Data Protection Declaration
General Data Protection Regulation
Data processing in the context of social media
Video Surveillance Information
Responsible Authority in terms of the Data Protection law is:
Schlossbräu mk | hotels GmbH
Phone: +49 8723 9787-10
Fax: +49 8723 9787-190
for mk | apartment nin
LINDNER NEKRETNINE d.o.o.| Malešnica 3 | Zagreb | Croatia
MBS: 080763350 | OIB: 44864117115
Managing Director Vladimir Majcen
Collection of General Information
When you access our website, information of a general nature is automatically recorded. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider and the like. This is only information that does not allow conclusions about your person. This information is technically necessary to correctly deliver the contents of web pages requested by you and is mandatory when using the internet. Anonymous information of this kind is statistically evaluated by us, in order to optimize our Internet appearance and the technology behind it.
Like many other websites, we also use so-called “cookies”. Cookies are small text files that are transferred from a website server to your hard drive. This automatically gives us certain data, such as IP address, browser used, operating system from your computer and your connection to the Internet.
Cookies can not be used to launch programs or to transfer viruses to a computer. Based on the information contained in cookies, we can facilitate navigation and enable the correct display of our websites.
In no case will the data collected by us be passed on to third parties or a link with personal data be established without your consent.
Use of Hotelchamp
We use the services of Hotelchamp, a professional provider of online software and services, to help us improve our online booking process and to help us personalize and improve our interaction with you.
In providing this service to us and for you, Hotelchamp may process some of your personal data on our behalf. Both Hotelchamp and ourselves value and respect your privacy, and we process and protect your personal data in accordance with all applicable laws and regulations.
We have concluded a “data processing agreement” with Hotelchamp to make specific arrangements about the processing and protection of your personal data.
We and Hotelchamp may process data such as your e-mail address, IP address, and browser fingerprint, in combination with your booking data and your other interactions on our website, in order to provide content and offers to you which we think will be most relevant and appealing to you. For example, if your booking dates are on Christmas, we may provide you with a special Christmas offering. Or if your booking data shows you are a family, we may provide you with a special family deal.
Only your interactions with us and our website are used to personalize our content and offers to you, not your behavior on other websites or elsewhere.
Our websites offer links to third party websites. We have no influence on the content of the linked pages. They were checked thoroughly prior to the links going live. Despite this we cannot rule out that the operators of the respective pages have made any changes to the contents that may breach current law or that may go against our corporate philosophy. We herewith distance ourselves from such content.
Provision of Paid Services
To provide paid services we ask for additional data, such as: Payment details.
To protect the security of your data during transmission, we use state-of-the-art encryption techniques (such as SSL) over HTTPS.
When you sign up to receive our newsletter, the data you provide will be used exclusively for this purpose. Subscribers may also be notified by email about circumstances relevant to the service or registration (such as changes to the newsletter offer or technical conditions).
For an effective registration we need a valid e-mail address. In order to verify that an application is actually made by the owner of an e-mail address, we use the “Double opt-in” procedure. For this purpose we record the order of the newsletter, the dispatch of a confirmation mail and the receipt of the requested answer. Further data is not collected. The data will be used exclusively for the newsletter and will not be passed on to third parties.
The consent to the storage of your personal data and their use for the newsletter can be revoked at any time.
The shipping service provider may use the data of the recipients in pseudonymous form, i. without assignment to a user, to optimize or improve their own services, e.g. for the technical optimization of e-mail distribution and the presentation of newsletters or for statistical purposes. However, the e-mail marketing service provider does not use the data of our newsletter recipients to address them themselves or to pass the data on to third parties.
Use of the online booking tool DIRS21 from TourOnline AG
If you contact us by e-mail or contact form, the information you provide will be stored for the purpose of processing the request and for possible follow-up questions.
Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (following: Google). Google Analytics uses so-called “cookies”, ie text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymization on these websites, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data.
You can prevent the storage of cookies by a corresponding setting of your browser software; however, we point out that in this case you may not be able to use all functions of this website in full. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading the browser plug-in available under the following link and install:
Browser add-on to deactivate Google Analytics
In addition or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking the following link. An opt-out cookie will be installed on your device. This will prevent the collection by Google Analytics for this website and for this browser in the future, as long as the cookie remains installed in your browser:
Exclude from website tracking
Google Analytics Reports on Demographic Characteristics and Interests
We have activated the advertising reporting features in Google Analytics. The reports on demographic characteristics and interests contains information on age, gender and interests. This allows us to get a better picture of our users – without being able to assign this data to individual persons. You can find out more about the advertising functions here.
You can stop the use of the activities and information of your Google account under "advertising settings" here.
Analysis by WiredMinds
Our website uses the counting pixel technology of WiredMinds AG (www.wiredminds.de) to analyze visitor behavior.
We use products of WiredMinds for marketing and optimization purposes. These products collect and process your personal data and use it to create usage profiles under a pseudonym. These usage profiles are fully anonymized where possible and appropriate. We and WiredMinds employ cookies and/or Web beacons (also known as tracking pixels) on this website. We transfer the data we collect about you, which may also include personal data, to WiredMinds or WiredMinds gathers this data directly. WiredMinds is entitled to use information that you leave behind by visiting our Web sites to create anonymized usage profiles. The data collected shall not be used to personally identify visitors to this website without the express permission of the party affected and shall not be merged with personal data about the bearer of the pseudonym. Any IP addresses recorded are anonymized immediately by deleting the last number block. Permission to collect and store data in the future may be revoked at any time.
Data collection, processing and storage can be objected to at any time with effect for the future under the following link:
Exclude from website tracking
Using Script Libraries (Google Webfonts)
In order to render our content correctly and graphically appealing across browsers, we use script libraries and font libraries on this website, such as: Google Webfonts. Google web fonts are transferred to the cache of your browser to prevent multiple loading. If the browser does not support Google Web fonts or prohibits access, content will be displayed in a standard font.
The call of script libraries or font libraries automatically triggers a connection to the operator of the library. It is theoretically possible - but currently also unclear whether and if so for what purposes - that operators of such libraries collect data.
Use of Google Maps
This website uses Google Maps API to visually display geographic information. When using Google Maps, Google also collects, processes and uses data about the use of map features by visitors. For more information about Google's data processing, please refer to the Google Privacy Notice. There you can also change your personal privacy settings in the privacy center.
For detailed instructions on how to manage your own data related to Google products, click here.
Embedded YouTube Videos with extended data protection configuration
Some of our websites embed YouTube videos. The provider of the associated YouTube plugins is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. 7 / 9. We use YouTube in the extended data protection mode. According to YouTube, this mode means that YouTube does not save any information about visitors to this website before they watch the video. However, the extended data protection mode does not necessarily preclude the transfer of data to YouTube partners. For example, regardless of whether you are watching a video, YouTube connects to the Google DoubleClick network. As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account. Furthermore, YouTube can save various cookies on your end device after starting a video. With the help of these cookies, YouTube can receive information about visitors to this website. This information is used, among other things, to collect video statistics, improve usability and prevent fraud. The cookies remain on your device until you delete them. If necessary, further data processing processes can be triggered after the start of a YouTube video, over which we have no influence.
Information on data protection at YouTube can be found in their data protection declaration at: https://policies.google.com/privacy?hl=en.
Our website uses Google Conversion Tracking. If you have reached our website via an advertisement sent by Google, Google Adwords will set a cookie on your computer. The conversion tracking cookie is set when a user clicks on a Google-served ad. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages on our website and the cookie has not expired, we and Google may recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies can not be tracked through AdWords advertisers' websites. The information gathered using the conversion cookie is used to generate conversion statistics for AdWords advertisers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, they do not receive information that personally identifies users.
If you do not want to participate in the tracking, you can refuse the required setting of a cookie - for example via a browser setting that generally disables the automatic setting of cookies or sets your browser to block cookies from the domain “googleleadservices.com”.
Please note that you can not delete the opt-out cookies as long as you do not want to record measurement data. If you have deleted all your cookies in the browser, you must set the respective opt-out cookie again.
Use of Our.Guide
In order to familiarize you with the environment of our hotels, we cooperate with our partner company Our.Guide, Warsaw, Poland. The offer of Our.Guide is however no longer under our responsibility. In particular, Our.Guide decides independently on the use and disclosure of your personal data without our influence.
Conference configurator eventmachine from ZELFMADE GmbH
On our website we provide you the possibility to configure inquiries for conferences and to create a non-binding offer in real time. We use the online tool “eventmachine” from ZELFMADE GmbH, Paul-Nevermann-Platz 5, D-22765 Hamburg, which is active here on our behalf and on the basis of our instructions. We process all data provided by you for the purpose of configuration and preparation of offers as well as transmission to you by email or contract initiation. The legal basis for this is Art. 6 Para. 1 lit. b GDPR (processing to fulfill a contract and pre-contractual measures). Of course, we have an date processing agreement with the service provider in accordance with Art. 28 GDPR and thus ensure that your data is processed appropriately and securely.
Collaboration with processors and third parties
If we disclose data to other persons and companies (contract processors or third parties), transmit them to them or otherwise grant access to the data in the course of our processing, this is only done on the basis of a legal permission that you have consented to, a legal obligation to do so or based on our legitimate interests.
If we commission third parties to process data on the basis of a so-called “contract processing contract”, this is done on the basis of Art. 28 DSGVO.
Transfers to third countries
If we process data in a third country (ie outside the European Union (EU) or the European Economic Area (EEA)) or in the context of the use of third party services or disclosure or transmission of data to third parties, this will only be done if it is to fulfill our (pre) contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only in the presence of the special conditions of Art. 44 et seq. GDPR. That the processing is e.g. on the basis of specific guarantees, such as the officially recognized level of data protection (eg for the US through the Privacy Shield) or compliance with officially recognized special contractual obligations (so-called “standard contractual clauses”).
Your rights to information, correction, suspension, cancellation and opposition
You have the right to receive information about your personal data stored by us at any time. Likewise, you have the right to correction, blocking or, apart from the prescribed data storage for business transactions, deletion of your personal data. Please contact our data protection officer. The contact details can be found at the bottom.
For a data lock to be taken into account at all times, these data must be stored in a lock file for control purposes. You can also request the deletion of the data, as long as there is no legal archiving obligation. As far as such an obligation exists, we lock your data on request.
You can make changes or revoke your consent by notifying us with effect for the future.
You have the right to object at any time to any processing of your personal data based on Art. 6 (1) (e) and (f) GDPR. We will then no longer process the personal data unless we can prove compelling reasons worthy of protection which outweigh the interests, rights and freedoms of the person concerned.
You also have the right to complain to the relevant regulatory authority about the processing of data by our company.
The data protection authority responsible for our company is:
Data Protection Authority of Bavaria for the Private Sector
Promenade 27 (Schloss)
Questions to the Data Protection Officer
If you have any questions about data protection, please write us an e-mail or contact our data protection officer directly:
Data Protection Officer
Lindner Group KG
Phone: +49 8723 20-0
Video Surveillance Information
Schlossbräu Mariakirchen GmbH & Co. KG
94424 Arnstorf, Germany
Phone: +49 8723 9787-10
Contact Details of the Data Protection Officer:
Purpose and Legal Basis:
Art.6 (1) lit.f GDPR
Protection against access by unauthorized persons, surveillance of premises for the preservation of building security, protection against vandalism, burglary and theft and prevention thereof. Clarification of damage and theft and appropriate enforcement of claims for damages.
References to the rights of the affected persons (data subjects)
The data subject has the right to ask the person responsible for a confirmation of the processing of the personal data concerned; if this is the case, it has a right to information about these personal data and to the information listed in Article 1 5 GDPR.
The data subject has the right to demand from the person responsible without delay the correction of incorrect personal data concerning them and, if necessary, the completion of incomplete personal data (Art.16 GDPR).
The data subject has the right to require the person responsible to delete personal data relating to him or her without delay, provided that one of the reasons detailed in Art. 17 GDPR is fulfilled, e. g. if the data is no longer needed for the purposes pursued (right to deletion).
The data subject has the right to require the person responsible to restrict the processing if one of the conditions listed in Art. 18 GDPR is fulfilled, e.g. if the data subject has objected to processing for the duration of the review by the controller.
The data subject has the right, at any time, to object to the processing of personal data for reasons arising from his or her particular situation. The controller then no longer processes the personal data unless he can demonstrate compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves the assertion, exercise or defense of legal rights (Art 21 GDPR).
Without prejudice to any other administrative or judicial remedy, any data subject shall have the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data concerning him / her violates the GDPR (Article 77 GDPR). The data subject may assert this right with a supervisory authority in the Member State of his or her residence, place of work or place of alleged infringement.
Competent supervisory authority for Bavaria:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 27 | 91522 Ansbach | Germany
Phone: +49 (0)981 53 1 300
Video Surveillance Information
Data processing in the context of social media
We use the following social media as part of our public relations work:
Your use of our entries on these social media platforms will lead to the processing your personal information.
Types of personal data processed
Your use will lead to the processing of any personal information that you post on our channels, such as: Pictures, photos, comments and likes. In addition, the data processing concerns all personal data that you transmit to us via the chat or message function of the individual social media platform, in particular the date and time of the message, your user name and data on the content of the message.
Data processing by providers of social media platforms
The respective provider of the social media platform is an independent institution responsible for processing the personal data of its users and processes the data for its own purposes and in its own interest. The respective data protection information of the platform operators can be found here:
In principle, we have no influence on the data processing of the respective platform operator. Should we have limited influence, we will select the most privacy-friendly option. This applies in particular to visitor statistics for our appearances, for which our company and the respective platform operator are joint controllers.
Data processing by our company
We use all personal information you post on our channels only as part of our public relations efforts to operate our company's social media channels. If appropriate, this may also include the deletion of some contributions, as far as necessary in individual cases. For other purposes your data will not be processed by our company.
The legal basis for the processing is the legitimate interest in an effective public relations as well as in the exchange with the users of our appearances in the social media according to Art. 6 para. 1 lit. DSGVO. Your interests or fundamental freedoms and fundamental rights are not to be considered as predominant, as you have voluntarily decided on this form of interaction and communication.
Data, which you send to us via the chat or message function of the social media platforms, we process for the respective purpose of your contact. This includes in particular the answering and forwarding of your inquiry, application or comments. The data processing in our company follows the same principles as when communicating via our other communication channels.
Depending on the purpose of the contact, the processing of this information is based on your consent under Art. 6 para. 1 lit. a DSGVO, for the fulfillment of a contract according to Art. 6 (1) li. B DSGVO, for purposes of employment according to § 26 BDSG as well as due to our legitimate interest in an effective public relations work according to Art. 6 para. 1 lit. f DSGVO. Your interests or fundamental freedoms and fundamental rights are not to be considered as predominant, as you have voluntarily decided on this form of interaction and communication.
Data transmission to a third country
The social media platforms we use are mainly based in the USA. This means that all your data will be transmitted to an insecure third country that does not have a level of data protection comparable to that in the European Union. This data transmission takes place through your voluntary use of the platforms in accordance with Art. 6 para. 1 lit. a, Art. 49 para. 1 lit. a GDPR.
However, we would like to point out that the platform operators use web tracking and profiling systems that create extensive profiles about the users of these platforms. However, we have no influence on these systems.