82418 Murnau am Staffelsee
1 Information about the collection of personal data
In the following, we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior.
Responsible person according to Art. 4 para. 7 EU General Data Protection Regulation (DSGVO) is:
Alpenhof Murnau - Hotelgesellschaft mbH
Ramsach Street 8
You can reach our data protection officer at:
Alpenhof Murnau - Hotelgesellschaft mbH
Ramsach Street 8
c/o ER Secure GmbH
in the Knackenau 4, 82031 Grünwald
When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, name and telephone number, if applicable) will be stored by us in order to answer your questions. We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are legal retention obligations. The legal basis for the processing of data transmitted in the course of sending an e-mail or contacting us via a contact form is Art. 6 (1) lit. f DSGVO. If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) lit. b DSGVO.
If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. In doing so, we will also state the defined criteria for the storage period.
2 Your rights
You have the following rights vis-à-vis us regarding the personal data concerning you:
- Right of access,
- Right to rectification or deletion,
- Right to restriction of processing,
- Right to object to processing,
- right to data portability.
You also have the right to complain to a data protection supervisory authority about our processing of your personal data.
3 Collection of personal data when visiting our website
In the case of mere informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 p. 1 lit. f DSGVO):
- IP address
- Date and time of the request
- Time zone difference from Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transferred in each case
- Website from which the request comes
- Operating system and its interface
- Language and version of the browser software.
In addition to the previously mentioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which the body that sets the cookie (here by us), certain information flows. Cookies cannot execute programs or transfer viruses to your computer. They serve to make the Internet offer as a whole more user-friendly and effective.
a) This website uses the following types of cookies, the scope and functionality of which are explained below:
- Transient cookies (for this purpose b)
- Persistent cookies (c).
b) Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies. These store a so-called session ID, with which various requests of your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
c) Persistent cookies are deleted automatically after a specified period of time, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
d) You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all functions of this website.
f) The Flash cookies used are not collected by your browser, but by your Flash plug-in. Furthermore, we use HTML5 storage objects that are stored on your terminal device. These objects store the required data independently of the browser you are using and have no automatic expiration date. If you do not want Flash cookies to be processed, you must install an appropriate add-on, such as "Better Privacy" for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or the Adobe Flash Killer Cookie for Google Chrome. You can prevent the use of HTML5 storage objects by using private mode in your browser. We also recommend that you regularly delete your cookies and browser history manually.
4 Other functions and offers of our website
In addition to the purely informational use of our website, we offer various services that you can use if you are interested. For this purpose, you usually have to provide further personal data, which we use to provide the respective service and for which the aforementioned data processing principles apply.
In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.
Furthermore, we may pass on your personal data to third parties if we offer promotions, competitions, contracts or similar services together with partners. You will receive more information on this when you provide your personal data or below in the description of the offer.
If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the offer.
5 Objection or revocation against the processing of your data
If you have given your consent to the processing of your data, you may revoke this consent at any time. Such revocation affects the permissibility of processing your personal data after you have expressed it to us.
Insofar as we base the processing of your personal data on the balance of interests, you may object to the processing. This is the case if the processing is not necessary, in particular, for the performance of a contract with you, which is shown by us in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will review the situation and either discontinue or adjust the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.
(3) Of course, you can object to the processing of your personal data for purposes of advertising and data analysis at any time. You can inform us of your advertising objection using the following contact details:
Alpenhof Murnau - Hotelgesellschaft mbH
6 Newsletter & direct mail
With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.
For the subscription to our newsletter we use the so-called double-opt-in procedure. This means that after your registration, we will send you an e-mail to the e-mail address you provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your respective IP addresses used and times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.
The only mandatory information for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and will be used to address you personally. After your confirmation, we store your e-mail address for the purpose of sending the newsletter. The legal basis is Art. 6 para. 1 p. 1 lit. a DSGVO.
You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in each newsletter email, by email to firstname.lastname@example.org or by sending a message to the contact details provided in the imprint.
We reserve the right to send our guests offers from our range of services as direct advertising by e-mail. Our legitimate interest in carrying out direct advertising is to be able to offer our guests target group-oriented individual offers, which are created on the basis of a previous booking (transaction) or the existing customer relationship.
We can process your personal data, which you provide when making a booking with us, for sending direct advertising within 12 months after a past transaction. If you do not make a new booking or do not make another transaction within this period, your personal data will no longer be processed for the purpose of direct marketing and will be deleted accordingly, unless you have subscribed to a newsletter or your personal data must continue to be stored due to other regulations.
The sending of e-mails, which are related to an existing booking and may also have an advertising character, is carried out by means of "Revinate", an e-mail marketing service of the US provider Revinate, Inc., 1 Letterman Dr., Building C, Suite CM100, San Francisco, CA 94129, USA. The e-mail addresses and names of our guests, as well as their other data described in this notice, are stored on Revinate's servers in the USA. Revinate uses this information to send and evaluate the newsletters on our behalf and to optimize or improve its own services (e.g. to technically optimize the dispatch and presentation of the newsletters). When you open the newsletter, technical information, such as information about the browser and your system, as well as your IP address and the time of the retrieval are initially collected via a so-called "web beacon". This information is used to improve the services based on the technical data or the target groups and their reading behavior based on the retrieval locations (which can be determined using the IP address) or the access times. We have concluded an order processing agreement with Revinate in accordance with Art. 28 DSGVO to oblige Revinate to maintain an adequate level of data protection.
The legal basis for sending advertising emails as well as advertising by mail is our legitimate interest according to Art. 6 para. 1 letter f DSGVO in compliance with the provisions of § 7 para. 3 UWG (German law against unfair competition). The sending of promotional e-mails is therefore only carried out if you have already been a guest with us, i.e. have actually received hotel services. You can object to the receipt of the newsletter at any time for the future. To do so, please send an e-mail to email@example.com. You will also find a link to cancel the newsletter at the end of each newsletter. After successful objection, you will not receive any further promotional e-mails from us
7 Use of the comment functions
You can make public comments on certain offers on our website. Your comment will be published with your specified username at the post. We recommend using a pseudonym instead of your real name. The specification of user name and e-mail address is required, all other information is voluntary. If you post a comment, we will continue to store your IP address, which we will delete after one week. The storage is necessary for us to be able to defend ourselves against liability claims in cases of possible publication of illegal content. We need your e-mail address to contact you if a third party should object to your comment as unlawful. Legal bases are Art. 6 para. 1 p. 1 lit. b and f DSGVO. Comments are not checked before publication. We reserve the right to delete comments if they are objected to by third parties as unlawful.
8 Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.
This website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are processed in abbreviated form, which means that personal references can be ruled out. Insofar as the data collected about you has a personal reference, this is therefore immediately excluded and the personal data is deleted immediately.
We use Google Analytics to analyze and regularly improve the use of our website. The statistics obtained allow us to improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 para. 1 p. 1 lit. f DSGVO.
Third Party Provider Information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User Terms:
This website also uses Google Analytics for cross-device analysis of visitor flows, which is performed via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under "My data", "Personal data".
9 Use of social media plug-ins
We currently use the following social media plug-ins: Facebook, Instagram, Google+, Twitter. We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can recognize the provider of the plug-in by the marking on the box above its initial letter or logo. We open up the possibility for you to communicate directly with the provider of the plug-in via the button. Only if you click on the marked box and thereby activate it, the plug-in provider receives the information that you have accessed the corresponding website of our online offer. In addition, the data mentioned under § 3 of this declaration will be transmitted. In the case of Facebook, according to the respective providers in Germany, the IP address is anonymized immediately after collection. By activating the plug-in, personal data is therefore transmitted from you to the respective plug-in provider and stored there (in the case of US providers, in the USA). Since the plug-in provider collects the data in particular via cookies, we recommend that you delete all cookies via your browser's security settings before clicking on the grayed-out box.
We have neither influence on the collected data and data processing operations, nor are we aware of the full scope of data collection, the purposes of processing, the storage periods. We also have no information on the deletion of the collected data by the plug-in provider.
The plug-in provider stores the data collected about you as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Via the plug-ins, we offer you the opportunity to interact with the social networks and other users, so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 p. 1 lit. f DSGVO.
The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, the data we collect is directly assigned to your account with the plug-in provider. If you click the activated button and link to the page, for example, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this allows you to avoid an assignment to your profile with the plug-in provider.
For more information on the purpose and scope of data collection and processing by the plug-in provider, please refer to the data protection declarations of these providers provided below. There you will also find further information on your rights in this regard and setting options for protecting your privacy.
Addresses of the respective plug-in providers and URL with their privacy notices:
[Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; www.facebook.com/policy.php; weitere Informationen zur Datenerhebung: www.facebook.com/help/186325668085084, www.facebook.com/about/privacy/your-info-on-other, sowie www.facebook.com/about/privacy/your-info;
Facebook hat sich dem EU-US-Privacy-Shield unterworfen,www.privacyshield.gov/EU-US-Framework.
Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; www.google.com/policies/privacy/partners/;
Google hat sich dem EU-US-Privacy-Shield unterworfen, www.privacyshield.gov/EU-US-Framework.
Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; twitter.com/privacy.
Twitter hat sich dem EU-US-Privacy-Shield unterworfen, www.privacyshield.gov/EU-US-Framework.
10 YouTube video integration
We have integrated YouTube videos into our online offer, which are stored on www.YouTube.com and can be played directly from our website. These are all integrated in "extended data protection mode", which means that no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos, the data mentioned in paragraph 2 are transmitted. We have no influence on this data transmission.
By visiting the website, YouTube receives the information that you have accessed the corresponding sub-page of our website. In addition, the data mentioned under § 3 of this declaration are transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
11 Integration of Google Maps
On this website we use the offer of Google Maps. This allows us to show you interactive maps directly on the website and enables you to comfortably use the map function.
By visiting the website, Google receives the information that you have called up the corresponding sub-page of our website. In addition, the data mentioned under § 3 of this declaration are transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
12 Use of Google Adwords Conversion
We use the offer of Google Adwords to draw attention to our attractive offers with the help of advertising media (so-called Google Adwords) on external websites. We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. In this way, we pursue the interest of displaying advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.
These advertising materials are delivered by Google via so-called "ad servers". For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as display of the ads or clicks by users, can be measured. If you access our website via a Google ad, Google Adwords will store a cookie on your PC. These cookies usually lose their validity after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie.
These cookies enable Google to recognize your internet browser. If a user visits certain pages of the website of an Adwords customer and the cookie stored on his computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Adwords customer. Cookies can therefore not be tracked via the websites of Adwords customers. We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media; in particular, we cannot identify users on the basis of this information.
Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of AdWords Conversion, Google receives the information that you have called up the relevant part of our website or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is the possibility that the provider learns your IP address and stores it.
You can prevent participation in this tracking process in various ways: a) by setting your browser software accordingly, in particular suppressing third-party cookies will result in you not receiving ads from third-party providers; b) by disabling cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com", www.google. de/settings/ads, deleting this setting when you delete your cookies; c) by disabling the interest-based ads of the providers that are part of the self-regulatory campaign "About Ads" via the link www.aboutads.info/choices, deleting this setting when you delete your cookies; d) by permanently disabling them in your Firefox, Internetexplorer or Google Chrome browsers at the link www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all functions of this offer to their full extent.
The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. f DSGVO.
Further information on data protection at Google can be found here: www.google.com/intl/de/policies/privacy and services.google.com/sitestats/en.html. Alternatively, you can visit the Network Advertising Initiative (NAI) website at www.networkadvertising.org. Google has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.
In addition to Adwords Conversion, we use the Google Remarketing application. This is a procedure with which we would like to address you again. Through this application, our advertisements can be displayed to you during your further internet use after visiting our website. This is done by means of cookies stored in your browser, which Google uses to record and evaluate your usage behavior when you visit various websites. In this way, Google can determine your previous visit to our website. According to its own statements, Google does not combine the data collected in the course of remarketing with your personal data, which may be stored by Google. In particular, according to Google, pseudonymization is used in remarketing.
14 Facebook Custom Audiences
Furthermore, the website uses the remarketing function "Custom Audiences" of Facebook Inc. ("Facebook"). This allows users of the website to be shown interest-based advertisements ("Facebook ads") when visiting the Facebook social network or other websites that also use this procedure. We thereby pursue the interest of displaying advertisements that are of interest to you in order to make our website more interesting for you.
Due to the marketing tools used, your browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and further use of the data collected by Facebook through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of Facebook Custom Audiences, Facebook receives the information that you have accessed the corresponding web page of our website, or clicked on an ad from us. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, there is a possibility that the provider will learn and store your IP address and other identifiers.
Deactivation of the "Facebook Custom Audiences" function is available for logged-in users at www.facebook.com/settings/.
The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. f DSGVO.
For more information on data processing by Facebook, please visit www.facebook.com/about/priva
15 Social Wall
We have integrated a social wall from Juicer on our website. The Juicer system offers the possibility to display social media activities bundled in a social feed and to integrate it as a social wall on the website. It is possible to integrate posts from Instagram, Twitter and numerous other social media channels based on hashtags or, alternatively, to display all posts from an account (Instagram, Twitter, etc.) on the social wall. The Social Wall can be accessed by anyone, including people who are not logged into Instagram, Twitter, etc. Juicer's operating company is Juicer.io, 1515 7th Street, #424, Santa Monica, CA 90403.
Juicer and third-party service providers that partner with Juicer operate in an EU GDPR compliant manner. The GDPR was designed to give users more information and better protect user data. Juicer has not at any time, and will not at any time:
16 Purchase of a voucher via the website
On our website there is the possibility to buy vouchers. If a user takes advantage of this option, the data entered in the input mask is transmitted to us and stored. These data are: Salutation/company, first name, last name, date of birth, e-mail address, address, telephone/fax, voucher value, wishes, payment data, password for individual user account. If you make a voucher value from our websites, this is done through the online ordering platform of INCERT eTourismus Gmbh & Co KG, Leonfeldner Straße 328, A-4040 Linz, Austria. All order data entered by you will be transmitted in encrypted form. INCERT is committed to handling your transmitted data in accordance with data protection regulations. INCERT takes all organizational and technical measures to protect your data. In this context, the data will not be passed on to third parties. The data will be used exclusively for processing the booking and for communication.
The legal basis for the processing of the data is the conclusion of a purchase contract with the user pursuant to Art. 6 (1) lit. b DSGVO.
The processing of the personal data from the input mask serves us solely for the processing of the voucher purchase and the handling of payment transactions.
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of a contractual relationship, we will delete the data received as soon as national, commercial law, statutory or contractual retention requirements have been fulfilled.
The user has the possibility to object to the processing of his personal data at any time. For this purpose we have the e-mail address
17 Feedback requests
We have commissioned CA Customer Alliance GmbH, Ullsteinstr.130, 12109 Berlin ("Customer Alliance") to query your satisfaction when you have used our services. For this purpose, we provide Customer Alliance with your contact data and information on the contractual relationship (e.g. duration of stay) with the order to query your satisfaction with our services (e.g. a rating) via e-mail. The result is then made available to us by Customer Alliance and may be made publicly available. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f DSGVO, namely our legitimate interest in improving our offer through your feedback.
Our website also integrates a plugin from Customer Alliance that enables the display of ratings.
The legally correct transfer and processing of the data at Customer Alliance is governed by an order processing agreement. Further information on the processing of your data at Customer Alliance can be found in the data protection provisions of Customer Alliance.
18 THN The Hotels Network