Data protection declaration

Name and contact details of the data controller 

The controller under the EU General Data Protection Regulation (GDPR) is:

Hotel Villa Orange, Owner Christiane Hütte, Hebelstraße 1, 60318 Frankfurt am Main

(hereinafter referred to as “we”)

Phone: 069 40584 0

Email: contact@villa-orange.de

Collection of general information

When you access our website, information of a general nature is automatically collected. This information (server log files) includes the type of web browser, the operating system used, the domain name of your internet service provider and similar information. This is exclusively information which does not allow any conclusions to be drawn about you personally. This information is technologically necessary in order to correctly execute the content of websites you have requested and is absolutely necessary when using the internet. We statistically evaluate anonymous information of this kind in order to optimize our internet presence and the technology behind it.

Cookies, data recipients and transfer of data to third countries

This website uses what are called cookies. These are small text files that are transferred to your hard drive from a website server. This automatically provides us with certain data, such as IP address, browser used, operating system via your computer and your connection to the internet.

Cookies cannot be used to start programs or to transmit viruses to a computer. Based on the information contained in cookies, we can make navigation easier for you and enable our website to be displayed correctly.

Of course, you can also view our website without cookies. Internet browsers are regularly set to accept cookies. You can deactivate the use of cookies at any time via the settings of your browser. Use the help functions of your internet browser to find out how you can change these settings. Please note that some features of our website may not work if you have disabled the use of cookies.

The recipients of data are employees within our company who need them to process the tasks listed in the following. In addition, we also process your booking data via Hotelpartner Deutschland GmbH, Neuer Wall 32, 20354 Hamburg, so that this company is also the recipient of your data on our behalf. The data will only be processed in third countries if this is necessary to fulfill the contract (for payment purposes, for example).

The data we collect will not be passed on to third parties. Furthermore, we do not create any links to personal data without your consent. 

Email/contact form; purposes for which we process personal data; legal basis and processing categories

If you contact us by email or contact form, the information you provide will only be processed for the purpose of processing your contact request and for possible follow-up questions.

Within the scope of balancing interests to protect the legitimate interests of the data controller or a third party pursuant to Art. 6 para. 1 letter f of the GDPR, we process your data for the purpose of processing your request.

On the basis of your consent pursuant to Art. 6 para. 1 letter a of the GDPR, the lawfulness is given on the basis of the consent given to us in each case for the purposes stated in the consent. Any consent given to us can be withdrawn at any time with effect for the future. 

If we process personal data about you for the purpose of your application for an employment relationship, this will only be done to the extent necessary for the decision of establishing an employment relationship. The legal basis for this is Section 26 (1) in conjunction with Par. 8 p. 2 of the Federal Data Protection Act.

Furthermore, we may process your personal data insofar as this is necessary to defend against legal claims asserted against us arising from the application process. The legal basis for this is Art. 6 Para. 1 letter f of the GDPR; the legitimate interest is, for example, the burden of proof in proceedings under the General Act on Equal Treatment (AGG).

Insofar as an employment relationship between you and us comes to exist, we may process the personal data already received from you for the purposes of the employment relationship in accordance with Section 26 (1) of the German Federal Data Protection Act if this is necessary for the performance or termination of the employment relationship or for the exercise or fulfillment of the rights and obligations of the employees’ representation of interests resulting from the law or a collective labor agreement, company or employment agreement (collective bargaining agreement).

We process data in connection with your application. This may include general information about you (such as your name, address and contact details), information about your professional qualifications and school education or information about continuing professional education or other information you provide us in connection with your application. We may also process job-related information you make publicly available, such as a profile on professional social media networks.

Registration and processing of online reservations and booking

When you make a reservation through our online booking engine, we process your personal data to enable your reservation for the selected period.

The processing takes place for the purpose of providing the contractual services, to process your reservation and your stay, for example to process your payment, to ensure that your room is available, to provide you with the related customer service, or to send you a confirmation or a message in connection with your reservation before your arrival.

The data processed includes last name, first name, address, email address, phone number, age, credit card details.

Processing is carried out on the basis of Art. 6 Para. 1 letter b (execution of order processes) and letter c (legally required archiving) of the GDPR. The information designated as required is required to establish and fulfil the contract. We only disclose the data to third parties within the framework of the booking service, payment or within the scope of legal permits and obligations towards legal advisors and authorities.

When you make a reservation, re-register or use our online booking engine, we store the IP address and the time of the respective user activity. The data is stored on the basis of our legitimate interests as well as the user’s protection against misuse and other unauthorized use. This data is not passed on to third parties in principle, unless it is necessary to pursue our claims or there is a legal obligation to do so pursuant to Art. 6 para. 1 letter c of the GDPR.

Time period for which personal data is stored

We adhere to the principles of data avoidance and data minimization. We therefore only store your personal data for as long as this is necessary to achieve the purposes stated here or to fulfill our contractual or legal obligations. After the respective purpose has ceased or these obligations have expired, the corresponding data will be blocked or deleted as a matter of routine and in accordance with legal regulations.

We will store the personal data you provide for the purpose of your application for as long as it is necessary in order to make a decision regarding your application. If an employment relationship between you and us does not materialize, we may also further store data, insofar as this is necessary to defend against possible legal claims. The application documents will be deleted four months after notification of the rejection of the application, unless longer storage is required as a result of legal disputes.

The deletion of your personal data in connection with registration and reservation processing via our online booking engine takes place after the expiry of legal warranty obligations and comparable obligations. The need for data storage is reviewed every three years; in the case of statutory archiving obligations, the data is deleted after their expiry (end of the retention obligation under commercial law (6 years) and under tax law (10 years)).

Usage of Google Analytics

This website uses Google Analytics, a web analysis service of Google Inc. (hereinafter: Google). Google Analytics uses cookies, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymization on these websites, your IP address will be shortened beforehand by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide the website operator with further services associated with website use and internet use. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.

You can disable the storage of cookies by adjusting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: Browser-Add-on to disable Google Analytics.

In addition to or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages bydiesen Link anklicken. An opt-out cookie is installed on your device. This will prevent Google Analytics from collecting data for this website and for this browser in the future as long as the cookie remains installed in your browser.

Use of script libraries (Google Web Fonts)

In order to present our contents correctly and in a graphically appealing way for all browsers, we use script libraries and font libraries on this website, such as Google Web Fonts (https://www.google.com/webfonts/). Google Web Fonts are transferred to your browser’s cache to avoid multiple loading. If your browser does not support Google Web Fonts or does not allow access, content will be displayed in a default font.

Accessing script libraries or font libraries automatically triggers a connection to the library operator. In theory, it is possible that operators of corresponding libraries collect data, but it is currently also unclear whether and, if so, for what purposes.

You can find the privacy policy of library operator Google here: https://www.google.com/policies/privacy/

Google AdWords

We use the online advertising program “Google AdWords” and conversion tracking as part of Google AdWords. Google Conversion Tracking is an analysis service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). If you have reached our website via an ad placed by Google, Google AdWords places a cookie on your computer. The conversion tracking cookie is placed when a user clicks on an ad served by Google. These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can see that the user has clicked on the ad and has been redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot therefore be traced through the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers see the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

If you do not wish to participate in tracking, you can refuse the placement of a cookie required for this, for example via browser settings that generally deactivate the automatic setting of cookies or set your browser so that cookies are blocked by the domain “googleleadservices.com”.

Please note that you may not delete the opt-out cookies as long as you do not wish measurement data to be recorded. If you have deleted all your cookies in your browser, you must set the respective opt-out cookie again.

Usage of Google Maps

This website uses Google Maps API to display geographical information visually. When using Google Maps, Google also collects, processes and uses data about the use of map functions by visitors. You can find more information about Google’s data processing in Google`s privacy policy . You can also change your personal data protection settings in the Data Protection Center there. 

Detailed instructions for managing your own data in connection with Google products can be found here. 

Your rights under the GDPR

You have the following rights:

• Right of access under Article 15 of the GDPR,
• Right of rectification under Article 16 of the GDPR
• Right of erasure under Article 17 of the GDPR
• Right to restrict processing under Article 18 of the GDPR
• Right to data portability under Article 20 of the GDPR

The rights to access and erasure are subject to the restrictions of Sections 34 and 35 of the German Federal Data Protection Act. In addition, you have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 of the GDPR in accordance with Section 19 of the German Federal Data Protection Act.

You have the right to object to the processing of your personal data at any time for grounds relating to your particular situation, insofar as the processing of your personal data takes place on the basis of Art. 6 para 1 letter f of the GDPR. We will then no longer process this personal data unless we can prove compelling legitimate grounds for the processing, which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims. The objection can be raised at any time in any form with the data controller.

You can withdraw your consent to the processing of personal data given to us at any time with effect for the future.

No automated decision-making
There is no automated decision-making in individual cases within the scope of Art. 22 of the GDPR.

SSL encoding
To protect the security of your data during transmission, we use state-of-the-art encryption methods (such as SSL) via HTTPS.

Changes to our data protection policy
We reserve the right to occasionally adapt this data protection declaration to ensure that it continuously complies with current legal requirements, or to implement changes to our services in the data protection declaration, for example when introducing new services. The new data protection declaration will then apply for your next visit.

Data protection officer
For all questions related to the processing of your personal data and the exercising of your rights under the GDPR, please send us an email or contact our data protection officer directly:

Attorney Stefan Hohl, Brunnenstraße 23, 63477 Maintal

info@h-kanzlei.de.