Our Resorts
PRIVACY STATEMENT
Responsible enterprise and contact data
Lanserhof Management GmbH
Neue ABC-Straße 8
20354 Hamburg
Deutschland
Data Security Officer
Katharina Ditz
Kochholzweg 153, 6072 Lans, Austria
Telephone: + 43 512 38 666 503
e-mail: datenschutz@lanserhof.com
Purpose and legal basis
The processing of the customer’s personal data is necessary for the performance of a contract to which the customer is a party, or for the implementation of pre-contractual measures that are taken at the customer’s request. The legal basis for such processing is Art. 6 para. 1 b) DSGVO.
The newsletter will only be sent with the customer’s consent. The legal basis for such processing is the consent of the customer in accordance with Art. 6 para. 1 a) DSGVO.
The processing of moving images of the video surveillance system is carried out in accordance with Art. 6 para. 1 f) DSGVO. For the protection of the property of the guests, as well as the protection of the guests and property of the enterprise the entrances and parking lots, as well as the property borders are partially video-monitored.
Recipients
The customer’s personal data transmitted to the responsible person will be made available to the following recipients as follows:
- e-mail service providers
- telephone providers
- fax providers
- web hosting companies
- tax consultants
- payment service providers
- auditors
- labs
- health care facilities
- consilliary doctors
- media agencies
- postal and shipping service providers
- In the event that the newsletter is used: mailing agents
Without the written consent of the customer, the personal data will not be made available to other third parties, unless this is required by law.
1. Website analysis
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses so-called “Cookies”, text files which are stored on the customer’s PC and which enable an analysis of the Allow the customer to use the website. The cookies generated by the cookie Information about the use of this website (including the IP address) is passed on to a third party.
Google server in the USA and stored there. In case of activation of IP3 anonymization on this website, however, Google’s IP address will be used within the Member States of the European Union, or in other Contracting States to the Agreement in the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate the use of the website in order to compile reports on the activities and to keep track of their use and development.
Internet use to provide related services to the website operator. The IP address transmitted by the customer’s browser within the framework of Google Analytics is not linked with the other data from Google. The customer may refuse the use of cookies by selecting the appropriate settings on his browser. To prevent an inappropriate setting of his browser software; the person responsible instructs the customer, however, points out that in this case the customer may not be able to use all of the functions of the of this website in its entirety. In addition, the customer may use the registration of the data generated by the cookie and related to its use of the website (including the IP address) to Google and to prevent the processing of this data by Google, by using the downloads and installs the browser plugin available under the following link:
https://tools.google.com/dlpage/gaoptout?hl=en
The customer can prevent the collection by Google Analytics by clicking on the following link. An Opt-Out-Cookie is set, which will prevent the future collection of his data when visiting this website. Website prevented: Disable Google Analytics (Note: Must be embedded as HTML tag)
Further information can be found at https://tools.google.com/dlpage/gaoptout?hl=en
or at https://www.google.com/intl/de/analytics/privacyoverview.html (general information on Google Analytics and data protection). The responsible person points out to the customer that on the code “anonymizeIp” (“analytics.js”) has been added to this web page Google Analytics in order to to ensure an anonymized collection of IP addresses (so-called IP masking).
Without the written consent of the customer, the personal data will not be passed on to third parties, unless this is required by law.
1.2 Google Fonts
For the integration of external fonts by Google Fonts, the personal data of the Customers who are transmitted to the responsible person are made accessible to the following recipient:
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
This website uses Google Fonts to integrate external fonts. Google provides the fonts are available. If the customer calls up this website, the required fonts will be displayed in the customer’s browser cache to correctly display the texts and fonts on the page. to be displayed.
For this purpose, the usual information when a website is called up, in particular the IP address of the customer and the referrer URL to a Google LLC server. In addition, The customer can obtain information at https://developers.google.com/fonts/faq
and in the Privacy policy of Google https://policies.google.com/privacy?hl=en
Without the written consent of the customer, the personal data will not be passed on to third parties, unless this is required by law.
1.3 Adobe Typekit
Adobe Typekit uses the personal data of the user to integrate external fonts.
Customers who are transmitted to the responsible person are made accessible to the following recipient:
Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland
This website uses Adobe Typekit to integrate external fonts. Adobe provides the Fonts that are available. If the customer calls up this website, the required fonts will be displayed in the customer’s browser cache to correctly display the texts and fonts on the page to be displayed.
For this purpose, the usual information when a website is called up, in particular the IP address of the customer and the referrer URL to an Adobe server. More Information is available to the customer at https://www.adobe.com/ch_en/privacy/policies/adobe-fonts.html
Without the written consent of the customer, the personal data will not be passed on to third parties unless this is required by law.
1.4 Google Maps
This website uses Google Maps to display the location and to display the Directions to us. This is a Google LLC service, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
For this purpose, the usual information when a website is called up, in particular the IP address of the customer and the referrer URL to a Google server. The customer receives further information under https://www.google.com/intl/de_en/help/terms_maps.html and in the privacy policy of Google https://policies.google.com/privacy?hl=en.
1.5 YouTube
This website uses the video portal YouTube to embed and retrieve videos. It is a service of YouTube LLC, 901 Cherry Ave, 94066 San Bruno, CA, USA. For this purpose, the usual information when calling up a website, in particular the IP address of the customer and the referrer URL to a YouTube server. If the customer is logged into his YouTube account during the retrieval process, more information will be transmitted.
The customer can obtain further information at https://policies.google.com/privacy?hl=en.
1.6 Google AdWords
This website uses the marketing service Google AdWords of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), for targeted online advertising and promote its services.
When you access any website that participates in the Google AdWords advertising network, Google AdWords will not store an individual cookie on the customer’s terminal device. This cookie contains certain information about the customer. This information is pseudonymised User profiles that enable Google to carry out cross-website tracking (so-called “tracking”).
“Remarketing”).
Further information on the use of data by Google, setting and opposition options, please refer to Google’s privacy policy (https://policies.google.com/technologies/ads) as well as in the settings for the display of advertising inserts using
Google (https://adssettings.google.com/authenticated).
1.7 Facebook
The responsible person operates on Facebook.com under the address https://www.facebook.com/LanserhofDE or https://b-m.facebook.com/LanserhofDE a Facebook-Website. This Facebook website is maintained in conjunction with Facebook Ireland Ltd, 4 Grand Canal Square. Grand, Canal Harbour Dublin 2, Ireland (hereinafter referred to as “Facebook”).
The operation of this Facebook website is based on the legitimate interest according to Art. 6.
Paragraph 1 f) DSGVO.
Facebook uses the data of the person concerned for advertising purposes, for the creation of user profiles and for market research purposes. Facebook uses cookies (see item 5. of this Privacy Policy). If the affected person has a Facebook account and is logged in, the evaluation takes place across all devices. The person affected finds the Privacy policy of Facebook at the address: https://www.facebook.com/about/privacy/
At the address https://www.facebook.com/settings?tab=ads the person concerned has the possibility, to object to the use of his data by Facebook and to accept the corresponding cancellations (opt-outs).
Within the framework of Facebook use, a transfer is also made to the parent company of Facebook, the Facebook Inc., Deborah Crawford 1601 Willow Road Menlo Park, California 94025, USA. A European Commission adequacy decision is missing. Facebook Inc. is, however Member of the EU-US Privacy Shield. Further information on the EU-US Privacy Shield can be found at the address: https://www.privacyshield.gov
1.8 Facebook Plugin & Instagram Plugin
This website uses the Facebook & Instagram plugin to embed and retrieve certain content. It is a service of Facebook Ireland Ltd, 4 Grand Canal Square Grand, Canal Harbour Dublin 2, Ireland (hereinafter referred to as “Facebook”). For this purpose, certain information will be sent to a server of Facebook.
For more information about how Facebook uses the data, settings and Objection possibilities, you can find out in the privacy policy of Facebook https://www.facebook.com/about/privacy
Within the framework of Facebook use, a transfer is also made to the parent company of Facebook, the Facebook Inc., Deborah Crawford 1601 Willow Road Menlo Park, California 94025, USA. A European Commission adequacy decision is missing. Facebook Inc. is, however Member of the EU-US Privacy Shield. Further information on the EU-US Privacy Shield can be found at the address: https://www.privacyshield.gov
1.9 Twitter
This website uses the Twitter plugin to embed and retrieve certain content. It is a service provided by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (hereinafter referred to as “Twitter”). For this purpose, certain information will be sent to a server of Twitter.
Further information on the use of data by Twitter, setting and opposition options, please refer to Twitter’s privacy policy: https://twitter.com/de/privacy
Registration on our website / Lanserhof Online Shop
When registering to use our personalised services, some personal data is collected, such as name, address, contact and communication data such as telephone number and e-mail address. If you are registered with us, you can access content and services that we only offer to registered users. Registered users also have the option of changing or deleting the data provided during registration at any time if required. Of course, we will also provide you with information about the personal data we have stored about you at any time. We will be happy to correct or delete them at your request, provided that there are no legal storage obligations to the contrary. To contact us in this context, please use the contact details given at the end of this data protection declaration.
1.10 Lanserhof Online Shop
Payment services Lanserhof Online Shop
Payment via credit card
On our website https://shop.lanserhof.com you can pay by credit card. Payment data is transferred to mPay24 in order to process the payment. The legal basis for the processing of your data is Art. 6 para. 1 lit. b DSGVO.
mPay24 collects information about the transaction, as well as other information in connection with the transaction such as information about goods/services, financial information, information about the interaction between you and mPay24, merchant information, including Information on payment instruments, device-related information and location data.
mPay24 uses the data, among other things, for payment processing, for credit checks and for monitoring and improving its services.
Details on data processing and processing purposes can be found in the data protection conditions of mPay24
https://www.mpay24.com/web/privacy/
Payment via Paypal
On our website https://shop.lanserhof.com you can pay via the payment service Paypal. Payment data is transferred to Paypal in order to process the payment. The legal basis for the processing of your data is Art. 6 para. 1 lit. b DSGVO.
You have the following payment option: Payment via PayPal.
Paypal collects transaction information and other information related to the transaction, such as the amount sent or requested, the amount paid for products or services, merchant information, including information about payment instruments used for the transaction, device information, technical usage data and location data.
Paypal collects this data regardless of whether you have a Paypal account or not. If you have a Paypal account, the data will be linked to your account. Paypal uses the data for payment processing, credit checks and for monitoring and improving its services, among other things.
Details on data processing and processing purposes can be found in Paypal’s data protection conditions: https://www.paypal.com/de/webapps/mpp/ua/privacy-prev#6
You can find a list of companies to which Paypal may send your data here:
https://www.paypal.com/ie/webapps/mpp/ua/third-parties-list
More information about Paypal:
PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
1.11 Application procedure
As part of the application process, your correspondence data (postal address, e-mail address and telephone numbers) will be stored in the applicant database along with your title, surname and first name. In addition, your curriculum vitae and your application documents for professional, vocational and further training qualifications as well as your references are recorded. This data will only be stored, evaluated, processed and forwarded internally as part of your application. They are only accessible to employees of the Central Services / Personnel Department and the persons responsible for the selection of applicants in the specialist departments.
Your personal data will not be passed on to third parties unless you expressly consent to this being done at the specific request of the Central Services / Personnel Department. Due to legal or official orders, to enforce the provisions of this data protection declaration or to protect the rights of the Lanserhof Group or our employees and customers, the disclosure of personal data is also legally permissible in individual cases. Finally, applicant data can also be processed for statistical purposes, whereby the data is made anonymous so that no conclusions can be drawn about individual persons.
If you enter into an employment relationship with the Lanserhof Group, your personal data will be added to your personnel file. If your application has not led to employment with the Lanserhof Group, your details will be stored for 6 months after completion of the application procedure for legal reasons and then deleted. There will be no notification of the deletion of the data. We reserve the right to assign your application to a pool of applicants if you are interested. In this case you will receive a message for your information. If you do not agree that we keep your documents on file, you have the possibility to request the deletion of your data at any time. The data of the applications kept on record will be stored by us for 24 months and will then be deleted. You will find the relevant data protection and terms of use for visiting the homepage here (https://www.lanserhof.com/datenschutz). For information and other questions or suggestions regarding the application procedure, please contact the Data Protection Department at datenschutz@lanserhof.com. Our data protection officer is at your disposal for special data protection matters.
The Lanserhof Group includes the following companies:
Lanserhof GmbH, Kochholzweg 153, 6072 Lans, Austria
Lanserhof Tegernsee GmbH, Gut Steinberg 1-4, 83666 Waakirchen, Germany
Marienstein Privatklinik GmbH, Gut Steinberg 1-4, 83666 Waakirchen, Germany
LansMedicum, Stephansplatz 5, 20354 Hamburg, Germany
2. Cookies
On various pages, the responsible person uses cookies in order to prevent the visit of his web pages.attractive and enable the use of certain functions. Cookies are small text files that are stored on the visitor’s computer. Most of the Cookies used by those responsible will be deleted by the browser after the end of the browser session.
The visitor’s hard drive deletes (so-called session cookies). Other cookies remain on the visitor’s hard drive on the visitor’s computer and enable the person in charge to use the visitor’s computer at the time to recognize your next visit (so-called permanent cookies). Of course the customer can reject cookies at any time, provided that the browser used permits this.
3. Transfer to third countries
In the context of the use of Google Analytics, Google Fonts and Google Maps finds a transmission of personal data to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
A European Commission adequacy decision is missing. However, Google LLC is a member of the EU-US Privacy Shield. More information about EU-US Privacy Shield can be found at the URL: https://www.privacyshield.gov
Within the scope of using YouTube, personal data is transmitted to YouTube LLC., 901 Cherry Ave., 94066 San Bruno, CA, USA. A European Commission adequacy decision is missing. However, Google LLC is a member of the EU-US Privacy Shield. More information about EU-US Privacy Shield can be found at the URL: https://www.privacyshield.gov
Within the scope of using the website, personal data will be transmitted to Facebook Inc., Deborah Crawford 1601 Willow Road Menlo Park, California 94025, USA. An adequacy decision of the European Commission is missing. Facebook Inc. is a member, however in the EU-US Privacy Shield. More information about the EU-US Privacy Shield can be found at the URL: https://www.privacyshield.gov
4. Storage period
With the final completion of the contract, the data of the customer, which must be kept for legal reasons, is blocked. This data is no longer available for further use. Once this legal basis has ceased to apply, the blocked dated will be deleted.
In the event that the customer contacts the responsible person or uses the contact form, the personal data will be stored in accordance with the statutory retention periods. The person responsible is subject to various storage and documentation obligations, including those arising from the German Commercial Code (HGB) and the Fiscal Code (AO). The periods for storage and documentation specified there are between two and ten years. Finally, the storage period is also assessed according to the statutory limitation periods, which, for example, according to the §§ 195 et seq. of the German Civil Code (BGB) can generally be three years, but in certain cases also up to thirty years.
The data collected via Google AdWords, Google Analytics, YouTube, Google Maps, various social media and
Plugins) will be stored indefinitely.
The data of the video surveillance system is regularly stored for 72 hours. If necessary, the data is transferred to the competent authority and stored for a longer period if necessary.
5. Data protection rights
Every customer has the right to information, correction, deletion, restriction of processing, objection and data transfer. In addition, there is a right of appeal to a data protection supervisory authority. The customer will find the legal texts by linking to: https://dsgvo-gesetz.de/
Corresponding requests are to be addressed to the e-mail address: datenschutz@lanserhof.com
6. Right of objection and other rights
If the customer has given his/her consent to the processing of his/her personal data for one or more specific purposes, the customer has the possibility of revoking the consent with future effect.
Without prejudice to any other administrative or judicial remedy, any data subject shall have the right to complain to a supervisory authority, in particular in the member state where he/she is staying, at his/her place of work or at the place where the alleged infringement is suspected, if he/she considers that the processing of his/her personal data is contrary to this regulation.