Data Protection

Data protection policy 

(last updated: 1 March 2023)

Thank you for visiting our website and for your interest in our company. The protection of your personal data is important to us. In accordance with Articles 12, 13 and 21 of the Gen-eral Data Protection Regulation (GDPR), we inform you below about how we handle your personal data when you use our website www.hi-city-nord.de.

Personal data are individual details about personal or factual circumstances of a specific or identifiable natural person. This includes information such as name, address, telephone num-ber and date of birth.

1. Controller

Controller within the meaning of the General Data Protection Regulation:

Realotel Hamburg Hotelbetriebs GmbH

c/o Holiday Inn Hamburg – City Nord

Bahnhofstraße 67

65185 Wiesbaden, Germany

E-mail address: info@hi-city-nord.de

Homepage: www.hi-city-nord.de

Telephone number: +49 (0) 40 99 99 9 0

2. Data protection officer

Contact data of our data protection officer:

The company data protection officer of Realotel Hamburg Hotelbetriebs GmbH can be reached at the aforementioned address, Data Protection Department, or by e-mail at: datenschutz@bierwirth-kluth.de.

3. Purposes and legal bases of the data processing

3.1 Informational use of the website

You can visit our website without providing any additional personal information. If you only use our website for informational purposes, i.e. you do not otherwise provide us with any in-formation about yourself, we do not process any personal data, with the exception of the data that your browser transmits to enable you to visit the website and information that is transmit-ted to us as part of cookies used for statistical analysis of the use of our website.

3.1.1 Technical provision of the website 

For the purpose of the technical provision of the website, it is necessary that we process cer-tain automatically transmitted information from you so that your browser can display our web-site and you can use the website. This information is automatically collected each time you visit our website and stored in our server log files. This information relates to the computer system of the accessing computer. The following information is collected: 

• IP address, anonymised/shortened;

• browser type/version (e.g.: Firefox 59.0.2 (64 Bit));

• browser language (e.g.: German);

• used operating system (e.g.: Windows 10);

• internal resolution of the browser window;

• screen resolution;

• JavaScript activation;

• Java on / off;

• Cookies on / off;

• time of access.

• colour depth;

Furthermore, we use Cookies to enable you to use our website. Cookies are text files that are stored in the internet browser or by the internet browser on your computer system in the case of visiting a website. A Cookie contains a character string that facilitates a clear identification of the browser when the website is revisited. We use Cookies exclusively to make our web-site available with its technical functions. Some functions of our website cannot be made available without the use of Cookies. In that respect, the following data are saved in the Cook-ies and forwarded to us:

• Cookie that stores on an interim basis the current dwell time of the visitor for the pre-setting of the booking for

• Cookie that stores the confirmation of the Cookie notice

We do not use your information that we have collected via the above Cookies to create user profiles or evaluate your surf behavior.

We process your personal data for the technical provision of our website on the following legal bases:

• for the technical provision of our website in accordance with Section 25 (2) No. 2 TTDSG, as the processing of the above-mentioned data is absolutely necessary to enable you to use our website as expressly requested by you (i.e. also with our without cookies)

• for the performance of a contract or the implementation of pre-contractual measures in accordance with Art. 6 para. 1 lit. b GDPR, insofar as you visit our website to obtain information about us; and

• to protect our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR in order to be able to make the website technically available to you. Our legitimate interest is to be able to provide you with an attractive, technically functioning and user-friendly website, as well as to take measures to protect our website against cyber risks and to prevent cyber risks for third parties arising from our website.

3.1.2 Consent Management

On our website we use the consent manager „Usercentrics” of Usercentrics GmbH, Sendlinger Straße 7, 80331 München, Deutschland. Usercentrics is a solution that we use to obtain your consent for certain data processing that requires your consent (e.g., analysis, tracking or similar). By using Usercentrics we can inform you about the individual cookies and tools we use. You can use Usercentrics to choose which cookies and tools you want to cate-gorically allow or reject. Usercentrics also provides an overview of the cookies used and the option to change or revoke your consents. This allows you to make an informed decision about the sharing of your data and enables us to use cookies and tools in a transparent and documented manner that complies with data protection requirements.

Usercentrics processes your personal data to record your decision to allow cookies and tools and to store it for a revisit to our website. This includes the corresponding cookie with your consent decision as well as further usage data, e.g., IP address, domain name, time of re-quest, server data (including data transmission types, server status, etc.), country, browser and operating system.

For further information and the privacy policy of Cookiebot, please visit: https://usercentrics.com/de/datenschutzerklaerung/#toggle-id-1-closed. 

We process your personal data for the technical provision of our website on the following legal bases:

• for the technical provision of our website in accordance with Section 25 (2) No. 2 TTDSG, as the processing of the above-mentioned data is absolutely necessary to enable you to use our website as expressly requested by you (i.e. also with our without cookies)

• for the performance of a contract or the implementation of pre-contractual measures in accordance with Art. 6 para. 1 lit. b GDPR, insofar as you visit our website to obtain information about us; 

• for the use of cookie management in order to comply with a legal obligation to which we as Controller are subject in accordance with Art. 6 para. 1 lit. c GDPR. The legal obligation lies in informing you about the cookies we use and obtaining and document-ing your consent to data processing; and

• to protect our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR in order to be able to make cookie management technically available to you. Our legitimate in-terest is to be able to provide you with an attractive, technically functioning and user-friendly cookie management, as well as to take measures to protect the cookie man-agement from cyber risks and to prevent cyber risks for third parties arising from the cookie management.

3.1.3 Social Links

On our website we have put in place links to services such as links to our Facebook and In-stagram page. By clicking on the links, you shall be forwarded to the page of the respective supplier, i.e. only then will user information be forwarded to the respective supplier. For infor-mation about how your data are handled in the case of using websites of other suppliers, please see the respective data protection notices of such suppliers.

3.2 Active use of the website

In addition to using our website to gain information only, you can also actively use our web-site. In addition to the processing of your personal data set out above in the case of using the website to gain information only, we shall then also process additional personal data that apply to you.

3.3 Room bookings

In the case of booking a room, we process the personal data that you make available to us in this respect. This includes, in particular, your name, your home address, contact details and the means of payment. We use InterContinental Hotels Group PLC as a service provider for the booking of rooms.

We process your personal data in the case of room bookings on the following legal bases:

• To honor a contract or to perform pre-contractual measures in accordance with Ar-ticle 6(1), point b, GDPR..

3.4 User enquiries

In order to be able to process and respond to your requests to us, e.g. to our e-mail address, we process the personal data from you that you provide in this context. In any case, this in-cludes your name and your e-mail address in order to send you an answer, as well as the other information you send us as part of your communication.

We process your personal data to respond to user requests on the basis of the following legal bases:

• to protect our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR; our legitimate interest is the appropriate response to customer requests;

• If the request is aimed at pre-contractual measures or the conclusion of a contract, the additional legal basis is Art. 6 para. 1 lit. b GDPR.

3.5 Compliance with legal obligations

We also process your personal data in order to fulfil other legal obligations. These may affect us in connection with the processing of the order or business communication, among other things. These include, in particular, retention periods under commercial, trade or tax law.

We process your personal data on the following legal basis:

• for the fulfilment of a legal obligation to which we are subject in accordance with Art. 6 para. 1 lit. c GDPR in connection with commercial, trade or tax law, insofar as we are obliged to record and store your data.

3.6 Law enforcement

We also process your personal data in order to be able to assert our rights and enforce our legal claims. We also process your personal data in order to be able to defend ourselves against legal claims. Finally, we process your personal data to the extent necessary to pre-vent or prosecute criminal offences.

We process your personal data for this purpose on the following legal basis:

• to protect our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR, insofar as we assert legal claims or defend ourselves in legal disputes or prevent or investi-gate criminal offences.

3.7 Company sale/merger, etc.

We may process your personal data in order to complete a (partial) business sale or merger (or similar process such as acquisition in liquidation, insolvency, dissolution, etc.) with another company. In the event that another company acquires or intends to acquire the assets, which may include your personal data, from us or we carry out or seek to carry out a merger with another company, we may need to grant that company access to or transfer your personal data stored with us for the purpose of reviewing and carrying out the sale of the compa-ny/merger (e.g., to determine the value of the company or business risks, to transfer the da-ta/assets, etc.).

In doing so, we process your personal data on the following legal basis:

• to safeguard our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR, in order to be able to organize and implement a planned company sale or merger.

4. Links

Some sections of our websites contain links to third-party websites. These websites are sub-ject to their own data protection policies. We are not responsible for their operation, including their data handling practices. If you send information to or through such third-party sites, you should review their privacy policies before sending them any information that can be attribut-ed to you. 

5. Categories of recipients

Initially, only employees of our corporate group receive knowledge of your personal data. In addition, we share your personal data with other recipients who provide services for us in connection with our website, insofar as this is permitted or required by law. We limit the dis-closure of your personal data to what is necessary. In some cases, our service providers re-ceive your personal data as data processors and are then strictly bound by our instructions when handling your personal data. In some cases, the recipients act independently with the data that we transfer to them.

Below we provide you with the categories of recipients of your personal data:

• InterContinental Hotels Group PLC in the case of reserving rooms

• IT service providers in the case of the administration and hosting of our website

• Collection agencies and legal advisors for the assertion of our claims

• Public bodies and institutions insofar as we are legally obliged to do so.

6. Transfer to Third Countries

We do not transfer your personal data to countries outside the EU or the EEA or to interna-tional organizations.

7. Duration of storage

7.1 Informational use of the website

In the case of using our website only to gain information, we shall store your personal data on our servers exclusively for the period of your visit to our website. Once you have left the website, your personal data shall be deleted without delay.

Cookies installed by us are usually also deleted after you leave our website. In addition, you have the option to delete installed cookies yourself at any time or to revoke your consent via the consent management at the end of this privacy policy. The Usercentrics consent manag-er keeps proof of the revocation of a previously granted consent for a period of three years.

7.2 Active use of the website

When you actively use our website, we initially store your personal data for the duration of the response to your request or for the duration of our business relationship. This also includes the initiation of a contract (pre-contractual legal relationship) and the processing/performance of a contract. 

In addition, we then store your personal data until any legal claims arising from the relationship with you become time-barred, in order to use them as evidence if necessary. The limitation period is usually between 12 and 36 months, but can also be up to 30 years.

We delete your personal data when the statute of limitations expires, unless there is a legal obligation to retain it, for example from the German Commercial Code (§§ 238, 257 para. 4 HGB) or from the German Fiscal Code (§ 147 para. 3, 4 AO). These retention obligations can be two to ten years.

8. Your rights as data subject

You are entitled to the following rights as a data subject, which you can assert against us, sub-ject to the legal requirements: 

Right to access: You are entitled to request confirmation from us at any time within the scope of Art. 15 of the GDPR as to whether we are processing personal data relating to you; if this is the case, you are also entitled within the scope of Art. 15 of the GDPR to receive in-formation about this personal data as well as certain other information (including processing purposes, categories of personal data, categories of recipients, planned storage period, the origin of the data, the use of automated decision-making and, in the case of third country transfers, the appropriate safeguards and a copy of your data).

Right to rectification: In accordance with Art. 16 GDPR, you are entitled to demand that we correct the personal data stored about you if it is inaccurate or incorrect.  

Right to erasure: You have the right, under the conditions of Article 17 GDPR, to demand that we delete personal data relating to you without delay. The right to deletion does not apply, inter alia, if the processing of the personal data is necessary for (i) the exercise of the right to freedom of expression and information, (ii) compliance with a legal obligation to which we are subject (e.g., legal obligations to retain records) or (iii) the assertion, exercise or defense of legal claims. 

Right to restriction of processing: You are entitled to demand that we limit the processing of your personal data under the conditions of Art. 18 GDPR.

Right to data portability: You are entitled, under the conditions of Art. 20 GDPR, to demand that we hand over to you the personal data concerning you that you have provided to us in a structured, common and machine-readable format.

Right to withdraw consent: You have the right to revoke your consent to the processing of personal data at any time with effect for the future. The lawfulness of the processing carried out on the basis of the consent until the revocation is not affected.

Right to object: You have the right to object to the processing of your personal data under the conditions of Art. 21 GDPR, so that we have to stop processing your personal data. The right to object only exists within the limits provided for in Art. 21 GDPR. In addition, our inter-ests may conflict with the termination of processing, so that we are entitled to process your personal data despite your objection. 

Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of resi-dence, place of work or place of the alleged infringement, under the conditions of Article 77 GDPR, if you consider that the processing of personal data concerning you infringes the GDPR. The right of complaint is without prejudice to any other administrative or judicial rem-edy.

The supervisory authority responsible for us is:

The Hesse Authorized Representative for Data Protection and Freedom of Infor-mation

PO 3163

65021 Wiesbaden, Germany

E-mail address: Poststelle@datenschutz.hessen.de

 

Telephone number: +49 611 1408 0

Fax number: +49 611 1408 611

However, we recommend that you always address a complaint to us first.

Your requests for exercising your rights should, if possible, be addressed in writing to the address given under section I or directly to us.

9. Scope of your obligation to provide data

Generally, you are not obliged to provide us with your personal data. However, if you do not do so, we may not be able to provide you with our website, answer your requests to us or make materials available to you for download. Personal data that we do not absolutely need for the above-mentioned processing purposes are marked as voluntary by "if applicable" or another sign.

10. Automated decision making / profiling

We do not use automated decision making or profiling (an automated analysis of your per-sonal circumstances). 

Information on your right to object under Art. 21 GDPR

You have the right to object at any time to the processing of your data on the basis of Art. 6 para. 1 lit. f GDPR (data pro-cessing on the basis of a balance of interests) or Art. 6 para. 1 lit. e GDPR (data processing in the public interest), if there are reasons for this arising from your particular situation. This al-so applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR.

If you object, we will no longer process your personal data, unless we can prove compelling and applicable reasons for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or de-fend legal claims.

In individual cases, we also process your data for the purpos-es of direct advertising. If you do not wish to receive any ad-vertising, you are entitled to object to this at any time; this also applies to profiling if this is in conjunction with such direct advertising. We shall comply with this objection for the future.

We will no longer process your data for the purposes of direct advertising if you object to processing for these purposes.

Objections can be informal and should be sent where possi-ble to the address stated under Item 1.

11. Amendments

We reserve the right to change this privacy policy at any time. Any changes will be an-nounced by publishing the amended privacy policy on our website. Unless otherwise speci-fied, such changes will take effect immediately. Therefore, please check this privacy policy regularly to view the most current version.

Last updated: March 2023

Cookie statement 

This website uses cookies. We use cookies to personalize content and ads, to provide social media features and to analyze traffic to our website. We also share information about your use of our website with our social media, advertising and analytics partners. Our partners may combine this information with other data that you have provided to them or that they have collected as part of your use of the Services. Cookies are small text files used by websites to provide a more efficient user experience. The law allows us to store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission. This means that cookies categorized as necessary are processed on the basis of Article 6(1)(f) GDPR. All other non-essential cookies, ie those from the preferences and marketing categories, are processed on the basis of Article 6(1)(a) GDPR. This site uses different types of cookies. Some cookies are placed by third parties that appear on our sites. You can change or withdraw your consent at any time from the cookie statement on our website. Find out more about who we are, how you can contact us and how we process personal data in our privacy policy. Please provide your consent ID and the date when contacting us regarding your consent. Your consent applies to the following Domains to: www.cookiebot.com, www.cybot.com, manage.cookiebot.com, support.cookiebot.com Your current state: Allow all. Your Consent ID: 7Ys8jmYVihcs37 i rHiJicJu2bcEXQ8smfIzIL4UqQHIP3rp15Ukg== Consent Date: Thursday, March 30, 2023 at 14:44:01 CEST Change Consent | Revoke consent The cookie declaration was last updated by Cookiebot on 03/30/23: 

Necessary (37) Necessary cookies help make a website usable by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies.