Privacy Policy
We, Victor's Residenz-Hotels GmbH, take the protection of your personal data very seriously and adhere strictly to the provisions of the data protection laws. As a basic principle, we process personal data of our users only in so far as this is necessary for the provision of a properly functional website and of our contents and services. As a general rule, personal data of our users is only processed after the user has issued his consent. An exception applies in such cases where, for practical reasons, it is not possible to obtain the consent of the user beforehand and the processing of the data is permitted by statutory provisions.
The following Policy provides you with an overview as to how we ensure this protection and which type of data is collected for which purpose.
Body responsible for the data processing - the controller
Victor's Residenz-Hotels GmbH
Aroser Allee 84
D-13407 Berlin Deutschland
Tel. +49 1805 115114 (14 ct/min from a German land line, mobile phone max. 42 ct/min)
E-mail: info@victors.de
Contact details of the data protection officer
Corporate data protection officer
Victor's Group
Administrative offices Malstatter Markt 11-13
66115 Saarbrücken
Tel.: 0681 / 3877-195
E-mail: datenschutz@victors-group.com
Website: www.victors-group.com
Scope and legal basis for the processing of personal data
We process personal data of our users only in so far as this is necessary for the provision of a properly functional website and of our contents and services. As a general rule, personal data of our users is only processed after the user has issued his consent. An exception applies in such cases where, for practical reasons, it is not possible to obtain the consent of the user beforehand and the processing of the data is permitted by statutory provisions.
Where we obtain the consent of the person concerned - the data subject - for the processing operations involving personal data, Art. 6 (1) (a) General Data Protection Regulation (GDPR) serves as the legal basis. In the case of processing of personal data which is necessary for the performance of a contract to which the data subject is party, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies for processing operations which are necessary in order to take steps prior to entering into a contract. Where the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR serves as the legal basis. In the event that vital interests of the data subject or of another natural person make it necessary to process personal data, Art. 6 (1) (d) GDPR serves as the legal basis. Where the processing is necessary to protect the legitimate interests of our company or of a third party and the interests or fundamental rights and freedoms of the data subject do not override the interests first mentioned, Art. 6 (1) (f) GDPR serves as the legal basis for the processing.
Period of storage of the personal data
We process and store your personal data for as long as is necessary in order to comply with our contractual and statutory duties. If the data is no longer necessary for the performance of contractual duties, it will be regularly erased unless further processing of the same for a limited period is necessary pursuant to prescribed retention periods under commercial and tax law provisions (inter alia, Handelsgesetzbuch (HGB) [German Commercial Code] the Abgabenordnung (AO) [Fiscal Code]. The periods stipulated there governing the periods for retention and documentation amount to between two and ten years.
Data processing on this website
Google Analytics and advertising function
We use the Google Analytics service provided by Google Ireland Limited (Google Ireland/EU) on our website.
Google Analytics is a web analysis service that allows us to collect and analyze data about the behavior of visitors to our website. For this purpose, Google Analytics uses cookies that enable analysis of the use of our website. This involves processing personal data in the form of online identifiers (including cookie identifiers), IP addresses, device identifiers and information about interaction with our website.
Some of this data is information that is stored in the device you use. In addition, further information is stored on the device you use via the cookies used. Such storage of information by Google Analytics or access to information that is already stored in your device will only take place with your consent.
Google Ireland will process the data collected in this way on our behalf in order to evaluate the use of our website by users, to compile reports on the activities within our website and to provide us with other services relating to the use of our website and internet usage. Pseudonymous user profiles can be created from the processed data.
The setting of cookies and the further processing of personal data described here takes place with your consent. The legal basis for data processing in connection with the Google Analytics service is therefore Article 6 Paragraph 1 Letter a GDPR. You can revoke this consent at any time with future effect using our consent management tool.
The personal data processed on our behalf to provide Google Analytics may be transferred to any country in which Google Ireland or Google Ireland's sub-processors maintain facilities. Please note the information in the section “Data transfer to third countries”.
We only use Google Analytics with IP anonymization activated. This means that the IP address of users is shortened by Google Ireland within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. The IP address transmitted by the user's browser is not merged with other data. Further information on the use of data for advertising purposes can be found in Google's data protection declaration at: www.google.com/policies/technologies/ads/.
We use the Google Universal Analytics variant. This allows us to assign interaction data from different devices and from different sessions to a unique user ID. This allows us to put individual user actions in context and analyze long-term relationships.
The data about user actions is stored for a period of 14 months and then automatically deleted. Data whose storage period has expired is automatically deleted once a month.
We use the Google Analytics 4 variant. This allows us to track interaction data from different devices and from different sessions. This allows us to put individual user actions in context and analyze long-term relationships.
The data about user actions is stored for a period of 14 months and then automatically deleted. Data whose storage period has expired is automatically deleted once a month.
We use the Google Analytics 4 variant. This allows us to track interaction data from different devices and from different sessions. This allows us to put individual user actions in context and analyze long-term relationships.
The data about user actions is stored for a period of 14 months and then automatically deleted. All other event data is stored for 2 months and then automatically deleted. Data whose storage period has expired is automatically deleted once a month.
We also use the Google Analytics advertising functions (remarketing). This feature, in conjunction with Google's cross-device features, allows us to display ads in a more targeted manner and to present users with ads tailored to their interests. Through remarketing, users are shown advertisements and products in which interest has been identified on other websites in the Google network. The function allows us to link advertising target groups created via Google Analytics Remarketing with the cross-device functions of Google Ads. In this way, interest-based, personalized advertising messages that have been adapted to a user depending on their previous usage and surfing behavior on one device (e.g. cell phone) can also be displayed on another of the user's devices (e.g. tablet or PC).
If you have given your consent, Google will link your web and app browser history to your Google account for this purpose. This means that the same personalized advertising messages can be displayed on every device on which you log in with your Google account. The summary of the data collected in your Google account is based solely on your consent, which you can give or revoke at Google. Data is then collected for advertising purposes via Google Analytics for these linked services. To support the remarketing function, Google Analytics collects the Google-authenticated IDs of users, which are temporarily linked to our Google Analytics data. This is used to define and create target groups for cross-device advertising.
Newsletter
If you would like to receive the newsletter offered on the website, we need a valid e-mail address from you and also information that allows us to verify that you are the holder of the e-mail address provided or that the holder of the same is in agreement with receiving the newsletter. No further data will be collected. You may at any time withdraw your consent to the storage of the data and of the e-mail address and use of the same for sending you the newsletter.
Travelclick
If you would like to make a booking through our online booking system, then you must also provide personal information such as your name, address and email address in order to set up and complete the contract. The information that is required for processing the booking and the order is highlighted. Other information is provided voluntarily. We use your information to process the booking. We will pass the payment details in particular on to your chosen payment services provider or our bank. In line with your booking or enquiry, the booking information will also be passed on to the following external operators of Internet booking machines in order to fulfil or prepare the contract: Travelclick, INC. ("Amadeus"), 55 West. 46th Street,278th Floor, NY 10036, USA. In accordance with the agreed EU standard contract clauses, Travelclick is obliged to observe the European Union's valid data privacy requirements.
The legal foundation for processing is Article 6(1) sentence 1 (b) GDPR. In order to prevent unauthorised third parties from accessing your personal details, the booking process on the website is encoded with SSL/TLS technology.
Cookies
At various points, our website pages use so-called cookies. They serve to make our offer more user-friendly, more effective and more secure. Cookies are small text files which are placed on your computer and stored by your browser. The majority of these cookies used by us are so-called "session cookies". They are automatically erased following the end of your visit. Cookies do not cause any damage to your computer and they do not contain any viruses.
Setting cookies via our Cookie Consent Tool
To customize your cookie settings, you can use our cookie consent tool at any time. To do this, simply access the tool via the link below and set the above-mentioned categories of cookies by granting or not granting consent to the use of these cookies in your browser.
In this privacy policy you can see which partner companies and third parties set cookies on our website.
Table reservation via formitable
You have the opportunity to make table reservations on our website. We use the “formitable” tool to book appointments. The provider is Formitable B.V., Elandsstraat 44, 1016 SG Amsterdam, Netherlands (hereinafter referred to as “formitable”). To reserve a table, enter the requested data and the desired date in the mask provided. The data entered will be used for planning, implementing and, if necessary, following up on the appointment. The appointment data is stored for us on formitable’s servers. The data you enter will remain with us until you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies. Mandatory legal provisions – in particular retention periods – remain unaffected. The legal basis for data processing is Article 6 (1) (f) GDPR. The website operator has a legitimate interest in making appointments with interested parties, customers or guests as uncomplicated as possible. If consent has been requested, Art. 6 Para. 1 lit. a GDPR is the legal basis for data processing. Consent can be revoked at any time with future effect. If you make a reservation, we will then receive from formitable the personal data you provided in order to carry out the reservation in the relevant restaurant. The legal basis for data processing is then Article 6 Paragraph 1 Letter b GDPR. We have concluded a so-called order processing contract with formitable in accordance with Article 28 Paragraph 3 Sentence 1 GDPR. This is a contract required by data protection law that ensures that we only process the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR. Further information on data protection at formitable can be found at: https://formitable.com/de/privacy-cookie-statement/
Table reservation via TheFork
If you would like to use our online table reservation service for our restaurants Victor's Landgasthaus Die Scheune, Bacchus or Chez Victor's, you will automatically be directed to the website of La Fourchette SAS (online reservation system TheFork) based in France (70, rue Saint-Lazare, 75009 Paris). The parent company of LA FOURCHETTE is TripAdvisor Inc., based in the USA.
To book an appointment, enter the requested data and the desired date in the mask provided. The data entered will be used for planning, implementing and, if necessary, following up on the booking. The appointment data is stored for us on The Fork's servers, whose privacy policy you can view here: https://www.thefork.de/legal#datenschutzerklarung-und-cookie-linien.
The data you enter will remain with us until you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies. Mandatory legal provisions – in particular retention periods – remain unaffected.
The legal basis for data processing is Article 6 (1) (f) GDPR. The website operator has a legitimate interest in making appointments with interested parties and customers as uncomplicated as possible. If consent has been requested, Art. 6 Para. 1 lit. a GDPR is the legal basis for data processing; consent can be revoked at any time.
The data transfer to TripAdvisor Inc. in the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://help.acuityscheduling.com/hc/en-us/articles/360003334751-General-Data-Protection-Regulation-GDPR.
Rights of the data subject
Every data subject whose personal data is processed has, pursuant to Art. 15 GDPR, a right to information from the controller about the personal data concerning him, pursuant to Art. 16 GDPR a right to rectification, pursuant to Art. 17 GDPR a right to erasure, pursuant to Art. 18 GDPR a right to restriction of the processing, pursuant to Art. 21 GDPR a right to object to the processing, pursuant to Art. 20 GDPR a right to data portability and also, pursuant to Art. 22 GDPR a right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her. In regard to the right of information and the right to erasure, the restrictions pursuant to Sections 34 and 35 BDSG-neu [Bundesdatenschutzgesetz-neu - Federal Data Protection Act new] also apply.
In so far as the processing of your personal data is based on consent issued to us, you have the right at any time to withdraw your consent pursuant to Art. 21 GDPR without affecting the lawfulness of any processing based on consent carried out before its withdrawal.
Furthermore, a right exists to lodge a complaint with the competent supervisory authority for data protection pursuant to Art. 77 GDPR in combination with Section 19 BDSG-neu.
In all other respects, we refer to the principles laid down in the Data Protection Guidelines of Victor's Corporate Group.
Our website uses social plug-ins ("plug-ins") from the social network facebook.com which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). The plug-ins are recognisable by any of the Facebook logos or are labelled with the addition "Facebook social plug-in".
If you access a page of our website which contains such a plug-in, your browser will establish a direct connection to the Facebook servers. The contents of the plug-in is transmitted from Facebook direct to your browser and integrated by it into the website. We therefore have no influence on the volume of data which Facebook collects with the aid of this plug-in, and therefore inform you according to our own state of knowledge:
Through the integration of the plug-in, Facebook receives the information that you have accessed the corresponding page on our website. While you are logged into Facebook, Facebook can assign the visit to your Facebook account. If you interact with the plug-ins, for instance through clicking on the "like" button or making a comment, the corresponding information will be transmitted by your browser direct to Facebook and stored there. Even if you are not a Facebook member, there is still the possibility that Facebook will learn of your IP address and store the same.
For information on the purpose and scope of the collection of data and the further processing and use of this data by Facebook as well as your rights in this connection and setting options in order to protect your privacy, please refer to the Facebook Privacy Policy.
If you are a Facebook member and do not wish Facebook to collect data about you via our website and to link this with your member data stored at Facebook, you need to log off from Facebook before visiting our website.
Conversion tracking using the Facebook visitor action pixel
With your consent, which you have issued as follows "I am in agreement with the use of the Facebook visitor action pixel" we use the "visitor action pixel" of
Facebook Inc.
1601 S. California Ave,
Palo Alto, CA 94304, USA
("Facebook")
within our website.
This allows user behaviour to be tracked after users have been directed to the provider's website by clicking on a Facebook advertisement. It enables the effectiveness of Facebook ads to be analysed for statistical and market research purposes and can contribute to optimising future advertising measures.
The data collected in this way is anonymous to us and accordingly does not allow any inferences to be drawn as to the identity of the users. Nevertheless, Facebook stores and processes the data, so that an association with the respective user profile is possible, and Facebook may use the data for its own advertising purposes in accordance with the Facebook Privacy Policy (https://www.facebook.com/about/privacy/). You enable Facebook and also its partners to place advertisements both on and outside Facebook. Further, a cookie may be stored on your computer for these purposes.
Only users who are older than 13 years may declare their consent to the use of the visitor action pixel. If you are younger, we request you to ask your parents or guardians for permission.
Please click here if you wish to withdraw your consent: https://www.facebook.com/ads/website_custom_audiences/
Youtube
Our website uses plugins from YouTube, operated by Google. The operator of the website is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit one of our pages equipped with a YouTube plug-in, a connection to the YouTube servers will be established. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account. YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR. Further information on handling user data can be found in YouTube's data protection declaration at: https://www.google.de/intl/de/policies/privacy.
Vimeo
We use Vimeo components on our site. Vimeo is a service of Vimeo LCC, 555 West 18th Street, New York, New York 10011, USA. Whenever you visit our website, which is equipped with such a component, this component causes the browser you are using to download a corresponding display of the Vimeo component. When you visit our site and are at the same time logged into Vimeo, Vimeo recognises by means of the information collected by the component, which specific page you are visiting and assigns this information to your personal account at Vimeo. If, for example, you click on the “play” button or make comments, this information will be conveyed to your personal user account at Vimeo and stored there. In addition, the information that you have visited our site will be passed on to Vimeo. This is done regardless of whether you click on the component/comment or not.
If you want to prevent the transmission and storage of data by Vimeo about you and your behaviour on our website, you have to log out of the Vimeo system before you visit our site. For more detailed information, in particular about the collection and use of data by Vimeo, please consult their data privacy statement at: https://vimeo.com/privacy
Use of Google Ads
We use the offer of Google Ads to draw attention to our products with the help of advertising media (so-called Google Ads) on external websites. We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. In this way, we pursue the interest of showing you advertising that is of interest to you, of making our website more interesting for you and of achieving an economic calculation of advertising costs.
These advertisements are delivered by Google via so-called "ad servers". For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as display of the ads or clicks by users, can be measured. If you access our website via a Google ad, Google Ads will store a cookie on your PC. These cookies usually lose their validity after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie.
These cookies enable Google to recognize your internet browser. If a user visits certain pages of an Ads customer's website and the cookie stored on his computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to that page. A different cookie is assigned to each Ads customer. Cookies can therefore not be tracked across Ads customers' websites. We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising tools; in particular, we cannot identify users on the basis of this information.
Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of Ads Conversion, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is the possibility that the provider learns your IP address and saves it to your account.
You can prevent participation in this tracking process in several ways:
by clicking on the Consent banner that appears at the bottom of the screen, on the button: "Accept only essential cookies";
- by adjusting the settings of your browser software accordingly; in particular, the suppression of third-party cookies will result in you not receiving ads from third-party providers;
- by disabling conversion tracking cookies by setting your browser to block cookies from the domain "googleadservices.com", https://www.google.com/settings/ads, which setting will be deleted when you delete your cookies;
- by disabling interest-based ads from the providers that are part of the "About Ads" self-regulatory campaign, via the link https://www.aboutads.info/choices, this setting being deleted when you delete your cookies;
- by permanently deactivating them in your Firefox, Internetexplorer or Google Chrome browsers using the link https://support.google.com/ads/answer/7395996. Please note that in this case you may not be able to use the full functionality of this offer.
Further information on data protection at Google can be found here: https://policies.google.com/privacy and https://services.google.com/sitestats/de.html.
The processing of data generally takes place in Germany or countries of the European Union.
Please note that when using the tools, your data may be transferred to recipients outside the EEA where there is no adequate level of data protection in accordance with the GDPR (e.g. USA).