Privacy Policy

bristolberlin.com

DHB Hotel Betriebs GmbH, Lietzenburger Straße 93 – 95, 10719 Berlin (hereinafter referred to as Bristol Berlin), as the provider of the website bristolberlin.com and the responsible body, takes its obligation to data protection very seriously and designs its website in such a way that only as little personal data as necessary is collected, processed and used. Under no circumstances will personal data be rented or sold to third parties for advertising purposes.

Access to personal data at Bristol Berlin is restricted to those individuals who require this data to perform their duties within the responsible body, who are informed of the legal provisions on data protection, and who have committed themselves to complying with them in accordance with applicable legal provisions (Article 5 of the EU General Data Protection Regulation (GDPR)). According to Article 6, Paragraph 1 of the GDPR, the collection, processing, use, and transmission of personal data collected takes place only to the extent necessary for the performance of a contractual relationship between Bristol Berlin, as the responsible body, and the visitor, as the data subject.

Changes in the purpose of processing and data use

Since the processing methods used may change or evolve due to technological advances and organizational changes, we reserve the right to further develop this privacy policy in accordance with the new technical framework. We therefore ask you to review Bristol Berlin’s privacy policy from time to time. If you do not agree with the further developments that occur over time, you can request in writing, in accordance with Art. 17 GDPR, the deletion of data that is not stored based on other legal requirements, such as commercial or tax retention obligations.

Anonymous data collection

You can generally visit the responsible party’s websites without telling us who you are. We only learn the name of your internet service provider, the website from which you visit us, and the websites you visit while on our site. The legal basis for this data collection is Art. 6 (1) (b) GDPR. This information is evaluated for statistical purposes. You remain anonymous as an individual user.

Collection and processing of personal data

Personal data is only collected if you provide it to us voluntarily, e.g. for newsletter registration, and give your consent to the use of the data (Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDG). The controller complies with the provisions of Art. 5 and 6 GDPR. As part of the personalized services of the responsible body, your registration data will be processed on the condition of your consent for the purpose of sending our newsletter or for the needs-based design of the electronic services offered. You have the option to object to the storage of your personal data at any time. To do so, please send an e-mail to reservations.bristolberlin@ihg.com with the subject line “Unsubscribe from databases”, stating the website.

Your personal data is processed and used in accordance with the provisions of the GDPR.

Storage period

We only store your personal data for as long as we need it to provide the website you use or to fulfill contractual relationships with you, or as long as we have your consent or we have another legitimate interest in data processing. Any further storage is only based on legal regulations (e.g., the German Fiscal Code (AO)/German Commercial Code (HGB)).

Rights of those affected

To the extent that we process your personal data, you have the following rights:

Right to withdraw consent given

If the processing of personal data is based on consent, you have the right to revoke this consent. This revocation applies to the future.

Right to information

You can request confirmation from us as to whether we process personal data concerning you. If this is the case, you can request the following information:

the purposes of processing;
which personal data are processed;
the recipients/categories of the recipients of the data in the event of data transfer to third parties, as well as, where applicable, the name and country of residence of the third party;
the storage duration of the data;
the existence of a right to rectification or erasure, or the existence of a right to restriction of processing or a right to object
the existence of a right to lodge a complaint with the competent supervisory authority;
Unless the data was collected directly from you, all available information about the origin of the data.
the existence of automated decision-making

The requested information will be provided to you within one month of receipt of your written request. Please note that information can only be provided if the identity of the petitioner can be clearly established.

Right to rectification

You have the right to request that we immediately correct your personal data if it is inaccurate.

Right to data erasure (“right to be forgotten”)

You have the right to request that we delete your personal data if one of the following reasons applies:

The personal data are no longer necessary for the purposes for which they were collected or processed.
We are under no legal obligation to store the data.
You withdraw your consent on which the processing was based, and there is no other legal basis for the storage.
They object to the processing and there is no legal basis for further storage.
The personal data were collected and processed unlawfully from the outset.
The deletion is necessary to fulfill a legal obligation.

Right to restriction of processing

You have the right to request that we restrict the processing of your personal data if one of the following conditions applies:

You contest the accuracy of the processing of your personal data for a period that allows us to verify the accuracy of the personal data;
The processing of your personal data is actually unlawful and you request the restriction of the use of the personal data instead of its deletion;
We no longer need the personal data for the purposes of processing, but you need it to assert your legal claims, or
You have objected to the processing, but it is not yet clear whether our legitimate interests outweigh your legitimate interests.

Right to data portability

You have the right to receive the personal data concerning you that we store in a common and machine-readable format and you have the right to transmit this data to another controller without hindrance from us.

Right of objection

You have the right to object at any time to the processing of your personal data based on Art. 6 (1) (e) or (f) GDPR. We will then no longer process this data unless we can demonstrate legitimate grounds for the processing that override your interests.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with the data protection supervisory authority responsible for the responsible body.

Export and processing of data in countries outside the European Economic Area

As a general rule, your personal data will not be exported to countries outside the European Economic Area (hereinafter referred to as the EEA). If an export does occur in exceptional cases, you will be informed of this in the relevant section of this privacy policy. In the exceptional case of data transfer to a third country, Bristol Berlin ensures the guarantees required by the GDPR for an adequate level of data protection by concluding standard contractual clauses, unless an adequacy decision has been issued by the EU Commission for the third country. Furthermore, when concluding standard contractual clauses, Bristol Berlin has conducted additional checks to ensure compliance with the data protection level in the respective third country by the specific provider.

The service providers engaged by the controller are generally based and operate their IT infrastructure within the EEA. This also applies to any use of cloud-based services. Contracts are in place with these service providers that comply with the data protection and data security requirements of the GDPR. Even if external service providers are engaged, Bristol Berlin remains the controller.

Use and sharing of personal data

The personal data collected on the website of the responsible party will only be used without your consent to process your contract and inquiries. Furthermore, your data will only be used for advertising and market research purposes by the responsible party if you have previously given your consent. You can, of course, revoke your consent at any time with future effect.

Furthermore, no data will be passed on to other third parties. To the extent that the responsible party uses service providers to provide its services, the necessary contracts have been concluded in accordance with Art. 28 GDPR. If you require further information regarding the contracting parties used, please contact the data protection officer.

For details on the individual data processing on this website

External links

For your information, you will find links on our website to third-party websites (e.g., Google Maps). If this is not clearly visible, we will inform you that this is an external link. The responsible party has no influence whatsoever on the content and design of these third-party websites. Therefore, the guarantees of this privacy policy do not apply to external providers.

Redirect to the website www.ihg.com

You cannot book rooms directly on our website. However, the “Check Availability” and “Book Now” buttons will redirect you to the website www.ihg.com , which is operated by Six Continents Hotels, Inc., Three Ravinia Drive, Atlanta, GA 30346, USA.

Use of cookies

The responsible party uses so-called “cookies” to individually design and optimize the customer’s online experience and online time. A cookie is a text file that is either temporarily stored in the computer’s RAM (“session cookie”) or saved on the hard drive (“permanent” cookie). Cookies contain, for example, information about the user’s previous accesses to the corresponding server or information about which offers have been accessed previously. Cookies are not used to run programs or load viruses onto your computer. Rather, the main purpose of cookies is to provide a service specifically tailored to the customer and to make using the service as convenient as possible.

The responsible body uses session cookies as well as permanent cookies.

Session cookies
The responsible party primarily uses “session cookies,” which are not stored on the customer’s hard drive and are deleted when the user closes the browser. Session cookies are used for login authentication and load balancing (balancing system load). These cookies are essential for the provision of our website (Art. 6 (1) (b) and (f) GDPR in conjunction with Section 25 (2) TDDDG).

Persistent cookies
In addition, the controller uses “permanent cookies” to save the personal usage settings entered by a customer when using the controller’s services, allowing them to personalize and improve the service, provided you have given your consent (Art. 6 (1) (a) GDPR in conjunction with Section 25 (1) TDDDG). Persistent cookies ensure that the customer can access their personal settings again when they visit the controller’s website again.

In addition, the service providers commissioned by the responsible party to analyze user behavior use permanent cookies to recognize recurring users. These services store the data transmitted by the cookie exclusively anonymously. An assignment to the customer’s IP address is not maintained.

For more information about the permanent cookies used by the controller or its service providers, please see our Cookie Policy .

Avoiding cookies
Visitors have the option to refuse cookies at any time. This is usually done by selecting the appropriate option in the browser settings or through additional programs. Further information can be found in the help function of the browser used by the customer. If the customer decides to disable cookies, this may reduce the scope of the service and have a negative impact on the use of the services provided by the responsible party.

Use of analysis programs

The responsible body conducts analyses of its customers’ behavior when using its service or has these analyses carried out, provided they give us their consent. For this purpose, anonymized or pseudonymized user profiles are created. The user profiles are created for the sole purpose of continuously improving the responsible body’s service. Specifically, Bristol Berlin uses the open source web analysis service Matomo from Matomo, 7 Waterloo Quay PO625, 6150 Wellington, New Zealand. Matomo uses technologies that enable cross-page recognition of the user to analyze user behavior (e.g. cookies or device fingerprinting). The information collected by the Matomo software about the use of this website is stored on our server. When analyzing with Matomo, we use IP anonymization. This means that your IP address is shortened before the analysis so that it can no longer be clearly assigned to you.

With the help of Matomo, we are able to collect and analyze data about the use of our website by visitors. This allows us to determine, among other things, when and which page views were made and from which region they originate. We also record various log files (e.g., IP address, referrer, browsers and operating systems used) and can measure whether our website visitors perform certain actions (e.g., clicks, purchases, etc.).

Matomo is a web behavior analysis tool that can be configured to minimize data usage. The EU Commission has issued an adequacy decision for New Zealand pursuant to Art. 45 GDPR.

The legal basis for the processing of your data is your consent in accordance with Art. 6 (1) (a) GDPR in conjunction with Section 25 (1) TDDDG.

Linking to our social media presence

On our website we use icons to link to our presence on the following social networks:

Facebook/ Instagram – Instagram Privacy Policy
Instagram – LinkedIn Privacy Policy

Online offers on social media platforms

We offer online services on various social media platforms to provide information and to be able to contact you. In these cases, we are generally jointly responsible with the platform operator within the meaning of Art. 26 GDPR.

We have no influence on the processing of personal data by the respective platform operator. As a rule, when you visit our social media offerings, the platform operator stores cookies in your browser. These cookies store your usage behavior and interests for market research and advertising purposes. The platform operators use the usage profiles thus obtained – usually across devices – to show you personalized advertising. Data processing may also affect individuals who are not registered as users on the respective social media platform. Under certain circumstances, your data will be processed outside the European Union, which may make it more difficult to enforce your rights. However, when selecting such social media platforms, we ensure that the operators are committed to complying with EU data protection standards.

The processing of your personal data when you visit one of our social media platforms is based on our legitimate interests in a diverse external presentation of our company and the use of effective information and communication with you. The legal basis for this is Art. 6 (1) (f) GDPR. You may also have given a platform operator your consent to data processing; in this case, Art. 6 (1) (a) GDPR is the legal basis.

Detailed information about data processing in connection with the use of our social media offerings, options for opting out, and the assertion of rights to information can be found in the privacy policy of the respective platform operator as well as in our privacy policy on the respective platform. Links to the platform operators’ privacy policies can be found in our information on the respective platforms.

If we are joint controllers with another body, you can also exercise your above-mentioned rights as a data subject vis-à-vis their data protection officer and lodge a complaint with the supervisory authority responsible for that body.

Detailed information according to Art. 13 GDPR on our individual presence on social networks can be found here:

Facebook and Instagram: LINK to separate DSE

Use our contact form

If you use our contact form to inquire about premises or other offers, for example, we will process your personal data, in particular your email address, exclusively to process your inquiry. The legal basis for data processing is Art. 6 (1) (b) GDPR.

Subscribe to our newsletter

With your consent, you can subscribe to our newsletter, with which we will inform you about our current interesting offers [add here if necessary]. The advertised [goods and services] are listed in the consent declaration.

We send newsletters, emails, and other electronic notifications with information (hereinafter “newsletters”) only with the consent of the recipients. The legal basis for data processing is Art. 6 (1) (a) GDPR. Your consent can be revoked at any time with future effect. Our newsletters contain information about our company and its offerings.

The newsletter is sent via “MailChimp”, a newsletter distribution platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.

The email addresses of our newsletter recipients, as well as their other data described in this notice, are stored on MailChimp’s servers in the USA. MailChimp uses this information to send and evaluate the newsletter on our behalf. Furthermore, according to MailChimp’s own information, MailChimp may use this data to optimize or improve its own services, e.g., to technically optimize the delivery and presentation of the newsletter or for commercial purposes, to determine which countries the recipients come from. However, MailChimp does not use the data of our newsletter recipients to contact them directly or to pass it on to third parties.

We have concluded a “Data Processing Agreement” (DPA) with MailChimp, which also includes the EU standard contractual clauses. MailChimp is also certified under the Data Privacy Framework(https://www.intuit.com/privacy/statement/data-privacy-certification/) so that an appropriate level of data protection is ensured for the transfer of data to the USA. You can find more information about MailChimp’s privacy policy here: https://mailchimp.com/legal/privacy

We use the so-called double opt-in process to register for our newsletter. This means that after you register, we will send you an email to the email address you provided, asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and the time of registration and confirmation. The purpose of this process is to verify your registration and, if necessary, to investigate any possible misuse of your personal data.

The only mandatory information required to receive the newsletter is your email address. Providing additional, separately marked data is voluntary and will be used to address you personally. After your confirmation, we will save your email address for the purpose of sending you the newsletter. The legal basis is Art. 6 (1) (a) GDPR.

You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare your revocation by clicking on the link provided in every newsletter e-mail, by sending an e-mail to reservations.bristolberlin@ihg.com or by sending a message to the contact details given in the imprint.

Consent management

We use the Cookie Bot tool from Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, for the purpose of managing your consent to data processing on this website, which we are legally obligated to obtain. The required data processing agreement has been concluded with Usercentrics. The legal basis for data processing is Art. 6 (1) (c) GDPR.

Voucher shop

As part of the ordering process for a voucher offered by us on this website, the conclusion of the contract, and the delivery of the ordered goods, we process data such as your credit card number, bank sort code, account number, name, and address when paying by credit card. This data is used exclusively to process your order and execute the contract. The legal basis for data processing is Art. 6 (1) (b) GDPR. Bristol Berlin reserves the right, within the scope of its legitimate interests, to send you further information about goods and services offered by DHB to the email address collected during the ordering process (Art. 6 (1) (f) GDPR). You have the right to object to this without incurring any costs other than the transmission costs according to the basic rates. A data processing agreement pursuant to Art. 28 GDPR has been concluded with the processor employed by Bristol Berlin, INCERT eTourismus GmbH & Co KG, Leonfeldnerstraße 328, Stiege 1 Tür 1, 4040 Linz, Austria. Your data will not be passed on to third parties unless this is absolutely necessary to fulfill the contract (e.g., passing on your address data to shipping service providers). If data is transferred to third countries, the requirements of Art. 44 et seq. GDPR for an appropriate level of data protection will be observed. Your data will be deleted no later than three years after the voucher expires, unless statutory retention periods (AO/HGB) apply.

Automated decision-making procedures

Bristol Berlin does not use automated decision-making processes.

Further information and contacts

If you have further questions regarding data protection at the responsible body, please contact our company’s data protection officer. You can inquire about which of your data we have stored. Furthermore, you can send information, requests for deletion and correction of your data, and suggestions at any time by letter or email to the following address:

Hotel Bristol Berlin
Kurfürstendamm 27 | 10719 Berlin | Germany
+49 30 8843 4704 | +49 30 8843 4805
reservations.bristolberlin@ihg.com

Link to Cookie Policy.

Please configure accordingly.