Data protection

The protection of your personal data is important to us. We strictly adhere to the data protection laws when handling your personal data.

In the following, we would like to inform you about how we use your personal data and what it means for you when you use our website gaestehaus-warsteiner-welt.de.

The person responsible for the processing of personal data within the meaning of the applicable data protection laws is:

Warsteiner Welt GmbH & Co. KG
Domring 4–10
59581 Warstein

Phone: +49 2902 885001
E‑Mail: visit@warsteiner.com

Represented by:
HCG Beteiligungs-GmbH

This represented by:
Simone Pollmann-Schweckhorst

1. What is personal data

Personal data is all information related to an identified or identifiable natural person. This includes data provided such as your address, telephone number and e-mail address, as well as usage data such as your username and password. Data that does not reference an identifiable person in any way is not considered personal data, such as anonymized data on usage and service processes.

2. Anonymous use and collection, processing and use of access and personal data

In principle, you can surf anonymously on the internet pages of gaestehaus-warsteiner-welt.de. Unless you provide us with such data yourself, we do not collect or store any personal data in the course of your visit to gaestehaus-warsteiner-welt.de. However, when you visit our website gaestehaus-warsteiner-welt.de, our web server stores certain technical data (so-called access data) in so-called log files, such as

– Name of the retrieved file
– Date and time of the retrieval
– IP address of the accessing computer
– Browser type and version
– Operating system used by the user
– URL of the last page previously accessed by the user
– Amount of data transferred
– Status of the retrieval (successful yes/no)

The recorded IP addresses in our log files are used exclusively for the purposes of being able to better analyse and remedy malfunctions in the accessibility of the websites provided on our servers, to improve and optimise the websites provided technically and editorially, and for any necessary forensic analysis. No statistical evaluations and/or user profiles are created on the basis of the data stored in the log files.

Your personal data is collected when you use the following services that can be accessed via gaestehaus-warsteiner-welt.de:

– When booking a hotel stay

We only use the personal data collected in the process if you provide it to us during your registration and/or order or in the course of the contractual relationship. The provision of your personal data is necessary for the conclusion of the respective contract or for the processing of the respective contractual relationship. We collect and use the data provided by you insofar as they are necessary for the establishment, content or amendment of the contractual relationship within the scope of Article 6(1)(b) DSGVO with you, i.e. in particular for processing your orders as well as for invoicing purposes. Without the provision of your personal data, we cannot provide you with the aforementioned services.

To book a stay, you must provide the following data:

– Name
– Number of persons
– e-mail address
– Telephone number
– travel period
– room category

In the course of registering for certain services, Gästehaus Warsteiner Welt may ask for further personal data in order to provide the user with the respective service.

In addition, we only use personal data provided by you if and insofar as you have consented to this or a legal permission for the use exists.

3. Links to other websites, use of cookies, Matomo, social plug-ins

a) Hyperlinks

gaestehaus-warsteiner-welt.de links to websites from other providers with which we are not affiliated (third parties). Once you click these links gaestehaus-warsteiner-welt.de has no further influence over the data collected and used by these providers. Further information on data collection and usage is provided in the data protection declarations of these individual providers. Of course, since we have no control over how third parties collect and process data, we cannot accept any responsibility for such collection or processing.

b) Cookies

We use cookies to make our website more attractive and to allow you to use certain functions. Cookies are text files stored temporarily or long-term on the user’s computer by the user’s browser. Temporary cookies ensure that communications remain uniform. Persistent cookies are used to recognise users when they visit our website again. Such persistent cookies are used, for instance, when users select the function “Remain logged in on this computer”. If you use the same computer to access the page again later, the website then uses a cookie to recognise the computer and log it in automatically. You can choose whether your browser should accept cookies. All browser programs will allow you to deactivate or delete cookies. Functions that require the ability to recognise your computer, however, will not be available or will only be available to a restricted extent if you do so. Therefore, website functions may be impacted if you deactivate cookies; in particular, your ability to book a brewery tour may be restricted. Our website uses cookie consent technology from Borlabs Cookie to obtain your consent to store certain cookies in your browser, then document this consent in accordance with data protection laws. The provider of this technology is Borlabs — Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg (hereinafter referred to as Borlabs). When you access our website, a Borlabs cookie is stored in your browser, and your consent or revocation of consent is stored with the cookie. This data is not transmitted to the provider of Borlabs Cookie. The recorded data is stored until you request that we delete it, or until you delete the Borlabs cookie yourself, or until the purpose for which the data was stored no longer applies. Mandatory statutory retention periods remain unaffected. Details on data processing by Borlabs Cookie are available at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/ We use Borlabs Cookie consent technology to obtain legally required approval for the use of cookies. Our legal basis for doing so is Art. 6 para. 1 clause 1 lit. c GDPR. You can edit your cookie settings here:

[borlabs-cookie type="btn-cookie-preference" title="Cookie settings" /]

c) Matomo (formerly Piwik)

This website uses the open source web analytics service Matomo. Matomo uses cookies. These are text files stored on your computer that allow us to analyse your use of the website. To do so, information on your use of the website generated by the cookie is saved on our server. Your IP address is anonymised before it is saved.

Matomo cookies remain stored on your device until you delete them.

Matomo cookies are stored, and this analytic tool is used, on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the anonymised analysis of user behaviour, in order to optimise both its website and its advertisements. If we request your consent (for instance consent to store cookies), then data is processed exclusively on the basis of Art. 6 para. 1 lit. a GDPR; you may revoke your consent at any time.

Information on your use of the website generated by the cookie is not transmitted to third parties. You can change your browser software settings to prevent it from storing cookies; however, if you do so you may not be able to use all of the functions of this website in full.

If you do not agree to the storage and use of your data, you can deactivate said data storage and use. If you do so, an opt-out cookie will be stored on your browser to prevent Matomo from saving usage data. If you delete your cookies, then the Matomo opt-out cookie will also be deleted. You will have to reactivate the opt out the next time you visit the website.

Hosting

We host Matomo exclusively on our own servers so that all analysis data remains with us and is not passed on.

d) Adobe Fonts

 

This website uses certain web fonts from Adobe in order to achieve a uniform appearance. The provider is Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110–2704, USA (Adobe).

When you access this website, your browser will load the required fonts directly from Adobe in order to display the site correctly on your device. Your browser creates a link to Adobe servers in the USA to do so. When it does, Adobe is notified that your IP address accessed this website. According to Adobe, no cookies are stored in association with providing these fonts.

Adobe is certified under the EU-US Privacy Shield. The Privacy Shield is a convention between the United States of America and the European Union designed to ensure compliance with European data protection standards. Further information is available at: https://www.adobe.com/de/privacy/eudatatransfers.html.

Data is stored and analysed in accordance with Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in displaying fonts in a uniform manner on the website. If we request your consent (for instance consent to store cookies), then data is processed exclusively on the basis of Art. 6 para. 1 lit. a GDPR; you may revoke your consent at any time.

Further information on Adobe Fonts is available at: https://www.adobe.com/de/privacy/policies/adobe-fonts.html.

Adobe’s data protection declaration is available at: https://www.adobe.com/de/privacy/policy.html

4. Hosting und Content Delivery Networks (CDN)

External hosting

This website is hosted by an external service provider (hoster). Personal data collected on this website is stored on the hoster’s servers. This may include, for instance, IP addresses, contact inquiries, meta and communication data, contract data, contact data, names, website access data and other data generated via a website.

We make use of the hoster’s services to fulfil our contracts with current and potential customers (Art. 6 para. 1 lit. b GDPR) and in the interest of providing our online services securely, quickly and efficiently via a professional provider (Art. 6 para. 1 lit. f GDPR).

Our hoster will only process your data if necessary to fulfil its service obligations, and under our instructions with respect to this data.

Concluding a contract for data processing

We have concluded a contract for data processing with our hoster in order to ensure processing is carried out according to data protection law.

5. Transmission of personal data

We only transmit your personal data if this is indicated in this data protection declaration, if the contractual purpose requires that we do so (Article 6 para. 1 letter b) GDPR), if you have given your express consent that we do so (Article 6 para. 1 letter a) GDPR), and/or if we have legal permission to do so (Article 6 para. 1 letter c) GDPR). We may transmit your data to our commissioned credit institute or payment provider in order to process your payment.

6. Data security

We use technical and organisational security measures to ensure that users’ personal data is protected against loss, prohibited changes, or illegal access by third parties. We only allow authorised personnel to access your personal data, and only allow access to the extent necessary for the above purposes.

Certain sensitive data is transmitted only in encrypted form. We use “secure socket layer” (SSL) transmission to do so. All information transmitted using this secure method is encrypted before it is sent to us. Your personal data, such as your name or address, is converted into a code for encryption by the security server software. This ensures that this data cannot be accessed by unauthorised parties during online transmission. Most newer browsers already support this secure transmission technology.

All employees of Warsteiner Welt and their agents are obligated to maintain data secrecy, if they handle personal data.

7. Duration of storage

Once the contract has ended and been carried out in full, your data is blocked against further use, and is deleted at the end of applicable tax and commercial law regulations, unless you have declared your consent to the ongoing use of your data.

8. Rights of data subjects

You have a variety of rights under the law related to Warsteiner Welt’s processing of your personal data. As defined under the law, persons whose personal data is processed are referred to as “data subjects”.

You can contact Warsteiner Welt if you would like to exercise any of your rights listed below:

Right to revoke consent in accordance with Art. 7 para. 3 clause 1 GDPR

Right to information in accordance with Art. 15 GDPR

Right to rectification and completion in accordance with Art. 16 GDPR

Right to deletion and “right to be forgotten” in accordance with Art. 17 GDPR

Right to restrict processing in accordance with Art. 18 GDPR

Right to data portability in accordance with Art. 20 GDPR

Right to object in accordance with Art. 21 GDPR

Right to not be subject to decisions based only on automated processing – including profiling – in accordance with Art. 22 GDPR

Right to submit complaints to a supervisory authority in accordance with Art. 77 GDPR

Responsible supervisory authority:

State Officer for Data Protection and Freedom of Information
North Rhine Westphalia
PO Box 20 04 44
40102 Düsseldorf

Tel.: 0211/38424-0
Fax: 0211/38424-10
E‑mail: poststelle@ldi.nrw.de

9. Revocation of consent / data protection officer

If you have consented to the use of your personal data, you can revoke your consent granted to us at any time with future effect.

If you have questions or require further information, or if you would like to revoke your consent, please contact our Data Protection Officer:

Warsteiner Welt GmbH & Co. KG
Data Protection Officer
Domring 4–10
59581 Warstein

E-mail: visit@warsteiner.com

Data protection declaration Version 1.0
As of: March 2022