PRIVACY POLICY

Purpose and legal basis

When visiting our website, we process individual personal data (IP address, operating system, date and time of access) in order to be able to provide you with the contents of our website. This is based on our legitimate interest.

Deviating purposes and legal bases can be found in the respective description in our data protection declaration.

Recipients and third-country transfers

Your data will be transmitted exclusively to the employees of our group of companies entrusted with the underlying facts.

Since we also use service providers for the implementation of the above-mentioned purposes in parts, there is the possibility that they also have access to personal data. An agreement for order processing (DPA) has been concluded with the relevant service providers.

For some processing, it cannot be ruled out that a transfer to third countries will also take place. In these cases, we guarantee the implementation of data protection regulations by means of appropriate safeguards (Art. 46 GDPR).

Criteria for the storage period

Your data will be deleted after the end of the respective purpose, provided that there are no storage obligations.

Your rights as a data subject

In addition to the right to information (according to Art. 15 GDPR), rectification (according to Art. 16 GDPR), deletion (according to Art. 17 GDPR) and restriction of processing (according to Art. 18 GDPR), as well as a right to data portability (in accordance with Art. 20 GDPR), a right of objection (in accordance with Art. 21 GDPR) and the right of non-automated decision-making including profiling (in accordance with Art. 22 GDPR).

Questions about data protection

If you have any questions about data processing and data protection, you can contact the controller or his data protection officer via the above contact details. You also have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for us can be reached as follows: Independent data protection center Saarland, Fritz-Dobisch-Straße 12, 66111 Saarbrücken, Tel.: + 49(0)681/947810, e-mail: poststelle@datenschutz.saarland.de.

Visit the website & log files

When visiting our website, we process individual personal data (IP address, operating system, date and time of access) in order to be able to provide you with the contents of our website. This is based on our legitimate interest.

Profiling and automated decision-making

If you provide us with information, a customer or prospective customer profile may be created in order to be able to provide you with optimal advice.

Automated decision-making is not carried out at any time.

Applications & Career Portal

We process your application documents exclusively for the purpose of handling the application procedure (pursuant to Art. 6 (1) b) DSGVO). Here, the usual personal data is processed in the context of an application procedure, as well as the information you provide to us (including resume, certificates).

Without the provision of the relevant information, we cannot assess whether you fit our requirements profile and can therefore unfortunately not process your application.

You can submit your application directly via our career portal HRworks. For this purpose, we use a service provider with whom an agreement on order processing has been concluded. The processing takes place exclusively within the EU/EEA. An appropriate level of protection for data processing is guaranteed.

Processing may also take place electronically. This is particularly the case if you send us application documents electronically, for example by e-mail. Your documents provided via this channel will also be integrated into our HRworks application tool.

We will only forward your application documents to the departments and contact persons relevant to the application. Please send your documents exclusively to the e-mail address communicated for the job description.

If you are accepted, your data will be included in the personnel file and stored for the duration of your employment.

If the application process does not result in an employment relationship, your data will be deleted at the latest 2 months after notification of rejection, provided that there are no other retention periods or any other interest on our part. Other legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).

E-mail contact

You can of course contact us by e-mail.

If you have a question about our products and services, we process your personal data provided to us in the context of the request on the basis of Art. 6 (1) (b) GDPR. Unfortunately, we cannot process your request in this regard without providing basic information.

The processing of your data for the exercise of your data subject rights via the above-mentioned contact channels takes place on the basis of Art. 6 para. 1 lit. c) GDPR.

In all other cases, the processing takes place on the basis of your information provided to us and the associated consent. You have the possibility to revoke your consent at any time with effect for the future.

Please note that a request by e-mail is generally transmitted unencrypted via different providers and thus access to your e-mail before storage in our systems can also be made unauthorised. Furthermore, it cannot be ruled out that in case of e-mail use a transfer to third countries can take place and we can only guarantee the security of the processing in our systems.

NEWSLETTER

You have the opportunity to find out about our company’s products, services and news. For this purpose, you can subscribe to our newsletter.

We need a valid email address, which you must confirm in the second step (double opt-in).

The processing takes place on the basis of your consent in accordance with Art. 6 (1) (a) GDPR and can be revoked at any time with effect for the future. In addition, you can have yourself removed from our mailing list at any time via the deposited unsubscribe link.

NEWSLETTER-TRACKING

In order to optimise the design of our newsletters, we analyse your click behaviour through pixels.

Integration of social media components

Meta (formerly Facebook)

You can check our meta page https://www.facebook.com/ESPLANADESaarbruecken about ongoing promotions, news and offers. For this purpose, we have placed a link on our website. When you visit our website, no data is transmitted to Meta Platforms Ireland Limited. Only after you click on the link, any personal data will be transferred to Meta Platforms Ireland Limited. If you are already logged in to Meta, the transmitted data will then be linked to your profile. If you do not wish to do so, we recommend that you log out of Meta beforehand.

The processing of personal data is based on joint responsibility with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland pursuant to Art. 26 GDPR.

Further information on data processing can be found in the data policy stored in Meta.

Instagram

We are also on Instagram: https://www.instagram.com/esplanade.sb/
You can also find out about current promotions, news and offers. For this purpose, we have placed a link on our website. When you visit our website, no data is transmitted to Instagram. Only after you click on the link, any personal data will be transmitted to Instagram. If you are already logged in to Instagram, the transmitted data will then be linked to your profile. If you do not wish to do so, we recommend that you log out of Instagram beforehand.

The processing of personal data is based on joint responsibility with Meta Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland in accordance with Art. 26 GDPR.

Further information on data processing can be found in the data policy stored on Instagram/Meta.

Tracking and analysis tools

Google Tag Manager

We use Google Tag Manager to manage website tags, as well as other Google services. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, it remains for all tracking tags implemented with Google Tag Manager. http://www.google.de/tagmanager/use-policy.html

The Google Tag Manager will only be activated with your consent. You can revoke them at any time with effect for the future.

Google Analytics

We use the analytics service Google Analytics of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 (“Google”). This is used in particular for web analysis, as well as for checking keywords or for optimising the website, target definition and optimisation of the use of other Google services (display network, adwords). Cookies are set, which collect the relevant information and transmit it to Google servers in Ireland or process them there. It cannot be ruled out that this data will also be transmitted to the USA.

We use Google Analytics with IP anonymisation. This means that your IP address will be shortened and processed unallocated. In exceptional cases, the complete IP address can be transmitted to the USA and shortened there.

The use of Google Analytics is based on your consent. You can revoke your consent at any time. The revocation of consent shall not affect the legality of the processing carried out on the basis of the consent until the withdrawal.

You can also prevent the storage of cookies by setting your browser software accordingly by clicking on the following link: Disable Google Analytics. An opt-out cookie will be set to prevent the collection of your data on future visits to this website. More information on how Google Analytics handles user data can also be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de
For more information on Google’s use of data, settings and objections, please refer to Google’s privacy policy (https://policies.google.com/technologies/ads) and the settings for displaying advertisements by Google (https://adssettings.google.com/authenticated). In addition, you can prevent the collection of data generated by the cookie and related to your use of the website (including your generally shortened IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de

Integration of third-party services

Google Maps – Integration as a link

The map service Google Maps is only stored as a link. No personal data will be transmitted.

As soon as you get to the landing page, Google may process your data. Further information on data protection at Google can be found here: https://www.google.de/intl/de/policies/privacy/

Cookies

We use various cookies, which can be divided into the following categories:

Funktional Cookies:
These are required to provide you with the content of our website, as well as basic necessary functionalities. We use the following functional cookies:
• Borlabs cookie

Our legitimate interest is based on this as the legal basis. Without the storage of any cookies, a visit and the presentation of our website is unfortunately only possible to a very limited extent.

Analysis Cookies:
We use these cookies in order to optimise our (website) offer. We use the following analytics cookies:
ODSID: used to play a YouTube video correctly
O_ga: Google Analytics is used for analysis and statistics for the navigation of the website.
These cookies are processed on the basis of your consent. For this purpose, it is necessary that you agree to the storage of these cookies.

You can manage your cookie settings here.When visiting our website, we process individual personal data (IP address, operating system, date and time of access) in order to be able to provide you with the contents of our website. This is based on our legitimate interest.When visiting our website, we process individual personal data (IP address, operating system, date and time of access) in order to be able to provide you with the contents of our website. This is based on our legitimate interest.

General

Effective technical and organisational measures are installed to protect personal data and to guarantee the right to informational self-determination. If, for example, technical service providers are used for data processing on behalf of m&r Kreativ, they comply with the legal requirements for data protection and data security according to Artt. 28, 29 and 32 General Data Protection Regulation (GDPR).

Purposes of processing and legal basis

The legality arises on the one hand from Article 6(1)(b) GDPR, according to which data processing is lawful for the purpose of fulfilling a contract or for pre-contractual measures. The personal data you receive or the personal data provided to us about you is used by MZV Verwaltungs GmbH & Co. KG in the context of a business contact (sogen. B2B) in principle:

·       for the provision of our services,
·       for the execution of the contract (including initiation, conclusion, performance and termination of a contract),
·       for processing and responding to requests,
·       to ensure the security of business customer accounts,
·       for advertising purposes within the meaning of § 7 (3) UWG and other marketing purposes, provided that consent has been given,
·       to prevent, detect and investigate potentially prohibited or illegal activities and to enforce our Terms and Conditions.

MZV Verwaltungs GmbH & Co. KG will not forward this data to third parties for this purpose.

Third parties within the meaning of this Agreement are not such companies that are affiliated with MZV Verwaltung pursuant to §§ 15 et seq. AktG.

DATA TYPES/CATEGORIES AND DATA SUBJECTS

We process from and for B2B business contacts regularly, but not necessarily fully and completely

— Name, possibly first name
— Business address
— E-mail address
— Telephone
— Fax
— if necessary, individual requests such as special telephone times
— Business function/Responsible area

DURATION OF STORAGE

The deletion periods are based on the purpose of data processing or statutory retention periods for contractual and business letters and incidents: After the end of the purpose or a recognisable cessation of the business basis, personal data will be deleted if there is no mandatory retention obligation. In this case, the data will be restricted during the processing, so that they can only be processed for the purpose that makes their retention necessary (e.g. tax audit). After these retention periods have expired, this data will also be deleted.

PROFILING AND AUTOMATED DECISION-MAKING

If you provide us with information, a customer or prospective customer profile may be created in order to be able to provide you with optimal advice.

For this purpose, we use the following information in particular:

Your contact details from registrations, enquiries and orders
The websites and newsletter links you have clicked (if subscribed)
The website functions you use

Further information can be found in the privacy policy of your customer account.

This may also apply to our companies in other countries, should you contact them.

Automated decision-making is not carried out at any time.

YOUR RIGHTS

In addition to the right to information (according to Art. 15 GDPR), rectification (according to Art. 16 GDPR), deletion (according to Art. 17 GDPR) and restriction of processing (according to Art. 18 GDPR), as well as a right to data portability (in accordance with Art. 20 GDPR), a right of objection (in accordance with Art. 21 GDPR) and the right of non-automated decision-making including profiling (in accordance with Art. 22 GDPR).

QUESTIONS ABOUT DATA PROTECTION AND RIGHT OF APPEAL

If you have further questions about data processing or our processes, you can contact the above responsible person or our data protection officer. You can also contact them confidentially at dsb.mrkreativ@verimax.de. In addition, you have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for the controller is the Independent Data Protection Center Saarland, Fritz-Dobisch-Straße 12, 66111 Saarbrücken, Tel.: 0681/947810, E-mail: poststelle@datenschutz.saarland.de.

Responsible & service provider

Joint controllers for the operation of the Facebook fanpage (Esplanade Saarbrücken) and the Instagram account (esplanade.sb) are within the meaning of the GDPR as well as other data protection regulations:

Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland,

und

MZV Verwaltungs GmbH & Co. KG, Kossmannstraße 27, 66119 Saarbrücken, Tel.:  +49 (0) 681 84499120 , E-Mail: hotel@esplanade-sb.de

Data Protection Officer: Verimax GmbH, Andreas Schönbucher, Warndtstraße 115, 66127 Saarbrücken, E-Mail: datenschutzbeauftragter@mkw.eu.

When visiting our Instagram page, personal data is processed by the controllers. We have entered into agreements with Meta, which govern, among other things, the terms and conditions for the use of Instagram and Facebook pages. Relevant are the terms of use and privacy policies of Instagram(https://help.instagram.com/519522125107875) and Facebook (https://www.facebook.com/about/privacy/book.com/about/privacy/)

We would like to point out that you use our Instagram and Facebook pages and their functions under your own responsibility. This applies in particular to the use of interactive functions such as commenting, sharing and evaluating.

Data processing when visiting the Instagram appearance/Facebook Fanpage

The processing of the information is intended to allow Meta to improve its advertising system, which it distributes through its network. On the other hand, it is intended to enable us, as the operator of the Instagram page/Facebook fanpage, to obtain statistics that Meta generates on the basis of visits to our pages. This allows us to provide specialised content based on our visitors’ profiles and develop features that may be of interest to them.

In order to better understand how our Instagram page/Facebookk fanpage can achieve our goals better, demographic and geographical evacuations are also­created and made available to us based on the information collected.

If visitors use Instagram/Facebook on multiple devices, the collection and evaluation can also be carried out across devices if they are registered visitors registered in their own profile. The generated visitor statistics are transmitted to us exclusively in anonymised form. We do not have access to the underlying data.

Legal basis

The legal basis for the processing of data on the Instagram page is the consent of the users in accordance with Article 6 (1) (a) of the GDPR. By registering on the Instagram/Facebook account, the user consents to the terms and conditions and the data policy (https://help.instagram.com/519522125107875) of Meta Platforms Ireland Limited and the processing activities specified therein.

Third country transfer

It is conceivable that some of the information collected may also be processed outside the European Union by Meta Platforms Inc., established in the United States, or American authorities may access the data stored by the subsidiary Meta Platforms Ireland Limited under the U.S. Cloud Act.

Storage time

Your processed personal data will only be stored as long as it is necessary for the fulfillment of the purpose. After termination of this purpose, the data will be deleted, unless there are mandatory retention periods to the contrary. In this case, the data will be restricted in processing so that it can only be processed for the purpose that makes its retention necessary (e.g. tax audit). After these retention periods have expired, this data is also deleted.

Rights of Affected

Under the settings for advertising preferences, users of Instagram/Facebook can influence the­extent to which their user behaviour may be recorded when visiting our pages. Other options include the Facebook and Instagram settings in the account settings or the right to object form. The processing of information by means of the cookie used by Meta can also be prevented by the fact that third-party cookies or those of Instagram are not allowed in their own browser settings.

It follows from the agreements with Meta on joint responsibility that information questions and the assertion of further data subjects can be asserted with all persons responsible. We recommend that you exercise these rights directly with Meta. As a provider of the social networks Instagram and Facebook, Meta has the immediate access possibilities to the user information and can also immediately take any necessary measures and provide information.

You may have the following rights, depending on certain conditions or with certain limitations: Right to information, rectification, deletion, restriction of processing, a right to data portability and right to object and the right to withdraw consent at any time. The legality of the processing until the time of revocation/objection remains unaffected by this.

Questions about data protection and right of appeal

If you have further questions about data processing or our processes, you can contact the above-mentioned data controller or our data protection officer. You can also contact them confidentially at datenschutzbeauftragter@mkw.eu.

In addition, you have a complaint with a supervisory authority. The responsible supervisory authority is the Independent Data Protectionzen trum Saarland, Fritz-Dobisch-Straße 12, 66111 Saarbrücken, Tel.: 0681/947810, E-mail: poststelle@datenschutz.saarland.de.

Further rights that you have against Meta (in particular the right to object to certain processing by Meta or to withdraw consent given to Meta) are described in Meta’s data policy at https://www.facebook.com/privacy/explanation. Since only Meta has full access to the User Data, we recommend that you contact Meta directly if you would like to ask for information or other questions about your rights as a user (e.g. right to delete).

If you no longer want the information provided here, please remove the connection of your user profile to our site by using the “I no longer like this site” and/or “No longer subscribe to this page”.

LinkedIn

MZV Verwaltungs GmbH & Co.KG uses the technical platform and services of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland for its channel offered on LinkedIn.

We would like to point out that you use this LinkedIn page and its functions under your own responsibility. This applies in particular to the use of interactive functions (e.g. commenting, sharing, evaluating).

When visiting our LinkedIn page, LinkedIn collects, among other things, your IP address and other information that is present in the form of cookies on your device. This information is used to provide us as the operator of the LinkedIn pages statistical information on the use of the LinkedIn page. LinkedIn provides further information on this at the following link: https://www.linkedin.com/legal/privacy-policy

The data collected about you in this context will be processed by the US mother of LinkedIn Ireland Unlimited Company, LinkedIn Inc., and may be transferred to countries outside the European Union. LinkedIn describes in general what information LinkedIn receives and how it is used in its data use policies. There you will also find information about contact options for LinkedIn as well as the setting options for advertisements. The data usage guidelines are available at the following link: https://www.linkedin.com/legal/privacy-policy

If you are currently logged into LinkedIn as a user, there is a cookie with your LinkedIn identifier on your device. This allows LinkedIn to understand that you visited this page and how you used it. This also applies to all other LinkedIn pages. Via LinkedIn buttons integrated into websites, it is possible for LinkedIn to record your visits to these websites and to associate it with your LinkedIn profile. Based on this data, content or advertising can be offered tailored to you.

If you want to avoid this, you should unsubscribe from LinkedIn or disable the “remain logged in” function, delete the cookies existing on your device and terminate and restart your browser. In this way, LinkedIn information that can be directly identified will be deleted. This allows you to use our LinkedIn page without revealing your LinkedIn identifier. When you access interactive features of the site (such as the Like Button or Share feature), a LinkedIn sign-in screen appears. After a possible login, you are again recognizable for LinkedIn as a specific user.

For information on how to manage or delete existing information about you, visit the following LinkedIn support pages: https://www.linkedin.com/legal/privacy-policy

We, as the provider of the information service, do not collect and process any data from your use of our service.