Phone: +49 6221 87288-0

Privacy statement

1. Data Protection at a glance

General Information

The following information is intended to give you a simple overview regarding what happens to your personal data when you visit our website. ‘Personal data’ is any data that can be used to identify you personally. Detailed information on the topic of data protection can be found in our privacy statement below.

2. General information and mandatory information

A note on the responsible body

The responsible body for data handling on this website is:

Academy Group Hotels & Restaurants GmbH
Rohrbacher Straße 2
69115 Heidelberg

Telephone: +496221 872880
Email: info@acedemy-group.de
The responsible body is the natural or legal person who makes decisions, alone or with others, about the aims and means of processing personal data (e.g. names, email addresses etc.).

 

Disclosure, Locking, Deletion

Within the limits of the relevant statutory provisions, you are entitled to free information on your stored personal data, its origin and recipients, the purpose of the data processing and, where applicable, the right to amend, lock or delete this data. To enquire about this or other aspects of personal data, please feel free to contact us at the address given in the imprint.

 

3. Data protection officer

Statutory data protection officer

We have engaged a data protection officer for our company.

Academy Group Hotels & Restaurants GmbH
Rohrbacher Straße 2
69115 Heidelberg
Telephone: +49 6221 872880
Email: datenschutzbeauftragter@academy-group.de

 

4. Data collection on our website/ Collection and storage of personal data, nature and purpose of its use

The use of our website is generally possible without the input of personal data.

Every visit to our homepage is logged. This fulfils internal systematic and statistical purposes.

The following may be logged:

  • Name of the file retrieved
  • Date and time of the retrieval
  • Data transferred
  • Notice of successful retrieval
  • Web browser and requesting domain
  • IP address of the requesting system
  • Browser used, operating system and your Internet provider.

The data listed above are processed for the following purposes and saved until automatic deletion:

  • Ensuring a trouble-free connection is established and that our website can be used easily.
  • Evaluating system security and stability.
  • Fulfilling other administrative purposes.

The legal basis for the processing of data is Art. 6, Para. 1 Sec. 1 (f) GDPR. Our legitimate interest is resultant from the purposes of data collection listed above.

Under no circumstances will we use this data to draw conclusions about your person.

Furthermore, we use cookies and analytical services. Further details can be found in parts 9 and 10.

 

Signing up to our newsletter

As per Art. 6 Para. 1 Sec. 1 (a) GDPR, insofar as you have provided explicit consent, we will use your email address to send you our newsletter on a regular basis. To receive the newsletter, it is sufficient to provide an email address, the desired language and your first name/ surname.

Cancellation is possible at any time, for instance via the link provided at the end of every newsletter. Alternatively, you can cancel your subscription at any time by sending an email to datenschutzbeauftragter@academy-group.de.

 

Contact form

Should you have any questions about our services, you can get in touch with us via the contact forms provided on our website.

Here, you are required to enter your surname, first name, street and house number, postcode, municipality, telephone number and email address along with a message, in order for us to identify who has sent the message and to provide a response. These details are always provided on a voluntary basis and will not be passed on to third parties without your explicit consent.

Further personal data will only be collected when you provide these voluntarily.

Data received for the purposes of contacting us will be processed pursuant to Art. 6 Para. 1 Sec. 1 (a) GDPR on the basis of consent voluntarily given by you.

The personal data required for the use of our contact form will be automatically deleted once your query has been dealt with.

The purpose of processing this data is to answer your enquiries about the educational services listed on our website, or your application or registration.

 

Applicant Portal

We provide the option for you to apply to our hotels and restaurants online via our websites.

To do so, you are required to provide data such as your title, first name, surname, address, email address and to upload a copy of your CV.

It is possible to provide further data and this is given on a voluntary basis.

If you wish to make an online application, we will process the data provided, such as:

  • Photo
  • Date of birth
  • Place of birth
  • Nationality
  • Address and country
  • School-leaving qualification
  • Qualification date and grade
  • Name and location of school
  • Language skills
  • CV
  • Certificates
  • Other documents

For the purposes of your online application, data will be processed as per Art. 6 Para. 1 Sec. 1 (a) GDPR on the basis that you have given voluntary consent.

The personal data obtained by us during the online application process will be automatically deleted no later than one year after the most recent information provided by you.

The intended purpose of the data processing is to match your online application to the jobs described on our websites.

We would like to point out that the transfer of data over the Internet (e.g. email communication) may involve gaps in security. The complete protection of data against access by third parties is not possible.

We hereby expressly prohibit the use of the contact details provided, as part of our duty to publish an imprint, for the purpose of sending advertisements and other information not requested from third parties.  The operators of the website expressly reserve the right to take legal action should the sending of unsolicited advertisements occur, such as through spam mail.

The website contains links to other web pages, and it is the responsibility of the respective website operators to uphold these. At the time of linking, no violations of the law were evident.

5. Social media

Facebook Plugins (Like & Share Buttons)

Our website includes plugins from the social network Facebook, provided by 1 Hacker Way, Menlo Park, California 94025, USA. These plugins can be recognised by inclusion of the Facebook logo or the “like” button (“Gefällt mir”) on our website. An overview of the Facebook plugins can be found here: https://developers.facebook.com/docs/plugins/.

When you visit our website, the plugin creates a direct connection between your browser and the Facebook server. This informs Facebook that you visited our website on your IP address. If you click the “like” button while you are logged in to your Facebook account, you can link the content of our site to your Facebook profile. Facebook can thereby associate your user account to our website. Please note that, as the provider of the website, we are not made aware of the content of the data provided or how this is used by Facebook. Further information can be found in Facebook’s privacy statement at: https://de-de.facebook.com/policy.php.

If you do not wish Facebook to associate your user account with a visit to our website, please log out from your Facebook account.

6. Newsletter

Newsletter data

If you wish to subscribe to the newsletter offered on our website, we require an email address from you along with information which allows us to confirm that you are the email account holder and that you agree to receiving the newsletter. Further data is not required and will only be collected on a voluntary basis. This data will only be used to send the information requested and will not be shared with third parties.

The processing of your data provided in the newsletter registration form occurs solely on the basis of your consent (Art. 6 Para. 1 (a) GDPR). At any time you may withdraw your consent to the storage of your data and to the use of your email address, via the ‘unsubscribe’ link in the newsletter. The legality of the data processing operations undertaken prior to unsubscribing shall remain unaffected.

The data provided by you for the purposes of receiving the newsletter will be stored until such time as you unsubscribe and will be deleted should you deregister. Data that is saved by us for other purposes (e.g. email addresses for the members’ area) shall remain unaffected.

7. Plugins and Tools

Google Maps

The website uses an API to provide the Google Maps service. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

In order for you to use the Google Maps function, it is necessary to store your IP address. This information is generally sent to a Google server in the USA and saved there. The operator of this website has no influence over the transfer of this data.

Google Maps is used in the interests of presenting our online services in an appealing manner. This may be considered a legitimate interest as per Art. 6 Para 1 (f) GDPR.

Further information about the handling of user data can be found in Google’s privacy statement: https://www.google.de/intl/de/policies/privacy/.

8. Rights of the person affected

You have the right:

  • Pursuant to Art. 15 GDPR, to request information about your personal data processed by us. In particular, you can request information about the purpose of the processing, the category of the personal data, the categories of recipients to whom your data has been or will be disclosed, the intended duration of storage, the existence of a right to amend, delete or restrict the processing or to contradict it, the existence of a right to appeal, the origin of your data insofar as these were not obtained by us, as well as the existence of automated decision-making including profiling and, where appropriate, significant information about the details of these;
  • Pursuant to Art. 16 GDPR, to request the immediate rectifying of incorrect or incomplete personal data stored by us;
  • Pursuant to Art. 17 GSPR, to request the deletion of personal data stored by us, insofar as this is not required for exercising the right to freedom of speech and freedom of information, to fulfil a legal obligation, in the public interest or for the establishment, exercise or defence of public claims;
  • Pursuant to Art. 18 GDPR, to request a limitation on the processing of your personal data, insofar as you contest the accuracy of the data or the processing is unlawful and you oppose its erasure, where we no longer require the data but it is required by you for the establishment, exercise or defence of legal claims or you have registered an objection to its processing as per Art. 21 GDPR;  
  • Pursuant to Art. 20 GDPR, to receive your personal data provided to us in a structured, accessible and machine-readable format or to request that this be transmitted to a nominated party;
  • Pursuant to Art. 7 Para. 3 GDPR, at any time to withdraw your consent initially given to us. The result of this is that we will no longer be permitted to process data obtained on the basis of this consent and
  • Pursuant to Art. 77 GDPR, to lodge a complaint with the regulatory authority. Generally, you can do so with the regulatory authority of your usual place of residence or place of work, or at our headquarters.

9. Analysis services

The tracking mechanisms listed hereafter and used by us are in place on the basis of Art. 1 Para. 1 Sec. 1 (f) GDPR. The tracking mechanisms to be employed are intended to ensure a needs-based design and the ongoing optimisation of our websites. We also use these tracking mechanisms to record statistical data on the use of our website and to optimise our services to you. These interests are legitimate as per the regulation mentioned above.

The respective data processing purposes and data categories are to be indicated in relation to the individual tracking tools.

Use of Google Analytics/ Remarketing  and Google Adwords

This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses “cookies” – text files that are stored on your computer and thereby enable an analysis of website usage. The information obtained from cookies about your use of this website is generally transmitted to a Google server in the USA and saved there. However, should you choose to activate an anonymised IP on this website, your IP address will be shortened by Google within the member states of the European Union or in the territories of other contracting parties to the Agreement on the European Economic Area.

Only in exceptional cases will your full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the site, to compile reports on your activity on the website and to deliver further services relating to website use/ Internet use to the website operator. The IP address from your browser transmitted in the context of Google Analytics will not be linked to other data from Google.

You can prevent the storage of cookies by the installation of relevant software to your browser; please note, however, that if you do so, you may not be able to use the full functionality of our website. Furthermore, you can prevent the transmission to and processing by Google of the data obtained by the cookie and the data associated with your usage of the website (including your IP address) by downloading and installing the browser plugin available at the following link:

http://tools.google.com/dlpage/gaoptout?hl=de.

Our websites use Re-targeting technologies provided by Google. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

This enables us to provide visitors to our website with targeted, personalised advertisements based on their interests. Advertisements are inserted based on an analysis of cookies from previous usage and searches. To our knowledge, no personal data is stored for this purpose. A cookie is stored to compile anonymised data about the interests of the user and thus to adapt advertisements to this individual information. These cookies are tiny text files that are stored to your computer or mobile device.

You can withhold consent to the use of cookies for re-targeting on a permanent basis by deactivating interest-related advertisements from Google here:

www.google.com/settings/ads/anonymous

Further information and data protection regulations can be found in Google’s privacy statement at

http://www.google.com/policies/technologies/ads/

This website uses the online advertising programme ‘Google AdWords’ and applies conversion tracking within this framework. The cookie for conversion tracking is set up when a user clicks on an advertisement placed by Google. These cookies become invalid after 30 days and are not used for the purposes of personal identification. If the user visits certain pages on this website and the cookie is still in place, we – and Google – can ascertain that the user clicked the advertisement and was taken to this page. Each customer of Google AdWords receives another cookie. Cookies can therefore not be tracked through the websites used by AdWords customers.

The information obtained via the conversion cookie enables the formulation of statistics for AdWords customers who have opted for conversion tracking. The customers find out the total number of users who clicked on the advertisement and who were taken to a page containing a conversion tracking tag. No information is received that could personally identify users. Users who do not wish to participate in tracking may easily deactivate the cookie used for Google conversion tracking in the user settings of their internet browser. These users will not be included in the conversion tracking statistics.

Learn more about Google’s data protection regulations here: http://www.google.de/policies/privacy

10. Use of cookies

Cookies are installed on our website. These are tiny files that are automatically created on your browser and stored on your device (laptop, tablet, smartphone etc.) when you visit our website. Cookies do not cause any damage to your device and do not contain viruses, trojans or other malicious software. Information is stored on the cookie that corresponds to the specific device. This does not mean, however, that we can automatically identify you.

The installation of cookies allows us to improve the presentation of our services to you. We use ‘session cookies’ for this purpose, to ascertain if you have visited one of our websites. This is automatically deleted when you leave our website.

Furthermore, we have installed temporary cookies to optimise the user-friendliness of our website, which are stored on your device for a specified amount of time. If you visit our website again to make use of our services, it will automatically recognise that you had visited the website previously and which inputs and settings you arranged, so that there is no need for you to do so again.

We also use cookies to measure statistics on our websites and to evaluate how to optimise our services to you (see part 5). These cookies allow us to recognise you as a previous visitor when you return to our website. These cookies are automatically deleted after an individually defined period of time.

The data processed via cookies is necessary for the aforementioned purpose of safeguarding our legitimate interests as per Art. 6 Para. 1 Sec. 1 (f) GDPR.

Most browsers automatically accept cookies. You can, however, configure your browser so that no cookies are stored on your computer or that you receive a notification before a new cookie is installed. The complete deactivation of cookies could, however, mean that you will not be able to use certain facilities on the website.

 

11. Sharing of data

Your personal data will not be shared with third parties, with the exception of the purposes listed below. We only share your personal data with third parties if:

  • as per Art. 6 Para. 1 Sec. 1 (a) GDPR, you have given explicit consent to this,
  • as per Art. 6 Para. 1 Sec 1 (f) GDPR, disclosure is necessary for the establishment, exercise of defence of legal claims and there is no reason to believe that you have a significant interest worthy of protection in the non-disclosure of your data,
  • as per Art. 6 Para. 1 Sec. 1 (c) GDPR, where there is a statutory obligation to disclose and
  • it is legally permitted and as per Art. 6 Para. 1 Sec. 1 (b) GDPR, necessary for the settlement of the contractual relationship with you.
  • A disclosure to third parties in non-member countries is not planned.

12. Right of objection

Insofar as your personal data is processed on the basis of a legitimate interest as per Art. 6 Para. 1 Sec. 1 (f) GDPR, you have the right pursuant to Art. 21 GDPR to lodge an objection to the processing of your personal data, as long as there are reasons for this arising from the particular situation or if you object to direct advertising. In the latter case you have a general right of objection that may be implemented without specification to any particular situation of ours.

If you wish to utilize your right to withdrawal or right of objection, it is sufficient to send an email to our data protection officer at datenschutzbeauftragter@academy-group.de

13. Data security

During your visit to our website, we apply the widely-used SSL system (Secure Socket Layer) along with the highest encryption level supported by your browser. Generally, this is a 256-bit encryption. If your browser does not support this, we will apply 128-bit V3 technology instead. You can identify when an individual page of our website is sent by encrypted transmission when your browser displays an icon showing a key or a lock in the status bar.

We also apply appropriate technological and organisational measures to protect your data against accidental or deliberate manipulation, partial or total loss or damage, and unauthorised access by third parties. Our security measures are constantly updated as the technology advances.

14. Updates and Changes to this privacy statement

This privacy statement is currently valid as of May 2018.

As our websites and offers develop or as a result of changed statutory or official regulations, it may become necessary to adapt this privacy statement. The most up-to-date privacy statement may be downloaded and printed from our website at https://www.academy-group.de/datenschutz.