The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to personally identify you. Detailed information on the subject of data protection can be found in the following data protection declaration.

1. Data protection at a glance
General information and mandatory information
We take the protection of your personal data very seriously. Therefore, we act in accordance with applicable legislation on personal data protection and data security. Information about when we store which data and how we use it can be found in this data protection declaration, taking into account applicable German case law.
When you visit and use this website, various personal data is collected. Personal data is data that can be used to personally identify you. This data protection declaration explains what data we collect and what we use it for. It also explains how and for what purpose this happens.
We would like to point out that data transmission over the Internet (e.g. when communicating via email) can have security gaps. Complete protection of data from access by third parties is not possible.

Note on the responsible body
The responsible body for data processing on this website is:

JENS WEISSFLOG APPARTEMENTHOTEL GmbH & Co.KG
Jens Weissflog
Emil Riedel Street 50
09484 Oberwiesenthal

Telephone: 037348 / 10-0
Email: hotel@jens-weissflog.de

The responsible body decides alone or jointly with others on the purposes and means of processing personal data (e.g. names, contact details, etc.).

Basics of data processing
We only process personal data in compliance with the relevant data protection regulations. This means that user data will only be processed if there is legal permission, i.e.

in order to provide our contractual services (e.g. processing orders) and online services, or these are required by law (Art. 6 Para. 1 lit. b. and c. GDPR)
You have given your consent (Art. 6 Para. 1 lit. a. and Art. 7 GDPR), as well
due to our legitimate interests (i.e. interest in the analysis, optimization and economic operation and security of our online offering within the meaning of Art. 6 Para. 1 lit. f. GDPR, in particular when measuring reach, creating profiles for advertising and marketing purposes and collecting data Access data and use of third-party services).

Data transfer to third parties
Data will only be passed on to third parties within the framework of legal requirements. We only pass on user data to third parties if, for example, B. is necessary for contractual purposes or based on legitimate interests in the economic and effective operation of our business.
If we use subcontractors to provide our services, we take appropriate legal precautions and appropriate technical and organizational measures to ensure the protection of personal data in accordance with the relevant legal regulations.

Data transfer to a third country or an international organization
Third countries are countries in which the GDPR is not directly applicable law. This basically includes all countries outside the EU or the European Economic Area.
No data will be transferred to a third country or an international organization without your consent or without a legal basis.

Storage period
Unless a specific storage period is specified in this data protection declaration, your personal data will remain with us until the purpose for data processing no longer applies. If you make a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods); In the latter case, the deletion takes place after these reasons no longer apply.

Revocation of your consent to data processing
Some data processing operations are only possible with your express consent. You can revoke the consent you have already given at any time. An informal notification by email is sufficient to revoke your consent. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.

Right to lodge a complaint with the relevant supervisory authority
As a data subject, you have the right to lodge a complaint with the responsible supervisory authority in the event of a data protection violation. The responsible supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based. The following link provides a list of data protection officers and their contact details: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschrift_links-node.html.

Right to data portability
You have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or to third parties. It is provided in a machine-readable format. If you request the data to be transferred directly to another person responsible, this will only be done if it is technically feasible.
Right to information, correction, blocking, deletion
At any time, within the framework of the applicable legal provisions, you have the right to free information about your stored personal data, the origin of the data, its recipients and the purpose of data processing and, if necessary, a right to correct, block or delete this data. In this regard and also if you have any further questions on the subject of personal data, you can contact us at any time using the contact options listed in the legal notice.

SSL or TLS encryption
For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses an SSL or. TLS encryption. This means that data that you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the “https://” address line in your browser and by the lock symbol in the browser line.

Server log files
The website provider automatically collects and stores information in server log files that your browser automatically transmits to us. These are:
• Visited page on our domain
• Date and time of the server request
• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• IP address
This data will not be merged with other data sources. The basis for data processing is Art. 6 Para. 1 lit. b GDPR, which allows the processing of data to fulfill a contract or pre-contractual measures.

2. Data collection / cookies
Cookies
We use cookies on our website. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offering more user-friendly, effective and secure. Cookies are small text files. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or your web browser automatically deletes them.
Cookies have various functions. Numerous cookies are technically necessary because certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies are used to evaluate user behavior or display advertising.
Cookies that are required to carry out the electronic communication process (necessary cookies) or to provide certain functions you want (functional cookies, e.g. for the shopping cart function) or to optimize the website (e.g. cookies to measure the web audience). are stored on the basis of Art. 6 Para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies in order to provide its services in a technically error-free and optimized manner. If consent to the storage of cookies has been requested, the relevant cookies will be stored exclusively on the basis of this consent (Art. 6 Para. 1 lit. a GDPR); consent can be revoked at any time.

Borlabs Cookies
This website uses Borlabs Cookie, which sets a technically necessary cookie (borlabs cookie) to store your cookie consent.
Borlabs Cookie does not process any personal data.
The borlabs cookie stores the consent you gave when you entered the website. If you would like to revoke this consent, simply delete the cookie in your browser. When you re-enter/reload the website, you will be asked again for your cookie consent.

contact form
Data transmitted via the contact form, including your contact details, will be stored in order to be able to process your request or to be available to answer follow-up questions. This data will not be passed on without your consent.
The data entered into the contact form is processed exclusively on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke the consent you have already given at any time. An informal notification by email is sufficient to revoke your consent. The legality of the data processing operations carried out up to the time of revocation remains unaffected by the revocation.
Data transmitted via the contact form will remain with us until you request us to delete it, revoke your consent to storage or there is no longer any need to store the data. Mandatory legal provisions – in particular retention periods – remain unaffected.

Newsletter
If you would like to receive the newsletter offered on the website, we need an email address from you as well as information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter . No further data is collected or only collected on a voluntary basis. We use this data exclusively to send the requested information and do not pass it on to third parties.

The data entered into the newsletter registration form is processed exclusively on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke your consent to the storage of data, the e-mail address and their use to send the newsletter at any time, for example via the “unsubscribe” link in the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

The data you provide to us for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe from the newsletter or if the purpose no longer applies. We reserve the right to delete or block email addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest in accordance with Article 6 (1) (f) GDPR. Data stored by us for other purposes remains unaffected.

After you have been unsubscribed from the newsletter distribution list, your email address may be stored in a blacklist by us or the newsletter service provider if this is necessary to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR). The storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interests.

3. Plug-Ins / Widgets / Tools / External Content
Independent Analytics
To optimize, improve quality and control reach, we use the WordPress plugin “Independent Analytics” on this website. Various data is collected and evaluated. However, these generally cannot be assigned to specific people. A merger with other data sources does not happen. The statistics are stored and evaluated locally.

External content
We use widgets, plugins or content from third parties on our website. The use of the service is based on your consent in accordance with Art. 6 Para. 1 lit. a. GDPR and Section 25 Paragraph 1 TDDDG. This external content will only be loaded and displayed if you accept all cookies or actively agree to the third-party content. In this case, responsibility for data protection-compliant operations must continue to be ensured by the respective provider. Details on data collection as well as your rights and setting options can be found in the respective data protection information.

Weather widget (weatherwiget.io / forecast7.com)
Based on Article 6 Paragraph 1 Sentence 1 GDPR, our website uses the services of weater.io or https://forecast7.com/de/ to offer you a weather display. The use is based on your consent in accordance with Art. 6 Para. 1 lit. a. GDPR and Section 25 Paragraph 1 TDDDG. The provider must continue to be responsible for data protection-compliant operations. Detailed information about the provider’s data processing can be found at https://forecast7.com/de/privacy/ and https://weatherwidget.io/privacy-policy/.

Meta Platforms (Facebook, Instagram)
We use social media plug-ins from Facebook and Instagram on our website based on Art. 6 Para. 1 Sentence 1 lit.f GDPR, offered by Meta Platforms Ireland Limited (MERRION ROAD, DUBLIN 4, D04 X2K5, IRELAND) . The underlying advertising purpose is to be viewed as a legitimate interest within the meaning of the GDPR. The responsibility for data protection-compliant operation must be ensured by the respective provider. We integrate this plug-in using the so-called two-click method in order to best protect visitors to our website. The buttons used act as an external link, so that no information is transferred to one of these providers without clicking on one of the buttons. By clicking on the buttons, the specified pages receive information, such as: B. Fact and time when you accessed the website, your IP address or information about the browser you used. Information on data protection can be found in the respective data protection declarations.

4. Google Services
Google Web Fonts
This site uses so-called web fonts, which are provided by Google, for the uniform display of fonts. The Google Fonts are installed locally. There is no connection to Google servers.

Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior of website visitors. The website operator receives various usage data, such as: E.g. page views, length of stay, operating systems used and origin of the user. Google may summarize this data in a profile that is assigned to the respective user or their device.
Google Analytics uses technologies that enable user recognition for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there.
The use of this analysis tool is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. If appropriate consent has been requested (e.g. consent to the storage of cookies), processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; consent can be revoked at any time.
Data transfer to the USA is based on the EU Commission’s standard contractual clauses. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

We reserve the right to change the data protection declaration in order to adapt it to changed legal situations or changes to the service and data processing. However, this only applies with regard to declarations on data processing. If consent from the users is required or components of the data protection declaration contain regulations of the contractual relationship with the users, the changes will only be made with the consent of the users.