Privacy Policy

§ 1 Information on the collection of personal data

We are pleased about your interest in our website. The protection of your personal data during your visit to our homepage is of particularly high importance to our management. With the following information, we provide you with an overview of the processing of your personal data by us and your rights under data protection law. Personal data is all data that can be related to you personally, e.g., name, address, email addresses, user behavior.

If a data subject wishes to use special services of our company via our website, such as our contact form, processing of personal data could become necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject. Processing is always carried out in accordance with the EU General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection regulations applicable to our company.

As the controller, our company has implemented technical and organizational measures to ensure the most complete protection possible for personal data processed via this website against loss, destruction, access, modification, or distribution of your data by unauthorized persons. This also includes that your personal data is transmitted securely by us using encryption. We use the TLS (Transport Layer Security) coding system. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

Nevertheless, absolute protection cannot be guaranteed due to fundamental security gaps in internet-based data transmissions.

The controller according to Art. 4 Para. 7 EU General Data Protection Regulation (GDPR) and the applicable country-specific data protection regulations is:

Motel Baden

Schützengasse 36

2500 Baden

Phone: +43 2252 87131

Email: welcome@motel-baden.com

Please send general questions about data protection to our company to welcome@motel-baden.com.

We collect and use personal data of our users only to the extent necessary to provide a functional website as well as to present our content and provide services. The collection and use of personal data of our users regularly takes place only after the user's consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by legal regulations.

The following legal bases for the processing of your personal data may be considered:

• Processing based on your consent (Article 6 Para. 1 lit. a GDPR)
• Processing for the performance of a contract to which the data subject is a party. This also applies to processing operations required to carry out pre-contractual measures (Article 6 Para. 1 lit. b GDPR)
• Processing for compliance with a legal obligation to which our company is subject (Article 6 Para. 1 lit. c GDPR)
• Processing in the event that vital interests of the data subject or another natural person make the processing of personal data necessary (Article 6 Para. 1 lit. d GDPR)
• Processing for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject (Article 6 Para. 1 lit. f GDPR). Legitimate interests can be in particular:
• to deliver the content of our website correctly;
• statistical evaluations for testing and optimizing the website;
• to provide law enforcement authorities with the information necessary for prosecution in the event of a cyberattack;
• answering inquiries and providing services and/or information intended for you;
• the processing and transfer of personal data for internal or administrative purposes;
• the prevention and detection of fraud and criminal offenses;
• ensuring the permanent functionality of our information technology systems and the technology of our website with the aim of increasing data protection and data security in our company.

§ 2 Your rights

You can request information about the data stored about you at the above address (Art. 15 GDPR). In addition, you can request a correction if we have stored incorrect data about you (Art. 16 GDPR). Furthermore, under certain conditions, you can request the deletion of your data (Art. 17 GDPR) or assert the right to object (Art. 21 GDPR). You also have the right to restrict the processing of your personal data (Art. 18 GDPR) and a right to the release of the data you have provided (Art. 20 GDPR). The restrictions according to §§ 34 and 35 BDSG apply to the right of access and the right of deletion.

If you believe that the processing of your personal data contradicts the requirements of the General Data Protection Regulation, you have the right to contact your respective competent supervisory authority for data protection (Article 77 GDPR in conjunction with § 19 BDSG). In the case of Baden-Württemberg, this is the State Commissioner for Data Protection and Freedom of Information, Königstrasse 10 a, 70173 Stuttgart.

If the processing of data is based on your consent, you are entitled under Art. 7 GDPR to withdraw your consent to the use of your personal data at any time. Please note that the withdrawal only takes effect for the future. Processing that took place before the withdrawal is not affected. Please also note that we may have to keep certain data for a certain period of time to fulfill legal requirements.

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 Para. 1 lit. e GDPR (data processing in the public interest) and Art. 6 Para. 1 lit. f GDPR (data processing on the basis of a balancing of interests); this also applies to profiling based on these provisions within the meaning of Article 4 No. 4 GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims (objection according to Art. 21 Para. 1 GDPR).

In individual cases, we process your personal data for direct marketing purposes. You have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection can be made informally and should, if possible, be addressed to the contact details given under §1 No. (2) (objection according to Art. 21 Para. 2 GDPR).

Unless otherwise regulated in the detailed descriptions of the offers, those departments within our company that need your data to fulfill our contractual and legal obligations or to implement our legitimate interest will have access to it. We will only pass on information about you outside the company if legal or official reporting obligations allow or require this, the transfer is necessary for processing and thus for the fulfillment of the contract or, at your request, for the implementation of pre-contractual measures, we have your consent, or we are authorized to provide information.

If we use commissioned service providers for individual functions of our offer, these have been carefully selected and commissioned by us, are bound by our instructions, and are regularly monitored. Your personal data will then be processed on the basis of order processing contracts according to Art. 28 GDPR, and we ensure that the processing of personal data is carried out in accordance with the provisions of the GDPR.

If we want to use your data for advertising purposes, we will inform you in detail about the respective processes below.

Unless otherwise regulated in the detailed descriptions of the offers, we process and store your personal data as long as it is necessary for the fulfillment of our contractual and legal obligations.

Your personal data will be regularly deleted or blocked if it is no longer required for the fulfillment of contractual or legal obligations, you have exercised your right to deletion, all mutual claims have been fulfilled, and there are no other legal storage obligations or legal justifications for storage.

§ 3 Collection of personal data when visiting our website

With every call to the website by a data subject or an automated system, a series of general data and information is recorded in log files. This includes an Internet Protocol address (IP address), the browser types and versions used, the website from which an accessing system reaches our website (so-called referrers), the sub-websites accessed via an accessing system on our website, the date and time of access to the website, and other similar data and information that serve to avert danger in the event of attacks on our information technology systems.

The legal basis for the temporary storage of data and log files is based on Art. 6 Para. 1 lit. f GDPR with the aforementioned legitimate interests.

Temporary storage of the IP address by the system is necessary to ensure delivery of the website to the user's computer. For this, the user's IP address must remain stored for the duration of the session.

Storage in log files takes place to ensure the functionality of the website. In addition, the data serves us to optimize the website and to ensure the security of our information technology systems. Our legitimate interest in data processing according to Art. 6 Para. 1 lit. f GDPR is also based on this. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of recording data for providing the website, this is the case when the respective session has ended. The collection of data for providing the website and the storage of data in log files is necessary for the operation of the website. Another possibility for checking the log files exists if there is a justified suspicion of illegal use or a specific attack on our website based on concrete evidence. Our legitimate interest in processing here lies in the purpose of clarifying and prosecuting such attacks and illegal uses.

"Cookies" are small files that are stored on users' devices. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your end device. Session cookies are automatically deleted after your visit. Permanent cookies remain stored on your end device until you delete them yourself or they are automatically deleted by your web browser. Various information can be stored using cookies. The information can include, for example, the language settings on a website or the place where a video was watched.

Cookies are generally also used when a user's interests or behavior (e.g., viewing certain content, using functions, etc.) are stored in a user profile on individual websites. Such profiles serve to show users, for example, content that corresponds to their potential interests. This process is also referred to as "tracking," i.e., tracking the potential interests of users. The term cookies also includes other technologies that fulfill the same functions as cookies (e.g., when user information is stored using pseudonymous online identifiers, also referred to as "user IDs").

If we use cookies or "tracking" technologies, we will inform you separately in our privacy policy.

Notes on legal bases: The legal basis on which we process your personal data with the help of cookies depends on whether we ask you for consent. If this applies and you consent to the use of cookies, the legal basis for processing your data is the declared consent (Art. 6 Para. 1 lit. a GDPR). Otherwise, the data processed with the help of cookies is processed on the basis of our legitimate interests (Art. 6 Para. 1 lit. f GDPR), e.g., in the commercial operation of our online offer and its improvement, or if the use of cookies is necessary to fulfill our contractual obligations (Art. 6 Para. 1 lit. b GDPR).

General notes on withdrawal and objection (opt-out): Regardless of whether processing is based on consent or legal permission, you have the option at any time to withdraw consent given or to object to or withdraw the processing of your data by cookie technologies (collectively referred to as "opt-out").

You can initially declare your objection using your browser settings, e.g., by deactivating the use of cookies (although this may also restrict the functionality of our online offer).

Processing of cookie data based on consent: Before we process or have data processed as part of the use of cookies, we ask users for consent that can be withdrawn at any time. Until consent has been given, cookies that are necessary for the operation of our online offer will be used at most. Their use is based on our interest and the interest of users in the expected functionality of our online offer.

You can prevent the installation of cookies by deleting existing cookies and deactivating the storage of cookies in your web browser settings. We point out that in this case you may not be able to use all functions of our website to their full extent. You can also prevent the collection of the aforementioned information by setting an opt-out cookie on one of the websites linked below:

• https://optout.networkadvertising.org/#!/
• http://www.aboutads.info/choices
• https://www.youronlinechoices.com/de/praferenzmanagement/

We point out that this setting will be deleted if you delete your cookies. You can object to the collection and forwarding of personal data or prevent the processing of this data by deactivating the execution of JavaScript in your browser. In addition, you can prevent the execution of JavaScript code altogether by installing a JavaScript blocker (e.g., https://noscript.net/ or https://www.ghostery.com). We point out that in this case you may not be able to use all functions of our website to their full extent.

§ 4 Further functions and offers of our website

In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do this, you usually have to provide further personal data, which we use to provide the respective service and for which the aforementioned data processing principles apply.

We offer you the possibility of contacting us by email, phone, or fax, during which the personal data of the user transmitted (e.g., name, inquiry) will be stored and processed. The data serves exclusively for further conversation and for the purpose of processing your request and will not be passed on to third parties without your consent. For the processing of data transmitted in the course of contacting us, there is a legitimate interest under Art. 6 Para. 1 lit. f GDPR in the effective processing of inquiries addressed to us.

If the contact aims at the conclusion of a contract, the legal basis for processing according to Art. 6 Para. 1 lit. b GDPR is additionally to be included for the implementation of pre-contractual measures and, if applicable, later processing for the fulfillment of a contract.

We store personal data processed as part of a general contact inquiry by email, phone, or fax only until the respective correspondence has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. Mandatory legal provisions – in particular retention periods – remain unaffected.

In the case of contacting us by email, you can of course object to the storage of your personal data at any time. In such a case, the conversation cannot be continued.

Contact forms are also available on our website, which can be used for electronic contact. The data entered by the user is transmitted to us and stored. The legal basis for processing the data when using the contact form is therefore Art. 6 Para. 1 lit. f GDPR. Our legitimate interest is to effectively process user inquiries received via the contact form.

If the contact aims at the conclusion of a contract, the legal basis for processing according to Art. 6 Para. 1 lit. b GDPR is additionally to be included for the implementation of pre-contractual measures and, if applicable, later processing for the fulfillment of a contract.

We store personal data processed as part of a general contact inquiry via contact form only until the respective correspondence has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. Mandatory legal provisions – in particular retention periods – remain unaffected.

In the case of contacting us, you can of course object to the storage of your personal data at any time. In such a case, the conversation cannot be continued.

§ 5 Changes to our data protection regulations

We reserve the right to adapt this privacy policy so that it always meets current legal requirements or to implement changes to our services in the privacy policy, e.g., when introducing new services. The new privacy policy will then apply to your next visit.