Privacy Policy

Please note: the German version of this document is the legally binding one.

1. Name and contact details of the controller responsible for processing and of the company data protection officer

This privacy policy applies to data processing carried out by:

Controller:
EGON Hotel GmbH
Königstraße 4
22767 Hamburg
Phone: 040 311821-103
Fax: 040 311821-101
Email: info@egonhotel.com

The company data protection officer can be reached at the above address, marked for the attention of the data protection officer, or at info@egonhotel.com.

2. Collection and storage of personal data, and the nature and purpose of its use

a) When you visit the website

When you access our website www.egonhotel.com, the browser on your device automatically sends information to our website's server. This information is stored temporarily in what is known as a log file. The following information is recorded in this way without any action on your part and stored until it is automatically deleted:

• the IP address of the requesting computer,
• the date and time of access,
• the name and URL of the file retrieved,
• the website from which access is made (referrer URL),
• the browser used and, where applicable, your computer's operating system and the name of your access provider.

We process the data listed above for the following purposes:

• ensuring that a connection to the website is established smoothly,
• ensuring that our website is convenient to use,
• evaluating system security and stability, and
• for further administrative purposes.

The legal basis for this data processing is Art. 6(1)(1)(f) GDPR. Our legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the data collected to draw conclusions about you as an individual.

b) When you use our contact form

For questions of any kind, we offer you the opportunity to contact us using a form provided on the website. Providing a valid email address is required so that we know who the enquiry is from and are able to respond to it. Any further details may be provided voluntarily.

The processing of data for the purpose of contacting us is carried out under Art. 6(1)(1)(a) GDPR on the basis of the consent you have freely given.

The personal data we collect through your use of the contact form is automatically deleted once your enquiry has been dealt with.

c) When you subscribe to our newsletter

Provided you have given your express consent under Art. 6(1)(1)(a) GDPR, we use your email address to send you our newsletter on a regular basis. Providing an email address is all that is required to receive the newsletter.

You can unsubscribe at any time, for example via a link at the end of each newsletter. Alternatively, you are welcome to send your request to unsubscribe at any time by email to info@egonhotel.com.

d) When you use the booking portal

You have the option of booking rooms with us via our booking portal. To do so, you must provide us with your name, address and telephone number. Mandatory details required to process the contracts are marked separately; any further details are voluntary. We process the data you provide in order to handle your booking. The legal basis for this is Art. 6(1)(1)(b) GDPR.

Payment data is collected in encrypted form and used solely to process the relevant transaction. We have no knowledge of, or means of accessing, your credit card details. Processing is carried out exclusively by the relevant service provider.

e) Deletion of data

The data we store about you is kept only for as long as it is needed to handle the customer relationship optimally. In other words, your booking data remains stored until your booking has been completed.

However, under commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of ten years. After three years, at the end of the year, we restrict processing, meaning that your data is then used solely to comply with statutory obligations.

3. Disclosure of data

Your personal data is not transferred to third parties for purposes other than those listed below. We only disclose your personal data to third parties where:

• you have given your express consent to do so under Art. 6(1)(1)(a) GDPR,
• disclosure is necessary under Art. 6(1)(1)(f) GDPR for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in your data not being disclosed,
• there is a legal obligation to disclose the data under Art. 6(1)(1)(c) GDPR, and
• this is legally permissible and necessary under Art. 6(1)(1)(b) GDPR for the performance of contractual relationships with you.

4. Cookies

We use cookies on our site. These are small files that your browser creates automatically and that are stored on your device (laptop, tablet, smartphone or similar) when you visit our site. Cookies do not cause any damage to your device and contain no viruses, Trojans or other malware.

The cookie stores information that arises in connection with the specific device used. This does not mean, however, that we thereby gain direct knowledge of your identity.

The use of cookies serves to store details in the booking system and to enable you to make a booking. In addition, the cookies serve to record the use of our website statistically and to evaluate it for the purpose of optimising our offering for you (see section 5). These cookies enable us to recognise automatically, on a return visit to our site, that you have already been with us. These cookies are automatically deleted after a defined period in each case.

The data processed by cookies is necessary for the purposes stated in order to safeguard our legitimate interests and those of third parties under Art. 6(1)(1)(f) GDPR.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or so that a notice always appears before a new cookie is created. Completely disabling cookies may, however, mean that you cannot use all the functions of our website.

5. Use of Google Analytics

In order to design our pages to meet demand and to optimise them on an ongoing basis, we use Google Analytics on the basis of Art. 6(1)(1)(f) GDPR, a web analytics service provided by Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google"). In this context, pseudonymised usage profiles are created and cookies (see section 4) are used. The information generated by the cookie about your use of this website, such as

• browser type/version,
• operating system used,
• referrer URL (the page previously visited),
• host name of the accessing computer (IP address),
• time of the server request,

is transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide further services associated with website use and internet use for the purposes of market research and demand-oriented design of these web pages. This information may also be passed on to third parties where this is required by law or where third parties process this data on our behalf. Under no circumstances is your IP address combined with other Google data. The IP addresses are anonymised so that no attribution is possible (IP masking).

You can prevent the cookies from being installed by setting your browser software accordingly; however, we would point out that in this case you may not be able to use all the functions of this website to their full extent.

You can also prevent the data generated by the cookie and relating to your use of the website (including your IP address) from being collected, and prevent this data from being processed by Google, by downloading and installing a browser add-on.

As an alternative to the browser add-on, particularly for browsers on mobile devices, you can also prevent collection by Google Analytics by clicking on this link. An opt-out cookie will be set that prevents your data from being collected in future when you visit this website. The opt-out cookie applies only in this browser and only to our website, and is stored on your device. If you delete the cookies in this browser, you will need to set the opt-out cookie again.

Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics Help.

6. Use of Google Maps

Our website uses a Google Maps interface (API) to display geographical information visually. Google Maps is a product of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google"). When Google Maps is used, Google also collects, processes and uses data on website visitors' use of the Maps functions. You can find more detailed information about data processing by Google in Google's privacy notices.

Further instructions on how to manage your own data in connection with Google products can be found here: https://support.google.com/accounts/answer/3024190.

7. Rights of data subjects

You have the right:

• under Art. 15 GDPR, to request information about your personal data processed by us. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data where it was not collected by us, and the existence of automated decision-making including profiling and, where applicable, meaningful information about the details thereof;
• under Art. 16 GDPR, to request the prompt rectification of inaccurate personal data stored by us or the completion of your personal data stored by us;
• under Art. 17 GDPR, to request the erasure of your personal data stored by us, unless processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
• under Art. 18 GDPR, to request the restriction of the processing of your personal data, where the accuracy of the data is contested by you, the processing is unlawful but you object to its erasure and we no longer need the data while you require it for the establishment, exercise or defence of legal claims, or you have objected to the processing under Art. 21 GDPR;
• under Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format, or to request its transfer to another controller;
• under Art. 7(3) GDPR, to withdraw your consent once given to us at any time. The consequence of this is that we may no longer continue, going forward, the data processing that was based on this consent; and
• under Art. 77 GDPR, to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority of your usual place of residence or work, or of our registered office, for this purpose.

8. Right to object

Where your personal data is processed on the basis of legitimate interests under Art. 6(1)(1)(f) GDPR, you have the right under Art. 21 GDPR to object to the processing of your personal data, provided that there are grounds for doing so arising from your particular situation or that the objection is directed against direct marketing. In the latter case you have a general right to object, which we will implement without you having to state a particular situation. If you wish to exercise your right of withdrawal or objection, an email to info@egonhotel.com is sufficient.

9. Data security

During your visit to the website we use the widely adopted SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we fall back on 128-bit v3 technology instead. You can tell whether an individual page of our website is being transmitted in encrypted form by the closed display of the key or padlock symbol in the lower status bar of your browser.

We also employ appropriate technical and organisational security measures to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

10. Currency and amendment of this privacy policy

This privacy policy is currently valid and was last updated in May 2018.

As our website and the offerings available through it continue to develop, or as a result of changed statutory or regulatory requirements, it may become necessary to amend this privacy policy. You can call up and print out the current privacy policy at any time on the website at www.egonhotel.com/de/datenschutz/.