1. Information on the Collection of Personal Data and Contact Details

Personal data refers to any data by which you can be personally identified.
The controller responsible for data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is:

Hotel Ebner GmbH & Co. KG
Geschäftsführer: Klaus Ebner
Schottstraße 36
D-97631 Bad Königshofen

phone: +49 9761/91 19-0
fax: +49 9761/91 19-333

Hier klicken um E-Mail-Adresse anzuzeigen
www.hotel-ebner.de
 

The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of the processing of personal data.

2. Data Collection When Visiting Our Website

When you use our website for purely informational purposes—that is, if you do not register or otherwise submit information to us—we collect only the data that your browser transmits to us (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

• The website page visited
• Date and time of access
• Amount of data sent in bytes
• Source/referral from which you accessed the page
• Browser used
• Operating system used
• IP address used (in anonymized form)

This processing is carried out in accordance with Art. 6 Para. 1 lit. f of the GDPR, based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on to third parties or used for any other purposes. However, we reserve the right to subsequently review the server log files if there are concrete indications of unlawful use.

3. Cookies

To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session—that is, after you close your browser (so-called session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). When cookies are set, they collect and process—to an individual extent—certain user information, such as browser and location data, as well as IP address values. Persistent cookies are automatically deleted after a predetermined period, which may vary depending on the specific cookie.
Please note that you can configure your browser to notify you when cookies are being set, allowing you to decide individually whether to accept them, or to exclude the acceptance of cookies for specific cases or in general. Every browser manages cookie settings differently. These settings are described in the help menu of each browser, which explains how you can modify your cookie preferences.

4. Contact Form

When you contact us (e.g., via contact form or email), personal data is collected. The specific data collected in the case of a contact form is evident from the respective form itself. This data is stored and used exclusively for the purpose of responding to your inquiry, for establishing contact, and for the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Art. 6 para. 1 lit. f GDPR. If your inquiry aims at the conclusion of a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted once your inquiry has been fully processed; this is deemed to be the case when it can be inferred from the circumstances that the matter in question has been conclusively resolved, provided that no statutory retention obligations preclude such deletion.

5. Guestbook

When using the guestbook, in addition to your comment, the time of its creation, your email address, and—unless you post anonymously—your chosen username are stored and published on the website.
Storage of IP Addresses
The guestbook function stores the IP addresses of users who post comments. Since we do not review comments on our site prior to publication, we require this data in order to take action against the author in the event of legal violations, such as insults or propaganda.

6. Rights of the Data Subject

Applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) vis-à-vis the Data Controller regarding the processing of your personal data, about which we inform you below:
Right of access pursuant to Art. 15 GDPR: In particular, you have the right to obtain information regarding your personal data processed by us, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the envisaged storage period or the criteria used to determine that period, the existence of a right to rectification, erasure, restriction of processing, or to object to such processing, the right to lodge a complaint with a supervisory authority, the source of your data if it was not collected from you by us, the existence of automated decision-making, including profiling, and—where applicable—meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you, and your right to be informed of the appropriate safeguards pursuant to Art. 46 GDPR regarding the transfer of your data to third countries;
Right to rectification pursuant to Art. 16 GDPR: You have the right to obtain the immediate rectification of inaccurate personal data concerning you and/or the completion of incomplete data stored by us;
Right to erasure pursuant to Art. 17 GDPR: You have the right to request the erasure of your personal data, provided that the conditions set out in Art. 17 Para. 1 GDPR are met. However, this right does not exist, in particular, where the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims; Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data for as long as the accuracy of your data—which you have contested—is being verified; if you refuse the erasure of your data due to unlawful data processing and instead request the restriction of the processing of your data; if you require your data for the establishment, exercise, or defense of legal claims after we no longer require such data for the fulfillment of the original purpose; or if you have objected to the processing on grounds relating to your particular situation, pending the verification of whether our legitimate grounds override yours;
Right to notification pursuant to Art. 19 GDPR: If you have asserted your right to rectification, erasure, or restriction of processing against the controller, the controller is obliged to communicate this rectification or erasure of data, or restriction of processing, to all recipients to whom the personal data concerning you have been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
Right to data portability pursuant to Art. 20 GDPR: You have the right to receive the personal data concerning you—which you have provided to us—in a structured, commonly used, and machine-readable format, or to request the transmission of such data to another controller, insofar as this is technically feasible;
Right to withdraw granted consent pursuant to Art. 7 Para. 3 GDPR: You have the right to withdraw any consent previously granted for the processing of data at any time, with effect for the future. In the event of such withdrawal, we will immediately delete the data in question, provided that further processing cannot be based on a legal basis permitting processing without consent. The withdrawal of consent shall not affect the lawfulness of the processing carried out based on the consent prior to its withdrawal; Right to lodge a complaint pursuant to Art. 77 GDPR: If you consider that the processing of personal data relating to you infringes the GDPR, you have—without prejudice to any other administrative or judicial remedy—the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place.

7. Duration of Storage of Personal Data

The retention period for personal data is determined by the applicable statutory retention periods (e.g., commercial and tax law retention periods). Upon expiration of this period, the corresponding data is routinely deleted, provided that it is no longer required for the fulfillment or initiation of a contract and/or we no longer have a legitimate interest in its continued storage.

8. Further Information and Contacts

If you have any further questions regarding data protection, please contact us. You can find the contact details in the legal notice.