Care and transparency is the basis for a trusting cooperation with our customers. We therefore inform you about how we process your data and how you can exercise your rights under the General Data Protection Regulation (GDPR). Which personal data we process for what purpose depends on the respective contractual relationship.
1. Who is responsible for the processing?
The controller is:
MEININGER Shared Services GmbH
Schoeneberger Strasse 15
10963 Berlin, Germany
2. How can you contact the data protection officer?
You can reach our data protection officer (DPO) as follows:
MEININGER Shared Services GmbH
Data Protection Officer
Schoeneberger Strasse 15
10963 Berlin, Germany
3. Which personal data do we use?
We process the following personal data in the context of the newsletter dispatch:
- Name, Surname
- Email address
- Date and time of registration and cancellation
- IP address
4. For what purposes do we process your data and on what legal basis?
We process your personal data in particular in compliance with the General Data Protection Regulation (GDPR) as well as all other relevant laws.
Data processing on the basis of a consent given by you (Art. 6 para. 1 lit. a GDPR) and on the basis of a legitimate interest of the controller (Art. 6 para. 1 lit. f GDPR)
4.1 Sending of the newsletter
Within the scope of your registration you have given us your voluntary consent to use your contact data to send the newsletter.
You can subscribe to our newsletter to receive information about new hotels, current offers, events, travel tips and product news of the MEININGER Group and partner companies.
The Newsletter will only be sent to your e-mail address if you have consented to the use of your e-mail address. Of course, you can revoke your consent at any time by clicking the unsubscribe link in the newsletter, or inform us of your unsubscribe request via firstname.lastname@example.org
We use the double opt-in procedure to subscribe to our newsletter. This means that we will send you an e-mail after your registration to the e-mail address provided, asking you to confirm that you would like the newsletter to be sent. In addition, we store your IP addresses and the time of registration and confirmation. This allows us to verify your registration and, if necessary, to clarify any possible abuse of your personal data by third parties (Art. 6 para. 1 lit. b GDPR).
4.2 Personalization of the newsletter
Based on your consent, in the process of sending the newsletter, we evaluate your user behaviour in order to have a better understanding of how our newsletter is used. For this evaluation, the e-mails sent contain so-called web beacons, also known as tracking pixels. These are one-pixel image files that link to our website and enable us to evaluate your user behaviour. This is done by using web beacons that are assigned to your email address and linked to your own ID. Links received in the newsletter also contain these.
With the collected data we create a user profile to adapt the newsletter to your individual interests. We record when you read our newsletters, which links you click on in the newsletters and deduce your personal interests. We link this data to any activity you perform on our website.
You can unsubscribe from this tracking at any time by unsubscribing from the newsletter. After a cancellation we store the data purely statistically and anonymously.
Such tracking is also prevented if you have disabled the display of images in your e-mail program by default. In this case the newsletter will not be displayed completely and you may not be able to use all functions. If you display the images manually, the above tracking takes place.
5. To whom will your data be passed on?
In order to fulfil our contractual and legal obligations, we will pass on your data to different public and internal places, as well as external service providers.
External Service Providers:
- IT service providers (e.g. maintenance service providers, hosting service providers)
- Web hosting service provider
6.Will your data be transferred to countries outside the European Union (so-called third countries)?
Countries outside the European Union (and the European Economic Area "EEA") handle the protection of personal data differently from countries within the European Union. We do not use any service providers located in third countries outside the European Union to process your personal data collected for the newsletter registration.
7. For how long do we store your data?
We store your personal data for as long as necessary to fulfil legal and contractual obligations. Your personal data will be stored until you unsubscribe from the newsletter. We will then save your cancellation. This is necessary to verify your cancellation and not to send you a newsletter again.
8. What rights do you have in connection with the processing of your data?
Every data subject has the right of access under Article 15 GDPR, the right to rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to object under Article 21 GDPR and the right to data portability under Article 20 GDPR. The restrictions according to §§ 34 and 35 BDSG apply to the right of access and the right of erasure.
8.1 Right to object
You can object to the use of your data for advertising purposes at any time without incurring any costs other than the transmission costs according to the basic rates.
- What right do you have in the event of data processing for legitimate or public interest?
Pursuant to Art. 21 para. 1 GDPR, you have the right to object at any time to the processing of personal data concerning you on the basis of Art. 6 para.1 lit. e GDPR (data processing in the public interest) or Article 6 para.1 lit. f GDPR (data processing to protect a legitimate interest), this also applies to profiling based on this provision.
In the event of your objection, we will no longer process your personal data unless we can prove compelling grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
- What right do you have in the event of data processing for direct marketing?
If we process your personal data for direct marketing purposes, you have the right pursuant to Art. 21 para. 2 GDPR to object at any time to the processing of personal data concerning you for the purpose of such advertising, this also applies to profiling insofar as it is associated with such direct marketing.
In the event of your objection to processing for direct marketing purposes, we will no longer process your personal data for these purposes.
8.2 Revocation of consent
You can revoke your consent to the processing of your personal data at any time. Please note that the revocation is only valid for the future.
8.3 Right to information
You may request information as to whether we have stored personal data about you. If you wish, we will inform you of the data concerned, the purposes for which the data is processed, to whom this data is disclosed, how long the data is stored and what further rights you are entitled to with regard to this data.
8.4 Further rights
In addition, you have the right to have your data corrected or deleted. If there is no reason for further storage, we will delete your data, otherwise we will restrict processing. You may also request that we provide all personal information that you have provided to us in a structured, current and machine-readable format either to you or to a person or company of your choice. In addition, there is a right to lodge a complaint to the responsible data protection supervisory authority (Art. 77 GDPR in conjunction with § 19 BDSG).
8.5 Assertion of your rights
To exercise your rights, you can contact the controller or the data protection officer using the contact details provided. We will process your enquiries immediately and in accordance with legal requirements and inform you of the measures we have taken.
9. Is there an obligation to provide your personal data?
There is no obligation to provide your personal data. If you do not provide us with this data, it is not possible for us to send the newsletter.
10. Does an automated individual decision-making or profiling take place?
There is no automated decision making and no profiling.
11. Changes to this information
If the purpose or manner of processing your personal data changes significantly, we will update this information in time and inform you about the changes.