Privacy statement

1. Collection and processing of personal data

When using our website, this privacy policy is intended to inform you about the nature, scope and purpose of the collection and use of personal data by Santé Royale Hotel- und Gesundheitsresort Wolkenstein/Warmbad, An der Silbertherme 5, 09429 Wolkenstein/Warmbad (operating company: Modama GmbH & Co. KG | registered office: Badstraße 45 08648 Bad Brambach).

We take the protection of your personal data very seriously. These are treated confidentially and in accordance with legal data protection regulations, in particular those under the General Data Protection Regulation and this privacy policy.

The term “personal data” means any information relating to an identified or identifiable natural person. Identifiable is a natural person who can be identified directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier (e.g. cookie) or to one or more special characteristics that are an expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person. This includes, for example, name, age, telephone number, e-mail address.

Art. 6 para. 1 a DS — GVO serves as a legal basis for processing operations in which we obtain consent for a specific processing purpose. When goods are delivered or another service or consideration is provided, processing is based on Art. 6 para. 1 b DS — GVO. The same applies to such processing operations that are necessary to carry out pre-contractual measures. If we are subject to a legal obligation which requires the processing of personal data, such as to fulfill tax obligations, the processing is based on Art. 6 para. 1 c DS — GVO. In other cases, the processing of personal data may also be necessary if there are legitimate and important interests of the data subject or another natural person. In these cases, processing is based on Art. 6 para. 1 d DS — GVO. Finally, processing operations may also be based on Article 6 (1) (f) of the GDPR, provided that processing operations are not covered by any of the above legal bases. However, we would like to point out that data transmissions over the Internet may have security gaps. It is therefore not possible to completely protect data from access by third parties.

By using this website, you consent to the collection, use, and transfer of your information in accordance with this privacy policy.

The personal data collected and processed by you will be stored in accordance with the respective legal retention period. After expiry of the period, the corresponding data will be routinely deleted, provided that they are no longer required to fulfill the contract or due to other legal deadlines, in particular storage periods.

2. Responsible body

Responsible body for the collection, processing and use of your personal data within the meaning of the DS — GVO is:

MODAMA GmbH & Co. KG, Badstraße 45, 08648 Bad Brambach

External data protection officer:

Thomas Dahmen, Goldbergstraße 11, 99869 Goldbach

If you wish to object to the collection, processing or use of your data by us in accordance with these data protection regulations as a whole or for individual measures, you can address your objection to the external data protection officer or the above-mentioned responsible body.

You can save or print out this privacy statement at any time.

3. Google Analytics

This website uses features of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway Mountain View CA 94043 USA.

Google Analytics uses so-called “cookies.” These are text files that are stored on your computer and allow an analysis of your use of the website. Cookies do not cause any damage to your computer and do not contain any viruses. The cookies on our website do not collect any personal data. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

If you do not want cookies to be stored on your computer, you can deactivate the corresponding option in your browser's system settings. You can delete saved cookies at any time in your browser's system settings. However, we would like to point out that in this case not all functions of this website may be fully used.

You can also collect the data generated by the cookie and related to your use of the website (incl. your IP address) to Google and prevent Google from processing this data by downloading and installing the browser plug-in available at the following link:

https://tools.google.com/dlpage/gaoptuet?hl=de

You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie is set to prevent your data from being collected or future visits to this website:

Deactivate Google Analytics

More information about how Google Analytics handles user data can be found in Google's privacy policy:

https://support.google.com/analytics/answer/6004245?hl=de

4. Google Maps

Our website uses maps to display maps and to create route plans. Google Maps is operated by Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. By using this website, you consent to the collection, processing and use of the data automatically collected and entered by you by Google, one of its representatives or third party providers. In addition, we refer to the privacy policy:

https://www.google.com/policies/privacy/

5. Google Fonts

We integrate fonts (Google Fonts) from the provider Google LLC., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Privacy Policy: https://google.com/policies/privacy, opt-out: http//adssettings.google.com/authenticated.

6. Contact form/email contact

If you contact us, e.g. via contact form or email, we process your details to process the request and in case any follow-up questions arise.

If data processing is carried out to carry out pre-contractual measures, which are carried out at your request or already for the execution of the contract, the legal basis for this data processing is Article 6 (1) sentence 1b of the GDPR.

We only process further personal data if you expressly consent to this (Art. 6 para. 1 sentence 1a GDPR) or we have a legitimate interest in processing your data, e.g. in that we would like to respond to your e-mail (Art. 6 para. 1 sentence 1f GDPR).

7. SSL encryption

This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as requests that you send to us as the site operator. You can recognize an encrypted connection by the browser's address line changing from http://to https://and by the lock icon in your browser line.

If SSL encryption is activated, the data that you transmit to us cannot be read by third parties.

8. Rights of data subjects

As a data subject, you have the following rights:
— in accordance with Article 15 DS — GVO, the right to request information about your personal data processed by us to the extent specified therein;
— in accordance with Art. 16 DS — GVO, the right to immediately request the correction of incorrect or completed personal data stored by us;
— in accordance with Art. 17 DS — GVO, the right to request the deletion of your personal data stored by us, unless further processing

• to exercise the right to freedom of expression and information;
• to fulfill a legal obligation;
• for reasons of public interest, or
• to assert, exercise or defend legal claims

is necessary; — in accordance with Article 18 DS — GVO, the right to request the restriction of the processing of your personal data, insofar as

• the accuracy of the data is disputed by you;
• the processing is unlawful, but they refuse to delete it;
• we no longer need the offence, but they need it to assert it,
need to exercise or defend legal claims, or

— have lodged an objection to processing in accordance with Article 21 DS — GVO; — in accordance with Article 20 DS — GVO, the right to receive your personal data, which you have already provided to us, in a structured, common and machine-readable format or to request transmission to another person responsible; — in accordance with Article 77 DS - GVO, the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or place of work or our company headquarters.

9. Right of objection

Insofar as we process personal data as explained above to protect our legitimate interests that prevail as part of a balancing of interests, you can object to this processing with effect for the future. If the processing is for direct marketing purposes, you can exercise this right at any time as described above. Insofar as the processing is carried out for other purposes, you have the right to object only if there are reasons arising from your particular situation.

After exercising your right to object, we will no longer process your personal data for these purposes, unless we can prove compelling legitimate grounds for processing that outweigh your interests, rights and freedoms or if the processing serves to assert, exercise or defend legal claims. This does not apply if processing is carried out for direct marketing purposes. We will then no longer process your personal data for this purpose.