Legal information
Privacy policy
Data protection at a glance
General information
Personal data is any information that can be used to identify a person directly or indirectly. This includes, for example, name, contact details, technical access data and information submitted via contact, reservation, application or voucher forms.
Some of the data is required to provide the website in a technically secure manner. Further data is only processed if it is needed for an enquiry, reservation, application, voucher order or another service you have requested. Optional analytics, marketing and video services are only loaded after you have given the corresponding consent.
Controller
Hotel Dirsch GmbH
Hotel Dirsch GmbH, Hauptstraße 13, 85135 Emsing.
Phone: +49 8423 189-0 · Email: info@hotel-dirsch.de
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
We have appointed a data protection officer for our company: Dirk Wattenberg, Margit-Schramm-Straße, 80639 München, telephone +49 171 8303200.
Technical provision
Hosting, security and log data
Hosting by STRATO
The website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin. In particular, the IP address, time, requested address, browser data as well as technical error and security information may be processed in this context.
Server log files
The hosting provider processes technically necessary log data in order to provide the website, fend off attacks and investigate errors. The legal basis is our legitimate interest in a secure and stable online service pursuant to Art. 6(1)(f) GDPR.
Encryption
The website is delivered via an SSL or TLS-encrypted connection. You can recognise an encrypted connection by “https://” and the padlock symbol in your browser.
Enquiries and reservations
Processing of form data
When you submit a form, we process the details you have entered in order to handle your request. This applies in particular to hotel and meeting enquiries, table and day spa reservations, wellness enquiries, job applications and voucher orders.
The details are stored in the protected Hotel Dirsch administration system and transmitted by e-mail to the responsible internal recipient address. Access is restricted on a role basis to the hotel team, Wellness Weglöhner and technical administration.
The legal basis is Art. 6(1)(b) GDPR, insofar as the processing is necessary for the performance of pre-contractual measures or for the performance of a contract. Otherwise, the processing is carried out on the basis of Art. 6(1)(f) GDPR or of consent given pursuant to Art. 6(1)(a) GDPR.
The data is erased as soon as the respective purpose no longer applies and there are no statutory retention periods or legitimate grounds for further storage.
Special processing operations
Applications, vouchers and payments
Applications
Application data and any optionally uploaded PDF documents are processed exclusively for the purpose of carrying out the application procedure. The legal basis is in particular Section 26 BDSG (German Federal Data Protection Act) and Art. 6(1)(b) GDPR. If you are not hired, the data is generally erased after the procedure has been completed, unless there is consent or a legal basis for longer retention.
Voucher orders
For voucher orders, we process contact, billing, delivery and order data as well as the selected payment method. For payment in advance, the payment information is sent by e-mail and receipt of payment is documented internally.
PayPal
If you select PayPal, you will be redirected to PayPal to process the payment. PayPal processes the data required for the payment under its own responsibility. In particular, the payment reference, amount, currency and payment status are returned to the website and verified.
PayPal privacy statementIn-house reach statistics
Technically necessary visitor counting
For simple, internal website statistics, a random visitor value is stored in the technically necessary cookie “fs_site_visitor”. This value does not contain a name, e-mail address or IP address. For the statistics, the time, the page path requested and a visitor value pseudonymised with a secret key are stored.
If the booking form is opened from an offer detail page, the selected offer, the selected length of stay and a technical package identifier are also recorded. Travel dates, contact details or any subsequent booking are not transmitted to the internal statistics. The evaluation therefore only shows booking interest and not completed bookings.
The statistics serve the technical and editorial evaluation of the website and the offers. The legal basis is our legitimate interest in data-minimising measurement of reach and interest pursuant to Art. 6(1)(f) GDPR. The visitor cookie is valid for a maximum of 400 days.
Consent management
Cookies and optional services
The website uses Klaro to manage your consents. Your selection is stored in the cookie “hotel_dirsch_consent” for up to 180 days. Klaro is loaded via the content delivery network of KIProtect. You can change or withdraw your consent at any time via the privacy settings.
Google Consent Mode always starts with permissions denied. Optional analytics, marketing and external media services are only activated after you have given your consent. Consent given is the legal basis pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act).
Only with consent
Analytics, marketing and external media
Google Tag Manager
Google Tag Manager manages approved analytics and marketing tags. The provider is Google Ireland Limited. It is only loaded after you have consented to statistics and executes the analytics and marketing tags stored in the container, including Google Analytics, Google Ads and Meta Pixel. The advertising signals of Google Consent Mode (storage, user data, personalisation) are only enabled with your marketing consent. Without consent, Tag Manager is not loaded.
Privacy at GoogleGoogle Ads (conversion tracking and remarketing)
With Google Ads, we measure whether visits via our adverts lead to enquiries, reservations or bookings (conversion tracking), and we can show adverts again to visitors to our website (remarketing). The provider is Google Ireland Limited. The tags are integrated via Google Tag Manager, which is only loaded after you have given your consent; the advertising signals of Google Consent Mode are only enabled with your consent to “Marketing”. In this context, cookies such as “_gcl_au” may be set and information such as pages viewed, time, campaign identifier and conversion event may be transmitted to Google; processing may also take place in the USA. You can withdraw your consent at any time via the privacy settings.
Privacy at GoogleMeta Pixel (Facebook and Instagram)
With the Meta Pixel, we measure the effectiveness of our adverts on Facebook and Instagram (conversion measurement) and can show advertising there to visitors to our website (remarketing). The provider is Meta Platforms Ireland Limited. The pixel is integrated via Google Tag Manager, which is only loaded after you have given your consent. In this context, the cookies “_fbp” and “_fbc” may be set and information such as pages viewed, time, browser data and events such as a submitted enquiry may be transmitted to Meta; processing may also take place in the USA. You can withdraw your consent at any time via the privacy settings.
Privacy at MetaAdditive Hotelmarketing
Additive is used for reach and booking analysis of the hotel website and the booking process. The service is only loaded after you have consented to statistics and reach measurement.
LinkedIn Insight Tag
The LinkedIn Insight Tag can measure campaigns and website visits in connection with LinkedIn. The provider is LinkedIn Ireland Unlimited Company. The service is only activated after marketing consent has been given.
Privacy at LinkedInYouTube
YouTube videos are only loaded after you have actively enabled them. When a video is played, a connection to Google or YouTube may be established and usage data may be processed.
Privacy at GoogleHotel news
Newsletter
When you subscribe to the newsletter, the data provided is processed exclusively for sending the requested information and for documenting your consent. The legal basis is Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future, for example via the unsubscribe link in the newsletter.
Data subject rights
Your rights
Within the scope of the statutory requirements, you have the right of access, rectification, erasure, restriction of processing and data portability. Any consent given can be withdrawn at any time with effect for the future.
Insofar as processing is based on Art. 6(1)(f) GDPR, you may object to the processing on grounds relating to your particular situation. You also have the right to lodge a complaint with a competent data protection supervisory authority.
Please address enquiries regarding your rights to Hotel Dirsch GmbH, Hauptstraße 13, 85135 Emsing, or by e-mail to info@hotel-dirsch.de.