Privacy policy of DSR Hotel Holding GmbH

The provisions of the EU General Data Protection Regulation (hereinafter referred to as GDPR) apply throughout Europe. We would like to inform you about the processing of personal data carried out by our company in accordance with this regulation (see Articles 13 and 14 GDPR). If you have any questions or comments about this privacy policy, you can send them at any time to the email address given in section 1.2 or 1.3.

Content:
1.     Überblick
1.1        Geltungsbereich
1.2        Verantwortlicher
1.3        Datenschutzbeauftragter
2.     Die Datenverarbeitungen im Einzelnen
2.1        Allgemeines zu den Datenverarbeitungen
2.2        Aufruf der Webseite
2.3        Kontaktaufnahme
2.4        Bewerbungs- und Einstellungsprozess
3.     Betroffenenrechte
3.1        Widerspruchsrecht
3.2        Auskunftsrecht
3.3        Berichtigungsrecht
3.4        Recht auf Löschung („Recht auf Vergessenwerden“)
3.5        Recht auf Einschränkung der Verarbeitung
3.6        Recht auf Datenübertragbarkeit
3.7        Widerrufsrecht bei Einwilligung
3.8        Beschwerderecht

1. Overview

In this section of the privacy policy, you will find information on the scope of application, the data controller and its data protection officer.

1.1 Scope of application

On this page we inform you about the type, scope and purpose of the personal data collected by DSR Hotel Holding GmbH, which is processed both when you visit this website and in other processing operations under our responsibility that are not related to this website.

1.2 Controller

The data controller – i.e. the party that decides on the purposes and means of processing personal data – in connection with the processing is

DSR Hotel Holding GmbH

Am Kaiserkai 69

D-20457 Hamburg

kontakt@dsr-hotelholding.de

1.3 Data protection officer

You can contact our data protection officer as follows

Contact form:

https://www.dsextern.de/anfragen
DS EXTERN GmbH
Dipl.-Kfm. Marc Althaus
Frapanweg 22 
D-22589 Hamburg

2. The data processing in detail

In this section of the privacy policy, we inform you in detail about the processing of personal data. For the sake of clarity, we have organized this information according to specific functionalities.

2.1 General information in data processing

Unless otherwise stated, the following applies to all processing described below:

No obligation to provide

There is neither a contractual nor a legal obligation to provide personal data. You are not obliged to provide data.

Consequences of non-provision

In the case of required data (data that is marked as mandatory when it is entered), failure to provide it will mean that the service in question cannot be provided. Otherwise, failure to provide the data may mean that our services cannot be provided in the same form and quality.

Consent

In various cases, you have the option of giving us your consent to further processing in connection with the processing described below (possibly for some of the data). In this case, we will inform you separately in connection with the submission of the respective declaration of consent about all modalities and the scope of the consent and about the purposes that we pursue with this processing.

Transmission to state authorities

We only transfer personal data to state authorities (including law enforcement authorities) if this is necessary to fulfill a legal obligation to which we are subject (legal basis: Art. 6 para. 1 c) GDPR) or if it is necessary for the assertion, exercise or defense of legal claims (legal basis Art. 6 para. 1 f) GDPR).

Storage period

We do not store your data for longer than we need it for the respective processing purposes. If the data is no longer required, it is regularly deleted, unless its temporary storage is still necessary. Reasons for this may include the following:

• The fulfillment of retention obligations under commercial and tax law

• The preservation of evidence for legal disputes within the framework of statutory limitation periods

Categories of recipients

In addition to the categories of recipients explicitly listed below, personal data is also transmitted to the following categories of recipients: Shipping service providers, telephone and fax providers.

Data categories

• Personal master data: Title, form of address/gender, first name, surname, date of birth
• Address data: Street, house number, address supplements if applicable, zip code, city, country
• Contact data: Telephone number(s), fax number(s), e-mail address(es)
• Access data: Date and time of the visit to our service; the page from which the accessing system reached our site; pages accessed during use; session identification data (session ID); also the following information of the accessing computer system: internet protocol address used (IP address), browser type and version, device type, operating system and similar technical information.
• Application data: Curriculum vitae, references, evidence, work samples, certificates, images
• Free text: Message content

2.2 Accessing the website

This section describes how we process your personal data when you access the website.

Informationen on processing

• Data category: Access data
• Purpose:

  Establishing a connection, displaying the content of the service, detecting attacks on our site based on unusual activities, error diagnosis

• Legal basis: Protection of legitimate interests (Art. 6 para. 1f GDPR)
• Where applicable, legitimate interest: proper functioning of the services, security of data and business processes, prevention of misuse, prevention of damage caused by interference with information systems
• Storage duration: 7 days
• Recipient: IT security service provider, hosting service provider, consent tool provider
• Transfer to third countries: –

Tracking to analyze and optimize our services and their use as well as to measure the success of advertising campaigns and optimize the display of advertising

Information on the services used can be found under “Manage cookies” in the footer or in the consent tool.

2.3 Making contact

You can find out what happens to your personal data when you contact us here:

Informationen on processing

• Data category:

  • Personal master data

  • Contact details (mandatory)

  • Free text (mandatory)

• Intended Purpose:

  • Personalization of inquiry processing

  • Inquiries from customers and interested parties

  • Information about the request

• Legal basis: Protection of legitimate interests (Art. 6 para. 1f GDPR)
• Where applicable. legitimate interest: Processing of the inquiries made
• Storage duration:Processing duration of the request
• Recipient: affiliated companies
• Transfer to third countries: –

2.4 Application and recruitment process

In an ongoing application and recruitment process and as an employee, we process your personal data in the following ways to fulfill contractual obligations:

Informationen on processing

• Data category:

  • Personal master data

  • address data

  • Contact details

  • Application data

• Purpose in the application and recruitment process:

  • Identification, contacting, age verification

  • Identification, contacting, communication for contract initiation

  • Applicant selection

• Purpose as an emplyee:

  • Access to an external system to access payslips

  • Storage and processing of all contract-relevant information in the personnel management system and personal access to it

• Legal basis: (Art. 6 para. 1b GDPR)
• Where applicable, legitimate interest: –
• Storage duration:

  6 months (in the application process), 12 months (in the applicant pool), as an employee based on legal provisions (up to 10 years)

• Recipient:Provider of personnel management system and payroll accounting system
• Transfer to third countries: –

3. Rights of data subjects

3.1 Right to object

You have the right to object, on grounds relating to your particular situation, at any time with future effect to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR.

You can exercise your right to object free of charge.

3.2 Right to information

You have the right to obtain confirmation as to whether or not personal data concerning you is being processed by us and, where that is the case, which personal data is being processed, as well as further information in accordance with Art. 15 GDPR.

3.3 Right to rectifcation

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you (Art. 16 GDPR). Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

3.4 Right of deletion (‘Right to be forgotten’)

You have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the grounds specified in Art. 17 (1) GDPR applies and the processing is not necessary for one of the purposes specified in Art. 17 (3) GDPR.

3.5 Right to restriction of processing

You are entitled to request the restriction of the processing of your personal data if one of the conditions set out in Art. 18 (1) (a) to (d) GDPR applies.

3.6 Right to data portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us or to have it transmitted directly by us, where technically feasible. This should always apply if the basis for data processing is consent or a contract and the data is processed automatically. Accordingly, this does not apply to data held only in paper form.

3.7 Right to withdraw consent