Privacy Policy
Stand: August 2019
1. general information
1.1 Personal Data (Art. 4 No. 1 GDPR)
The subject of data protection is personal data (hereinafter also referred to as “data”). This includes all information relating to an identified or identifiable natural person. Examples include name, address, occupation, email address, health status, income, marital status, genetic characteristics, phone number, and, where applicable, user data such as the IP address.
1.2 Controller (Art. 4 No. 7 GDPR)
The controller responsible for processing your data on the website https://career.eventhotels.com (hereinafter referred to as the “website”) is Crusader Investments B.V., Sedanstraße 13-17, 50668 Cologne, Germany.
Further information about the controller can be found in the legal notice (Imprint).
You can contact the Data Protection Officer at: privacy@eventhotels.com
1.3 Right to Object
If you wish to object to the processing of your data by the operator in whole or in part in accordance with this privacy policy, you may do so using the contact details provided in the legal notice (Imprint).
Please note that in the event of such an objection, the use of the website and access to the services offered on it may be limited or not possible at all.
2. Scope and Purposes of Data Processing, Legal Bases, Provision of Data, and Storage Duration
2.1 Accessing and Using the Website
Each time you access the website and its subpages, usage data is transmitted by your internet browser and stored in server log files. These log files contain the following data:
- Date and time of access
- Name of the accessed subpage
- IP address
- Referrer URL (the URL from which you arrived at the website)
- Amount of data transferred
- Product and version information of the browser used
The processing of this data is permitted under Art. 6(1)(b) GDPR, as it is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures taken at the request of the data subject.
The data processed by the operator is required to allow you to access and use the website. This data must be processed to enable the use of an online service; otherwise, access to the website is not possible.
The log files are also evaluated by the operator in anonymized form to further improve the website, make it more user-friendly, detect and fix errors faster, and manage server capacity. For example, this helps identify peak usage times and ensure adequate data throughput.
This processing is permitted under Art. 6(1)(f) GDPR, which allows data processing when it is necessary for the purposes of the legitimate interests pursued by the controller or a third party, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject.
The legitimate interest of the operator lies in providing an informative and functional website and optimizing its performance.
The provision of this data is neither legally nor contractually required. However, failure to provide the data means it cannot be used to improve the website.
Your IP address is deleted or anonymized once your session ends. Anonymization means that IP addresses are altered in such a way that they can no longer—or only with a disproportionately large effort in terms of time, cost, and labor—be linked to a specific or identifiable natural person.
2.2 One-Click Email
On the website, you have the option to open an email addressed to the operator with just one click. In doing so, the sender address automatically used is the one linked to your default email program. If you do not want your email address to be retrieved in this way, you can change this in the settings of your respective email program.
The legality of this processing is based on Art. 6(1)(b) GDPR, which permits data processing if it is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures taken at the request of the data subject.
Providing this data is necessary, as you would otherwise not be able to send a message to the operator.
The processed personal data will be deleted after the legally required retention periods expire, unless the controller has a legitimate interest in continued storage. In any case, only the data strictly necessary to fulfill the purpose will continue to be stored. Where possible, the personal data will be anonymized.
2.3 Use of Cookies
The operator uses so-called cookies. These are small data packets, typically consisting of letters and numbers, that are stored in your browser when you visit certain websites. Cookies allow the website to recognize your browser, track your navigation through different sections of the website, and identify you when you return to the website. Cookies do not contain any data that personally identifies you, but information stored by the operator about you may be linked to the data obtained and stored in cookies.
The information collected through cookies may be used for the following purposes:
- Recognizing the user’s device when visiting the website
- Tracking the user’s browsing activity on the website
- Improving the user-friendliness of the website
- Analyzing website usage
- Operating the website
- Preventing fraud and enhancing website security
- Customizing the website based on user needs
- Cookies do not damage your browser, contain no viruses, and do not allow the operator to spy on you.
Two types of cookies are used:
- Temporary cookies (session cookies), which are deleted automatically when you close your browser.
- Persistent cookies, which may remain for up to 30 days and allow the website to recognize you on your next visit.
- More detailed information can be found in the cookie declaration.
Using cookies allows the operator to analyze your usage behavior for the purposes mentioned above and to improve your browsing experience on the website. These data are also collected only in anonymized form.
The legality of this processing is based on Art. 6(1)(f) GDPR, which allows data processing when it is necessary to protect the legitimate interests of the controller or a third party, provided these are not overridden by your interests or fundamental rights and freedoms. The operator’s legitimate interest lies in the optimized presentation of its website.
Providing this data is not legally or contractually required. However, if you do not provide it—by not accepting cookies or deleting them—certain functionalities of the website may be restricted.
2.4 Use of Tracking Tools
Google Analytics
The operator uses the web analytics service Google Analytics, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This service uses the cookies described above to collect information about your operating system, browser, IP address, the previously visited website, as well as the date and time of your visit to the operator’s website.
The information generated by the cookies regarding your use of the website is transmitted to a Google server in Ireland and stored there. In some cases, data may also be transferred to the United States. For such transfers, Google is certified under the Privacy Shield Framework. More information is available at: https://policies.google.com/privacy/frameworks?gl=de
Google uses this information to analyze your use of the website, compile reports on website activity for the operator, and provide other services related to website and internet usage. If legally required, or if third parties process this data on behalf of Google, the information may also be transferred to such third parties. The usage is carried out in anonymized form. Further information can be found at: https://policies.google.com/privacy?hl=de
When using Google Analytics, no directly identifiable personal data is stored — only the IP address is recorded. This information helps recognize you on your next visit and facilitates navigation.
The processing is lawful under Art. 6(1)(f) GDPR, as the operator has a legitimate interest in analyzing user behavior to optimize the website’s structure, reach, and performance.
Personal data collected in the context of tracking tools will be deleted unless the controller has a legitimate interest in further storage. In any case, only data strictly necessary for the intended purpose will be retained. Where possible, personal data is anonymized.
Providing this data is not legally or contractually required. Without your consent or if you disable cookies, Google Analytics cannot be used. If you have enabled a Do-Not-Track setting in your browser, some website features may be restricted.
You have the right to object to this tracking at any time. You can exercise your objection via the cookie consent banner shown on the website.
2.5 Job Applications
The website displays various job postings for different operating companies. The responsible company is explicitly named in each individual job posting. You have the option to open an email addressed to the respective company with just one click. In doing so, the sender address used will be the one linked to your default email program. If you do not want your email address to be retrieved in this way, you can change the settings in your email client.
As part of the application process, you are required to provide personal data such as your first and last name, telephone number, and email address. If there are no suitable job openings listed at the moment, you are welcome to send a speculative application.
The operator processes your data for the purpose of conducting the application procedure and responding to your inquiry. The legality of this processing is based on Section 26 of the German Federal Data Protection Act (BDSG), which permits the processing of employee data if it is necessary for hiring decisions. If you do not provide the required information and documents, your application cannot be considered. Providing this data is contractually required.
Application documents received by the operator will be stored for six months after rejection, unless the applicant has given consent for a longer retention period. Further information on the processing of your applicant data can be found in the mandatory applicant information included in each job posting.
2.6 Google Maps
The operator uses the map service Google Maps, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When using this service, information such as the date and time of your access and your IP address is transmitted to Google servers in Ireland and stored there. In some cases, data may also be transferred to the USA. For such data transfers, Google is certified under the Privacy Shield Framework. Further details are available at: https://policies.google.com/privacy/frameworks?gl=de
Google may use the data for advertising, market research, and/or to tailor its services to user needs. If you are logged in to a Google account, this information may be linked to your profile. If you wish to prevent this, you must log out before using the service. Google’s terms of use and privacy policies apply.
If you disable JavaScript in your browser settings, you can prevent Google Maps from being executed.
The operator uses Google Maps to enable users to access interactive maps for route planning. This processing is lawful under Art. 6(1)(f) GDPR, as the operator has a legitimate interest in making it easier for users to locate the business premises. Providing the data is neither legally required nor necessary for contract fulfillment. However, if you do not provide the data, you will not be able to use this feature.
The data is stored by Google. For more information, please refer to Google’s privacy policy and terms of use.
2.7 Social Media Feed/Stream
The operator uses the Flow Flow Social Stream plugin on the website, which displays content from social media platforms directly. When visiting the website, personal data (e.g., IP address and page visits) may be transferred to the respective social media platform. If you have an account with one of these platforms and are logged in, the data will be automatically linked to your user account.
Through the Social Stream plugin, you also have the option to share the displayed content using the standard social media sharing features.
The following plugins are used on the website:
The operator uses a Facebook plugin on the website, which is provided by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Data may also be transferred to the USA. For cases of data transfer to the USA, Facebook is certified under the Privacy Shield Framework.
Further information is available from Facebook at:
https://de-de.facebook.com/about/privacyshield and in Facebook’s privacy policy at:
https://de-de.facebook.com/privacy/explanation
The operator uses a Twitter plugin on the website, which is provided by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.
Data may also be transferred to the USA. For such data transfers, Twitter is certified under the Privacy Shield Framework.
Further information is available at:
https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO
and in Twitter’s privacy policy at:
https://twitter.com/de/privacy
Google +
The operator uses a Google+ plugin on the website, which is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Data may also be transferred to the USA. For such cases, Google is certified under the Privacy Shield Framework.
Further information can be found at:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI
and in Google’s privacy policy at:
https://policies.google.com/privacy?hl=de
YouTube
The operator uses a YouTube plugin on the website. YouTube is a service provided by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
YouTube LLC is a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
In cases where data is transferred to the USA, Google is certified under the Privacy Shield Framework.
Further information can be found directly from Google at:
https://policies.google.com/privacy/frameworks?gl=de
Flickr
The operator uses a Flickr plugin on the website, which is provided by SmugMug Inc., Suite 200, 67 E Evelyn Avenue, Mountain View, CA 94041, USA.
For cases involving data transfers to the USA, SmugMug is certified under the Privacy Shield Framework.
Further information can be found at:
https://www.privacyshield.gov/participant?id=a2zt00000008VJSAA2&status=Active
and in SmugMug Inc.’s privacy policy at:
https://www.smugmug.com/about/privacy-flickr
The operator uses an Instagram plugin on the website, which is provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Data may also be transferred to the USA. For such cases, Facebook is certified under the Privacy Shield Framework.
Further information can be found on Facebook at:
https://de-de.facebook.com/about/privacyshield
and in Instagram’s privacy policy at:
https://help.instagram.com/155833707900388/?helpref=hc_fnav&bc[0]=Instagram-Hilfe&bc[1]=Datenschutz%20und%20Sicherheitsbereich
The data may be used by the platform operators for advertising and market research purposes.
The operator uses these plugins to provide you with content from social media platforms and to enable you to share this content.
The legality of this processing is based on Art. 6(1)(f) GDPR, which allows processing if it is necessary for the purposes of the legitimate interests pursued by the controller or a third party, unless such interests are overridden by the data subject’s rights and freedoms.
Using data to provide content and features from social media platforms constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.
Providing this data is neither legally required nor necessary for the performance of a contract. However, if you do not provide this data, you may not be able to use the website or its full range of features.
3. Right to Access, Rectification, Erasure, Restriction, Objection, and Data Portability
3.1 Right of Access (Art. 15 GDPR)
Upon request, the operator will inform you whether personal data concerning you is being processed. The operator aims to process access requests promptly.
3.2 Right to Rectification (Art. 16 GDPR)
You have the right to request the immediate correction of inaccurate personal data concerning you.
3.3 Right to Erasure (Art. 17 GDPR)
You have the right to request the immediate deletion of personal data concerning you, and the operator is obliged to delete such data without undue delay, provided that one of the reasons listed in Art. 17(1)(a)–(f) GDPR applies.
3.4 Right to Restriction of Processing (Art. 18 GDPR)
You have the right to request that the operator restrict the processing of your data if one of the conditions set out in Article 18(1)(a)–(d) GDPR applies.
3.5 Right to Object (Art. 21 GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(e) or (f) GDPR, including profiling based on those provisions.
The operator will no longer process your personal data unless they can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defense of legal claims.
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your data for such marketing, including profiling related to such direct marketing.
You also have the right to object, on grounds relating to your particular situation, to the processing of your personal data for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
To exercise your objection, please use the contact address provided in the Legal Notice.
3.6 Right to Data Portability (Art. 20 GDPR)
You have the right to receive the personal data concerning you, which you have provided to the operator, in a structured, commonly used, and machine-readable format. You also have the right to transmit those data to another controller without hindrance from the operator, provided that the processing is based on your consent (pursuant to Article 6(1)(a) or Article 9(2)(a) GDPR) or on a contract (pursuant to Article 6(1)(b) GDPR) and the processing is carried out by automated means.
4. Withdrawal of Your Consent
If you have given your consent to the processing of your personal data and later withdraw it, the lawfulness of the processing carried out prior to the withdrawal remains unaffected.
5. Right to Lodge a Complaint (Art. 77 GDPR)
You have the right to lodge a complaint with a supervisory authority at any time.
6. Recipients
The data collected when accessing and using the website, as well as the information you provide when contacting us, is transmitted to and stored on the operator’s server. In addition, your data may be shared with the following categories of recipients:
- Individuals within the organization responsible for processing (e.g., marketing, HR, customer service)
- Data processors (e.g., data centers, IT service providers, software support, analytics providers, mailing services)
- Contractual partners of the operator (e.g., banks, tax advisors)
- Other recipients (e.g., social media platform operators)
7. Links to Third-Party Websites
During your visit to the website, content may be displayed that links to third-party websites. The operator has no access to or control over the cookies or other technologies used by these third parties. Such third-party websites are not subject to this privacy policy.
Content Delivery Network
De exploitant maakt gebruik van het Content Delivery Network KeyCDN van de aanbieder proinity LLC, Färberstrasse 9, 8832 Wollerau, Zwitserland. KeyCDN is een online dienst waarmee met name grote mediabestanden (zoals afbeeldingen, paginainhoud of scripts) via een netwerk van regionaal verspreide en met het internet verbonden servers worden geleverd. Hierdoor worden de laadtijden van de website verkort. Om deze functie mogelijk te maken, zijn bepaalde cookies noodzakelijk.
De rechtsgrondslag voor het gebruik van KeyCDN is met betrekking tot de toegang tot het eindapparaat § 25 lid 1 TDDDG (toestemming). De rechtmatigheid van de verdere verwerking is bovendien gebaseerd op art. 6 lid 1 a) AVG (toestemming).
Het verstrekken van de gegevens is noch wettelijk verplicht noch noodzakelijk voor het afsluiten van een contract. Indien de gegevens niet worden verstrekt, kan de tool niet worden gebruikt.
De door de cookies verwerkte informatie wordt overgedragen aan de aanbieder in Zwitserland en daar opgeslagen. Dit gebeurt met inachtneming van de bijzondere voorwaarden van art. 44 e.v. AVG (hier: het bestaan van een adequaatheidsbesluit van de Europese Commissie).
De in het kader van het gebruik van KeyCDN verzamelde persoonsgegevens worden verwijderd, tenzij de exploitant een gerechtvaardigd belang heeft bij verdere bewaring. In elk geval worden alleen die gegevens verder opgeslagen die absoluut noodzakelijk zijn voor het bereiken van het desbetreffende doel.
Meer informatie over de gegevensverwerking door de aanbieder vindt u in de privacyverklaring van KeyCDN: https://www.keycdn.com/privacy/