DATA PROTECTION

This English text is provided for convenience only. In case of discrepancies, the German version shall prevail.

 

General Information

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to identify you personally. For detailed information on the subject of data protection, please refer to our privacy policy listed below this text.

​

Data collection on our website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. Their contact details can be found in the legal notice (imprint) of this website.

 

How do we collect your data?
Your data is collected, on the one hand, by you providing it to us. This can be, for example, data that you enter in a contact form. Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time of the page view). This data is collected automatically as soon as you enter our website.

​

What do we use your data for?
Part of the data is collected to ensure error-free provision of the website. Other data may be used to analyse your user behaviour.

​

What rights do you have regarding your data?
You have the right at any time to receive, free of charge, information about the origin, recipients and purpose of your stored personal data. You also have the right to request the correction, blocking or deletion of this data. For this purpose, and for further questions on the subject of data protection, you can contact us at any time at the address given in the legal notice. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

​

Disclosure of your data to third parties
Your data will not be passed on to third parties unless we are legally obliged or entitled to do so or you have expressly consented to the disclosure of your data beforehand.

​

Analytics tools and third-party tools
When you visit our website, your browsing behaviour may be statistically evaluated. This is done primarily with cookies and with so-called analytics programs. The analysis of your browsing behaviour is generally anonymous; the browsing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information on this can be found in the following privacy policy. You can object to this analysis. We will inform you about the options for objecting in this privacy policy.

​

2. General information and mandatory information
Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done. We would like to point out that data transmission on the internet (e.g. when communicating by email) may have security gaps. Complete protection of data against access by third parties is not possible.

​

Note on the responsible party
The party responsible for data processing on this website is:
laVital Sport- & Wellness Hotel
Horst Krebs
Alte Heerstr. 45,
29392 Wesendorf,
Germany
Email: info@lavital.de

​

The responsible party is the natural or legal person who, alone or jointly with others, decides on the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).

​

Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. An informal message by email to us is sufficient. The lawfulness of the data processing carried out up to the revocation remains unaffected by the revocation.

​

SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

​

Information, blocking, deletion
Within the framework of the applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, where applicable, a right to correction, blocking or deletion of this data. For this purpose, and for further questions on the subject of personal data, you can contact us at any time at the address given in the legal notice.

​

Objection to advertising emails
We hereby object to the use of contact data published within the framework of the legal notice obligation for sending advertising and information materials that have not been expressly requested. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, for example through spam emails.

​

3. Data collection on our website
Cookies
Some of our web pages use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are so-called "session cookies". They are deleted automatically after your visit ends. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser on your next visit. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited. Cookies that are required to carry out the electronic communication process or to provide certain functions you have requested (e.g. shopping cart function) are stored on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimised provision of its services. Insofar as other cookies (e.g. cookies for analysing your browsing behaviour) are stored, these are dealt with separately in this privacy policy.

​

How can I configure the cookie settings of my browser?
Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers at the following links:
Internet Explorer™: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Safari™: http://apple-safari.giga.de/tipps/cookies-in-safari-aktivieren-blockieren-loeschen-so-geht-s/
Chrome™: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Firefox™ https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Opera™ : http://help.opera.com/Windows/10.20/de/cookies.html

​

Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

​

* Browser type and browser version
* Operating system used
* Referrer URL
* Hostname of the accessing computer
* Time of the server request
* IP address

​

This data is not merged with other data sources. The basis for data processing is Art. 6 (1) (b) GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.

​

Contact form
If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We do not pass on this data without your consent. The processing of the data entered in the contact form therefore takes place exclusively on the basis of your consent (Art. 6 (1) (a) GDPR). You can revoke this consent at any time. An informal message by email to us is sufficient. The lawfulness of the data processing operations carried out up to the revocation remains unaffected by the revocation. The data you enter in the contact form will remain with us until you request deletion, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your enquiry has been processed). Mandatory statutory provisions, in particular retention periods, remain unaffected.

​

Registration on this website
You can register on our website in order to use additional functions on the site. We use the data entered for this purpose only for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise we will reject the registration. For important changes, for example to the scope of the offer or technically necessary changes, we use the email address provided during registration to inform you in this way. The processing of the data entered during registration is carried out on the basis of your consent (Art. 6 (1) (a) GDPR). You can revoke a consent you have given at any time. An informal message by email to us is sufficient. The lawfulness of the data processing that has already taken place remains unaffected by the revocation. The data collected during registration will be stored by us for as long as you are registered on our website and will then be deleted. Statutory retention periods remain unaffected.

​

4. Analytics tools and advertising
Google Analytics
This website uses functions of the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called "cookies". These are text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Google Analytics cookies are stored on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its web offer and its advertising.

​

IP anonymisation
We have activated the IP anonymisation function on this website. As a result, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide further services connected with website and internet use to the website operator. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

​

Browser plugin
You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

​

Objection to data collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set, which prevents the collection of your data during future visits to this website: Disable Google Analytics. More information on how Google Analytics handles user data can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

​

5. Newsletter
Newsletter data
If you would like to receive the newsletter offered on the website, we need an email address from you as well as information that allows us to verify that you are the owner of the email address provided and agree to receive the newsletter. Further data is not collected, or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties. The processing of the data entered in the newsletter registration form takes place exclusively on the basis of your consent (Art. 6 (1) (a) GDPR). You can revoke your consent to the storage of the data, the email address and their use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter. The lawfulness of the data processing operations that have already taken place remains unaffected by the revocation. The data you have provided to us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted after you unsubscribe. Data that was stored by us for other purposes (e.g. email addresses for the members' area) remains unaffected.

​

Newsletter tracking
The newsletters of laVital Sport- & Wellness Hotel contain so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in emails sent in HTML format in order to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns. Using the embedded tracking pixel, laVital Sport- & Wellness Hotel can recognise whether and when an email was opened by a data subject and which links in the email were accessed by the data subject. Such personal data collected via the tracking pixels contained in the newsletters is stored and evaluated by the controller in order to optimise the sending of the newsletter and to adapt the content of future newsletters even better to the interests of the data subject. This personal data is not passed on to third parties. Data subjects are entitled at any time to revoke the separate declaration of consent given in this regard via the double opt-in procedure. After a revocation, this personal data will be deleted by the controller. laVital Sport- & Wellness Hotel automatically interprets an unsubscription from receiving the newsletter as a revocation.

​

6. Plugins and tools
YouTube
Our website uses plugins from the YouTube site operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. The YouTube server is informed which of our pages you have visited. If you are logged in to your YouTube account, you enable YouTube to assign your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account. YouTube is used in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. Further information on how user data is handled can be found in YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy.

​

Vimeo
Our website uses plugins of the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
When you visit one of our pages equipped with a Vimeo plugin, a connection to the Vimeo servers is established. The Vimeo server is informed which of our pages you have visited. In addition, Vimeo obtains your IP address. This also applies if you are not logged in to Vimeo or do not have a Vimeo account. The information collected by Vimeo is transmitted to the Vimeo server in the USA.
If you are logged in to your Vimeo account, you enable Vimeo to assign your browsing behaviour directly to your personal profile. You can prevent this by logging out of your Vimeo account. Further information on how user data is handled can be found in Vimeo's privacy policy at: https://vimeo.com/privacy.

​

Google Web Fonts
For the uniform display of fonts, this site uses so-called web fonts provided by Google. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. For this purpose, the browser you use must connect to Google's servers. As a result, Google becomes aware that our website was accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. If your browser does not support web fonts, a standard font from your computer is used. Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/.

​

Google Maps
This site uses the map service Google Maps via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.
Google Maps is used in the interest of an appealing presentation of our online offers and to make the locations indicated on the website easy to find. This constitutes a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. More information on how user data is handled can be found in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/.

​

Facebook
The controller has integrated components of the company Facebook on this website. Facebook is a social network. A social network is a social meeting place operated on the internet, an online community that generally allows users to communicate with each other and interact in virtual space. A social network can serve as a platform for the exchange of opinions and experiences or enable the internet community to provide personal or business-related information. Facebook enables users of the social network, among other things, to create private profiles, upload photos and network via friend requests. The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the USA or Canada, the controller for the processing of personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Each time one of the individual pages of this website, which is operated by the controller and on which a Facebook component (Facebook plug-in) has been integrated, is called up, the internet browser on the data subject's information technology system is automatically prompted by the respective Facebook component to download a representation of the corresponding Facebook component from Facebook. An overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=de_DE. As part of this technical process, Facebook becomes aware of which specific subpage of our website is visited by the data subject. If the data subject is logged in to Facebook at the same time, Facebook recognises with each visit to our website by the data subject, and for the entire duration of the respective stay on our website, which specific subpage of our website the data subject visits. This information is collected by the Facebook component and assigned by Facebook to the respective Facebook account of the data subject. If the data subject clicks one of the Facebook buttons integrated on our website, for example the "Like" button, or submits a comment, Facebook assigns this information to the personal Facebook user account of the data subject and stores this personal data. Facebook always receives information via the Facebook component that the data subject has visited our website if the data subject is logged in to Facebook at the time of calling up our website; this takes place regardless of whether the data subject clicks on the Facebook component or not. If the data subject does not want this information to be transmitted to Facebook, they can prevent the transmission by logging out of their Facebook account before calling up our website. The data policy published by Facebook, which is available at https://de-de.facebook.com/about/privacy/, provides information on the collection, processing and use of personal data by Facebook. It also explains what setting options Facebook offers to protect the privacy of the data subject. In addition, various applications are available that make it possible to suppress data transmission to Facebook. Such applications can be used by the data subject to suppress data transmission to Facebook.

​

PayPal
The controller has integrated components of PayPal on this website. PayPal is an online payment service provider. Payments are processed via so-called PayPal accounts, which are virtual private or business accounts. In addition, PayPal offers the option of processing virtual payments via credit cards if a user does not have a PayPal account. A PayPal account is managed via an email address, which is why there is no classic account number. PayPal makes it possible to initiate online payments to third parties or to receive payments. PayPal also acts as a trustee and offers buyer protection services. The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg. If the data subject selects "PayPal" as the payment option during the ordering process in our online shop, data of the data subject is automatically transmitted to PayPal. By selecting this payment option, the data subject consents to the transmission of personal data required for payment processing. The personal data transmitted to PayPal is usually first name, last name, address, email address, IP address, telephone number, mobile phone number or other data necessary for payment processing. Personal data related to the respective order is also necessary for the processing of the purchase contract. The purpose of the data transmission is payment processing and fraud prevention. The controller will transmit personal data to PayPal in particular if there is a legitimate interest in the transmission. The personal data exchanged between PayPal and the controller may be transmitted by PayPal to credit agencies. The purpose of this transmission is identity and credit checks. PayPal may pass on the personal data to affiliated companies and service providers or subcontractors, insofar as this is necessary to fulfil the contractual obligations or the data is to be processed on behalf of PayPal. The data subject has the option of revoking their consent to the handling of personal data at any time with PayPal. A revocation does not affect personal data that must be processed, used or transmitted for (contractual) payment processing. The applicable data protection provisions of PayPal can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

​

SOFORT voucher system
We use the "SOFORT-Gutschein" widget on our websites. The provider is FIRMEDIA® GmbH & Co. KG, Zum Ritzhagen 5, 34508 Willingen.
Personal data is only collected and processed directly in the SOFORT voucher shop when a voucher/ticket order is placed.
SOFORT-Gutschein automatically collects and stores information in so-called server log files, which your browser transmits automatically.
These are: browser type and browser version; operating system used; referrer URL; hostname of the accessing computer; time of the server request; IP address
This data is not merged with other data sources. This data is collected on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website – for this purpose, the server log files must be collected. Personal data provided in the course of prize draws of the SOFORT-Gutschein advent calendar is used and stored exclusively within the framework of the prize draws. At the latest 30 days after the end of the prize draws, personal data is deleted completely and automatically. We have concluded a data processing agreement with FIRMEDIA® GmbH & Co. KG.

​

Source: eRecht24.de