Privacy Policy

1. Name and contact details of the controller responsible for processing

Controller:
Interdependence GmbH
Goethestr. 3
71686 Remseck
Germany

Phone: +49 (0) 711 400 990 30
E-mail: service@hotelshop.one

2. Collection and storage of personal data as well as the nature and purpose of its use

a) When visiting the website:
When you access our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in what is known as a log file. The following information is collected without any action on your part and stored until it is automatically deleted:

• name of the file retrieved
• date and time of the retrieval
• amount of data transferred
• notification of whether the retrieval was successful
• description of the type of web browser used
• operating system used
• the website previously visited
• provider
• your IP address

We process the aforementioned data for the following purposes:

• to ensure a smooth connection of the website,
• to ensure convenient use of our website,
• to evaluate system security and stability, and
• for further administrative purposes.

The legal basis for the data processing is Art. 6 (1) (f) GDPR. Our legitimate interest follows from the purposes for collecting data listed above. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.

In addition, we use cookies as well as analytics and marketing services when you visit our website. Further explanations can be found in sections 4 to 6 of this privacy policy.

b) When using our forms
We offer you the option of contacting us via forms provided on the website. For this purpose, a contact form, a returns form, a price enquiry form and a product enquiry form are available to you.

When completing the forms, providing your first and last name, a valid e-mail address and your specific enquiry is required so that we know who the enquiry is from and can respond to it. Further details may be provided voluntarily.

The data processing for the purpose of contacting us is carried out in accordance with Art. 6 (1) (b) GDPR on the basis of your specific enquiry. The personal data collected by us for the use of the contact form will be automatically deleted once your enquiry has been dealt with, unless another legal basis (e.g. a specific order) justifies further processing. You can withdraw your consent at any time with effect for the future. In the event of withdrawal, your data will be deleted immediately.

c) When using the customer account
For every customer who registers accordingly, we set up a password-protected direct access to the master data stored with us (customer account). Here you can view data about your completed, open and recently dispatched orders and manage your data and the newsletter. You undertake to treat the personal access data confidentially and not to make it accessible to any unauthorised third party. We cannot accept any liability for misused passwords, unless we are responsible for the misuse. Unless you log out, you will remain logged in automatically. This function enables you to use part of our services without having to log in again each time.

This data processing is carried out for the performance of the contract in accordance with Art. 6 (1) (b) GDPR.

The personal data collected by us within the scope of the customer account will be deleted upon deletion of your customer account or in the event of withdrawal, unless another legal basis justifies further processing.

d) When using our online shop
We collect, store and process your data for the entire processing of your purchase, including any subsequent warranty claims, for our customer services, technical administration and our own marketing purposes. Your personal data will only be passed on or otherwise transmitted to third parties if this is necessary for the purpose of processing the contract or for billing, or if you have previously consented. As part of order processing, the service providers we use here (such as carriers, logistics providers) receive the data necessary to process the order. The data passed on in this way may only be used by our service providers to fulfil their task.

For your order we require your correct name, address and payment data. We require your e-mail address so that we can confirm receipt of your order and communicate with you. We also use it to identify you (customer login). Furthermore, you will receive your order and shipping confirmation via your e-mail address.

This data processing is carried out for the performance of the contract in accordance with Art. 6 (1) (b) GDPR.

The personal data collected by us within the scope of the online shop will be deleted upon assertion of corresponding deletion or objection claims, or when the data is no longer required to fulfil the purpose for which it was stored, unless another legal basis justifies further processing.

Insofar as you are forwarded to the website of a payment service provider (e.g. PayPal) during the sales process, the payment service provider processes this data under its own responsibility on the basis of the privacy policy stated there.

e) Product recommendations by e-mail
As our customer, you regularly receive product recommendations for similar goods from us by e-mail. You receive these product recommendations from us regardless of whether you have subscribed to a newsletter. In this way, we want to provide you with information about products from our range that might interest you based on your recent purchases with us. In doing so, we strictly comply with the legal requirements.

This data processing is carried out on the basis of our legitimate interest in informing our customers about relevant offers in accordance with Art. 6 (1) (f) GDPR.

If you no longer wish to receive product recommendations or any promotional messages from us at all, you can object to this at any time. A notification in text form to the contact details listed under section 1 (e.g. e-mail, fax, letter) is sufficient for this. Of course, you will also find an unsubscribe link in every e-mail.

f) When using the electronic withdrawal function („Revoke contract“)
We provide you with an electronic withdrawal function („Revoke contract“) in our online shop, which you can use to withdraw from a contract concluded with us.

If you use this function, we process the data you enter into the withdrawal form: your first and last name, your e-mail address, information identifying the contract (in particular the order number) and any voluntary information you enter into a free-text field. The purpose of the processing is to receive, allocate, review and process your withdrawal declaration as well as to send you the legally required confirmation of receipt.

Providing your name, the order number and your e-mail address is required so that we can clearly allocate your withdrawal and send you the confirmation of receipt.

This data processing is carried out for the performance of the contractual relationship in accordance with Art. 6 (1) (b) GDPR. Insofar as we are legally obliged to send a confirmation of receipt, the processing is additionally based on Art. 6 (1) (c) GDPR. No consent is required for this.

The personal data collected by us within the scope of the withdrawal function will be deleted as soon as it is no longer required to process your withdrawal and the contractual relationship, unless statutory retention obligations (see section 10) prevent deletion.

3. Disclosure of data

Your personal data will not be transmitted to third parties for purposes other than those listed below.

We only pass your personal data on to third parties if:

• you have given your express consent in accordance with Art. 6 (1) (a) GDPR,
• disclosure is necessary in accordance with Art. 6 (1) (f) GDPR and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,
• in the event that there is a legal obligation for disclosure in accordance with Art. 6 (1) (c) GDPR, and
• this is legally permissible and necessary in accordance with Art. 6 (1) (b) GDPR for the processing of contractual relationships with you, as well as
• these are necessary for order processing. This means that if the shipping method "collection on site" is selected, the respective hotel receives the data necessary for order processing.

I agree that the master and purchase data collected about me in the course of the purchase may be transmitted by Interdependence GmbH to the hotel for which the shop is operated, so that they can inform me by e-mail at the address I have provided about their respective hotel offers. My consent is valid until revoked, which I can declare at any time with effect for the future by e-mail to service@hotelshop.one.

4. Cookies

We use so-called cookies in some areas of our website. By means of such data elements, your computer can be identified as a technical unit during your visit to this website in order to make it easier for you to use our offer – including on repeat visits.

However, you generally have the option of setting your internet browser so that you are informed about the occurrence of cookies, so that you can allow or exclude them, or delete existing cookies.

Please use the help function of your internet browser to obtain information on how to change these settings. We point out that individual functions of our website may not work if you have deactivated the use of cookies.

Cookies do not allow a server to read private data from your computer or data stored by another server. They do not cause any damage to your computer and do not contain any viruses.

We base the use of cookies on Art. 6 (1) (f) GDPR: the processing is carried out to improve the functionality of our website. It is therefore necessary to safeguard our legitimate interests.

Where required, we obtain your consent before setting a cookie.

5. Use of Google Analytics

Subject to your corresponding consent, we use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google is certified under the Privacy Shield agreement and thereby provides a guarantee of complying with European data protection law (see https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active ).

Google Analytics uses so-called "cookies", text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transferred to a Google server in the USA and stored there. Due to the activation of IP anonymisation on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with further services associated with website use and internet use. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; however, we point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of the data generated by the cookie and relating to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available under the following link http://tools.google.com/dlpage/gaoptout?hl=de.

We point out that on this website Google Analytics has been extended with the code "gat._anonymizeIp();" to ensure anonymised collection of IP addresses (so-called IP masking).

In addition, you can prevent collection by Google Analytics by clicking on the following link. An opt-out cookie will then be set, which prevents the future collection of your data when you visit this website. This procedure is particularly recommended when accessing our site via mobile devices.

Further information on terms of use and data protection can be found at
www.google.com/analytics/terms/de.html and at
www.google.com/intl/de/analytics/privacyoverview.html.

We base the use of the aforementioned analytics tool on Art. 6 (1) (f) GDPR: the processing is carried out to analyse usage behaviour and is therefore necessary to safeguard our legitimate interests.

6. Use of Hotjar

On the basis of our legitimate interest in optimising our website, we use the Hotjar service. The following data is automatically created by our servers when Hotjar is used:

• referring domain
• pages visited
• geographical location (country only)
• the preferred language in which to display our website
• date and time when the website was accessed

Hotjar will use this information to evaluate your use of our website, to create reports on usage and to provide other services relating to website use and internet evaluation of the website. Hotjar also uses services from third-party companies such as Google Analytics to provide its services. These third-party companies may store information that your browser sends as part of the website visit, such as cookies or IP requests. For further information on how Google Analytics and other companies store and use data, please refer to their respective privacy policies.

If you continue to use this website, you consent to the above-mentioned processing of the data therein by Hotjar and its third-party providers within the scope of their privacy policies.

The cookies used by Hotjar have a different "lifespan"; some remain valid for up to 365 days, some only for the duration of the current visit. You can prevent the collection of data by Hotjar, if the cookies have already been set, by clicking on the following link and following the instructions there: Hotjar Opt-out https://www.hotjar.com/opt-out

7. Use of Tawk.to

This website uses Tawk.to (Finsgate, 5-7 Cranwood Street, London, EC1V 9EE, United Kingdom) for the live chat offered. Tawk.to is an external platform for managing the chats that is integrated into the website. By using the chat, you automatically use the services of Tawk.to. Data is transferred there for the purposes of security, quality assurance and documentation. In addition, the provider uses cookies that are stored on your computer and enable an analysis of the use of the website and the chat. However, the provider will not merge your IP address with other data you have stored. The data collected includes: chat history, including any voluntarily provided data within the chat, IP address at the time of the chat and country of origin. If you do not provide any personal information in the chat, no conclusions can be drawn about your person. This data is never passed on to third parties and is used solely for protection and for internal statistics. By using the chat, you agree to the processing of the data collected about you by Tawk.to in the manner described above and for the purpose stated above.

The processing is carried out on the basis of Art. 6 (1) (f) GDPR for the legitimate interest in direct customer communication. You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you that is based on Art. 6 (1) (f) GDPR.

You can exercise your objection by preventing the storage of cookies through the appropriate settings in your browser software. However, we point out that in this case you may not be able to use all functions of this website to their full extent. Below you will find further information on Tawk.to. Please be sure to read this before starting a chat. Please note, however, that this information is only available in English here. If you do not understand it, please do not use the live chat. In that case, please send your enquiry by e-mail to service@hotelshop.one or use the contact form.

8. doofinder search technology

Search technology "doofinder, powering results". In order to make visiting our website attractive and to present you with faster and better search results, we use the search technology "DooFinder" (hereinafter DF). This serves to safeguard our overriding legitimate interest, within the scope of a balancing of interests, in an optimised presentation of our offer in accordance with Art. 6 (1) (f) GDPR. The operator of the technology is DooFinder S.L., Madrid 28037, Rufino González 23 bis, 1º 1, Spain. In order to use the DF search function, the browser you use must connect to the DF servers. As a result, DF becomes aware that our website was accessed via your IP address.

9. Shopware Analytics

Purpose of processing: Together with our shop software provider, as joint controllers, we evaluate certain information about our customer base (e.g. the customer group, pages visited, click paths, date and time of the visit, information about the device used (resolution, resolution density, operating system), referrer URL, information about the browser used, locale, search queries and the time zone). This information is processed by an external service provider and forwarded to us in approximately real time so that we can monitor the use of our website and improve our offers. Legal basis: Art. 6 (1) (f) GDPR. Data categories: derivations from master and contact data (the customer group, no individual customer data), usage data, connection data. Recipients of the data: shopware AG, Ebbinghoff 10, 48624 Schöppingen, Germany (as joint controller), IT service providers. The essence of the joint controllership: The joint controllership exists between us and shopware AG; the data is collected in our shop and then transferred to servers of shopware or its service providers; with the exception of obtaining your consent for the use of cookies or comparable technologies and the fulfilment of these information obligations, all obligations, in particular the implementation of data subject rights, rest with shopware AG, which you can reach at legal@shopware.com. You can also assert your data subject rights with us, and we will then forward your request to shopware AG accordingly. shopware AG can derive behaviour in our store from the collected data, but cannot attribute this data to you as a person. Intended transfer to a third country: None.

10. Deletion of data

The data stored by us is deleted as soon as it is no longer required for its intended purpose and no statutory retention obligations prevent deletion.

If the users' data is not deleted because it is required for other legally permissible purposes, its processing is restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to user data that must be retained for commercial or tax law reasons.

In accordance with legal requirements, data is retained for 6 years pursuant to Sec. 257 (1) German Commercial Code (HGB) (e.g. commercial letters, accounting vouchers) and for 10 years pursuant to Sec. 147 (1) German Fiscal Code (AO) (e.g. commercial and business letters).

11. Data subject rights

You have the following data subject rights:

a) Right of access
You have the right to request confirmation from us as to whether personal data concerning you is being processed.

b) Rectification / erasure / restriction of processing
Furthermore, you have the right to request that we:

• rectify inaccurate personal data concerning you without undue delay (right to rectification);
• erase personal data concerning you without undue delay (right to erasure); and
• restrict the processing (right to restriction of processing).

c. Right to data portability
You have the right to receive personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and to transmit this data to another controller.

d. Right of withdrawal
You have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until withdrawal.

e. Right to object
If the processing of personal data concerning you is necessary for the performance of a task carried out in the public interest (Art. 6 (1) (e) GDPR) or to safeguard our legitimate interests (Art. 6 (1) (f) GDPR), you have a right to object.

f. Right to lodge a complaint
If you are of the opinion that the processing of personal data concerning you violates the GDPR, you have the right, without prejudice to any other legal remedy, to lodge a complaint with a supervisory authority.

12. Voucher offers from Sovendus GmbH

In order to select a voucher offer that is currently of interest to you, we transmit, in pseudonymised and encrypted form, the hash value of your e-mail address and your IP address to Sovendus GmbH, Hermann-Veit-Str. 6, 76135 Karlsruhe (Sovendus) (Art. 6 (1) (f) GDPR). The pseudonymised hash value of the e-mail address is used to take into account any objection to advertising from Sovendus that may exist (Art. 21 (3), Art. 6 (1) (c) GDPR). The IP address is used by Sovendus exclusively for data security purposes and is generally anonymised after seven days (Art. 6 (1) (f) GDPR). In addition, for billing purposes we transmit the order number, order value with currency, session ID, coupon code and time stamp to Sovendus in pseudonymised form (Art. 6 (1) (f) GDPR). If you are interested in a voucher offer from Sovendus, there is no advertising objection for your e-mail address, and you click on the voucher banner that is only displayed in this case, we transmit your salutation, name, postal code, country and your e-mail address to Sovendus in encrypted form to prepare the voucher (Art. 6 (1) (b), (f) GDPR). For further information on the processing of your data by Sovendus, please refer to the online data protection notices at www.sovendus.de/datenschutz.

13. Amendment of the privacy policy

We reserve the right to amend this privacy policy in the event of any change to the legal situation, the service or the data processing. However, this only applies with regard to declarations on data processing. Insofar as consent of the users is required or components of the privacy policy contain provisions of the contractual relationship with the users, the amendments will only be made with the consent of the users.

Users can inform themselves about any amendments in this privacy policy at regular intervals.