Reserve with our Best Price Guarantee
Book direct. One call. Three hotels.
Mon–Fri 8:00 AM – 6:00 PM
Book direct & save
+49 40 40113570
→
Reserve with our Best Price Guarantee
Book direct. One call. Three hotels.
Mon–Fri 8:00 AM – 6:00 PM
Book direct & save
+49 40 40113570
→
Legal Information
Privacy Policy of the Limited Partnership Apart Hotel Panorama – Hotel und Boardinghaus Betriebsgesellschaft mbH & Co.
We are pleased that you are visiting our website and thank you for your interest in our hotel. The protection of personal data is very important to us. Therefore, we process personal data—such as a data subject’s name, address, email address, or phone number—in accordance with applicable European and national laws.
If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject.
You may, of course, revoke your consent at any time with future effect. To do so, please contact the data controller. You will find the contact information at the bottom of this privacy policy.
In the following, the limited partnership Apart Hotel Panorama – Hotel und Boardinghaus Betriebsgesellschaft mbH & Co. (hereinafter referred to as “Panorama Hotels Hamburg”) would like to inform the public about the nature, scope, and purpose of the personal data it processes. Furthermore, this Privacy Policy informs data subjects of their rights.
Panorama Hotels Hamburg’s Privacy Policy is based on the terminology used by European legislators and regulators when enacting the EU General Data Protection Regulation (hereinafter referred to as the “EU GDPR”). Our Privacy Policy is intended to be easy to read and understand for the general public as well as for our guests and business partners. To ensure this, we would like to explain the terms used in advance.
In this Privacy Policy and on our website, we use the following terms, among others:
Personal data refers to any information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”). A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier, or one or more specific characteristics that reflect the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
A data subject is any identified or identifiable natural person whose personal data is processed by the controller.
Processing means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, distribution, or any other form of disclosure, the matching or linking, the restriction, erasure, or destruction.
Restriction of processing refers to the marking of stored personal data with the aim of limiting its future processing.
Profiling is any form of automated processing of personal data that involves using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that person’s work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements of that natural person.
Pseudonymization is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures that ensure the personal data is not attributed to an identified or identifiable natural person.
The controller is the natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data. If the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or the specific criteria for its designation may be provided for under Union law or the law of the Member States.
A data processor is a natural or legal person, public authority, agency, or other entity that processes personal data on behalf of the data controller.
A recipient is a natural or legal person, public authority, agency, or other body to whom personal data is disclosed, regardless of whether or not that entity is a third party. However, public authorities that may receive personal data in the course of a specific investigative mandate under Union law or the law of the Member States are not considered recipients.
A “third party” is a natural or legal person, public authority, agency, or other entity other than the data subject, the controller, the processor, and the persons authorized to process the personal data under the direct responsibility of the controller or the processor.
Consent means any freely given, specific, informed, and unambiguous indication of the data subject’s wishes, expressed in the form of a statement or other clear affirmative action, by which the data subject indicates that he or she consents to the processing of personal data relating to him or her.
The data subject has the option to register on the data controller’s website by providing personal data. The specific personal data transmitted to the data controller in this process is determined by the respective input form used for registration. The personal data entered by the data subject is collected and stored exclusively for internal use by the data controller and for its own purposes. The data controller may arrange for the transfer of such data to one or more data processors (such as a package delivery service), who will also use the personal data exclusively for internal purposes attributable to the data controller.
When a user registers on the data controller’s website, the IP address assigned by the data subject’s Internet service provider (ISP), as well as the date and time of registration, are also stored. This data is stored because it is the only way to prevent misuse of our services, and, if necessary, this data enables us to investigate criminal offenses and copyright infringements. In this respect, the storage of this data is necessary to protect the data controller. As a general rule, this data is not disclosed to third parties, unless there is a legal obligation to do so or the disclosure serves the purposes of criminal or civil prosecution.
The data subject’s registration, which involves the voluntary provision of personal data, enables the data controller to offer the data subject content or services that, by their very nature, can only be made available to registered users. Registered users have the option to have the personal data provided during registration completely deleted from the data controller’s database.
The data controller shall, upon request, provide any data subject at any time with information regarding which personal data concerning that data subject has been stored. Furthermore, the data controller shall correct or delete personal data at the request or upon notification by the data subject, provided that no statutory retention obligations preclude such action.
Panorama Hotels Hamburg also processes personal data if you voluntarily provide it. This occurs, for example, every time you contact us. We will, of course, use the personal data provided in this manner exclusively for the purpose for which you provided it when contacting us. The provision of this information is expressly voluntary and subject to your consent. To the extent that this information relates to communication channels (such as an email address or phone number), you also consent to us contacting you via that communication channel, if necessary, to address your inquiry.
Panorama Hotels Hamburg takes numerous technical and organizational measures to protect your personal data against accidental or unlawful destruction, alteration, or loss, as well as against unauthorized disclosure or access.
However, internet-based data transmissions, for example, may inherently involve security vulnerabilities, meaning that absolute protection cannot be guaranteed. For this reason, any data subject is free to provide us with personal data through alternative means, such as by telephone.
This website contains links to other websites (so-called external links).
As a provider of its own content, Hotel Panorama Harburg is responsible under applicable European and national laws. A distinction must be made between this proprietary content and links to content provided by other providers. We have no control over whether the operators of other websites comply with applicable European and national legal provisions. Please refer to the privacy policies provided on the respective websites for more information. Hotel Panorama Harburg assumes no responsibility for third-party content made available via links and specifically marked as such, and does not endorse such content. The provider of the website to which a link refers is solely liable for illegal, incorrect, or incomplete content, as well as for any damages resulting from the use or non-use of the information.
We use cookies to make our website user-friendly and to tailor it to your needs as effectively as possible. Cookies are small text files that, as soon as you visit a website, are sent from a web server to your browser and stored locally on your device (PC, laptop, tablet, smartphone, etc.).
Numerous websites and servers use cookies. Many cookies contain what is known as a cookie ID. A cookie ID is a unique identifier for the cookie. It consists of a string of characters that allows websites and servers to associate the cookie with the specific web browser in which it was stored. This enables the visited websites and servers to distinguish the data subject’s individual browser from other web browsers that contain different cookies. A specific web browser can be recognized and identified via the unique cookie ID. This information is used to automatically recognize you when you visit the website again using the same device and to make navigation easier for you.
You can accept or reject cookies—including those used for web tracking—through your web browser’s settings. You can configure your browser to always refuse cookies or to notify you in advance when a cookie is about to be stored. However, in this case, the functionality of the website may be impaired (for example, when placing orders). Your browser also offers a feature to delete cookies (for example, via “Clear browsing data”). This is possible in all common web browsers. You can find more information on this in your browser’s user manual or settings.
The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:
• Browser type/browser version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
This data cannot be linked to specific individuals. This data is not combined with data from other sources. We reserve the right to review this data at a later date if we become aware of specific evidence of unlawful use.
The data controller processes (in this sense, also: stores) the data subject’s personal data only for the period necessary to achieve the purpose of storage or to the extent provided for by the European legislative and regulatory authorities or another legislator in laws or regulations to which the controller is subject.
If the purpose of storage no longer applies or if a retention period prescribed by the European legislative and regulatory authorities or another competent legislative authority expires, the personal data will be routinely blocked or deleted in accordance with legal requirements.
Right to Confirmation: Every data subject has the right to request confirmation from the controller as to whether personal data concerning them is being processed. If a data subject wishes to exercise this right to confirmation, they may contact the controller at any time.
Right of Access: Any individual whose personal data is being processed has the right to obtain, at any time and free of charge, information from the data controller regarding the personal data stored about them, as well as a copy of that information. Furthermore, the European legislator has granted the data subject the right to receive the following information:
• the purposes of processing
• the categories of personal data being processed
• the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations
• if possible, the planned duration for which the personal data will be stored, or, if this is not possible, the criteria for determining that duration
• the existence of a right to have personal data concerning them rectified or erased, or to have processing restricted by the controller, or a right to object to such processing
• the existence of a right to lodge a complaint with a supervisory authority
• If the personal data is not collected from the data subject: All available information regarding the origin of the data
• the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the EU GDPR and—at least in such cases—meaningful information regarding the logic involved, as well as the scope and intended effects of such processing on the data subject
Furthermore, the data subject has the right to be informed whether personal data has been transferred to a third country or to an international organization. If this is the case, the data subject also has the right to receive information about the appropriate safeguards in connection with the transfer.
If a data subject wishes to exercise this right of access, they may contact the data controller at any time.
Right to Rectification: Any data subject whose personal data is being processed has the right to request the immediate rectification of inaccurate personal data concerning him or her. Furthermore, the data subject has the right to request that incomplete personal data be completed—including by means of a supplementary statement—taking into account the purposes of the processing.
If a data subject wishes to exercise this right to rectification, they may contact the data controller at any time.
Right to Erasure (Right to Be Forgotten): Any data subject whose personal data is being processed has the right to request that the controller erase the personal data concerning him or her without delay, provided that one of the following grounds applies and the processing is not necessary:
• The personal data was collected or otherwise processed for purposes for which it is no longer necessary.
• The data subject withdraws their consent on which the processing was based pursuant to Article 6(1)(a) of the EU GDPR or Article 9(2)(a) of the EU GDPR, and there is no other legal basis for the processing.
• The data subject objects to the processing pursuant to Article 21(1) of the EU GDPR, and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) of the EU GDPR.
• The personal data was processed unlawfully.
• The erasure of the personal data is necessary to comply with a legal obligation under Union law or the law of the Member States to which the controller is subject.
• The personal data was collected in connection with information society services offered pursuant to Article 8(1) of the EU GDPR.
If any of the reasons listed above apply and a data subject wishes to request the deletion of personal data stored by Panorama Hotels Hamburg, they may contact the data controller at any time. The data subject’s request for deletion will then be fulfilled without delay.
If the personal data has been made public by Panorama Hotels Hamburg and our company, as the data controller, is obligated under Article 17(1) of the EU GDPR to erase the personal data, Panorama Hotels Hamburg shall take appropriate measures, including technical measures, taking into account available technology and the costs of implementation, to inform other data controllers who process the published personal data that the data subject has requested that these other data controllers delete all links to such personal data or copies or replicas of such personal data, provided that the processing is not necessary. The data controller will then take the necessary steps on a case-by-case basis.
Right to Restriction of Processing: Any data subject whose personal data is being processed has the right to request that the controller restrict the processing if any of the following conditions are met:
• The data subject disputes the accuracy of the personal data, for a period that allows the controller to verify the accuracy of the personal data.
• The processing is unlawful, the data subject objects to the erasure of the personal data, and instead requests that the use of the personal data be restricted.
• The controller no longer needs the personal data for the purposes of processing, but the data subject needs it to assert, exercise, or defend legal claims.
• The data subject has objected to the processing pursuant to Article 21(1) of the EU GDPR, and it has not yet been determined whether the controller’s legitimate interests outweigh those of the data subject.
If any of the above conditions are met and a data subject wishes to request the restriction of personal data stored by Panorama Hotels Hamburg, they may contact the data controller at any time. The restriction of processing will then be implemented without delay.
Right to Data Portability: Any data subject affected by the processing of personal data has the right to receive the personal data concerning them—which the data subject has provided to a controller—in a structured, commonly used, and machine-readable format. The data subject also has the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that the processing is based on consent pursuant to Article 6(1)(a) of the EU GDPR or Article 9(2)(a) of the EU GDPR or on a contract pursuant to Article 6(1)(b) of the EU GDPR, and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Furthermore, when exercising their right to data portability pursuant to Art. 20(1) of the EU GDPR, the data subject has the right to have the personal data transmitted directly from one controller to another, provided that this is technically feasible and does not infringe upon the rights and freedoms of others.
To exercise the right to data portability, the data subject may contact the data controller at any time.
Right to Object: Any data subject affected by the processing of personal data has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them that is carried out pursuant to Article 6(1)(e) or (f) of the EU GDPR. This also applies to profiling based on these provisions.
Panorama Hotels Hamburg will no longer process personal data in the event of an objection, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing is necessary for the establishment, exercise, or defense of legal claims.
If Panorama Hotels Hamburg processes personal data for the purpose of direct marketing, the data subject has the right to object at any time to the processing of personal data for such marketing purposes. This also applies to profiling to the extent that it is related to such direct marketing. If the data subject objects to Panorama Hotels Hamburg’s processing of personal data for direct marketing purposes, Panorama Hotels Hamburg will no longer process the personal data for these purposes.
In addition, the data subject has the right, for reasons arising from his or her particular situation, to object to the processing of personal data concerning him or her that is carried out by Panorama Hotels Hamburg for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) of the EU GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.
To exercise the right to object, the data subject may contact the data controller directly. The data subject is also free, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise their right to object by means of automated procedures that use technical specifications.
Automated decisions in individual cases, including profiling: Any data subject whose personal data is being processed has the right not to be subject to a decision based solely on automated processing—including profiling—that produces legal effects concerning the data subject or similarly significantly affects the data subject, provided that the decision:
• is not necessary for the conclusion or performance of a contract between the data subject and the controller, or
• is permitted under Union or Member State law to which the controller is subject, and such law provides for appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the data subject, or
• is based on the data subject’s explicit consent.
If the decision is necessary for the conclusion or performance of a contract between the data subject and the controller, or if it is made with the data subject’s explicit consent, Hotel Panorama Harburg will take appropriate measures to safeguard the rights, freedoms, and legitimate interests of the data subject, including, at a minimum, the right to request human intervention by the data controller, to present their own point of view, and to contest the decision.
If the data subject wishes to exercise rights relating to automated decisions, they may contact the data controller at any time.
Right to Withdraw Consent Under Data Protection Law: Any individual whose personal data is being processed has the right to withdraw their consent to the processing of personal data at any time.
If the data subject wishes to exercise their right to withdraw consent, they may contact the data controller at any time.
The data controller collects and processes the personal data of applicants for the purpose of handling the application process. Processing may also be carried out electronically. This is particularly the case when an applicant submits the relevant application documents to the data controller electronically, for example via email. If the data controller enters into an employment contract with an applicant, the data provided will be stored for the purpose of administering the employment relationship in accordance with applicable legal provisions. If the data controller does not enter into an employment contract with the applicant, the application documents will be automatically deleted 6 months after notification of the rejection decision, provided that no other legitimate interests of the data controller preclude such deletion. Other legitimate interests in this context include, for example, the burden of proof in proceedings under the General Equal Treatment Act (AGG).
This website uses Google Analytics, a web analytics service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). The service is used in “Universal Analytics” mode. This makes it possible to associate data, sessions, and interactions across multiple devices with a pseudonymous user ID, thereby enabling the analysis of a user’s activities across devices. This privacy notice is provided by www.intersoft-consulting.de.
Google Analytics uses so-called “cookies,” which are text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie regarding your use of this website is generally transmitted to a Google server in the United States and stored there. However, if IP anonymization is enabled on this website, Google will first truncate your IP address within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and truncated there. The IP address transmitted by your browser as part of Google Analytics is not combined with other data held by Google. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide the website operator with other services related to website and internet usage. These purposes also constitute our legitimate interest in data processing. The legal basis for the use of Google Analytics is Section 15(3) of the German Telemedia Act (TMG) and Article 6(1)(f) of the General Data Protection Regulation (GDPR). Sessions and campaigns are terminated after a certain period of time has elapsed. By default, sessions end after 30 minutes of inactivity, and campaigns end after six months. The time limit for campaigns may not exceed two years. For more information on terms of use and data protection, please visit https://www.google.com/analytics/terms/de.html or at https://policies.google.com/?hl=de.
You can prevent cookies from being stored by adjusting your browser settings accordingly; however, please note that in this case, you may not be able to use all features of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by installing the browser add-on Download and install. Opt-out cookies prevent your data from being collected in the future when you visit this website. To prevent Universal Analytics from collecting data across different devices, you must opt out on all systems you use. Click here to set the opt-out cookie: Disable Google Analytics
(Source: https://www.datenschutzbeauftragter-info.de/)
The data controller within the meaning of the EU General Data Protection Regulation (EU GDPR), other data protection laws in effect in the member states of the European Union, and other provisions relating to data protection is:
Limited Partnership Apart Hotel Panorama
Hotel und Boardinghaus Betriebsgesellschaft mbH & Co.
Billstedter Hauptstraße 44–48
D-22111 Hamburg
Tel.: +49 – (0) 40 – 73369-0
Fax: +49 – (0) 40 – 73369-950
Email: info@panoramaharburg.de
Managing Directors:
Robert Findeisen
Sven von Jagemann
Name and address of the data protection officer:
SHIELD GmbH
Martin Vogel
Perleberger Straße 10b
25421 Pinneberg
Tel.: +49 – (0) 4101 – 774470
Email: info@shield-datenschutz.de
We reserve the right to modify our privacy practices and this policy to adapt them to changes in relevant laws or regulations, as necessary, or to better meet your needs. Any changes to our privacy practices will be announced here accordingly. Please note the current version date of the Privacy Policy.
Hamburg, April 2018