Privacy Policy
1. PRIVACY AT A GLANCE
General information
The following provides a brief overview of what happens to your personal data when you visit our website. Personal data is any data that can identify you personally. For full details, please see the Privacy Policy below.
Data collection on our website
Who is responsible for data collection on this website?
The website operator processes the data on this website. You can find the operator's contact details in the Legal Notice on this website.
How do we collect your data?
Some data is collected when you provide it to us, for example when you enter information in a contact form.
Our IT systems collect other data automatically when you visit the website. This is primarily technical data such as your browser, operating system or the time you accessed the page. Collection begins automatically as soon as you visit our website.
What do we use your data for?
We collect some data to ensure that the website functions properly. We may use other data to analyse how you use the website.
What rights do you have regarding your data?
You have the right at any time to obtain information, free of charge, about the source, recipients and purpose of your stored personal data. You also have the right to request that this data be corrected, blocked or deleted. You can contact us at any time at the address listed in the Legal Notice to exercise these rights or ask other questions about data protection. You also have the right to lodge a complaint with the competent supervisory authority.
Analytics and third-party tools
When you visit our website, your browsing behaviour may be evaluated statistically, primarily through cookies and analytics programs. This analysis is generally anonymous and your browsing behaviour cannot be traced back to you. You can object to the analysis or prevent it by choosing not to use certain tools. Further details are provided in the following Privacy Policy.
You can object to this analysis. This Privacy Policy explains how to exercise that right.
2. GENERAL AND MANDATORY INFORMATION
Privacy policy
The operators of this website take the protection of your personal data very seriously. We handle your personal data confidentially and in accordance with statutory data protection requirements and this Privacy Policy.
We collect various types of personal data when you use this website. Personal data is data that can identify you personally. This Privacy Policy explains what data we collect, what we use it for, and how and why we process it.
Please be aware that data transmission over the internet, for example when communicating by email, may be subject to security vulnerabilities. It is not possible to protect data completely against access by third parties.
Data controller
The controller responsible for processing data on this website is:
Hotel Grille GbR
The Materna family
Bunsenstraße 35
91058 Erlangen
Represented by:
Mareen Materna & Sören Materna
Telephone: +49 9131 7630
Email: service@hotel-grille.de
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data such as names or email addresses.
Withdrawing consent to data processing
Many data processing operations are possible only with your express consent. You may withdraw consent you have already given at any time by sending us an email. The withdrawal does not affect the lawfulness of processing that took place before you withdrew your consent.
Right to lodge a complaint with the competent supervisory authority
If data protection law is infringed, the data subject has the right to lodge a complaint with the competent supervisory authority. The authority responsible for data protection matters is the data protection commissioner of the German federal state in which our company is based. A list of data protection commissioners and their contact details is available at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Right to data portability
You have the right to have data that we process by automated means based on your consent or in performance of a contract provided to you or a third party in a commonly used, machine-readable format. If you request direct transmission to another controller, we will do so where technically feasible.
SSL or TLS encryption
This website uses SSL or TLS encryption for security and to protect the transmission of confidential content, such as orders or enquiries you send to us as the website operator. You can recognise an encrypted connection when the browser address changes from “http://” to “https://” and a lock icon appears in the address bar.
When SSL or TLS encryption is enabled, third parties cannot read the data you send us.
Encrypted payments on this website
If you are required to send us payment details after concluding a contract that requires payment, such as your account number for a direct debit, we need these details to process the payment.
Payments using common methods such as Visa, Mastercard and direct debit are processed exclusively over an encrypted SSL or TLS connection. You can recognise an encrypted connection when the browser address changes from “http://” to “https://” and a lock icon appears in the address bar.
When the connection is encrypted, third parties cannot read the payment data you send us.
Access, blocking and deletion
Within the scope of applicable law, you have the right at any time to obtain information free of charge about your stored personal data, its source and recipients, and the purpose of processing it. Where applicable, you also have the right to have the data corrected, blocked or deleted. You can contact us at the address in the Legal Notice to exercise these rights or ask any other questions about personal data.
3. DATA COLLECTION ON OUR WEBSITE
Cookies
Some pages use cookies. Cookies do not damage your computer and do not contain viruses. We use them to make our website easier to use, more effective and more secure. Cookies are small text files placed on your computer and stored by your browser.
Most cookies we use are session cookies, which are deleted automatically when your visit ends. Other cookies stay on your device until you delete them. These cookies allow us to recognise your browser when you return.
You can configure your browser to tell you when cookies are set and allow them only on a case-by-case basis. You can also block cookies in specific cases or altogether, and enable automatic deletion when you close the browser. Disabling cookies may limit the functionality of this website.
Cookies required for electronic communication or to provide features you have requested, such as a shopping basket, are stored on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in storing these cookies to provide its services reliably and efficiently. Any other cookies, such as those used to analyse your browsing behaviour, are discussed separately in this Privacy Policy.
Server log files
The website host automatically collects and stores information in server log files. Your browser transmits the following information to us automatically:
-
Browser type and version
-
Operating system in use
-
Referrer URL
-
Host name of the accessing computer
-
Time of the server request
-
IP address
We do not combine this data with other data sources.
The legal basis for processing is Article 6(1)(f) GDPR, which permits the processing of data for performance of a contract or pre-contractual measures.
Contact form
If you send us an enquiry using the contact form, we store the information you provide, including your contact details, to handle your enquiry and any follow-up questions. We do not share this data without your consent.
We process the data you enter in the contact form solely on the basis of your consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time by sending us an email. Withdrawal does not affect the lawfulness of processing that took place before you withdrew your consent.
We retain the data you enter in the contact form until you ask us to delete it, withdraw your consent to its storage, or the reason for keeping it no longer applies, for example once we have dealt with your enquiry. Mandatory legal requirements, particularly retention periods, still apply.
Processing customer and contract data
We collect, process and use personal data only as necessary to establish, define or amend the legal relationship (customer account data). This is based on Article 6(1)(b) GDPR, which permits processing for performance of a contract or pre-contractual measures. We collect, process and use personal data on use of our website (usage data) only as necessary to enable users to use the service or to bill them for it.
We delete customer data when the order is completed or the business relationship ends. Statutory retention periods still apply.
Data transfers on conclusion of contracts for services and digital content
We transfer personal data to third parties only when necessary to perform a contract, for example to the bank responsible for processing payment.
We do not transfer data for any other purpose unless you have expressly consented. We do not share your data with third parties without your express consent, for example for advertising.
The legal basis for processing is Article 6(1)(b) GDPR, which permits the processing of data for performance of a contract or pre-contractual measures.
SEEKDA / KOGNITIV
This website uses features of the Seekda/Kognitiv booking engine. The provider is Kognitiv_, Neubaugasse 10/15, 1070 Vienna, Austria.
For more information about how Kognitiv handles user data, see its Privacy Policy. You can access it during the booking process using the link labelled “Hotel and Booking Software Privacy Policy”.
4. ANALYTICS TOOLS AND ADVERTISING
Google Analytics
This website uses features of Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses cookies. These are text files stored on your computer that allow Google to analyse your use of the website. Information generated by the cookie about your use of this website is generally transmitted to a Google server in the United States and stored there.
Google Analytics cookies are stored on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in analysing user behaviour to improve both its website and its advertising.
IP anonymisation
We have enabled IP anonymisation on this website. Google therefore shortens your IP address within EU member states or other countries party to the Agreement on the European Economic Area before transmission to the United States. In exceptional cases, Google transmits the full IP address to a server in the United States and shortens it there. On behalf of the website operator, Google will use this information to evaluate your use of the website, compile reports on website activity and provide the website operator with other services relating to website and internet use. Google will not combine the IP address transmitted by your browser through Google Analytics with other Google data.
Browser plug-in
You can prevent cookies from being stored by adjusting your browser settings. However, some website features may then be unavailable or limited. You can also prevent the data generated by the cookie about your use of the website, including your IP address, from being collected by Google and prevent Google from processing it by downloading and installing the browser plug-in at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Objecting to data collection
You can prevent Google Analytics from collecting your data by clicking the following link. This sets an opt-out cookie that prevents data collection on future visits to this website:
For more information on how Google Analytics handles user data, see Google's Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=de.
Data processing agreement
We have entered into a data processing agreement with Google and comply fully with the strict requirements of the German data protection authorities when using Google Analytics.
5. PLUG-INS AND TOOLS
Google Web Fonts
This website uses web fonts provided by Google to display typefaces consistently. When you open a page, your browser loads the required web fonts into its cache so it can display text and typefaces correctly.
For this purpose, your browser must connect to Google's servers. Google thereby learns that your IP address accessed our website. We use Google Web Fonts to present our online content consistently and attractively. This constitutes a legitimate interest under Article 6(1)(f) GDPR.
If your browser does not support web fonts, your computer uses a standard font.
For further information about Google Web Fonts, visit https://developers.google.com/fonts/faq and see Google's Privacy Policy: https://www.google.com/policies/privacy/.
Google Maps
This website uses the Google Maps service via an API. It is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Using Google Maps features requires storing your IP address. This information is generally transmitted to and stored on a Google server in the United States. The operator of this website has no control over this transmission.
We use Google Maps to present our online content attractively and make the locations listed on our website easy to find. This constitutes a legitimate interest under Article 6(1)(f) GDPR.
For more information about how user data is handled, see Google's Privacy Policy: https://www.google.de/intl/de/policies/privacy/.
Google Translate
This website uses the Google Translate service via an API. It is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Using Google Translate features requires storing your IP address. This information is generally transmitted to and stored on a Google server in the United States. The operator of this website has no control over this transmission.
We use Google Translate to make our online content easy for international visitors to access. This constitutes a legitimate interest under Article 6(1)(f) GDPR.
For more information about how user data is handled, see Google's Privacy Policy: https://www.google.de/intl/de/policies/privacy/.
TrustYou hotel reviews
This website uses tools to retrieve recent guest reviews of our hotel from the review platform trustyou.de (TrustYou GmbH, TrustYou Headquarters, Munich Center of Technology, Agnes-Pockels-Bogen 1, 80992 Munich) and display them on the website. Your IP address is transmitted to the review platform's server for this purpose. We display guest reviews to provide comprehensive, impartial information about our hotel. This constitutes a legitimate interest under Article 6(1)(f) GDPR.
wetteronline.de
This website uses tools to provide up-to-date weather forecasts for the area around our hotel. It retrieves current weather data from wetteronline.de (WetterOnline Meteorologische Dienstleistungen GmbH, Karl-Legien-Straße 194a, D-53117 Bonn, Germany). Your IP address is transmitted to the provider's server and stored there. We display the forecast to present our online content in an attractive and informative way. This constitutes a legitimate interest under Article 6(1)(f) GDPR.
Outdooractive
This website uses tools to provide interactive walking and cycling routes in the area around our hotel. It retrieves data from outdooractive.de (Outdooractive GmbH & Co. KG, Missener Straße 18, 87509 Immenstadt, Germany). Your IP address is transmitted to the provider's server. We display the weather forecast to present our online content in an attractive and informative way. This constitutes a legitimate interest under Article 6(1)(f) GDPR.