Privacy: Hotel Bayerischer Hof Erlangen
Privacy for our applicants (m/f)
Data protection for our employees (m/f)
Privacy for our customers/guests
Information requirements according to Art. 12, 13 et seq. EU-GDPR
Your contact person as controller within the meaning of the European General Data Protection Regulation ("EU-DSGVO") and other national data protection laws of the member states as well as other data protection regulations is:
Hotel Bayerischer Hof
B&R Hotelmanagement GmbH & Co. KG
Schuhstraße 31
91052 Erlangen
Germany
(hereinafter referred to as "we", "us" or "our")
The protection of your personal data is of particular importance to the Bayerischer Hof in Erlangen. Please contact our data protection officer directly in all matters relating to data protection and data security:
Stefan Frank
Hotel Bayerischer Hof | B&R Hotelmanagement GmbH & Co. KG
Schuhstraße 31, 91052 Erlangen, Germany
E-mail: datenschutzbeauftragter@bayerischer-hof-erlangen.de
Phone: +49 8031 79674-15
→ Registration certificate (de)
In principle, we process your personal data only insofar as this is necessary for the performance of our services. The processing of your personal data takes place regularly only on the basis of your consent. An exception applies to cases in which prior consent can not be obtained for real reasons or the processing of your personal data by a legal permission is permitted.
Insofar as we obtain your consent for the processing of personal data, Art. 6 para. 1 lit. a EU GDPR as legal basis. In the processing of personal data required to fulfill a contract between you and us, Art. 6 para. 1 lit. b EU-GDPR as legal basis. This also applies to processing operations required to carry out pre-contractual actions. Insofar as processing of personal data is required to fulfill a legal obligation to which we are subject, Art. 6 para. 1 lit. c EU GDPR as legal basis. In the event that vital interests of you or another natural person require the processing of personal data, Art. 6 para. 1 lit. d EU-GDPR as legal basis. If the processing is necessary for the protection of a legitimate interest of us or a third party and if your interests, fundamental rights and fundamental freedoms do not outweigh the former interest, then Art. 6 para. 1 lit. f EU-GDPR as legal basis for processing.
Your personal data will be deleted or blocked as soon as the purpose of the storage is removed. It may also be stored if provided for by the European or national legislator in EU regulations, laws or other regulations to which we are subject. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.
Legal basis for the processing of your personal data in the context of the provision of the website and the creation of log files is Art. 6 para. 1 lit. f EU-GDPR.
The temporary storage of your personal data by us is necessary to enable delivery of the website to your computer. For this, your personal data must be stored for the duration of the session. The storage of your personal data in log files is done to ensure the functionality of the website. In addition, your personal information serves to optimize the website and to ensure the security of our information technology systems. An evaluation of your personal data for marketing purposes does not take place in this context. For these purposes, our legitimate interest in the processing of data according to Art. 6 para. 1 lit. f EU-GDPR.
Your personal information will be erased as soon as it is no longer necessary to achieve the purpose of the survey. In the case of the collection of your personal data for the provision of the website, this is the case as soon as the respective session has ended. In the case of storing your personal data in log files, these will be deleted after seven days at the latest. An additional storage is possible. In this case, your personal data is deleted or alienated, so that an assignment of the calling client is no longer possible.
The collection of your personal data for the provision of the website and the storage of your personal data in log files is essential for the operation of the website. Consequently, there is no contradiction for you.
Legal basis for the processing of your personal data in the context of the use of technically necessary cookies is Art. 6 para. 1 lit. f EU-GDPR.
The use of technically necessary cookies serves to simplify the use of our website. Some features of our website can not be offered without the use of cookies. For these, it is necessary that your Internet browser is recognized even after a page break. The user data collected through technically necessary cookies will not be used to create user profiles. Our legitimate interest in the processing of your personal data pursuant to Art. 6 para. 1 lit. f EU-GDPR.
Your personal information will be deleted as soon as it is no longer necessary to achieve the purpose of the survey; this is especially the case when cookies are deactivated.
Cookies are stored on your computer and transmitted by it to our website. Therefore, you also have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to use all the functions of the website to the full. The transmission of Flash cookies can not be prevented by the settings of your Internet browser. This requires changes to the Adobe Flash Player setting.
Legal basis for the processing of your personal data in the context of the newsletter dispatch is in the presence of a consent Art. 6 para. 1 lit. a EU-DSGVO or as a result of the sale of goods or services, the statutory permission of § 7 (3) UWG.
The collection of your personal data serves to send the newsletter to you. The purpose of the processing of your personal data by sending the newsletter is to promote the sale of goods or services.
Your personal information will be erased as soon as it is no longer necessary to achieve the purpose of the survey. Your personal data is therefore stored as long as the subscription to the newsletter is active.
You can cancel the subscription to the newsletter at any time. For this purpose, there is a corresponding link in each newsletter. Termination of the subscription also enables revocation of consent.
The legal basis for the processing of your personal data in the context of the registration is Art. 6 para. 1 lit. b EU-GDPR.
Your registration allows for simplified signing of contracts between you and us. The processing of your personal data during the registration is therefore necessary to fulfill a contract between you and us or to carry out pre-contractual measures.
Your data will be deleted as soon as they are no longer necessary to achieve the purpose of their survey. This is the case during the registration process for the performance of a contract or for the performance of pre-contractual measures if your personal data are no longer required for the performance of the contract. Even after the conclusion of the contract, there may be a need to store personal data of the contracting party in order to comply with contractual or legal obligations.
You have the option to cancel the registration at any time. You can change the personal data stored about you at any time. If your personal data is required for the fulfillment of a contract or for the execution of pre-contractual measures, a premature deletion of your personal data is only possible, as long as there are no contractual or legal obligations to cancel the deletion.
The legal basis for the processing of your personal data, which is transmitted in the event of contact via the contact form or by e-mail, is Art. 6 (1) lit. f EU-GDPR. If the establishment of contact via the contact form or by e-mail aims to conclude a contract, Art. 6 para. 1 lit. b EU-GDPR an additional legal basis for the processing.
The processing of your personal data in the case of contact via the contact form or by e-mail serves us only to process the contact.
Your personal information will be erased as soon as it is no longer necessary to achieve the purpose of the survey.
At any time you have the opportunity to object to the processing of your personal data in the context of contacting us via the contact form or by e-mail at any time in the future. In such a case, the conversation between you and us can not continue. All personal data stored in the course of contacting will be deleted in this case.
This website uses Google Analytics, the web analysis service of Google Inc. (hereafter "Google"). Google Analytics uses so-called "cookies", text suggestion files, which are stored on your computer and which allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, in the event of activation of IP anonymisation on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data.
The legal basis for the processing of your personal data is Art. 6 para. 1 lit. f EU-GDPR.
The processing of your personal data enables us to analyze your surfing behavior. By analyzing the obtained data, we are able to compile information about the use of the individual components of our website. This helps us to constantly improve our website and its user-friendliness. For these purposes, our legitimate interest in the processing of your personal data pursuant to Art. 6 para. 1 lit. f EU-GDPR. By anonymizing your IP address, your interest in the protection of personal data will be adequately taken into account.
Your personal data will be deleted as soon as it is no longer needed for our aforementioned purposes.
Users of this website who do not want their data collected by Google Analytics can install the browser add-on to disable Google Analytics. This add-on instructs the Google Analytics JavaScript running on websites (ga.js, analytics.js, and dc.js) not to allow the sending of information to Google Analytics. If you want to disable Google Analytics, go to this page and install the Google Analytics opt-out add-on for your browser. Detailed information on installing and uninstalling the add-on can be found in the relevant help resources for your browser. Browser and operating system updates may cause the deactivation add-on to stop working as intended. Learn more about managing add-ons for Chrome here. If you're not using Chrome, check with the manufacturer of your browser to see if add-ons are working properly in the browser version you're using. The latest versions of Internet Explorer occasionally load the Google Analytics opt-out add-on after data has been sent to Google Analytics. Therefore, if you use Internet Explorer, the add-on will install cookies on your computer. These cookies ensure that any captured data is deleted immediately by the server that collected the data. Make sure that third-party cookies are not disabled for Internet Explorer. If you delete your cookies, these cookies will be reset by the add-on within a short period of time to ensure that your Google Analytics browser add-on continues to operate without restriction. The Google Analytics opt-out browser add-on does not prevent data from being sent to the website or other web analytics services. For more information about terms of service and privacy, visit www.google.com/analytics/terms/ or visit support.google.com/analytics/answer/6004245. IP anonymisation is activated on this website.
In addition or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking this link. An opt-out cookie will be installed on your device. This will prevent the collection by Google Analytics for this website and for this browser in the future, as long as the cookie remains installed in your browser.
The purpose of processing your personal data in the context of direct marketing by mail is to promote the sale of goods or services. For this purpose, our legitimate interest in the processing of data pursuant to Art. 6 para. 1 lit. f EU-GDPR.
Your personal information will be deleted as soon as it is no longer necessary to achieve the purpose of the survey; this is the case in particular when the opposition is received.
You can object to the processing of your personal data in the context of direct marketing by mail at any time in the future.
The legal basis for the processing of your personal data in the context of legal defense and enforcement is Art. 6 para. 1 lit. f EU-GDPR.
The purpose of the processing of your personal data in the context of legal defense and law enforcement is the defense against unauthorized use and the legal enforcement of claims and rights. For this purpose, our legitimate interest in the processing of data pursuant to Art. 6 para. 1 lit. f EU-GDPR.
Your personal information will be erased as soon as it is no longer necessary to achieve the purpose of the survey.
The processing of your personal data in the context of legal defense and law enforcement is imperative for legal defense and law enforcement. Consequently, there is no contradiction for you.
Within our company, those departments and departments receive personal data that they need to fulfill the purposes mentioned above. In addition, we sometimes use different service providers and transmit your personal data to other trusted recipients. These can be eg:
If your personal data are processed by us, you are the person affected within the meaning of EU-DSGVO and you have the following rights towards us:
You may request confirmation from us as to whether personal information concerning you is processed by us. If such processing is available, you can request information from us via the following information:
You have the right to request information about whether your personal information relates to a third country or an international organization. In this connection, you can request the appropriate guarantees in accordance with. Art. 46 EU GDPR in connection with the transfer.
You have a right to rectification and / or completion to us if the personal data you process is incorrect or incomplete. We have to correct this immediately.
You may request the restriction of the processing of your personal data under the following conditions:
If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest Union or a Member State. If the restriction on processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted.
i. Extinguishing duty
You may require us to immediately delete your personal information and we shall promptly erase such personal information if one of the following is true:
ii. Information to third parties
Have we made the personal data concerning you public and we are acc. Article 17 (1) of the EU GDPR, we shall take appropriate measures, including technical means, to inform data controllers who process the personal data that you, taking into account available technology and implementation costs if you have requested the deletion of any links to such personal data or copies or replications of such personal data.
iii. Exceptions
The right to erasure does not exist if the processing is necessary
If you have the right to rectify, delete or limit the processing to us, we are obliged to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort. You have the right of us to be informed about these recipients.
You have the right to receive personally identifiable information you provide us in a structured, common and machine-readable format. In addition, you have the right to transfer this personal information that has been provided to us to another person without hindrance, provided that
In exercising this right, you also have the right to obtain that personal data relating to you are transmitted directly by us to another person responsible, insofar as this is technically feasible. Freedoms and rights of other persons may not be affected. The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority that has been delegated to us.
You have the right at any time, for reasons that arise from your particular situation, against the processing of your personal data, which pursuant to Art. 6 para. 1 lit. e or f EU-DSGVO takes an objection; this also applies to profiling based on these provisions. We no longer process your personal information about you unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing or defending legal claims. If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes. Regardless of Directive 2002/58 / EC, you have the option, in the context of the use of information society services, of exercising your right to object through automated procedures that use technical specifications.
You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
You have the right not to be subjected to a decision based solely on automated processing - including profiling - that will have legal effect or similarly affect you in a similar manner. This does not apply if the decision
However, these decisions may not be based on special categories of personal data under Art. 9 (1) EU GDPR, unless Article 9 (2) lit. a or g EU-DSGVO and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests. With regard to the cases referred to in (1) and (3), we shall take reasonable steps to uphold the rights and freedoms and your legitimate interests, including at least the right of us to intervene on our part, and to express our own views Contesting the decision is one.
Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of its residence, place of work or place of alleged infringement, if you believe that the processing of the personal data concerning you is against the EU-GDPR violates.
The responsible supervisory authority for us is:
Aufsichtsbehörde für den Datenschutz im nicht-öffentlichen Bereich in Bayern
Regierung von Mittelfranken
Promenade 27
91522 Ansbach
Germany
The supervisory authority to which you have lodged a complaint informs you of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 EU GDPR.
For further questions our data protection officer is always at your disposal.
Information requirements according to Art. 12, 13 et seq. EU-GDPR for applicants (m/f)
Dear Ladies and Gentlemen, Dear Applicant,
Due to the legal regulations of the European General Data Protection Regulation ("EU-GDPR"), we are obliged to provide you with comprehensive information about the processing of your personal data in the context of your application process, which we are very happy to provide. Data protection and the handling of your personal data is very important to us, so that we always pay attention to a proper processing of your personal data. In the event that you have questions about your applicant data and their processing, our data protection officer is happy to assist you at any time. This is not subject to any instructions, is independent in its position and legally obliged to maintain secrecy and confidentiality, so that you can turn to it with confidence. Regarding the processing of your personal data in the context of your application process, we inform you of the following:
Your contact person as controller within the meaning of the European General Data Protection Regulation ("EU-DSGVO") and other national data protection laws of the member states as well as other data protection regulations is:
Hotel Bayerischer Hof
B&R Hotelmanagement GmbH & Co. KG
Schuhstraße 31
91052 Erlangen
Germany
(hereinafter referred to as "we", "us" or "our")
The protection of your personal data is of particular importance to the Bayerischer Hof in Erlangen. Please contact our data protection officer directly in all matters relating to data protection and data security:
Stefan Frank
Hotel Bayerischer Hof | B&R Hotelmanagement GmbH & Co. KG
Schuhstraße 31, 91052 Erlangen, Germany
E-mail: datenschutzbeauftragter@bayerischer-hof-erlangen.de
Phone: +49 8031 79674-15
→ Registration certificate (de)
In principle, we process your personal data only insofar as this is necessary to justify the employment relationship. The further processing of your personal data takes place regularly only if we have obtained your prior consent. An exception applies to cases in which prior consent can not be obtained for real reasons or the processing of your personal data by a legal permission is permitted.
1) Personal data
Insofar as we obtain your consent for the processing of personal data, Art. 6 para. 1 lit. a EU GDPR, Art. 88 (1) EU GDPR in conjunction with Section 26 (2) BDSG as the legal basis. In the processing of personal data, which is necessary for the establishment, implementation or termination of the employment contract, Art. 6 para. 1 lit. b EU-DSGVO, Art. 88 para. 1 EU-DSGVO in conjunction with § 26 (1) BDSG, § 611a BGB as legal basis. Insofar as processing of personal data is required to fulfill a legal obligation to which we are subject, Art. 6 para. 1 lit. c EU GDPR as legal basis. In the event that vital interests of you or another natural person require the processing of personal data, Art. 6 para. 1 lit. d EU-GDPR as legal basis. If the processing is necessary for the protection of a legitimate interest of us or a third party and if your interests, fundamental rights and fundamental freedoms do not outweigh the former interest, then Art. 6 para. 1 lit. f EU-GDPR as legal basis for processing.
2) Special categories of personal data
Insofar as we obtain your consent to the processing of special categories of personal data (Article 9 (1) of the EU GDPR), including religious affiliation, nationality and health data, Art. 9 (2) lit. a EU GDPR as legal basis. If the processing of special categories of personal data is necessary in order for us to exercise our rights under labor law and social security and social protection legislation and to fulfill our obligations in this regard, the legal basis for processing under Article 9 (2) lit. , b EU-DSGVO, Art. 88 (1) EU GDPR in conjunction with Section 26 (3) BDSG. If the processing of special categories of personal data is necessary to protect vital interests, the legal basis for processing under Art. 9 (2) lit. c EU GDPR. If the processing relates to special categories of personal data that have obviously been made public by you, the legal basis ensues from Art. 9 (2) lit. e EU GDPR. If the processing of special categories of personal data is required for the purposes of health care, occupational medicine or for the assessment of the ability to work, the legal basis follows from Art. 9 para. 2 lit. h EU-GDPR.
The processing of your personal data takes place for the purpose of establishing the employment relationship, in particular for the fulfillment of contractual, statutory, if applicable, collective bargaining and social security obligations.
Your personal data will be deleted or blocked as soon as the purpose of the storage is removed. It may also be stored if provided for by the European or national legislator in EU regulations, laws or other regulations to which we are subject. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract. Afterwards we store your data for the following periods:
The processing of your personal data in the context of the application process is absolutely necessary for the establishment of the employment relationship. Consequently, there is no contradiction for you. If the processing of your personal data takes place on the basis of your consent, you have the option of revoking your consent at any time.
The legal basis for the processing of your personal data in the context of legal defense and enforcement is Art. 6 para. 1 lit. f EU-DSGVO or Art. 9 para. 2 lit. f EU-GDPR.
The purpose of the processing of your personal data in the context of legal defense and law enforcement is the defense against unauthorized use and the legal enforcement of claims and rights. For this purpose, our legitimate interest in the processing of data pursuant to Art. 6 para. 1 lit. f EU-DSGVO or Art. 9 para. 2 lit. f EU-GDPR.
Your personal information will be erased as soon as it is no longer necessary to achieve the purpose of the survey.
The processing of your personal data in the context of legal defense and law enforcement is imperative for legal defense and law enforcement. Consequently, there is no contradiction for you.
Within our company, those departments and departments receive personal data that they need to fulfill the purposes mentioned above. In addition, we sometimes use different service providers and transfer personal data to other recipients. These can be eg:
If your personal data are processed by us, you are the person affected within the meaning of EU-DSGVO and you have the following rights towards us:
You may request confirmation from us as to whether personal information concerning you is processed by us. If such processing is available, you can request information from us via the following information:
You have the right to request information about whether your personal information relates to a third country or an international organization. In this connection, you can request the appropriate guarantees in accordance with. Art. 46 EU GDPR in connection with the transfer.
You have a right to rectification and / or completion to us if the personal data you process is incorrect or incomplete. We have to correct this immediately.
You may request the restriction of the processing of your personal data under the following conditions:
If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest Union or a Member State. If the restriction on processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted.
i. Extinguishing duty
You may require us to immediately delete your personal information and we shall promptly erase such personal information if one of the following is true:
ii. Information to third parties
Have we made the personal data concerning you public and we are acc. Article 17 (1) of the EU GDPR, we shall take appropriate measures, including technical means, to inform data controllers who process the personal data that you, taking into account available technology and implementation costs if you have requested the deletion of any links to such personal data or copies or replications of such personal data.
iii. Exceptions
The right to erasure does not exist if the processing is necessary
If you have the right to rectify, delete or limit the processing to us, we are obliged to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort. You have the right of us to be informed about these recipients.
You have the right to receive personally identifiable information you provide us in a structured, common and machine-readable format. In addition, you have the right to transfer this personal information that has been provided to us to another person without hindrance, provided that
In exercising this right, you also have the right to obtain that personal data relating to you are transmitted directly by us to another person responsible, insofar as this is technically feasible. Freedoms and rights of other persons may not be affected. The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority that has been delegated to us.
You have the right at any time, for reasons that arise from your particular situation, against the processing of your personal data, which pursuant to Art. 6 para. 1 lit. e or f EU-DSGVO takes an objection; this also applies to profiling based on these provisions. We no longer process your personal information about you unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing or defending legal claims. If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes. Regardless of Directive 2002/58 / EC, you have the option, in the context of the use of information society services, of exercising your right to object through automated procedures that use technical specifications.
You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
You have the right not to be subjected to a decision based solely on automated processing - including profiling - that will have legal effect or similarly affect you in a similar manner. This does not apply if the decision
However, these decisions may not be based on special categories of personal data under Art. 9 (1) EU GDPR, unless Article 9 (2) lit. a or g EU-DSGVO and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests. With regard to the cases referred to in (1) and (3), we shall take reasonable steps to uphold the rights and freedoms and your legitimate interests, including at least the right of us to intervene on our part, and to express our own views Contesting the decision is one.
Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of its residence, place of work or place of alleged infringement, if you believe that the processing of the personal data concerning you is against the EU-GDPR violates.
The responsible supervisory authority for us is:
Aufsichtsbehörde für den Datenschutz im nicht-öffentlichen Bereich in Bayern
Regierung von Mittelfranken
Promenade 27
91522 Ansbach
Germany
The supervisory authority to which you have lodged a complaint informs you of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 EU GDPR.
For further questions our data protection officer is always at your disposal.
Information obligations according to Art. 12, 13 ff. EU GDPR for employees
Dear Ladies and Gentlemen, Dear Colleague,
Due to the legal regulations of the European General Data Protection Regulation ("GDPR"), we are obliged to provide you with comprehensive information about the processing of your personal data in the context of your employment, which we are very happy to provide. Data protection and the handling of your personal data is very important to us, so that we always pay attention to a proper processing of your personal data. In the event that you have questions about your employment data and their processing, our data protection officer will be pleased to assist you at any time. This is not subject to any instructions, is independent in its position and legally obliged to maintain secrecy and confidentiality, so that you can turn to it with confidence. Regarding the processing of your personal data in the context of your employment we inform you of the following:
Your contact person as controller within the meaning of the European General Data Protection Regulation ("EU-DSGVO") and other national data protection laws of the member states as well as other data protection regulations is:
Hotel Bayerischer Hof
B&R Hotelmanagement GmbH & Co. KG
Schuhstraße 31
91052 Erlangen
Germany
(hereinafter referred to as "we", "us" or "our")
The protection of your personal data is of particular importance to the Bayerischer Hof in Erlangen. Please contact our data protection officer directly in all matters relating to data protection and data security:
Stefan Frank
Hotel Bayerischer Hof | B&R Hotelmanagement GmbH & Co. KG
Schuhstraße 31, 91052 Erlangen, Germany
E-mail: datenschutzbeauftragter@bayerischer-hof-erlangen.de
Phone: +49 8031 79674-15
→ Registration certificate (de)
In principle, we process your personal data only insofar as this is necessary for the establishment, implementation and termination of the employment relationship. The further processing of your personal data takes place regularly only if we have obtained your prior consent. An exception applies to cases in which prior consent can not be obtained for real reasons or the processing of your personal data by a legal permission is permitted.
1) Personal data
Insofar as we obtain your consent for the processing of personal data, Art. 6 para. 1 lit. a EU GDPR, Art. 88 (1) EU GDPR in conjunction with Section 26 (2) BDSG as the legal basis. In the processing of personal data, which is necessary for the establishment, implementation or termination of the employment contract, Art. 6 para. 1 lit. b EU-DSGVO, Art. 88 para. 1 EU-DSGVO in conjunction with § 26 (1) BDSG, § 611a BGB as legal basis. Insofar as processing of personal data is required to fulfill a legal obligation to which we are subject, Art. 6 para. 1 lit. c EU GDPR as legal basis. Among other things, we are subject to the following legal obligations:
In the event that vital interests of you or another natural person require the processing of personal data, Art. 6 para. 1 lit. d EU-GDPR as legal basis. If the processing is necessary for the protection of a legitimate interest of us or a third party and if your interests, fundamental rights and fundamental freedoms do not outweigh the former interest, then Art. 6 para. 1 lit. f EU-GDPR as legal basis for processing.
2) Special categories of personal data
Insofar as we obtain your consent to the processing of special categories of personal data (Art. 9 (1) EU GDPR), such as religious affiliation, nationality and health data, Art. 9 (2) lit. a EU GDPR as legal basis. If the processing of special categories of personal data is necessary in order for us to exercise our rights under labor law and social security and social protection legislation and to fulfill our obligations in this regard, the legal basis for processing under Article 9 (2) lit. , b EU-DSGVO, Art. 88 (1) EU GDPR in conjunction with Section 26 (3) BDSG. Among other things, we are subject to the following legal obligations:
If the processing of special categories of personal data is necessary to protect vital interests, the legal basis for processing under Art. 9 (2) lit. c EU GDPR. If the processing relates to special categories of personal data that have obviously been made public by you, the legal basis ensues from Art. 9 (2) lit. e EU GDPR. If the processing of special categories of personal data is required for the purposes of health care, occupational medicine or for the assessment of the ability to work, the legal basis follows from Art. 9 para. 2 lit. h EU-GDPR.
The processing of your personal data takes place for the purpose of justification, implementation and termination of the employment relationship, in particular for the fulfillment of contractual, statutory, if applicable collective bargaining and social security obligations.
Your personal data will be deleted or blocked as soon as the purpose of the storage is removed. It may also be stored if provided for by the European or national legislator in EU regulations, laws or other regulations to which we are subject. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract. Afterwards we store your data for the following periods:
The processing of your personal data in the employment relationship is mandatory for the creation, implementation and termination of the employment relationship. Consequently, there is no contradiction for you. If the processing of your personal data takes place on the basis of your consent, you have the option of revoking your consent at any time.
The legal basis for the processing of your personal data in the context of legal defense and enforcement is Art. 6 para. 1 lit. f EU-DSGVO or Art. 9 para. 2 lit. f EU-GDPR.
The purpose of the processing of your personal data in the context of legal defense and law enforcement is the defense against unauthorized use and the legal enforcement of claims and rights. For this purpose, our legitimate interest in the processing of data pursuant to Art. 6 para. 1 lit. f EU-DSGVO or Art. 9 para. 2 lit. f EU-GDPR.
Your personal information will be erased as soon as it is no longer necessary to achieve the purpose of the survey.
The processing of your personal data in the context of legal defense and law enforcement is imperative for legal defense and law enforcement. Consequently, there is no contradiction for you.
Within our company, those departments and departments receive personal data that they need to fulfill the purposes mentioned above. In addition, we sometimes use different service providers and transmit your personal data to other trusted recipients. These can be eg:
If your personal data are processed by us, you are the person affected within the meaning of EU-DSGVO and you have the following rights towards us:
You may request confirmation from us as to whether personal information concerning you is processed by us. If such processing is available, you can request information from us via the following information:
You have the right to request information about whether your personal information relates to a third country or an international organization. In this connection, you can request the appropriate guarantees in accordance with. Art. 46 EU GDPR in connection with the transfer.
You have a right to rectification and / or completion to us if the personal data you process is incorrect or incomplete. We have to correct this immediately.
You may request the restriction of the processing of your personal data under the following conditions:
If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest Union or a Member State. If the restriction on processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted.
i. Extinguishing duty
You may require us to immediately delete your personal information and we shall promptly erase such personal information if one of the following is true:
ii. Information to third parties
Have we made the personal data concerning you public and we are acc. Article 17 (1) of the EU GDPR, we shall take appropriate measures, including technical means, to inform data controllers who process the personal data that you, taking into account available technology and implementation costs if you have requested the deletion of any links to such personal data or copies or replications of such personal data.
iii. Exceptions
The right to erasure does not exist if the processing is necessary
If you have the right to rectify, delete or limit the processing to us, we are obliged to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort. You have the right of us to be informed about these recipients.
You have the right to receive personally identifiable information you provide us in a structured, common and machine-readable format. In addition, you have the right to transfer this personal information that has been provided to us to another person without hindrance, provided that
In exercising this right, you also have the right to obtain that personal data relating to you are transmitted directly by us to another person responsible, insofar as this is technically feasible. Freedoms and rights of other persons may not be affected. The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority that has been delegated to us.
You have the right at any time, for reasons that arise from your particular situation, against the processing of your personal data, which pursuant to Art. 6 para. 1 lit. e or f EU-DSGVO takes an objection; this also applies to profiling based on these provisions. We no longer process your personal information about you unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing or defending legal claims. If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes. Regardless of Directive 2002/58 / EC, you have the option, in the context of the use of information society services, of exercising your right to object through automated procedures that use technical specifications.
You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
You have the right not to be subjected to a decision based solely on automated processing - including profiling - that will have legal effect or similarly affect you in a similar manner. This does not apply if the decision
However, these decisions may not be based on special categories of personal data under Art. 9 (1) EU GDPR, unless Article 9 (2) lit. a or g EU-DSGVO and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests. With regard to the cases referred to in (1) and (3), we shall take reasonable steps to uphold the rights and freedoms and your legitimate interests, including at least the right of us to intervene on our part, and to express our own views Contesting the decision is one.
Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of its residence, place of work or place of alleged infringement, if you believe that the processing of the personal data concerning you is against the EU-GDPR violates.
The responsible supervisory authority for us is:
Aufsichtsbehörde für den Datenschutz im nicht-öffentlichen Bereich in Bayern
Regierung von Mittelfranken
Promenade 27
91522 Ansbach
Germany
The supervisory authority to which you have lodged a complaint informs you of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 EU GDPR.
For further questions our data protection officer is always at your disposal.
Information obligations according to Art. 12, 13 et seq. EU-DSGVO for customers
Dear Ladies and Gentlemen, dear Customer,
Due to the legal provisions of the European General Data Protection Regulation ("EU-GDPR"), we are obliged to provide you with comprehensive information about the processing of your personal data within the framework of our contractual relationship, which we are very happy to provide. Data protection and the handling of your personal data is very important to us, so that we always pay attention to a proper processing of your personal data. In the event that you have questions about your personal data and their processing, our data protection officer is happy to assist you at any time. This is not subject to any instructions, is independent in its position and legally obliged to maintain secrecy and confidentiality, so that you can turn to it with confidence. Regarding the processing of your personal data within the framework of our contractual relationship, we inform you of the following:
Your contact person as controller within the meaning of the European General Data Protection Regulation ("EU-DSGVO") and other national data protection laws of the member states as well as other data protection regulations is:
Hotel Bayerischer Hof
B&R Hotelmanagement GmbH & Co. KG
Schuhstraße 31
91052 Erlangen
Germany
(hereinafter referred to as "we", "us" or "our")
The protection of your personal data is of particular importance to the Bayerischer Hof in Erlangen. Please contact our data protection officer directly in all matters relating to data protection and data security:
Stefan Frank
Hotel Bayerischer Hof | B&R Hotelmanagement GmbH & Co. KG
Schuhstraße 31, 91052 Erlangen, Germany
E-mail: datenschutzbeauftragter@bayerischer-hof-erlangen.de
Phone: +49 8031 79674-15
→ Registration certificate (de)
In principle, we process your personal data only insofar as this is necessary for the performance of our services. The processing of your personal data takes place regularly only on the basis of the fulfillment of a contract or for the execution of a pre-contractual measure.
Insofar as we obtain the consent of the data subject for processing of personal data, Art. 6 para. 1 lit. a EU GDPR as legal basis. In the processing of personal data required to fulfill a contract between you and us, Art. 6 para. 1 lit. b EU-GDPR as legal basis. This also applies to processing operations required to carry out pre-contractual actions. Insofar as processing of personal data is required to fulfill a legal obligation to which we are subject, Art. 6 para. 1 lit. c EU GDPR as legal basis. In the event that vital interests of you or another natural person require the processing of personal data, Art. 6 para. 1 lit. d EU-GDPR as legal basis. If the processing is necessary for the protection of a legitimate interest of us or a third party and if your interests, fundamental rights and fundamental freedoms do not outweigh the former interest, then Art. 6 para. 1 lit. f EU-GDPR as legal basis for processing.
Your personal data will be deleted or blocked as soon as the purpose of the storage is removed. It may also be stored if provided for by the European or national legislator in EU regulations, laws or other regulations to which we are subject. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.
The legal basis for the processing of your personal data in the context of direct marketing by mail is Art. 6 para. 1 lit. f EU-GDPR.
The purpose of processing your personal data in the context of direct marketing by mail is to promote the sale of goods or services. For this purpose, our legitimate interest in the processing of data pursuant to Art. 6 para. 1 lit. f EU-GDPR.
Your personal information will be deleted as soon as it is no longer necessary to achieve the purpose of the survey; this is the case in particular when the opposition is received.
You can object to the processing of your personal data in the context of direct marketing by mail at any time in the future.
Legal basis for the processing of your personal data in the context of the newsletter dispatch is in the presence of a consent Art. 6 para. 1 lit. a EU-DSGVO or as a result of the sale of goods or services, the statutory permission of § 7 (3) UWG.
The collection of your personal data serves to send the newsletter to you. The purpose of the processing of your personal data in the course of sending the newsletter is the promotion of lottery proceeds. Much of our revenue is used to fund social projects and education. These serve to improve the living conditions and inclusion of people with disabilities, children and adolescents.
Your personal information will be erased as soon as it is no longer necessary to achieve the purpose of the survey. Your personal data is therefore stored as long as the subscription to the newsletter is active.
You can cancel the subscription to the newsletter at any time. For this purpose, there is a corresponding link in each newsletter. Termination of the subscription also enables revocation of consent.
Legal basis for the processing of your personal data, which are transmitted in the course of sending an e-mail, is Art. 6 para. 1 lit. f EU-GDPR. If the e-mail contact aims to conclude a contract, Art. 6 para. 1 lit. b EU-DSGVO additional legal basis for the processing of your personal data.
The processing of your personal data in the event of contact via e-mail serves us only to process the contact.
Your personal information will be erased as soon as it is no longer necessary to achieve the purpose of the survey. For the personal data sent by e-mail, this is the case when the conversation with you has ended. The conversation ends when it can be inferred from the circumstances that the matter in question has finally been clarified between you and us.
At any time you have the opportunity to object to the processing of your personal data in the context of contacting us by e-mail at any time for the future. In such a case, the conversation between you and us can not continue. All personal data stored in the course of contacting will be deleted in this case.
The legal basis for the processing of your personal data in the context of legal defense and enforcement is Art. 6 para. 1 lit. f EU-GDPR.
The purpose of the processing of your personal data in the context of legal defense and law enforcement is the defense against unauthorized use and the legal enforcement of claims and rights. For this purpose, our legitimate interest in the processing of data pursuant to Art. 6 para. 1 lit. f EU-GDPR.
Your personal information will be erased as soon as it is no longer necessary to achieve the purpose of the survey.
The processing of your personal data in the context of legal defense and law enforcement is imperative for legal defense and law enforcement. Consequently, there is no contradiction for you.
Within our company, those departments and departments receive personal data that they need to fulfill the purposes mentioned above. In addition, we sometimes use different service providers and transmit your personal data to other trusted recipients. These can be eg:
If your personal data are processed by us, you are the person affected within the meaning of EU-DSGVO and you have the following rights towards us:
You may request confirmation from us as to whether personal information concerning you is processed by us. If such processing is available, you can request information from us via the following information:
You have the right to request information about whether your personal information relates to a third country or an international organization. In this connection, you can request the appropriate guarantees in accordance with. Art. 46 EU GDPR in connection with the transfer.
You have a right to rectification and / or completion to us if the personal data you process is incorrect or incomplete. We have to correct this immediately.
You may request the restriction of the processing of your personal data under the following conditions:
If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest Union or a Member State. If the restriction on processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted.
i. Extinguishing duty
You may require us to immediately delete your personal information and we shall promptly erase such personal information if one of the following is true:
ii. Information to third parties
Have we made the personal data concerning you public and we are acc. Article 17 (1) of the EU GDPR, we shall take appropriate measures, including technical means, to inform data controllers who process the personal data that you, taking into account available technology and implementation costs if you have requested the deletion of any links to such personal data or copies or replications of such personal data.
iii. Exceptions
The right to erasure does not exist if the processing is necessary
If you have the right to rectify, delete or limit the processing to us, we are obliged to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort. You have the right of us to be informed about these recipients.
You have the right to receive personally identifiable information you provide us in a structured, common and machine-readable format. In addition, you have the right to transfer this personal information that has been provided to us to another person without hindrance, provided that
In exercising this right, you also have the right to obtain that personal data relating to you are transmitted directly by us to another person responsible, insofar as this is technically feasible. Freedoms and rights of other persons may not be affected. The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority that has been delegated to us.
You have the right at any time, for reasons that arise from your particular situation, against the processing of your personal data, which pursuant to Art. 6 para. 1 lit. e or f EU-DSGVO takes an objection; this also applies to profiling based on these provisions. We no longer process your personal information about you unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing or defending legal claims. If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes. Regardless of Directive 2002/58 / EC, you have the option, in the context of the use of information society services, of exercising your right to object through automated procedures that use technical specifications.
You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
You have the right not to be subjected to a decision based solely on automated processing - including profiling - that will have legal effect or similarly affect you in a similar manner. This does not apply if the decision
However, these decisions may not be based on special categories of personal data under Art. 9 (1) EU GDPR, unless Article 9 (2) lit. a or g EU-DSGVO and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests. With regard to the cases referred to in (1) and (3), we shall take reasonable steps to uphold the rights and freedoms and your legitimate interests, including at least the right of us to intervene on our part, and to express our own views Contesting the decision is one.
Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of its residence, place of work or place of alleged infringement, if you believe that the processing of the personal data concerning you is against the EU-GDPR violates.
The responsible supervisory authority for us is:
Aufsichtsbehörde für den Datenschutz im nicht-öffentlichen Bereich in Bayern
Regierung von Mittelfranken
Promenade 27
91522 Ansbach
Germany
The supervisory authority to which you have lodged a complaint informs you of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 EU GDPR.
For further questions our data protection officer is always at your disposal.© 2016 | Hotel Bayerischer Hof | B&R Hotelmanagement GmbH & Co. KG
