Data Protection

WEBSITE REQUIRED INFORMATION - DATA PROTECTION STATEMENT

Name and contact details of the person responsible for processing

This data protection declaration applies to data processing by:

Responsible: LENIKUS HOTEL COLLECTION GmbH, Parkring 10 in 1010 Vienna, T +43 1 516 31 0 - F +43 1 516 31 190 - E reception@topazzlamee.com

Collection and storage of personal data and the type and purpose of their use

When visiting our website

https://www.hoteltopazzlamee.com

information is automatically sent from your device to our website. The following information is temporarily stored in a so-called log file:

• IP address of the end device

• Date and time of access

• Name and URL of the retrieved file

• Website from which access is made

• The browser used and, if applicable, the operating system of your computer and the name of your access provider

This data is kept for 6 months until it is automatically deleted.

From this data, important clues for optimizing the website can be obtained. Errors and crashes can be better understood and user friendliness improved. The data is technically necessary to display the website to you and to ensure stability and security.

The legal basis for data processing is Art 6 Para 1 lit f GDPR. Our legitimate interest lies in the purposes mentioned above.

Without the provision of your personal data, we cannot guarantee the efficient and secure operation of the website.

Data processing when contacting us

If you contact us by email, via the contact form offered or via other channels (visible on the website), the data you provide will be stored so that we can answer your request. We have a legitimate interest in processing your request within the meaning of Art 6 Para 1 lit f GDPR. In the event that a contract is concluded, separate information is Art 13 GDPR for data processing. If no contract is concluded, your data will be deleted at the end of the calendar year following the end of the negotiations.

If you do not want to provide us with your data in this way, you can also contact us by phone or post at any time.

We cannot contact you without providing your personal data. On the other hand, fields that are not required fields in the contact form enable us to process your request more efficiently.

Data processing in connection with the online booking option for our hotels and related functionalities.

We are partners of Design Hotels AG. You can book rooms in our hotels via the booking option linked to www.hoteltopazzlamee.com, which is operated via a booking platform of Design Hotels AG, Stralauer Allee 2c, 10245 Berlin. If you make use of this option, we process the personal information you provide via this booking platform (contact details, payment information, booking data such as time of arrival and departure as well as booked room, participation in loyalty programs, possibly historical booking data), which are necessary to your Make a room reservation. This information is marked with a black arrow. The booking process cannot be carried out without providing this data. We process information that is not marked with a black arrow if you voluntarily provide it in order to be able to make your booking more efficiently or to be able to take into account your special wishes with regard to a booking.

We process the data you provide as well as the data that arise during the booking process for the purpose of making your room booking and the payment process. The legal basis for this is the need to carry out (pre-) contractual measures, but also our (and your) legitimate interest in uncomplicated and efficient booking processing.

So that your room reservation or the related payment can be processed, we pass on your personal data to the credit card provider you have selected.

Data processing in the event of registration for our newsletter with your consent

We use the Daily Point newsletter to send newsletters with information about our offers and products. If you register there by ticking the box, you give us your consent to process your email address [add any other data that may be processed in this context, if necessary], so that we can send you this newsletter. You can revoke your consent at any time, which does not affect the lawfulness of processing based on your consent until your revocation. You can revoke your consent at any time directly via the Daily Point newsletter or by contacting us as shown under "Rights of the data subject".

Without the provision of your contact details, we cannot send you information about our products and offers.

Recipient of personal data

As contract processors, we use LENIKUS GmbH, Parkring 10 in 1010 Vienna. We also use a processor to send information about our products and offers.

For further recipients or recipient categories, please refer to the relevant passage in this data protection declaration.

Cookies and web analysis

We use cookies on our website. These are small text files that are automatically saved on your device when you visit our website. The use of cookies serves on the one hand to make the visit to our website as pleasant as possible, and on the other hand to optimize the user-friendliness of our website.

The legal basis is Art 6 Para 1 lit f GDPR. The legitimate interests lie in the purposes mentioned.

Furthermore, cookies and analysis tools enable us to carry out statistical evaluations of the use of our website to improve our offer.

These are used exclusively on the basis of your consent and are only set after we have given your consent. You give us your consent via the cookie bar on the page. They help us to continuously improve our website, increase the success of our website and optimize our offer.

Google Analytics is used on our website. This is a web analysis service provided by Google Inc. (https://www.google.at/intl/de_at/about) (1600 Amphitheater Parkway, Mountain View, CA 94043, USA, hereinafter referred to as Google). Google has submitted to the EU-US Privacy Shield. Please see the privacy policy at https://www.google.com/intl/de_ALL/policies/privacy/.

The following information is generated by the cookie and processed by Google:

• Browser type / version

• Operating system used

• Previously visited page

• IP address

• Time of the server request

The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the EEA Agreement. The full IP address will only be transmitted to a Google server in the USA and abbreviated there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website and internet usage to the website operator.

You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: https://tools.google.com/dlpage/gaoptout?hl=de. This website uses Google Analytics with the extension "anonymizeIP ()". As a result, IP addresses are processed in abbreviated form, so that they cannot be linked to a person. As far as the data collected about you is personal, it is immediately excluded and the personal data is then deleted immediately. We use Google Analytics to analyze and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user.

You can delete set cookies at any time via your browser. You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

Social media plug-ins, Google Maps

Social media plug-ins from Facebook, Google Tags and Twitter are used on our websites to make our company better known and to improve our reach. These are initially blocked by the Shariff process so that they do not determine or transmit any data. The button is activated the first time and the desired action (eg "Like") is set only when the button is clicked a second time.

You can recognize the provider of the plug-in and the website via which such cookies are set by the logo on the respective page.

As soon as you activate data transmission with the first click, data is automatically transmitted to the respective platform, regardless of whether you have an account or are logged in or not. Do not click a button until you agree to the data transfer. The platforms also use the data for their own purposes, such as advertising, market research, and the design of their own pages as needed. For this purpose, usage, interest and relationship profiles are created by the respective provider. We have no influence on all of this: we have no influence on the data collected and data processing operations, nor are we aware of the full scope of the data collection, the purposes of the processing or the storage periods. We also have no information on the deletion of the data collected by the plug-in provider. If you do not want these platforms to collect data about you, you must not activate the buttons. Please note the respective data protection declarations of the following providers:

Facebook Inc., 1601 S California Ave, Palo Alto, California 94303, USA. Facebook has submitted to the EU-US Privacy Shield.

https://www.facebook.com/about/privacy

Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94303, USA. Google has submitted to the EU-US Privacy Shield.

https://www.google.com/intl/de_ALL/policies/privacy/

Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94043, USA, USA. Twitter has submitted to the EU-US Privacy Shield.

https://twitter.com/privacy

We use Google Maps on some websites. This enables us to display interactive maps directly on the website and enables you to conveniently use the map function. When you visit the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned in this declaration is automatically transferred when you visit our website, regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not want this, you must log out before activating the button.

Google stores your data as usage profiles and uses them for purposes of advertising, market research and / or designing a website to meet your needs. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about their activities on our website. You have the right to object to the creation of these user profiles, although you must contact Google to exercise them. Further information on the purpose and scope of data collection of your processing by the plug-in provider can be found in the provider's data protection declaration. For more information related to Google, please see Google Analytics above.

With the plug-ins, we offer you the opportunity to interact with social networks and other users, so that we can improve our offer and make it more interesting for you as a user. The use of the plug-ins is based on our, but also your legitimate interest in enabling the functions mentioned. In this context, please also note our information on cookies.

Affected rights

Data subjects generally have the right to information, correction, deletion, restriction, data portability, revocation and objection. These rights can be exercised by email to datenschutz@lenikus.at or by post at LENIKUS HOTEL COLLECTION GmbH, Parkring 10 in 1010 Vienna. You can also revoke your consent to data processing in this way. There is also the right to lodge a complaint with the responsible supervisory authority (in Austria this is the data protection authority).

With regard to the exercise of data subject rights in connection with the third-party providers mentioned in this data protection declaration, please contact the person responsible in the relevant data protection guideline.

Up-to-dateness and change of this data protection declaration:

This data protection declaration is currently valid and has the status 02/2020

Due to the further development of our website and offers, legal changes or official requirements, it may be necessary to change this data protection declaration.