Data privacy

1. Personal data

Personal data within the meaning of the GDPR is any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal data is only stored to the extent necessary to provide the booked service, to comply with legal requirements or for the purpose stated below.

2. Anonymised data / log files

You can visit our website without the need to collect personal data. Whenever you visit our website, certain anonymised data is nevertheless stored, e.g. which page or which offer was called up. However, this data is not personal and is therefore not subject to the legal regulations of the DSGVO or the BDSG.The website operator or page provider collects data about accesses to the page and stores them as "server log files". The following data is logged in this way: Website visited, time of access, amount of data sent in bytes, source/reference from which you accessed the page, browser used, operating system used, IP address used.The data collected is only used for statistical evaluations and to improve the website. However, the website operator reserves the right to check the server log files retrospectively if there are concrete indications of unlawful use. Anonymous data is collected solely for statistical evaluation in order to improve our services. Please note the point "Right of information / right of withdrawal".

3. Purpose of the collection of personal data

However, the collection of personal data becomes indispensable if you book a stay or other service via our portal, use our online shop, contact us, subscribe to our newsletter or wish to use other offers on our site, for the processing of which personal data is indispensable. This includes voucher purchases as well as participation in competitions.

In accordance with the legal regulations and in the spirit of data economy, we generally only collect data that is required for the provision of this particular service. If we ask for further information in our forms, the information is always voluntary and marked as such.

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. Furthermore, the storage in log files takes place in order to ensure the functionality of the website. In addition, we use the data to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 lit. f DSGVO.

In the event of a booking of a stay or other service, the data collected in this context will be used for the processing of this booking, within the legal requirements for advertising purposes and for statistical purposes.

The legal basis for sending the newsletter as a result of the sale of goods or services is § 7 para. 3 UWG.

If you subscribe to our newsletter, we also store and use the personal data you provide when booking and your stay on the basis of Art. 6 para. 1 lit. f DSGVO in order to provide you with the best possible service as a newsletter subscriber.

The legal basis for the processing of the data after the user has subscribed to the newsletter is Art. 6 para. 1 lit. a DSGVO if the user has given his consent.

We also use the personal data stored by us to maintain customer relations, for customer care (e.g. information about the course of your stay), to carry out our own advertising and marketing measures (e.g. the dispatch of catalogues, other advertising mailings within the legally permissible scope, queries about customer satisfaction) and for order processing.

4. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) (b) DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation to which our company is subject, Art. 6 (1) c DSGVO serves as the legal basis.

In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) (d) DSGVO serves as the legal basis.

If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 (1) lit. f DSGVO serves as the legal basis for the processing.

5. Disclosure of personal data to third parties

Your personal data will only be passed on to third parties in accordance with the relevant regulations, in particular those relating to data protection and competition law.

Insofar as this is necessary for the provision of the contractual service owed by us or legal obligations, your data will also be passed on to subcontractors or service providers for the provision of the service in the name of or on behalf of us (e.g. technical processing of mail and email dispatch, payment processing, customer service).

In addition, data is passed on to persons or companies for the purpose of processing your booking, in particular to hosts, hotels, local service providers and authorities, etc. Please note that the data protection regulations at the headquarters of these persons and companies may differ from those in Germany.

Your data will also be disclosed and transferred to third parties if we are obliged to do so by law or on the basis of a legally binding court case.

You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without hindrance from the controller to whom the personal data was provided.

6. Storage and deletion of data

Your personal data will be stored within the scope of the purposes stated under the point "Purpose of the collection of personal data". The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may take place in addition if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the person responsible is subject. The legislator has enacted a variety of storage obligations and periods. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or performance of a contract.

7. Use of cookies

We use cookies (small computer files containing text information that the web server sends to your internet browser) to improve your experience when visiting our online services. For example, some notices will only appear once if you allow us to set a cookie. In addition, our cookies have an expiry date. If you manually delete your cookies before they expire, you will receive a new one the next time you visit the site unless you block the cookie from being stored.

The technical specifications stipulate that only the server can read a cookie that has been sent by it. We assure you that no personal data is stored in cookies.

Unfortunately, it is only possible to use our offers to a limited extent without accepting cookies. We therefore recommend that you activate cookies permanently for our website. Most internet browsers are set to accept cookies automatically. However, you can deactivate the storage of cookies and set your internet browser to notify you as soon as cookies are sent.

The legal basis for the processing of personal data using cookies is Art. 6 (1) lit. f DSGVO.

The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 para. 1 lit. a DSGVO if the user has consented to this.

8. Einsatz von Google Analytics

Diese Website benutzt Google Analytics, einen Webanalysedienst der Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA („Google“). Google Analytics verwendet sog. „Cookies“, Textdateien, die auf Ihrem Computer gespeichert werden und die eine Analyse der Benutzung der Website durch Sie ermöglicht. Die durch den Cookie erzeugten Informationen über Ihre Benutzung dieser Website (einschließlich Ihrer IP-Adresse) wird an einen Server von Google in den USA übertragen und dort gespeichert. Google wird diese Informationen benutzen, um Ihre Nutzung der Website auszuwerten, um Reports über die Websiteaktivitäten für die Websitebetreiber zusammenzustellen und um weitere mit der Websitenutzung und der Internetnutzung verbundene Dienstleistungen zu erbringen. Auch wird Google diese Informationen gegebenenfalls an Dritte übertragen, sofern dies gesetzlich vorgeschrieben oder soweit Dritte diese Daten im Auftrag von Google verarbeiten. Google wird in keinem Fall Ihre IP-Adresse mit anderen Daten von Google in Verbindung bringen. Sie können die Installation der Cookies durch eine entsprechende Einstellung Ihrer Browser-Software verhindern; wir weisen Sie jedoch darauf hin, dass Sie in diesem Fall gegebenenfalls nicht sämtliche Funktionen dieser Website voll umfänglich nutzen können. Durch die Nutzung dieser Website erklären Sie sich mit der Bearbeitung der über Sie erhobenen Daten durch Google in der zuvor beschriebenen Art und Weise und zu dem zuvor benannten Zweck einverstanden.

Die Google Trackingcodes dieser Website verwenden die Funktion „_anonymizeIp()“, somit werden IP-Adressen nur gekürzt weiterverarbeitet, um eine direkte Personenbeziehbarkeit auszuschließen. Der Datenerhebung und -speicherung kann jederzeit mit Wirkung für die Zukunft widersprochen werden. Durch Klicken des Buttons „Deaktivieren“ wird das Tracking vollständig unterbunden. Damit der Widerspruch dauerhaft vorgenommen wird, muss der verwendete Browser Cookies akzeptieren. Alternativ kann der Datenerhebung durch den Einsatz eines Google Browser-Plugins widersprochen werden, um zu verhindern, dass die durch Cookies gesammelten Informationen (inklusive Ihrer IP-Adresse) an die Google Inc. gesendet und von der Google Inc. genutzt werden. Folgender Link führt Sie zu dem entsprechenden Plugin: https://tools.google.com/dlpage/gaoptout?hl=de

9. Use of Google Fonts

Our online presence uses Google Fonts and the Google Fonts API to visually display fonts and symbols. When using Google Fonts, Google also collects, processes and uses data on the use of the Fonts functions by visitors to the websites, insofar as the data is not stored on the local servers of our online presence. For more information on data processing by Google, please refer to Google's privacy policy at https://www.google.com/privacypolicy.html. You can also visit the privacy centre there. There you can also change your settings in the data protection centre so that you can manage and protect your data. The terms of use of Google Fonts can be found at https://fonts.google.com/about# and https://policies.google.com/terms?hl=en.

10. Use of Google Maps

Our online presence uses Google Maps and the Google Maps API to visually display a map and geographical information. When using Google Maps, Google also collects, processes and uses data on the use of the Maps functions by visitors to the websites. For more information on data processing by Google, please refer to Google's privacy policy at https://www.google.com/privacypolicy.html. You can also visit the privacy centre there. There you can also change your settings in the data protection centre so that you can manage and protect your data. The Google Maps Terms of Use can be found at https://www.google.com/intl/de_de/help/terms_maps.html.

11. Facebook Social Plugins

Our online presence uses social plugins ("plugins") of the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). The plugins are recognisable by one of the Facebook logos (white "f" on a blue tile or a "thumbs up" sign) or are marked with the addition "Facebook Social Plugin". The list and appearance of Facebook social plugins can be viewed here: https://developers.facebook.com/docs/plugins/?locale=de_DE.

When a web page of this website is called up that contains such a plugin, the browser used establishes a direct connection with the Facebook servers. The content of the plugin is transmitted by Facebook directly to the browser used, which then integrates it into the website. We therefore have no influence on the scope of the data that Facebook collects with the help of this plugin and therefore inform you according to our state of knowledge: by integrating the plugins, Facebook receives the information that the corresponding page of our website has been accessed. If you are logged in to Facebook, Facebook can assign the visit to your Facebook account. If you interact with the plugins (for example, by clicking the "Like" button or posting a comment), the corresponding information is transmitted directly from your browser to Facebook and stored there. If you are not a member of Facebook, there is still the possibility that Facebook will obtain and store your IP address. The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as related rights and setting options for the protection of privacy can be found in Facebook's privacy policy: https://www.facebook.com/policy.php.

If you are a Facebook member and do not want Facebook to collect data about you via our website and link it to your membership data stored on Facebook, you must log out of Facebook before visiting this website. It is also possible to block Facebook social plugins with add-ons for the browser used, for example with the "Facebook Blocker".

12. Facebook-Conversion-Pixel

This website uses the "Facebook Pixel" of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). This allows the behaviour of users to be tracked after they have seen or clicked on a Facebook advertisement. This process is used to evaluate the effectiveness of Facebook ads for statistical and market research purposes and can help optimise future advertising measures.

The collected data is anonymous for us, so it does not offer any conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with the Facebook data usage policy (https://www.facebook.com/about/privacy/). The user may allow Facebook and its partners to serve ads on and off Facebook. By visiting our website and our Facebook page, you consent to the use of cookies. In order to generally object to the use of cookies on the computer, the internet browser can be set in such a way that no more cookies can be stored on the computer in the future or that cookies that have already been stored are deleted. However, switching off all cookies may mean that some functions on our Internet pages can no longer be carried out. The user can also deactivate the use of cookies by third-party providers such as Facebook on the following website of the Digital Advertising Alliance: https://www.aboutads.info/choices/

13. Use of etracker

Our website uses technology from etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg (www.etracker.com) to collect and store data for marketing and optimisation purposes. This data can be used to create user profiles under a pseudonym. Cookies may be used for this purpose. Cookies are small text files that are stored locally in the cache of the site visitor's Internet browser. The cookies enable the recognition of the Internet browser. The data collected with the etracker technologies will not be used to personally identify the visitor to this website without the separately granted consent of the person concerned and will not be merged with personal data about the bearer of the pseudonym.

The collection and storage of data can be objected to at any time with effect for the future. To object to the future collection and storage of your visitor data, you can obtain an opt-out cookie from etracker using the following link. This will ensure that no visitor data from your browser is collected and stored by etracker in the future: https://www.etracker.de/privacy?et=V23Jbb .

This sets an opt-out cookie with the name "cntcookie" from etracker. Please do not delete this cookie as long as you wish to maintain your objection. For more information, please see the etracker privacy policy: https://www.etracker.com/de/datenschutz.html .

14. Youtube

This website uses a link to YouTube of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We use the "extended data protection mode" when embedding so that usage information is only transmitted when the video is started. In this case, it is transmitted which specific page of our website you are visiting and which video is being viewed. If you are logged into your YouTube account, you enable YouTube to assign your page views directly to your personal profile. For further information on the collection and processing of your data by YouTube, please refer to the relevant data protection information at www.youtube.com .

If you would like to ensure that no of your data is stored by YouTube, do not click on the embedded videos.

15. Security, questions and suggestions, responsible person

Security depends not least on your system. You should always treat your access information confidentially, never allow passwords to be saved by the web internet browser and close the internet browser window when you end your visit to our website. This will make it more difficult for third parties to access your personal data.

Use an operating system that can manage user rights. Set up several users on your system, even in the family, and never use the Internet under administrator rights. Use security software such as virus scanners and firewalls and keep your system up to date.

The responsible person for this online presence within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is: 

Staatsbad Badenweiler GmbH
Kaiserstr. 5
79410 Badenweiler
Tel. +49 7632 / 799 100
Fax +49 7632 / 799 102

Email: info@sb-badenweiler.de
www.staatsbad-badenweiler.de

16. Right to information / right of revocation; further data subject rights

You have the right:

In accordance with Art. 15 DSGVO, to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details;
in accordance with Art. 16 DSGVO, to demand the immediate correction of inaccurate or incomplete personal data stored by us;
in accordance with Article 17 of the Regulation, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
in accordance with Art. 18 DSGVO, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Art. 21 DSGVO;
pursuant to Art. 20 DSGVO, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller;
revoke your consent at any time in accordance with Art. 7 (3) DSGVO. This has the consequence that we may no longer continue the data processing based on this consent in the future; and
complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.

You are of course entitled to these rights free of charge. To revoke your consent to the use of data, to request information or the correction, blocking or deletion or to exercise the other data subject rights, please contact:

Staatsbad Badenweiler GmbH
Kaiserstr. 5
79410 Badenweiler
Tel. +49 7632 / 799 100
Fax +49 7632 / 799 102

Email: info@sb-badenweiler.de
www.staatsbad-badenweiler.de

Below we provide you with the contact address of our company's data protection officer. Our data protection officer is:

Lawyer Frank Hütten, Noll | Hütten | Dukic Rechtsanwälte GbR, c/o Staatsbad Badenweiler GmbH, Kaiserstraße 5, 79410 Badenweiler, Tel.+49 7632 / 799 100, Fax +49 7632 / 799 102, datenschutzbeauftragter@sb-badenweiler.de.

To exercise your data subject rights such as information, correction, blocking or deletion of your personal data, please do not contact the data protection officer directly, but first contact the aforementioned department of the data protection officer directly, who will process your request without delay.

17. Newsletter unsubscription

If you no longer wish to receive our newsletter or promotional emails, click on the link: "Unsubscribe Newsletter", which is included at the bottom of all emails we send.