Data protection

Your Privacy Settings

You can view and change all privacy settings you have made in this browser for this website here.

General

As the operator of this website and as a company, we come into contact with your personal data. This refers to all data that tells something about you and with which you can be identified. In this privacy policy, we would like to explain how, for what purpose, and on what legal basis we process your data.

The entity responsible for data processing on this website and in our company is:

Pension am Großen Garten
Beilstraße 30
01277 Dresden

Phone: +49 351 254740
Email: info@pension-am-grossen-garten.de

General Information

SSL or TLS Encryption

When you enter your data on websites, place online orders, or send emails via the internet, you must always expect that unauthorized third parties may access your data. Complete protection against such access is not possible. However, we do everything we can to protect your data and close security gaps where possible.

An important protection mechanism is the SSL or TLS encryption of our website, which ensures that data you transmit to us cannot be read by third parties. You can recognize the encryption by the lock icon before the entered internet address in your browser and by the fact that our internet address begins with https:// and not with http://.

How long do we store your data?

In some sections of this privacy policy, we inform you about how long we or the companies processing your data on our behalf will store your data. If no such information is provided, we will store your data until the purpose of data processing no longer applies, you object to the data processing, or you withdraw your consent to data processing.

However, in the event of an objection or withdrawal, we may continue processing your data if at least one of the following conditions applies:

We have compelling legitimate grounds for continuing the data processing that override your interests, rights, and freedoms (only in the case of an objection to data processing; if the objection concerns direct marketing, we cannot present legitimate grounds).

The data processing is necessary to assert, exercise, or defend legal claims (does not apply if your objection concerns direct marketing).

We are legally obligated to retain your data.

In this case, we will delete your data as soon as the condition(s) no longer apply.

Your Rights

Objection to Data Processing

IF YOU READ IN THIS PRIVACY POLICY THAT WE HAVE LEGITIMATE INTERESTS IN PROCESSING YOUR DATA AND RELY ON ARTICLE 6, PARAGRAPH 1, SENTENCE 1, LIT. F) OF THE GDPR, YOU HAVE THE RIGHT TO OBJECT UNDER ARTICLE 21 OF THE GDPR. THIS ALSO APPLIES TO PROFILES BASED ON THE ABOVE MENTIONED PROVISION. THE CONDITION IS THAT YOU PROVIDE REASONS FOR THE OBJECTION ARISING FROM YOUR PARTICULAR SITUATION. A REASON IS NOT REQUIRED IF THE OBJECTION CONCERNS THE USE OF YOUR DATA FOR DIRECT MARKETING.

THE CONSEQUENCE OF THE OBJECTION IS THAT WE MAY NO LONGER PROCESS YOUR DATA. THIS DOES NOT APPLY IF ONE OF THE FOLLOWING CONDITIONS APPLIES:

  • WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS.

  • THE PROCESSING IS NECESSARY TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS.

THE EXCEPTIONS DO NOT APPLY IF YOUR OBJECTION CONCERNS DIRECT MARKETING OR A PROFILE ASSOCIATED WITH IT.

Other Rights

Withdrawal of Your Consent to Data Processing

Many data processing operations are based on your consent. You give this, for example, by checking a box on online forms before submitting the form or by allowing certain cookies when you visit our website. You can withdraw your consent at any time without providing a reason (Article 7, Paragraph 3, GDPR). You will find all available settings in the Consent Banner for this website. From the time of the withdrawal, we may no longer process your data. The only exception: we are legally obliged to retain the data for a certain period. Such retention periods exist particularly in tax and commercial law.

Right to Lodge a Complaint with the Supervisory Authority

If you believe that we are violating the General Data Protection Regulation (GDPR), you have the right under Article 77 of the GDPR to lodge a complaint with a supervisory authority. You can contact a supervisory authority in the member state of your residence, place of work, or the place where the alleged infringement has occurred. The right to complain exists alongside administrative or judicial remedies.

Right to Data Portability

Data that we process based on your consent or in the performance of a contract must be provided to you or a third party in a commonly used, machine-readable format if you request it. We can only transfer the data to another controller if this is technically possible.

Right to Access, Rectification, and Deletion of Data

Under Article 15 of the GDPR, you have the right to obtain, free of charge, information about which personal data we have stored about you, where the data comes from, to whom we transfer the data, and for what purpose it is stored. If the data is incorrect, you have the right to rectification (Article 16 GDPR). Under the conditions of Article 17 GDPR, you can request that we delete the data.

Right to Restrict Processing

In certain situations, you can request that we restrict the processing of your data under Article 18 of the GDPR. The data may then only be processed in the following ways (apart from storage):

  • with your consent

  • for the assertion, exercise, or defense of legal claims

  • to protect the rights of another natural or legal person

  • for reasons of important public interest of the European Union or a member state

The right to restrict processing applies in the following situations:

  • You have disputed the accuracy of the personal data stored with us, and we need time to verify this. Here, the right applies for the duration of the review.

  • The processing of your personal data was unlawful in the past or is currently unlawful. Here, the right applies alternatively to the deletion of the data.

  • We no longer need your personal data, but you need it to exercise, defend, or assert legal claims. Here, the right applies alternatively to the deletion of the data.

  • You have objected under Article 21, Paragraph 1 of the GDPR, and now our and your interests need to be weighed against each other. Here, the right applies as long as the result of the weighing process is not yet determined.

Hosting and Content Delivery Networks (CDN)

External Hosting

Our website is hosted on a server provided by the following internet service provider (host):

Maxity Deutschland GmbH
Prager Str. 2b
01069 Dresden

Has a data processing agreement been concluded with the host?
Yes

How do we process your data?

The host stores all data from our website. This includes all personal data that is automatically collected or provided by you. These may include, in particular: your IP address, visited pages, names, contact details and inquiries, as well as meta and communication data. When processing data, Maxity Deutschland GmbH follows our instructions and processes the data only to the extent necessary to fulfill our performance obligations towards us.

On what legal basis do we process your data?

Since we address potential customers via our website and maintain contacts with existing customers, the data processing by our host serves the initiation and fulfillment of contracts and is therefore based on Art. 6 para. 1 lit. b) GDPR. In addition, it is our legitimate interest as a company to provide a professional internet service that meets the necessary security, speed, and efficiency requirements. Therefore, we also process your data based on Art. 6 para. 1 lit. f) GDPR.

Data Collection on this Website

Use of Cookies

Our website places cookies on your device. These are small text files that serve various purposes. Some cookies are technically necessary for the website to function at all (necessary cookies). Others are needed to perform specific actions or functions on the site (functional cookies). For example, without cookies, it would not be possible to use the advantages of a shopping cart in an online store. Other cookies are used to analyze user behavior or optimize advertising measures. If we use third-party services on our website, such as processing payment transactions, these companies may also leave cookies on your device when you visit the website (so-called third-party cookies).

How do we process your data?

Session cookies are stored on your device only for the duration of a session. Once you close the browser, they disappear automatically. Permanent cookies, on the other hand, remain on your device unless you delete them yourself. This may, for example, lead to your user behavior being permanently analyzed. You can influence how your browser handles cookies through the settings:

  • Do you want to be informed when cookies are set?

  • Do you want to exclude cookies generally or for specific cases?

  • Do you want cookies to be automatically deleted when you close the browser?

If you disable or do not allow cookies, the functionality of the website may be limited.

If we use cookies from other companies or for analysis purposes, we will inform you about this in this privacy policy. We will also ask for your consent when you visit our website.

On what legal basis do we process your data?

We have a legitimate interest in ensuring that our online services can be used by visitors without technical problems and that all desired functions are available to them. Therefore, the storage of necessary and functional cookies on your device is based on Art. 6 para. 1 lit. f) GDPR. We use all other cookies based on Art. 6 para. 1 lit. a) GDPR, provided that you give us the corresponding consent. You can withdraw this consent at any time with effect for the future. If you consent to the placement of necessary and functional cookies, the storage of these cookies is also based solely on your consent.

Server Log Files

Server log files record all requests and accesses to our website and capture error messages. They also include personal data, in particular your IP address. However, this is anonymized by the provider shortly after, so we cannot assign the data to you personally. The data is transmitted automatically from your browser to our provider.

How do we process your data?

Our provider stores the server log files to track activities on our website and identify errors. The files contain the following data:

  • Browser type and version

  • Operating system used

  • Referrer URL

  • Hostname of the accessing computer

  • Time of the server request

  • IP address (possibly anonymized)

We do not combine this data with other data but only use it for statistical analysis and to improve our website.

On what legal basis do we process your data?

We have a legitimate interest in ensuring that our website runs without errors. It is also our legitimate interest to have an anonymized overview of the accesses to our website. Therefore, data processing is legal under Art. 6 para. 1 lit. f) GDPR.

Contact Form

You can send us a message via the contact form on this website.

How do we process your data?

We store your message and the information from the form to process your inquiry, including follow-up questions. This also includes the contact details provided. We will not pass the data on to others without your consent.

How long do we store your data?

We delete your data as soon as one of the following occurs:

  • Your inquiry has been fully processed.

  • You request us to delete the data.

  • You revoke your consent for storage.

This does not apply if we are legally required to retain the data.

On what legal basis do we process your data?

If your inquiry is related to our contractual relationship or serves to carry out pre-contractual measures, we process your data based on Art. 6 para. 1 lit. b) GDPR. In all other cases, it is our legitimate interest to process inquiries directed to us effectively. The legal basis for data processing is therefore Art. 6 para. 1 lit. f) GDPR. If you consented to the storage of your data, the legal basis is Art. 6 para. 1 lit. a) GDPR. In this case, you can revoke your consent at any time with effect for the future.

Inquiries via Email, Phone, or Fax

You can send us a message via email or fax, or call us.

How do we process your data?

We store your message and the contact details you provide, including the telephone number, to process your inquiry, including follow-up questions. We will not pass the data on to others without your consent.

How long do we store your data?

We delete your data as soon as one of the following occurs:

  • Your inquiry has been fully processed.

  • You request us to delete the data.

  • You revoke your consent for storage.

This does not apply if we are legally required to retain the data.

On what legal basis do we process your data?

If your inquiry is related to our contractual relationship or serves to carry out pre-contractual measures, we process your data based on Art. 6 para. 1 lit. b) GDPR. In all other cases, it is our legitimate interest to process inquiries directed to us effectively. The legal basis for data processing is therefore Art. 6 para. 1 lit. f) GDPR. If you consented to the storage of your data, the legal basis is Art. 6 para. 1 lit. a) GDPR. In this case, you can revoke your consent at any time with effect for the future.

Analytics Tools and Advertising

We use the following tools to analyze the behavior of our website visitors and display advertisements to them.

Matomo Analytics (locally installed)

How do we process your data?

We are always interested in optimizing our web offerings for users and placing advertisements optimally. Matomo Analytics, an open-source tool, helps us analyze user behavior and provides us with the necessary data for adjustments. We have configured Matomo so that it does not store cookies and personal data that can be used to identify a visitor. Matomo records page views, the region from which they originate, IP address, referrers, browsers, and operating systems used. The tool can also measure whether our website visitors perform certain actions (e.g., clicking links or making purchases). After anonymizing your IP address, the collected data is stored exclusively on our server.

On what legal basis do we process your data?

As the website operator, we have a legitimate interest in the anonymized analysis of user behavior to optimize our web offerings and the advertisements placed there. Therefore, data processing is legal under Art. 6 para. 1 lit. f) GDPR.

Plugins and Tools

OpenStreetMap

What is OpenStreetMap?
Cartography service of the OpenStreetMap Foundation

Who processes your data?
OpenStreetMap Foundation (OSMF), 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom

Where can you find more information about data protection at OpenStreetMap?
https://wiki.osmfoundation.org/wiki/Privacy_Policy

How do we process your data?

On our website, we use maps from the OpenStreetMap Foundation. This means that your IP address and information about your browsing behavior are forwarded to the foundation and stored there when you visit our website. The foundation places cookies on your device for this purpose or uses comparable recognition technologies. If you have allowed location tracking in your device settings, OpenStreetMap also stores this data.

On what legal basis do we process your data?

The maps from OpenStreetMap ensure that the locations provided on our website are easier for visitors to find. As a company, we have a legitimate interest in this. Therefore, data processing is legal under Art. 6 para. 1 lit. f) GDPR.

If you have consented to the data processing, we process your data solely on the basis of Art. 6 para. 1 lit. a) GDPR. You can revoke your consent at any time. From the moment of revocation, we may no longer process your data.