We, Victor's Residenz-Hotels GmbH, take the protection of your personal data very seriously and adhere strictly to the provisions of the data protection laws. As a basic principle, we process personal data of our users only in so far as this is necessary for the provision of a properly functional website and of our contents and services. As a general rule, personal data of our users is only processed after the user has issued his consent. An exception applies in such cases where, for practical reasons, it is not possible to obtain the consent of the user beforehand and the processing of the data is permitted by statutory provisions.
The following Policy provides you with an overview as to how we ensure this protection and which type of data is collected for which purpose.
Body responsible for the data processing - the controller
Victor's Residenz-Hotels GmbH
D-10709 Berlin, Germany
Tel. +49 1805 115114 (14 ct/min from a German land line, mobile phone max. 42 ct/min)
Contact details of the data protection officer
Scope and legal basis for the processing of personal data
We process personal data of our users only in so far as this is necessary for the provision of a properly functional website and of our contents and services. As a general rule, personal data of our users is only processed after the user has issued his consent. An exception applies in such cases where, for practical reasons, it is not possible to obtain the consent of the user beforehand and the processing of the data is permitted by statutory provisions.
Where we obtain the consent of the person concerned - the data subject - for the processing operations involving personal data, Art. 6 (1) (a) General Data Protection Regulation (GDPR) serves as the legal basis. In the case of processing of personal data which is necessary for the performance of a contract to which the data subject is party, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies for processing operations which are necessary in order to take steps prior to entering into a contract. Where the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR serves as the legal basis. In the event that vital interests of the data subject or of another natural person make it necessary to process personal data, Art. 6 (1) (d) GDPR serves as the legal basis. Where the processing is necessary to protect the legitimate interests of our company or of a third party and the interests or fundamental rights and freedoms of the data subject do not override the interests first mentioned, Art. 6 (1) (f) GDPR serves as the legal basis for the processing.
Period of storage of the personal data
We process and store your personal data for as long as is necessary in order to comply with our contractual and statutory duties. If the data is no longer necessary for the performance of contractual duties, it will be regularly erased unless further processing of the same for a limited period is necessary pursuant to prescribed retention periods under commercial and tax law provisions (inter alia, Handelsgesetzbuch (HGB) [German Commercial Code] the Abgabenordnung (AO) [Fiscal Code]. The periods stipulated there governing the periods for retention and documentation amount to between two and ten years.
Description and scope of the data processing
Each time our website is accessed, our system records data and information automatically from the computer system of the accessing data processor. In this connection, the following data is collected:
• browser type / version
• operating system used
• user's Internet service provider
• time of the server request
• referrer URL (the site visited beforehand)
• host name of the accessing computer (anonymised IP address)
Through this access to the website, we receive usage data which is, in part, stored. The usage data stored includes the date, time and volume of data transmitted, and also whether the transmission of the information was successful and via which provider the access was made. The statistical analysis is carried out anonymously.
Our website contains links to other websites. We have no influence on the editorial contents of external websites and cannot guarantee that their operators comply with the data protection provisions.
Data processing on this website
This website uses Google Analytics, a web analysis service offered by Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files which are stored on your computer and which enable an analysis to be carried out of your use of the website. As a rule, the information generated by the cookie about your use of this website is transmitted to a Google server in the USA and stored there. However, where IP anonymisation has been activated on this website, your IP address will be abbreviated by Google beforehand within the member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and abbreviated there. On behalf of the operator of this website, Google uses this information to analyse your use of the website, to compile reports about website activities and to provide further services to the website operator associated with the use of the website and of the Internet. The IP address transmitted from your browser within the scope of Google Analytics will not be matched with any other Google data. You can prevent the storage of cookies by a corresponding setting of your browser software; however, we draw your attention to the fact that in this case it is possible that you will not be able to use all functions of this website in the full scope. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing a browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en. You can find further information on this subject under https://tools.google.com/dlpage/gaoptout?hl=en or under https://policies.google.com/privacy?hl=en (general information on Google Analytics and data protection)
You can prevent the recording of your data by Google Analytics through clicking on the following link. An opt-out cookie will be placed which will prevent the recording of your data on future visits to this website: Deactivate Google Analytics.
We draw your attention to the fact that on this website, Google Analytics has been extended by the code "gat._anonymizeIp();" in order to ensure an anonymised recording of IP addresses (so-called IP masking).
This website utilizes Hotjar. The provider is Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe (website: https://www.hotjar.com).
Hotjar is a tool used to analyse your user patterns on this website. Hotjar allows us to for instance record your mouse and scroll movements as well as your click. During this process, Hotjar also has the capability to determine how long your cursor remained in a certain position. Based on this information, Hotjar compiles so-called Heatmaps, that make possible to determine which parts of the website the website visitor reviews with preference.
We are also able to determine how long you have stayed on a page of this website and when you left. We can also determine at which point you suspended making entries into a contact form (so-called conversion funnels).
Furthermore, Hotjar can be deployed to obtain direct feedback from website visitors. This function aims at the improvement of the website offerings of the website operator.
You can set up your browser in such a manner that you will be notified anytime cookies are placed and you can permit cookies only in certain cases or exclude the acceptance of cookies in certain instances or in general and you can also activate the automatic deletion of cookies upon closing of the browser. If you deactivate cookies, the functions of this website may be limited.
The use of Hotjar and the storage of the Hotjar cookies are based on Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in the analysis of user patterns, in order to optimize the operator’s web offerings and advertising. If a corresponding agreement has been requested (e.g. an agreement to the storage of cookies), the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the agreement can be revoked at any time.
Deactivation of Hotjar
If you would like to deactivate the recording of data by Hotjar, please click on the link below and follow the instructions provided under the link: https://www.hotjar.com/opt-out.
Please keep in mind that you will have to separately deactivate Hotjar for every browser and every device.
For more detailed information about Hotjar and the data to be recorded, please consult the Data Privacy Declaration of Hotjar under the following link: https://www.hotjar.com/privacy.
At various points, our website pages use so-called cookies. They serve to make our offer more user-friendly, more effective and more secure. Cookies are small text files which are placed on your computer and stored by your browser. The majority of these cookies used by us are so-called "session cookies". They are automatically erased following the end of your visit. Cookies do not cause any damage to your computer and they do not contain any viruses.
Our website uses social plug-ins ("plug-ins") from the social network facebook.com which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). The plug-ins are recognisable by any of the Facebook logos or are labelled with the addition "Facebook social plug-in".
If you access a page of our website which contains such a plug-in, your browser will establish a direct connection to the Facebook servers. The contents of the plug-in is transmitted from Facebook direct to your browser and integrated by it into the website. We therefore have no influence on the volume of data which Facebook collects with the aid of this plug-in, and therefore inform you according to our own state of knowledge:
Through the integration of the plug-in, Facebook receives the information that you have accessed the corresponding page on our website. While you are logged into Facebook, Facebook can assign the visit to your Facebook account. If you interact with the plug-ins, for instance through clicking on the "like" button or making a comment, the corresponding information will be transmitted by your browser direct to Facebook and stored there. Even if you are not a Facebook member, there is still the possibility that Facebook will learn of your IP address and store the same.
If you are a Facebook member and do not wish Facebook to collect data about you via our website and to link this with your member data stored at Facebook, you need to log off from Facebook before visiting our website.
Conversion tracking using the Facebook visitor action pixel
With your consent, which you have issued as follows "I am in agreement with the use of the Facebook visitor action pixel" we use the "visitor action pixel" of
1601 S. California Ave,
Palo Alto, CA 94304, USA
within our website.
This allows user behaviour to be tracked after users have been directed to the provider's website by clicking on a Facebook advertisement. It enables the effectiveness of Facebook ads to be analysed for statistical and market research purposes and can contribute to optimising future advertising measures.
Only users who are older than 13 years may declare their consent to the use of the visitor action pixel. If you are younger, we request you to ask your parents or guardians for permission.
Please click here if you wish to withdraw your consent: https://www.facebook.com/ads/website_custom_audiences/
If you would like to receive the newsletter offered on the website, we need a valid e-mail address from you and also information that allows us to verify that you are the holder of the e-mail address provided or that the holder of the same is in agreement with receiving the newsletter. No further data will be collected. You may at any time withdraw your consent to the storage of the data and of the e-mail address and use of the same for sending you the newsletter.
Table reservation via Bookatable
Should you wish to use our offer of online table reservation at our restaurants Victor's Landgasthaus Die Scheune, Victor's FINE DINING by Christian Bau or Bacchus, you will automatically be passed for this purpose to the website of Livebookings Holdings Limited (online reservation system Bookatable) with registered office in Great Britain (5th Floor, Elizabeth House, 39 York Road, London SE1 7NQ). We have no knowledge as to which data Bookatable links with the data received from the respective reservation request. The data protection provisions of the platform Bookatable can be viewed via the following link: http://www.bookatable.com/privacypolicy.
Rights of the data subject
Every data subject whose personal data is processed has, pursuant to Art. 15 GDPR, a right to information from the controller about the personal data concerning him, pursuant to Art. 16 GDPR a right to rectification, pursuant to Art. 17 GDPR a right to erasure, pursuant to Art. 18 GDPR a right to restriction of the processing, pursuant to Art. 21 GDPR a right to object to the processing, pursuant to Art. 20 GDPR a right to data portability and also, pursuant to Art. 22 GDPR a right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her. In regard to the right of information and the right to erasure, the restrictions pursuant to Sections 34 and 35 BDSG-neu [Bundesdatenschutzgesetz-neu - Federal Data Protection Act new] also apply.
In so far as the processing of your personal data is based on consent issued to us, you have the right at any time to withdraw your consent pursuant to Art. 21 GDPR without affecting the lawfulness of any processing based on consent carried out before its withdrawal.
Furthermore, a right exists to lodge a complaint with the competent supervisory authority for data protection pursuant to Art. 77 GDPR in combination with Section 19 BDSG-neu.
In all other respects, we refer to the principles laid down in the Data Protection Guidelines of Victor's Corporate Group.