PRIVACY POLICY
We appreciate your visit to our website hannover-plaza-hotel.com and your interest in our company.
The protection of your personal data, such as date of birth, name, telephone number, address, etc., is of great importance to us.
The purpose of this privacy policy is to inform you about the processing of your personal data that we collect when you visit our website. Our data protection practices comply with the legal regulations of the European Union's General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). The following privacy policy fulfills the information obligations arising from the GDPR, as found, for example, in Articles 13 and 14 ff. of the GDPR.
DATA CONTROLLER
The data controller, as defined in Article 4(7) of the GDPR, is the entity that alone or jointly with others determines the purposes and means of processing personal data.
With regard to our website, the data controller is:
Hotel Plaza GmbH
Fernroder Straße 9
30161 Hannover
Germany
Email: info@hannover-plaza.com
Tel.: +49 511 338 80
Fax: +49 511 338 81 88
CONTACT DETAILS OF THE DATA PROTECTION OFFICER
We have appointed a data protection officer in accordance with Article 37 of the GDPR. You can reach our data protection officer using the contact details below:
Andreas Lüerßen
Im Riedegrund 30 a
30952 Ronnenberg
Germany
Email: info@al-datenschutz.de
Tel.: +49 510 940 02
Website: https://www.al-datenschutz.de/
PROVISION OF THE WEBSITE AND CREATION OF LOG FILES
Each time our website is accessed, our system automatically collects data and information from the requesting device (e.g., computer, mobile phone, tablet, etc.).
WHAT PERSONAL DATA IS COLLECTED AND TO WHAT EXTENT IS IT PROCESSED?
(1) Information about the browser type and version used;
(2) The operating system of the accessing device;
(3) Hostname of the accessing computer;
(4) The IP address of the accessing device;
(5) Date and time of access;
(6) Websites and resources (images, files, other page content) accessed on our website;
(7) Websites from which the user's system accessed our website (referrer tracking);
(8) Notification of whether the access was successful;
(9) Transferred data volume.
These data are stored in the log files of our system. Storage of this data together with personal data of a specific user does not occur, so individual website visitors cannot be identified.
LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
Art. 6(1)(f) of the GDPR (legitimate interest). Our legitimate interest is to ensure the achievement of the purpose described below.
PURPOSE OF DATA PROCESSING
The temporary (automated) storage of data is necessary for the operation of a website visit in order to enable the delivery of the website. The storage and processing of personal data are also carried out to maintain the compatibility of our website for as many visitors as possible, as well as to combat misuse and resolve disruptions. For this purpose, it is necessary to log the technical data of the accessing computer in order to respond as quickly as possible to display errors, attacks on our IT systems, and/or malfunctions of our website's functionality. In addition, the data is used to optimize the website and ensure the general security of our information technology systems.
DURATION OF STORAGE
The aforementioned technical data will be deleted as soon as they are no longer needed to ensure the compatibility of the website for all visitors, but no later than 3 months after accessing our website.
OBJECTION AND DELETION OPTIONS
You can object to the processing at any time in accordance with Art. 21 of the GDPR and request the deletion of data in accordance with Art. 17 of the GDPR. The rights available to you and how to exercise them can be found in the lower section of this privacy policy.
SPECIAL FEATURES OF THE WEBSITE
Our website offers various features that involve the collection, processing, and storage of personal data by us. Below, we explain what happens with this data:
BOOKING INQUIRY FORM
- What personal data is collected and to what extent is it processed?
The data you enter in our booking inquiry form (date, number of people, etc.) will be processed to fulfill the purpose described below. - Legal basis for the processing of personal data
Art. 6(1)(b) of the GDPR (performance of (pre)contractual measures) - Purpose of data processing
Pre-contractual exchange of information is necessary to review your booking and prepare for a possible future conclusion of a contract. - Objection and deletion options
The rights available to you and how to exercise them can be found in the lower section of this privacy policy. - Necessity of providing personal data
The information in the booking inquiry form is not contractually or legally required but necessary to process your booking properly. If you do not fill out the required fields or provide incomplete information, we will not be able to process your booking inquiry.
CONTACT FORM(S)
- What personal data is collected and to what extent is it processed?
The data you enter in our contact forms, which you provide in the input mask of the contact form, will be processed to fulfill the purpose stated below. - Legal basis for the processing of personal data
Art. 6(1)(a) of the GDPR (consent by clear affirmative action or behavior) - Purpose of data processing
The data collected through our contact form(s) will only be used to process the specific contact inquiry received through the contact form. - Duration of storage
After processing your inquiry, the collected data will be deleted immediately, unless there are legal retention periods. - Revocation and deletion options
Revocation and deletion options are subject to the general regulations on the right of revocation and deletion described in this privacy policy. - Necessity of providing personal data
The use of the contact form(s) is voluntary and not contractually or legally required. You are not obliged to contact us through the contact form but can also use the other contact options provided on our website. If you choose to use our contact form, you must fill in the fields marked as mandatory. If you do not provide the necessary information in the contact form, you will either not be able to submit the inquiry, or we will unfortunately be unable to process your request.
STATISTICAL EVALUATION OF VISITS TO THIS WEBSITE - WEB TRACKER
We collect, process, and store the following data when accessing this website or individual files on the website: IP address, website from which the file was accessed, name of the file, date and time of access, amount of data transmitted, and message about the success of the access (so-called web log). We use this access data exclusively in a non-personalized form for the continuous improvement of our website and for statistical purposes. In addition, we use the following web trackers to evaluate visits to this website:
GOOGLE ANALYTICS
We use the Google Analytics service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, email: support-deutschland@google.com, website: http://www.google.com/. The processing also takes place in a third country for which there is no adequacy decision by the European Commission. Therefore, the usual level of data protection under the GDPR cannot be guaranteed for the transmission, as it cannot be ruled out that authorities in the third country may access the collected data.
The legal basis for the transmission of personal data is your consent pursuant to Art. 6(1)(a) of the GDPR or Art. 9(2)(a) of the GDPR, which you have given on our website.
Google Analytics is a web tracker that analyzes the behavior of website visitors and their interactions with our website, providing us with evaluations and forecasts about the content and popularity of our website and products (known as tracking). We have included Google Analytics to allow the service to compile an analysis of the browsing behavior of page users. For this purpose, Google collects page interactions of website visitors with our website, and, if applicable, information obtained from reading cookies or other storage technologies, and provides statistical analysis for us. Google Analytics uses data processing technologies that enable tracking of individual page visitors and their interaction with other Google services, such as the Google Ads advertising network. Data from other Google services is also used to fill data gaps using machine learning technologies, modeled statistics, and forecasting functions, and to create comprehensive statistics on the content of our website. If Google Analytics is activated on our website, the data obtained by Google Analytics is transmitted to servers of Google Ireland Limited. As part of the data processing, personal data may also be transferred to the servers of the parent company, Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. The processing also takes place in a third country for which there is no adequacy decision by the European Commission. Therefore, the usual level of data protection under the GDPR cannot be guaranteed for the transmission, as it cannot be ruled out that authorities in the third country may access the collected data. We use Google Analytics to constantly optimize and improve the availability of our website. This is a so-called reach measurement.
The service or we collect the following data for processing: data on the interactions of page visitors with the content of the website, data on the handling of the services presented on our website, data from external Google services, if they interact with our website, such as advertising data or data on behavior related to advertising, data on approximate geographic origin, the browser used, the operating system, and other information about the end device used.
Google Analytics will store the data relevant to provide web tracking as long as necessary to fulfill the contracted web service. Data collection and storage are anonymized. If it is possible to establish a personal reference to specific actions retrospectively through individual interactions of page visitors, we will delete the collected data when the purpose has been achieved. The data will be deleted at the latest if they are not subject to any legal retention obligations. As a rule, we will delete this data no later than 12 months after its collection.
You can withdraw your consent at any time. For more information on revoking your consent, please refer to the consent itself or the end of this privacy policy.
For further information on how the transmitted data is handled, please refer to the provider's privacy policy at https://policies.google.com/privacy.
The provider also offers an opt-out option at https://tools.google.com/dlpage/gaoptout?hl=en.
GOOGLE TAG MANAGER
We use the Google Tag Manager service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, email: support-deutschland@google.com, website: http://www.google.com/. The processing also takes place in a third country for which there is no adequacy decision by the European Commission. Therefore, the usual level of data protection under the GDPR cannot be guaranteed for the transmission, as it cannot be ruled out that authorities in the third country may access the collected data.
The legal basis for the transmission of personal data is your consent pursuant to Art. 6(1)(a) of the GDPR or Art. 9(2)(a) of the GDPR, which you have given on our website.
Google Tag Manager provides a technical platform for executing and controlling other web tools and web tracking programs using so-called "tags." Google Tag Manager stores cookies on your computer and analyzes your browsing behavior, if web tracking tools are executed via Google Tag Manager (known as "tracking"). The data generated by the "tags" is consolidated, stored, and processed by Google Tag Manager under a unified user interface. All included "tags" are also listed separately in this privacy policy. When using our website with activated integration of "tags" from Google Tag Manager, data such as your IP address and your user activities are transmitted to servers of Google. The tracking tools used in Google Tag Manager ensure that the IP address is anonymized before transmission. With Tag Manager, measurement values from various service providers (Google and third-party providers) can be linked and evaluated based on the so-called tag management. Google Tag
Manager helps us compile reports on website activities and control the web tools of our website.
The service or we collect the following data for processing: cookies, web tracking data, outgoing or incoming links, information arising from the integration and activation of JavaScript code on the website by Google Tag Manager, and the web tools triggered by Google Tag Manager.
You can withdraw your consent at any time. For more information on revoking your consent, please refer to the consent itself or the end of this privacy policy.
For further information on how the transmitted data is handled, please refer to the provider's privacy policy at https://policies.google.com/privacy.
The provider also offers an opt-out option at https://policies.google.com/privacy.
INTEGRATION OF EXTERNAL WEB SERVICES AND PROCESSING OF DATA OUTSIDE THE EU
On our website, we use active content from external providers, so-called web services. By accessing our website, these external providers may receive personal information about your visit to our website. This may involve the processing of data outside the European Union. You can prevent this by installing an appropriate browser plugin or disabling the execution of scripts in your browser. However, this may lead to functional limitations on the websites you visit.
We use the following external web services:
COOKIEBOT
We use the Cookiebot service provided by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, email: privacy@cookiebot.com, website: https://www.cookiebot.com/de/. The transmission and processing of personal data exclusively takes place on servers located in the European Union.
The legal basis for the transmission and processing is Article 6(1)(c) of the GDPR. The use of the service helps us to comply with our legal obligations.
By integrating Cookiebot, we fulfill our legal obligation regarding the necessary consent management for cookies.
For more information on your rights regarding data processing, please refer to the end of this privacy policy.
For further information on how the transmitted data is handled, please refer to the provider's privacy policy at https://www.cookiebot.com/de/privacy-policy/.
MEINUNGSMEISTER
We use the Meinungsmeister service provided by GoLocal GmbH & Co. KG, Landsberger Straße 94, 80339 Munich, Germany, email: service@meinungsmeister.de, website: https://www.meinungsmeister.de/. The transmission and processing of personal data exclusively takes place on servers located in the European Union.
The legal basis for the transmission of personal data is our legitimate interest pursuant to Article 6(1)(f) of the GDPR. Our legitimate interest lies in achieving the purpose described below.
Through Meinungsmeister, we collect customer reviews on our website or online shop and enable customers to interact with our site.
You have the right to object to this processing, as provided for in Article 21. For more information, please refer to the end of this privacy policy.
For further information on how the transmitted data is handled, please refer to the provider's privacy policy at https://www.meinungsmeister.de/produkt/datenschutz.
MONO MAPS
We use the Mono Maps service provided by Mono Solutions ApS, Nannasgade 28, 2200 Copenhagen, Denmark, email: sales@maptiler.com, website: https://www.monosolutions.com/privacy-policy. The transmission and processing of personal data exclusively takes place on servers located in the European Union.
The legal basis for the transmission of personal data is our legitimate interest pursuant to Article 6(1)(f) of the GDPR. Our legitimate interest lies in achieving the purpose described below.
Mono Maps is a map service integrated into our website that enables navigation and display of our business locations.
You have the right to object to this processing, as provided for in Article 21. For more information, please refer to the end of this privacy policy.
For further information on how the transmitted data is handled, please refer to the provider's privacy policy at https://www.monosolutions.com/privacy-policy.
MONO SOLUTIONS CDN
We use the Mono Solutions CDN service provided by Mono Solutions ApS, Hejrevej 28, 1., 2200 København NV, Denmark, email: support@mono.net, website: https://www.mono.net/. The transmission and processing of personal data exclusively takes place on servers located in the European Union.
The legal basis for the transmission of personal data is our legitimate interest pursuant to Article 6(1)(f) of the GDPR. Our legitimate interest lies in achieving the purpose described below.
Mono Solutions CDN is a content delivery network that mirrors our content across various servers to ensure optimal accessibility worldwide. The CDN is also used to protect the website from cyberattacks, such as those by bots.
You have the right to object to this processing, as provided for in Article 21. For more information, please refer to the end of this privacy policy.
For further information on how the transmitted data is handled, please refer to the provider's privacy policy at https://www.mono.net/privacy-policy.
RECHTSTEXTSNIPPET AND MODULE
We use the Rechtstextsnippet and Module services provided by Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany, email: support@website-check.de, website: https://www.website-check.de/. The transmission and processing of personal data exclusively takes place on servers located in the European Union.
The legal basis for the transmission and processing is Article 6(1)(c) of the GDPR. The use of the service helps us to comply with our legal obligations.
With the help of the service, the current legal texts are reloaded on our website. The integration may also involve the reloading of additional technical modules related to legal texts or legally required elements.
For more information on your rights regarding data processing, please refer to the end of this privacy policy.
For further information on how the transmitted data is handled, please refer to the provider's privacy policy at https://www.website-check.de/datenschutzerklaerung/.
FONT INTEGRATION VIA MONO
We use the font integration via Mono service provided by Mono Solutions ApS, Nannasgade 28, 2200 Copenhagen, Denmark. The transmission and processing of personal data are exclusively carried out on servers located in the European Union.
The legal basis for the transmission of personal data is our legitimate interest in accordance with Art. 6(1)(f) of the GDPR. Our legitimate interest lies in achieving the purpose described below.
This service involves a Content Delivery Network (CDN) provided by Mono Solutions ApS. It mirrors content across different servers to ensure optimal worldwide accessibility. Through this service, Google Fonts' typefaces can be loaded on our website. The visitor's IP address is not shared with Google.
Regarding the processing, you have the right to object as specified in Art. 21. Further information can be found at the end of this privacy policy.
For more information on the handling of transmitted data, please refer to the provider's privacy policy at https://www.mono.net/privacy-policy.
TRUSTYOU - GUEST FEEDBACK
We use the TrustYou - Guest Feedback service provided by TrustYou GmbH, Steinerstraße 15, 81369 Munich, Germany, email: info@trustyou.com, website: https://www.trustyou.com/de/. The transmission and processing of personal data are exclusively carried out on servers located in the European Union.
The legal basis for the transmission of personal data is your consent according to Art. 6(1)(a) of the GDPR or Art. 9(2)(a) of the GDPR, which you have given on our website.
This service is a plugin that enables optimized feedback for customers after visiting a restaurant or hotel.
You can withdraw your consent at any time. Further information on revoking your consent can be found either in the respective consent or at the end of this privacy policy.
For more information on the handling of transmitted data, please refer to the provider's privacy policy at https://www.trustyou.com/de/downloads/privacy-policy-de.pdf.
WEBSITE-CHECK SEAL
We use the Website-Check Seal service provided by Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany, email: support@website-check.de, website: https://www.website-check.de/. The transmission and processing of personal data are exclusively carried out on servers located in the European Union.
The legal basis for the transmission of personal data is our legitimate interest in accordance with Art. 6(1)(f) of the GDPR. Our legitimate interest lies in achieving the purpose described below.
The script of Website-Check GmbH is a technical integration of the Website-Check Seal. With this seal, we want to demonstrate that we take data protection seriously. The transmission of data to Website-Check GmbH is carried out for the delivery and display of the seal on our website.
Regarding the processing, you have the right to object as specified in Art. 21. Further information can be found at the end of this privacy policy.
For more information on the handling of transmitted data, please refer to the provider's privacy policy at https://www.website-check.de/datenschutzerklaerung/.
HCAPTCHA
We use the hcaptcha service provided by Intuition Machines, Inc., 2211 Selig Drive, 90026 Los Angeles, United States, email: support@imachines.com, website: https://www.hcaptcha.com/. The processing is also carried out in a third country for which there is no adequacy decision by the Commission. Therefore, the level of data protection customary under the GDPR cannot be guaranteed, as it cannot be ruled out that authorities in the third country may access the collected data.
The legal basis for the transmission of personal data is your consent according to Art. 6(1)(a) of the GDPR or Art. 9(2)(a) of the GDPR, which you have given on our website.
This service is a plugin that we require to display all content on our website. The plugin makes our website more attractive and interactive for our visitors.
You can withdraw your consent at any time. Further information on revoking your consent can be found either in the respective consent or at the end of this privacy policy.
For more information on the handling of transmitted data, please refer to the provider's privacy policy at https://www.hcaptcha.com/terms.
DATA SECURITY AND DATA PROTECTION, COMMUNICATION VIA EMAIL
Your personal data is protected during collection, storage, and processing through technical and organizational measures to prevent unauthorized access by third parties. When communicating via unencrypted email, complete data security during transmission to our IT systems cannot be guaranteed. Therefore, we recommend encrypted communication or postal mail for information with a high level of confidentiality.
RIGHT TO INFORMATION AND REQUESTS FOR CORRECTION - DELETION & RESTRICTION OF DATA - WITHDRAWAL OF CONSENT - RIGHT TO OBJECT
RIGHT TO INFORMATION
You have the right to request confirmation of whether we process personal data about you. If this is the case, you have the right to obtain information about the information specified in Article 15(1) of the GDPR, unless it adversely affects the rights and freedoms of others (see Article 15(4) of the GDPR). We are also happy to provide you with a copy of the data.
RIGHT TO CORRECTION
You have the right, in accordance with Article 16 of the GDPR, to have any inaccuracies in your personal data (such as address, name, etc.) corrected at any time. You can also request the completion of data stored by us. The necessary adjustments will be made promptly.
RIGHT TO ERASURE
In accordance with Article 17(1) of the GDPR, you have the right to request the deletion of the personal data collected about you if:
- the data is no longer required;
- the legal basis for processing has been withdrawn due to your revocation of consent;
- you have objected to the processing, and there are no legitimate grounds for the processing;
- your data is being processed unlawfully;
- a legal obligation requires the deletion, or data collection has taken place in accordance with Article 8(1) of the GDPR.
The right does not apply in accordance with Article 17(3) of the GDPR if:
- processing is necessary for the exercise of the right to freedom of expression and information;
- your data has been collected based on a legal obligation;
- processing is necessary for reasons of public interest;
- the data is necessary for the establishment, exercise, or defense of legal claims.
RIGHT TO RESTRICTION OF PROCESSING
According to Article 18(1) of the GDPR, you have the right to request the restriction of the processing of your personal data in certain cases.
This is the case when:
- the accuracy of your personal data is contested;
- processing is unlawful, and you oppose erasure;
- the data is no longer needed for processing purposes, but is required for the establishment, exercise, or defense of legal claims;
- you have objected to processing pursuant to Article 21(1) of the GDPR, and it is not yet clear whose interests prevail.
RIGHT TO WITHDRAW CONSENT
If you have given us explicit consent for the processing of your personal data (Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR), you can withdraw this consent at any time. Please note that the legality of processing based on consent before its withdrawal is not affected.
RIGHT TO OBJECT
You have the right, in accordance with Article 21 of the GDPR, to object at any time to the processing of your personal data collected on the basis of Article 6(1)(f) (for legitimate interests). This right only applies if there are particular circumstances that speak against storage and processing.
HOW TO EXERCISE YOUR RIGHTS
You can exercise your rights at any time by contacting us using the contact details below:
Hotel Plaza GmbH
Fernroder Straße 9
30161 Hannover
Germany
Email: info@hannover-plaza.com
Tel.: +49 511 338 80
Fax: +49 511 338 81 88
RIGHT TO DATA PORTABILITY
According to Article 20 of the GDPR, you have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format. The data can be transmitted to you or to another controller designated by you.
Upon request, in accordance with Article 20(1) of the GDPR, we will provide you with the following data:
- Data collected based on explicit consent according to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR;
- Data that we have received from you as part of existing contracts based on Article 6(1)(b) of the GDPR;
- Data that has been processed through automated means.
We will transmit the personal data directly to the controller of your choice, provided this is technically feasible. Please note that we are not allowed to transfer data that interferes with the freedoms and rights of others in accordance with Article 20(4) of the GDPR.
RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY PURSUANT TO ARTICLE 77(1) OF THE GDPR
If you suspect that your data is being processed unlawfully on our website, you have the right to seek judicial clarification of the issue at any time. You also have any other legal remedies available to you. Regardless, you have the right, according to Article 77(1) of the GDPR, to lodge a complaint with a supervisory authority. The right to lodge a complaint pursuant to Article 77 of the GDPR is available to you in the EU member state of your residence, your place of work, and/or the place of the alleged infringement. This means you can choose the supervisory authority to which you address your complaint from the aforementioned locations. The supervisory authority to which the complaint was submitted will then inform you of the status and outcome of your submission, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.
DISCLOSURE OF DATA TO GAUVENDI GMBH
GauVendi enables the possibility of room bookings based on the personal needs of the booker by utilizing detailed room characteristics. In order to continuously improve the personalized offering, the following data is processed by GauVendi Analytics for further personalization of data: number of booked persons (adults and children), arrival date, departure date, booked features and rooms, booked additional services, country from which the customer has booked. Furthermore, all data relevant to reservation confirmations and cancellations is stored in the database for sending reservation confirmations and cancellation notifications.
You can revoke your consent at any time for the future via email, fax, or postal address.
+49 511 3388188
Hotel Plaza Hannover GmbH
Fernroder Straße 9
30161 Hannover