Data privacy policy and consent to data use

We welcome your visit to our home page and thank you for your interest in our company. Our interactions with our clients and interested parties are a matter of trust. We really value the trust extended to us, meaning that we are committed to exercising great care when handling your data and protecting it from misuse.
    
We take the protection and confidential treatment of your personal data seriously and therefore strive to make you feel safe and at ease during your visit to our website. For this reason, we act only in compliance with the valid legal stipulations concerning the protection of personal data and data security. The purpose of this data privacy information is therefore to provide you with information regarding the data that we store and how we use it – subject to existing German data protection regulations of course.

The Estrel Berlin operates in accordance with the EU General Data Protection Regulation (EU GDPR). In the following, we explain what information we collect when you visit our website and how this information is used.

Overview

I.   Name and address of data controller
II.  Name and address of data protection officer
III. General information on data processing
IV.  Provision of the website and creation of log files
V.   Contact form / e-mail contact
VI.  Advice, advertising and market research
VII. Online booking via the website
IIX. Newsletter service
IX.  Use of cookies
X.   Protection of minors
XI.  Rights of the data subject
XII. Right to lodge a complaint with a regulatory authority
XIII.Security
XIV. User declaration of consent

I. Name and address of data controller

The data controller, within the meaning of the EU GDPR and other national data protection laws of the member states as well as other data protection regulations, is:

S.I.C. Stars in Concert Veranstaltungs GmbH, Sonnenallee 225, D-12057 Berlin, Deutschland

Tel.: +49 (0)30 6831 0, Telefax: +49 (0)30 6831 2345, Mail: news@starsinconcert.com

II. Name and address of data protection officer

The data controller’s data protection officer is:

Andreas Thurmann, DataSolution Thurmann GbR, Isarstr. 13, D-14974 Ludwigsfelde, Germany, Tel.: +49 (0)3378 202513, Fax: +49 (0)3378 202514, E-mail: mail@hoteldatenschutz.de

III. General information on data processing

1. Scope of processing personal data
In principle, we collect and use the personal data of our users only insofar as is necessary for the provision of a functional website and for our content and services. Collection and use of personal data takes place regularly only after consent from the relevant user. An exception is made in cases where it is not possible to obtain consent in advance for objective reasons and where processing of the data is permitted by statutory regulations.

2. Legal basis for processing personal data
Insofar as we obtain consent from the data subject for personal data processing operations, Art. 6 (1) a General Data Protection Regulation (GDPR) shall serve as the legal basis. Where the processing of personal data is required for the fulfilment of a contract to which the data subject is party, Art. 6 (1) b GDPR shall serve as the legal basis. This shall also apply to all processing operations required for the execution of pre-contractual measures. Insofar as the processing of personal data is required for the fulfilment of a legal obligation (statutory conditions) to which our company is bound (e.g. Federal Registration Act), Art 6 (1) c GDPR shall serve as the legal basis. However, if processing is necessary to safeguard a legitimate interest of our company or of a third party and the interests, basic rights and fundamental freedoms of the data subject do not outweigh the aforementioned legitimate interest, Art. 6 (1) f GDPR shall serve as the legal basis for processing.

3. Deletion of data and storage duration
Personal data of the data subject is deleted or blocked as soon as the purpose for storage no longer applies. Storage beyond this may take place if this is provided for by the European or national legislator in EU regulations, laws or other provisions to which the data controller is subject. Data shall also be blocked or deleted once the storage period prescribed by the aforementioned standards expires, unless further storage of the data is necessary for the conclusion or fulfilment of a contract.


IV. Provision of the website and creation of log files

1. Description and scope of data processing
Each time this website is accessed, our system records data and information from the computer system of the inquiring computer by means of an automated system. The following data is collected as part of this process:

•    Information about the browser type and version used
•    The user’s operating system
•    The user’s IP address
•    Time and date of access
•    Websites from which the user’s system has come to our website
•    Websites accessed by the user’s system via our website

This data is also stored in our system’s log files. This data is not stored together with other personal data of the user. It is therefore not possible to create personal user profiles. The stored data shall only be evaluated for statistical purposes.

2. Legal basis for data processing
The legal basis for the temporary storage of data and log files is to safeguard the legitimate interests of our company, Estrel Berlin.

3. Purpose of data processing
The system temporarily stores the user’s IP address in order to make the website available on the user’s computer. To do this, the user’s IP address must be stored for the duration of the session.

The storage in log files is carried out to ensure the functional capability of the website. The data also helps us to optimise the website and ensure the security of our IT systems. No data is evaluated for marketing purposes in this context.

This is also the reasoning behind our legitimate interest in data processing.

4. Storage duration
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. When data is collected in order to make the website available, this is the case when the respective session ends.

When data is stored in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the IP addresses of users are deleted or scrambled so that assignment to the inquiring client (data subject) is no longer possible.

5. Option for objection and elimination
The collection of data in order to make the website available and the storage of data in log files is necessary for operating the website. Therefore, the user has no right of objection.

V. Contact form / e-mail contact

1. Description and scope of data processing
Insofar as a contact form is provided on our website, this may be used to make contact electronically. Should a user contact us via the contact form, the data entered in the input template shall be transferred to us and then stored. This data includes: title, first name and surname, address, e-mail address, telephone number as well as the reason for contact.

It is also possible to contact us using the e-mail address provided. In this case, personal data of the user which is transmitted along with the e-mail shall be stored.

No data shall be disclosed to third parties in this context. Data shall be used exclusively for the purposes of correspondence.

2. Legal basis for data processing
Our legitimate interest in data processing within the context of making contact with the inquirer constitutes the initial legal basis for data processing. If the purpose of making contact is to conclude a contract, the initiation of a business relationship or of a contractual relationship shall constitute the additional legal basis for data processing.

3. Purpose of data processing
We only process personal data taken from the input template of the contact form for the purposes of making contact. If we are contacted by e-mail, we also have a necessary legitimate interest to process data.

Other personal data processed during the submission process serves to prevent misuse of the contact form and to guarantee the security of our IT systems.

4. Storage duration
Data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent by e-mail, data is deleted when the respective correspondence with the user has ended. Correspondence concludes when it can be inferred from the circumstances that the matter in question has been conclusively resolved.

If contact is made based on a pre-contractual relationship (offer or reservation request), the transmitted data shall be additionally stored in our hotel and/or event software and used for executing contracts. Should no contractual relationship arise, we shall delete the data after a period of one year from the year end.

5. Option for objection and elimination
The inquirer (data subject) can revoke his/her consent to the processing of personal data at any time. We have set up the e-mail address news@starsinconcert.com for this purpose.

Please note that in the case of an objection, correspondence cannot be continued, and we cannot continue to make offers, etc.

In this case, all personal data stored at the time of making contact shall be deleted.

VI. Support, advice und advertising to corporate clients

1. Description and scope of data processing
In order to provide support, advice and advertising to corporate clients, in addition to information about the business partner or potential business partner, we also collect and use information about the contact person, telephone number and postal address. The information is taken from a variety of sources, either by requesting it (e-mail or by phone) or at events, fairs, from business cards received by our sales staff, etc.

No data shall be disclosed to third parties in this context. Data is used exclusively for the aforementioned purposes.

2. Legal basis for data processing
Our legitimate interest in data processing shall otherwise constitute the legal basis for data processing. If the purpose of making contact is to conclude a contract, the initiation of a business relationship or of a contractual relationship shall constitute the additional legal basis for data processing. In order to improve our services, we manage all data received in the CRM module of our central hotel software within the Estrel Hotel.

3. Purpose of data processing
We use contact information exclusively for our own purposes and for designing our own sales activities based on demand.

4. Storage duration
No specific deadline has been set with regard to deletion. However, in the event that our Sales department has had no contact with a corporate contact for a period of three years, the Sales department shall decide whether the data of the corporate contact person can be deleted.

If contact is made based on a pre-contractual relationship (offer, booking or reservation request), the transmitted data shall be additionally stored in our hotel software and used for executing contracts. Should no contractual relationship arise, we shall delete the data after a period of one year from the year end.

5. Option for objection and elimination
The corporate contact person can revoke his/her consent to the processing of personal data at any time. We have set up the e-mail address news@starsinconcert.com for this purpose.

In such cases, all personal data of the contact which is stored in relation to the business partner shall be deleted.


VII. Online booking via the website

1. Description and scope of data processing
Our website provides users with the opportunity to book rooms or make arrangements for the Estrel Berlin. Should a user contact us via the contact form, the data entered in the input template shall be transferred to us and then stored. This data includes: first name, surname, e-mail address, telephone, e-mail, mailing address and contact partner for corporate clients, as well as, where appropriate, the name and contact details of guests, travel dates, wishes/requests, payment information, date and time.

In this context there will initially be no further disclosure of data to third parties. The data will be used exclusively for the handling of the booking and for purposes of communication. In the event of a legitimate interest, in order to obtain information about the availability of natural persons involved in business and legal persons, and information about their credit rating, we may submit an information request to IHD Gesellschaft für Kredit- und Forderungsmanagement mbH, Augustinusstr. 11 B, 50226 Frechen. Further information on this is available under this link.


2. Legal basis for data processing
The conclusion of an accommodation contract with the user shall constitute the legal basis for data processing.

The transmitted data shall be stored in our hotel software and used for executing contracts. Should no contractual relationship arise, we shall delete the data after a period of one year from the year end.

3. Purpose of data processing
We only process personal data taken from the input template of the contact form for the purposes of processing booking inquiries and completing payment transactions.

4. Storage duration
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of a contractual relationship, we will delete the data received as soon as national, commercial, statutory or contractual retention requirements are met.

5. Option for objection and elimination
The user can revoke his/her consent to the processing of personal data at any time. We have set up the e-mail address news@starsinconcert.com for this purpose.

Please note that in the case of an objection, we cannot complete the booking or continue to carry out correspondence.

VIII. Newsletter service

1. Description and scope of data processing
There are a number of different options provided on our website for subscribing to our newsletter service. Should a user contact us via the contact form, the data entered in the input template shall be transferred to us and then stored. This data includes: e-mail address, title, first name, surname, company, address as well as the type of newsletter.

When you subscribe to a newsletter via our websites, your data is entered in our newsletter tool: dailypoint der Toedt, Dr. Selk & Coll. GmbH, Augustenstr. 79, D-80333 Munich, Germany. The service provider has agreed to handle your transmitted data in a manner compliant with data protection, and takes all organisational and technical measures to protect your data.

Should we otherwise receive an e-mail address where the recipient clearly informs us that he/she would like to receive our newsletter, we shall collect his/her data using the input template provided on our website.

No data shall be disclosed to third parties in this context. Data shall be used exclusively for the purposes of sending the newsletter.

2. Legal basis for data processing
The provision of the recipient’s consent shall constitute the legal basis for data processing. This is ensured through a double opt-out procedure.

3. Purpose of data processing
We process personal data exclusively for the purposes of sending the individual newsletter.

4. Storage duration
Data shall be deleted as soon as the newsletter service is unsubscribed.

5. Option for objection and elimination
The recipient can revoke his/her consent to the processing of personal data at any time. Every newsletter provides the option for a recipient to unsubscribe. We have set up the e-mail address news@starsinconcert.com for this purpose. Please inform us of your e-mail address in your request.

IX. Use of cookies

1. Description and scope of data processing
Cookies are small files that enable us to store specific user-related information on your computer when visiting our website. Cookies help us to determine the number of users who have used our website and the usage frequency, and they allow us to organise our products and services in the most convenient and effective way possible for you.

We use ‘session cookies’, which are stored temporarily on your computer for the period in which you use our website. Session cookies are stored on your data carrier and are used to ensure specific settings and functionalities on our website through your browser. The cookies we use will be deleted at the end of the browser session, i.e. when you close your browser.

We also use cookies on our website that allow for the analysis of user browsing habits. In this way, the following data can be transmitted: entered search terms, frequency of page views, use of website functions. Technical measures are employed to pseudonymise user data which is collected in this manner. As a result, it is not possible to assign data to an inquirer (data subject). The data will not be stored together with other user personal data. When visiting our website, the user is informed about the use of cookies for the purposes of analysis. His/her consent to the processing of personal data is also obtained in this context. The user is also referred to the data privacy policy at this point.

2. Legal basis for data processing
Our legitimate interest in data processing shall constitute the legal basis for the processing of personal data using cookies that are technically necessary.

The provision of the user’s consent for this specific purpose shall constitute the legal basis for the processing of personal data using analysis-based cookies.

3. Purpose of data processing
Cookies which are technically necessary are used to simplify website use for users. Some of our website’s functions cannot be offered without the use of cookies. These services require the browser to be recognised again following a page change. The user data collected by technically necessary cookies will not be used to create user profiles.

Analysis cookies are used to improve the quality of our website and its content. Such cookies enable us to learn how the website is used so that we can continually improve our offer.

4. Storage duration, option for objection and elimination
Cookies are stored on the user’s computer, which will transmit them to our website. This will grant you as the user complete control over the usage of cookies. You can deactivate or restrict the transmission of cookies by changing your Internet browser’s settings. Previously stored cookies can be deleted at any time. Cookies can also be deleted automatically. In the event that cookies are deactivated for our website, certain features of our website may no longer be available.

It is also possible to use our offers without any cookies or scripts. You may deactivate the storage of cookies and scripts in your browser, you may restrict cookies and script on certain websites, or you may set up your browser in such a way that you are notified whenever a cookie is activated. You can delete cookies from your computer’s hard drive at any time.

You can install a browser add-on to block scripts. NoScript for Firefox and ScriptSafe for Google Chrome are examples of such browser add-ons. These not only block every type of Javascript, they also block selected trackers, Java, Flash and other plug-ins on websites.

If you are concerned about third-party cookies, you can disable just these cookies and still enable the cookies which allow our website to function properly.

Here are some instructions on how to disable cookies:

Mozilla Firefox

Google Chrome

Internet Explorer

Safari

Please note, however, that these changes may affect the way in which the website is displayed or limit its functionality.

In the following, we provide further information about the cookies used on our website.
These cookies allow us to tailor the features and content of the website to you by storing your preferences. Cookies can be used, for example, to store your user data in our forum or to make a language selection. They can also be used to provide interactive information so that you can view our virtual catalogues or watch videos, for example.

Cookie name     Valid             Purpose of the cookie
        
ISOTOPE_TEMP_CART    1 month    The reservation function uses this cookie.

5. Supplementary information
In addition to the information provided above regarding the use of cookies, we would like to draw your attention to the following:

Use of Google Analytics, Google DoubleClick Cookies, Google Convers Tracking and Google Remarketing
Our website may use Google Analytics, Google DoubleClick Cookies, Google Convers Tracking and Google Remarketing. These services are provided by Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (‘Google’).

This website uses Google Analytics, a web analysis service provided by Google Inc. (‘Google’). Google Analytics uses so-called ‘cookies’. These are text files stored on the user’s computer which facilitate an analysis of website usage. The information generated by the cookie about the use of this website by the user is generally sent to a Google server in the USA and stored there. In the event that IP anonymisation is activated on this website however, your IP address will first be truncated by Google within the member states of the European Union or in other states that are parties to the Agreement on the European Economic Area. The full IP address will only be sent to a Google server in the USA and truncated there in exceptional cases. IP anonymisation is active on this website. On behalf of the operator of this website, Google will use this information to evaluate the use of the website, to compile reports on website activities and to provide the website operator with other services related to website activity and Internet usage. The IP address provided by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by changing the respective settings in your browser software; however, please note that you may not be able to use all features of this website in full. You may also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de. As an alternative to using the browser add-on or within browsers on mobile devices, please click this link to prevent future detection by Google Analytics within this website. This will store an opt-out cookie on your device. If you delete your cookies, you must click this link again. The explanations provided above in Section XI No. 1 to 4 shall apply accordingly.

Deactivation of Google advertising
(http://www.google.com/privacy_ads.html) or on the opt-out page of the Network Advertising Initiative (http://www.networkadvertising.org/managing/opt_out.asp)

Google Tag Manager
This website uses Google Tag Manager. Google Tag Manager is a solution that allows website tags to be managed by marketers using an interface. The Tag Manager tool itself (which implements the tags) is a cookieless domain and does not record any personal data. The tool causes other tags to be activated which may, for their part, record data under certain circumstances. Google Tag Manager does not access this information. If recording has been deactivated at the domain or cookie level, this setting will remain in place for all tracking tags implemented with Google Tag Manager.

Use of Facebook Plug-ins (Like button), Instagram and YouTube
Plugins of the social network Facebook, operated by Facebook Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA, are integrated on our website pages. You can recognise Facebook plug-ins by the Facebook logo or the ‘Like’ button on our pages. You can find an overview of Facebook plug-ins here: developers.facebook.com/docs/plugins/.

When you visit our pages, the plug-in establishes a direct connection between your browser and the Facebook server. Facebook thereby receives the information that you have visited our site from your IP address. If you click the Facebook ‘Like’ button while you are logged into your Facebook account, you can link the contents of our pages to your Facebook profile. In this way, Facebook can attribute the visit on our webpages to your user account. Please note that we, as the provider of the webpages, do not receive any notification of the content of transmitted data from Facebook, nor do we receive any notification of its usage.

You can find more information about this in the data privacy policy of Facebook at de-de.facebook.com/policy.php. If you do not wish for Facebook to attribute the visit to your Facebook user account, please log out of your Facebook user account.

Use of Google Maps
This website uses Google Maps API for the purpose of visually displaying geographical information. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps storage of your IP address is required. This information will usually be transferred to, and stored on, a server in the USA. Google may transfer this information to third parties provided this is required by law or such third parties process these data on behalf of Google. Google will not link your IP address with other Google data under any circumstances. Nevertheless, it is technically possible that Google may identify at least some users on the basis of the data received. In addition, it would be technically possible for Google to process personal data and personal profiles of website users for other purposes over which we do not have, and cannot have, any control. This, and the fact that data are being transmitted to the USA, is problematic from a data protection perspective.

2. Legal basis for processing personal data
The using of Google Maps with the user shall constitute the legal basis for data processing.

3. Purpose of data processing
The purpose of using Google Maps is to allow the user to see our location on the website and to give them the ability to identify different directions through the services of Google Maps.

4. Storage duration, option for objection and elimination
You have the option of deactivating the Google Map service and thereby prevent the transfer of data to Google: Simply deactivate JavaScript in your browser.  However, we would like to point out that, in this case, you will be unable to use the map display.

X. Protection of minors

This service is directedly mainly at adults. We do not currently market any services specifically aimed at children. As a result, we do not knowingly collect age rating information, nor do we knowingly collect personal information from children under the age of 16. We do, however, advise all visitors to our website who are under the age of 16 to avoid disclosing or providing any personal information to our service. In the event that we discover that a child under the age of 16 has provided personal information to us, we shall delete the child's personal information from our files, insofar as this is technically possible.

XI. Rights of the data subject

When your personal data is processed, you become the data subject within the meaning of the GDPR and you shall have the following rights in relation to us (‘the data controller’):

You have a right to information about the personal data stored about you, including the purpose of processing, as well as about any transfer of data to third parties and the duration of data storage.

Should the data be incorrect or no longer required for the original purpose for which it was collected, you can request that the data be corrected, deleted or the processing of data restricted. Insofar as provided for in the processing procedures, you can also view and correct your data yourself as necessary. You shall have the right to object at any time, on compelling legitimate grounds relating to your particular situation, to the processing of your personal data, insofar as the processing is based on a legitimate interest. Following an objection, the data controller shall no longer process the personal data relating to you unless the data controller can prove compelling reasons for processing which warrant protection and which outweigh your interests, rights and freedoms, or can prove that the processing serves the purpose of asserting, exercising or defending legal claims. If the personal data relating to you is processed for the purpose of direct advertising, you have the right to object at any time to the processing of the personal data relating to you for the purpose of such advertising; this also applies to profiling insofar as it is directly connected with such direct advertising. If you object to processing for the purposes of direct advertising or profiling, the personal data relating to you shall no longer be used for these purposes.

You have the right to revoke your declaration of consent under data protection law at any time. Revocation of consent does not affect the legality of processing carried out on the basis of consent up to the time of revocation.

Should you have any questions relating to your rights and how to exercise your rights, please contact:

Stars in Concert    
S.I.C. Stars in Concert Veranstaltungs GmbH
Sonnenallee 225
D-12057 Berlin
Germany

Tel.: +49 (0)30 68310
Fax: +49 (0)30 68312345
E-mail: news@starsinconcert.de

Data Protection Officer
DataSolution Thurmann GbR
Mr Andreas Thurmann
Isarstr. 13
D-14974 Ludwigsfelde
Germany

Tel.: +49 (0)3378 202513
Fax: +49 (0) 3378 202514
E-mail: mail@hoteldatenschutz.de

XII. Right to lodge a complaint with a regulatory authority

Without prejudice to any other administrative or judicial remedy, you (the data subject) have the right to lodge a complaint with a regulatory authority for data protection, in particular in the member state of your habitual residence, place of work or the place of the alleged infringement if you believe that the processing of personal data relating to you infringes data protection.

The regulatory authority with which the complaint has been lodged shall inform the complainant about the progress and the outcome of the complaint including the possibility of judicial remedy.

Further information can be found on the website of the Federal Commissioner for Data Protection and Freedom of Information by clicking this link.

XIII. Security

In line with Article 32 GDPR, Estrel Berlin uses technical and organisational security measures to protect the data which we manage against accidental or deliberate manipulation, loss, destruction or access by unauthorised persons. Our security measures are subject to constant improvement to match the pace of technological developments. Access to this data is permitted only to a few authorised individuals and those persons concerned with the relevant technical, commercial and editorial support of these servers.

XIV User declaration of consent

By using our websites and the offers contained therein, you agree that we can store the personal data you have voluntarily submitted to us and process and use this data in compliance with the data privacy policy.

We reserve the right to change, update or supplement these data protection guidelines at any time. Any revised data protection guidelines shall apply only to personal data that has been collected or changed since the revised guideline entered into force.

Last revised | May 2018