Privacy policy
I. Name and address of the controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
kommod AG
Industriering 14
9491 Ruggell
Principality of Liechtenstein
+423 220 10 10
info@hotelcentral.li
www.hotelcentral.li
II. General information on data processing
1. Scope of processing of personal data
We only process the personal data of our users to the extent necessary to provide a functional website and our content and services. The personal data of our users is only processed for the purposes agreed with them or where another legal basis (within the meaning of the GDPR) exists. We only collect personal data that is actually required to carry out and process our tasks and services or that you have provided to us voluntarily.
2. Your rights (rights of data subjects)
You have the right to request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, data portability (provided that data portability does not involve disproportionate effort), the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling.
You also have the right to withdraw any consent you have given to the use of your personal data at any time.
If you believe that our processing of your personal data violates the applicable data protection regulations, you have the option of lodging a complaint with the Data Protection Authority.
III. Description and scope of data processing
1. Provision of the website
Each time our website is accessed, our web server automatically records data and information from the computer system of the accessing device in so-called server log files. The following data is collected:
- Date and time of access
- The user’s IP address
- Information about the browser type and version used
We store this information for a maximum of 30 days. It is stored for reasons of data security, to ensure the stability and operational security of our system.
2. Cookies
We use cookies on our website to make our offering more user-friendly. Cookies are small files that your browser creates automatically and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. The cookies remain stored until you delete them. This allows us to recognise your browser on your next visit.
If you do not want this, you can set up your browser to inform you when cookies are set and to allow them only in individual cases. Please note, however, that deactivating cookies may mean that you cannot use all the functions of our website.
The legal basis for the data processed by cookies is Art. 6 (1) sentence 1 lit. f GDPR.
The cookies remain valid for an indefinite period and are then deleted by your browser.
In our cookie notice you will find all cookies listed, sorted by function and explained in detail. You can customise your settings and accordingly allow or reject only the necessary cookies or all cookies (incl. statistics, marketing, etc.).
3. Web analytics
Our website uses “Google Analytics”, a web analytics service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, to evaluate the use of the website. Google Analytics uses cookies that are stored on your computer. The information they contain about the visitor’s use of the website and the internet may be processed and evaluated by Google. The data collected by Google may be transferred by Google to countries outside the EU and the EEA, in particular the USA.
We have activated the IP anonymisation function on this website, so that your IP address is anonymised before it is transmitted to Google.
You can also prevent the use of your data by Google Analytics with the browser add-on for deactivating Google Analytics.
You can also prevent Google Analytics cookies by selecting the “necessary cookies only” button in the “Cookie information” pop-up that appears when you visit the website. The use of Google Analytics cookies is then not permitted.
The legal basis for the data processed by Google Analytics cookies is Art. 6 (1) sentence 1 lit. a GDPR (“consent”).
4. Form & email contact
If you fill in a contact form or send us an email or other electronic message, your details will only be stored for processing the enquiry and any related follow-up questions, and will only be used in connection with the enquiry.
The legal basis for processing your enquiry is Art. 6 (1) sentence 1 lit. b GDPR.
We will delete your email address once your enquiry has been dealt with.
5. Newsletter
If you subscribe to our newsletter, we will immediately send an email containing a hyperlink to the email address provided. By clicking on this link, you confirm your newsletter subscription (double opt-in procedure). If this confirmation is not received within 30 days, we will delete the email address from our temporary list and no subscription will take place.
By confirming your newsletter subscription, you consent to the storage of your email address, including the date of registration, IP address and the list name of the desired newsletter. We use your email address and any personal data collected at the same time, such as first name and last name, only to manage and send the newsletter you have requested, at the frequency specified when you subscribed.
Our newsletters contain no obvious or hidden counters, third-party advertising or links to external sites that are not directly related to the content of our newsletter.
The legal basis for sending you a newsletter is Art. 6 (1) lit. a GDPR.
Every newsletter contains information on how to unsubscribe.
The newsletter is sent via the mailing service provider “MailChimp”, a newsletter platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the mailing service provider’s privacy policy here. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with the European level of data protection (PrivacyShield). The mailing service provider is used on the basis of our legitimate interests pursuant to Art. 6 (1) lit. f GDPR and a data processing agreement pursuant to Art. 28 (3) sentence 1 GDPR.
The mailing service provider may use the recipients’ data in pseudonymised form, i.e. without assignment to a user, to optimise or improve its own services, e.g. for the technical optimisation of sending and displaying the newsletter or for statistical purposes. However, the mailing service provider does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.
IV. Data security
1. SSL encryption
During your visit to the website we use the widespread TLS procedure in conjunction with the highest level of encryption supported by your browser. You can tell whether an individual page of our website is transmitted in encrypted form by the closed key or padlock symbol in your browser’s address bar.
We also use other suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.
2. Emails sent to us
Please note that – unless explicitly agreed and configured – emails sent to us are not encrypted.