Data Processing Newsletter

The controller is:

MEININGER Shared Services GmbH

Obentrautstrasse 72, 10963 Berlin, Germany

You can reach our data protection officer (DPO) as follows:

MEININGER Shared Services GmbH

Data Protection Officer

Obentrautstrasse 72, 10963 Berlin, Germany

Email: dataprotection[at]meininger-hotels.com

We process the following personal data in the context of the newsletter dispatch:

- Name, Surname

- Email address

- Language

- Birthday date

- Country

- Date and time of registration and cancellation

- IP address

We process your personal data in particular in compliance with the General Data Protection Regulation (GDPR) as well as all other relevant laws.

Data processing on the basis of a consent given by you (Art. 6 para. 1 lit. a GDPR) and on the basis of a legitimate interest of the controller (Art. 6 para. 1 lit. f GDPR)

Within the scope of your registration you have given us your voluntary consent to use your contact data to send the newsletter.

You can subscribe to our newsletter to receive information about new hotels, current offers, events, travel tips and product news of the MEININGER Group and partner companies.

The Newsletter will only be sent to your e-mail address if you have consented to the use of your e-mail address. Of course, you can revoke your consent at any time by clicking the unsubscribe link in the newsletter, or inform us of your unsubscribe request via newsletter@meininger-hotels.com

We use the double opt-in procedure to subscribe to our newsletter. This means that we will send you an e-mail after your registration to the e-mail address provided, asking you to confirm that you would like the newsletter to be sent. In addition, we store your IP addresses and the time of registration and confirmation. This allows us to verify your registration and, if necessary, to clarify any possible abuse of your personal data by third parties (Art. 6 para. 1 lit. b GDPR).

Based on your consent, in the process of sending the newsletter, we evaluate your user behaviour in order to have a better understanding of how our newsletter is used. For this evaluation, the e-mails sent contain so-called web beacons, also known as tracking pixels. These are one-pixel image files that link to our website and enable us to evaluate your user behaviour. This is done by using web beacons that are assigned to your email address and linked to your own ID. Links received in the newsletter also contain these.

With the collected data we create a user profile to adapt the newsletter to your individual interests. We record when you read our newsletters, which links you click on in the newsletters and deduce your personal interests. We link this data to any activity you perform on our website.

You can unsubscribe from this tracking at any time by unsubscribing from the newsletter. After a cancellation we store the data purely statistically and anonymously.

Such tracking is also prevented if you have disabled the display of images in your e-mail program by default. In this case the newsletter will not be displayed completely and you may not be able to use all functions. If you display the images manually, the above tracking takes place.

In order to fulfil our contractual and legal obligations, we will pass on your data to different public and internal places, as well as external service providers.

External Service Providers:

- IT service providers (e.g. maintenance service providers, hosting service providers)

- Web hosting service provider

5.1 Mailchimp

We use “Mailchimp” as a marketing platform. This service is provided by The Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

Mailchimp is a service used, among other things, to organize and analyze the sending of newsletters and guest communication emails (e.g., booking confirmations). Data collected for the purpose of subscribing to the newsletter, such as your email address, is stored on Mailchimp’s servers in the USA. Mailchimp enables us to analyze our newsletter campaigns. For example, when you open an email sent via Mailchimp, a file contained in the email (known as a web beacon) connects to Mailchimp’s servers in the USA to determine whether the newsletter email was opened and which links, if any, were clicked. Additionally, device-specific information such as access time, IP address, browser type, and operating system used is collected. This information cannot be linked to individual newsletter recipients. It is used solely for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to the interests of recipients.

The legal basis is your consent, Article 6 (1) lit. a GDPR.

For more information, please refer to Mailchimp’s privacy policy: https://mailchimp.com/legal/terms/

The basis for data processing in the USA includes standard contractual clauses: https://mailchimp.com/legal/data-processing-addendum/, supplemented by additional security measures: https://mailchimp.com/help/Mailchimp-european-data-transfers/

The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from both our servers and those of Mailchimp after you cancel your subscription. Data stored by us for other purposes (e.g., email addresses for the member area) remain unaffected.

If you do not want your data to be analyzed by Mailchimp, you must unsubscribe from the newsletter. We provide a corresponding link in every newsletter message. You can withdraw your consent at any time by unsubscribing from the newsletter. The legality of the data processing operations that have already taken place remains unaffected by your revocation.

Countries outside the European Union (and the European Economic Area "EEA") handle the protection of personal data differently from countries within the European Union. We do not use any service providers located in third countries outside the European Union to process your personal data collected for the newsletter registration.

We store your personal data for as long as necessary to fulfil legal and contractual obligations. Your personal data will be stored until you unsubscribe from the newsletter. We will then save your cancellation. This is necessary to verify your cancellation and not to send you a newsletter again.

Every data subject has the right of access under Article 15 GDPR, the right to rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to object under Article 21 GDPR and the right to data portability under Article 20 GDPR. The restrictions according to §§ 34 and 35 BDSG apply to the right of access and the right of erasure.

You can object to the use of your data for advertising purposes at any time without incurring any costs other than the transmission costs according to the basic rates.

- What right do you have in the event of data processing for legitimate or public interest?

Pursuant to Art. 21 para. 1 GDPR, you have the right to object at any time to the processing of personal data concerning you on the basis of Art. 6 para.1 lit. e GDPR (data processing in the public interest) or Article 6 para.1 lit. f GDPR (data processing to protect a legitimate interest), this also applies to profiling based on this provision.

In the event of your objection, we will no longer process your personal data unless we can prove compelling grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

- What right do you have in the event of data processing for direct marketing?

If we process your personal data for direct marketing purposes, you have the right pursuant to Art. 21 para. 2 GDPR to object at any time to the processing of personal data concerning you for the purpose of such advertising, this also applies to profiling insofar as it is associated with such direct marketing.

In the event of your objection to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

You can revoke your consent to the processing of your personal data at any time. Please note that the revocation is only valid for the future.

You may request information as to whether we have stored personal data about you. If you wish, we will inform you of the data concerned, the purposes for which the data is processed, to whom this data is disclosed, how long the data is stored and what further rights you are entitled to with regard to this data.

In addition, you have the right to have your data corrected or deleted. If there is no reason for further storage, we will delete your data, otherwise we will restrict processing. You may also request that we provide all personal information that you have provided to us in a structured, current and machine-readable format either to you or to a person or company of your choice. In addition, there is a right to lodge a complaint to the responsible data protection supervisory authority (Art. 77 GDPR in conjunction with § 19 BDSG).

To exercise your rights, you can contact the controller or the data protection officer using the contact details provided. We will process your enquiries immediately and in accordance with legal requirements and inform you of the measures we have taken.

There is no obligation to provide your personal data. If you do not provide us with this data, it is not possible for us to send the newsletter.

There is no automated decision making and no profiling.

If the purpose or manner of processing your personal data changes significantly, we will update this information in time and inform you about the changes.