§ 1 Information on the collection of personal data


(1) GENERAL INFORMATION

Thank you for your interest in our website. The protection of your personal data during your visit to our website is particularly important to our management. The following information provides you with an overview of the processing of your personal data by us and your rights under data protection law. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.


If a data subject wishes to make use of special services of our company via our website, such as our contact form, it may be necessary to process personal data. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject. The processing is always carried out in accordance with the EU General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection regulations applicable to our company.


As the controller, our company has implemented technical and organizational measures to ensure that the personal data processed via this website is protected as completely as possible against loss, destruction, access, modification or dissemination by unauthorized persons. This also includes ensuring that your personal data is transmitted securely by us using encryption. We use the TSL (Transport Layer Security) coding system for this. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.


Nevertheless, absolute protection cannot be guaranteed due to fundamental security gaps in Internet-based data transmissions.


(2) RESPONSIBLE FOR DATA PROCESSING

Is the controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) and the applicable country-specific data protection regulations:


Bed and Breakfast am Schillerplatz

Schillerplatz 10

01309 Dresden

phone: +49 351 31212772

E-Mail: info@muc-dresden.de


Please send general questions about data protection to our company to: info@muc-dresden.de.


 (3) GENERAL INFORMATION ON DATA PROCESSING

We collect and use our users' personal data only insofar as this is necessary to provide a functional website and to display our content and provide services. The collection and use of our users' personal data only takes place regularly with the user's consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.


The following legal bases for the processing of your personal data come into question:



§ 2 Your rights


(1) MY RIGHTS AS A DATA SUBJECT

You can request information about the personal data stored about you at the above address (Art. 15 GDPR). In addition, you can request a correction if we have stored incorrect data about you (Art. 16 GDPR). Under certain conditions, you can also request the erasure of your data (Art. 17 GDPR) or exercise your right to object (Art. 21 GDPR). You also have the right to restrict the processing of your personal data (Art. 18 GDPR) and the right to have the data you have provided handed over (Art. 20 GDPR). The restrictions under Sections 34 and 35 BDSG apply to the right of access and the right to erasure.


If you believe that the processing of your personal data is contrary to the provisions of the General Data Protection Regulation, you have the right to contact your competent supervisory authority for data protection (Article 77 GDPR in conjunction with Section 19 BDSG). In the case of Baden-Württemberg, this is the State Commissioner for Data Protection and Freedom of Information, Königstrasse 10 a, 70173 Stuttgart.


If the processing of data is based on your consent, you are entitled under Art. 7 GDPR to withdraw your consent to the use of your personal data at any time. Please note that the revocation only takes effect for the future. Processing that took place before the withdrawal is not affected. Please also note that we may have to retain certain data for a certain period of time in order to comply with legal requirements.


(2) INFORMATION ON YOUR RIGHT TO OBJECT PURSUANT TO ARTICLE 21 GDPR


1. INDIVIDUAL RIGHT OF OBJECTION

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(e) GDPR (data processing in the public interest) and Article 6(1)(f) GDPR (data processing on the basis of a balancing of interests); this also applies to profiling based on this provision within the meaning of Article 4(4) GDPR.


If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims (objection pursuant to Art. 21 (1) GDPR).


2. RIGHT TO OBJECT TO THE PROCESSING OF DATA FOR DIRECT MARKETING PURPOSES

In individual cases, we process your personal data for the purpose of direct advertising. You have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection can be made informally and should be addressed to the contact details given under §1 no. (2) if possible (objection pursuant to Art. 21 para. 2 GDPR).


(3) WHO GETS MY DATA?

Unless otherwise specified in the detailed descriptions of the offers, those departments within our company that need your data to fulfill our contractual and legal obligations or to implement our legitimate interests will have access to it. We will only pass on information about you outside the company if this is permitted or required by legal or official notification obligations, if the disclosure is necessary for the processing and thus for the fulfillment of the contract or, at your request, for the implementation of pre-contractual measures, if we have your consent or if we are authorized to provide information.


If we use contracted service providers for individual functions of our offer, these have been carefully selected and commissioned by us, are bound by our instructions and are regularly checked. Your personal data is then processed on the basis of order processing contracts in accordance with Art. 28 GDPR and we ensure that the processing of personal data is carried out in accordance with the provisions of the GDPR.


If we wish to use your data for advertising purposes, we will inform you in detail below about the respective processes.


(4) HOW LONG WILL MY DATA BE STORED?

Unless otherwise specified in the detailed descriptions of the offers, we process and store your personal data for as long as is necessary to fulfill our contractual and legal obligations.


Your personal data is regularly deleted or blocked if it is no longer required for the fulfillment of contractual or legal obligations, you have exercised your right to deletion, all mutual claims have been fulfilled and there are no other legal retention obligations or legal justifications for storage.



§ 3 Collection of personal data when visiting our website


(1) USE OF SERVER LOG FILES

Each time the website is accessed by a data subject or an automated system, a range of general data and information is recorded in log files. This includes an Internet Protocol address (IP address), the browser types and versions used, the website from which an accessing system accesses our website (so-called referrer), the sub-websites which are accessed via an accessing system on our website, the date and time of access to the website and other similar data and information which serve to avert danger in the event of attacks on our information technology systems.


The legal basis for the temporary storage of the data and the log files is based on Art. 6 para. 1 lit. f GDPR with the above-mentioned legitimate interests.


Temporary storage of the IP address by the system is necessary to ensure delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.


Data is stored in log files to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. This is also based on our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f GDPR. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. The collection of data for the provision of the website and the storage of data in log files is necessary for the operation of the website. It is also possible to check the log files if there is a justified suspicion of unlawful use or a specific attack on our website based on concrete evidence. Our legitimate interest in processing lies in the purpose of investigating and prosecuting such attacks and unlawful use.


(2) USE OF COOKIES

Cookies" are small files that are stored on users' devices. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or they are automatically deleted by your web browser. Cookies can be used to store various data. This information may include, for example, the language settings on a website or the location where a video was watched.


Cookies are generally also used when a user's interests or behavior (e.g. viewing certain content, using functions, etc.) are stored in a user profile on individual websites. Such profiles are used, for example, to show users content that matches their potential interests. This process is also referred to as "tracking", i.e. tracking the potential interests of users. The term "cookies" also includes other technologies that perform the same functions as cookies (e.g. when user information is stored using pseudonymous online identifiers, also referred to as "user IDs").


If we use cookies or "tracking" technologies, we will inform you separately in our privacy policy.


Notes on legal bases: The legal basis on which we process your personal data with the help of cookies depends on whether we ask you for your consent. If this is the case and you consent to the use of cookies, the legal basis for the processing of your data is your declared consent (Art. 6 para. 1 lit. a GDPR). Otherwise, the data processed with the help of cookies will be processed on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR), e.g. in the business operation of our online offer and its improvement) or, if the use of cookies is necessary to fulfill our contractual obligations (Art. 6 para. 1 lit. b GDPR).


General information on revocation and objection (opt-out): Regardless of whether the processing is based on consent or legal permission, you have the option at any time to withdraw your consent or to object to or revoke the processing of your data by cookie technologies (collectively referred to as "opt-out").


You can initially declare your objection using your browser settings, e.g. by deactivating the use of cookies (although this may also restrict the functionality of our online offer).


Processing of cookie data on the basis of consent: Before we process or have data processed in the context of the use of cookies, we ask users for their consent, which can be revoked at any time. Before consent has not been given, cookies that are necessary for the operation of our online offer will be used. Their use is based on our interest and the interest of users in the expected functionality of our online offering.


COOKIE SETTINGS/ OPT-OUT OPTION:


Cookies verhindern


Die Installation von Cookies können Sie verhindern, indem Sie vorhandene Cookies löschen und eine Speicherung von Cookies in den Einstellungen Ihres Webbrowsers deaktivieren. Wir weisen darauf hin, dass Sie in diesem Fall möglicherweise nicht alle Funktionen unseres Internetauftritts vollumfänglich nutzen können. Sie können die Erfassung der vorgenannten Informationen auch dadurch verhindern, indem Sie auf einer der nachfolgend verlinkten Webseiten ein Opt-Out-Cookie setzen:

Wir weisen Sie darauf hin, dass diese Einstellung gelöscht wird, wenn Sie Ihre Cookies löschen. Sie können der Erfassung und Weiterleitung personenbezogenen Daten widersprechen oder die Verarbeitung dieser Daten verhindern, indem sie die Ausführung von JavaScript in Ihrem Browser deaktivieren. Zudem können Sie die Ausführung von JavaScript-Code insgesamt dadurch verhindern, indem Sie einen JavaScript-Blocker installieren (z.B. https://noscript.net/ oder https://www.ghostery.com). Wir weisen darauf hin, dass Sie in diesem Fall möglicherweise nicht alle Funktionen unseres Internetauftritts vollumfänglich nutzen können.



§ 4 Other functions and offers on our website


In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do so, you must generally provide additional personal data that we use to provide the respective service and for which the aforementioned data processing principles apply.


(1) REQUEST BY E-MAIL, TELEPHONE OR FAX

Wir bieten Ihnen die Möglichkeit der Kontaktaufnahme per E-Mail, Telefon oder Telefax, bei deren Nutzung, die damit übermittelten, personenbezogenen Daten des Nutzers (z. B. Name, Anfrage) gespeichert und verarbeitet werden. Die Daten dienen ausschließlich der weiteren Konversation und dem Zwecke der Bearbeitung Ihres Anliegens und werden nicht ohne Ihre Einwilligung an Dritte weitergegeben. Für die Verarbeitung von Daten, die im Zuge der Kontaktaufnahme übermittelt werden liegt mit Art.6 Abs.1 lit. f DSGVO ein berechtigtes Interesse vor an derWe offer you the option of contacting us by e-mail, telephone or fax, in which case the user's personal data transmitted (e.g. name, inquiry) will be stored and processed. The data is used exclusively for further conversation and for the purpose of processing your request and will not be passed on to third parties without your consent. For the processing of data transmitted in the course of contacting us, Art. 6 para. 1 lit. f GDPR provides a legitimate interest in the effective processing of the inquiries addressed to us.


If the contact is aimed at the conclusion of a contract, the legal basis for the processing pursuant to Art. 6 para. 1 lit. b GDPR must also be included with the implementation of pre-contractual measures and any subsequent processing for the fulfillment of a contract.


We only store personal data that we process as part of a general contact request by email, telephone or fax until the respective correspondence has ended. The conversation is deemed to have ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. Mandatory statutory provisions - in particular retention periods - remain unaffected. effektiven Bearbeitung der an uns gerichteten Anfragen.


If the contact is aimed at the conclusion of a contract, the legal basis for the processing pursuant to Art. 6 para. 1 lit. b GDPR must also be included with the implementation of pre-contractual measures and any subsequent processing for the fulfillment of a contract.


We only store personal data that we process as part of a general contact request by email, telephone or fax until the respective correspondence has ended. The conversation is deemed to have ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. Mandatory statutory provisions - in particular retention periods - remain unaffected.


If you contact us by email, you can of course object to the storage of your personal data at any time. In such a case, the conversation cannot be continued.


(2) USE OF THE CONTACT FORMS

Contact forms are also available on our website, which can be used to contact us electronically. The data entered by the user is transmitted to us and stored. The legal basis for the processing of data when using the contact form is therefore Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to effectively process user inquiries received via the contact form.


If the contact is aimed at the conclusion of a contract, the legal basis for the processing pursuant to Art. 6 para. 1 lit. b GDPR must also be included with the implementation of pre-contractual measures and any subsequent processing for the fulfillment of a contract.


We only store personal data that we process as part of a general contact request via the contact form until the respective correspondence has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. Mandatory statutory provisions - in particular retention periods - remain unaffected.


If you contact us, you can of course object to the storage of your personal data at any time. In such a case, the conversation cannot be continued.


§ 5 Changes to our privacy policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.