Privacy Notice

 

Data protection

In the following, we will inform you about the collection of personal data when using our website and contacting us via a contact form, by e-mail or by phone. All data that concerns your person is personal data, eg. name, address, e-mail addresses and user behavior.

 

I. Name and contact details of the person responsible and the data protection officer

  1. Responsible according to Art. 4 Nr. 7 EU General Data Protection Regulation (DSGVO) is AMG Management GmbH, Hardenbergstrasse 7, 10623 Berlin, +49 30 88915000, datenschutz@amgroup-hotels.com (see our imprint).

 

II. General information on the collection, transfer and storage of personal data

  1. We process your personal data in compliance with the provisions of the DSGVO, the Federal Data Protection Act (BDSG) and all other relevant laws.
  2. First and foremost, data processing serves to justify and fulfill a contractual relationship with you. When you contact us by e-mail, through a contact form or by telephone, the information provided by you (your e-mail address, your name and telephone number, if applicable) will be stored by us to answer your questions. The primary legal basis for this is Article 6 (1) (b) GDPR. In addition, if necessary, your separate consent acc. Art. 6 para. 1 a), 7 DSGVO be used as a data protection regulation. We also process your data in order to fulfill our legal obligations, in particular in the area of ​​commercial and tax law. This is done on the basis of Art. 6 para. 1 c) GDPR. Insofar as necessary, we also process your data on the basis of Art. 6 para. 1 f) of the GDPR in order to safeguard the legitimate interests of us or third parties.
  3. A transfer of your personal data to third parties for purposes other than those listed below does not take place. We only disclose your personal data to third parties if you have given your express consent for this pursuant to Art. 6 para. 1 lit. a) DSGVO, or if the transfer is required pursuant to Art. 6 para. 1 lit. f) DSGVO to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest in the non-disclosure of your data, or in the case where pursuant to Art. 6 para. 1 lit. c) DSGVO a legal obligation to the data transfer exists and this is legally permissible and, according to Art. 6 para. 1 lit. b) DSGVO the transfer is required for the settlement of contractual relationships with you.
  4. If we rely on contracted service providers for individual functions of our offer or if we wish to use your data for advertising purposes, we will inform you in detail below about the respective transactions. In doing so, we also name the specified criteria for the storage duration.
  5. We will delete your personal information as soon as it is no longer necessary for the following purposes. After termination of the contract your personal data will be stored as long as we are legally obliged to do so. This is regularly the result of legal proof and retention obligations, which are regulated inter alia in the Commercial Code and the Tax Code. The storage periods are thereafter up to ten years. In addition, personal data may be retained for the period in which claims can be asserted against us (statutory limitation period of three or up to thirty years).

 

III. Collection of personal data on our website

1. Visit of our website

1.1 In the case of merely informative use of the website, if you do not register or otherwise provide us with information, we will only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect data that is technically necessary for us to display our website and to ensure stability and security. The data is also stored in the log files of our system. A storage of this data together with other personal data of the user does not take place. These data include the IP address, date and time of the request, Greenwich Mean Time (GMT) time zone difference, content of the request (concrete page), access status / HTTP status code, amount of data transferred, web site that receives the request, Browser, operating system and its interface and language and version of the browser software.

1.2 The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f) GDPR.

1.3 The temporary storage of the IP address by the system is necessary to enable delivery of the website to your browser. To do this, your IP address must remain stored for the duration of the session. Storage in log files is done to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. For these purposes, our legitimate interest in the processing of data is justified according to Art. 6 para. 1 lit. f) GDPR. An evaluation of the data for marketing purposes does not take place in this context.

1.4 The data will be deleted as soon as it is no longer necessary to achieve the purpose of the data collecting. In the case of collecting the data for providing the website, this is the case when the respective session is completed. Logfiles will be deleted within 7 days after calling the website.

1.5 The collection of data while visiting the website and the storage of the data in log files is imperative for the operation of the website. There is therefore no contradiction on your part.

2. Use of cookies

2.1 While using our website, cookies are stored on your computer system. Cookies are text files that are stored in the Internet browser or on the Internet browser on your computer system. When you visit a website, a cookie may be stored on your operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is reopened.

2.2 This website uses the following types of cookies, the scope and mode of operation of which are explained below:Transient cookies (temporary use)Persistent cookies (temporary use)Third-party cookies (by third parties according to separate information).

2.3 Transient cookies are automatically deleted when you close the browser. These include in particular the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the common session. This will allow your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser. The legal basis for the processing of personal data using transient cookies is Article 6 (1) lit. f) GDPR. The purpose of using these cookies is to facilitate the use of websites for you. Some features of our website can not be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page break. For these purposes, our legitimate interest in the processing of personal datais jufstified pursuant to Art. 6 para. 1 lit. f) GDPR.

2.4 Persistent cookies are used exclusively in connection with the web analysis services we use and are used only as long as the purpose requires; They have a maximum life of two years. You can delete the cookies in the security settings of your browser at any time. In this case, the features and usability of the offer could be limited. The legal basis for the processing of personal data using persistent cookies is Article 6 (1) lit. f) GDPR. The use of the analysis cookies is for the purpose of improving the quality of our website and its contents. Through the analysis cookies, we learn how the website is used and so we can constantly optimize our offer. For these purposes, our legitimate interest in the processing of personal data is justified pursuant to Art. 6 para. 1 lit. f) GDPR.

2.5 Cookies that are not technically necessary for the provision of our service are only set with your consent, which you can revoke at any time. By continuing to use the website with the appropriate browser settings, you agree to the use of cookies under this Privacy Policy. You can tell us how you consent to your browser settings by, for example, declaring that you will be informed about the setting of cookies and will only be accepted if you expressly confirm this. You can also choose to allow the acceptance of cookies for certain cases or in general. You can configure your browser setting according to your wishes. B. control the acceptance or rejection of third-party cookies or all cookies. We point out, however, that you may not be able to use all features of this website. The legal basis for the processing of personal data using cookies for analysis purposes is the consent of the user Art. 6 para. 1 lit. a) GDPR. 

3. More features and offers of our website 

3.1 In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do this, you will generally need to provide other personal information that we use to provide the service and for which the data processing principles mentioned above apply.

3.2 In part, we use external service providers to proceed your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly inspected.

3.3 Furthermore, we may disclose your personal data to third parties, if action participations, competitions, contracts or similar services are offered by us together with partners. For more information, please refer to your personal data or below in the description of the offer.

3.4 If our service providers or partners are based in a state outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the offer.

4. Use of contact forms

4.1 We collect your personal information when you provide it to us through our contact forms. Then we capture the information that comes in the context of establishing contact. These include in particular names and submitted contact details, date and reason for contacting. The personal data you have given us will only be used to provide you with the products or services you wish and to correspond with you (legal basis, Art. 6 (1) (b) GDPR)

4.2 The data will be deleted as soon as it is no longer necessary for the purpose of the collecting. For the personal data from the input field of the contact form, this is the case when the respective conversation with you has ended. The conversation is ended when it can be inferred from the circumstances that the relevant facts have been finally clarified. Insofar as the disclosed data are subject to the tax and commercial storage requirements, these are stored for the duration of the retention obligations of ten years and then deleted, unless you have consented to an additional storage or the further processing of data for assertion, exercise or defense legal claims (statutory limitation period of three or up to thirty years).

5. Integration of Google Maps

5.1 On our website we use the offer of Google Maps. This allows us to show you interactive maps directly in the website and allow you to conveniently use the map feature. The legal basis for the use of Google Maps is Art. 6 para. 1 lit. f) GDPR.

5.2 By visiting the website, Google receives the information that you have accessed the corresponding sub-page of our website. In addition, the data mentioned under III. 1. of this declaration will be transferred. This is done regardless of whether Google provides a user account that you are logged in to, or if there is no user account. When you’re logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and / or tailor-made website design. Such an evaluation is done in particular (even for users who are not logged in) to provide appropriate advertising and to inform other users of the social network about their activities on our website. You have a right of objection to the formation of these user profiles, and you must comply with this to Google.

5.3 Further information on the purpose and scope of the data collection and its processing by this provider can be found in the privacy statements of the provider. You can also find more information about your rights and privacy settings here: http://www.google.com/intl/en/policies/privacy. Google also processes your personal information in the United States and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US Framework. Opt-Out: https://adssettings.google.com/authenticated

 

6. Integration of Google Fonts

6.1 On our website we use the offer of Google Fonts. We use this service in the interest of a consistent and attractive presentation of our website. When you call up a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. If your browser does not support web fonts, a default font will be used by your computer. The legal basis for the use of Google Fonts is Art. 6 para. 1 lit. f) GDPR.

6.2 By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the date mentioned under III. 1. of this declaration will be transferred. This is done regardless of whether Google provides a user account that you are logged in to, or if there is no user account. When you’re logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and / or tailor-made website design. Such an evaluation is done in particular (even for users who are not logged in) to provide appropriate advertising and to inform other users of the social network about their activities on our website. You have a right of objection to the formation of these user profiles, and you must comply with this to Google.

6.3 Further information on the purpose and scope of the data collection and its processing by this provider can be found in the privacy statements of the provider. You can also find more information about your rights and privacy settings here: http://www.google.com/intl/en/policies/privacy. Google also processes your personal information in the United States and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US Framework. Opt-Out: https://adssettings.google.com/authenticated

 

7. Data security

7.1 We use the common SSL (Secure Socket Layer) method within the website visit, in conjunction with the highest encryption level supported by your browser. In general, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we’ll use 128-bit v3 technology instead. Whether a single page of our website is encrypted is shown by the closed representation of the key or lock icon in the lower status bar of your browser.

7.2 We also take appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

 

IV. Collection of personal data by contacting by e-mail, by post and by telephone

1. Collection of personal data of customers, prospects and suppliers

1.1 We collect your personal data as a customer, prospective customer or supplier only if you provide the data by yourself by e-mail, by post or by telephone. Then we capture the information that comes in the context of establishing contact. These include in particular names and submitted contact details, date and reason for contacting. The personal data you provide us is used only for the purpose of providing you with the products or services you require (legal basis Art. 6 (1) (b) GDPR) or for other purposes for which you have given your consent (legal basis Art. 6 para. 1 a) GDPR) and which are described in this privacy policy. You have the opportunity to revoke your consent to the processing of personal data at any time.

1.2 You are not obliged to provide the personal data mentioned above. The communicated data may be required for a contract. Without the provision of the data, the communication, conclusion of a contract or the execution of a contract may not be possible.

1.3 A transmission of the data relevant in the respective individual case takes place on the basis of the legal regulations or a contractual agreement of public authorities if there are legal provisions of priority, to external service providers or other contractors and to other external instances, if you have given your consent or a transmission in the overriding interest is allowed. There is no intention to transfer your data to a recipient in a third country (not an EU / EEA Member State) or an international organization.

1.4 The data will be deleted as soon as it is no longer necessary to achieve the purpose of the data collecting. For the provided personal data, this is the case when the respective conversation with you is over. The conversation is ended when it can be inferred from the circumstances that the relevant facts have been finally clarified. Insofar as the disclosed data are subject to the tax and commercial storage requirements, these are stored for the duration of the retention obligations of ten years and then deleted, unless you have consented to an additional storage or the further processing of data for assertion, exercise or defense of legal claims is required. The legal basis for the processing of personal data ist the purpose of fulfilling the statutory archiving and retention obligations is Art. 6 (1) lit. c) GDPR.

 

2. Collection of personal data of applicants

2.1 We will only collect your personal data as an applicant if you provide it to us by e-mail, by post or by telephone. This applies to applications for job vacancies as well as to unsolicited applications. Then we collect the information that was communicated in the course of the application. This includes in particular name, date of birth, contact data, interests, qualification data as well as school and professional backgrounds. The personal data you have provided will only be used for the purpose of carrying out the application procedure (legal basis art. 6 para. 1 lit. a), b) and F) GDPR, § 26 BDSG).

2.2 You are not obligated to provide the personal data mentioned above. The data communicated may be required for a future conclusion of the contract after the application procedure has been completed. Without the provision of the data, communication, implementation of the application process or conclusion of the contract may not be made.

2.3 A transmission of the relevant data in each individual case is carried out on the basis of the legal provisions or a contractual agreement. Data is transferred to employees of the personnel department, employees of the Management Board and the respective department manager. The transfer of your personal data to third parties does not take place. There is no intention of transmitting your data to a recipient in a third country (not a Member State of the EU/EEA) or an international organisation.

2.4 The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. Therefore, after the application procedure has been finished, we retain your data for six months after the notification of the rejection decision. If you have agreed to a longer storage period, the storage time is two years. After that we will either delete your data or re-obtain your consent. You have the possibility to revoke your consent to the processing of personal data at any time.

 

V. Opposition or revocation against the processing of your data

  1. If you have given your consent to the processing of your data, you can revoke it at any time. Such revocation affects the admissibility of the processing of your personal data after you have pronounced the revocation.
  2. In so far as we support the processing of your personal data considering the balance of interests, you can appeal against the processing. This is the case if the processing is not necessary in particular to fulfil a contract with you, which is presented by us in the following description of the functions. If you appeal against the processing, we ask you to explain the reasons why we should not process your personal data as we have done. If the opposition is reasoned, we will examine the situation and either adjust or adapt the data processing or indicate to you our compelling reasons for which we continue processing.
  3. Of course, you may at any time object to the processing of your personal data for purposes of advertising and data analysis. You can inform us about your advertising contradiction with the following contact details: AMG Management GmbH, Hardenbergstraße 7, 10623 Berlin, + 49 30 8891500, datenschutz@amgroup-hotels.com.

 

VI. Your rights

  1. You have the right under article 15 DSGVO to request information about your personal data processed by us. In particular, you can require information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, limitation of processing or opposition, the existence of a right of appeal, the origin of your data, if not collected by us, as well as the existence of an automated decision-making process, including profiling and, where appropriate, Information on their details.
  2. In accordance with article 16 GDPR, you may immediately request the rectification of incorrect or complete personal data stored by us. You have the right under article 17 GDPR to request the deletion of your personal data stored by us, insofar as the processing is not necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons Public interest or for the assertion, exercise or defence of legal claims.
  3. According to article 18 of the GDPR you have the right to restrict the processing of your personal data, as far as the correctness of the data is disputed by you, the processing of data is unlawful but you reject the deletion and we no longer need the data, but you need the data to assert, exercise or defend legal claims or you have made objection against the processing in accordance with article 21 GDPR.
  4. You have the right in accordance with art. 20 GDPR to obtain your personal data which you have provided us in a structured, common and machine-read format or to request the transfer to another person responsible.
  5. Pursuant to article 7 (3) of the GDPR, you have the right to revoke at any time the consent you have given us. As a result, we are not allowed to continue the data processing based on this consent for the future.
  6. You also have the right under article 77 GDPR to complain to a supervisory authority about the processing of your personal data by us, for example to the Saxon Data protection officer responsible for us, Bernhard-von-Lindenau-Platz 1, 01067 Dresden, Phone: 03 51/49 3-5401, E-mail: saechsdsb@slt.sachsen.de .

 

VII. Topicality and amendment of this Privacy policy

  1. This privacy statement is currently valid and was made in July 2018.
  2. By the further development of our website and offers about it or due to changes in legal or regulatory regulations it may be necessary to change this privacy policy. The current data protection declaration can be accessed and printed at any time on the website at https://www.amgroup-hotels.com.