ZAHC Privacy Policy

General information about the processing of your data

We are required by law to inform you about the processing of your personal data (hereinafter "data") when you use our website. This data protection notice informs you about the details of the processing of your data and about your legal rights in this regard. For terminology such as "personal data" or "processing", the legal definitions from Art. 4 GDPR are authoritative. We reserve the right to adapt the data protection declaration with effect for the future, in particular in the event of further development of the website, the use of new technologies or changes to the legal basis or the relevant case law. We recommend that you read the data protection declaration from time to time and take a printout or copy for your records.

Scope of application

The data protection declaration applies to all pages of www.zahc.de. It does not extend to any linked websites or Internet presences of other providers.

Responsible

Responsible for the processing of personal data within the scope of this privacy policy is:

Zsuzsanna Albrecht Hospitality Consulting

Am Flehkamp 4a

40667 Meerbusch

Phone: +49 2132 9799390

E-mail: consulting@zahc.de

Questions about data protection

If you have any questions about data protection with regard to our company or our website, you can contact us using the contact details provided in the "Person responsible" section.

Security

We have taken comprehensive technical and organizational precautions to protect your personal data from unauthorized access, misuse, loss and other external interference. To this end, we regularly review our security measures and adapt them to the state of the art.

Your rights

You have the following rights regarding personal data concerning you, which you can assert against us:

Right of access: you can request information in accordance with Art. 15 GDPR about your personal data that we process.
Right to rectification: if the information concerning you is not (or no longer) accurate, you may request a rectification in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.
Right to erasure: You may request the erasure of your personal data in accordance with Art. 17 GDPR.
Right to restriction of processing: you have the right to request restriction of the processing of your personal data in accordance with Art. 18 GDPR.
Right to object to processing: You have the right to object at any time, on grounds relating to your situation, to the processing of your personal data which is carried out on the basis of Article 6 (1) sentence 1 lit. e) or lit. f) GDPR, in accordance with Article 21 (1) GDPR. In this case, we will not further process your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedom. Further processing will also take place if the processing serves the assertion and exercise of or defense against legal claims (Art. 21 (1) GDPR). In addition, according to Art. 21 (2) GDPR, you have the right to object at any time to the processing of your personal data for the purposes of direct marketing; this also applies to any profiling, insofar as it is related to such direct marketing. We refer you to the right to object in this privacy policy in connection with the respective processing.
Right to withdraw your consent: Insofar as you have given your consent for processing, you have a right of withdrawal in accordance with Article 7 (3) GDPR.
Right to data portability: You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format ("data portability"), as well as the right to have this data transferred to another controller if the conditions of Art. 20 (1) a, b GDPR are met (Art. 20 GDPR).

You can exercise your rights by notifying the contact details listed in the "Responsible" section.

If you believe that the processing of your personal data violates data protection law, you also have the right to lodge a complaint with a data protection supervisory authority of your choice pursuant to Art. 77 GDPR. This includes the data protection supervisory authority responsible for the controller: State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, P.O. Box 200444, 40102 Düsseldorf or: Kavalleriestraße 2-4, 40213 Düsseldorf, phone: 0211/38424-0, e-mail: poststelle@ldi.nrw.de, https://www.ldi.nrw.de.

Use of our website

In principle, you can use our website for purely informational purposes without disclosing your identity. When you call up the individual pages of the website in this sense, only access data is transmitted to our web space provider so that the website can be displayed to you. The following data is processed in this context:

Browser type/ browser version,
operating system used,
language and version of the browser software,
date and time of access,
host name of the accessing end device,
IP address,
Content of the request (specific web page),
access status/HTTP status code,
Websites that are accessed via the website,
Referrer URL (the previously visited website),
Message whether the call was successful and
Amount of data transferred.

The temporary processing of this data is necessary to enable the technical operation of a website visit. The access data is not used to identify individual users and is not merged with other data sources legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) GDPR. Our legitimate interests lie in ensuring the functionality of the website and the integrity and security of the website. The access data is deleted as soon as it is no longer necessary for achieving the purpose of its processing. In the case of the collection of data to provide the website, this is the case when you end your visit to the website.

You may object to the processing. Your right to object exists for reasons arising from your situation. You can send us your objection via the contact details listed in the "Responsible" section.

Device information

In addition to the aforementioned access data, technologies are used when using the website that store information in your terminal equipment (e.g. desktop PC, laptop, tablet and smartphone) or access information that is already stored in your terminal equipment. These technologies may be, for example, so-called cookies, pixels, Local Storage, Session Storage, Indexed DB or browser fingerprinting technologies. These technologies can be used to recognize you across devices and websites.

According to § 25 para. 1 TTDSG, we generally require your consent for the use of these technologies. According to § 25 para. 2 TTDSG, such consent is only not required if the technologies either enable the transmission of a message via a public telecommunications network or if they are absolutely necessary in order to provide a telemedia service expressly requested by you.

Some elements of our website serve the sole purpose of transmitting a message (Section 25 (2) No. 1 TTDSG) or are absolutely necessary to provide you with our website or individual functionalities of our website (Section 25 (2) No. 2 TTDSG). You can prevent processing by making the appropriate settings in your browser software.

Contacting our company

When contacting our company, e.g. by e-mail, the personal data you provide will be processed by us in order to answer your inquiry. The legal basis for the processing is Art. 6 (1) p. 1 lit. f) GDPR or Art. 6 (1) p. 1 lit. b) GDPR, if the contact is aimed at the conclusion of a contract. If the request is aimed at concluding a contract, the provision of your data is required and mandatory. If the data is not provided, it will not be possible to conclude or execute a contract or to process the inquiry. We delete the data accruing in this context after processing is no longer necessary - usually two years after the end of the communication - or, if necessary, restrict processing to compliance with existing legally mandatory retention obligations.

You may object to the processing. Your right to object exists for reasons arising from your particular situation. You can send us your objection via the contact details listed in the "Responsible" section.

Processing for contractual purposes

We process your personal data if and insofar as this is necessary for the initiation, substantiation, execution and/or termination of a legal transaction with our company. The legal basis for these results from Art. 6 para. 1 p. 1 lit. b) GDPR. The provision of your data is necessary for the conclusion of the contract and you are contractually obliged to provide your data. If you do not provide your data, it will not be possible to conclude and/or execute the contract. After the purpose has been achieved (e.g. contract execution), the personal data will be blocked for further processing or deleted, unless we are authorized to process it further on the basis of a consent granted by you (e.g. consent to process the e-mail address for sending electronic advertising mail), a contractual agreement, a legal authorization (e.g. authorization to send direct advertising) or on the basis of legitimate interests (e.g. retention for the enforcement of claims).

The transfer of your personal data to third parties takes place insofar as

it is necessary for the establishment, implementation or termination of legal transactions with our company (e.g. in the case of the transfer of data to a payment service provider/shipping company for the processing of a contract with your person), in accordance with Art. 6 para. 1 p. 1 lit. b) GDPR, or a subcontractor or vicarious agent that we use exclusively in the context of providing the offers or services requested by you requires this data (such auxiliary persons are, unless you are expressly informed otherwise, only authorized to process the data to the extent that this is necessary for the provision of the offer or service), or
an enforceable official order (Art. 6 para. 1 p. 1 lit. c) GDPR) exists, or
an enforceable court order exists (Art. 6 para. 1 p. 1 lit. c) GDPR), or
we are obliged to do so by law (Art. 6 (1) p. 1 lit. c) GDPR), or
the processing is necessary to protect the vital interests of the data subject or another natural person (Art. 6 (1) p. 1 lit. d) GDPR), or
it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority (Art. 6 (1) p. 1 lit. e) GDPR), or
we can invoke our overriding legitimate interests or those of a third party for disclosure (Art. 6 (1) p. 1 lit. f) GDPR).

Any further transfer of your personal data to other persons, companies or bodies will not take place unless you have effectively consented to such a transfer. The legal basis of the processing is then Art. 6 para. 1 p. 1 lit. a) GDPR. We will point out the respective recipients within the scope of this data protection information in relation to the respective processing operation.

E-mail marketing

Feedback surveys

As a follow-up to the completion of our services, we would like to obtain your feedback. For this purpose, we process the e-mail address you provide for the purpose of sending you an e-mail containing a link to the specific feedback survey. In this we ask for your special wishes, technical information and convey our offer for individual customer consulting. We process your e-mail address only for sending the feedback e-mail, and delete it after the purpose has been achieved unless we are authorized (e.g. due to a separate newsletter registration or similar) or obligated to further processing. The legal basis for the processing is your consent according to Art. 6 para. 1 p. 1 lit. a) GDPR.

You can revoke your consent to the processing of your e-mail address for the receipt of feedback surveys at any time, either by directly clicking on the unsubscribe link in the e-mail sent or by sending us a message via the contact details provided under "Responsible". This will not affect the lawfulness of the processing that took place based on the consent until the time of your revocation.

Feedback service provider

To create and analyze the surveys, we use the online form service "Microsoft Forms" of Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, USA; hereinafter: "Microsoft" and "Microsoft Forms"). You can access the survey via a link that we have sent to you by e-mail. In doing so, you will be redirected to a Microsoft page. Microsoft processes the data required to call up the website, such as your IP address. Microsoft also processes some of the data in the USA. There is no EU Commission adequacy decision for a data transfer to the USA. So-called standard contractual clauses have been concluded with Microsoft to commit Microsoft to an adequate level of data protection. You can obtain a copy of the standard contractual clauses by request at https://go.microsoft.com/fwlink/p/?linkid=2126612. Further information on data protection and the storage period at Microsoft can be found at: https://about.ads.microsoft.com/en-us/policies/legal-privacy-and-security.

The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) GDPR. Our legitimate interests in using a feedback service provider lie in optimizing the creation of feedback surveys.

Hosting

We use external hosting services provided by the provider ALL-INKL.COM (Hauptstraße 68, 02742 Friedersdorf, Germany), which serve to provide the following services: Infrastructure and platform services and computing capacity. For these purposes, all data - including the access data mentioned under the item "Use of our website" - that are necessary for the operation and use of our website are processed. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) GDPR. By using external hosting services, we pursue an efficient and secure provision of our web offer.

You can object to the processing. Your right to object exists for reasons arising from your particular situation. You can send us your objection via the contact details listed in the "Responsible party" section.