Data privacy


1.  Data privacy protection at a glance


General notes 

The following notes provide a simple overview of what happens to your personal data when you visit our website.  Personal data is any data with which you can be personally identified.  For detailed information on the subject of data protection, please refer to our privacy policy below.


Data collection on our website 

Who is responsible for data collection on this website? 

The data processing on this website is carried out by the website operator.  You can find their contact information in the legal notice of this website.

How do we collect your data? 

Some of the data we collect comes from what you provide to us, such as the information you enter in a contact form. 

Other data are collected automatically by our IT systems when you visit the website.  This is mainly technical data (e.g. internet browser, operating system or time of page view).  These data are collected automatically as soon as you enter our website.

What do we use your data for?  

Some of the data are collected to ensure that the website operates smoothly.    Other data may be used to analyze your user behavior.

What rights do you have regarding your data? 

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time.  You also have a right to request that your data are corrected, blocked or deleted.  You can contact us at any time about this issue and/or if you have further questions on the subject of data protection by sending us a message at the address given under the legal notice.  Furthermore, you have the right to lodge a complaint with the competent supervisory authority.


Third-party analytics and tools 

Your surfing behavior may be statistically evaluated when you visit our website.  This is done primarily with cookies and with something known as analysis programs.  The analysis of your surfing behavior is generally anonymous; the surfing behavior cannot be traced back to you.  You can object to this analysis or prevent it by not using certain tools.  You can find detailed information on this further down in the privacy policy.

You can object to this analysis.  We will inform you about your options in this privacy policy. 


2. General notes and mandatory information


Data privacy

The operators of these pages take the protection of your personal data very seriously.  We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. 

When you use this website, various personal data are collected.  Personal data are those with which you can be personally identified.  This privacy policy explains what data we collect and what we use them for. It also explains how and for what purpose this is done. 

We wish to point out that data transmission via the Internet (such as email communication) can involve security gaps.  It is not possible to completely protect data against access by third parties. 

We hereby inform you that we take photos and film footage at public events of the companies of the ZADRA Group (Roland Zadra Hotellerie Service KG; Hotel Europas Rosengarten GmbH & Co. KG; ZETT Zweibrücken GmbH) on the basis of legitimate interests (as defined in Art. 6 para. 1 lit.f GDPR).  This data may be published for promotional purposes on our social media channels (Facebook, Instagram, YouTube) and websites and in any form of promotional material. 


Note on the responsible party

The responsible party for data processing on this website is:

Roland Zadra Hotellerie Service KG
Fasanerie 1
66482 Zweibrücken, Germany

Phone: +49 6332 9730
Email: info@zadra-gruppe.de

The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g. names, email addresses, etc.).


Revoking your consent to data processing 

Many data-processing operations are only possible with your express consent.  You can revoke consent you have already given at any time:  simply sending us an email is sufficient.  Revoking your consent does not affect the legality of processing data that was carried out until the time the revocation was submitted.


Right to appeal to the competent supervisory authority

In the event of violations of data-protection law, the person concerned has the right to lodge a complaint with the competent supervisory authority.  The competent supervisory authority for data-protection issues is the state data-protection commissioner of the federal state in which our company is based.  A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html. 


Right to data portability

You have the right for the data that we process automatically on the basis of your consent or in fulfillment of a contract to be given to you or to a third party in a standard machine-readable format.  If you request the direct transfer of the data to another responsible party, this will only be done insofar as it is technically feasible.


SSL / TLS encryption

This site uses SSL / TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator.  You can see that your connection is encrypted by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL / TLS encryption is activated, the data you transmit to us cannot be read by third parties. 


Information, blocking, deletion 

Within the framework of the applicable legal provisions, you have the right, free of charge and at any time, to receive information about your stored personal data, its origin and recipient and the purpose of data processing and, if necessary, the right to correct, block or delete this data.  You may use the address given in the legal notice to contact us at any time about this topic or any other questions on the subject of personal data.


3. Data protection officer


Data protection officer as required by law

We have appointed a data protection officer for our company.

Stephanie Kröner
Fasanerie 1
66482 Zweibrücken

Phone: +49 6332 9730
Email: stephanie.kroener@zadra-gruppe.de


4. Data collection on our website 


Cookies

Internet pages partly use something called cookies.  Cookies do not cause any damage to your computer and do not contain viruses.  They are used to make our website more user-friendly, more effective and safer.  Cookies are small text files that are stored on your computer and saved by your browser. 

Most of the cookies we use are known as "session cookies."  They are automatically deleted after the end of your visit.  Other cookies remain stored on your device until you delete them.  These cookies allow us to recognize your browser on your next visit.

You can set your browser so that you are informed about cookies being set and only allow them in individual cases, forbid cookies from being accepted in general or in certain cases, and/or activate automatic deletion of cookies when closing the browser.  If you deactivate cookies, the functionality of this website may be limited.

Cookies that are required to carry out the electronic communication process or to provide certain functions you have requested (e.g. shopping cart function) are stored in compliance with Art. 6 (1) lit. f GDPR.  The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services.  If other cookies are stored (e.g. cookies for analyzing your surfing behavior), these are addressed separately in this privacy policy. 


Server log files

The provider of the pages automatically collects and stores information in server log files, which your browser automatically transmits to us.  This information is as follows: 

  • Browser type and version 
  • Operating system used 
  • Referrer URL 
  • Host name of the accessing computer 
  • Time of the server request
  • IP address 

These data are not merged with other data sources. 

The basis for the data processing is Art. 6 para. 1 lit. f GDPR, which permits the processing of data to fulfill a contract or pre-contractual measures.


Contact form

If you send us inquiries via the contact form, we will store your data from the inquiry form including the contact data you provided there so we can process the inquiry and in the event of follow-up questions.  We do not pass on these data without your consent. 

The processing of the data entered in the contact form is therefore based exclusively on your consent (Art. 6 para. 1 lit. a GDPR).  You can revoke this consent at any time; simply sending us an email is sufficient.  Revoking your consent does not affect the legality of processing data that was carried out until the time the revocation was submitted.

The data you enter in the contact form will remain with us until you request that we delete it, revoke your consent to store it, or when the purpose for storing the data no longer applies (e.g. after we have completed processing your request).  Mandatory legal provisions - in particular retention periods - remain unaffected. 


Processing data (customer and contract data) 

We collect, process and use personal data only to the extent that they are necessary for establishing the legal relationship, its content or modification (inventory data).  This is done in compliance with Art. 6 para. 1 lit. b GDPR, which permits the processing of data in order to fulfill a contract or pre-contractual measures.  We collect, process and use personal data about the use of our websites (usage data) only to the extent necessary to enable the user to use the service or to bill the user. 

The collected customer data will be deleted after completion of the order or termination of the business relationship.  Statutory retention periods remain unaffected. 


5. Analytical tools and advertising 


Google Analytics 

This website uses functions of the web analysis service Google Analytics.  The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. 

Google Analytics uses something called “cookies,”  which are text files that are stored on your computer and make it possible to analyze your use of the website.  The information generated by the cookie about your use of this website is usually transmitted to a Google server in the US and stored there. 

The storage of Google Analytics cookies is in compliance with Art. 6 (1) lit. f GDPR.  The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. 

IP anonymization  

We have activated the IP anonymization function on this website.  This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the US.  The full IP address will only be transmitted to a Google server in the US and shortened there in exceptional cases.  Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.  The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. 

Browser plugins 

You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do so, you may not be able to use the full functionality of this website.  You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google if you download and install the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Objection to data collection  

You can prevent the collection of your data by Google Analytics by clicking on the following link.  An opt-out cookie will be set, which will prevent the collection of your data during future visits to this website: Disable Google Analytics.

For more information on how Google Analytics handles user data, please see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

Processing data from orders 

We have a contract with Google to process order-related data, and we fully implement the strict requirements of the German data protection authorities when using Google Analytics. 

Demographic characteristics in Google Analytics 

Our website uses the demographic characteristics function of Google Analytics.  This allows reports to be generated that contain information about the age, gender and interests of site visitors.  These data come from interest-based advertising from Google as well as visitor data from third-party providers.  These data cannot be linked to a specific person.  You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as discussed under "Objection to data collection."


Google Analytics Remarketing 

Our websites use the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google AdWords and Google DoubleClick.  The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. 

This function makes it possible to link the advertising target groups created with Google Analytics Remarketing with the cross-device functions of Google AdWords and Google DoubleClick.  This means that personalized interest-based advertising messages that have been adapted to you depending on your previous usage and surfing behavior on one end device (e.g. cel phone) can also be displayed on another of your end devices (e.g. tablet or PC). 

If you have given your consent, Google will link your web and app browsing history with your Google account for this purpose.  As a result, the same personalized advertising messages can be displayed on every device on which you log in with your Google account.

To support this feature, Google Analytics collects Google-authenticated IDs of users that are temporarily linked to our Google Analytics data; the purpose is to define and create target groups for cross-device ad advertising. 

You can permanently object to cross-device remarketing/targeting by deactivating personalized advertising in your Google account; to do so, follow this link: https://www.google.com/settings/ads/onweb/.

The aggregation of the collected data in your Google account is based solely on your consent, which you can grant or revoke at Google (Art. 6 para. 1 lit. a GDPR).  When data collection processes are not merged in your Google account (e.g. because you do not have a Google account or have objected to merging), the collection of the data is based on Art. 6 (1) lit. f GDPR.  The legitimate interest arises from the fact that the website operator has an interest in the anonymized analysis of website visitors for advertising purposes. 

For more information and the privacy policy, please see Google's privacy policy at: https://www.google.com/policies/technologies/ads/. 


Google AdWords and Google Conversion Tracking

This website uses Google AdWords. AdWords is an online advertising program of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google"). 

Within the framework of Google AdWords, we use a function called conversion tracking.   When you click on an ad placed by Google, a cookie is set for conversion tracking.  Cookies are small text files that the Internet browser stores on the user's computer. These cookies lose their validity after 30 days and are not used to personally identify the user.  If the user visits certain pages of this website and the cookie has not yet expired, both Google and we can recognize that the user clicked on the ad and was redirected to this page. 

Each Google AdWords customer receives a different cookie.  The cookies cannot be tracked across AdWords customers' websites.  The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted in to conversion tracking.  Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag.  However, they do not receive information that personally identifies users.  If you do not wish to participate in tracking, you can object to this use by easily deactivating the Google conversion tracking cookie via your internet browser under user settings.  You will then not be included in the conversion tracking statistics. 

The storage of conversion cookies is based on Art. 6 (1) lit. f GDPR.  The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. 

For more information on Google AdWords and Google Conversion Tracking, please see Google's privacy policy: https://policies.google.com/privacy. 

You can set your browser so that you are informed about cookies being set and only allow them in individual cases, forbid cookies from being accepted in certain cases or in general, and/or activate automatic deletion of cookies when closing the browser.  If you deactivate cookies, the functionality of this website may be limited.


Google reCAPTCHA

We use Google reCAPTCHA (hereinafter "reCAPTCHA") on our websites.  The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). 

The purpose of reCAPTCHA is to check whether data entry on our websites (e.g. in a contact form) is made by a human or by an automated program.  For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics.  This analysis starts automatically as soon as the website visitor enters the website.  To conduct the analysis, reCAPTCHA evaluates various data points (e.g. IP address, time spent on the website, or mouse movements made by the user).  The data collected during the analysis is forwarded to Google.  

reCAPTCHA analyses run completely in the background.  Website visitors are not notified that an analysis is taking place. 

Data processing is based on Art. 6 para. 1 lit. f GDPR.  The website operator has a legitimate interest in protecting its web offers from abusive automated spying and from SPAM.

For more information about Google reCAPTCHA and Google's privacy policy, please see the following links: https://policies.google.com/privacy?hl=en and https://www.google.com/recaptcha/intro/android.html. 


6. Newsletter


Newsletter data

If you would like to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the specified email address and agree to receive the newsletter.  Further data is not collected or only done so on a voluntary basis.  We use this data exclusively to send you the requested information and do not pass it on to third parties. 

The processing of the data entered in the newsletter registration form is based exclusively on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time to the storage of your data and the email address as well as their use for sending the newsletter; for example, you can click the "unsubscribe" link in the newsletter.  Revoking your consent does not affect the legality of processing data that was carried out until the time the revocation was submitted.

We will store the data you provide us for the purpose of receiving the newsletter us until you unsubscribe from the newsletter, and they will be deleted after you unsubscribe from the newsletter.  Data that we have stored for other purposes (e.g. email addresses for the members’ area) remains unaffected by this.


Sendinblue

This website uses Sendinblue to send newsletters.  The provider is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.  Sendinblue is a service with which sending the newsletter can be organized and analyzed.  The data you enter for the purpose of receiving newsletters (e.g. email address) is stored on Sendinblue’s servers in Germany. 

Our newsletters sent with Sendinblue allow us to analyze the behavior of newsletter recipients. Among other things, it can analyze how many recipients have opened the newsletter message and how often which link in the newsletter was clicked.  With the help of conversion tracking, it can also analyze whether a predefined action (e.g. purchase of a product on our website) took place after clicking on the link in the newsletter.  For more information on data analysis by Sendinblue newsletter, please visit https://www.sendinblue.com/features/.

The data processing is based on your consent (Art. 6 para. 1 lit. a GDPR).  You can revoke this consent at any time by unsubscribing from the newsletter.  Revoking your consent does not affect the legality of processing data that was carried out until the time the revocation was submitted.

If you do not want analysis by Sendinblue, you must unsubscribe from the newsletter.  For this purpose, we provide a corresponding link in every newsletter message.  Furthermore, you can also unsubscribe directly on the website. 

We will store the data you provide for the purpose of receiving the newsletter unless you unsubscribe from the newsletter, and they will then be deleted from our servers as well as from the servers of Sendinblue after you unsubscribe from the newsletter.  Data that we have stored for other purposes (e.g. email addresses for the members’ area) remains unaffected by this.

For more details, please see Sendinblue's privacy policy at: https://www.sendinblue.com/legal/privacypolicy/.

A contract for data processing

We have a contract with Sendinblue to process order-related data, and we fully implement the strict requirements of the German data protection authorities when using Sendinblue. 


7. Plugins and tools


YouTube

Our website uses plugins from the YouTube site operated by Google.  The operator of the page is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. 

When you visit one of our pages that has with a YouTube plugin, it creates a connection to YouTube servers.  This tells the YouTube server which of our pages you have visited. 

If you are logged into your YouTube account, you enable YouTube to link your surfing behavior directly to your personal profile.  You can prevent this by logging out of your YouTube account.

YouTube is used for the purpose of presenting our online offers appealingly.  This represents a legitimate interest as defined in Art. 6 para. 1 lit. f GDPR. 

For more information on how user data are handled, please refer to YouTube's privacy policy at: https://policies.google.com/privacy?hl=en. 


Vimeo

Our website uses plugins of the video portal Vimeo.  The provider is Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA. 

When you visit one of our pages equipped with a Vimeo plugin, a connection to the Vimeo servers is established.  In the process, the Vimeo server is informed which of our pages you have visited.  Vimeo also obtains your IP address.  This also applies if you are not logged in to Vimeo or do not have an account with Vimeo.  The information collected by Vimeo is transmitted to the Vimeo server in the US. 

If you are logged into your Vimeo account, you enable Vimeo to link your surfing behavior directly to your personal profile.  You can prevent this by logging out of your Vimeo account. 

For more information on the handling of user data, please see Vimeo's privacy policy at: https://vimeo.com/privacy. 


Google Web Fonts 

This page uses web fonts provided by Google so that fonts are displayed uniformly.  When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly. 

For this purpose, the browser you use must connect to Google's servers.  This enables Google to know that our website has been accessed via your IP address.  The use of Google Web Fonts serves the interest of a uniform and appealing presentation of our website.  This represents a legitimate interest as defined in Art. 6 para. 1 lit. f GDPR. 

If your browser does not support web fonts, a default font is used by your computer. 

For more information on Google Web Fonts, please visit https://developers.google.com/fonts/faq and see Google's privacy policy: https://www.google.com/policies/privacy/.


Google Maps 

This site uses the map service Google Maps via an API.  The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. 

Your IP address must be stored for you to use the functions of Google Maps.  This information is usually transferred to a Google server in the US and stored there.  The provider of this site has no influence on this data transmission. 

The use of Google Maps serves the purpose of making our website appealing and easily being able to locate the places we indicate on the website.  This represents a legitimate interest as defined in Art. 6 para. 1 lit. f GDPR. 

For more information on how Google handles user data, please see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.


8. Romantik Hotels privacy & identifying guests


To enable the booking of an arrangement, accommodations and / or an event contract or the purchase of gift vouchers or other services and goods, Romantik Hotels & Restaurants AG (hereinafter referred to as Romantik Hotels; address: Kaiserstr. 53, 60329 Frankfurt am Main, phone: [+49](0) 69 / 66 12 34-0, fax: [+49] (0) 69 / 66 12 34-56, email: datenschutz@romantikhotels.com, registry court Frankfurt am Main HRA 30092) will collect, process and use guests’ main data (first and last name, street address, email address, telephone number, etc.), information related to their stay (arrival / departure date), turnover figures, the IP address and other personal data that the Romantik guest has provided to the Romantik Hotels umbrella organization or to a Romantik Hotel or Romantik Restaurant listed under the Romantik Hotels & Restaurants AG umbrella organization (personal data).  Data from the individual Romantik Hotels will also be transmitted to Romantik Hotels & Restaurants AG and processed there. 


Please note: The above is a translation of an original document in German that has been provided as a courtesy. In all matters of interpretation, the German original takes precedence.