- Winter world
- Prices & offers
We will get back to you as soon as possible.
Wir informieren Sie zeitnah per Mail über den Gewinner.
Protecting personal data is an important concern to us. Processing personal data is therefore carried out in accordance with the applicable European and national laws.
You can of course revoke your consent at any time with future effect. To do this, please contact the data controller in accordance with § 1.
The following statement provides an overview of what kind of data is collected, how it is used and shared, what security measures we take to protect your information, and how you obtain details about the information provided to us.
Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for processing personal data, Art. 6 para. 1 S. 1 lit. a) of the EU General Data Protection Regulation (GDPR) serves as legal basis.
For the processing of personal data necessary for performance of a contract to which the data subject is a party, Art. 6 para. 1 S. lit. b GDPR applies as the legal basis. This also applies to processing operations that are necessary for the performance of precontractual measures.
Insofar as processing personal data is necessary to fulfill a legal obligation to which we are subject, Art. 6 para. 1 S. 1 lit. c GDPR applies as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights, and freedoms of the data subject do not outweigh the said interest, Art. 6 para. 1 S. lit. f) GDPR applies as the legal basis for processing.
Data deletion and storage duration
The personal data of a data subject will be deleted or blocked as soon as the purpose of storage ceases to exist. Furthermore, data may be stored if this is provided for by European or national legislators in union regulations, laws, or other regulations to which we are subject as the data controller. Blocking or erasing data will also be carried out if a storage deadline prescribed by the above-mentioned standards expires, unless data storage is a necessity for concluding or performing a contract.
(1) Name and address of the data controller
The data controller within the meaning of the General Data Protection Regulation and other national data protection laws of the EU Member States, as well as other data protection regulations, is:
Familotel Allgäuer Berghof
Reichert & Neusch GmbH
Geschäftsführer Christian Neusch
Alpe Eck 2
(2) Name and address of the Data Protection Officer
The Data Protection Officer for the data controller is:
Akwiso – Datenschutz und Audit
+49 (0) 831 5124 7030
a) Personal data is all information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"). Identifiable refers to a person who can be identified directly or indirectly, in particular through the assignment of an identifier such as a name, an identification number, location data, an online identifier or one or more special characteristics that express the physical, physiological, genetic, psychological, economic, cultural or social identity of said person.
b) The data subject is any identified or identifiable person whose personal data is processed by the data controller for processing.
c) Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
d) Profiling refers to any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a person, in particular to analyse or predict aspects concerning that person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
e) Pseudonymization is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data is not attributed to an identified or identifiable person.
f) The data controller or the person responsible for processing means the natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are laid down by Union law or by the law of the Member States, the data controller or the specific criteria for their appointment may be laid down in accordance with Union law or the law of the Member States.
g) The Processor refers to a legal person, public authority, agency or other body which processes personal data on behalf of the controller.
h) The recipient is a natural or legal person, public authority, agency or other body to which personal data is disclosed, whether or not it is a third party. However, authorities which may be entitled to receive personal data under Union law or the law of the Member States within the framework of a particular investigation mandate shall not be regarded as recipients.
i) A third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
Consent is any freely given, specific, informed and unambiguous indication of the data subject/user's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
(1) When using the website for information purposes only, i.e. if you do not register or otherwise provide us with information, we automatically collect the following data and information from the computer system of the accessing computer each time you visit the website:
The data is also stored in the log files of our system. This data is not stored together with other personal user data.
(2) The legal basis for temporary storage of log files is Art. 6 para. 1 S. lit. f) GDPR.
(3) Temporary storage of the IP address by the system is necessary to
The data is stored in log files to ensure the website's functionality. The data is also used to optimise the website and to ensure the security of our information technology systems. No evaluation of the data for marketing purposes is undertaken in this context.
These purposes also encompass our legitimate interest in data processing in accordance with Art. 6 para. 1 S.1 lit. f) GDPR.
(4) The data is deleted as soon as it is no longer necessary to achieve the purpose of its collection - in this case at the end of the usage process.
If the data is stored in log files, this will be undertaken in seven days at the latest. Further storage is possible. In this case, the user's IP addresses will be deleted or anonymised in such a way that assignment of the accessing client is no longer be possible.
(5) Collection of data for the provision of the website and the storage of data in log files is imperative for the operation of the website, so there is no inconsistency.
This cookie contains a characteristic character string (called a cookie ID), which enables unique identification of the browser when reopening the website.
The legal basis for processing personal data using technically necessary cookies is Art. 6 para. 1 S. 1 lit. f) GDPR.
The legal basis for processing personal data by using cookies for analytical purposes, if the user's consent to this has been obtained, is Art. 6 para. 1 S. 1 lit. a) GDPR.
We require cookies for the following applications:
The user data collected by technically necessary cookies shall not be used to create user profiles.
The purpose of using technically unnecessary cookies is to improve the quality of our website and its contents. Through the analysis cookies we learn how the website is used and can thus continuously optimise our offer. (For example, we can find out from which countries our homepage is accessed or which language settings the browser used has, from which we can deduce into which languages our homepage contents should be translated and which information e.g. regarding the arrival, our guests need. On the visited subpages and dwell times on the individual pages, we can deduce which information is particularly interesting for our guests and where further content would be desired.)
This information is used when you visit the website again with the same device to automatically recognise you and facilitate navigation. For these purposes, our legitimate interest also lies in the processing of personal data pursuant to Art. 6 para. 1 lit. f GDPR
I don't want any technically unnecessary cookies that are related to my visit to be stored on this website.
(1) With your consent you can subscribe to our newsletter free of charge, with which we inform you of our current interesting offers. The goods and services to be advertised will be named in the consent form.
To subscribe to our newsletter, we use the "double opt-in" procedure. This means that after your registration we will send you an e-mail to the specified e-mail address in which we ask you to confirm that you would like the newsletter to be sent. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and the time of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.
The only required information for sending the newsletter is your email address. Any other further information (for example name, address, number and age of children) is voluntary and is used to address you personally.
Sending the newsletter is based on the sale of goods and services:
If you purchase goods or services on our website and provide us with your email address, we may subsequently use it to send you a newsletter. In such a case, only direct marketing of our own similar products or services will be sent via the newsletter.
The data will be used exclusively for sending the newsletter.
(2) The legal basis for processing data after the user subscribes to the newsletter is, if the user's consent to this has been obtained, Art. 6 para. 1 S. 1 lit. a) GDPR.
The legal basis for sending the newsletter is Art. 7 para. 3 UWG.
(3) The user's email address is collected in order to deliver the newsletter.
Collection of other personal data as part of the subscription process is for preventing the misuse of the services or of the used email address.
(4) The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. Your email address will therefore be stored for as long as your subscription to the newsletter is active.
(5) You can cancel the receipt of our newsletters at any time and thus revoke your consent by clicking on the field "Unsubscribe newsletter" in our newsletter unsubscriber or by sending us an email to email@example.com or a message to the contact details given in the imprint.
(1) If you would like to order from our online shop, it is necessary for the conclusion of the contract that you give us your personal data which we need to complete your order. The information required for the processing the contract is marked separately; any further information is voluntary.The data is entered into a contact form, transmitted to us, and stored. The following data is collected for ordering via the online shop:
Data is only sent to third parties is this is necessary for the purpose of the contract or for account purposes and/or for the collection of the payment or you have expressly consented to this. In this regard, we only pass on the data required in each case. The data recipients are
(2) The legal basis is Art. 6 para. 1 S. 1 lit. b) GDPR. With regard to voluntary data, the legal basis for the processing of the data is Art. 6 para. 1 S. 1 lit. a) GDPR.
(3) The data collected is required for the fulfilment of the contract with the user (for sending the goods and confirming the contents of the contract). We therefore use the data to answer your inquiries, to process your order, and if necessary to check the creditworthiness or recovery of a claim and for the purpose of technical administration of the website. The voluntary information was provided to prevent misuse and, if necessary, to investigate criminal offences. We may also process the data you provide in order to inform you of other interesting and similar offers from our own portfolio or to send you emails containing technical information.
(4) The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. We are obliged by commercial and tax law to store your address, payment, and order details for a period of ten years after implementing the contract. However, after fifteen years we limit the processing of your data, that is, your data will only be used to comply with legal obligations. If there is a continuing obligation between ourselves and the user, we store the data for the entire term of the contract and for ten years thereafter (see above). With regard to the data voluntarily provided, we will delete the data upon expiry of forty years after execution of the contract, unless another contract is concluded with the user during this period; in this case, the data will be deleted upon expiry of forty years after implementation of the last contract.
1. Embedding YouTube videos
(1) We have included YouTube videos in our online offer, which are stored on http://www.YouTube.com and can be played directly on our website. [They are all integrated in the "Extended Privacy Mode", i.e. no data about you as a user is sent to Youtube if you do not play the videos. Only when you play the videos will the data referred to in paragraph 2 be transmitted. We have no influence on this data transfer.When you visit this website, YouTube receives the information that you have accessed the corresponding subpage of our website.
The following data is transmitted
This takes place regardless of whether YouTube makes available a user account via which you are logged in or no user account exists. If you are logged in to Google, your information will be directly associated with your account.
(2) The legal basis for processing the personal data of users is Art. 6 para. 1 S.1 lit. f) GDPR. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield,https://www.privacyshield.gov/eu-us-framework.
(3) The integration of the videos serves to make the website clearer for the user and to increase the search engine ranking of the website on Google and to refer more specifically to our specially produced videos. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or requirements-oriented design of its website. Such evaluation also takes place (even for users who are not logged in) for the purposes of providing customised advertising and to inform other social network users about activities on our website.
(4) If you do not wish to be associated with your profile when using YouTube, you must first log out before clicking the button.
(5) You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
2. Links to external websites
(1) There is a contact form on our website that can be used for electronic contact. If a user accepts this option, the data entered in the input screen will be sent to us and stored. This data includes:
The following data is also stored at the time the message was sent:
During the sending process, your consent is obtained for processing data and reference is made to this data protection declaration.
Alternatively, you can contact us via the provided email address. In this case, the user's personal data that is transmitted along with the email will be stored. If this includes information about communication channels (e.g. email address, telephone number), you also agree that we may contact you via this communication channel in order to respond to your request.
This data will not be disclosed to third parties in this context. The data is used exclusively for processing the conversation.
(2) The legal basis for processing the data, if the user's consent to this has been obtained, is Art. 6 Para. 1 S. 1 lit. a) GDPR. The legal basis for processing the data transmitted in the course of sending an email is Art. 6 para. 1 p.1 lit. f) GDPR. If you send us an e-mail with the intention of entering into a contract with us, this creates an additional legal basis for its processing per Art. 6 para. 1S. 1 lit. b) GDPR.
(3) We only use personal data provided on contact forms to make the requested contact. The data from your email inquiries will of course only be used for the purpose for which you made them available to us when contacting us. If you contact us by email, this also constitutes the necessary legitimate interest in processing the data. Processing other personal data during the sending process serves the purpose of preventing the misuse of the contact form and to ensure the security of our information technology systems.
(4) The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data from the contact form input screen and the data that was sent by e-mail, this is the case when the respective conversation with the user has been completed. The conversation will have ended when it is evident from the circumstances that the matter at hand has been conclusively resolved. Personal data that was additionally collected during the sending procedure will be deleted at the latest after a period of fifteen years.
(5) You have the option of revoking your consent to the processing of personal data at any time. If you contact us by email, you can object to the storage of your personal data at any time. It will not be possible to continue the conversation in this case. Regarding the revocation of the consent / objection of storage, we ask you to contact the data controller or the data protection officer according to § 1 via email or post. All personal data stored in the course of contacting us will be deleted as a result.
(1) On our website we use the service of Google Inc. (Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA) to analyse our users' online behaviour. The software sets a cookie on your computer (see above for cookies). If individual pages of our website are accessed, the following data is stored:
The information generated by the cookie about the use of this website by the user is generally transmitted to and stored in a Google server in the USA. This website uses Google Analytics with the extension "_anonymizeIp()". The software is set in such a way that the IP addresses are not stored completely, but only in a shortened form. In this way it is no longer possible to assign the shortened IP address to the calling computer. The full IP address will be sent to a Google server in the USA and abbreviated there only in exceptional cases. The IP address sent by your browser for the purposes of Google Analytics is not combined with any other Google data.
(2) The legal basis for processing personal data is your consent under Art. 6 para. 1 S. 1 lit. f) GDPR. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework for exceptional cases in which personal data is transferred to the USA.
(3) On our behalf Google will use this information to evaluate your use of the website and to compile reports on website activity. We are in a position to compile information about the use of the individual components of our website by evaluating the data obtained. This helps us to continuously improve our website and its user-friendliness. For these purposes, our legitimate interest also lies in the processing of personal data pursuant to Art. 6 para. 1 lit. f) GDPR. By anonymising the IP address, users' interest in protecting their personal data is sufficiently taken into account.
(4) The data will be deleted as soon as it is no longer needed for our recording purposes. In our case, this is the case after 18 months.
Furthermore, you can prevent the collection of data generated by the cookie and related to the usage of the website (incl. your IP address) and the processing of the data by Google by downloading and installing the browser plugin available under the following link: The current link is: "http://tools.google.com/dlpage/gaoptout?hl=de.“
You have the possibility to revoke your consent to the processing of your personal data at any time. If you contact us by e-mail, you can object to the storage of your personal data at any time. Concerning the revocation of the consent / contradiction of the storage we ask you to contact the responsible person according to § 1 via e-mail or by post.
If your personal data is processed, you are a data subject as defined by the GDPR and you have the following rights with respect to the data controller:
1. Right to information
(1) You can request that the data controller confirms whether we will process personal data that concerns you. If such processing has taken place, you can request free information from the data controller at any time about the personal data stored about you and about the following information:
(2) You have the right to request information regarding whether your personal information will be transmitted to a third-party country or an international organisation. In this respect, you can request the appropriate guarantees in accordance with Art. 46 of the GDPR in connection with the transmission.
2. The right of rectification
You have the right to rectification and/or completion with respect to the data controller if the personal data processed concerning you is incorrect or incomplete.
3. The right to limitation of processing
(1) Under the following conditions, you may request from the data controller that the processing of your personal data be restricted:
(2) Where processing of the personal data that concerns you has been restricted, such data – apart from being stored – may be processed only with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on the grounds of an important public interest of the Union or of a Member State. If the processing restriction has been done in accordance with the above conditions, you will be informed by the data controller before the restriction is lifted.
4. Right to deletion
(1) You can request that the data controller delete the personal data concerning you immediately, provided that one of the following reasons applies:
(2) If the data controller has made personal data that concerns you public and is subject to the obligation to delete it pursuant to Art. 17 para. 1 GDPR, we will take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform data processors who process the personal data that you as the data subject have requested the deletion of all links to this personal data or of copies or replications of this personal data.
(3) The right to deletion does not exist insofar as processing is necessary
5. Right to information
If you have exercised your right to have the data controller correct, delete, or limit the processing, this party is obliged to inform all recipients to whom the personal data that concerns you has been disclosed of this correction or deletion of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort. It is your right to have the data controller inform you regarding such recipients.
6. Right to data portability
(1) You have the right to obtain your personal data that you have provided to the data controller in a structured, commonly used and machine-readable format. In addition, you have the right to transmit this data to another controller without hindrance from the controller to which the personal data have been provided, insofar as
(2) In exercising this right, you shall have the right to have the personal data transmitted directly from one data controller to another, where technically feasible. The freedoms and rights of other persons must not be affected by this.
(3) The right to data portability shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the data controller.
(4) In order to exercise the right to data portability, the data subject may at any time contact the controller.
7. Right of objection
(1) You have the right, for reasons arising from your specific situation, to object to the processing of personal data concerning you at any time, which is carried out in accordance with Art. 6 para. 1 lit. e) or lit. f) of the GDPR; the same applies to profiling based on these provisions.
(2) The responsible party will no longer process the personal data that concerns you, unless the party can prove compelling legitimate reasons for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
(3) If the personal data that concerns you is being processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data that concerns you for the purpose of such marketing; this also applies to profiling, insofar as it is associated with such direct marketing. If you object to processing that is for direct marketing purposes, the personal data that concerns you will no longer be processed for these purposes.
(4) In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
(5) In order to exercise the right to object, the data subject may contact the controller directly.
8. The right to revoke the declaration of consent pursuant to data protection rights
You have the right at any time to revoke your data protection declaration of consent. The revocation of consent shall not affect the legality of any processing undertaken on the basis of this consent before its withdrawal. You can contact the data controller for this.
9. Automated decision in individual cases, including profiling
(1) You have the right not to be subject to a decision based exclusively on automated processing - including profiling - that has legal effect against you or significantly impairs you in a similar manner. This shall not apply if the decision:
(2) However, these decisions may not be based on special categories of personal data pursuant to Art. 9, Para. 1 of the GDPR, unless Art. 9 para. 2 lit. a) or g) of the GDPR and appropriate measures have been taken to protect your rights and freedom as well as your legitimate interests.
(3) In the cases referred to in (1) and (3), the data controller shall take reasonable measures to safeguard your rights, freedoms and legitimate interests, including at least the right to obtain the intervention of a person on the part of the data controller, to state his or her own position and to challenge the decision.
(4) If the data subject wishes to exercise their rights concerning automated individual decision-making, he or she may, at any time, contact any employee of the company.
10. The right to file a legal complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside, work or where the infringement is suspected, if you believe that the processing of personal data that concerns you is in contravention of GDPR. The supervisory authority with which the appeal has been filed shall inform the appellant of the status and results of the appeal, including the possibility of a judicial remedy under Art. 78 GDPR.
Privacy statement of the Familotel Allgäuer Berghof | Reichert & Neusch GmbH vom 24.05.2018