookies do not become part of your computer system. Most browsers are set to accept cookies automatically. Most of the cookies we use are deleted at the end of your browser session (so-called session cookies). Persistent cookies, on the other hand, remain on your device and allow us to recognise you on your next visit.
If you do not want cookies to be used, you can change your browser settings to block cookies or delete stored cookies. You can also have your browser notify you before a cookie is set. If you change your browser settings for cookies or deactivate cookies, the full functionality of this website may not be available.
Managing your cookie settings
You can change your cookie settings for our website at any time. Simply click here. Further information on cookies and web analytics services can be found further down this page.
Google Analytics 4
On our website we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
Google Analytics enables us to evaluate the use of our website statistically and to improve our online offering. In particular, information about pages and content viewed, the source of the visit, time and duration of the visit, interactions on our website, approximate location, browser and operating system, device type and screen resolution, and the IP address may be processed.
Google Analytics uses cookies and similar technologies. It is used exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG). Google Analytics is only activated after you have given your consent via our cookie settings dialogue. You can change or withdraw your consent there at any time with effect for the future.
Our Google Analytics property is linked to our Google Ads account. If you have also consented to the use of marketing technologies, the data collected may be used to measure and optimise our advertising campaigns and to personalise ads. The "Google signals" feature is not activated.
User and event data linked to cookies, user identifiers or advertising IDs is stored for 14 months. If there is new user activity, the retention period for the user data starts again. Once the retention period has expired, the data concerned is deleted automatically.
In the course of use, data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework. For more information on the processing of personal data, please see Google's privacy policy and the Google Analytics terms of service.
Google Ads conversion tracking
We use Google Ads, an advertising service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. As part of Google Ads, we use so-called conversion tracking to measure the success of our advertising campaigns.
If you click on one of our Google ads and then visit our website, Google may use a cookie or a similar technology. This allows us to recognise whether a certain action, such as an enquiry or booking, was carried out on our website after clicking on an ad.
In particular, information about pages or URLs visited, the previous ad click, conversion actions carried out, the IP address and the browser and device used may be processed.
We receive statistical reports from Google on the success of our ads. These reports generally do not allow us to identify individual website visitors personally.
Google Ads conversion tracking is used exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Conversion tracking is only activated after you have given your consent via our cookie settings dialogue. You can change or withdraw your consent there at any time with effect for the future.
In the course of use, data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework. For more information, please see Google's privacy policy and the privacy information on Google's advertising products.
Use of the DIRS21 online booking tool of TourOnline AG
To enable online bookings of accommodation and other travel services, and to process enquiries, our website uses the online booking tool DIRS21 (hereinafter "OBT") of
TourOnline AG
Borsigstraße 26
73249 Wernau, Germany (www.dirs21.de, hereinafter "TOAG").
Within the OBT, TOAG processes the data as controller.
Information and provisions on data protection can be found in TOAG's privacy policy for the OBT, which you can access at any time from within the OBT or at http://www.dirs21.de/datenschutz/.
Use of Google Maps
To display our directions map, we use Google Maps, a map service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
The map is not loaded automatically. A connection to Google's servers is only established when you click "Load map" in the "Anfahrt" (directions) window. In particular, your IP address, the date and time of access and information about your browser are transmitted to Google. Google may use cookies or similar technologies in the process.
The legal basis is your consent, which you give by clicking "Load map" (Art. 6(1)(a) GDPR and Section 25(1) TDDDG). Your consent only applies to the respective page view. Without your click, no data is transmitted to Google.
In the course of use, data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework. For more information, please see Google's privacy policy.
Links to social networks (Facebook, Instagram)
On our website we link to our profiles on Facebook and Instagram. Both services are provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. These are simple links, not embedded plugins: no data is transmitted to Meta when you visit our website.
Only when you click on one of these links will you be taken to the respective provider's website, where its privacy provisions apply: Facebook privacy policy and Instagram privacy policy.
Newsletter
If you subscribe to our company's newsletter, the data entered in the respective input form is transmitted to the controller. Registration for our newsletter takes place using the so-called double opt-in procedure. This means that after registering you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that no one can register with someone else's e-mail address. When you register for the newsletter, the user's IP address and the date and time of registration are stored. This serves to prevent misuse of the services or of the data subject's e-mail address. The data is not passed on to third parties, unless there is a legal obligation to do so. The data is used exclusively for sending the newsletter. The data subject may cancel the newsletter subscription at any time. Consent to the storage of personal data may likewise be withdrawn at any time. Every newsletter contains a corresponding link for this purpose. The legal basis for processing the data after the user has registered for the newsletter is, where the user has given consent, Art. 6(1)(a) GDPR. The legal basis for sending the newsletter as a result of the sale of goods or services is Section 7(3) of the German Act against Unfair Competition (UWG).
Use of rapidmail
Description and purpose
We use rapidmail to send newsletters. The provider is Positive Group Deutschland GmbH, Ingeborg-Krummer-Schroth-Straße 18a, 79106 Freiburg im Breisgau, Germany. rapidmail is used, among other things, to organise and analyse the sending of newsletters. The data you enter for the purpose of receiving the newsletter is stored on rapidmail's servers in Germany. If you do not want rapidmail to analyse your data, you must unsubscribe from the newsletter. We provide a corresponding link in every newsletter for this purpose.
For the purpose of analysis, e-mails sent with rapidmail contain a so-called tracking pixel that connects to rapidmail's servers when the e-mail is opened. This makes it possible to determine whether a newsletter has been opened. In addition, rapidmail allows us to determine whether and which links in the newsletter are clicked. All links in the e-mail are so-called tracking links with which your clicks can be counted.
Legal basis
The legal basis for the data processing is Art. 6(1)(a) GDPR. You can withdraw this consent at any time with effect for the future.
Recipient
The recipient of the data is Positive Group Deutschland GmbH.
Transfer to third countries
The data is not transferred to third countries. However, we are aware of our responsibility and regularly review the framework conditions and legal changes. Should a transfer to a third country take place, we will update this information as soon as possible.
Duration
The data you have provided to us with your consent for the purpose of receiving the newsletter is stored until you unsubscribe from the newsletter. After you unsubscribe, it is deleted both from our servers and from rapidmail's servers. Data stored by us for other purposes remains unaffected.
Right of withdrawal
You have the right to withdraw the consent you have given at any time, cf. Art. 7(3) sentence 1 GDPR. This can be done informally and without giving reasons and takes effect for the future. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. Further information can be found below in this privacy policy under "Controller, data protection officer and your rights".
Contractual or statutory obligation to provide personal data
The provision of personal data is neither required by law nor by contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide the personal data. However, if you do not provide it, you will not be able to subscribe to the newsletter.
Further privacy information
For more information on privacy-compliant e-mail marketing with rapidmail, please see https://www.rapidmail.de/dsgvo-konformes-email-marketing.
For more information on rapidmail's analysis functions, please see https://www.rapidmail.de/hilfe/kategorie/statistiken.
DialogShift chat application on our website
Our website uses the chat application of DialogShift GmbH, Rheinsberger Str. 76/77, 10115 Berlin, Germany. This application processes and stores data for the purposes of web analysis, operating the chat application and responding to enquiries.
To operate the chat function, the chat texts are stored and a cookie with a unique ID is set, which serves to recognise you as a customer. A cookie is a small text file that is stored locally in the cache of your device. With the help of this cookie, our application recognises your device and can retrieve previous chat logs. This cookie is stored for 90 days after its last use. You can deactivate the storage of cookies in your browser settings. However, the chat function cannot be used without cookies.
Any disclosure of, for example, your name, e-mail address or telephone number is voluntary and made with the consent that this data may be used and stored temporarily for the purpose of contacting you until the contact has ended. This personal data is deleted after 90 days.
The legal basis for the data processing is Art. 6(1)(f) GDPR, based on our legitimate interest in effective customer service, the statistical analysis of usage behaviour and the optimisation of our offers.
DialogShift provides further information on the collection and use of data and on your rights and options for protecting your privacy at www.dialogshift.com/en/data-privacy.
Use of artificial intelligence (Claude)
To support our internal workflows, we use the AI assistant Claude provided by the Anthropic group of companies. Our contractual partner is Anthropic Ireland, Limited.
Claude supports us, for example, in drafting correspondence, preparing information and handling recurring administrative tasks. In the process, personal data of our guests may also be processed, such as name, contact details, period of stay or the content of your enquiries. Payment data, login credentials and special categories of personal data pursuant to Art. 9 GDPR, such as health information, are not entered into the system. We limit the data entered to what is necessary for the respective task.
The processing is carried out for the performance of the contract with you or to take steps prior to entering into a contract (Art. 6(1)(b) GDPR) and on the basis of our legitimate interest in efficient and low-error business operations (Art. 6(1)(f) GDPR).
We have concluded a data processing agreement with the provider pursuant to Art. 28 GDPR. Under this agreement, the provider processes the data exclusively to provide its services to us and in accordance with our instructions. The provider uses sub-processors; the current list is available at www.anthropic.com/subprocessors. A transfer to third countries, in particular to the USA, is possible. Such transfers are based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).
Chat histories containing personal data are deleted once the respective process has been completed, but no later than after 30 days.
The AI does not make any automated decisions within the meaning of Art. 22 GDPR. All results are reviewed by our staff, who remain responsible for them.
Security
Hotel Hohenlohe GmbH uses technical and organisational security measures pursuant to Art. 32 GDPR to protect the data we manage against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security measures are continuously improved in line with technological developments. Hotel Hohenlohe GmbH stores data relevant to data protection on secure systems within the European Union. Where individual service providers named in this privacy policy also process data outside the EU, this is stated in the respective section. Access is only possible for a small number of authorised persons who are specially bound to data protection and who are involved in the technical, administrative or editorial management of data.
Controller, data protection officer and your rights
The controller within the meaning of the General Data Protection Regulation (GDPR), other data protection laws applicable in the member states of the European Union and other provisions of data protection law is
Hotel Hohenlohe GmbH
Weilertor 14
74523 Schwäbisch Hall, Germany
Phone: +49 (0)791 7587-0
Fax: +49 (0)791 7587-84
You are not obliged by law or by contract to provide us with your personal data.
The data protection officer of Ringhotel Hohenlohe can be contacted at:
E-mail: datenschutz@hotel-hohenlohe.de
Your data is processed pursuant to Art. 6(1)(a), (b) and, where applicable, (c) GDPR. Personal data is stored until the contract has been fully performed or the selected service (e.g. newsletter) has ended, or until tax and commercial law record-keeping and retention obligations have been fulfilled.
You have the following rights vis-à-vis the controller named above:
- the right to obtain information about the personal data concerning you,
- the right to have your personal data rectified or erased,
- the right to restrict the processing of your personal data,
- the right to data portability,
- the right to object to the processing of your personal data,
- the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
You also have the right to lodge a complaint with a supervisory authority.
Applicability
This privacy policy applies to the websites www.hotel-hohenlohe.de, www.hotel-qubixx.de and www.hotel-21.de. It does not extend to any linked third-party websites.
If you have any further questions about data protection, please contact our data protection officer at datenschutz@hotel-hohenlohe.de.