Privacy policy

Privacy Statement HHD

With this privacy statement we inform you which personal data we collect when you visit our website and for what purpose we use the data. The privacy statement also provides information on data processing when making a booking via a website operated by us, by telephone, via travel agencies or a contractual partner company.

Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses.

Data controller
Summary
Collection and use of your data during the booking process
Disclosure of your personal data to other recipients
Trustpilot
Collection and use of your data when visiting our website
Use of cookies
Contact form and e-mail
Google Analytics
Facebook plug-in
Google Maps
Google Tag Manager
Google Adwords
Facebook Custom Audiences
DoubleClick by Google
Iridion optimization Suite
Sending recommendations to friends or receiving recommendations
Newsletter
Newsletter tracking
Your rights as a data subject

Data controller

The person responsible for data processing within the meaning of the data protection laws:

HHD AG, Sägereistrasse 20, CH 8152 Glattbrugg

Telephone: +41 43 810 91 91
E-mail: [email protected]

Data Protection Coordinator for HHD AG: Andreas Benz
[email protected] or [email protected]

Representative according to Art. 27 GDPR: Attorney at Law Prof. Clemens Pustejovsky

Wallstr. 6, D-79098 Freiburg, Tel. +497612168680
[email protected] or [email protected]

Summary

  • When you book an accommodation via our portal, we collect and use your personal data to process the payment and to transmit the data to our partners whenever required to fulfil the contract.
  • When visiting this website, we collect data as far as it is technically necessary. We also collect and use data to perform reach analyses with Google Analytics and Iridion optimization Suite.
  • We use social media tools and other tools, including the Facebook plug-in, which enables the user to interact with Facebook and other users, Google Maps, Google Adwords, Facebook Custom Audiences and DoubleClick by Google.
  • We offer a newsletter for our existing customers and by subscription, which you can unsubscribe from at any time.
  • As the data subject, you have, among other things, the right to object, revoke, obtain information and delete, and you have the right to lodge a complaint with a supervisory authority.

Collection and use of your data during the booking process

There are various ways of concluding contracts with us within the framework of accounting procedures. Irrespective of whether the booking is made via a website operated by us, by telephone, via travel agencies or a contractual partner company, the following data will be collected from you, transmitted to us if necessary and processed by us:

  • your name and address,
  • your e-mail address
  • your telephone number and
  • in individual cases, further information about you or your booking (inquiry) required for the respective booking (inquiry).

We collect the personal data required for the respective payment mode in order to carry out and process the bookings. The provision of further information is voluntary.

As far as data processing is necessary for contract fulfilment and contract initiation, the processing of your data and, if applicable, the transmission of your data by third parties to us is justified according to Art. 6 Para. 1 lit b GDPR.

In accordance with commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of ten years. However, after two years we will restrict processing, i.e. your data will only be used to comply with legal storage obligations.

As a general rule, personal data will not be transmitted. Only in exceptional cases will the necessary data be passed on to public authorities (e.g. within the framework of registration procedures) or to partners (e.g. time of arrival, name and telephone number for the purpose of contacting the transfer), whereby these are informed of the obligation to delete the data immediately once the purpose has ceased to apply.


Disclosure of your personal data to other recipients

When you book an accommodation via our website, you have the possibility to choose between different payment methods. Your payment details will be passed on to our house bank.If you decide to pay by credit card, your payment details will be transmitted to the respective payment service providers, depending on the payment method you have chosen (legal basis is Art. 6 Para. 1 S. 1 lit b GDPR).


The payment service provider is responsible for your payment data.

  • HHD AG currently uses the services of Mastercard Europe SA.The contact details of Mastercard Europe SA, its Data Protection Officer (if any) and further information on the personal data processed can be found at https://www.mastercard.de/de-de/datenschutz.html
  • HHD AG also uses the services of Visa Europe Services Inc. The contact details of Visa Europe Services Inc., its data protection officer (if any) and further information on data protection can be found at https://www.visa.de/datenschutz
  • In some countries, HHD AG uses services from regional providers. The contact data of the respective providers and their respective data protection officers (if any) and further information on data protection can be found on the respective information pages of the respective providers.

Any further transfer of your data to other third parties shall not take place unless we are legally obliged to do so or unless this serves the purpose of criminal prosecution.


Trustpilot

We make use of Trustpilot to evaluate our offers and services and optimise them based on customer feedback. To this end, we will contact you after making a booking at the email address you provide and give you the opportunity to express your experiences and criticism through Trustpilot. The basis of this data processing is Art. 6 para. 1 lit. f) GDPR and our interest in evaluation and optimisation. If you are not interested in such feedback, there is no need to react. If you do not wish us to contact you at all for this purpose, you have the right to object according to Art. 21 GDPR.


If you provide a feedback via Trustpilot, it will be published with your chosen user name (possibility of pseudonymisation) via Trustpilot on their website and, if necessary, in a later step on the websites offered by us after you have agreed to their general terms and conditions. If you also provide a photo and agree to its publication, it will also be published. The basis for the processing is Art. 6 para. 1 lit a), Art. 7 GDPR.

Further information is available at https://de.legal.trustpilot.com/end-user-privacy-terms.

Collection and use of your data when visiting our website

If you use our website for informational purposes only, without providing us with any other information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect data which is technically necessary for us to display our website to you and to guarantee its stability and security (legal basis is Art. 6 Para. 1 S. 1 lit f GDPR). This involves data such as:

  • IP address of the requesting computer
  • Date and time of retrieval
  • URL of the requested page
  • Status message as to whether the call was successful
  • Amount of data transferred
  • The referrer URL from which the user came to the requested page
  • HTTP User Agent (device, operating system, browser)

The connection is encrypted using TLS technology to prevent unauthorised access to your personal data.


Use of cookies


When you use our website, cookies are also stored on your computer. Cookies are small text files that are stored on your browser's computer. We use cookies to provide you with individual functions and to make our website more user-friendly and effective (legal basis is Art. 6 Para. 1 lit GDPR).


In particular, we use the following cookies:

  • Transient cookies, such as session cookies, which store a session ID. With this, in turn, various requests from your browser can be assigned to the shared session, so that your computer can be recognised when you visit our website again. Session cookies and transient cookies are deleted when you close your browser or log out;
  • Persistent cookies for the "bookmark" function, so that you do not lose the contents of your bookmark and you can view your selected holiday properties again at a later time. After 28 days, these cookies are automatically deleted from your hard drive. Irrespective of this, you have the option of deleting the cookies in the security settings of your browser at any time.

It is possible for you to prevent the acceptance of third party cookies or all cookies by making the appropriate settings in your browser. However, this may mean that you may not be able to use the full functionality of our website.


Contact form and e-mail


If you contact us by e-mail or via the contact form on our website, the data provided by you (e-mail address, possibly your first and last name, your telephone number or other data provided by you) will be processed by us to answer your questions (legal basis is Art. 6 Para. 1 S. 1 lit b GDPR or Art. 6 Para. 1 S. 1 lit f GDPR). We delete the data in connection with the establishment of contact after the storage is no longer necessary or limit processing if legal storage obligations exist.


We use analysis tools ("tracking tools") for the purpose of optimising our offer and the functionality and design of our website, for the purpose of securing the integrity and security of the website and for the purpose of measuring the range and statistical analysis to the extent necessary on the legal basis of Art. 6 Para. 1lit 1 f GDPR.

Before using an analysis tool, we check its data protection legality on the basis of the guidance provided by the supervisory authorities (Conference of Independent Data Protection Supervisory Authorities of the Federation and the Länder - DSK) of March 2019 by

  • assessing the legitimate interests of HHD AG,
  • considering the existence of necessity, and
  • taking into account the interests of the data subjects, and
  • weighing of benefits and interests in individual case.

With regard to the analysis tools used by Interhome AG, we assume on the basis of such an examination that their use is lawful pursuant to Art. 6 para. 1 lit 1 f GDPR, whereby the individual concerned is entitled to a right of objection pursuant to Art. 21 GDPR.

Specifically, this involves the following tools:


Google Analytics


On our website, we make use of the web analysis service Google Analytics of Google Inc. ("Google"). Google Analytics uses cookies to help the website analyse how users use the site. Our aim is to analyse our website, improve it regularly and make it more interesting for you (legal basis is Art. 6 para. 1 sentence 1 lit f GDPR).


The information generated in this way is regularly transferred to a Google server in the USA and stored there. Google complies with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

We have authorised Google to evaluate the information thus obtained about your use of our website in order to compile reports on website activities and to provide us with further services relating to website use and Internet use. However, the IP address transmitted by your browser is not merged with other Google data.

If you want to prevent cookies from being saved, you can do this by changing the appropriate setting in your browser. However, this may mean that not all functions of our website can be used to their full extent. In addition, you can prevent Google from collecting and processing data relating to your use of the website (including your IP address) by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

This website uses Google Analytics with the extension "_anonymizeIp()", which truncates IP addresses for further processing. This excludes the possibility of any reference to a person's identity. If the data collected about you makes a reference to a person, this is excluded immediately, and the personal data is deleted immediately.

(6) Information about Google can be found at: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Terms of use: http://www.google.com/analytics/terms/de.html

Overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html

Privacy statement: http://www.google.de/intl/de/policies/privacy

Facebook Plug-in


(1) We use social media plug-ins from Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA, on our Web site to enable you to interact with Facebook and other users. This helps us to improve our offer and make it more interesting for you as a user (legal basis is Art. 6 Para. 1 S. 1 lit f GDPR).


(2) When using the plug-in, we use the so-called two-click solution so that, in principle, no personal data is initially passed on to Facebook. If you click the respective Facebook button (see Facebook logo) on our website and thereby activate it, you have the opportunity to communicate directly with Facebook. In this case, Facebook receives the information as to which (sub)page of our website you have accessed and, if applicable, shared or linked. In addition, the data mentioned under Information about the collection of personal data when you visit our website is transmitted and stored in the USA; by activating the plug-in, personal data from you is passed on to Facebook. According to Facebook, the IP address is anonymised immediately after collection.

(3) Your data will be stored by Facebook as user profiles and used for advertising, market research and/or needs-based design of the Facebook website. The evaluation is carried out in particular (also for users who are not logged in) for the purpose of presenting demand-oriented advertising and for the purpose of informing other Facebook users about your activities on our website.

(4) You have the right to object to the creation of these user profiles and must contact Facebook to exercise this right.

(5) The data is also passed on if you do not have a Facebook account or are not logged in there. However, if you are logged in, the data we have collected will be directly assigned to your Facebook account. For example, if you activate the button, then click it and link to our website, Facebook stores this information about you in your user account and shares it publicly with your contacts. To avoid this assignment, we recommend that you log out of your Facebook account before activating the button.

(6) If you live outside the United States or Canada, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, is responsible for processing personal data.

Further information on the processing of your data and on the purpose and scope of data collection by Facebook and your rights as well as setting options to protect your privacy under the following links:

Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA http://www.facebook.com/policy.php

Further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications

as well as http://www.facebook.com/about/privacy/your-info#everyoneinfo

Google complies with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework


Google Maps

(1) We use Google Maps on our website to provide you with interactive maps on our website. In addition, we can enable you to use the map function (legal basis is Art. 6 Para. 1 S. 1 lit f GDPR).


(2) When you visit our website, Google receives the information which (sub)-page of our website you have accessed. In addition, the data mentioned under Information about the collection of personal data when visiting our website – regardless of whether you have a user account with Google and are logged in or whether no user account exists. However, if you are logged in, your information will be immediately associated with your Google Account. To avoid this assignment, we recommend that you log out of your Google Account before activating the button.

(3) Your data will be stored by Google as user profiles and used for purposes of advertising, market research and/or needs-based design of the Google websites. The evaluation is carried out in particular (also for users who are not logged in) for the purpose of presenting demand-oriented advertising and for the purpose of informing other Google users about your activities on our website.

(4) You have the right to object to the creation of these user profiles and must contact Google to exercise this right.

(5) Further information on the processing of your data and on the purpose and scope of data collection by Google and your rights as well as setting options to protect your privacy under the following links:

Google LLC., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://www.google.com/policies/privacy/partners/?hl=de.

https://policies.google.com/privacy?hl=de

Google complies with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework


Google Tag Manager

We used the Google Tag Manager. This is a solution that allows us to manage website tags through a single interface. The Tag Manager itself (which implements the tags) is a cookie-free domain and does not process any personal data of users. The tool triggers other tags that may themselves collect data. According to Google, Google Tag Manager does not access this data. For more information, please see the Google Tag Manager usage guidelines at https://www.google.com/intl/de/tagmanager/use-policy.html.



Google Adwords

(1) We use Google Adwords to draw attention to our offers on external websites and can thus determine how successful the individual advertising measures are. It is our legitimate interest to make our website more interesting for you and to show you advertisements that may be of interest to you. In addition, we would like to calculate our advertising costs (legal basis for the processing of your data is Art. 6 Para. 1 lit f GDPR).


(2) Google Adwords are delivered via ad servers. Adserver cookies are used here to measure certain parameters for measuring success, such as the display of ads or clicks by users. So, when you visit our website using Google ads, Google Adwords stores a conversion cookie with limited validity (30 days) on your PC, which is not used to identify you personally. The following analysis values are usually stored for this cookie: Unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed).

(3) Google can recognise your browser with the help of cookies. If the cookie has not expired, Google and we may recognise that you have clicked an ad and been directed to our site and whether you have generated revenue. However, it is not possible for us to identify you as a user. We only receive a statistical evaluation from Google to check the effectiveness of the advertising measures used.

(4) Due to the marketing tools used, personal data is transferred and stored to Google in the United States of America each time you visit our website. This includes, for instance, the Internet pages visited by you and your IP address. Google may share this personally identifiable information with third parties. In addition, Google can assign the visit to your account if you are registered with a Google service.

(5) If you want to prevent this, you can do it in different ways:

(6) Further information on data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Google complies with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.


Facebook Custom Audiences

Our website uses Custom Audiences", a remarketing function of Facebook Inc. ("Facebook"). This feature allows you, as a user of our website, to view interest-based advertisements ("Facebook Ads") when visiting the social network Facebook or other websites that also use the process. Our interest here is to display advertising of interest to you and to make our website more interesting for you (legal basis for the processing of your data is Art. 6 Para. 1 lit f GDPR).


By using this function, your browser automatically establishes a direct connection to the Facebook server. It is beyond our precise knowledge and influence to what extent the data collected in this way is actually collected and used. However, we are aware that Facebook will always receive information that you have visited the relevant page on our website or clicked on an advertisement from us. If you are registered with Facebook, Facebook can assign the visit to your account. Even if you do not have an account on Facebook or are logged out, Facebook may collect and store your IP address and other identifiers.

You can disable the Facebook Custom Audiences feature by using the following link (for logged in users only ): https://www.facebook.com/settings/?tab=ads#_

For more information about Facebook and Facebook data processing, please visit https://www.facebook.com/about/privacy


DoubleClick by Google

(1) This website uses the online marketing tool DoubleClick by Google. DoubleClick utilises cookies to provide ads relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads more than once. Google uses a cookie ID to record which ads are placed in which browser and can thus prevent them from being displayed more than once. In addition, DoubleClick may use cookie IDs to collect conversions related to ad requests. This is the case, for instance, when a user sees a DoubleClick ad and later uses the same browser to visit the advertiser's website and buys something there. According to Google, DoubleClick cookies do not contain any personally identifiable information.


(2) As a result of the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the extent and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of DoubleClick, Google receives the information that you have accessed a relevant part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may find out and store your IP address.

(3) You can prevent participation in this tracking process in various ways: a) by setting your browser software accordingly, in particular by suppressing third party cookies so that you do not receive advertisements from third parties; b) by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com", https://www.google.de/settings/ads where this setting is deleted when you delete your cookies; c) by disabling the interest-based ads of the providers that are part of the About Ads self-regulatory campaign through the link http://www.aboutads.info/choices, where this setting is deleted when you delete your cookies; d) by permanently disabling it in your Firefox, Internet Explorer or Google Chrome browsers through the link http://www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all functions of this offer to their full extent.

(4) The legal basis for the processing of your data is Art. 6 para. 1 lit 1 f GDPR. For more information about DoubleClick by Google, please visit https://www.google.de/doubleclick and http://support.google.com/adsense/answer/2839090, as well as Google's privacy policy in general: https://www.google.de/intl/en/policies/privacy. Alternatively, you can visit the Network Advertising Initiative (NAI) Web site at http://www.networkadvertising.org Google complies with the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.


Iridion optimization Suite

Our website uses the "Iridion optimization Suite" software from Web Arts AG, Bad Homburg, Germany, for the user-oriented design and optimisation of our web offerings.


The software is used to carry out statistical analyses of user behaviour when visiting the website and, based on this, the content and presentation of the websites are changed. By using this website, you consent to the processing of data about you in the manner and for the purposes set out above.

The collection and storage of data can be revoked at any time with effect for the future via this opt-out link https://www.interhome.ch/en/customer-service/privacy-policy/?iridion=notrack

The opt-out is stored in the current browser in the form of a cookie. If cookies are deleted or the browser or terminal device is changed, the opt-out link must be reactivated there.


Sending recommendations to friends or receiving recommendations

Sometimes you have the opportunity to draw a friend's attention to a section of our website if you think it might be useful for your friend. In this context, you can enter the e-mail address of another person as the recipient of a message automatically generated by our system. The message contains the link to the section of our website that you think is useful, your email address (as the sender), your name, and is visible to recipients along with the other information you entered in the subject line and main text section.


When you receive a message such as this, you will see all the information entered in the "Recommend to a friend" form. The data concerned may be the following: E-mail address, first name, surname, other information about you that the user of the website has entered in the form.

Such information is only temporarily stored and processed until the email is sent on behalf of the user of the site. Information that we receive via the relevant form is only logged for security purposes and for our protection, but is not used for any other purpose. The information made available in this way is neither processed by us nor passed on to third parties. Our legitimate interest in using this function is to inform the recipient of our offer, as it could be of interest to the recipient - based on confirmation by a user (legal basis is Article 6 Para. 1 lit f GDPR).

Newsletter

We offer a newsletter. We may also process the data you provide when concluding a contract in order to inform you about other interesting products from our portfolio or to send you e-mails with technical information.

On our website we offer you the possibility to register for our newsletter. By registering, you consent to the processing of your data for the purpose of sending you newsletters on products/services from our range and for data analysis (Art. 6 Para. 1 clause 1 lit a GDPR). You can revoke this consent at any time via the link in the newsletter or by contacting us at the above address.

You can object to the processing of your personal data for advertising and data analysis purposes at any time with effect for the future.

Objection to advertising and revocation of consent do not affect the legality of the data processing carried out up to that point.


Newsletter tracking

When sending newsletters, we use so-called web beacons or tracking pixels. A web beacon or tracking pixel is a one-pixel image file embedded in the newsletter and displayed to you from a remote server when you open the newsletter. We use these to evaluate your user behaviour (the legal basis for this is Art. 6 Para. 1 S. 1 lit a GDPR). For this purpose, the data specified in the section "Collection and use of your data when visiting our website" and the following information are linked to your e-mail address and an individual ID: (i) Confirmation that the email has been opened; (ii) Timestamp; (iii) Links that are clicked; (iv) Content that is viewed. This data is used to create a user profile and to better tailor the newsletter to your interests. In this way, we can better understand the extent to which our offers are of interest to you. We record when you read our newsletter and on which links you click. This data is also linked to your activities on our website.


We store the information collected in this manner as long as you have subscribed to the newsletter. As soon as you unsubscribe, your data will only be stored statistically and anonymously.

You have the possibility to object to the newsletter tracking at any time.

Your rights as a data subject

You have the following rights with respect to your personal data:

  • You may request confirmation from us as to whether we process your personal data and, if so, you have a right of access to that personal data and to the information specified in Art. 15 GDPR.
  • According to Art. 16 GDPR, you have the right to demand the correction of incorrect personal data without delay and, if necessary, the completion of incomplete personal data.
  • You have the right to demand that we delete your personal data immediately if one of the reasons listed in Art. 17 GDPR applies to the individual cases.
  • You have the right to demand the restriction of the processing if one of the conditions listed in Art. 18 GDPR is fulfilled.
  • If the requirements of Art. 20 GDPR are met, you have the right to demand data transmission.
  • If we process your data on the basis of your consent, which you have given us, you can revoke this consent at any time. The revocation does not affect the lawfulness of the processing which took place on the basis of the consent up to the revocation, i.e. the revocation influences the lawfulness of the processing of your personal data only after it has been declared to us.
  • You also have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of your personal data violates the GDPR (Art. 77 GDPR). You may exercise this right with a supervisory authority in the Member State of your residence, place of work or place of presumed infringement. An overview of the supervisory authorities in Germany can be found here: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
  • Under Article 21 GDPR, you are entitled to object to the processing based on Article 6 Para 1 clause 1 lit f GDPR. Processing is then based on Art. 6 Para.1 clause 1 lit f GDPR if, for example, processing is not necessary for the performance of a contract but is based on a balancing of interests.