Data Privacy statement

I.    Information on the processing of personal data
With the following information, we aim to give you an overview of the processing of your personal data associated with the use of our website at www.deutschehospitality.com and to inform you of your rights under data privacy law, in accordance with art. 13 and 14 of the GDPR.

You can find further information about the processing of personal data associated with a stay at one of Deutsche Hospitality’s hotels operating under the brands Steigenberger Hotels and Resorts (www.steigenberger.com), IntercityHotel (www.intercityhotel.com), Jaz (www.jaz-hotel.com) and Maxx by Steigenberger (www.maxxhotel.com) in the data privacy statements for the websites of the relevant hotels.

1.    Responsibility for data processing
The party responsible for data processing on this website in accordance with art. 4, no. 7 GDPR and the provider of this website (service provider) pursuant to the German Teleservices Act (TMG) is
 
Steigenberger Hotels AG
Lyoner Straße 25
60528 Frankfurt am Main
Telephone: +49 69 66564-01
Fax: +49 69 66564-888
E-mail: info@deutschehospitality.com

Full details pursuant to section 5 of the TMG (legal notice)

2.    Contact details for the Data Privacy Officer
You can reach our Data Privacy Officer via

TÜV Informationstechnik GmbH
Langemarckstr. 20
45141 Essen
E-mail address: datenschutz@deutschehospitality.com

3.    Objective and legal basis of the processing of personal data
We process your personal data in compliance with the provisions of the EU General Data Protection Regulation (GDPR), the new German Federal Data Protection Act (BDSG-neu), and all other applicable laws, for the following purposes and on the following legal basis:

(a)    To send our e-mail newsletters, including administration of your subscription to the news-letter – the legal basis for this is your consent according to art. 6, para. 1, sentence 1, point a) GDPR.

With the e-mail newsletter, we provide you with regular information, in line with your preferences regarding the offerings and services of the hotels and businesses that belong to Deutsche Hospitality (Steigenberger Hotels and Resorts, IntercityHotel, Jaz in the City), about marketing campaigns for business customers and offerings from our partner companies such as Deutsche Bahn AG (for booking train tickets), SIXT (for booking rental cars and chauffeur services) and comparable providers of travel-related services.

If you wish to receive the e-mail newsletter, we need you to provide us with a valid e-mail address. We apply the so-called "double opt-in" process for registration for our newsletter. That means that once you have registered, we send an e-mail to the e-mail address you have entered, in which we ask for confirmation that you would like to receive the newsletter. If you do not confirm your registration within two weeks, your information will be blocked and will be automatically deleted after one month. In addition, we also store the IP addresses used and the times of registration and confirmation in each case. The aim of the process is to verify your registration and, where relevant, to be able to clarify any potential misuse of your personal data.

As a subscriber to the e-mail newsletter, you can withdraw your consent to the processing of your e-mail address for dispatch of the e-mail newsletter at any time. This withdrawal of consent can take place via the relevant link in each e-mail newsletter or by sending an e-mail with the subject "Unsubscribe" to update@news.deutschehospitality.com.

(b)    To answer your questions and deal with concerns you have expressed to us via the contact form on the website or by telephone.

(c)    To process your application – more detailed information on this can be found in the separate data privacy declaration in our application portal at https://deutschehospitality.jobbase.io/policy.

(d)     For the assertion of and defence against legal claims and for the safeguarding of interests in legal disputes, to guarantee IT security and IT operations – the legal basis for this is art. 6, para. 1, clause 1, point f) of the GDPR. Our overriding valid interests stem from our in-terest in the enforcement of our material and immaterial claims and the exercising of our rights, as well as defence against unjustified demands.

Minors
Minors may not submit any personal data to us without permission from a parent or guardian. We do not knowingly process any personal data acquired from minors within the scope of our internet offering.

4.    Categories of recipients of personal data
Where necessary for the purposes outlined above in point 3, we disclose your personal data to the following recipients or categories of recipients pursuant to art. 4, no. 9 of the GDPR:

Within our company, your data will only be viewed or accessed by those departments that require it (in the scope required in each case) to fulfil our contractual and statutory obligations.

Service providers (e.g. as part of our order processing in line with art. 28 GDPR) and performing agents commissioned by us can also receive access to personal data for these purposes. These are companies that provide recruitment services (currently Prescreen International GmbH).

5.    Forwarding of personal data to a third country
Personal data will not be forwarded to offices in countries outside of the European Union (so-called third countries), except in those cases outlined under point 12.

6.    Duration of personal data storage and criteria for establishing such duration
We adhere to the principles of data reduction and data economy. We therefore store your personal data only as long as it is necessary for the purposes stated here, or in line with the various storage deadlines stipulated by the legislator. Once the relevant purpose no longer applies or such deadlines expire, the relevant data is routinely blocked or deleted in line with the statutory provisions.

7.    Your rights as an affected person
Every person affected whose personal data is processed has a right under art. 15 of the GDPR to information from those responsible about the relevant personal data, as well as a right to rectification of such data under art. 16 of the GDPR, a right to erasure under art. 17 of the GDPR, a right to restriction of its processing under art. 18 of the GDPR, a right to object to its processing under art. 21 of the GDPR, and a right to data portability under art. 20 of the GDPR. In terms of the right to information and the right to erasure, the limitations pursuant to sections 34 and 35 of the BDSG-neu also apply.

Where the processing of your personal data is based on consent given to us, you have the right to withdraw such consent at any time, whereby this will not affect the legitimacy of the processing carried out based on such consent up to the point of its withdrawal.

Furthermore, there is also a right to lodge a complaint with the relevant supervisory authority in line with art. 77 of the GDPR in conjunction with section 19 of the BDSG-neu.

8.    Obligation to provide data
When using our website, you are under no obligation to provide personal data. If you want us to make contact with you, we will need (i) your name, and (ii) your telephone number or your e-mail address at the very least. If you wish to apply for a vacant position, we will need a certain amount of information as a minimum for the processing of your application; more information on this is provided in the separate data privacy statement of the application portal.

9.    Automated decision-making and profiling
In the establishment and execution of our contractual relationship, you will not be subject to any automated individual decision-making, including profiling, which produces legal effects concerning you or similarly significantly affects you pursuant to art. 22 of the GDPR.

10.    Additional information about your right to object pursuant to art. 21 of the GDPR
You have the right to object, for reasons arising from your specific situation, to the processing of personal data relating to you at any time based on art. 6, para. 1, clause 1, point e) of the GDPR (data processing in the public interest) or art. 6, para. 1, clause 1, point f) of the GDPR (processing necessary for the purposes of legitimate interests); this also applies to any profiling based on this provision according to art. 4, para. 4 of the GDPR.

If you lodge an objection, we will no longer process your personal data, unless we can prove it is absolutely necessary for protective reasons that outweigh your interests, rights and freedoms, or such processing serves the assertion, exercise or defence of legal claims.

If your personal data are processed by us in order to carry out direct advertising, you have the right to object to the processing of personal data relating to you for the purposes of such advertising at any time; this also applies for profiling where this is in connection with direct advertising.

Objection can be made in any form and should be directed to our data privacy officer using the contact details stated in point 2.

11.    Cookies and similar technologies
We use cookies on our website. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do no damage to your end device and do not contain viruses, Trojans or other malware. Information is stored in the cookie which is generated in connection with the specific end device used. However, this does not mean that we are directly aware of your identity.
The use of cookies serves to make the use of our offer more pleasant for you.
We use cookies for the following purposes:
•    Necessary features: These cookies make a significant contribution towards improving the experience on our website. Basic functions and applications, such as the shopping cart or electronic settlement processes, are optimized as a result of this, and handling is also made easier. These cookies do not collect any information about you that could be used for marketing activities or statistical analyses. These cookies are necessary for the use of the website. The legal basis for these cookies is Art. 6 (1) (b) of the GDPR.
 
Setting cookies via the browser
You can configure your browser so that cookies can only be accepted with your specific permission. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or that a message always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you will not be able to use all of the features of our website.
When using a shared computer, which accepts cookies and so-called flash cookies, we recommending logging out completely after you have finished surfing.

provider/Tool

category

period of

storage

purpose

www.deutschehospitality.com

necessary features

session cookie

search settings

www.deutschehospitality.com

necessary features

10 years

language settings


12.    Embedding of services and content of third-party providers (e.g. registration of the IP address by third-party services)
Third-party content (hereinafter referred to as "third-party providers") is integrated into the website. In order to use these contents, transmission of the user’s IP address to the respective third-party provider is technically necessary. This is because without an IP address the third-party providers are unable to send the contents embedded in the website to the respective user’s browser. We have no control over whether a third-party provider uses the IP address e.g. for statistical purposes or otherwise. We use the following third-party providers on our website:

third-party providers

functional description

purpose

Mapbox Inc, 50 Beale St floor 9,
San Francisco, CA 94105, USA

display
maps
(via service „Mapbox“)
on websites

maintaining, guaranteeing
and improving
the qulaity of
products and services,
in particular to improve
the user experience


Google Captcha Breaker

preventing the use of forms
on the website by bots/hackers

securing the
website from
SPAM attacks

 

Monotype Imaging Holdings, Inc.,
600 Unicorn Park Drive, Woburn, Massachusetts 01801 USA

Myfonts.com - display
text on webpages

maintaining, guaranteeing and improving the
quality of products
and services, in particular to improve the user experience


 
Status and updating of the data privacy statement

This data privacy statement is valid from 26 March 2020.

We will update this data privacy statement from time to time in the event of relevant changes to our website, the processing of personal data or statutory provisions. The revised version will then be valid from the published date on which it comes into force.  Where there are fundamental changes to this data privacy statement, we will inform you promptly before the changes come into force with a notification on our website.  We will also inform our guests, where relevant, about the changes via e-mail or in another way.