The following information provides an easy-to-navigate overview of what will happen to your personal data when you visit this website. The term “personal data” includes all data that can be used to identify you personally. For detailed information about data protection, please consult our Data Protection Declaration, which we have included below this text.
The data on this website is processed by the operator of the website, whose contact information is available under the section “Information about the responsible party (referred to as the “controller” in the GDPR)” in this Privacy Policy.
We collect your data as a result of you sharing it with us. This may, for instance, be information you enter into our contact form.
Other data will be recorded by our IT systems automatically or after you consent to its recording during your website visit. This data comprises primarily technical information (e.g. web browser, operating system, or time the site was accessed). This information is recorded automatically when you access this website.
A portion of the information is generated to guarantee the error-free provision of the website. Other data may be used to analyse your user patterns.
You have the right to receive information about the source, recipients and purposes of your archived personal data at any time without having to pay a fee for such disclosures. You also have the right to demand that your data be rectified or eradicated. If you have consented to data processing, you have the option to revoke this consent at any time, which shall affect all future data processing. Moreover, you have the right to demand that the processing of your data be restricted under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
Please do not hesitate to contact us at any time if you have questions about this or any other data protection related issues.
There is a possibility that your browsing patterns will be statistically analysed when you visit this website. Such analyses are performed primarily with what we refer to as analysis programmes.
For detailed information about these analysis programmes please consult our Data Protection Declaration below.
This website is hosted by an external service provider. Personal data collected on this website are stored on the host's servers. These may include, but are not limited to, IP addresses, contact requests, metadata and communications, contract information, contact information, names, website access, and other data generated through a website.
The host is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of the secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR).
Our host will only process your data to the extent necessary to fulfil its performance obligations and to follow our instructions with respect to such data.
We are using the following host:
Hetzner Online GmbH
Industriestraße 25
91710 Gunzenhausen
We have concluded a data processing agreement (DPA) with the above-mentioned provider. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.
The operators of this website and its pages take the protection of your personal data very seriously. Therefore, we shall treat your personal data as confidential information and in compliance with the statutory data protection regulations and this Data Protection Declaration.
Whenever you use this website, a variety of personal information will be collected. Personal data comprises data that can be used to personally identify you. This Data Protection Declaration explains which data we collect as well as the purposes we use this data for. It also explains how, and for which purpose the information is collected.
We hereby advise you that the transmission of data via the internet (i.e., through e-mail communications) may be prone to security gaps. It is not possible to completely protect data against third-party access.
The data controller on this website is:
Victoria Foidl - Schneider
Hotel Tannenhof
Hinterbichl 12
6610 Wängle/Reutte
Phone: 05672-63802
E-mail: info@tannenhof.cc
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (for example, names, email addresses, etc.).
Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, the deletion will take place after these reasons cease to apply.
We have appointed a data protection officer for our company.
Victoria Foidl - Schneider
Hotel Tannenhof
For the attention of the Data Protection Coordinator
Hinterbichl 12
6610 Wängle/Reutte
Phone: 05672-63802
E-mail: info@tannenhof.cc
Among other things, we use tools from companies domiciled in the United States or other non-EU countries that are not secure from a data protection perspective. If these tools are active, your personal data may potentially be transferred to these non-EU countries and processed there. We must point out that a data protection level comparable to that in the EU cannot be guaranteed in these countries. For example, US companies are mandated to release personal data to security agencies, and you, as the data subject, have no legal recourse to defend yourself in court. Therefore, it cannot be ruled out that US agencies (e.g., the Secret Service) may process, analyse, and permanently archive your personal data for surveillance purposes. We have no control over these processing activities.
A wide range of data processing transactions are possible only subject to your express consent. You can also revoke, at any time, any consent you have already given us. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.
IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF YOU LODGE AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING PROTECTION-WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA WHICH OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE ASSERTION, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR).
IF YOUR PERSONAL DATA IS BEING PROCESSED FOR THE PURPOSES OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING AT ANY TIME. THIS ALSO APPLIES TO PROFILING WHERE IT RELATES TO SUCH DIRECT MARKETING. WHERE YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE PROCESSED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ARTICLE 21(2) GDPR).
In the event of infringements of the GDPR, data subjects are entitled to lodge a complaint with a supervisory authority, in particular in the Member State where they have their habitual residence, place of work or the place where the alleged infringement occurred. The right to lodge a complaint shall be without prejudice to any other administrative or judicial remedy.
You have the right to request that we provide you, or a third party, with any data we automatically process based on your consent or in order to fulfil a contract, in a commonly used, machine-readable format. If you request the direct transfer of data to another controller, this will only be done if it is technically feasible.
For security reasons and to protect the transmission of confidential content, such as purchase orders or inquiries you submit to us as the website operator, this website uses either an SSL or a TLS encryption program. You can recognise an encrypted connection by checking whether the address line of the browser switches from “http://” to “https://” and also by the appearance of the lock icon in the browser line.
If SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.
Within the scope of the applicable statutory provisions, you have the right to at any time demand information about your archived personal data, their source and recipients as well as the purpose of the processing of your data. You may also have a right to have your data rectified or eradicated. If you have questions about this subject matter or any other questions about personal data, please do not hesitate to contact us at any time.
You have the right to request that the processing of your personal data be restricted. You may exercise this right at any time by contacting us. The right to request restriction of processing applies in the following circumstances:
If you have restricted the processing of your personal data, these data – with the exception of their archiving – may be processed only subject to your consent, or to claim, exercise or defend legal entitlements, or to protect the rights of other natural or legal persons, or for important grounds of public interest of the Union or of a Member State.
Our websites and pages make use of what the industry refers to as “cookies.” Cookies are small text files that do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or they are permanently archived on your device (permanent cookies). Session cookies are automatically deleted once you close your visit. Permanent cookies remain archived on your device until you actively delete them, or they are automatically removed by your web browser.
In some cases, third-party cookies may be stored on your device when you access our site. These cookies allow you or us to make use of certain services provided by the third party (for example, cookies for processing payment services).
Cookies serve a variety of functions. Many cookies are technically essential, as certain website functions would not work without them (e.g., the shopping cart function or video playback). The purpose of other cookies may be to analyse user patterns or display promotional messages.
Cookies that are either necessary for the performance of electronic communication transactions (essential cookies) or for the provision of certain functions you want to use (functional cookies, e.g. for the shopping cart function) or that are necessary for the optimisation of the website (e.g. cookies which provide measurable insights into the web audience) shall be stored on the basis of Art. 6(1)(f) GDPR, unless a different legal basis is cited. The operator of the website has a legitimate interest in the storage of cookies to ensure the technically error-free and optimised provision of the operator’s services. If your consent to the storage of the cookies has been requested, the respective cookies are stored exclusively on the basis of the consent obtained (Art. 6(1)(a) GDPR); this consent may be revoked at any time.
You have the option to set up your browser in such a way that you will be notified any time cookies are placed, and to permit the acceptance of cookies only in specific cases. You may also exclude the acceptance of cookies in certain cases or in general, or activate the delete function for the automatic eradication of cookies when the browser closes. If cookies are deactivated, the functions of this website may be limited.
In the event that third-party cookies are used or if cookies are used for analytical purposes, we will separately notify you in conjunction with this Data Protection Policy and, if applicable, ask for your consent.
This website uses the consent technology of Usercentrics to obtain your consent to the storage of certain cookies on your device or for the use of specific technologies, and to document the former in a data protection compliant manner. The party offering this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, website: https://usercentrics.com/ (hereinafter referred to as “Usercentrics”).
Whenever you visit our website, the following personal data will be transferred to Usercentrics:
Moreover, Usercentrics shall store a cookie in your browser to be able to allocate your declaration(s) of consent or any revocations of the former. The data that are recorded in this manner shall be stored until you ask us to eradicate them, delete the Usercentrics cookie or until the purpose for archiving the data no longer exists. This shall be without prejudice to any mandatory legal retention periods.
Usercentrics uses cookies to obtain the declarations of consent mandated by law. The legal basis for the use of specific technologies is Art. 6(1)(c) GDPR.
The provider of this website and its pages automatically collects and stores information in so-called server log files, which your browser communicates to us automatically. The information comprises:
This data has not been merged with other data sources.
These data are recorded on the basis of Art. 6(1)(f) GDPR. The operator of the website has a legitimate interest in the technically error-free presentation and optimisation of the operator’s website. To achieve this, server log files must be recorded.
We do use plug-ins of social media networks on this website and its pages (e.g. Facebook, Twitter, Instagram, Pinterest, XING, LinkedIn, Tumblr).
As a general rule, you will be recognisable these plug-ins by their respective social media logos. To ensure that data is protected on this website, we only use these plug-ins in conjunction with the “Shariff” solution. This application prevents the plug-ins integrated into this website from transferring data to the respective provider as soon as you visit our website.
A direct connection to the provider's server will not be established until you have activated the respective plug-in by clicking on the affiliated button (which indicates your consent). As soon as you activate the plug-in, the respective provider will receive the information that you have visited this website with your IP address. If you are simultaneously logged into your respective social media account (e.g. Facebook), the respective provider will be able to allocate your visit to this website to your user account.
The activation of the plug-in constitutes a declaration of consent as defined in Art. 6(1)(a) GDPR. You have the option to revoke this consent at any time, which shall affect all future transactions.
This website uses the WP Statistics analysis tool to statistically evaluate visitor accesses. The provider is Veronalabs, ARENCO Tower, 27th Floor, Dubai Media City, Dubai, Dubai 23816, UAE.https://veronalabs.com).
WP Statistics can be used to analyse the use of our website. In doing so, WP Statistics records, among other things, log files (IP address, referrer, browser used, origin of the user, search engine used) and actions that website visitors have taken on the site (e.g. clicks and views).
The data collected by WP Statistics is stored exclusively on our own server.
The use of this analysis tool is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the anonymised analysis of user behaviour in order to optimise both our websites and our advertising. If consent has been requested (e.g. consent to the storage of cookies), processing will be carried out exclusively on the basis of Art. 6(1)(a) GDPR; consent may be revoked at any time.
We use WP Statistics with anonymised IPs. Your IP address is shortened so it can no longer be directly assigned to you.
This website uses so-called Web Fonts provided by Google to ensure the uniform use of fonts on this site. These Google fonts are locally installed so that a connection to Google’s servers will not be established in conjunction with this application.
For more information on Google Web Fonts, please follow this link: https://developers.google.com/fonts/faq and consult Google’s Data Privacy Declaration at: https://policies.google.com/privacy?hl=en.
This website uses Font Awesome to ensure the consistent use of fonts across the site. Font Awesome is installed locally, so no connection will be made to Fonticons, Inc.’s servers with this application.
For more information on Font Awesome, please consult the Data Privacy Declaration for Font Awesome under: https://fontawesome.com/privacy.
This website uses the mapping service Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
To enable the use of Google Maps features, your IP address must be stored. As a rule, this information is transferred to one of Google’s servers in the United States, where it is archived. The operator of this website has no control over the data transfer. In case Google Maps has been activated, Google has the option to use Google web fonts for the purpose of the uniform depiction of fonts. When you access Google Maps, your browser will load the required web fonts into your browser cache, to correctly display text and fonts.
We use Google Maps to present our online content in an appealing manner and to make the locations disclosed on our website easy to find. This constitutes a legitimate interest as defined in Art. 6(1)(f) GDPR. If a respective declaration of consent has been obtained, the data shall be processed exclusively on the basis of Art. 6(1)(a) GDPR. This declaration of consent may be revoked at any time.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Further details may be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
For more information on the handling of user data, please review Google’s Data Privacy Declaration at: https://policies.google.com/privacy?hl=en.
We've included Wordfence on this website. The provider is Defiant Inc, Defiant, Inc, 800 5th Ave Ste 4100, Seattle, WA 98104, USA (hereinafter Wordfence).
Wordfence is designed to protect our website from unwanted access or malicious cyberattacks. To accomplish this, our website establishes a permanent connection with Wordfence’s servers, which check and block their databases against access to our website.
The use of Wordfence is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the most effective protection of their website against cyberattacks. If the appropriate consent has been requested, processing will be carried out exclusively on the basis of Art. 6(1)(a) GDPR; consent may be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find more details here: https://www.wordfence.com/help/general-data-protection-regulation/.
We collect, process, and use personal data only to the extent necessary for the establishment, content organisation or amendment of the legal relationship (data inventory). These actions are taken on the basis of Art. 6(1)(b) GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual actions. We collect, process, and use personal data concerning the use of this website (usage data) only to the extent that this is necessary to make it possible for users to utilise the services and to bill for them.
The collected customer data shall be deleted upon completion of the order or the termination of the business relationship. This shall be without prejudice to any statutory retention periods.
We only share personal data with third parties if it is necessary for the purposes of fulfilling the contract; for instance, with the financial institution responsible for processing payments.
Any further transfer of data shall not take place, or shall only take place if you have expressly consented to the transfer. Any sharing of your data with third parties in the absence of your express consent, for instance for advertising purposes, shall not take place.
The basis for the processing of data is Article 6(1)(b) GDPR, which permits the processing of data for the fulfilment of a contract or for pre-contractual actions.
