Privacy

At Sensation Hotels, we place great importance on protecting your personal data. We handle your personal information confidentially and in compliance with applicable legal requirements. This Privacy Policy outlines how we process your personal and other usage data that we receive from you.

Data Controller
Sensation Hotels
Johannes Fritz Groebler
Czernyring 40
69115 Heidelberg
Email: mail@sensationhotels.com
Phone: +49 621 490 7670

Personal Data
Personal data refers to specific information about the personal or material circumstances of an identifiable individual. This includes details such as your name, address, phone number, and date of birth. We collect, process, and use your personal data solely for the purposes for which you have provided it to us. Your personal data will not be shared with third parties without your explicit consent, except where we are legally obligated to do so.

Usage Data
Each web server automatically logs website visits. When you visit our website, our web server temporarily stores each access in a log file (server log files). The following data is collected and stored until automated deletion:

  • IP address of the requesting device
  • Date and time of access
  • Name and URL of the accessed file
  • Data volume transferred
  • Notification of whether the request was successful
  • Browser and operating system identification data
  • Website from which the access originated
  • Name of your internet service provider

Processing this data enables website usage (connection setup) and serves system security, technical network infrastructure administration, and website optimization.

Our web server is configured to automatically delete log files every 14 days. However, we reserve the right to extend the storage duration of log files or individual IP addresses (manually or automatically) temporarily, if justified by security concerns.

The recipient of this data is our web hosting provider. No data is transferred to third countries. The legal basis for temporarily storing this data and the log files is Article 6(1)(f) GDPR.

Content and Services from Third Parties
Our website may include content, services, and offerings from other providers that enhance our website. Examples include Google Maps, YouTube videos, or third-party graphics. Accessing these services often requires the transmission of your IP address. This allows these third-party providers to recognize and store your IP address.

We strive to include only third-party providers that use IP addresses solely for delivering their content. However, we cannot control whether third-party providers store IP addresses. This storage may, for example, serve statistical purposes. Should we become aware of such practices, we will inform our users immediately.

Please also review the specific privacy policies of the individual third-party providers and services we use on our website. Additional information can be found at:

Cookies
Our website uses cookies. Cookies are text files stored in or by the web browser on the user’s computer system. When a user visits a website, a cookie can be saved on the user’s operating system. These cookies contain a unique sequence of characters that allows the browser to be identified when the website is revisited. We use cookies to make our website more user-friendly. Some elements of our site require the browser to be recognized even after navigating between pages. The session ID is stored and transmitted in the cookies. When visiting our website, users are informed about the use of cookies for analysis purposes, and their consent is obtained for processing personal data in this context. Users are also directed to this privacy policy. The legal basis for processing personal data using technically necessary cookies is Article 6(1)(f) GDPR. The purpose of using technically necessary cookies is to simplify website use for users. Some features of our website cannot function without cookies, as they require the browser to be recognized after a page change. We use cookies for the following purposes:

  1. Remembering page visits
  2. Storing language preferences

These purposes also constitute our legitimate interest in processing personal data under Article 6(1)(f) GDPR. Data collected by technically necessary cookies is not used to create user profiles.

Cookies are stored on the user’s computer and transmitted to our website. As the user, you have full control over the use of cookies. By adjusting your browser settings, you can disable or restrict the transmission of cookies. Cookies that are already stored can be deleted at any time, either manually or automatically. If cookies for our website are disabled, some functions of the website may not work to their full extent.

SSL Encryption
Our website uses SSL encryption for the transmission of sensitive or personal information from our users. This encryption is activated, for instance, during payment processing or when submitting inquiries via our website.

Please ensure that SSL encryption is enabled for any activities involving sensitive data. You can recognize the activation of SSL encryption by the change in your browser’s address bar from “http://” to “https://”.

Data encrypted via SSL cannot be read by third parties. Only transmit your confidential information when SSL encryption is active, and if you have any concerns, please contact us.

Contact Form
You can contact us via the email addresses or contact forms provided. In such cases, the personal data transmitted with the email or form will be stored. This data will not be shared with third parties and will be used exclusively to process the conversation. The legal basis for processing personal data transmitted during the sending of an email or inquiry is Article 6(1)(f) GDPR. If the email contact aims to conclude a contract, such as an event inquiry, Article 6(1)(b) GDPR also applies. Data will be deleted once it is no longer necessary for the purpose for which it was collected. For personal data transmitted via email or form, this occurs when the conversation with the user has ended. The conversation is considered ended when it can be inferred from the circumstances that the matter in question has been resolved. If you contact us with an inquiry, the information you provide, including your contact details, will be stored for the purpose of processing the inquiry and for potential follow-up questions. We will use the data solely for the purposes mentioned above and store it in accordance with statutory retention periods. Any additional use of data from the contact form will only occur in anonymized form for statistical purposes (e.g., number of inquiries, success rate of inquiries, etc.).

Application Process
You have the option to apply via our website. The application documents you submit will be collected and processed electronically to handle the application process. The legal basis for this processing is Article 6(1)(a) GDPR in conjunction with Article 6(1)(b) GDPR, for decisions related to the establishment of an employment relationship. The data required for the application process includes your personal information with contact details and a description of your education, work experience, and skills. You may also provide documents such as certificates or cover letters. If an employment contract is concluded following the application process, the data you provided during your application will be stored in your personnel file for employment purposes. The legal basis for this processing is also Article 6(1)(b) GDPR. If your application is no longer considered, the data you submitted will be deleted after the application process is complete. Exceptions include statutory requirements, such as those under the General Equal Treatment Act (AGG), which may require storage for up to six months or until the conclusion of a legal proceeding. The legal basis for this is Article 6(1)(f) GDPR, with our legitimate interest being legal defense. If you explicitly consent to a longer retention of your data, for example, to be included in an applicant or talent database, the data will be further processed based on your consent and stored for up to 12 months. The legal basis in this case is Article 6(1)(a) GDPR. You can revoke your consent at any time for the future under Article 7(3) GDPR by notifying us accordingly.

Newsletter
You have the option to sign up for our newsletter on our website. We only send newsletters and emails with promotional information with the explicit consent of the recipients or based on a legal permit. Our newsletters contain information about products, promotions, events, and news. To sign up for the newsletter, your email address is required. Optionally, we ask you to provide your first and last name. This information is solely for personalizing the newsletter. We also process the following personal information:
• Email address
• Date and time
• IP address
• Action type
• Metadata of the action
To comply with legal requirements regarding consent and withdrawal, we store the following data for each user profile created via double opt-in confirmation email:
• Date and time
• IP address
• Online identifiers
Your consent for processing the data is obtained during the sign-up process according to Art. 6 (1) (a) GDPR, and you are referred to this privacy policy. The online registration for our newsletter is done through a double opt-in process, meaning you will receive a confirmation email after signing up, asking you to confirm your subscription. This process is necessary to prevent misuse of email addresses by third parties. If you sign up for our newsletter through another method (e.g., a giveaway), no confirmation email will be sent. By signing up, you confirm your desire to receive the newsletter. If you give your consent to receive promotional information as part of a giveaway, we process your data based on Art. 6 (1) (a) GDPR. We use the communication channel you provided to inform you by mail or electronically about interesting offers, news, services, and promotions. Your consent to receive promotional information is voluntary and can be revoked at any time via the “unsubscribe” button. The data collected in this context will be deleted when you withdraw your consent.
The failure to provide or the withdrawal of your data for promotional purposes has no impact on your participation in the giveaway. Recipients of the data are service providers with whom we have concluded data processing agreements.

Use of Google Analytics
We use the web tracking service of Google LLC, 1600 Amphitheatre Parkway, CA 94043 Mountain View, USA (hereafter: Google Analytics) on our website. Google Analytics uses cookies that are stored on your computer and allow analysis of your use of our website and your browsing behavior (so-called tracking). We conduct this analysis using Google Analytics’ tracking service to continuously optimize and improve our online offering. As part of using our website, data, particularly your anonymized IP address and user activities, is transferred to Google LLC servers and processed and stored outside the European Union, for example, in the USA.  By enabling IP anonymization within the Google Analytics tracking code on this website, your IP address is anonymized by Google Analytics before transmission. This website uses a Google Analytics tracking code that has been enhanced with the operator “gat._anonymizeIp()” to enable only the anonymized collection of IP addresses (known as IP masking). The legal basis for processing personal data is Art. 6 (1) (a) GDPR (if you have registered with Google) and Art. 6 (1) (f) GDPR (if you have not registered with Google). If the processing is based on Art. 6 (1) (f) GDPR, the legitimate interest of the website operator is to obtain anonymized information about website visitors and use it to optimize and improve the website. On our behalf, Google uses this information to evaluate your visit to this website anonymously, compile reports on website activity, and provide other services related to website and internet usage. The IP address transmitted by your browser in the context of Google Analytics will not be combined with other data from Google LLC. Google will store the data relevant to providing web tracking for as long as necessary to fulfill the service. Data collection and storage are anonymized. If personal reference exists, the data will be deleted promptly unless subject to legal retention requirements. In any case, deletion will occur after the retention period expires. You can prevent the collection and forwarding of personal data to Google (especially your IP address) and the processing of this data by Google by disabling the execution of script codes in your browser, installing a script blocker in your browser, or enabling the “Do Not Track” setting in your browser. Furthermore, you can prevent the collection of data generated by the Google cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at http://tools.google.com/dlpage/gaoptout?hl=en. The security and privacy principles of Google Analytics can be found at http://www.google.com/intl/en/analytics/learn/privacy.html.

Facebook
Sensation Hotels uses the platform and services of Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland, and operates a Facebook fan page. We run this page to promote our services and products and to engage with you as a visitor. We would like to inform you that you use this Facebook page and its features at your own risk. This is especially true for the use of interactive features (e.g., commenting, sharing, rating). Here, our legitimate interest according to Art. 6 (1) (f) GDPR lies in processing your data for providing up-to-date information and interaction opportunities for our visitors. According to the ruling by the European Court of Justice (ECJ), operators of a Facebook page, together with Facebook, are jointly responsible for processing personal data. Facebook processes personal data for the following purposes:
• Market research
• Creation of user profiles
• Advertising and analysis
When visiting our Facebook page, Facebook collects, among other things, your IP address and other information stored in the form of cookies on your computer. This information is used to provide us, as operators of the Facebook pages, with statistical information about the use of the Facebook page. More detailed information can be found on Facebook at the following link: http://de-de.facebook.com/help/pages/insights.
You can set objection options here: https://www.facebook.com/settings?tab=ads
The data collected about you in this context is processed by Facebook Ltd. and may be transferred to countries outside the European Union. The information Facebook receives and how it is used is described in general terms in Facebook’s data use policy. There, you will also find information on how to contact Facebook and adjust ad settings. The data use policy is available at the following links:
http://de-de.facebook.com/about/privacy

Statistical Data
As the page operator, we have the ability to retrieve statistical data generated and provided by Facebook through the so-called “Insights.” The affected types of data primarily include:
• Page activities, post interactions, shared content
• Total number of page views, “likes”
• Video views
• Clicks on route planners, clicks on phone numbers

Further information can be found in Facebook’s privacy policy. We would like to make it clear that we have no influence on the generation and display of this data. The statistical evaluations provided by Facebook are used to plan our posts in a timely manner and to tailor our communication to our users. As the provider of the information service, we do not collect or process any personal data from your use of our service unless we explicitly inform you about this in personal communication.
If you wish to exercise your rights (e.g., right of access or deletion), we recommend contacting Facebook directly. Of course, you can contact us if you need assistance or have further questions. You can reach us at the following email address: mail@sensationhotels.com. If you no longer wish to allow this data processing in the future, please use the “I no longer like this page” button.

Your Rights
You have the right to request confirmation from the controller as to whether personal data concerning you is being processed. If this is the case, you have the right to access this personal data and to the information specified in Art. 15 GDPR. You have the right to request the immediate correction of inaccurate personal data concerning you and, if necessary, the completion of incomplete personal data (Art. 16 GDPR). You have the right to request the immediate deletion of personal data concerning you, if one of the reasons listed in Art. 17 GDPR applies, for example, if the data is no longer needed for the purposes pursued (right to deletion). You also have the right to request the restriction of processing from the controller if one of the conditions listed in Art. 18 GDPR applies, e.g., if you have objected to the processing, for the duration of the controller’s review. You have the right to object to the processing of your personal data at any time, on grounds relating to your particular situation, when processing is carried out based on Art. 6 (1) e or f GDPR. The controller will then no longer process the personal data, unless he can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims (Art. 21 GDPR). If personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing, which also applies to profiling related to such direct marketing. If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes. Every affected person has the right to lodge a complaint with a supervisory authority, regardless of any other administrative or judicial remedy, if the affected person believes that the processing of personal data concerning them violates the GDPR (Art. 77 GDPR). The affected person can assert this right before a supervisory authority in the Member State of their residence, place of work, or place of the alleged infringement. The competent supervisory authority in Baden-Württemberg is:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Postfach 10 29 32, 70025 Stuttgart
Königstraße 10a, 70173 Stuttgart
Tel.: 0711/61 55 41 – 0
Fax: 0711/61 55 41 – 15
Email: poststelle@lfdi.bwl.de
Website: https://www.baden-wuerttemberg.datenschutz.de

You can also contact us anytime at the address provided in the imprint for questions related to data protection. Alternatively, our data protection coordinator is available at mail@sensationhotels.com to assist with the protection of your rights.

General Equal Treatment (AGG)
We strive to use gender-neutral terms. If this is not possible, we omit gender-specific differentiation for ease of reading. Corresponding terms apply equally to both genders in the sense of equal treatment.

en_USEnglish
de_DEGerman en_USEnglish