Privacy

Table of Contents
1)  Our privacy policy
2)  Informational use
3)  Use of cookies
4)  Optional elements
a) Basic functions
aa) Contact form
bb) Newsletter
cc) Registration option
b) Web analysis tools
aa) Google Analytics
c) Online marketing
aa) Google AdWords Conversion Tracking and Remarketing
d) Social Media
aa) Social plugins (Facebook, Twitter etc.)
e) Payment services aa) Credit card
f) Web design
aa) Google Fonts
bb) Typekit Fonts g) Other functions
aa) Google Maps bb) [Possibly others]
5)  Storage period
6)  Your rights
7) Additive

Here you will find information on how we handle your personal data during your visit to our website. The collection of your personal data is essential if we are to provide the functions and services of our website. In the following, we will explain what data concerning you we collect, why this is necessary and what rights concerning your data you have.
Controller of the processing of personal data on this website is

Hotel Maximilian OHG
Christina Lingenfelder
Marienstrasse 16
D-87645 Schwangau
Phone +49(0) 8362 9880
Fax +49(0) 8362 988410
Email: info@maximilian-appartements.de
Internet: www.maximilian-appartements.de

If you have any questions about privacy concerns, you can also contact our data protection officer at any time at info@ms-hotelmanagement.de

Informational use
If you use this website without otherwise transmitting data to us (e.g. by registering or using the contact form), we collect technically required data that are automatically transmitted to our server, including:

  • IP address
  • Date and time of the query
  • Request content
  • Access status/HTTP status code
  • Browser type
  • Language and version of the browser software
  • Operating system

This information is technically necessary for the display of our website to you. We also use the data to ensure the security and stability of our website. The legal grounds for the data collection are found in point (f) of Art. 6(1) GDPR.

Use of cookies
We use cookies to facilitate and improve the use of our website. Cookies are text information that is stored on a computer by the web browser during the visit to a website. It is used to recognise a session — when, for example, a user permanently logs in to a website or uses the shopping cart function of an online shop.
Most web browsers accept cookies automatically. You can delete stored cookies at any time in the settings of your web browser. You can change the settings in your browser to prevent the storage of any cookies. This setting may limit the availability of some of the functions on our website.

Our privacy policy

Hotel Maximilian OHG
Marienstrasse 16
D-87645 Schwangau

Contact form
You can use a contact form on our website to provide personal data. When you use the contact form, we collect and store the data you enter in the entry mask (e.g. surname, first name, email address). They will not be disclosed to third parties.
The legal grounds for the data processing when consent has been given are found in point (a) of Art. 6(1) GDPR. If your enquiry serves to prepare the conclusion of a contract, further legal grounds are provided in point (b) of Art. 6(1) GDPR.
We use the data solely and exclusively to process and answer your enquiry.

Newsletter
You can subscribe to a newsletter on our website. When you subscribe to the newsletter, we collect and store the data you enter in the entry mask (e.g. surname, first name, email address). They will not be disclosed to third parties. Subscription to the newsletter is possible solely with your consent. The legal grounds for the data processing are found in point (a) of Art. 6(1) GDPR. We use these data solely and exclusively to send our newsletters.
For the subscription we need your email address and your consent to receive our newsletter through ADDITIVE, our provider for hotel e mail marketing. To provide you with relevant information we also gather and process voluntary information concerning interests, name, date of birth and country/region of origin  in our hotel newsletter tool.
After signing up for our newsletter you will receive an email containing a link to confirm the subscription.

Your subscription can be cancelled any time by clicking on the cancellation link in the respective newsletter.

To process your subscriptions and to send our newsletters we use software provided by ADDITIVE Srl, 39011 Lana (BZ), Italy (“ADDITIVE”). Through the use of these services and systems your data will be processed and stored, at least in part, also outside of the EU or the EEC. The adequate level of data protection is based on data processing agreements.

Registration option
You can register on our website. When you register, we collect and store the data you enter in the entry mask (e.g. surname, first name, email address). They will not be disclosed to third parties.
The legal grounds for the data processing when consent has been given are found in point (a) of Art. 6(1) GDPR. If your enquiry serves to prepare the conclusion of a contract, further legal grounds are provided in point (b) of Art. 6(1) GDPR.
Your registration is required for the use of certain contents and services on our website or for the fulfilment of a contract or for the conduct of precontractual measures.
Accommodation contract, preparation of offers, etc.

Google Analytics
We use Google Analytics to analyse and improve the use of our website. Google Analytics is a web analysis service of Google, Inc. (“Google"). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that permit an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. If the IP anonymisation is activated on this website, however, your IP address will be truncated beforehand by Google within the member states of the European Union or in other member states of the Treaty on the European Economic Area. The complete IP address will be transmitted to a Google server in the USA and truncated there solely in exceptional cases. Google will use this information on behalf of the operator of this website to analyse your use of the website, to compile reports on the website activities and to provide other services associated with the use of the website and the internet to the website operator. Legal grounds for the processing of data with the aid of Google Analytics is point (f) of Art. 6(1) GDPR. The IP address transmitted by your browser by Google Analytics will not be attributed to any other data held by Google.
You can prevent the storage of cookies by making the appropriate settings in your browser software; please note, however, that you may not be able to use fully all functions of this website in this case. You can also prevent the data generated by the cookie about your use of the website (including your IP address) from being collected and processed by Google by downloading and installing the browser plugin available at the following link:
http://tools.google.com/dlpage/gaoptout?hl=de
We use Google Analytics with the extension “_anonymizeIp()”, which truncates the IP addresses (so-called IP masking). An attribution to specific persons can be precluded by this means. Google participates in the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework, with the consequence that there is an adequate level of data protection even in the exceptional cases in which Google transfers personal data to the USA.
Information about Google: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001
More information on Google's terms of use: www.google.com/analytics/terms/de.html
More information on Google's privacy policy:
www.google.com/intl/de/analytics/privacyoverview.html

Use of Google Analytics in compliance with data protection regulations
1)  Privacy policy
The privacy policy must contain information about the use of Google Analytics and refer to the option to object (see above), i.e. the option to opt out using the following link:
tools.google.com/dlpage/gaoptout?hl=en
2)  Opt-out solution for mobile use
If the website is accessed using browsers that do not allow a regular opt-out as in point 1), a separate opt-out solution must be developed. This can be the case when viewing websites on mobile devices.
Technical information from Google on this subject can be found here (depending on the implementation): developers.google.com/analytics/devguides/collection/gajs/?hl=en#disable developers.google.com/analytics/devguides/collection/analyticsjs/user-opt-out?hl=en
3)  Anonymisation of IP addresses
The truncation of IP addresses must be activated (function “_anonymizeIp()”).
4)  Agreement for data processing with Google
The conclusion of an agreement concerning data processing with Google is required. A template is so far available only for the Federal Data Protection Act [Bundesdatenschutzgesetz; BDSG]: static.googleusercontent.com/media/www.google.com/de//analytics/terms/de.pdf
5)  Deletion of unlawfully collected legacy data
The legacy data collected before the fulfilment of requirements 1)–4) must be deleted. Practically speaking, this can be achieved solely by deleting the existing Google Analytics profile.

We use Google AdWords to display advertisements to you on Google and other third-party websites. Conversion tracking enables us to determine how successful specific advertising measures are. Our purpose in tracking this information is to show you advertising that is of interest to you and to make our website more interesting for you. The legal grounds for the processing of your data are found in point (f) of Art. 6(1) GDPR.
Google uses so-called “ad servers” to send the advertising to you. For this purpose, we use cookies that can measure certain parameters for determining success such as display of the ads or clicks by users. If and when you are directed to our website from a Google advertisement, Google AdWords places a cookie on your computer. These cookies usually lose their validity after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie.
Such cookies enable Google to recognise your internet browser. If and when users visit certain pages on the website of an AdWords customer and the cookie has not yet expired, Google and the customer can recognise that the users clicked on the advertisement and were directed to this page. A different cookie is assigned to each Google AdWords customer, so cookies cannot be traced across the websites of AdWords customers. We ourselves do not collect and process any personal data for the aforementioned advertising measures. We receive solely statistical analyses from Google. Based on these analyses, we can see which of the advertising measures we have used are especially effective. We do not receive any further data from the use of the advertising; in particular, we cannot use this information to identify users.
The marketing tools that are used cause your browser to establish automatically a direct connection to Google servers. We have no control over the scope and further use of the data collected by Google and can pass on information to you solely according to our own knowledge. Thanks to the integration of AdWords conversion tracking, Google receives the information that you have accessed a part of our website or clicked on one of our advertisements. If you are registered with a Google service, Google can attribute the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will obtain and store your IP address.
You can prevent the storage of cookies by making the appropriate settings in your browser software; please note, however, that you may not be able to use fully all functions of this website in this case. You can also prevent the data generated by the cookie about your use of the website (including your IP address) from being collected and processed by Google by downloading and installing the browser plugin available at the following link:
http://www.google.com/settings/ads/plugin

Google AdWords Remarketing
We use Google AdWords Remarketing. This application can result in your being shown our advertisements on other websites after you visit our website. This is achieved by storing cookies in your browser that enable Google to capture and analyse your use behaviour during your visits to various websites. Google can therefore determine your previous visit to our website. According to its own statements, Google does not combine the data collected in the course of remarketing with your personal data that may be stored by Google. In particular, according to Google, pseudonymisation is used in remarketing.

Social plugins
We currently use the following social media plugins: Facebook, Google+, Twitter, Xing, T3N, LinkedIn. Personal data are transmitted to and stored at the plugin provider in each case with the aid of a button.
The plugin provider stores the data collected about you as a use profile and uses it for the purpose of advertising, market research and/or to design its website to meet the needs of users. This type of analysis is carried out particularly for the display of advertisements appropriate to your needs (even for users who are not signed in) and to notify other users of the social network about your activities on our website. You have a right to object to the creation of this user profile, but you must contact the specific plugin provider to exercise this right. The plugins give you the opportunity to interact with the social networks and other users so that we can improve our content and make it more interesting to you as a user. The legal grounds for the use of the plugins are found in point (f) of Art. 6(1) GDPR.
The data is forwarded regardless of whether you have an account with the plugin provider and are logged in there. If you are logged in with the plugin provider, your data that we collect are attributed directly to your account with the plugin provider. In the case of US providers, transmission takes place in the USA; these providers have accepted the EU-US Privacy Shield: www.privacyshield.gov/EU-US-Framework
Further information concerning the purpose and scope of data collection and its processing by the plugin provider can be found in the privacy policies of these providers shown below. You also obtain additional information here about your rights and settings options to protect your privacy:
•Facebook, Inc., 1601 S California Ave, Palo Alto, California 94304, USA www.facebook.com/policy.php
•Google, Inc., 1600 Amphitheater Parkway, Mountain View, California 94043, USA www.google.com/policies/privacy/partners/?hl=de
•Twitter, Inc., 1355 Market St., Suite 900, San Francisco, California 94103, USA twitter.com/privacy
•Xing AG, Gänsemarkt 43, 20354 Hamburg, DE; http://www.xing.com/privacy
•T3N, yeebase media GmbH, Kriegerstr. 40, 30161 Hanover, Germany;
t3n.de/store/page/datenschutz
•LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; www.linkedin.com/legal/privacy-policy

Payment by credit card
You can use your credit card to make payments on our website. Payment data will be transferred to [missing text], Josef-Brandstätter-Strasse 2b, 5020 Salzburg, Austria, for processing of the payment. The legal grounds for the processing of your data are found in point (f) of Art. 6(1) GDPR.
[Missing text] collects information about the transaction as well as other information related to the transaction such as information about goods/services, financial information, information about the interaction between you and Hobex AG, including
payment instrument information, device-related information and location data. Hobex AG uses the data, among other things, for payment processing, for credit checks and for monitoring and improving its services.
Details on data processing and the purposes of the processing can be found in the privacy policy of:
hobex AG, Josef-Brandstätter-Strasse 2b, 5020 Salzburg
Company Register number: FN 37265 b, Company Register court: Salzburg Regional Court
VAT ID: ATU35185508, DVR [Data Processing Register]: 0660868
Licensed payment institute pursuant to section 1 Payment Services Act
Identification number: 1637630, institute code: 94602 ZI
Competent supervisory authority
Financial Market Authority (Banking Supervision Division), Otto-Wagner-Platz 5, 1090 Vienna, Austria
https://www.hobex.at/de/kontakt/impressum/
https://www.hobex.at/de/

Google Maps
We use Google Maps on our website. The application enables us to display interactive maps directly on our website and provide a convenient way for you to use the map function. When you use Google Maps, data, including your IP address and other data, are transmitted to Google in the USA.
You can prevent the transmission of data to Google by deactivating JavaScript in your browser settings. In this case, however, you will not be able to use Google Maps on our website.
The legal grounds for the processing of your data are found in point (f) of Art. 6(1) GDPR. Google participates in the EU-US Privacy Shield: www.privacyshield.gov/EU-US-Framework
Information about Google:
Google Inc., 1600 Amphitheater Parkway, Mountain View, California 94043, USA More detailed information about Google’s terms of service: www.google.com/analytics/terms/de.html
More detailed information about Google's privacy policy: www.google.com/intl/de/analytics/privacyoverview.html
More detailed information about Google Maps’ terms of service: www.google.com/intl/de_US/help/terms_maps.html

Use of Google Fonts
We use Google Fonts on our website, which enables us to integrate certain fonts into our website. Google uses servers in the USA to provide these fonts. When someone accesses our website, the visitor’s web browser establishes a direct connection to these servers. At this time, the visitor’s IP address and other information are transmitted to Google and stored there. Google participates in the EU-US Privacy Shield: www.privacyshield.gov/EU-US-Framework
More information about Google: Google Inc, 1600 Amphitheater Parkway, Mountain View, California 94043, USA
Further information on privacy at Google: https://www.google.com/policies/privacy/

Use of Typekit fonts
We use Typekit Fonts on our website, which enables us to integrate certain fonts into our website. Adobe uses servers in the USA to provide these fonts. When someone accesses our website, the visitor’s web browser establishes a direct connection to these servers. At this time, the visitor’s IP address and other information are transmitted to Adobe and stored there. Adobe participates in the EU-US Privacy Shield: www.privacyshield.gov/EU-US-Framework
More information about Adobe: Adobe Systems Incorporated, 45 Park Avenue, San Jose, California 95110, USA
Further information on privacy when using Typekit: https://www.adobe.com/de/privacy/policies/typekit.html

Use of the online booking tool DIRS21 of TourOnline AG
Our online site uses the online booking tool DIRS21 (hereinafter “OBT”) of the company TourOnline AG, Borsigstrasse 26, 73249 Wernau, Germany (www.dirs21.de, hereinafter “TOAG”) to enable online bookings of accommodation services and other travel services and to process enquiries.  Within the framework of OBT, TOAG acts in the role of the controller to process the data. You can find the remarks and provisions on privacy in TOAG’s privacy policy regarding OBT, which you can view at any time from within OBT or at www.dirs21.de/datenschutz.Storage period
We process and store your data solely for as long as is necessary for the processing or for compliance with legal obligations. Once the purpose of the processing has been fulfilled, your data are blocked or erased. If there are additional legal retention obligations, we will block or erase your data upon expiry of the legal storage periods.

Your rights

 You have the following legal rights in the relationship to us with regard to the personal data concerning you:

  1. Right of access
    You have the right to request confirmation as to whether we are processing personal data concerning you. If this is the case, you have the right to be informed about this personal data and to further information, e.g. the purposes of the processing, the recipients and the planned duration of storage or the criteria for determining the duration.
  2. Right to rectification and completion
    You have the right to request the rectification of inaccurate data without delay. You have the right to request the completion of incomplete data in consideration of the purposes of the processing.
  3. Right to erasure (“right to be forgotten”)
    You have a right to erasure of the data insofar as the processing is not necessary. This is the case, for example, if your data are no longer required for the original purposes, you have withdrawn your declaration of consent under data protection law or the data were processed unlawfully.
  4. Right to restrict processing
    You have a right to restrict processing, e.g. if you believe that the personal data are inaccurate.
  5. Right to data portability
    You have the right to receive the personal data concerning you in a structured, common and machine-readable format.
  6. Right to object
    You have the right to object at any time, on grounds relating to your particular situation, to the processing of certain personal data concerning you.
    In the case of direct marketing, you as the data subject have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing; this also applies to profiling insofar as it is related to such direct marketing.
  7. Right to withdraw your consent under data protection law
    You can withdraw your consent to the processing of your personal data at any time with effect for the future. However, the withdrawal is without prejudice to the lawfulness of the processing carried out prior to the withdrawal.
    In addition, you can lodge a complaint with a data protection supervisory authority at any time if, for example, you are of the opinion that the data processing does not comply with data protection regulations.

Additive

ADDITIVE+ LANDINGPAGE -  Online Marketing and Landing Pages
Beside our website we do also operate optimized landing pages for means of hotel online marketing. To process your request, reservation, order, activation, registration or the transmission of other contact forms on our website as well as to save and store your data we use cloud services, CRM systems and software provided by ADDITIVE Srl, 39011 Lana (BZ), Italy (“ADDITIVE”), our partner in the field of hotel digital marketing. The adequate level of data protection is based on data processing agreements with the respective company.
Our landing pages use Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics enables website operators to analyse the user behavior of the visitors. The information about the user behavior is transmitted to and stored by Google on its servers.
Your IP address is collected but immediately anonymised (for example by deleting the last 8 bits). As a result the geolocation data is less accurate.
You can prevent the data collection connected to your use of our online services through cookies and the processing of this data by Google, by installing the browser-plugin available at the following link:
https://chrome.google.com/webstore/detail/google-analytics-opt-out/fllaojicojecljbmefodhfapmkghcbnh

ADDITIVE has an insight into data gathered through Google Analytics. This data will be used only to analyse the use of our websites and to evaluate our marketing and distribution strategies.
Our website and landing pages also use functions provided by ADDITIVE for the multi-channel monitoring of the use of our websites as well as marketing and distribution strategies like landing pages, newsletter and social media presence. Information about your visits and submitted forms on our websites are also transmitted to ADDITIVE in order to evaluate and optimize our marketing and sales measures.
The data processing takes place in accordance with the requirements of art. 6 para. 1 lit f (legitimate interests) of the GDPR.
Our objective in accordance with the GDPR (legitimate interests) is the improvement of our products and services and our web presence through the analysis of the use of our website as well as marketing and distribution strategies.
Our website and our landing pages also use remarketing functions provided by Google Inc. (“Google”) and by Meta Platforms Inc. (“Meta”). Therefore, Meta and Google will know that you have visited our website. This way visitors of our website and of our landing pages will find ads adapted to their interests on Google’s advertising platforms and on the social media platforms Facebook and Instagram.
The data processing takes place in accordance with the requirements of art. 6 para. 1 lit a (consent) of the GDPR.
When you visit our landing pages a banner will inform you about the use of cookies for remarketing functions. If you continue using the website or click on the respective button you consent to the use of cookies. You can deny your consent anytime, by visiting the page containing the cookie information and denying the use in the banner that will be displayed.

ADDITIVE+ MARKETING AUTOMATION - Direct Marketing
In order to increase customer loyalty and to sell our services and additional services we use hotel online marketing software provided by ADDITIVE Srl, 39011 Lana (BZ), Italy (“ADDITIVE”) within the field of hotel marketing automation.
Therefore your data, which we gather and process in connection with your request, reservation, order, activation, registration or the transmission of other contact forms on our website, will be analysed and used to provide you with automatically generated offers for our services and additional services. Through the use of these services and systems your data will be processed and stored, at least in part, also outside of the EU or the EEC. The adequate level of data protection is based on data processing agreements.
You can deny the use of your data for this purpose anytime by clicking on the “unsubscribe” link in the respective message.
The data processing takes place in accordance with the requirements of art. 6 para. 1 lit f (legitimate interests) of the GDPR.
Our objective in accordance with the GDPR (legitimate interests) is the prevention of competitive disadvantages, the increase in brand awareness and the maximisation of our economic success through an optimal use of the acquired contacts.

ADDITIVE+ VOUCHERS
On our website you have the possibility to buy vouchers by using the integrated voucher software. To process your purchase and to save and store your data we use software provided by ADDITIVE Srl, 39011 Lana (BZ), Italy (“ADDITIVE”) in the context of voucher marketing. Through the use of these services and systems your data will be processed and stored in the EU.
The data you provide is required to fulfil the contract or to carry out pre-contractual measures. Without this data we cannot conclude a contract with you. The data will not be transferred to an outside third party, except for your credit card data which will be transferred to the payment provider and to our tax accountant to fulfil our tax obligations.
The data processing takes place in accordance with the requirements of art. 6 para. 1 lit a (consent) and/or lit b (processing necessary for the performance of a contract) of the GDPR.