Imprint - Data privacy statement

IMPRINT - DATA PRIVACY STATEMENT

 

I. Information on the processing of personal data

With the following information, we aim to give you an overview of the processing of your personal data associated with the use of our website at www.head-gmbh.com and to inform you of your rights under data privacy law in accordance with art. 13 and 14 of the GDPR.

 

1. The Party responsible for data processing and imprint

The party responsible for data processing on this website in accordance with art. 4, no. 7 GDPR and the provider of this website (service provider) pursuant to the German Teleservices Act (TMG) is

H.E.A.D. Hotel Equipment and Design GmbH
Lyoner Strasse 25
60528 Frankfurt am Main
Telephone: +49 69 66564 03
Fax: +49 69 66564 662
Email: kontakt@head-gmbh.com
Directors: Lars Schmid, Claus Glüsing
VAT ID no.: DE 187077374
Registered office: Frankfurt - HRB 18033
Court of registry: Local court Frankfurt am Main

 

2. Contact details of the data privacy officer

You can reach our data privacy officer at

TÜV Informationstechnik GmbH
Am TÜV 1
45307 Essen
Email address: datenschutz@deutschehospitality.com

 

3. Purpose and legal basis for the processing of personal data

We process your personal data in compliance with the provisions of the EU General Data Protection Regulation (GDPR), the new German Federal Data Protection Act (BDSG-neu), and all other applicable laws, for the following purposes and on the following legal basis:

(a) For processing requests which you make to us by email, via the contact form on the website or by telephone - the legal basis for this is your acceptance in accordance with art. 6 para. 1, clause 1, point a) of the GDPR.

(b) To guarantee appropriate design and ongoing optimisation of this website and for the statistical recording and evaluation of the use of the website (using Google Analytics - see item 11 below) - Legal basis for this is art. 6, para 1, clause 1, point f) of the GDPR.

 

Minors

Minors may not submit any personal data to us without permission from a parent or guardian. We do not knowingly process any personal data acquired from minors in the scope of our internet presentation. 

 

4. Categories of recipients of personal data

Where necessary for the purposes outlined above in point 3, we disclose your personal data to the following recipients or categories of recipients pursuant to art. 4, no. 9 of the GDPR:

Within our company, your data will only be viewed or accessed by those departments that require it (in the scope required in each case) to fulfil our contractual and statutory obligations.

Service providers (e.g. as part of our order processing in line with art. 28 GDPR) and performing agents commissioned by us can also receive access to personal data for these purposes. These are companies in the categories of IT services.   

Further data recipients may be those offices for whom you have given us your permission for the forwarding of data.

 

5. Forwarding of personal data to a third country

The forwarding of personal data to places in countries outside of the European Union (known as Third Countries) will not take place - other than with regard to the data used by Google Analytics.

 

6. Duration of personal data storage and criteria for establishing such duration

The data is erased as soon as it is no longer required for its intended purpose. This is the case for the personal data which has been sent to us via email when the relevant conversation with the user has come to an end. The conversation has come to an end when it can be inferred from the circumstances that the subject in question has been finally resolved.

 

7. Your rights as a data subject

Every data subject whose personal data is processed has a right under art. 15 of the GDPR to information from those responsible about the relevant personal data, as well as a right to rectification of such data under art. 16 of the GDPR, a right to erasure under art. 17 of the GDPR, a right to restriction of its processing under art. 18 of the GDPR, a right to object to its processing under art. 21 of the GDPR, and a right to data portability under art. 20 of the GDPR. In terms of the right to information and the right to erasure, the limitations pursuant to sections 34 and 35 of the BDSG-neu also apply.

Further information on your right to object to the processing in accordance with art. 21 GDPR.

Where the processing of your personal data is based on consent given to us, you have the right to withdraw such consent at any time, whereby this will not affect the legitimacy of the processing carried out based on such consent up to the point of its withdrawal.

Furthermore, there is also a right to lodge a complaint with the relevant supervisory authority in line with art. 77 of the GDPR in conjunction with section 19 of the BDSG-neu.

 

8. Obligation to provide data

When using our website, you are under no obligation to provide personal data. If you want us to make contact with you, we will need (i) your name, and (ii) your telephone number or your email-address at the very least. You may provide additional details voluntarily.

 

9. Automated decision-making and profiling

In the establishment and execution of our contractual relationship, you will not be subject to any automated individual decision-making, including profiling, which produces legal effects concerning you or similarly significantly affects you pursuant to art. 22 of the GDPR.

 

10. Additional information about your right to object pursuant to art. 21 of the GDPR

You have the right to object, for reasons arising from your specific situation, to the processing of personal data relating to you at any time based on art. 6, para. 1, clause 1, point e) of the GDPR (data processing in the public interest) or art. 6, para. 1, clause 1, point f) of the GDPR (processing necessary for the purposes of legitimate interests); this also applies to any profiling based on this provision according to art. 4, para. 4 of the GDPR.

If you lodge an objection, we will no longer process your personal data, unless we can prove it is absolutely necessary for protective reasons that outweigh your interests, rights and freedoms, or such processing serves the assertion, exercise or defence of legal claims.

If your personal data are processed by us in order to carry out directly advertising, you have the right to object to the processing of personal data relating to you for the purposes of such advertising at any time; this also applies for profiling where this is in connection with direct advertising.

Objetion can be made in any form and should be directed to our data privacy officer using the contact details stated in point 2.

 

Status and updating of the data privacy statement

This data privacy statement is valid from the 20/12/2021.

We will update this data privacy statement from time to time in the event of relevant changes to our website, the processing of  personal data or statutory provisions. The revised version will then be valid from the published date on which it comes into force. Where there are fundamental changes to this data privacy statement, we will inform you promptly before the changes come into force with a notification on our website. We will also inform our guests, where relevant, about the changes via e-mail or in another way.      

 

DESIGN AND PROGRAMMING

id-ea.de
Stephan Rasch
mobile phone: +49 178 6662150 
Internet: www.id-ea.de