Name and address of the person responsible
Responsible person in the sense of the Basic Data Protection Regulation and other national data protection laws of the Member States as well as other data protection regulations is:
Chalets Petry Spa & Relax
9, an der Gaessel
9452 Bettel
Luxembourg
Tel: +352 28 11 74 1
E-mail: info@chaletspetryspa.lu
Website: www.chaletspetryspa.lu
General information on data processing
The extent of processing of personal data
In principle, we collect and use the personal data of our users only to the extent necessary to provide a functional website and our content and services. The collection and use of our users' personal data is regularly done with the user's consent. An exception applies to cases in which prior consent cannot be obtained for genuine reasons and data processing is permitted by law.
Legal basis for the processing of personal data
To the extent that we obtain the consent of the data subject for the processing of personal data, Article 6, paragraph 1 lit. a of the EU General Data Protection Regulation (GDPR) applies as the legal basis.
In the processing of personal data necessary for the performance of a contract with the data subject, Article 6, paragraph 1 lit. b of the EU General Data Protection Regulation (GDPR) applies as legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual actions.
Insofar as the processing of personal data is necessary to fulfill a legal obligation that is subject to our company, Article 6, paragraph 1, lit. c of the EU General Data Protection Regulation (GDPR) applies as legal basis.
If vital interests of the data subject or another natural person require the processing of personal data, Article 6(1) lit. d of the EU General Data Protection Regulation (GDPR) applies as the legal basis.
If the processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental rights, and freedoms of the data subject do not override the primary interest, Article 6, paragraph 1, lit. f of the EU General Data Protection Regulation (GDPR) applies as the legal basis.
Data erasure and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage is removed. Beyond that, such storage may be provided for by the European or national legislator in the EU regulations, laws or other regulations to which the responsible party is subject. The blocking or deletion of data also takes place when a storage period prescribed by the mentioned standards expires, unless it is necessary to store the data for the conclusion of a contract or the execution of the contract.
Provision of the website and creation of log files
Description and scope of data processing
Every time we access our website, our system automatically collects data and information from the computer system of the calling computer.
The following data is collected here:
1. Information about the type of browser and the version used
2. The user's operating system
3. User's Internet Service Provider
4. The user's IP address
5. Date and time of access
6. Websites from which the user's system reaches our website
7. Websites accessed by the user's system through our website
Log files contain IP addresses or other data that can be assigned to a user. This could be the case, for example, if the link to the website from which the user accesses the website or the link to the website to which the user switches contains personal data.
The data is also stored in the log files of our system. A storage or connection of this data with other personal data of the user does not take place.
Legal basis for data processing
The legal basis for the temporary storage of data is Article 6, paragraph 1, lit. f of the EU General Data Protection Regulation (GDPR).
Purpose of the data processing
The temporary storage of the session ID by the system is necessary to enable access to the website at the user's computer. To do this, the session identifier (ID) must be stored for the duration of the session. This occurs in the form of the so-called session cookie.
The storage in the Logfiles is done to ensure the functionality of the website. In addition, the data is used to optimize the website and ensure the security of our information technology systems. In the case of errors or attacks, this data helps to isolate the cause of the error. The data in the logfiles is automatically deleted by the host after about 2 months.
An evaluation of the data for marketing purposes does not take place in this context.
For these purposes also lies our legitimate interest in the processing of data in accordance with Article 6, paragraph 1, lit. f. of the EU General Data Protection Regulation (GDPR).
Duration of storage
Data will be deleted as soon as it is no longer required for the purpose of its collection. In the case of data collection for the provision of the site, this is the case when the respective session is terminated.
In the case of storage of data in log files, this is the case after 60 days at the latest. Storage beyond that is possible. In this case, the IP addresses of the users are deleted or disposed of, so that an assignment of the calling customer is no longer possible.
Opposition and possibility of withdrawal
The collection of data for the provision of the website and the storage of the data in logfiles is essential for the operation of the website. Therefore, there is no possibility for the user to object.
Use of cookies
a) Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the user's Internet browser or computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the site is reopened.
We use cookies to make our website more user-friendly. Some elements of our site require that the calling browser be identified even after a page break.
The following data is stored and transmitted in cookies:
1. Language settings
2. Session ID
3. Flag
The term flag refers to cookies that contain only values such as 1, 0, true or false. For example, a flag is used to remember clicking the OK button in the cookie banner only for the current visitor. Otherwise, the cookie banner would not be cleared by a click.
In addition, we use cookies on our website which allow an analysis of the browsing behaviour of the users.
In this way, the following data can be transmitted:
1. Date
2. Country of origin of the access
3. Accessed page
4. Search terms
5. Duration of navigation on the different pages
6. Use of website functions
The user data collected in this way is pseudonymized by technical precautions. Therefore, an assignment of the data to the calling user is no longer possible. The data will not be stored or combined with other personal data of the users.
When accessing our website, users are informed by an information banner about the use of cookies for analysis purposes and referring to the privacy policy. The privacy policy also includes an indication of how the storage of cookies in the browser settings or add-ons can be avoided.
b) Legal basis for data processing
The legal basis for the processing of personal data using cookies is Article 6, paragraph 1, lit. f. of the EU General Data Protection Regulation (GDPR).
c) Purpose of data processing
The purpose of using cookies is to facilitate the use of the websites by users. Some features of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page break.
We need cookies for the following applications:
1. Transfer of language settings
2. Storage of keywords
3. Note of disabled dialogs
User data collected via cookies will not be used to create user profiles.
The purpose of using analytics cookies is to improve the quality of our website and its content. Through the use of analysis cookies, we learn how the website is used and can therefore continuously optimize our offer.
For these purposes also lies our legitimate interest in processing personal data in accordance with Article 6, paragraph 1, lit. of the EU General Data Protection Regulation (GDPR).
Based on the various analysis parameters, it is possible to identify pages that lead to an increased bounce rate. Further investigation of the site can lead to an optimization of the page and the user experience.
d) Duration of storage, objection and removal options
Cookies are stored on the user's computer and transmitted by the user to our website.
Therefore, as a user, you have full control over the use of cookies. By changing the settings of your Internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is probably no longer possible to use all the functions of the website to the full extent.
Link to the Vioma reservation portal
For the online booking of our offer, we link you to the provider Vioma. The privacy policy of the provider can be found here: https://www.vioma.de/de/company/datenschutzhinweise/
External services, tools and plug-ins
Google Analytics
This website uses Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the United States and stored there. The Google tracking code of this website uses the function "_anonymizeIp ()", so the IP addresses are truncated in the member states of the European Union or in other states parties to exclude a personal link.
Only in exceptional cases the complete IP address will be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and Internet usage to the website operator. The IP address provided by Google Analytics within the framework of Google Analytics will not be merged with other Google data.
You can prevent the storage of cookies by a corresponding setting in your browser software. However, please note that if you do so, you may not be able to use all the features of this site to the fullest extent possible.
In addition, this site uses Google Analytics demographic reports, which use interest-based advertising data from Google and third-party visitor data (such as age, gender and interests). This data is not attributable to any specific individual and can be turned off at any time in the ad settings.
The collection and storage of data can be contradicted at any time with lasting effect. By clicking on the "deactivate" button, the tracking is completely stopped. In order for the objection to be permanent, your browser must accept cookies.
You can also object to data collection by using a Google browser plug-in.
Google Analytics cookies are stored on the basis of Article 6, paragraph 1, lit. f of the EU General Data Protection Regulation (GDPR). The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.
Google re-marketing
This website uses Google Re-marketing. Google Re-Marketing is an advertising service provided by Google Inc. ("Google", Mountain View, USA), which allows us to serve you targeted advertisements of suspected interest based on your usage behavior during your previous visits to our site. This ad will only appear on Google ads, either on the Google AdWords ad space or on the Google Display Network.
You can disable Google Re-Marketing in the Google Ads preference manager or change your preferences. You can also prevent re-marketing by disabling cookies in your browser settings.
Data processing through Google
We have a contractual data processing agreement with Google and fully integrate the strict requirements of the data protection authorities when using Google Analytics.
Google Web Fonts
This website uses Web Fonts, provided by Google.
When you access a page, your browser loads the required Web Fonts into your browser's cache in order to display the texts and fonts correctly.
To do this, the browser you are using must connect to Google's servers. As a result, Google learns that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a consistent and attractive presentation of our online services. This constitutes a legitimate interest within the meaning of Article 6 (1) lit. f of the EU General Data Protection Regulation (GDPR).
If your browser does not support web fonts, a default font will be used by your computer.
For more information about Google Web Fonts, please see https://developers.google.com/fonts/faq and Google's privacy policy: https://www.google.com/policies/privacy/.
For more information on managing user data, see Google's privacy policy: https://www.google.com/intl/fr/policies/privacy/.
Google AdWords and Google conversion tracking
This site uses Google AdWords. AdWords is an online advertising program of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
As part of Google AdWords, we use conversion tracking. When you click on an ad served by Google, a conversion tracking cookie is set. Cookies are small text files that the web browser stores on the user's computer. These cookies expire after 30 days and are not used for personal identification of users. If the user visits certain pages of this website and the cookie has not yet expired, we can recognize that the user has clicked on the ad and been redirected to that page.
Each Google AdWords client receives a different cookie. Cookies cannot be tracked on advertisers' websites. The information collected using the conversion cookie is used to generate conversion statistics for AdWords advertisers who have opted-in to conversion tracking. Clients are informed of the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, they do not receive personally identifiable information about the users. If you do not wish to participate in tracking, you can disable it by easily turning off the Google Conversion Tracking cookie through your web browser under User Preferences. You will not be included in the conversion tracking statistics.
The storage of "conversion cookies" is based on Article 6, paragraph 1, lit. f of the EU General Data Protection Regulation (GDPR). The website operator has a legitimate interest in analysing user behaviour in order to optimize both its website and its advertising.
For more information about Google AdWords and Google conversion tracking, please see Google's privacy policy: https://www.google.com/policies/privacy/.
You can set your browser to inform you about the use of cookies and allow cookies only for certain functions or request general and automatic deletion of cookies when you close the browser. Disabling cookies may limit the functionality of this website.
YouTube
Our website contains videos provided by YouTube LLC, 901 Cherry Avenue, San Bruno, California 94066, USA, represented by Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043. When viewing an embedded video page, normally your IP address will be sent to YouTube and cookies will be installed on your computer. Nevertheless, we have integrated our YouTube videos according to the data protection mode (so YouTube still gets in touch with the DoubleClick service by Google, but the personal data is treated according to the privacy policy of Google and is not evaluated). Therefore, YouTube does not record any information about visitors unless they watch the video. If you click on the video, your IP address will be sent to YouTube and YouTube will learn that you watched the video. If you are logged into YouTube, this information will also be associated with your user account (you can prevent this by logging out of YouTube before viewing the video).
We are in no way responsible for the collection and use of your data by YouTube. For more information, see YouTube's privacy policy at www.google.com/intl/fr/policies/privacy/. In addition, we refer you to the general handling and deactivation of cookies in our privacy policy overview.
Rights of the data subject
The following list includes all data subject rights according to the GDPR. Rights that have no relevance to your own website do not need to be mentioned. In this regard, the list can be shortened.
If your personal data is processed, you are subject to the EU General Data Protection Regulation (GDPR) and have the following rights vis-à-vis the responsible person:
Right to information
You can ask the responsible person to confirm whether your personal data is being processed by us.
If such processing is available, you may request information from the responsible person about the following information:
(1) the purposes for which the personal data are processed;
(2) the categories of personal data processed;
(3) the recipients or categories of recipients to whom your personal data has been disclosed or is being disclosed
(4) the period of retention of the personal data concerning you, or if specific information for these criteria is impossible to determine, the criteria for the period of retention;
(5) the existence of a right to rectification and deletion of personal data, the existence of a right to limitation of processing by the controller or the right of appeal against such processing;
(6) the existence of a right of recourse to a supervisory authority;
(7) all available information on the source of the data if the personal data are not collected from the data subject;
(8) the existence of automated decision-making including profiling in accordance with Article 22(1) and (4) of the EU General Data Protection Regulation (GDPR) and - at least in these cases - meaningful information about the logic, scope and impact of such processing on the data subject.
You have the right to know whether your personal information is being transferred to a third country or an international organization. In this regard, you may request appropriate safeguards in accordance with Article 46 of the GDPR in connection with the transfer.
Right to rectification
You have a right of rectification and/or completion vis-à-vis the responsible person, if the personal data you are processing is incorrect or incomplete. The responsible person must carry out the correction without delay.
Right to restriction of processing
You may request the restriction of the processing of your personal data under the following conditions:
(1) if you challenge the accuracy of your personal information for a period of time that allows the controller to verify the accuracy of your personal information;
(2) the processing is unlawful and you refuse the deletion of the personal data and instead require the restriction of the use of the personal data;
(3) the controller no longer needs the personal data for processing purposes, but you need it to assert, exercise or defend legal claims;
(4) if you have objected to the processing under Article 21 (1) of the GDPR and it is not yet clear whether the legitimate reasons of the responsible person outweigh your reasons.
If the processing of your personal data has been restricted, the data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or on grounds of important public interest of the Union or a Member State.
If the restriction of the processing is restricted, according to the conditions mentioned above, you will be informed by the controller before the restriction is lifted.
Right to delete
Obligations to delete
You may request the controller to delete your personal information without delay, and the controller must delete such information immediately if any of the following conditions are met:
(1) Your personal data is no longer necessary for the purposes for which it was collected or processed.
(2) You revoke your consent, to the processing of the data according to Article 6, paragraph 1, lit. a or Article 9, paragraph 2, of the GDPR and there is no other legal basis for the processing.
(3) According to Article 21, paragraph 1, you object to the GDPR or to the processing and there are no justifiable grounds for the processing beforehand.
(4) Your personal data have been processed unlawfully.
(5) The deletion of personal data about you is required to fulfill a legal obligation under Union or Member State law to which the controller is subject.
(6) Personal data about you has been collected in connection with information society services offered under Article 8 (1) of the GDPR.
Information to third parties
If the controller has made public the personal data about you and he undertakes according to Article 17, para. 1 of the GDPR to cancel them, he must take into account the available technology and the cost of implementing appropriate measures, including techniques to inform the personal data controllers that you have deleted all links to these personal data or copies or replicas of these personal data.
Exceptions
The right to erasure does not exist if the processing is necessary
1) to exercise the right to freedom of expression and information;
2) to fulfil a legal obligation required by the law of the Union or of the Member States to which the controller is subject, or to perform a task in the public interest or in the exercise of a task conferred on the controller by public authority
3. for reasons of public interest in the field of public health in accordance with Article 9 (2) lit. h and i and Article 9 (3) GDPR;
1. for public interest archiving, scientific or historical research or statistical purposes in accordance with Article 89 (1) GDPR, insofar as the law referred to in subparagraph
(a) is likely to make it impossible or seriously affect the achievement of the purposes of such processing, or second
2. assert, exercise or defend legal claims.
Right to information
Have you taken recourse to your right to rectification, erasure or restriction of the processing of your data, the responsible is obliged to 'inform all recipients to whom the personal data concerning you have been exposed, unless this proves impossible or involves a disproportionate effort.
You have the right to be informed about these recipients by the responsible.
Right to data transfer
You have the right to receive your personal information that you provide to the controller in a structured, common and machine-readable format. In addition, you have the right to transfer such data to another person without hindrance by the responsible person, provided that
(1) the processing is based on consent according to Article 6, paragraph 1, lit. a of the GDPR or Article 9, paragraph 2, lit. a of the GDPR or on a contract according to Article 6, paragraph 1, lit. b of the GDPR.
(2) the processing is carried out by automated means.
In exercising this right, you also have the right that your personal data is transmitted directly from one responsible person to another, insofar as this is technically possible. The freedoms and rights of others may not be affected.
The right to data transfer does not apply to the processing of personal data necessary for the performance of a task of public interest or the exercise of public authority delegated to the controller.
Right to object
You have the right to revoke the processing of your personal data at any time, for reasons arising from your particular situation, in accordance with Article 6, paragraph 1, lit. e or f of the GDPR; this also applies to profiling based on these provisions.
The responsible person no longer processes your personal data, unless he can demonstrate legitimate grounds that outweigh your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data in connection with such advertising; this also applies to profiling insofar as it is associated with such direct mailing.
If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
You have the possibility within the framework of the use of services - irrespective of the Directive 2002/58/EC - to exercise your right to object by means of automated processes for which technical specifications are used.
Right to revoke the data protection declaration of consent
You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
Automated decision making, including profiling
You have the right not to be subject to a decision based solely on automated processing - including profiling - that will have legal effect or significantly affect you.
This does not apply if the decision
(1) is required for the conclusion or performance of a contract between you and the controller,
(2) is permitted by the Union or Member State legislation to which the controller is subject, and where that legislation contains appropriate measures to protect your rights and freedoms and your legitimate interests, or
(3) with your express consent.
However, such decisions do not have to be based on special categories of personal data under Article 9 (1) of the GDPR, if Article 9 (2). a or g of the GDPR does not apply and reasonable measures have been taken to protect your rights and freedoms and your legitimate interests.
With regard to the cases mentioned under (1) and (3), the responsible person must take appropriate measures to protect the rights and freedoms as well as your legitimate interests, including at least the right to obtain the intervention of a person on behalf of the responsible person, to declare its own position and to challenge the decision.
Right to complain to a supervisory authority
Notwithstanding an otherwise administrative or judicial procedure, you have the right to appeal to a supervisory authority, in particular in the Member State of residence, your place of work or the location of the alleged violation if you are of the opinion that the processing of data by the data controller is not in accordance with the law.
The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and outcome of the complaint, including the possibility of judicial review in accordance with Article 78 of the GDPR General Regulation.