Privacy Policy

Controller

The controller within the meaning of data protection law, in particular the EU General Data Protection Regulation (GDPR), is:

Jörg Brüne & Andre Schmidt
Brüne & Schmidt GmbH, Zum Wildkamp 1, 34508 Willingen
info@benediktiner-willingen.de · 05632 9695061

Your Rights as a Data Subject

Using the contact details given above, you can exercise the following rights under the GDPR at any time:

• Right to information about the data we hold about you and how it is processed (Art. 15 GDPR)
• Right to rectification of inaccurate personal data (Art. 16 GDPR)
• Right to erasure of your data held by us (Art. 17 GDPR)
• Right to restriction of processing, if we are not yet permitted to delete your data due to legal obligations (Art. 18 GDPR)
• Right to object to our processing of your data (Art. 21 GDPR)
• Right to data portability, provided you have consented to the processing or concluded a contract with us (Art. 20 GDPR)

You may withdraw any consent given at any time with effect for the future. You may also lodge a complaint with a supervisory authority at any time, for example the authority responsible for Hesse. A list of supervisory authorities can be found at bfdi.bund.de.

Collection of General Information When You Visit Our Website

When you access our website, information of a general nature is automatically collected (server log files). This includes, for example, browser type and version, the operating system used, the domain name of your internet service provider and your IP address. This data is used for the smooth and secure operation of the website; we do not draw any conclusions about you personally from it, but reserve the right to review it retrospectively if there is a specific suspicion of unlawful use.

The legal basis is Art. 6 (1) (f) GDPR, our legitimate interest in the stability and security of the website. The data is generally deleted after 14 days, except in the event of a security-related incident.

Contacting Us

If you contact us by email, phone or via a form, we process the data transmitted in doing so (e.g. name, contact details, content of the enquiry) in order to handle your request. The legal basis is our legitimate interest in straightforward communication (Art. 6 (1) (f) GDPR) or, where an offer is concerned, the performance of pre-contractual measures (Art. 6 (1) (b) GDPR). Your data will be deleted no later than six months after your enquiry has been processed, unless statutory retention periods apply.

Google Maps

The map view on the “Location” page is not loaded automatically. Only when you actively click “Load Map” is a connection established to Google's servers (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), transmitting your IP address. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR, which you may withdraw at any time by reloading the page. Transfer to the USA is possible; further details can be found in Google's privacy policy.

Fonts

This website uses the fonts Cormorant Garamond and Inter. Both are served locally from our own server; no connection to Google's or any other third-party servers is established.

Cookies

This website does not use cookies for analytics or marketing purposes, and no audience measurement takes place. Should this change in future, we will obtain your consent beforehand.

Encryption

This website uses TLS encryption. You can recognise this by “https://” in your browser's address bar.

Changes to This Policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements, or to reflect changes to our services. The new privacy policy will then apply on your next visit.