Data protection

We are pleased that you are visiting our homepage and thank you for your interest in our company. Dealing with our customers and interested parties is a matter of trust. The trust placed in you is very important to us and therefore the importance and obligation to handle your data carefully and protect it from misuse.

So that you feel safe and comfortable when visiting our website, we take the protection of your personal data and its confidential treatment very seriously. Therefore, we act in accordance with applicable legislation on personal data protection and data security. With this information on data protection, we would like to inform you about when we store which data and how we use it - of course in compliance with applicable case law.

The Werrapark Resort is specifically based on the EU General Data Protection Regulation. Below we explain what information we collect during your visit to our websites and how it is used.

Name and address of the person responsible

The person responsible within the meaning of the GDPR and other national data protection laws of the member states as well as other data protection regulations is:

Werrapark Hotels Masserberg GmbH & Co. KG | Am Kirchberg 15 | 98666 Masserberg | Germany | Tel. +49 (0) 36874-93711 | Fax +49 (0) 36874-93766 | info@werrapark.de

The data protection officer of the person responsible is:

Thomas Dahmen | Goldbergstr. 11 | 99869 Goldbach | Germany | Contact via Werrapark Resort info@werrapark.de

Use of the Website

In principle, you can visit our website without telling us who you are. Every time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:

• Information about the browser type and version used
• The user's operating system
• The user's IP address
• Date and time of access
• Websites from which the user's system accesses our website
• Websites that are accessed by the user's system via our website

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user. Personal user profiles cannot be created. The stored data is only evaluated for statistical purposes.

SSL encryption

This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as inquiries that you send to us as the site operator via the contact form. You can recognize an encrypted connection by the browser address line changing from “http://” to “https://” and by the lock symbol in your browser line. If SSL encryption is activated, the data you transmit to us cannot be read by third parties.

External Hosting

This website is hosted by an external service provider (hoster). Personal data that is recorded on this website is stored on the host's servers. This can primarily be IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.

The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 Para. 1 lit.b GDPR) and in the interest of a safe, fast and efficient provision of our online offer by a professional provider (Art. 6 Para . 1 lit.f GDPR).

Our host will only process your data insofar as this is necessary to fulfill its service obligations and follow our instructions with regard to this data.

Conclusion of a contract for order processing

In order to ensure data protection compliant processing, we have concluded an order processing contract with our hoster.

Data protection with Google Analytics

This website uses Google Analytics. This is a service provided by Google Inc. (“Google”). Google uses so-called “cookies”, text files that are stored on your computer and which enable your use of the website to be analyzed. The information generated by the cookie about your use of this website (including your IP address) is transmitted to a Google server in the USA and stored there. The IP address is then shortened by the last three digits by Google, so a clear assignment of the IP address is no longer possible. Google adheres to the data protection provisions of the “US Safe Harbor” agreement and is registered with the “Safe Harbor” program of the US Department of Commerce.

Google will use this information to evaluate your use of the website, to compile reports on website activity for website operators and to provide other services related to website activity and internet usage. Google may also transfer this information to third parties if required by law or if third parties process this data on behalf of Google.

Third parties, including Google, serve ads on sites across the Internet. Third parties, including Google, use stored cookies to serve ads based on a user's previous visits to this website.

Under no circumstances will Google associate your IP address with other Google data. The collection and storage of data can be objected to at any time with effect for the future. You can opt out of Google's use of cookies by visiting the Google advertising opt-out page.

Alternatively, users can opt out of third parties' use of cookies by visiting the Network Advertising Initiative opt-out page . You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: http://tools.google.com/dlpage/gaoptout?hl=de.

However, we would like to point out that in this case you may not be able to fully use all of the functions of this website. By using this website, you agree to the processing of the data collected about you by Google in the manner and for the purpose described above. The collection and storage of data can be objected to at any time with effect for the future. Further information on Google's terms and conditions can be found here .

Google AdWords and Google Conversion Tracking

This website uses Google AdWords. AdWords is an online advertising program from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States (“Google”).

We use so-called conversion tracking as part of Google AdWords. If you click on an ad placed by Google, a conversion tracking cookie is set. Cookies are small text files that the Internet browser stores on the user's computer. These cookies lose their validity after 30 days and are not used to personally identify users. If the user visits certain pages on this website and the cookie has not yet expired, we and Google can see that the user clicked on the ad and was redirected to this page.

Every Google AdWords customer receives a different cookie. The cookies cannot be tracked via the websites of AdWords customers. The information obtained using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. The customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. If you do not want to participate in tracking, you can object to this use by easily deactivating the Google conversion tracking cookie in your internet browser under user settings. You will then not be included in the conversion tracking statistics.

The storage of “conversion cookies” takes place on the basis of Art. 6 Paragraph 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

You can find more information about Google AdWords and Google Conversion Tracking in Google's data protection regulations: https://www.google.de/policies/privacy/ .

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when you close the browser. If you deactivate cookies, the functionality of this website may be restricted.

Use of Google Maps

This website uses Google Maps to display maps and create directions. Google Maps is operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. By using this website, you agree to the collection, processing and use of the automatically collected data and the data you enter by Google, one of its representatives, or third-party providers. Google Maps Terms of Use .

Use of Facebook plugins (Like button)

Plugins from the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA are integrated into our pages. You can recognize the Facebook plugins by the Facebook logo or the “Like” button on our site. You can find an overview of the Facebook plugins here: developers.facebook.com/docs/plugins/. When you visit our pages, the plugin establishes a direct connection between your browser and the Facebook server. Facebook thereby receives the information that you have visited our site with your IP address. If you click the Facebook “Like” button while you are logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to assign your visit to our pages to your user account. We would like to point out that as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook.
Further information can be found in Facebook's data protection declaration at de-de.facebook.com/policy.php If you do not want Facebook to be able to assign your visit to our pages to your Facebook user account, please log out of your Facebook user account .

Use of cookies

So-called cookies are used in some areas of our pages. A cookie is a small text file that a website places on your hard drive. Cookies do not cause any damage to your computer and do not contain viruses. The cookies on our websites do not collect any personal data. We use the information contained in cookies to make it easier for you to use our pages and to tailor them to your needs.

Of course, you can also view our website without cookies. If you do not want cookies to be stored on your computer, you can deactivate the corresponding option in the system settings of your browser. You can delete stored cookies at any time in the system settings of your browser. However, if you do not accept cookies, this may lead to functional restrictions on our offerings.

Data collection on this website

Cookies

Our website uses so-called "cookies". Cookies are small text files and do not cause any damage to your end device. They are stored on your end device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted after your visit. Permanent cookies remain stored on your end device until you delete them yourself or until they are automatically deleted by your web browser.

In some cases, cookies from third-party companies can also be stored on your end device when you enter our site (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies for processing payment services).

Cookies have different functions. Numerous cookies are technically necessary because certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies are used to evaluate user behavior or to display advertising.

Cookies that are required to carry out the electronic communication process (necessary cookies) or to provide certain functions you want (functional cookies, e.g. for the shopping cart function) or to optimize the website (e.g. cookies for measuring web audience). are stored on the basis of Art. 6 Para. 1 lit. f GDPR, unless another legal basis is given. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of its services. If consent to the storage of cookies was requested, the relevant cookies are stored exclusively on the basis of this consent (Article 6 (1) (a) GDPR); the consent can be revoked at any time.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when you close the browser. If you deactivate cookies, the functionality of this website may be restricted.

Insofar as cookies are used by third-party companies or for analysis purposes, we will inform you of this separately in this data protection declaration and, if necessary, request your consent.

Consent with Usercentrics

This website uses Usercentrics' consent technology to obtain your consent to store certain cookies on your device or to use certain technologies and to document this in accordance with data protection regulations. The provider of this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, website: https://usercentrics.com/de/ (hereinafter “Usercentrics”).

When you enter our website, the following personal data is transferred to Usercentrics:

• Your consent(s) or withdrawal of your consent(s)
• Your IP address
• Information about your browser
• Information about your device
• Time of your visit to the website

Furthermore, Usercentrics stores a cookie in your browser in order to be able to allocate the given consent or its revocation to you. The data collected in this way is stored until you request us to delete it, delete the Usercentrics cookie yourself, or the purpose for storing the data no longer applies. Mandatory statutory retention requirements remain unaffected.

Usercentrics is used to obtain the legally required consent for the use of certain technologies. The legal basis for this is Article 6 (1) (c) GDPR.

Order processing

We have concluded a contract for order processing (DPA) with the above-mentioned provider. This is a contract prescribed by data protection law, which ensures that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Collection and processing of personal data

1. Contact form / email contact

There is a contact form on our website that can be used to contact us electronically. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored. This data is: name, email address, telephone number and request as mandatory fields as well as hotel, title, first name and address as voluntary information.

Alternatively, you can contact us using the email address provided. In this case, the user's personal data transmitted with the email will be stored.

2. Online booking via the website

On our website you can book hotel and holiday home stays. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored. These data are: first name, last name, email address, telephone, address, number of fellow travelers, wishes, date, time.

If you make an online booking on our homepage, this is done through the reservation system OnlineRes from Hotelfinder.de GmbH & Co KG, Birkenallee 135, 48432 Rheine, Germany. All booking data you enter is transmitted encrypted. Hotelfinder.de is committed to handling your transmitted data in accordance with data protection regulations. It takes all organizational and technical measures to protect your data.

3. Online booking via other reservation portals

Users have the opportunity to book rooms and arrangements for the two hotels and the holiday home complex via reservation portals (third-party providers). In this case, the data entered in the input mask will be transmitted to us and stored to the extent that the respective reservation portal allows in accordance with its own data protection regulations. Data can be: first name, surname, email address, telephone, address, number of fellow travelers, expected arrival time, wishes, payment details (credit card).

4. Newsletter offer

On our website you have the option to register for our newsletter. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored. This data is: email address, title, first name, last name. The existence of the recipient's consent in accordance with Art. 6 Para. 1 lit. a GDPR is ensured by a double opt-in procedure, i.e. after registration you will receive an email asking you to confirm your registration.

If we receive an email address elsewhere where the recipient clearly tells us that they would like to receive our newsletter, we will collect their data via the input mask on our website. Here, too, you will receive an email asking you to confirm your registration.

The dispatch of the newsletter and the performance measurement associated with it are based on the consent of the recipient in accordance with Art. 6 Paragraph 1 lit. a, Art. 7 GDPR in conjunction with Section 7 Paragraph 2 No. 3 UWG or if consent is not required , on the basis of our legitimate interests in direct marketing in accordance with Art. 6 Paragraph 1 according to the GDPR in conjunction with Section 7 Paragraph 3 UWG.

You can unsubscribe from our newsletter at any time. You will find a link to unsubscribe from the newsletter at the end of each newsletter.

Newsletterdaten

If you would like to receive the newsletter offered on the website, we need an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter . Further data is not collected or is only collected on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.

The processing of the data entered in the newsletter registration form takes place exclusively on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time, for example via the "Unsubscribe" link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you have stored with us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you unsubscribe from the newsletter. This does not affect data that we have stored for other purposes (e.g. e-mail addresses for the members' area).

Rapidmail

We use Rapidmail to send newsletters. The provider is rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg i.Br., Germany.

Rapidmail is a service that can be used, among other things, to organize and analyze the sending of newsletters. The data you enter for the purpose of subscribing to the newsletter will be stored on Rapidmail's servers in Germany.

If you do not want Rapidmail to analyze you, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message. You can also unsubscribe from the newsletter directly on the website.

Data analysis through Rapidmail

For the purpose of analysis, emails sent with Rapidmail contain a so-called “tracking pixel” that connects to Rapidmail’s servers when the email is opened. This makes it possible to determine whether a newsletter message has been opened.

We can also use Rapidmail to determine whether and which links in the newsletter message are clicked. All links in the email are so-called tracking links with which your clicks can be counted.

For more information about Rapidmail's analysis functions, please visit the following link: https://de.rapidmail.wiki/categories/statistics/ .

Legal basis

The data processing takes place on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke this consent at any time. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

Storage period

The data you provide to us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from both our servers and Rapidmail's servers after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g. email addresses for the member area) remains unaffected.

For more information, please see Rapidmail's data security information at: https://www.rapidmail.de/datensicherheit .

Conclusion of a contract for order data processing

We have concluded a contract with Rapidmail in which we oblige Rapidmail to protect our customers' data and not to pass it on to third parties.

5. Online assessment

Former guests can leave a review of our hotel after check-out. To this end, we would like to send you an email within 14 days of departure to ask you to submit a hotel review. Each review can be published anonymously if desired. If you did not feel comfortable in one of our hotels, we would like to take the opportunity to contact you.

If a former guest takes advantage of this option to rate online, data from the former guest will be stored in the rating mask. This data is: email address and voluntary information such as first name, last name, language and information about the rating.

Use and disclosure of the collected data

We use the personal data you provide exclusively for the stated or agreed purposes, i.e. usually to process the contract concluded with you or to answer your inquiry, to send individual newsletters or to obtain guest reviews.

If you use services, we generally only collect the data that we need to provide the services. If we ask you for further data, this is voluntary information. The processing of personal data takes place exclusively to fulfill the requested service and to protect our own legitimate business interests.

Are personal data forwarded to third parties?

Your data will only be processed and used for the purposes of advice, advertising and market research with your express consent. Your data will not be sold, rented or otherwise made available to third parties. Transfers of personal data to government institutions and authorities only take place within the framework of mandatory national legal regulations.

Data deletion and storage period

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage can also take place if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data to conclude or fulfill a contract.

Youth protection

Children and young people with limited legal capacity are generally not allowed to transmit any personal data to our websites without the consent of their parents or guardians. Under no circumstances will the Werrapark Resort collect or use in any way the knowingly obtained personal data of children or young people with limited legal capacity or disclose it to third parties without authorization.

Rights of the data subject

If your personal data is processed, you are the data subject within the meaning of the GDPR and you have the following rights towards the person responsible:

You have the right to information about the personal data stored about you, about the purposes of processing, about possible transfers to other places and about the duration of storage.

If data is incorrect or is no longer necessary for the purposes for which it was collected, you can request correction, deletion or restriction of processing. If provided for in the processing procedures, you can also view your data yourself and correct it if necessary.

If your particular personal situation gives rise to reasons against the processing of your personal data, you can object to this if the processing is based on a legitimate interest. The person responsible will no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. If your personal data is processed for the purpose of direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising. If you object to processing for direct advertising purposes, your personal data will no longer be processed for these purposes.

You have the right to revoke your declaration of consent under data protection law at any time . The revocation of consent does not affect the lawfulness of the processing carried out based on the consent before its revocation.

If you have any questions about your rights and how to exercise your rights, please contact:

Werrapark Hotels Masserberg GmbH & Co. KG
Am Kirchberg 15
98666 Masserberg

Tel. 036874-93711
Fax 036874-93766
info@werrapark.de

Right to complain to a supervisory authority

As a data subject, without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence or the place of the alleged infringement, if you believe that the processing of personal data concerning you is contrary to violates data protection.

The supervisory authority to which the complaint is submitted will inform you of the status and results of your complaint, including the possibility of a legal remedy.

You can find more information on the website of the Federal Commissioner for Data Protection and Freedom of Information. Follow the link .

Safety

The Werrapark Resort uses technical and organizational security measures in accordance with Art. 32 GDPR to protect the data we manage against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously improved in line with technological developments. Access to it is only possible for a few authorized persons and persons who are responsible for special data protection and who are involved in the technical, administrative or editorial support of data.

Declaration of consent from the user

By using our website and the offers it contains, you agree that the personal data you voluntarily provide will be stored by us and processed and used in accordance with this data protection declaration.

We reserve the right to change, update or supplement this privacy policy at any time. Any revised Privacy Policy will apply only to personal information collected or changed after the revised policy becomes effective.