Data protection

The following provides a simple overview of what happens to your personal information when you visit our website. Personal data is all data by which you can be personally identified. Detailed information on data protection can be found in our privacy policy below.

 

Data collection on our website

Who is responsible for the data collection on this website?

Data processing on this website is carried out by the website operator. You can find his contact details in the legal notice of this website.

How do we collect your data?

On the one hand, your data is collected when you provide it to us. This may be, for example, data that you enter in a contact form.

Other data is automatically collected by our IT systems when you visit the website. These are mainly technical data (e. g. Internet browser, operating system or time of page access). This data is collected automatically as soon as you enter our website.

 

What do we use your data for?

Part of the data is collected to ensure error-free provision of the website. Other data may be used to analyse your user behaviour.

 

What rights do you have regarding your data?

You have the right to receive free information about the origin, recipient and purpose of your stored personal data at any time. You also have the right to request the correction, blocking or deletion of this data. You can contact us at any time at the address given in the imprint. You also have the right to lodge a complaint with the competent supervisory authority.

You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Details can be found in the data protection declaration under “Right to restriction of processing”.

 

Analysis tools and third-party tools

When you visit our website, your surfing behaviour may be statistically evaluated. This is mainly done with cookies and so-called analysis programs. The analysis of your surfing behaviour is usually anonymous; the surfing behaviour cannot be traced back to you.

You may object to this analysis or prevent it by not using certain tools. Detailed information about these tools and about your options to object can be found in the following privacy policy.

 

2. Hosting

Hetzner

We host our website at Hetzner. The provider is Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen (hereinafter Hetzner).

Details can be found in Hetzner's privacy policy: https://www. hetzner. com/de/rechtliches/datenschutz.

Hetzner is used on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the most reliable presentation of our website. If a corresponding consent has been requested, the processing takes place solely on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's terminal device (e. g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

 

3. General information and mandatory information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.

When you use this website, various personal data are collected. Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the Internet (e. g. when communicating via e-mail) may have security vulnerabilities. A complete protection of the data against access by third parties is not possible.

 

Notice to the responsible party

The responsible party for data processing on this website is:

Apartments am Dom
Stefan Simon
Steinweg 9
06618 Naumburg

Telephone: 0172 233 68 94
Email: kontakt@apartments-am-dom.de

The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e. g. names, e-mail addresses, etc.).

 

Revocation of your consent to data processing

Many data processing operations are only possible with your explicit consent. You may revoke your consent at any time. An informal communication by e-mail to us is sufficient for this purpose. The legality of the data processing carried out up to the revocation remains unaffected by the revocation.

 

Right to object to data collection in special cases and to direct advertising (Art. 21 GDPR)

If the data processing on the basis of Art. 6 para. 1 lit. e or f GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this data protection declaration. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms or the processing serves the assertion, exercise or defence of legal claims (objection pursuant to Art. 21 (1) GDPR).

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection pursuant to Art. 21 para. 2 GDPR).

 

Right of appeal to the competent supervisory authority

In the event of infringements of the GDPR, the data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement. The right of appeal shall be without prejudice to any other administrative or judicial remedy.

 

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in the performance of a contract handed over to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place insofar as it is technically feasible.

 

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator, this site uses SSL or SSL. TLS encryption. You can recognise an encrypted connection by changing the address line of the browser from “http://” to “https://” and by the lock icon in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

 

Information, blocking, deletion and correction

You have the right to free information about your stored personal data, its origin and recipients and the purpose of the data processing at any time and, if applicable, a right to rectification, blocking or deletion of such data. You can contact us at any time at the address given in the legal notice.

 

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time at the address given in the imprint. The right to restriction of processing exists in the following cases:

If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. For the duration of the examination, you have the right to request the restriction of the processing of your personal data.
If the processing of your personal data took place unlawfully, you may request the restriction of data processing instead of deletion.

If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request the restriction of processing of your personal data instead of deletion.
If you file an objection pursuant to Art. 21 para. 1 GDPR, a balance must be made between your and our interests. As long as it is not clear whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, these data – apart from their storage – may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

 

Objection to promotional emails

The use of contact data published in the context of the imprint obligation for sending unsolicited advertising and information materials is hereby objected to. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam emails.

 

4. Data collection on our website

Cookies

Some of the websites use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and stored by your browser.

Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser the next time you visit.

You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or generally, and activate the automatic deletion of cookies when you close your browser. Disabling cookies may limit the functionality of this website.

Cookies that are necessary to carry out the electronic communication process or to provide certain functions you wish to (e. g. shopping cart function) are stored on the basis of Art. 6 para. 1 lit. f DSGVO stored. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e. g. cookies to analyze your surfing behavior) are stored, these are treated separately in this privacy policy.

 

Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address
This data will not be merged with other data sources.

This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – the server log files must be recorded for this purpose.

 

Contact form

If you send us enquiries via the contact form, your details from the enquiry form including the contact details you provided there will be stored by us for the purpose of processing the enquiry and in case of follow-up questions. We do not pass on this data without your consent.

The processing of the data entered in the contact form is therefore carried out solely on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You may revoke this consent at any time. An informal communication by e-mail to us is sufficient for this purpose. The legality of the data processing operations carried out up to the revocation remains unaffected by the revocation.

The data entered by you in the contact form will remain with us until you ask us to delete it, revoke your consent to its storage or the purpose for its storage no longer applies (e. g. after processing your request). Mandatory statutory provisions – in particular retention periods – remain unaffected.

 

Enquiry by email, telephone or fax

If you contact us by email, telephone or fax, your enquiry including all resulting personal data (name, enquiry) will be stored and processed by us for the purpose of processing your enquiry. We do not pass on this data without your consent.

The processing of these data takes place on the basis of Art. 6 para. 1 lit. b GDPR, insofar as your request is related to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 para. 1 lit. a GDPR) and/or on our legitimate interests (Art. 6 para. 1 lit. f GDPR), as we have a legitimate interest in the effective processing of the requests addressed to us.

The data you send to us via contact requests will remain with us until you ask us to delete it, revoke your consent to its storage or the purpose for the data storage ceases to exist (e. g. after the processing of your request has been completed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

 

Processing of data (customer and contract data)

We collect, process and use personal data only to the extent that they are necessary for the establishment, content structure or modification of the legal relationship (inventory data). This is done on the basis of Art. 6 para. 1 lit. b GDPR, which allows the processing of data for the performance of a contract or pre-contractual measures. We only collect, process and use personal data about the use of our Internet pages (usage data) to the extent necessary to enable the user to use the service or to bill.

The collected customer data will be deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

 

Data transmission at the conclusion of a contract for services and digital content

We only transfer personal data to third parties if this is necessary in the context of contract processing, for example to the credit institution commissioned with payment processing.

No further transmission of the data takes place or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which allows the processing of data for the performance of a contract or pre-contractual measures.

 

5. Plugins and tools

Smoobu GmbH

In order to make a booking it is necessary to provide your contact details. You only have to enter the fields marked with an asterisk (enter mandatory fields here) as well as the data concerning the booking (e. g. period of stay). We also save your booking date and time. Additional information (please specify optional fields here) is not mandatory.

The data you provide on our website, including any notes, are personal data and are processed and used by us to ensure the processing of the booking and the provision of the requested service. We also use your data to provide you with relevant information regarding the booking or during your stay. The personal data collected during the booking process will be passed on to the following third parties:

Smoobu GmbH – Smoobu.com is a software for renters of holiday apartments
Falckensteinstr. 48
10997 Berlin
Germany

Link to data protection regulations of Smoobu:
https://www.smoobu.com/de/datenschutz/

 

Google Web Fonts (local hosting)

This site uses so-called web fonts, which are provided by Google, for the uniform display of fonts. The Google Fonts are installed locally. There is no connection to Google servers.

Further information on Google Web Fonts can be found at https://developers. google. com/fonts/faq and in Google's privacy policy: https://policies. google. com/privacy?hl=de.

 

6. Consent with Usercentrics

This website uses the consent technology of Usercentrics to obtain your consent to the storage of certain cookies on your device or the use of certain technologies and to document them in compliance with data protection. The provider of this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, website: https://usercentrics. com/de/ (hereinafter “Usercentrics”).

When you access our website, the following personal data is transmitted to Usercentrics:

Your consent(s) or withdrawal of your consent(s)
Your IP address
Information about your browser
Information about your device
Time of your visit to the website

Furthermore, Usercentrics stores a cookie in your browser in order to be able to assign the granted consents or their revocation to you. The data collected in this way is stored until you ask us to delete it, delete the Usercentrics cookie itself or the purpose for the data storage no longer exists. Mandatory statutory retention obligations remain unaffected.

The Usercentrics banner on this website was configured with the help of eRecht24. You can see this by the fact that the logo of eRecht24 appears in the banner. To display the eRecht24 logo in the banner, a connection to the image server of eRecht24 is established. The IP address is also transmitted, but only stored in anonymized form in the server logs. The image server of eRecht24 is located in Germany with a German provider. The banner itself is provided exclusively by Usercentrics.

Usercentrics are used to obtain the legally required consents for the use of certain technologies. The legal basis for this is Art. 6 para. 1 lit. c GDPR.
Order processing

We have entered into a Contract Processing Agreement (TPA) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.