Data protection

The protection of your data is one of the most important principles of ACANTUS GmbH. With this data protection declaration we would like to inform you about the type, scope and purpose of the personal data we collect, use and process. We do not collect any personal data when using our website. You can visit our website without providing personal information. Data transmitted by you to us, e.g. B. via email, will not be passed on to third parties without your express consent. You always have the right to information about the data stored about you, its origin and recipient, and the purpose of storage. In order to receive information, you must identify yourself as the person (about whom information is to be provided) or prove that you are entitled to receive information about a third person.

SSL or TLS encryption This page uses SSL or SSL for security reasons and to protect the transmission of confidential content, such as bookings or inquiries that you send to us as the site operator. TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http: //” to “https: //” and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.

We would like to point out that data transmission over the Internet (e.g. when communicating by email) can have security gaps. It is not possible to completely protect data from third-party access.

We expressly object to the use by third parties of the contact data published as part of the legal notice obligation for the purpose of sending unsolicited advertising and information material. As the operator of the website, we expressly reserve the right to take legal action in the event that unsolicited advertising information is sent, such as spam emails.

1. Contact details

Responsible:

ACANTUS GmbH – Hotel | meetings | events
Ringstrasse 13
91085 Weisendorf-Oberlindach
Telephone: 09135 211 66 0
Fax: 09135 211 66 200
Email: info@acantus-hotel.de
represented by the managing director: Andreas Hirsch

2. Data collection

Log data
When you visit our website or use our services, the device with which you access the page automatically transmits log data (connection data) to the server of our provider.
Log data contains the IP address of the device with which you access the website or a service, the type of browser with which you access, the website that you have previously visited, possibly your system configuration and the date and time. The provider only saves IP addresses to the extent necessary to provide our services. Otherwise, the IP addresses will be deleted or anonymized. The provider stores your IP address when you visit our website for a maximum of 7 days.

Cookies and pixels
We use cookies and pixels at various points on our website. Cookies are small identifiers that a server stores on the end device with which you access our website or our services. They contain information that can be called up when our services are accessed and thus enable a more efficient and better use of our offers.
We use permanent and so-called session cookies. Session cookies are deleted when you close your web browser. Permanent cookies remain on your end device until they are no longer required to achieve their purpose and are deleted. Cookies are used to improve our services and to use certain features.
In addition, cookies are also used, among other things, to collect statistical values about our website, for example the number of visitors.
You can prevent the setting of cookies at any time by means of an appropriate setting in your internet browser and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time using an Internet browser or other software programs. This is possible in all common internet browsers. If you deactivate the setting of cookies in the internet browser used, under certain circumstances not all functions of our website can be used to their full extent.
Pixels are small graphics on websites that enable log file recording and log file analysis, which are often used for statistical evaluations.

Plugins and tools

Google Maps
This website uses the Google Maps map service via an API. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this page has no influence on this data transmission. Google Maps is used in the interest of an attractive presentation of our online offers and to make it easier to find the places we have indicated on the website. This represents a legitimate interest within the meaning of Art. 6 Para. 1 f GDPR. More information on the handling of user data can be found in Google’s data protection declaration: https://www.google.de/intl/de/policies/privacy/ ,

third party

Third party providers such as B. Google store data or use stored cookies due to visits by the user. Users can e.g. B. deactivate the use of cookies by making the browser settings accordingly (deactivate cookies) or installing browser plugins. The operator has no influence.

3. Statutory or contractual regulations for the provision of personal data, necessity for the conclusion of the contract, obligation to provide the personal data, possible consequences of the non-provision

The provision of personal data may be required by law in part or may also result from contractual regulations (e.g. information about the contractual partner). Sometimes it may be necessary to conclude a contract that you provide us with personal data that must subsequently be processed by us. For example, you are obliged to provide us with personal data when we conclude a contract with you. Failure to provide personal data would mean that the contract could not be concluded.

Online booking tool DIRS21 from TourOnline AG
The booking functionality on this website as part of this online booking tool (“OBT”) is provided by TourOnline AG, Borsigstrasse 26, 73249 Wernau, Germany (www.dirs21.de), hereinafter abbreviated “TOAG”. You will find the data protection declaration in the booking tool itself.

E-mail
You voluntarily provide us with information that you provide to us by email. The data will be deleted as soon as it is no longer required. We process the data that you provide in the application process. This includes your name, address, telephone and mobile numbers, email addresses and the personal data that result from your application documents.

Contact form – entries on the website

The website offers the option of entering personal or business data (for example using the contact form). If a user makes use of this option, the data entered in the input mask (e.g. first name, last name, email address, telephone number, address) will be transmitted to us and saved. The disclosure of this data is carried out by the user on an expressly voluntary basis. In this context, the data is not passed on to third parties. The processing of the data serves us only to process the contact. If you contact us by email, this is also the necessary legitimate interest in the processing of the data.

4. Duration of storage

We only process and store personal data for the period of time necessary to achieve the purpose for which it was stored or if this was required by law. As a rule, the processing purpose is achieved with the termination of your contract.
Data that you provide to us as part of the application process will be stored for a maximum of six months after the application process has been completed.

5. Your rights

a) Right to information and confirmation
You have the right to receive free information from us at any time, as well as confirmation of your personal data stored, and a copy of this information.
b) Right to rectification
You have the right to request the immediate correction of incorrect personal data concerning you. You also have the right to request the completion of incomplete personal data, also by means of a supplementary statement, taking into account the purposes of the processing.
c) Right to cancellation
You have the right to have your personal data deleted immediately if processing is not necessary or is no longer necessary.
d) Right to restriction of processing
You have the right to request that processing be restricted if one of the following conditions is met:
e) Right to object to processing
You have the right to object to the processing of your personal data at any time.
f) Right to data portability
You have the right to receive the personal data concerning you, which have been provided to us, in a structured, common and machine-readable format.
g) Right to withdraw consent under data protection law
You have the right to withdraw your consent to the processing of personal data at any time in the future.
h) Right to lodge a complaint with the supervisory authority
You have the right to contact a supervisory authority in the Member State of your residence or place of work or the alleged violation at any time if you believe that the processing of your personal data violates the EU General Data Protection Regulation.

6. Additional data protection information for video surveillance

ACANTUS GmbH uses selected images and videos of people, guests and employees on the premises to ensure hotel operations. The legal basis for processing the data is Art. 6 Para. 1 lit. c, e and f GDPR, because there is a legitimate interest of ACANTUS GmbH to avert danger, to protect property, to prevent vandalism and to deter. The purpose of data processing and thus the personal data are exclusive
• to ensure hotel operations,
• to protect house rights
• to prevent crime or prosecution,
• to assert legal claims,
• To protect the interests of guests and employees worthy of protection, in particular to remedy an existing need for evidence

processed.

It is only passed on to third parties as part of law enforcement to the law enforcement authorities.

The data is only saved on secure systems in Germany for internal use only and deleted immediately, at the latest 48 hours after it was collected. Longer storage is only envisaged in exceptional cases where there are special circumstances to be documented. Access to it is only possible for a few authorized persons and persons who are committed to special data protection and who are responsible for technical and administrative support.

Right to object, see 5. Rights above.