{"id":5293,"date":"2026-09-19T13:36:11","date_gmt":"2026-09-19T13:36:11","guid":{"rendered":"https:\/\/www.bio-kurhotel.de\/?page_id=5293"},"modified":"2026-10-22T11:08:43","modified_gmt":"2026-10-22T11:08:43","slug":"data-protection","status":"publish","type":"page","link":"https:\/\/www.bio-kurhotel.de\/en\/datenschutz\/","title":{"rendered":"Data protection"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Data protection<\/h1>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The protection of your personal data is a special concern of ours. Therefore, we process your data exclusively based on the legal regulations (DSGVO, TKG 2003). In this privacy policy, we inform you about the most important aspects of data processing within the framework of the website www bio-kurhotel.de. As with most websites, we also automatically collect certain information and store it in log files. This information includes Internet protocol addresses (IP addresses), browser type, Internet service provider (ISP), referring\/exit pages, operating system, date\/time stamps, and clickstream data. This information is technically necessary to provide the content requested by you from websites correctly and is mandatory when using the internet. Anonymous information of this type is statistically evaluated by us to optimize our website and the underlying technology. To protect the security of your data during transmission, we use encryption methods (e.g., SSL) in accordance with current technology standards via HTTPS.<\/p>

1. Definitions
This privacy policy is based on the terms used by the European directive and regulation makers when drafting the General Data Protection Regulation (GDPR). Our privacy policy should be easy to read and understand for both the public and our customers and business partners. To ensure this, we would like to explain the terms used in advance. In this privacy policy, we use the following terms, among others:<\/p>

a) Personal data
Personal data is all information relating to an identified or identifiable natural person (hereinafter \u201edata subject\u201c). A natural person is considered identifiable if they can be identified directly or indirectly, in particular by assigning them to an identifier such as a name, an identification number, location data, an online identifier or one or more specific characteristics that are an expression of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.<\/p>

b) affected person
Data subject is any identified or identifiable natural person whose personal data is processed by the controller for the purposes of processing.<\/p>

c) Processing
Processing is any operation or series of operations carried out with or without the help of automated procedures on personal data, such as collection, recording, organization, arrangement, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or any other form of provision, comparison or linking, restriction, deletion or destruction.<\/p>

d) Restriction of processing
Restriction of processing is the marking of stored personal data with the aim of restricting their future processing.<\/p>

e) Profiling
Profiling is any type of automated processing of personal data that consists of using that personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects related to that natural person\u2019s work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or change of residence.<\/p>

f) Pseudonymization
Pseudonymization is the processing of personal data in a manner in which the personal data can no longer be associated with a specific data subject without the use of additional information, provided that this additional information is kept separately and subject to technical and organizational measures that ensure that the personal data are not assigned to an identified or identifiable natural person.<\/p>

g) Responsible or responsible for the processing
The controller or the person responsible for processing is the natural or legal person, authority, institution or other body that alone or jointly with others decides on the purposes and means of processing personal data. If the purposes and means of this processing are determined by Union law or the law of the Member States, the controller or the specific criteria for its designation may be provided for under Union law or the law of the Member States.<\/p>

h) Contract processor
Data processor is a natural or legal person, authority, institution or other body that processes personal data on behalf of the controller.<\/p>

i) Recipients
Recipients are a natural or legal person, authority, institution or other body to whom personal data is disclosed, whether or not that person is a third party. However, authorities that may receive personal data in the context of a specific investigation order under Union law or the law of the Member States are not considered recipients.<\/p>

j) Third party
Third party is a natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and the persons who are under the direct responsibility of the controller or the processor who are authorized to process the personal data.<\/p>

k) Consent
Consent is any freely given, informed and unambiguous expression of will by the data subject for the specific case, in the form of a declaration or other unequivocal confirmatory act, by which the data subject indicates that he or she agrees to the processing of the personal data concerning him or her.<\/p>

2. Responsible Party
The responsible entity within the meaning of data protection laws is:<\/p>

moor&mehr Bio Kurhotel
Spengelstra\u00dfe 6,
82433 Bad Kohlgrub
Managing Director: Martin Fend<\/p>

Phone: +49 (0) 88 45 \u2013 702-0,
Fax: +49 (0) 88 45 \u2013 702-190
panorama@bio-kurhotel.de<\/p>

For general questions about data protection, please contact them via email panorama@bio-kurhotel.de or contact us by phone.<\/p>

3. Use of cookies
Our website uses so-called cookies, just as numerous other websites and servers do. These are small text files that are stored on your device using the browser. They do not cause any damage. We use cookies to make our website user-friendly. When you visit our website, a corresponding notice about the use of cookies will be displayed to you. You accept the use of cookies on our website via the provided button. Some cookies remain on your device until you delete them. They enable us to recognize your browser the next time you visit. The purpose of this recognition is to make using our website easier for users. If you do not wish this, you can configure your browser to inform you about the setting of cookies and only allow them in individual cases. However, the functionality of our website may be limited when cookies are deactivated.<\/p>

Open configuration box<\/p>

4. Collection of general data and information
The website of Bio Kurhotels moor&mehr collects a series of general data and information with each call to the website by an affected person or an automated system. This general data and information is stored in the server's log files. The following data can be collected: (1) the types and versions of browsers used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrers), (4) the sub-webpages accessed via an accessing system on our website, (5) the date and time of an access to the website, (6) an Internet Protocol address (IP address), (7) the Internet Service Provider of the accessing system and (8) other similar data and information that serve to prevent attacks on our information technology systems. When using this general data and information, Bio Kurhotel moor&mehr does not draw any conclusions about the data subject. This information is needed rather to (1) provide the content of our website correctly, (2) optimize the content of our website and the advertising for it, (3) ensure the permanent functionality of our information technology systems and the technology of our website, and (4) provide law enforcement authorities with the information necessary for prosecution in the event of a cyberattack. Bio Kurhotel Therefore, moor&mehr will use this anonymous collected data and information, on the one hand, for statistical purposes and, on the other hand, with the aim of increasing data protection and data security within our company, ultimately ensuring an optimal level of protection for the personal data processed by us. The anonymous data in the server log files are stored separately from any personal data provided by an affected person.<\/p>

5. Website analysis
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (\u201eGoogle\u201c). Google Analytics uses so-called \u201ecookies\u201c, text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In light of the discussion surrounding the use of analytics tools with full IP addresses, we point out that IP addresses are only processed in abbreviated form on this website. By using Google Analytics with the extension \u201e_anonymizeIp()\u201c, the personal reference of the collected data is excluded. However, by activating IP anonymization on this website, your IP address is first truncated by Google within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there.<\/p>

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.<\/p>

IP anonymization
We have activated the IP anonymization function on this website. This means that your IP address is shortened by Google within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address submitted by your browser as part of Google Analytics will not be merged with other data from Google.<\/p>

Browser Plugin
You can prevent the storage of cookies by adjusting your browser settings accordingly; however, please note that in this case you may not be able to fully utilize all the functions of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link https:\/\/tools.google.com\/dlpage\/gaoptout?hl=de:.<\/p>

Objection to data collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie is set that prevents the collection of your data during future visits to this website: Disable Google Analytics<\/p>

More information about how user data is handled by Google Analytics can be found in Google's privacy policy https:\/\/support.google.com\/analytics\/answer\/6004245?hl=de:.<\/p>

Order data processing
We have entered into a contract with Google for the processing of order data and fully implement the strict requirements of the German data protection authorities when using Google Analytics.<\/p>

Demographic characteristics in Google Analytics
This website uses the \u201cdemographic characteristics\u201d function of Google Analytics. This allows reports to be created that include statements about the age, gender, and interests of the site visitors. This data comes from interest-based advertising by Google as well as visitor data from third-party providers. This data cannot be associated with any specific person. You can disable this function at any time through the display settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the \u201cObjection to Data Collection\u201d section.<\/p>

Check and change cookie settings<\/p>

Mouseflow
This website uses Mouseflow, a web analytics tool from Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark. The data processing serves the purpose of analyzing this website and its visitors. Data is collected and stored for marketing and optimization purposes. From this data, usage profiles can be created under a pseudonym. Cookies can be used for this purpose.
The web analytics tool Mouseflow records randomly selected individual visits (only with an anonymized IP address). This creates a log of mouse movements and clicks with the intention of sampling individual website visits and inferring potential improvements for the website. The data collected by Mouseflow is not used without the individual\u2019s separate consent to identify the visitor to this website personally and is not combined with personal data about the bearer of the pseudonym. Processing is carried out on the basis of Art. 6 (1) f) GDPR for the legitimate interest in direct customer communication and in tailoring the website to meet the needs of the visitor. You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you based on Art. 6 (1) f GDPR. To do this, you can disable the recording on all websites that use Mouseflow globally for your currently used browser at the following link: https:\/\/mouseflow.de\/opt-out\/<\/p>

You can change the privacy settings by clicking the button in the bottom left corner.<\/p>

6. Remarketing
Facebook Pixel
In addition, components of the company Facebook are integrated on our website. Facebook is a social network. A social network is a social gathering place operated on the Internet, an online community that generally allows users to communicate with each other and interact in a virtual space. A social network can serve as a platform for exchanging opinions and experiences or enable the Internet community to provide personal or business-related information. Facebook enables users of the social network, among other things, to create private profiles, upload photos, and connect through friend requests. The operator of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. For the processing of personal data by the controller when an affected person lives outside the USA or Canada, it is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Every time a single page of this website is accessed that is operated by the controller and on which a Facebook component (Facebook plug-in) has been integrated, the Internet browser on the information technology system of the affected person is automatically prompted by the respective Facebook component to download a representation of the corresponding Facebook component from Facebook. A comprehensive overview of all Facebook plug-ins can be https:\/\/developers.facebook.com\/docs\/plugins\/?locale=de_DE found here. As part of this technical procedure, Facebook learns which specific page of our website is visited by the person concerned. If the person concerned is simultaneously logged into Facebook, Facebook recognizes with every call-up of our website by the person concerned and during the entire duration of the respective stay on our website which specific page of our website the person concerned visits. This information is collected by the Facebook component and assigned by Facebook to the respective Facebook account of the person concerned. If the person concerned clicks on one of the Facebook buttons integrated on our website, for example the \u201eLike\u201c button, or if the person concerned submits a comment, Facebook assigns this information to the personal Facebook user account of the person concerned and stores this personal data. Facebook receives information via the Facebook component every time the person concerned visits our website if the person concerned is simultaneously logged into Facebook at the time of visiting our website; this occurs regardless of whether the person concerned clicks on the Facebook component or not. If such transmission of this information to Facebook is not desired by the data subject, they can prevent the transmission by logging out of their Facebook account before accessing our website. The data protection policy published by Facebook, which is available for https:\/\/de-de.facebook.com\/about\/privacy\/ download, provides information about the collection, processing and use of personal data by Facebook. It also explains the privacy settings Facebook offers to protect the data subject\u2019s privacy. In addition, various applications are available that allow the data subject to suppress data transmission to Facebook, for example the Facebook blocker provided by the provider Webgraph, which can http:\/\/www.netzstrategen.com\/sagen\/facebook-plugin-blocker\/beschafft be downloaded. Such applications can be used by the data subject to suppress data transmission to Facebook.<\/p>

This website also uses the \u201eCustom Audiences\u201c remarketing function of Facebook Inc. (\u201eFacebook\u201c). This function is used to present interest-based advertising (\u201eFacebook Ads\u201c) to visitors of this website as part of their visit to the Facebook social network. The remarketing tag from Facebook has been implemented on this website. When the website is visited, a direct connection is established to the Facebook servers via this tag. This tag informs the Facebook servers that you have visited this website and Facebook assigns this information to your personal Facebook account. The data collected is anonymous to us, meaning we do not see the personal data of individual users. However, this data is stored and processed by Facebook. For more information about the collection and use of data by Facebook, as well as about your rights and options to protect your privacy, please see Facebook\u2019s privacy policy https:\/\/www.facebook.com\/about\/privacy. Alternatively, you can https:\/\/www.facebook.com\/settings\/?tab=ads disable the \u201eCustom Audiences\u201c remarketing feature by logging in to Facebook. You must be logged in to Facebook to do this.<\/p>

6a. Hotjar
This website uses Hotjar. The provider is Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe (Website: https:\/\/www.hotjar.com).<\/p>

Hotjar is a tool for analyzing your user behavior on this website. With Hotjar, we can, among other things, record your mouse movements and scrolling and clicks. Hotjar can also determine how long you remain with the mouse cursor on a specific area. Based on this information, Hotjar creates so-called heatmaps that show which areas of the website are preferred by the website visitor.<\/p>

Furthermore, we can determine how long you stayed on a page and when you left it. We can also determine at which point you interrupted your input in a contact form (so-called conversion funnels).<\/p>

Furthermore, Hotjar can collect direct feedback from website visitors. This function is used to improve the website operator\u2019s web offerings.<\/p>

Hotjar uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g., cookies or the use of device fingerprinting).<\/p>

Provided that consent has been obtained, the use of the aforementioned service is carried out exclusively on the basis of Art. 6(1)(a) GDPR and \u00a7 25 TTDSG. Consent can be revoked at any time. In the absence of consent, the use of this service is based on Art. 6(1)(f) GDPR; the website operator has a legitimate interest in analyzing user behavior in order to optimize both its web offerings and its advertising.<\/p>

Deactivating Hotjar
If you want to disable data collection by Hotjar, click on the following link and follow the instructions there: https:\/\/www.hotjar.com\/policies\/do-not-track\/<\/p>

Please note that the deactivation of Hotjar must be performed separately for each browser or device.<\/p>

For more information about Hotjar and the data collected, please refer to Hotjar\u2019s privacy policy at the following link: https:\/\/www.hotjar.com\/privacy<\/p>

Order processing
We have entered into a contract for data processing (AVV) with the aforementioned provider. This is a data protection-related contract that ensures that this provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.<\/p>

7. Embedded content (iframes) and plugins\/components
Youtube
On our website, we also use embedded content (videos) from the company YouTube, LLC 901 Cherry Ave., 94066 San Bruno, CA, USA, a company of Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA. When you visit a website with such content, a connection is established to the YouTube servers and the content is displayed on the website by being communicated to your browser. This transmits information to the YouTube server about which of our websites you have visited. If you are logged in as a member on YouTube, YouTube assigns this information to your respective personal user account of this platform. You can prevent such an assignment by logging out of your user account before visiting our website.<\/p>

Facebook
In addition, we use plugins from the social network facebook.com on our website, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (\u201eFacebook\u201c). When you access websites on our website that are equipped with such plugins, a connection to the Facebook servers is established and the plugin is displayed on the website via a notification to your browser. This transmits the information to the Facebook servers about which of our websites you have visited. If you are logged in as a member on Facebook, Facebook assigns this information to your personal Facebook user account. When using the plugin functions (e.g., clicking the \u201eLike\u201c button, submitting a comment), this information is also assigned to your Facebook account, which you can only prevent by logging out before using the plugin. Detailed information can also be found under point 5 Facebook Pixel. For more information about the collection and use of data by Facebook, as well as your rights and options to protect your privacy, please see Facebook's privacy policy.<\/p>

Instagram
Our pages include functions of the Instagram service. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA and are integrated. If you are logged into your Instagram account, you can link the content of our pages with your Instagram profile by clicking the Instagram button. This allows Instagram to associate the visit to our pages with your user account. We point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Instagram. For more information, please refer to Instagram\u2019s privacy policy: https:\/\/instagram.com\/about\/legal\/privacy\/<\/p>

Pinterest
In addition, we use the service pinterest.com on our website. pinterest.com is a service of Pinterest, Inc., 808 Brannan St, San Francisco, CA 94103, USA. The integrated \u201ePin it\u201c button on our page enables Pinterest to receive the information that you have accessed the corresponding page of our website. If you are logged in to Pinterest, Pinterest can associate this visit to our page with your Pinterest account and therefore link the data. The data transmitted by clicking the \u201ePin it\u201c button is stored by Pinterest. For the purpose and scope of data collection, its processing and use, as well as your rights and options regarding the protection of your privacy, please see the Pinterest Data Protection Notice, which you can http:\/\/pinterest.com\/about\/privacy\/ access here. To prevent Pinterest from associating your visit to our site with your Pinterest account, you must log out of your Pinterest account before visiting our site.<\/p>

8. E-mail Marketing \/ Newsletter
You can register for our newsletter via the corresponding registration form. To do so, you must provide us with your first and last name, title, and email address. In addition, we require your declaration that you agree to receiving the newsletter. You can also provide us with additional information regarding the optimization of the newsletter on a voluntary basis. In addition, the IP address assigned to you at the time of registration and the date of your registration are stored. Once you have registered for the newsletter, we will send you a confirmation email with a link to confirm your registration (double opt-in procedure). We will use your email address exclusively to send you our newsletter. You can unsubscribe from the newsletter at any time via the corresponding unsubscribe link in the newsletter. Alternatively, you can also send us a message at the following address: panorama@bio-kurhotel.de We will then immediately delete your data related to our newsletter delivery.<\/p>

Newsletter2Go<\/p>

This website uses Newsletter2Go for the delivery of newsletters. The provider is Newsletter2Go GmbH, N\u00fcrnberger Stra\u00dfe 8, 10787 Berlin, Germany. Newsletter2Go is a service that can be used to organize and analyze the delivery of newsletters, among other things. The data you enter for the purpose of subscribing to the newsletter are stored on the servers of Newsletter2Go in Germany. If you do not want Newsletter2Go to perform an analysis, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in each newsletter message. In addition, you can unsubscribe from the newsletter directly on the website.<\/p>

Data analysis by Newsletter2Go
With the help of Newsletter2Go, we are able to analyze our newsletter campaigns. This way, we can, for example, see whether a newsletter message has been opened and which links have been clicked if applicable. In this way, we can, among other things, determine which links have been clicked the most frequently. We can also recognize whether certain predefined actions were performed after opening\/clicking (conversion rate). This way, we can, for example, see whether you made a purchase after clicking on the newsletter. Newsletter2Go also allows us to segment the newsletter recipients based on various categories (\u201eclustering\u201c). For example, the newsletter recipients can be divided according to age, gender, or place of residence. In this way, the newsletters can be better adapted to the respective target groups. Detailed information about the functions of Newsletter2Go can be found at the following link: https:\/\/www.newsletter2go.de\/features\/newsletter-software\/.<\/p>

Legal basis
Data processing is carried out based on your consent (Art. 6(1)(a) GDPR). You can revoke this consent at any time. The legality of the data processing operations that have already taken place remains unaffected by the revocation.<\/p>

Storage duration
The data you provide to us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter. After the newsletter has been unsubscribed, both our servers and those of Newsletter2Go will delete the data. Data that was stored by us for other purposes (e.g., email addresses for the member area) will remain unaffected by this. For more information, please refer to the Privacy Policy of Newsletter2Go at: https:\/\/www.newsletter2go.de\/features\/datenschutz-2\/.<\/p>

Conclusion of a contract regarding the processing of order data
We have entered into a contract with Newsletter2Go, in which we oblige Newsletter2Go to protect our customers\u2019 data and not to disclose it to third parties. This contract can be viewed under the following link: https:\/\/www.newsletter2go.de\/docs\/datenschutz\/ADV_Muster_Newsletter2Go_GmbH_latest_Form.pdf?x48278.<\/p>

9. Contact & Forms
Email and telephone contact
If you contact us by email or by phone, we will only use the personal data you provide to process your specific request. Your provided data will not be stored and will of course be treated confidentially.<\/p>

10. Data security
We secure our website and other systems through technical and organizational measures against the loss, destruction, access, alteration, or disclosure of your data by unauthorized persons. However, despite regular checks, complete protection against all dangers is not possible. Additionally, we use the industry standard SSL (Secure Sockets Layer) to encrypt our website to ensure the confidentiality of your personal information over the Internet.<\/p>

11. Routine deletion and blocking of personal data
We process and store personal data only for the period necessary to achieve the storage purpose, or insofar as this has been provided for by the European Directive and Regulation-maker or another legislator in laws or regulations to which the person responsible for the processing is subject. If the storage purpose no longer applies or a storage period prescribed by the European Directive and Regulation-maker or another competent legislator expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.<\/p>

12. Duration for which the personal data will be stored
The criterion for the duration of the storage of personal data is the respective statutory retention period. After the expiration of this period, the corresponding data is routinely deleted unless it is no longer necessary for the fulfillment or initiation of the contract.<\/p>

13. Your rights
a) Right to confirmation
Every data subject has the right granted by the European Directive and Regulation Legislator to request confirmation from the controller regarding whether personal data concerning them are being processed. If a data subject wishes to exercise this right of confirmation, they may contact the panorama@bio-kurhotel.de Bio Kurhotel moor&mehr office at any time to request this confirmation.<\/p>

b) Right to information
Any person affected by the processing of personal data has the right granted by the European Directive and Regulation Legislator to obtain, at any time and free of charge, information from the person responsible for the processing about the personal data stored about them and a copy of this information. Furthermore, the European Directive and Regulation authorizer has granted the data subject access to the following information: the processing purposes; the categories of personal data that are being processed; the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations; if possible, the planned duration for which the personal data will be stored; or, if this is not possible, the criteria for determining this duration; the existence of a right to rectification or erasure of the personal data concerning him or her or a right to restrict the processing by the controller or a right to object to such processing; Right of appeal to a supervisory authority; if the personal data are not collected from the data subject: all available information about the origin of the data; the existence of automated decision-making including profiling in accordance with Article 22(1) and (4) of the GDPR and \u2014 at least in these cases \u2014 meaningful information about the involved logic as well as the scope and the intended effects of such processing for the data subject; Furthermore, the data subject has the right to information as to whether personal data have been transmitted to a third country or to an international organization. If this is the case, the affected person is also entitled to obtain information about the appropriate safeguards related to the transfer. If an affected person wishes to exercise this right of access, they may contact the panorama@bio-kurhotel.de Bio Kurhotel moor&mehr team at any time.<\/p>

c) Right to rectification
Any person affected by the processing of personal data has the right granted by the European Directive and Regulation Legislator to demand the immediate rectification of inaccurate personal data concerning them. Furthermore, the affected person has the right, taking into account the purposes of the processing, to request the completion of incomplete personal data \u2014 also by means of a supplementary declaration. If an affected person wishes to exercise this right of rectification, they may contact the panorama@bio-kurhotel.de Bio Kurhotel moor&mehr at any time.<\/p>

d) Right to erasure (right to be forgotten)
Any person affected by the processing of personal data has the right granted by the European Directive and Regulation Legislator to require the controller to delete the personal data concerning them immediately, provided that one of the following reasons applies and insofar as the processing is no longer necessary: The personal data were collected for such purposes or otherwise processed for which they are no longer necessary. The data subject revokes their consent, on which the processing was based pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing. The data subject objects to the processing pursuant to Art. 21(1) GDPR, and there are no overriding legitimate grounds for the processing, or the data subject objects pursuant to Art. 21(2) GDPR. The personal data have been processed unlawfully. The deletion of the personal data is necessary to comply with a legal obligation under Union law or the law of the Member States to which the controller is subject. The personal data were collected in connection with information society services offered pursuant to Art. 8(1) GDPR. If one of the above reasons applies and an affected person wishes to have their personal data stored at Bio Kurhotel moor&mehr deleted, they can panorama@bio-kurhotel.de contact the company at any time to request this. The management of Bio Kurhotels moor&mehr will ensure that the request for deletion is promptly complied with. If the personal data has been made public by Bio Kurhotel moor&mehr and our company, as the controller, is required to delete the personal data in accordance with Article 17(1) of the GDPR, Bio Kurhotel moor&mehr will take appropriate measures, including technical measures, in accordance with the available technology and the implementation costs to inform other controllers who process the published personal data that the data subject has requested the deletion of all links to this personal data or of copies or replications of this personal data, insofar as the processing is not necessary. The management of Bio Kurhotels moor&mehr will arrange the necessary steps in individual cases.<\/p>

e) Right to restriction of processing
Any person affected by the processing of personal data has the right granted by the European Directive and Regulation Legislator to request the restriction of the processing by the controller if one of the following conditions is met: The accuracy of the personal data is contested by the data subject, and this for a period that allows the controller to verify the accuracy of the personal data. The processing is unlawful, and the data subject refuses the deletion of the personal data and instead requests the restriction of the use of the personal data. The responsible party no longer needs the personal data for the processing purposes, but the data subject needs them to assert, exercise or defend legal claims. The data subject has filed an objection to the processing in accordance with Art. 21(1) GDPR and it is not yet clear whether the responsible party\u2019s legitimate reasons outweigh those of the data subject. If one of the aforementioned conditions is met and a data subject requests the restriction of personal data stored by Bio Kurhotel Bio Kurhotel moor&mehr, they may panorama@bio-kurhotel.de contact the company at any time or by phone. The management of Bio Kurhotels moor&mehr will arrange the restriction of processing.<\/p>

f) Right to data portability
Any person affected by the processing of personal data has the right granted by the European Directive and Regulation Legislator to obtain the personal data concerning them that have been provided by the person concerned to a controller in a structured, commonly used and machine-readable format. Furthermore, the data subject has the right to transmit these data to another controller without hindrance from the controller to whom the personal data were provided, provided that the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR and the processing is carried out using automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. Furthermore, in exercising their right to data portability pursuant to Art. 20(1) GDPR, the data subject has the right to obtain that the personal data be transmitted directly from one controller to another, insofar as this is technically feasible and provided that this does not affect the rights and freedoms of other persons. To exercise the right to data portability, the data subject may panorama@bio-kurhotel.de contact us at any time or contact us by phone.<\/p>

g) Right to object
Any person affected by the processing of personal data has the right granted by the European Directive and Regulation Legislator to object at any time, for reasons arising from their particular situation, to the processing of personal data concerning them, which takes place on the basis of Art. 6(1)(e) or (f) of the GDPR. This also applies to profiling based on these provisions. Bio Kurhotel moor&mehr will no longer process the personal data in the event of an objection, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, or the processing serves the assertion, exercise or defense of legal claims.<\/p>

If Bio Kurhotel moor&mehr processes personal data to carry out direct marketing, the data subject has the right to object at any time to the processing of personal data for such marketing purposes. This also applies to profiling insofar as it is related to such direct marketing. If the data subject objects to Bio Kurhotelmoor&mehr processing the personal data for direct marketing purposes, Bio Kurhotel moor&mehr will no longer process the personal data for these purposes.<\/p>

Furthermore, the data subject has the right, for reasons arising from their particular situation, to object to the processing of personal data concerning them that takes place at Bio Kurhotel moor&mehr for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) of the GDPR, unless such processing is necessary for the performance of a task in the public interest.<\/p>

To exercise the right of objection, the data subject may panorama@bio-kurhotel.de contact Bio Kurhotel moor&mehr directly or by telephone. The data subject is also free to exercise their right of objection in connection with the use of information society services, regardless of Directive 2002\/58\/EC, using automated procedures that use technical specifications.<\/p>

h) Automated decisions in individual cases, including profiling
Any person affected by the processing of personal data has the right granted by the European Directive and Regulation Legislator not to be subject to a decision based solely on automated processing \u2013 including profiling \u2013 which produces legal effects concerning them or similarly significantly affects them, provided that the decision (1) is not necessary for the conclusion or performance of a contract between the data subject and the controller, or (2) is permitted by Union or Member State legislation to which the controller is subject and that legislation contains appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the data subject, or (3) is made with the express consent of the data subject.<\/p>

If the decision (1) is necessary for the conclusion or performance of a contract between the data subject and the controller, or (2) is made with the express consent of the data subject, Bio Kurhotel moor&mehr shall take appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the data subject, including at least the right to have a person acting on behalf of the controller intervene, to present one\u2019s own point of view, and to contest the decision.<\/p>

If the data subject wishes to exercise rights relating to automated decision-making, they may at any time contact an employee of the controller responsible for the processing.<\/p>

i) Right to revoke a data protection consent
Any person affected by the processing of personal data has the right granted by the European Directive and Regulation Legislator to withdraw consent to the processing of personal data at any time. If the person concerned wishes to exercise their right to withdraw consent, they may contact the panorama@bio-kurhotel.de Bio Kurhotel moor&mehr team at any time or by phone.<\/p>

14. Legal basis for processing
Art. 6 I lit. a GDPR serves as the legal basis for processing operations in which we obtain consent for a specific processing purpose. If the processing of personal data is necessary to fulfill a contract to which the data subject is a party, as is the case, for example, in processing operations that are necessary for the delivery of goods or the provision of other services or consideration, then the processing is based on Art. 6 I lit. b GDPR. The same applies to such processing operations that are necessary for the implementation of pre-contractual measures, such as in cases of inquiries regarding our products or services. If our company is subject to a legal obligation requiring the processing of personal data, such as for the fulfillment of tax obligations, then the processing is based on Art. 6 I lit. c GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our premises were injured and their name, age, health insurance data or other vital information had to be passed on to a doctor, a hospital or other third parties as a result. In such a case, the processing would be based on Art. 6 I lit. d GDPR. Ultimately, processing operations based on Art. 6 I lit. f GDPR could be carried out. Processing operations that are not covered by any of the aforementioned legal bases would be based on this legal basis if the processing is necessary to safeguard a legitimate interest of our company or a third party, provided that the interests, fundamental rights and fundamental freedoms of the data subject do not prevail. Such processing operations are permitted to us in particular because they were specifically mentioned by the European legislator. In that regard, he held the view that a legitimate interest could be assumed if the data subject is a customer of the controller (Recital 47, Sentence 2 DS-GVO).<\/p>

15. Legitimate interests in the processing pursued by the controller or a third party
If the processing of personal data is based on Article 6 I lit. f GDPR, our legitimate interest is the conduct of our business in the interests of the well-being of all our employees and our shareholders.<\/p>

16. Legal or contractual regulations regarding the provision of personal data
We inform you that the provision of personal data; the necessity for the conclusion of the contract; the obligation of the data subject to provide the personal data; and the possible consequences of non-provision may be partly required by law (e.g., tax regulations) or may also result from contractual arrangements (e.g., information about the contractual partner). Sometimes, providing personal data by a data subject may be necessary for the conclusion of a contract; for example, a data subject is obliged to provide us with personal data when our company concludes a contract with them. Non-provision of the personal data would result in the contract with the data subject not being concluded. Before personal data is provided by the data subject, the data subject must contact one of our employees. Our employee will inform the data subject individually about whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data, and what consequences the non-provision of the personal data would have.<\/p>

17. Existence of automated decision-making
As a responsible company, we do not resort to automatic decision-making or profiling.<\/p>

18th Amendment to our Privacy Policy
We reserve the right to adapt this privacy policy from time to time to ensure that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. For your subsequent visit, the new privacy policy will then apply.<\/p>

This privacy policy was created by the Privacy Policy Generator from the Data Protection Authority Mannheim in cooperation with RC GmbH, which recycles used laptops and is managed by IT and Data Protection Law Attorney Christian Solmecke.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"

Datenschutz Der Schutz Ihrer pers\u00f6nlichen Daten ist uns ein besonderes Anliegen. Wir verarbeiten Ihre Daten daher ausschlie\u00dflich auf Grundlage der gesetzlichen Bestimmungen (DSGVO, TKG 2003). In dieser Datenschutzerkl\u00e4rung informieren wir Sie \u00fcber die wichtigsten Aspekte der Datenverarbeitung im Rahmen der Website www.bio-kurhotel.de. Wie die meisten Websites werden auch von uns bestimmte Informationen automatisch erfasst und […]<\/p>\n","protected":false},"author":5,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"inline_featured_image":false,"footnotes":""},"class_list":["post-5293","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.bio-kurhotel.de\/en\/wp-json\/wp\/v2\/pages\/5293","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.bio-kurhotel.de\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.bio-kurhotel.de\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.bio-kurhotel.de\/en\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.bio-kurhotel.de\/en\/wp-json\/wp\/v2\/comments?post=5293"}],"version-history":[{"count":1,"href":"https:\/\/www.bio-kurhotel.de\/en\/wp-json\/wp\/v2\/pages\/5293\/revisions"}],"predecessor-version":[{"id":9423,"href":"https:\/\/www.bio-kurhotel.de\/en\/wp-json\/wp\/v2\/pages\/5293\/revisions\/9423"}],"wp:attachment":[{"href":"https:\/\/www.bio-kurhotel.de\/en\/wp-json\/wp\/v2\/media?parent=5293"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}