Privacy Statement


Introduction


Parkhotel Schmallenberg processes information about individuals on a daily basis. In doing so, Parkhotel Schmallenberg abides by the law. Parkhotel Schmallenberg respects the privacy of the individuals about whom it receives information and treats the information as strictly confidential.

In this privacy statement, we explain which personal data Parkhotel Schmallenberg processes and for what purposes. This privacy statement also applies to the entire GmbH and all its activities of which Parkhotel Schmallenberg is also a part. Boutique hotel Sauerland GmbH.

The privacy statement does not apply to the processing of personal data by third parties, such as companies and/or websites offering trips or travel packages. We recommend that you read this privacy statement carefully. But also those of resellers.

Parkhotel Schmallenberg, located at the address Am Kurhaus 6-8, 57932 Bad Fredeburg - Schmallenberg, Chamber of Commerce Number: Arnsberg HRB 11796, e-mail address: mail@parkhotel-schmallenberg.com, is the controller for the processing and storage of your personal data. If you have any questions about the content of the privacy statement, please contact mail@parkhotel-schmallenberg.com.

Where reference is made below to "Parkhotel", this refers to all the entities listed above.


PRIVACY

Personal data
Parkhotel processes different types of personal data, for different purposes. What personal data and purposes are explained below.

Guest administration
To (book) an overnight stay in our accommodations, Parkhotel requires your name, address, place of residence, telephone number, day of departure and arrival and your payment details. We may receive this data from third parties with whom you have gone through the booking process.

If necessary, we may request additional personal data from you for the provision of our services, such as your nationality or guest preferences. We process health data only on the basis of your consent, in order to provide you with a better service, for example providing access for disabled people.

In addition, we are required by law to verify your identity. We will do this on site at the hotel on the basis of an identity document shown by you. We will not make a copy of this. This data is only used internally, and is not passed on to other organisations for commercial purposes.

Camera surveillance
The Parkhotel uses camera surveillance to the extent necessary to secure its property and protect its guests. Through the camera images, the Parkhotel obtains insight into the activities of persons and license plates.

Parkhotel Schmallenberg account
You can create a Parkhotel account. This makes it easy to make reservations and information requests when you make a follow-up request, as we do not need to ask you for your details again. To create an account, we ask for your name, place of residence, telephone number and e-mail details. These personal data are stored in our database.


(Direct) Marketing
To make offers that interest you, we collect commercially interesting information about individuals, such as demographic data. We may collect information about you from third parties, including information from our partners and social media sites in accordance with your settings on such websites.


Social media
The Parkhotel can be found on various social media, such as Facebook and Instagram. We may use your personal data when you use features on these websites and/or apps, such as a "Facebook like". If such a feature is used by you, we may obtain your personal data through our social media in question.


Application process
The Parkhotel collects and processes applicant data through personal contacts, by post, by email and/or by telephone calls. Among other things, we collect the applicant's name, gender, contact details, motivation letters, information on educational level and employment history

This data is relevant for going through the application procedure and will be deleted no later than 4 weeks after the end of the procedure. If you give your consent, the Parkhotel may store your personal data longer in its records so that you can be contacted again in the future if necessary.


Employees
The Parkhotel also processes personal data of employees, within the framework of the employment contract and on the basis of legal bases. For information on the processing of employees' personal data, please refer to the personnel manual of the entity of which you are employed.


Recipients
We do not share your personal data with companies, organisations and individuals outside the Parkhotel, except in one of the following circumstances.


Execution of an agreement
Provision of your personal data to third-party organisations is permissible where this is necessary to fulfil our contractual obligations to you. This includes processing your reservation. If it is necessary for the payment of bookings, we use a third party to handle online payments.


With your consent
With your consent, we may disclose your personal data to other parties. The consent only applies if it is clear what you are giving your consent to and what the consequences are.


For external processing
We provide personal data to our partners so that they can process data for us, based on our instructions and in accordance with our privacy policy and other appropriate confidentiality and security measures. Our partners include our IT suppliers and administrator of the CRM system.


For legal reasons
We share personal data if we believe that disclosure of the data is necessary to comply with applicable laws, regulations, legal procedures or requests from governmental authorities.


Legal obligation
If a legal obligation requires us to do so, we will provide your personal data. For example, the police may request data from us as part of fraud investigations.

Another example is that the tax inspector may demand all data necessary to levy tax pursuant to Article 47 of the General Tax Act. Finally, the municipality can also request the provision of data to check the tourist tax assessment.

The Parkhotel makes arrangements with the recipients of your personal data to ensure that personal data is treated confidentially and secured.


Retention period
We do not retain your personal data for longer than necessary, unless there is a legal duty on us to retain your personal data for longer. Our basic principle is that we keep personal data only for as long as necessary to provide you with our products and/or services. After this, we will delete your personal data to the extent possible. For example, you can create a Parkhotel account, as explained above in section 2.

Inactive accounts we will delete after a period of 2 years. If you have provided your e-mail address (possibly through your account) so that we can keep you informed of our services, we will still retain your data for this purpose.


Transfer of personal data outside the EU
The Parkhotel may transfer your personal data from Germany to foreign countries. Countries within the European Economic Area (EEA) have an equivalent level of personal data protection as Germany. Subject to the general requirements of privacy laws and regulations, we may transfer your personal data to countries within the EEA. We may do so, for example, within our group for the purpose of proper business operations.

Outside the EEA, we will only transfer your personal data if there is an adequate level of protection. The Parkhotel uses model contracts approved by the European Commission for this purpose.


Cookies
The Parkhotel makes use of cookies. A cookie is a small text file that is stored on the visitor's device when they first visit a website. The purpose of cookies is to collect information about someone, the website or statistics.

Some cookies additionally aim to improve the user experience of the website.


Types of cookies
We distinguish between functional and non-functional cookies. We always place functional cookies. They are necessary for the website to work properly. Non-functional cookies process personal data outside your field of vision. They mainly enable us to improve our services. For instance, they allow us to measure how often our website is used and what information visitors are looking for. We always ask your permission for non-functional cookies.


We use the following non-functional cookies.

Analytical cookies
We use analytical cookies to collect statistics on how users use the website. By measuring website usage, the website can be improved for the benefit of users.


Data stored include the following:

  • IP address, which is anonymised;
  • technical characteristics, such as the browser you use;
  • from which page you arrived at the webshop.

 

Tracking cookies
These are cookies that are placed to identify an internet user on a website. By setting tracking cookies, we can track which internet pages you visit. From the information about your website visits, we can find out what your preferences and interests are. On this basis, we can provide you with personalised offers.


Advertising cookies
We use advertising cookies to display personalised ads and to measure the effectiveness of an advertising campaign. The advertising cookies are needed to actually show the ads.


Blocking and deleting cookies
If you do not want our website to be able to store cookies on your computer, you can indicate this in the cookie notification you see when you first visit our website. Have you previously accepted our cookies? If so, you will no longer see this notification and you must delete the cookies yourself (if you wish).

You can also choose to block cookies via your browser. Do you block all cookies? Then our website will not work as well. We recommend that you only selectively disable unwanted cookies. You can do this in your browser settings.


Your rights
You have a number of legal rights vis-à-vis us: inspection, correction or addition, data erasure, restriction of processing, transfer of digital data and the right to object. Below, we explain those rights. We also explain how you can exercise these rights against us.


Rights of inspection
Upon your request, we will inform you in writing whether we process personal data about you. When making your request, you must identify yourself by means of a copy of your identity document. In our response, we will explain what personal data of yours we have processed or are processing, and provide you with a copy. We will also explain the purposes for which the data have been or are being processed, with whom the data are shared, how long they are expected to be stored, and what other rights you can assert.


Improvement or supplementation
If you have been given access to the processing of your personal data, you may ask us to correct inaccuracies or complete omissions. We will give reasons for our response. If we make a correction, you will receive a supplementary statement from us. Any recipients of your incorrect or incomplete data will also receive this statement.


Data deletion
You can request us to delete your personal data in our systems in one or more of the following cases:

  • the personal data are no longer needed for the purposes for which we processed them;
  • you withdraw your consent for (further) processing, and there is no longer any other basis for processing;
  • you make a reasoned objection, and there are no compelling reasons not to honor your objection;
  • the personal data have been unlawfully processed by us;
  • we have to delete your personal data on the basis of a legal obligation;
  • we have collected your data through mobile telephony or internet services.


Restriction of processing
If you have reported an inaccuracy or incompleteness in your personal data to us, you may ask us to restrict processing while we are processing your request. You may also ask us to restrict the processing of your data if you believe that we are processing your data unlawfully or no longer need it, or if you have objected to its (further) processing. After receiving your restriction request, we will only process the data after obtaining your consent or due to compelling reasons (such as legal proceedings).


Transfer of digital data
If you have provided personal data to us in a structured, usual digital file format, and we have processed your data with your consent or in the performance of a contract with you, you have the right to ask us for a copy of this data questions. You may also ask us in such cases to forward your data directly to another service provider.


Objection
You may object to the processing of personal data relating to you at any time. This applies in particular to profiles we have created on the basis of your personal data. We will stop processing your data upon receipt of your objection, unless we can provide compelling legitimate reasons which outweigh your interests, rights and freedoms.

If we process your personal data for direct marketing purposes, you may object to this at any time and we will stop processing immediately.

--- Version March 2023 ---


Exercising rights
If you wish to exercise one or more of your rights listed above, please contact us at the e-mail address mail@parkhotel-schmallenberg.com. The Parkhotel will decide on your request within 4 weeks, unless we inform you within that period that we need a little more time.

Is your personal data being processed on the basis of your consent? If so, you have the right to withdraw your consent. Any withdrawal of your consent shall not affect previous processing based on it.


7. Liabiity
Despite the care and attention devoted to the management of this website, it is possible that it contains incorrect information. The Parkhotel cannot be held liable for technical or editorial errors contained in this website, nor for any consequential damage resulting from the use or temporary unavailability of this website or the links to third party websites.


8. Complaints
Do you have a complaint about the use of your personal data? If so, please refer to the complaints procedure at the Personal Data Authority. This body is authorised to take cognisance of your complaint.


9. Questions?
Do you still have questions? If so, please send an e-mail with your question to: mail@parkhotel-schmallenberg.com.


This privacy statement is in accordance with the General Data Protection Regulation. We reserve the right to update this privacy statement periodically. The latest version will be published on this page.

--- Version March 2023 ---