Estrel Berlin

Privacy Statement

  • Privacy Statement
Data privacy policy and consent to data use
 
We welcome your visit to our home page and thank you for your interest in our company. Our interactions with our clients and interested parties are a matter of trust. We really value the trust extended to us, meaning that we are committed to exercising great care when handling your data and protecting it from misuse.
 
We take the protection and confidential treatment of your personal data seriously and therefore strive to make you feel safe and at ease during your visit to our website. For this reason, we act only in compliance with the valid legal stipulations concerning the protection of personal data and data security. The purpose of this data privacy information is therefore to provide you with information regarding the data that we store and how we use it – subject to existing German data protection regulations of course.
 
Estrel Berlin complies with the EU General Data Protection Regulation and the current German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) in particular. To protect your personal data while using the Internet, we take guidance from the Teleservices Act (Telemediengesetz, TMG) of the Federal Republic of Germany.
 
Name and address of data controller
The data controller, within the meaning of the EU GDPR and other national data protection laws of the member states as well as other data protection regulations, is:
 
Estrel Hotel-Betriebs-GmbH
Sonnenallee 225
D-12057 Berlin
Germany
 
Tel.: +49 (0)30 68310
Telefax: +49 (0)30 68312345
 
Name and address of data protection officer
The data controller’s data protection officer is:
 
Andreas Thurmann
DataSolution Thurmann LUD GmbH
Isarstr. 13
D-14974 Ludwigsfelde
Germany
 
Tel.: +49 (0)303378 202513
 
General information on data processing
Scope of processing personal data
In principle, we collect and use the personal data of our users only insofar as is necessary for the provision of a functional website and for our content and services. Collection and use of personal data takes place regularly only after consent from the relevant user. An exception is made in cases where it is not possible to obtain consent in advance for objective reasons and where processing of the data is permitted by statutory regulations.
 
Legal basis for processing personal data
Insofar as we obtain consent from the data subject for personal data processing operations, Art. 6 (1) a General Data Protection Regulation (GDPR) shall serve as the legal basis. Where the processing of personal data is required for the fulfilment of a contract to which the data subject is party, Art. 6 (1) b GDPR shall serve as the legal basis. This shall also apply to all processing operations required for the execution of pre-contractual measures. Insofar as the processing of personal data is required for the fulfilment of a legal obligation (statutory conditions) to which our company is bound (e.g. Federal Registration Act), Art 6 (1) c GDPR shall serve as the legal basis. However, if processing is necessary to safeguard a legitimate interest of our company or of a third party and the interests, basic rights and fundamental freedoms of the data subject do not outweigh the aforementioned legitimate interest, Art. 6 (1) f GDPR shall serve as the legal basis for processing.
 
Deletion of data and storage duration
Personal data of the data subject is deleted or blocked as soon as the purpose for storage no longer applies. Storage beyond this may take place if this is provided for by the European or national legislator in EU regulations, laws or other provisions to which the data controller is subject. Data shall also be blocked or deleted once the storage period prescribed by the aforementioned standards expires, unless further storage of the data is necessary for the conclusion or fulfilment of a contract.
 
Contact form / e-mail contact

Description and scope of data processing

If there is a contact form on our website, it can be used for electronic contact. If you use this option, the data entered in the input mask will be transmitted to us and stored. These data are: Title, first name and surname, address, e-mail address, telephone number and the request.

Alternatively, it is possible to contact us via the e-mail address provided. In this case your personal data transmitted with the e-mail will be stored.

Legal basis for data processing
The legal basis for the processing of the data is first of all our legitimate interest in the data processing in the context of the establishment of contact by the inquirer. If the purpose of the contact is the conclusion of a contract, the additional legal basis for the processing is the processing within the framework of a business relationship or contractual relationship.
 
Purpose of the data processing
The data will be used exclusively for processing the conversation. The processing of the personal data from the input mask serves us solely to process the contact. In the case of contacting us by e-mail, this is also the necessary legitimate interest in the processing of the data.

The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

Duration of storage
The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected. For personal data sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is terminated when it is clear from the circumstances that the matter in question has been conclusively clarified.

If the contact is a pre-contractual relationship (offer or reservation request), the transmitted data will also be stored in our hotel or event software and used for the execution of the contract. If there is no contractual relationship, we delete the data after one year at the end of the year.

Possibility of appeal
You have the opportunity to object to the processing of your data at any time. For this purpose we have set up the e-mail address sales@estrel.com.

We would like to point out that in the event of an objection, the conversation cannot be continued or we are unable to provide offers etc.

All personal data stored in the course of the contact will be deleted in this case.

Online booking via the website
Description and scope of data processing
On our website you can book rooms and arrangements for the Estrel Berlin. If you take this opportunity, the data entered in the input mask will be transmitted to us and stored. These data are: First name, surname, e-mail address, telephone, e-mail, billing address and contact person for corporate clients, if applicable, number, names and contact details of fellow travellers, travel dates, requests, payment details, date, time.

When you make an online booking from our websites, it is done through the online reservation system of TravelClick, Inc. at 7 Times Square, 38th Floor, New York, USA. All booking data you enter is transmitted in encrypted form. Our contractual partner has committed itself to handling your transmitted data in a manner compatible with data protection. It takes all organisational and technical measures to protect your data.

In this context, the data will initially not be passed on to third parties. If there is a justified interest in receiving information about the availability of natural persons who are commercially active and legal entities, and information about their creditworthiness, we can carry out a request for information at IHD Gesellschaft für Kredit- und Forderungsmanagement mbH, Augustinusstr. 11 B, 50226 Frechen, Germany.

Legal basis for data processing
The legal basis for processing the data is the conclusion of an accommodation contract.

The transmitted data is stored in our hotel software and used for the execution of the contract. If there is no contractual relationship, we delete the data after one year at the end of the year.

Purpose of the data processing
The processing of the personal data from the input mask serves us solely to process the booking request and to handle payment transactions.
 
Duration of storage
The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected. In the case of a contractual relationship, we will delete the data received as soon as national, commercial, statutory or contractual retention requirements are fulfilled.
 
Possibility of appeal
You have the opportunity to object to the processing of your data at any time. For this purpose we have set up the e-mail address sales@estrel.com.

We would like to point out that in case of an objection the booking cannot be completed or the conversation cannot be continued.

Online booking via other websites
Online booking via other websites
Description and scope of data processing
The Estrel Berlin gives interested parties the opportunity to book rooms and arrangements via hotel reservation portals (third-party providers). If you take advantage of this opportunity, the data entered in the input mask will be transmitted to us and stored to the extent permitted by the respective hotel reservation portal in accordance with its own data protection regulations. Data can be: first name, surname, e-mail address, telephone, address, number of fellow travellers, estimated time of arrival, requests, payment details (credit card).

In this context, the data will initially not be passed on to third parties. If there is a justified interest in receiving information about the availability of natural persons who are commercially active and legal entities, and information about their creditworthiness, we can carry out a request for information at IHD Gesellschaft für Kredit- und Forderungsmanagement mbH, Augustinusstr. 11 B, 50226 Frechen, Germany.

Legal basis for data processing
The legal basis for processing the data is the conclusion of an accommodation contract.

The transmitted data is stored in our hotel software and used for the execution of the contract. If there is no contractual relationship, we delete the data after one year at the end of the year.

Purpose of the data processing
The processing of the personal data from the input mask serves us solely to process the booking request and to handle payment transactions.
 
Duration of storage
The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected. In the case of a contractual relationship, we will delete the data received as soon as national, commercial, statutory or contractual retention requirements are fulfilled.

The Estrel Berlin has no influence on the storage periods of the respective hotel reservation portal.

Possibility of appeal
You have the opportunity to object to the processing of your data at any time. For this purpose we have set up the e-mail address sales@estrel.com.

We would like to point out that in case of an objection the booking cannot be completed or the conversation cannot be continued.

Online Voucher
Description and scope of data processing
On our website there is the possibility to buy vouchers. If you take this opportunity, the data entered in the input mask will be transmitted to us and stored. These data are: Salutation/company, first name, surname, address, e-mail address, telephone, date of birth, voucher value, wishes, payment data, password for individual user account.

If you make a voucher purchase from our websites, this is done through the online ordering platform of INCERT eTourismus Gmbh & Co KG, Leonfeldner Straße 328, A-4040 Linz, Austria. All order data entered by you is transmitted in encrypted form. INCERT has committed itself to handling your transmitted data in accordance with data protection regulations. INCERT takes all organisational and technical measures to protect your data.

Initially, the data will not be passed on to third parties. If there is a justified interest in receiving information about the availability of natural persons who are commercially active and legal entities, and information about their creditworthiness, we can carry out a request for information at the IHD Gesellschaft für Kredit- und Forderungsmanagement mbH, Augustinusstr. 11 B, 50226 Frechen.

Legal basis for data processing
The legal basis for the processing of the data is the conclusion of a sales contract with the user in accordance with Art. 6 Paragraph 1 letter b GDPR.
 
Purpose of the data processing
The processing of the personal data from the input mask serves us solely for the processing of the voucher purchase and for the handling of payment transactions.
 
Duration of storage
The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected. In the case of a contractual relationship, we will delete the data received as soon as national, commercial, statutory or contractual retention requirements are fulfilled.
 
Possibility of appeal
You have the opportunity to object to the processing of your data at any time. For this purpose we have set up the e-mail address sales@estrel.com.
Online Service for Exhibitors
Description and scope of data processing
On our website, exhibitors at trade fairs etc. have the opportunity to register in the exhibitor shop in order to place orders within the framework of an event or for a trade fair stand. If you take advantage of this opportunity, the data entered in the input mask will be transmitted to us and stored. These data are: Salutation, first name, surname, e-mail address, telephone, mobile phone, company or invoice address, login data, requests, payment data, date, time.

If you place an online order, this is done through the online ordering system of Ungerboeck Systems International GmbH, Kaiserstrasse 72, 76133 Karlsruhe, Germany. All order data entered by you is transmitted in encrypted form. Our contractual partner has committed itself to handling your transmitted data in accordance with data protection laws.

In this context, the data will initially not be passed on to third parties. If there is a justified interest in receiving information about the availability of natural persons who are commercially active and legal entities, and information about their creditworthiness, we can carry out a request for information at IHD Gesellschaft für Kredit- und Forderungsmanagement mbH, Augustinusstr. 11 B, 50226 Frechen, Germany. More information can be found under this link.

Legal basis for data processing
The legal basis for processing the data is the conclusion of a sales contract with the user.

The transmitted data can be stored in our hotel software and used for the execution of the contract, for example when the user places an order for catering.

Purpose of the data processing
The processing of the personal data from the input mask for registration and the orders for an event carried out with the user account serves us solely to process the order and to handle payment transactions.
 
Duration of storage
The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected. In the case of a contractual relationship, we will delete the data received as soon as national, commercial, statutory or contractual retention requirements are fulfilled.
 
Possibility of appeal
You have the opportunity to object to the processing of your data at any time. For this purpose we have set up the e-mail address sales@estrel.com.
Sending e-mails before arrival
Description and scope of data processing
Before our guests arrive, we would like to send a welcome email to those from whom we have received an email address in the course of the booking. A few days before arrival, the guest will receive an e-mail with a reservation summary and information about the reservation and available additional services.

When we send these e-mails, we do so via the SerenataCRM platform Guest Management Solution der TravelClick Inc., 55 West, 46th Street, 27th Floor, New York, USA. TravelClick. Travelclick has committed itself to handling your transmitted data in accordance with data protection laws. Serenata takes all organisational and technical measures to protect your data.

Legal basis for data processing
The legal basis for processing the data is first of all our justified interest in data processing within the framework of the booking, i.e. the contractual relationship.
 
Purpose of the data processing
By contacting us, we would like to give the guest the opportunity to book additional services quickly and conveniently.
 
Duration of storage
The data will be deleted as soon as they are no longer required for the purpose for which they were collected.
 
Possibility of appeal
You have the opportunity to object to the processing of your data at any time. For this purpose we have set up the e-mail address sales@estrel.com.
Support, advice und advertising to corporate clients
Description and scope of data processing
For the support, advice and advertising of corporate customers, we collect and use the contact person, telephone number and postal address in addition to the business partner or potential business partner. We obtain the information from various sources, either through an enquiry (e-mail or telephone), but also through events, trade fairs, business cards received by our sales staff, etc.

In this context, the data will not be passed on to third parties.

Legal basis for data processing
The legal basis for processing the data is our legitimate interest in data processing. If the purpose of the contact is to conclude a contract, the additional legal basis for processing is the business relationship or contractual relationship. To increase our services, we manage all data received in the CRM module of our central hotel software within the Estrel Hotel.
 
Purpose of the data processing
We use these contact details exclusively for our own purposes and for the needs-based design of our own sales activities.
 
Duration of storage
In principle, no deletion period is provided for. However, if our sales department has not had contact with the company contact within 3 years, the sales department will decide whether the contact person of the company contact will be deleted.

If the contact is a pre-contractual relationship (offer, booking or reservation request), the transmitted data will also be stored in our hotel software and used for the execution of the contract. If there is no contractual relationship, we delete the data after one year at the end of the year.

Possibility of appeal
As a company contact, you have the opportunity to object to the processing of your data at any time. For this purpose we have set up the e-mail address sales@estrel.com.

In this case, all personal data of the contact person that has been saved for the business partner will be deleted.

Online evaluation
Description and scope of data processing
Former guests can give a rating to our hotel after check-out. For this purpose we would like to send you an e-mail within 14 days after departure to ask you to submit a hotel evaluation. Each rating can be published anonymously on request. Should you not feel comfortable in our hotel, we would like to take the opportunity to contact you.

When we send these e-mails, this is done via the platform dailypoint of Toedt, Dr. Selk & Coll. GmbH, Augustenstr. 79, D-80333 Munich. The service provider has committed itself to handling your transmitted data in accordance with data protection laws. Toedt, Dr. Selk & Coll. GmbH takes all organisational and technical measures to protect your data.

If you would like to take advantage of this possibility of online evaluation, your data can be saved in the evaluation mask. These data are: e-mail address as well as voluntary details such as first name, surname, language and the details of the evaluation.

In this context, the data will not be passed on to third parties.

Legal basis for data processing
The legal basis for the processing of the data is our legitimate interest in data processing.
 
Purpose of the data processing
The purpose of the hotel evaluation is to communicate and summarise the opinions of hotel guests via our website so that interested parties can form their own opinion about our services and performance. In addition, the results serve our internal quality management.

The data will be used exclusively for the publication of the evaluation and for arbitration in case of bad evaluations.

Duration of storage
The data will not be deleted.
 
Possibility of appeal
There is always the possibility to have the publication of the rating deleted (right to forget). For this purpose we have set up the e-mail address sales@estrel.com. Please let us know which rating is concerned.
Newsletter service
Description and scope of data processing
On our website you have the possibility to register for our newsletter service in different ways. If you take this opportunity, the data entered in the input mask will be transmitted to us and stored. These data are: e-mail address, title, first name, surname, company, address and the type of newsletter.

If you register for a newsletter from our website, the data will be saved in our newsletter tool: dailypoint der Toedt, Dr. Selk & Coll. GmbH, Augustenstr. 79, D-80333 Munich, Germany. The provider has committed itself to handling your transmitted data in accordance with data protection laws. It takes all organisational and technical measures to protect your data.

If we receive an e-mail address elsewhere where the recipient clearly informs us that he/she wishes to receive our newsletter, we will collect his/her data via the input mask on our website.

In this context, the data will not be passed on to third parties.

Legal basis for data processing
The legal basis for processing the data is the existence of the consent of the recipient. This is ensured by a double opt-in procedure.
 
Purpose of the data processing
The processing of personal data serves us solely to send individual newsletters.
 
Duration of storage
The data is deleted as soon as the newsletter service is cancelled.
 
Possibility of appeal
As the recipient, you have the opportunity to object to the processing of your data at any time. With every newsletter you can unsubscribe from the newsletter service. In addition, we have set up the e-mail address sales@estrel.com. Please provide us with the e-mail address here.
Your application for a job vacancy
1. Description and scope of data processing
You can apply for advertised job vacancies on our website and via web portals. When an applicant does so, we may store and use the data provided to us. This data includes:
 
  • Title, first name, surname
  • Contact details (email address, telephone)
  • Cover letter
  • File attachment with detailed application
 
The data is not shared with any third parties in this regard to begin with. However, if an applicant fits the profile for another job vacancy advertised by a company affiliated with us, we will be happy to pass the application documents on. We will obtain the applicant’s prior consent to do so. Besides this, the data will solely be used by the relevant department to process the application and for communication.
 
2. Legal basis for data processing
The legal basis for the processing of the data is the contract negotiation process or the conclusion of a contract with the user. We will obtain prior consent to pass the application documents on to an affiliated company.
 
3. Purpose of data processing
The personal data is processed solely to enable us to handle the application.
 
4. Duration of storage
The data will be erased as soon as it is no longer necessary for the purpose for which it was collected, 6 months after refusal at the latest. In the case of a contractual relationship, we will erase the data obtained as soon as national, commercial, statutory or contractual retention obligations are fulfilled.
 
5. Right to object and right to rectification
The user can object to the processing of their personal data at any time. To do so, please send an email to the department to which you sent your application (the advertising department).
 

 

Provision of the website and creation of log files
Description and scope of data processing
Whenever our website is called up, our system automatically collects data and information from the computer system of the calling computer. The following data is collected:
  •  Information about the browser type and version used
  • The user's operating system
  • The IP address of the user
  • Date and time of access
  • Websites from which the user's system accesses our website
  • web pages that are called up by the user's system via our website

The data is also stored in the log files of our system. These data are not stored together with other personal data of the user. Personal user profiles cannot be created. The stored data is only evaluated for statistical purposes.

Legal basis for data processing
The legal basis for the temporary storage of data and log files is the processing to protect our legitimate interest, i.e. the Estrel Berlin.
 
Purpose of the data processing
Temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

Storage in log files is done to ensure the functionality of the website. In addition, the data serves us to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

These purposes also constitute our legitimate interest in data processing.

Duration of storage
The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected. In the case of the collection of data for the purpose of providing the website, this is the case when the relevant session has ended.

If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated so that an allocation of the calling client is no longer possible.

Possibility of objection and removal
The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
Use of cookies and scripts
Description and scope of data processing
Cookies are small files that enable us to store specific information on your computer that relates to you, the user, while you are visiting one of our websites. Cookies help us to determine the frequency of use and the number of users of our website, as well as to make our services as convenient and efficient as possible for you. You can find more information on the cookies used in our cookie policy.

We also use cookies on our website, which enable an analysis of the surfing behaviour of the users. In this way the following data can be transmitted: Entered search terms, frequency of page views, use of website functions. The user data collected in this way is pseudonymised by technical precautions. It is therefore no longer possible to assign the data to the calling user. The data is not stored together with other personal data of the users. When accessing our website, the user is informed about the use of cookies for analysis purposes and his consent to the processing of the personal data used in this context is obtained. In this context, reference is also made to this data protection declaration.

Legal basis for data processing
The legal basis for processing personal data using technically necessary cookies is our legitimate interest in data processing.

The legal basis for the processing of personal data using cookies for analysis purposes is if the user has given his consent to this.

Purpose of the data processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser is recognised even after a change of page. The user data collected through technically necessary cookies is not used to create user profiles.

The analysis cookies are used to improve the quality of our website and its contents. The analysis cookies tell us how the website is used and enable us to constantly optimise our offer.

Duration of storage, possibility of objection and removal
Cookies are stored on the user's computer and transmitted by the user to our site. Therefore you as a user have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies already stored can be deleted at any time. This can also be done automatically. If cookies for our website are deactivated, it may not be possible to use all the functions of the website to their full extent.
 
Script blocker in your browser
A use of our offers is also possible without cookies and scripts. You can deactivate the storage of cookies and scripts in your browser, restrict it to certain websites or set your browser to notify you as soon as a cookie is sent. You can also delete cookies from your computer's hard drive at any time.

You can install browser add-ons to block scripts. NoScript for Firefox and ScriptSafe for Google Chrome are such browser add-ons. These not only block any kind of JavaScript, they also block selected trackers, Java, Flash and other plugins on web pages.

If you are concerned about third-party cookies, you can only reject them and still receive the cookies that make our site work properly.

This allows you to refuse cookies in any of the main browsers:

 Mozilla Firefox: Link
 Google Chrome: Link
 Internet Explorer: Link
 Safari: Link
 
Please note, however, that in these cases you must reckon with a restricted display of the page and limited user guidance.
Use of a cookie banner
Description and scope of data processing
On our website the Consent Manager of the company Cybot A/S, Havnegade 39, 1058 Copenhagen (hereinafter: cookiebot.com) is loaded. We use this service in order to ensure, on the one hand, the full functionality of our website and, on the other hand, the data protection compliant use of marketing and tracking tools on our website. In this context your browser may transmit personal data to cookiebot.com.
 
Legal basis and purpose of the data processing
The legal basis for data processing is Art. 6 Para. 1 letter f GDPR. The legitimate interest lies in the faultless functioning of the website. The data will be deleted as soon as the purpose for which they were collected has been fulfilled. Further information on the handling of the transferred data can be found in the data protection declaration of cookiebot.com. You can prevent the collection and processing of your data by cookiebot.com by deactivating the execution of script code in your browser or by installing a script blocker in your browser.

The following information is stored in our cookiebot account:

  •  The IP address of the user in anonymous form (the last three digits are set to "0").
  • Date and time of consent.
  • Browser of the user.
  • The URL from which the consent was sent.
  • An anonymous, random and encrypted key value.
  • The state of consent of the user, which serves as proof of consent.

The key and consent status are also stored in the user's browser in the cookie "CookieConsent", so that the website can automatically read and respect the user's consent in all subsequent page requests and future user sessions for up to 12 months. You can view and change your level of consent at any time. You will find this further down on this page.

By law, we may store cookies on your device if they are absolutely necessary for the operation of this site. For all other types of cookies we need your permission. This site uses different types of cookies. Some cookies are placed by third parties that appear on our pages. You can change or withdraw your consent at any time from the cookie declaration on our website.

 Change your consent here

Use of analysis and tracking tools
Google Analytics
Our offer uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on the user's computer and which enable an analysis of the use of the website by the user. The information generated by the cookies about the use of this website by the users is usually transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, the IP address of the users of Google will be shortened beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. IP anonymisation is active on this website.

On behalf of the operator of this website, Google will use this information to evaluate the use of the website by users, to compile reports on website activity and to provide further services to the website operator in connection with website and internet use. The IP address transmitted by your browser within the framework of Google Analytics is not combined with other data from Google.

Users can prevent the storage of cookies by means of a corresponding setting in their browser software; however, this offer points out to users that in this case they may not be able to use all the functions of this website to their full extent. Furthermore, users can prevent the collection of data generated by the cookie and related to their use of the website (including their IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de. As an alternative to the browser add-on or within browsers on mobile devices, please click on this link to prevent Google Analytics from recording data within this website in the future. An opt-out cookie will be placed on your device. If you delete your cookies, you must click this link again.

Deactivation of Google advertising
(http://www.google.com/privacy_ads.html) or on the deactivation page of the network advertising initiative (http://www.networkadvertising.org/managing/opt_out.asp)
 
Google Tag Manager
We use the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags through an interface and allows us to control the precise integration of services on our website

This allows us to flexibly integrate additional services in order to evaluate user access to our website.

The use of Google Tag Manager is based on our legitimate interests, i.e. interest in the optimisation of our services.

The actual storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Please see the Google Tag Manager Privacy Policy for further details.

Use of Google Services
Description and scope of data processing
On our website the Consent Manager of the company Cybot A/S, Havnegade 39, 1058 Copenhagen (hereinafter: cookiebot.com) is loaded. We use this service in order to ensure, on the one hand, the full functionality of our website and, on the other hand, the data protection compliant use of marketing and tracking tools on our website. In this context your browser may transmit personal data to cookiebot.com.
Use of analysis and tracking tools
Google Analytics
Our offer uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on the user's computer and which enable an analysis of the use of the website by the user. The information generated by the cookies about the use of this website by the users is usually transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, the IP address of the users of Google will be shortened beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. IP anonymisation is active on this website.

On behalf of the operator of this website, Google will use this information to evaluate the use of the website by users, to compile reports on website activity and to provide further services to the website operator in connection with website and internet use. The IP address transmitted by your browser within the framework of Google Analytics is not combined with other data from Google.

Users can prevent the storage of cookies by means of a corresponding setting in their browser software; however, this offer points out to users that in this case they may not be able to use all the functions of this website to their full extent. Furthermore, users can prevent the collection of data generated by the cookie and related to their use of the website (including their IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de. As an alternative to the browser add-on or within browsers on mobile devices, please click on this link to prevent Google Analytics from recording data within this website in the future. An opt-out cookie will be placed on your device. If you delete your cookies, you must click this link again.

Deactivation of Google advertising
Google DoubleClick
We have integrated components from DoubleClick by Google on our website. DoubleClick is a brand of Google, under which mainly special online marketing solutions are marketed to advertising agencies and publishers. DoubleClick by Google transfers data to the DoubleClick server with every impression, click or other activity.

Each of these data transfers triggers a cookie request to the browser of the person concerned. If the browser accepts this request, DoubleClick sets a cookie in your browser.

DoubleClick uses a cookie ID, which is required to complete the technical process. The cookie ID is required, for example, to display an advertisement in a browser. DoubleClick can also use the cookie ID to record which advertisements have already been displayed in a browser in order to avoid duplication. The cookie ID also enables DoubleClick to track conversions. For example, conversions are recorded if a user has previously seen a DoubleClick ad and subsequently makes a purchase on the advertiser's website using the same Internet browser.

A DoubleClick cookie does not contain any personal information, but may contain additional campaign identifiers. A campaign identifier is used to identify the campaigns you have already been in contact with on other websites. As part of this service, Google will obtain knowledge of data which will also be used by Google to generate commission statements. Among other things, Google can track that you have clicked on certain links on our website. In this case your data will be passed on to the operator of DoubleClick, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information and DoubleClick by Google's applicable privacy policy can be found at https://policies.google.com/privacy.

We process your data with the help of the Double-Click cookie for the purpose of optimising and displaying advertising based on your consent. You give your consent by adjusting the settings for the use of cookies (cookie banner / Consent Manager), with which you can also declare your revocation at any time with effect for the future in accordance with Art. 7 Para. 3 GDPR. Among other things, the cookie is used to place and display user-relevant advertisements and to create reports on advertising campaigns or to improve them. Furthermore, the cookie serves to avoid multiple displays of the same advertisement. Each time you visit a single page on our website that has a DoubleClick component embedded, your browser is automatically prompted by the DoubleClick component to submit data to Google for the purposes of online advertising and commissions. There is no legal or contractual obligation to provide your data. If you do not give us your consent, a visit to our website is possible without restriction, but not all functions may be available in full.

The actual storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. For more information, please see the Google DoubleClick privacy policy.

Google Ads
We have integrated Google Ads on our website. Google Ads is a service provided by Google Ireland Limited to display targeted advertising to users. Google Ads uses cookies and other browser technologies to analyse user behaviour and recognise users.

Google Ads collects information about visitor behaviour on various websites. This information is used to optimise the relevance of the advertising. Google Ads also delivers targeted advertising based on behavioural profiles and geographical location. Your IP address and other identification features such as your user agent are transmitted to the provider.

If you are registered with a Google Ireland Limited service, Google Ads can associate the visit with your account. Even if you are not registered with Google Ireland Limited or have not logged in, it is possible that the provider may discover and store your IP address and other identifying information.

In this case your data will be passed on to the operator of Google Ads, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

We process your data with the help of Google Ads for the purpose of optimising our website and for marketing purposes based on your consent.

The actual storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. For more information, please see the Google Ads privacy policy.

Google CDN
We use Google CDN to properly provide the content of our website. Google CDN is a service provided by Google Ireland Limited which acts as a content delivery network (CDN) on our website.

A CDN helps to make the contents of our online offer, especially files such as graphics or scripts, available more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. This data is processed solely for the above purposes and to maintain the security and functionality of Google CDN.

The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in a secure and efficient provision and optimisation of our online offer.

The actual storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. For more information, please see the Google CDN Privacy Policy. 

Google Fonts
We use Google Fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a service to provide fonts for our online offering. To obtain these fonts, you connect to Google Ireland Limited's servers and your IP address is transmitted.

The use of Google Fonts is based on our legitimate interests, i.e. interest in a uniform provision and the optimisation of our online offer.

The actual storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Please see the Google Fonts privacy policy for further details.

Google reCAPTCHA
We have integrated components from Google reCAPTCHA on our website. Google reCAPTCHA is a service of Google Ireland Limited and enables us to distinguish whether a contact request comes from a natural person or is automated by a program. When you access this content, you connect to servers at Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and your IP address and, where applicable, browser information such as your user agent is transmitted. Furthermore, Google reCAPTCHA records the length of time the user stays on the site and mouse movements in order to distinguish automated requests from human ones. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Google reCAPTCHA.

The use of the service is based on our legitimate interests, i.e. for protection when submitting forms.

The actual storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. You can find further information in the privacy policy for Google reCAPTCHA.

Google Services
We use Google Services from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland to access additional services and data from Google Ireland Limited. This involves the transmission of your IP address to Google Ireland Limited. Please note that there is a separate section in this Privacy Policy for each additional service we use from Google Ireland Limited.

The use of Google Services is based on our legitimate interests, i.e. interest in optimising our online offer.

The actual storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. For further details, please see the privacy policy for Google Services.

Google Maps
This website uses Google Maps API, a map service of Google Inc. ("Google"), for the display of an interactive map and for the creation of route maps. Google Maps is operated by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

By using Google Maps, information about your use of this website (including your IP address) can be transmitted to a Google server in the USA and stored there. Google may transfer the information obtained through Maps to third parties if this is required by law or if third parties process this data on behalf of Google.

Under no circumstances will Google link your IP address to other Google data. It is nevertheless technically possible that Google could identify at least individual users on the basis of the data received. It would be possible that personal data and personality profiles of users of the website could be processed by Google for other purposes over which we have and can have no influence.

The legal basis for the use of Google Maps is our legitimate interest in data processing.

The purpose of the use of Google Maps is to show the user our location on the website and to enable him to find different ways of getting there using the services of Google Maps.

You have the possibility to deactivate the service of Google Maps and thus prevent the data transfer to Google by deactivating JavaScript in your browser. However, we would like to point out that in this case you will not be able to use the map display on our website.

Use of Social Media Plugins
The use of social media plugins is in the interest of an attractive presentation and expansion of our online offers. This represents a legitimate interest in the sense of Art. 6 Para. 1 letter f GDPR.

 

Use of Facebook plugins
 
On our pages are integrated plugins of the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA You can recognise the plugins by the logo on our site. You can find an overview of the plugins here.

We have no influence on data collection and further processing by Facebook. Furthermore, it is not apparent to us to what extent, where and for how long the data will be stored, to what extent Facebook will comply with existing deletion obligations, what evaluations and links will be made with the data and to whom the data will be passed on. If you would like to avoid Facebook processing personal data that you have sent to us, please contact us by other means.

For more information, please refer to the Facebook privacy policy. If you do not want Facebook to be able to assign visits to our pages to your user account, please log out of your respective user account!

Facebook fan page
 
On our Facebook fan page at:https://www.facebook.com/estrelberlin we use plugins of the provider Facebook.com, which are provided by the company Facebook Inc., 1601 S. California Avenue, Palo Alto, CA 94304 in the USA.

 

By using the fan page, data is forwarded to the Facebook servers, which contain information about your visits to our fan page. For logged-in users, this means that the usage data is assigned to their personal Facebook account. As soon as you as a logged in Facebook user actively use the Facebook plug-in, e.g. by clicking on the "Facebook" logo or using the comment function, this data is transferred to your Facebook account and published. You can only avoid this by logging out of your Facebook account first.

We do not know exactly what data Facebook stores and uses. As a user of the fan page, you must therefore expect that Facebook will also store your actions on the fan page without any gaps.

In all other respects the terms and conditions of use of Facebook Ireland Limited, Hanover Reach, 5-7 Hanover Quay, Dublin 2, Ireland apply.

The legal basis for this data processing is Art. 6 para. 1 lit. a, f) GDPR.

Every person depicted as well as other third parties have the possibility to object to the publication of their personal data (photos) at any time. For this purpose we have set up the e-mail address sales@estrel.com. The right of objection applies in particular to the publication of pictures for the future.

It can always happen that we inadvertently publish pictures of people where there is no consent. If publication is not desired, we will immediately do everything possible to comply with your right. For group pictures we reserve the right to falsify faces.

Use of Twitter plug-ins
 
Our website uses social plugins ("plugins") from the social network of Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. The Twitter button takes the user to our Twitter page via a link. No data is transferred from our website to Twitter when the user visits our website.

The plugin is marked with a Twitter logo and can be activated directly by the user. If you activate it and are logged in to your Twitter account, you can link the contents of our pages on your Twitter profile. This allows Twitter to assign visits to our pages to your user account if the plugin is activated. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Twitter.

For more information, please see the Twitter privacy statement.

Use of Instagram plug-ins
 
On this website the "Instagram Button" is used. When you access this website, your browser will connect to servers of the Instagram social network, offered by Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA.

When you visit our pages, the plugin establishes a direct connection between your browser and the Instagram server. This tells Instagram that you have used your IP address to visit our site. If you click the Instagram button while logged into your Instagram account, you can link the contents of our pages to your Instagram profile. This allows Instagram to associate your visit to our sites with your account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Instagram.

Please refer to Instagram's privacy policy for more information.

Use of YouTube plugins
Our website uses social plugins ("plugins") from the YouTube site operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

The plugin is marked with a YouTube logo and can be activated directly by the user. When you activate it, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited.

Furthermore, YouTube can store various cookies on your end device. These cookies enable YouTube to obtain information about visitors to our website. This information is used, among other things, to gather video statistics, improve the user experience and prevent fraud. The cookies remain on your terminal device until you delete them.

If you are logged in to your YouTube account, you allow YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

Further information on the handling of user data can be found in the YouTube (Google) privacy policy.

Use of Prospect One
Description and scope of data processing
We use JSDelivr CDN to properly provide the content of our website. JSDelivr CDN is a service provided by Prospect One, which acts as a Content Delivery Network (CDN) on our website.

A CDN helps to make the contents of our online offer, especially files such as graphics or scripts, available more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to servers of Prospect One, Krolewska 65a, Krakow, Malopolskie 30-081, Poland, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. This data is processed solely for the above purposes and to maintain the security and functionality of JSDelivr CDN.

Purpose and legal basis
The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in a secure and efficient provision and optimisation of our online offer.
 
Duration of storage
The actual storage period of the processed data cannot be influenced by us, but is determined by Prospect One. For further information, please refer to the JSDelivr CDN Privacy Policy.
Use of jQuery
Description and scope of data processing
We use jQuery CDN to properly deliver the content of our website. jQuery CDN is a service of jQuery which acts as a Content Delivery Network (CDN) on our website.

A CDN helps to make the contents of our online offer, especially files such as graphics or scripts, available more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to jQuery servers, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed solely for the above purposes and to maintain the security and functionality of jQuery CDN.

Purpose and legal basis
The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in a secure and efficient provision and optimisation of our online offer.
 
Duration of storage
The concrete storage period of the processed data cannot be influenced by us, but is determined by jQuery. For further information please refer to the data protection declaration for jQuery CDN.
 
This servicProtection of minors
This service is mainly aimed at adults. We do not currently market special areas for children. Accordingly, we do not knowingly collect age verification information, nor do we knowingly collect personal information from children under the age of 16. However, we remind all visitors to our website under the age of 16 not to disclose or provide any personal information through our service. In the event that we discover that a child under the age of 16 has provided us with personal information, we will delete the child's personal information from our files to the extent technically possible.
Protection of minors

This service is mainly aimed at adults. We do not currently market special areas for children. Accordingly, we do not knowingly collect age verification information, nor do we knowingly collect personal information from children under the age of 16. However, we remind all visitors to our website under the age of 16 not to disclose or provide any personal information through our service. In the event that we discover that a child under the age of 16 has provided us with personal information, we will delete the child's personal information from our files to the extent technically possible.

Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you are entitled to the following rights in relation to the person responsible:

  •  You have a right to information about the personal data stored about you, about the purposes of processing, about possible transmissions to other bodies and about the duration of storage.
  •  If data is incorrect or no longer necessary for the purposes for which it was collected, you can request that it be corrected, deleted or limited. If provided for in the processing procedures, you can also inspect your data yourself and correct them if necessary. 
  • Should your particular personal situation give grounds against processing of your personal data, you can object to this if the processing is based on a legitimate interest. The controller will no longer process the personal data concerning you unless he can demonstrate compelling reasons for processing which are justified on grounds of legitimate interest outweighing your interests, rights and freedoms, or unless the processing is carried out for the purpose of asserting, exercising or defending legal claims.
  • If the personal data concerning you are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing, including profiling, insofar as it relates to such direct marketing. If you object to processing for the purposes of direct marketing or profiling, the personal data concerning you will no longer be processed for those purposes.

You have the right to revoke your data protection declaration of consent at any time. Revocation of your consent does not affect the lawfulness of the processing that has taken place on the basis of your consent until revocation.

If you have any questions regarding your rights and the exercise of your rights, please contact the responsible office or the data protection officer.

 

Right to lodge a complaint with a regulatory authority

As a data subject, and without prejudice to any other administrative or judicial remedy, you have the right to complain to a data protection supervisory authority, in particular in the Member State in which you are resident or in which the alleged breach occurred, if you consider that the processing of personal data concerning you is being carried out in breach of data protection legislation.

The supervisory authority with which the complaint is lodged will keep you informed of the status and outcome of your complaint, including the possibility of judicial redress.

You can find more information on the website of the Federal Commissioner for Data Protection and Freedom of Information. Follow the link.

Security

 

The Estrel Berlin uses technical and organisational security measures in accordance with Art. 32 GDPR to protect your data managed by us against accidental or deliberate manipulation, loss, destruction or access by unauthorised persons. Our security measures are continuously improved in line with technological developments. Access to this data is only possible for a small number of authorised persons who are responsible for the technical, administrative or editorial management of the data.

We reserve the right to change, update or amend this privacy policy at any time. Any revised Privacy Policy will only apply to personal data collected or modified after the revised Policy comes into force.

Status | November 2020