Privacy Policy Statement
Thank you very much for your interest in our company and our products and/or service. We wish that you feel safe when you visit our website and that you know that your personal data are protected. We want you to know when we collect which data and how we use them. We are subject to the provisions of the European General Data Protection Regulation (GDPR) as well as the supplementary regulations of the German Federal Data Protection Act (BDSG = Bundesdatenschutzgesetz). To make sure that the data protection regulations are complied with by us and by contracted service providers, we have taken adequate technical and organizational measures.
This Privacy Policy applies to our online offer. It covers our website, its functions and contents as well as external online presence, such as our marketing activities on social media. This Privacy Policy is also used to inform you about how your personal data is further processed and to comply with our duty to inform you.
The terms used in this Privacy Policy, such as Controller or personal data, are used according to Definitions as per GPDR. To improve readability, and in the sense of a comprehensible information transfer, we usually do not name the individual articles, paragraphs, etc.
Controller
The Controller in the sense of the GDPR and other national data protection legislation of the Member States as well as other applicable data protection regulations is
Hotmobil Deutschland GmbH
Zeppelinstrasse 5
78244 Gottmadingen
Germany
Phone: +49 7731 9460-0
E-mail: info@hotmobil.com
Data protection officer
The Controller has appointed a data protection officer. His contact details are
Julia Focke-Flohr
E-mail: datenschutz@hotmobil.de.
Please do not hesitate to contact the data protection officer for any doubts, suggestions or comments regarding data protection you might have or to enforce your below-mentioned rights.
GENERAL INFORMATION ON DATA PROCESSING
Legal bases for processing personal data
In the context of data protection regulations, processing personal data is generally not allowed unless there is a legally admissible reason for permission. We have to inform you about the legal bases of data processing.
Provided we request your consent for data processing, this is the legal basis.
When personal data, which are required for the performance of a contract a party of which you are, are processed, the performance of the contract is the legal basis. This also applies to processing required for precontractual measures.
If it is required to process personal data for compliance with the legal obligation to which we are subject, this serves as legal basis.
The processing of personal data is also regarded to be lawful where it is necessary to protect an interest which is essential for the life of the data subject or that of another natural person.
If processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party and your interests, fundamental rights and freedoms do not prevail, this provides the legal basis for processing.
Erasure of data and storage period
As soon as the purpose for storage is no longer applicable, we erase or block your personal data. However, data might be stored longer than this period if it is required due to legal regulations to which we are bound. This concerns data to be stored for reasons arising out of commercial or tax law, for example, such as delivery notes or invoices.
Your data are blocked or erased if a storage period prescribed in these legal provisions expires, unless continued storage of the data is required to conclude or execute a contract.
Recipients of data / categories of recipients
In our company, we make sure that your data is only disclosed to those persons needing them to fulfil contractual and legal duties.
Sometimes we contract carefully selected external service providers to process your data. Should data be disclosed to service providers acting as Processors, this shall be done in the context of the requirements as set out in the GDPR. We have carefully selected our Processors; they are bound by our instructions and are regularly controlled and audited. We only contract Processors who provide sufficient guarantees that adequate technical and organizational measures are taken in a way that processing is done in compliance with the requirements of the GDPR and the German BDSG while protecting your rights.
Transferring personal data to third parties
Generally, we do not transfer any personal data to third parties without your explicit consent. If, for processing, we disclose your data to third parties, transfer your data to them or grant them access to your data in any other way, this is also done exclusively according to one of the aforementioned legal bases.
We transfer data, for example, to payment service providers, shipping providers or suppliers if required for the performance of the contract. If we are obliged to do so by law or court order, we have to transfer your data to the relevant entities entitled to information.
Transfer of personal data to a third country
The GDPR guarantees an equally high data protection level within the European Union (EU) and the European Economic Area (EEA). When selecting our service providers and cooperation partners, we prefer European partners, if possible, if we wish to process your personal data.
If we have your data processed in a third country - this means, outside the EU/EEA -, this is always done in compliance with legal regulations.
In addition to your explicit consent or contractually or legally required transfer, we only have your data processed in third countries with a recognized data protection level, which have committed themselves the standard contract clauses of the EU Commission, and/or if certifications or binding internal data protection rules are in place.
Commercial and business services
We process data of our contract and business partners, such as suppliers, customers and interested parties (in the following referred to as business partners) in the context of contractual or similar legal relationships as well as related measures and to communicate with our business partners.
These data are processed to fulfill our contractual duties, to safeguard our rights and for purposes of the related administration as well as corporate organization. We only transfer our business partners' data to third parties in compliance with the applicable law insofar as this is required for the above-mentioned purposes or to fulfill legal duties or with the data subject's consent (e.g. to telecommunications, transport and other assistance services as well as subcontractors, banks, tax consultants and legal counsels, payment service providers or tax authorities). We will inform our contractual partners in the context of this Privacy Policy about any other forms of processing, for example, for marketing purposes.
We inform our business partners before or in the course of data collection or personally which data are required for these purposes.
Erasure of data and storage period
As soon as the purpose for processing is no longer applicable, we erase or block your personal data. However, data might be stored longer than this period if it is required due to legal regulations to which we are bound. This mainly concerns data that have to be stored for archiving as required by law (e.g. normally 6 years based on commercial law or 10 years based on tax law).
Processed data: Personal details (e.g. names, addresses), payment data (e.g. bank details, invoices, payment history), contact details (e.g. e-mail address, phone numbers), contract data (e.g. subject matter, term).
Purpose of processing: Provision of contractual services and customer service, contact requests and communication, internal organizational procedures, administration and reply to inquiries.
Legal bases: Performance of a contract / precontractual inquiries, legal duty, legitimate interests.
Automated decision-making
We do not use automated decision-making.
USE OF OUR ONLINE-OFFER
You may generally use our online offer without disclosing your identity. In this paragraph, we explain you when and in which context we process data when our online offer is used and we explain the functions offered by service providers we have implemented, how they work and what happens with your data.
Children
Our online offer is generally targeted to adults. Persons under the age of 16 are generally not allowed to transfer any personal data to us without the consent of their parents or legal guardians.
Data collection when you visit our websites
If you use our websites only for information purposes, i.e. you do not register for any offer nor conclude a contract with us or disclose information in any other way, we only collect the personal data your browser transfers to our servers.
When you visit our websites, we collect the following data which are technically required to show you our websites and to guarantee stability and security:
• The user's IP address, date and time of the request
• Contents of the request (precise page)
• Access status / HTTP status code
• Transferred data volume
• Website from which the request comes
• The user's operating system and the language and version of the browser software.
These data are temporarily stored in our system's log files for a maximum duration of seven days. Any storage beyond this period is possible; however, in this case, the IP addresses will be truncated or alienated so that it is not longer possible to associate them to the calling client. Log files are not stored together with your other personal data in this context. The legal basis for this type of processing is our legitimate interest.
Since data collection is mandatory to display the websites and data storage in log files is necessary for operation of our websites and to maintain IT security, you do not have any right to object.
Encryption for transmission
To protect your transferred data in the best possible way, we use encryption for transmission. To guarantee protection of your data during transmission, we use state-of-the-art SSL/TLS encryption.
Requests to us
If you send a request to us from our website - for example, by means of the contact form -, your personal data will be processed to answer your inquiry.
Customer account
Person data is required to maintain a customer account. The required data is marked with an asterisk “*” in the registration. By registering, you acknowledge that such data will be used for maintaining your account.
USE OF COOKIES
General information about the use of cookies
In addition to the above-mentioned data, cookies are stored on your end device when you visit our websites. Cookies are small text packages that a website can send to a browser; they are stored by the browser and returned by it. Cookies are used to store different details that can be read by the original source setting the cookie. Normally, they contain a characteristic string (ID) that allows unique identification of the browser when the website is visited again or a page is changed. In the first place, they are used to design the online offers in a more user-friendly and effective way. The users' data stored in cookies are technically pseudonymized so that an allocation of the data to the calling user is normally not longer possible. If identification is possible, such as with a login cookie whose session ID is necessarily linked to the user's account, we inform you accordingly in the relevant moment.
We use different types of cookies:
• "Session cookies" are cookies that are deleted once you leave our website and close your browser. Such cookies are used to store, for example, language settings or the contents of the shopping basket.
• "Permanent cookies" remain stored even after closing the browser. This allows, for example, to store the login status or entered search terms. We use such cookies for range measurement or marketing purposes, for example. Persistent cookies are deleted automatically after a specified period, which may be different from cookie to cookie. You may also delete these cookies any time in your browser.
In addition to "first-party cookies", which are set by us as the controller responsible for data processing, "third-party cookies" are used, which are offered by other service providers.
• We, as Controller, set "first-party cookies":
The legal basis for processing your personal data is our legitimate interest.
• External service providers who carry out web tracking or range measurements for us may also set cookies.
The legal basis for processing your personal data is your consent.
Information about services used
Cookie management solution
We use a cookie management solution. This allows you to manage the cookies used by us, obtain more information about data processing by means of cookies as well as to learn the purpose and the storage period of the cookies used.
The recipient and/or the categories of recipients as well as the storage period for the services listed in the following are mentioned in our cookie management solution.
Chatbot
This website uses a live-chat software provided by Userlike UG (haftungsbeschränkt), Probsteigasse 44-46, 50670 Cologne, Germany. This allows direct online communication with you, and we can answer your questions as quickly as possible.
In this case, the legal basis for processing your personal data is our legitimate interest, to offer you a service or for initiation or performance of a contract with you, if applicable.
Ausschreiben.de
We use the service offered by "ausschreiben.de" on this website.
This service is an online database, which serves as presentation platform for authors who submit tender texts, images, drawings and other production information. This allows you to easily access tender texts for our product range. You may export the texts in different file formats.
This is a service offered by ORCA Software GmbH, Georg-Wiesböck-Ring 9, 83115 Neubeuern, Germany (hereinafter referred to as ORCA).
The legal basis for the use of ORCA is your voluntarily given consent.
Piwik Analytics
Piwik Analytics is a web analytics application for statistical analyses. Piwik also uses cookies. Piwik statistically analyses your visits to our website, such as the number of visits, your average stay on the website, which pages you have read.
The service is operated by ORCA Software GmbH, Georg-Wiesböck-Ring 9, 83115 Neubeuern, Germany (hereinafter referred to as ORCA).
The legal basis for the use of ORCA is your voluntarily given consent.
Google Analytics
If you have given your consent, Google Analytics is used on this website. It is a web analytics service offered by Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Google). It allows to allocate data, sessions, and interactions across several devices to a pseudonymous user ID thus analyzing a user's activities across various devices.
Google Analytics uses cookies that allow to analyze your use of the website. The information generated by the cookies with respect to your use of this website will be generally transmitted to and stored by a Google server in the USA. However, should you access this website from a member state of the European Union or from another country that is party to the Agreement on the European Economic Area, and in case IP anonymization is activated on this website, Google will truncate your IP address before transmission. We inform you that Google Analytics was extended by an IP anonymization on this website to guarantee an anonymous collection of IP addresses. The IP address communicated by your browser in relation to Google Analytics is not merged with other data from Google.
Google will use this information on our behalf to analyze your use of the website, to collate reports on your activities on our website and to provide other services connected with the use of the website.
The legal basis for the use of Google Analytics is your voluntarily given consent.
For more information about Google's terms of use and privacy policy, please refer to here and here.
Google Ads and conversion tracking
If you have given your consent, Google Ads, including conversion tracking, is used on this website. It is a service offered by Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Google). Google Ads is a web analytics application. We use conversion tracking for a targeted advertising of our offer:
If you click an ad placed by Google, a cookie is stored on your end device due to conversion tracking. If you visit a certain page of our website, we and Google can analyze whether you have clicked an ad placed by Google and whether you have been redirected to our website.
Google prepares statistics about your visit to our website based on the information collected like this. In addition, we get information about the number of users who have clicked our ad(s) as well as which page(s) of our website have been loaded. This information is used for preparing conversion statistics for Ads customers who have decided to use conversion tracking. Customers, i.e. we as website operators, learn about the total number of users who have clicked the ad and have been redirected to a page provided with a conversion tracking tag. However, no information by means of which a user can be personally identified is provided.
The legal basis for the use of Google Ads is your voluntarily given consent.
Facebook Pixel
Insofar as you have declared your consent, Facebook Pixel is used on this website. This is a service of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter referred to as Facebook). Facebook Pixel enables Facebook to display our ads on Facebook, so-called Facebook Ads, only to those Facebook users who have been visitors to our website, in particular those who have shown interest in our online offering or in certain topics or products. Facebook pixel enables verification of whether a user was redirected to our website after clicking on our Facebook ads. We use Facebook Pixel for marketing and optimization purposes, in particular to place relevant and interesting ads for you on Facebook and thus improve our offer, make it more interesting for you as a user and avoid annoying ads.
If you are logged in to Facebook with your user account, your visit to our website will be noted in your user account. The data collected about you is anonymous for us, so it does not allow us to draw any conclusions about your identity. We have no influence on the scope and further use of the data processed by Facebook through the use of Facebook Pixel. If you have a user account with Facebook and are registered, Facebook can assign the visit to your user account. You can deactivate the remarketing function "Custom Audiences" in the area of the settings for advertisements in your Facebook account. Even if you are not registered with Facebook or have not logged in, there is a possibility that the Facebook will learn and store your IP address and possibly other identifiers.
The legal basis for the use of Facebook Pixel is your voluntarily given consent.
YouTube
We have implemented YouTube videos at different positions. YouTube is a service offered by a third party not associated with us, i.e. Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Google). To play a video, it is mandatory that Google processes the IP address.
In case you click a link to YouTube, we inform you that YouTube stores user data based on their data usage guidelines and uses them for their own business purposes.
Implementation of YouTube contents is only carried out in "extended privacy mode". YouTube provides it and thus guarantees that YouTube does not store cookies on your device in the first place. When the relevant pages are loaded, however, the data mentioned under "Use of our online offer" are transferred, and it is disclosed, in particular, which pages of our website you have visited. This information, however, cannot identify you unless you have logged on YouTube or another Google service before loading our website and/or are permanently logged on.
As soon as you play an implemented video by clicking it, YouTube only stores cookies without personally identifiable information on your device - due to the extended privacy mode -, unless you are currently logged on a Google service.
Online offers in social media
We offer online services on different platforms to provide information or to get in touch with you.
We do not have any influence on the processing of your personal data by the relevant platform operator. Normally, the platform operator stores cookies in your browser when you visit our online offers on these platforms; these cookies store user behavior and/or interests for market research and advertising purposes.
Platform operators use these user profiles collected on various devices to show you personalized ads. This type of data processing might also affect people who are not registered as users of the relevant platform. Maybe your data are processed outside the European Union, which might make it more difficult for you to enforce your rights. When we select such platforms, we take into consideration, however, whether the operators commit to complying with the EU data protection standards.
Processing your personal data in the course of your visit to one of our offers in social media is based on our legitimate interests in a varied public image of our company and the use of effective information opportunities and communication with you.
Detailed information about data processing when you use our offers on these platforms, your rights to object and to enforce your right to information can be obtained from the privacy statement of the relevant platform operator.
Facebook
Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland
Agreement on the joint processing of personal data in accordance with the GDPR
Privacy policy of the service provider
Instagram
Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland
Agreement on the joint processing of personal data in accordance with the GDPR
Privacy policy of the service provider
Twitter
Twitter International Company., One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland
Privacy policy of the service provider
LinkedIn
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
Datenschutzhinweise des Anbieters
YouTube
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Privacy policy of the service provider
Xing
XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany
Privacy policy of the service provider
Newsletter
We offer you to subscribe to our free-of-charge e-mail newsletter. This newsletter is only sent after your previous consent. When you subscribe to our newsletter, the data you entered in the entry mask (name and e-mail address) are transferred to us and stored as long as the newsletter subscription is active.
We ask for your consent to process these data for the purpose of sending the newsletter and we refer you to this Privacy Policy. For subscription, we use a "double opt-in" procedure. After you have registered, you receive an e-mail with a link that you must click to confirm your subscription. This prevents unauthorized third parties from subscribing using your e-mail address.
We log the registration process to be able to prove the procedure according to legal requirements. The IP address of the calling end device, date and time of registration are stored. The data you entered are stored as long as the newsletter subscription is active.
You may unsubscribe any time. Each newsletter includes an unsubscribe link for this purpose. This also allows to withdraw your consent. The legal basis for processing your personal data is your voluntarily given consent to receive newsletters.
If you purchase goods or services and provide your e-mail address for this purpose, we reserve the right to use it to send newsletters with direct advertising for our own similar products or services. This serves for the purpose of our prevailing legitimate interests to a promotional approach to our customers in the course of balancing interests. You may object to this use of your data any time by sending a message to one of the below-mentioned contact options or by means of the unsubscribe link in the advertising mail without incurring any other transfer costs than the basic rates. If the newsletter is sent due to the sale of goods and services, we refer to the requirements of the German unfair competition legislation (UWG).
Analysis of opening rates (reading habits)
Our newsletters contain a pixel-sized file (web beacon or tracking pixel) that is retrieved from our server or - from the e-mail shipping provider's server if we contract one - when the newsletter is opened. During this retrieval, technical information, such as information regarding your browser and operating system and IP address and time or time of retrieval, is collected.
This information is used to technically improve our newsletter, for example. In addition, we would like to determine your access time and your reading habits based on the place from where you retrieve it. This analysis includes the determination whether the newsletters are opened, when they are opened, and which links are clicked. For technical reasons, this information may be allocated to individual recipients. But it is not in our interest to observe individual users. These analyses are intended to recognize our users' reading habits and to adapt our contents to them or to send different contents that reflect the interests of our user groups.
Subject to the explicit consent of the users, analysis of the newsletter and performance measurement are carried out based on our legitimate interests for purposes of providing a user-friendly and secure newsletter system which serves our business interests and meets the users' expectations.
Unfortunately, a separate revocation of the performance measurement is not possible. If you want to object to performance measurement, you have to unsubscribe from the newsletter. This means, if you have consented, you must withdraw your consent. When you receive the newsletter based on our previously declared legitimate interest, you have to object when you receive the newsletter.
The legal basis for sending our newsletter is either your voluntarily given consent or our legitimate interest.
Opt-out option
You may unsubscribe from our newsletter any time, i.e. withdraw your consent or object to a future receipt. A link to unsubscribe from the newsletter can be found at the end of each newsletter. You may also use any of the other above-mentioned contact options, preferably by e-mail, to unsubscribe.
We may store unsubscribed e-mail addresses three years for reasons of our legitimate interests before we erase them so that we can prove a given consent. Processing these data is limited to a potential defense against claims. In case of the obligation to permanently observe objections, we reserve the right to store the e-mail address in a blacklist for this purpose alone.
JOB APPLICATIONS
If you apply for a job in our company, the data provided by you - such as contact details and qualifications -, are only used for the application process.
Your data will be forwarded internally to the responsible department head. We process your personal data based on your job application provided it is necessary to decide whether to establish a job relationship with us.
Furthermore, we can process your personal data if it is required to defend any legal claims enforced in the context of the application procedure.
Your data are generally erased 6 months after the application process ends, unless there are any agreements to the contrary made with the applicant (see admission to the applicant pool, for example). If your application results in the conclusion of an employment contract, your data will be entered in your personal file.
How long will your data be stored?
We store your personal data as long as it is necessary to come to a decision regarding your application. If the employment relationship between you and us does not come into existence, we may still keep your data provided this is necessary to defend against possible legal claims.
Admission to the applicant pool
We are happy to add your application to an applicant pool. This requires your consent. You may give this consent by enabling the relevant option before sending your application.
If your application in the applicant pool is not used by us within a year, your application is automatically erased.
No automated decision-making
There is not any automated decision-making in single cases, i.e. a decision regarding your application is not based on automated processing alone.
YOUR RIGHTS AS DATA SUBJECT
If your personal data are processed, you are a data subject in the sense of the GDPR.
You, as data subject, are entitled to various rights about which we would like to inform you in the following. Depending on the reason for and type of processing of your personal data, you are entitled to the rights described in the following sections.
Your right to access
As data subject, you are entitled to be informed by us whether we process your personal data and - if this is the case - which personal data we process.
You are also entitled to request a copy of the personal data processed by us.
Your right to rectification
You are entitled to request from us the rectification of your personal data you consider incorrect.
You are also entitled to request the completion of such personal data you consider incomplete.
Your right to erasure
If the legal requirements are met, you may demand erasure of your personal data.
This is the case, for example, if we process your data based on your consent and you withdraw your consent.
However, we may not erase any data, for example, if we have to store them due to statutory retention periods. We cannot fulfill your erasure request either if it is necessary that we process your personal data for the establishment, exercise or defense of legal claims.
Your right to restriction of processing
Under certain circumstances you, as data subject, are entitled to restrict processing of your personal data.
One of these conditions is, for example, that you dispute the accuracy of your personal data. Or the case that we do not longer need your personal data but you need them for the establishment, exercise or defense of legal claims.
Your right of objection
If we process your personal data based on a legitimate interest, you are entitled to object to such processing on grounds relating to your particular situation. You are not entitled to this right to objection, however, if processing is based on a compelling public interest which prevails your interest, if we are obliged to process your data due to a legal provision or if processing is required for the establishment, exercise or defense of legal claims.
If we use your personal data for direct marketing, you are entitled to object any time to processing for such type of advertising. If you object to processing for such purpose, your personal data will no longer be processed for this purpose.
If we process your data based on your consent, you are entitled to withdraw your consent any time with future effect. Withdrawal of your consent does not affect the legality of processing until you declared your withdrawal.
Your right to data portability
You have this right only in respect of personal data that you yourself have provided to us. You are entitled to request from us that these personal data are directly transferred from us to another controller.
Alternatively, you are entitled to request from us that we make your data available in a machine-readable format. However, this applies only if we process your personal data based on your consent or a contract and if processing is carried out using automated processes.
Right to lodge a complaint with a supervisory authority
Furthermore, you are entitled to lodge a complaint with a supervisory authority if you believe that processing your personal data violates data protection regulations.
CHANGES
This Privacy Policy will be amended from time to time. These adjustments are made, for example, if changes occur due to technical progress, legal requirements or other influences.
Release date: September 2020