– Best-Price-Guarantee –

Book directly with us and we guarantee you the cheapest booking price

Bild

Privacy Policy

1. General information and mandatory information

Data protection

The website operators are responsible for the data protection on this website. Their contact data can be taken from the legal notice on the web page imprint.

The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data protection regulations and this privacy policy.

If you use this website, various pieces of personal data will be collected. Personal information is any data with which you could be personally identified. This privacy policy explains what information we collect and what we use it for. It also explains how and for what purpose this happens.

Please note that data transmitted via the internet (e.g. via email communication) may be subject to security breaches. Complete protection of your data from third-party access is not possible.

Notice concerning the party responsible for this website

The party responsible for processing data on this website is:

Alexander Kindermann
Hotel Esplanade
Kortmann GmbH & Co. KG
Burgwall 3
44135 Dortmund
Phone: 0231 - 5853 654
E-Mail: hotel(at)esplanade-dortmund.de

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (names, email addresses, etc.).

Revocation of your consent to the processing of your data

Many data processing operations are only possible with your express consent. You may revoke your consent at any time with future effect. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.

Right to file complaints with regulatory authorities

If there has been a breach of data protection legislation, the person affected may file a complaint with the competent regulatory authorities. The competent regulatory authority for matters related to data protection legislation is the data protection officer of the German state in which our company is headquartered. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to data portability

You have the right to have data which we process based on your consent or in fulfillment of a contract automatically delivered to yourself or to a third party in a standard, machine-readable format. If you require the direct transfer of data to another responsible party, this will only be done to the extent technically feasible.

SSL encryption

This site uses SSL encryption for security reasons and for the protection of the transmission of confidential content, such as the inquiries you send to us as the site operator. You can recognize an encrypted connection in your browser's address line when it changes from "http://" to "https://" and the lock icon is displayed in your browser's address bar.

If SSL encryption is activated, the data you transfer to us via contact form cannot be read by third parties.

Information, blocking, deletion

As permitted by law, you have the right to be provided at any time with information free of charge about any of your personal data that is stored as well as its origin, the recipient and the purpose for which it has been processed. You also have the right to have this data corrected, blocked or deleted. You can contact us at any time using the address given in our legal notice if you have further questions on the topic of personal data.

Opposition to promotional emails

We hereby expressly prohibit the use of contact data published in the context of website legal notice requirements with regard to sending promotional and informational materials not expressly requested. The website operator reserves the right to take specific legal action if unsolicited advertising material, such as email spam, is received.

Further:

Information on data protection according to the EU GDPR Our company regularly checks when concluding contracts and, in certain cases where there is a legitimate interest, also with existing customers. Your credit rating. To do this, we work with Creditreform Boniversum GmbH, Hammfelddamm 13, 41460 Neuss, from whom we need the necessary information receive data. For this purpose, we transmit your name and contact details to Creditreform Boniversum GmbH. The information In accordance with Article 14 of the EU General Data Protection Regulation, you can find information about the data processing taking place at Creditreform Boniversum GmbH here.

2. Data collection on our website

Cookies

Some of our web pages use cookies. Cookies do not harm your computer and do not contain any viruses. Cookies help make our website more user-friendly, efficient, and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies." They are automatically deleted after your visit. Other cookies remain in your device's memory until you delete them. These cookies make it possible to recognize your browser when you next visit the site.

You can configure your browser to inform you about the use of cookies so that you can decide on a case-by-case basis whether to accept or reject a cookie. Alternatively, your browser can be configured to automatically accept cookies under certain conditions or to always reject them, or to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of this website.

Cookies which are necessary to allow electronic communications or to provide certain functions you wish to use are stored pursuant to Art. 6 paragraph 1, letter f of GDPR. The website operator has a legitimate interest in the storage of cookies to ensure an optimized service provided free of technical errors. If other cookies (such as those used to analyze your surfing behavior) are also stored, they will be treated separately in this privacy policy.

Server log files

The website provider automatically collects and stores information that your browser automatically transmits to us in "server log files". These are:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

These data will not be combined with data from other sources.

The basis for data processing is Art. 6 (1) (b) GDPR, which allows the processing of data to fulfill a contract or for measures preliminary to a contract.

Registration on this website

You can register on our website in order to access additional functions offered here. The input data will only be used for the purpose of using the respective site or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will reject your registration.

To inform you about important changes such as those within the scope of our site or technical changes, we will use the email address specified during registration.

We will process the data provided during registration only based on your consent per Art. 6 (1)(a) GDPR. You may revoke your consent at any time with future effect. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.

We will continue to store the data collected during registration for as long as you remain registered on our website. Statutory retention periods remain unaffected.

Processing of data (customer and contract data)

We collect, process, and use personal data only insofar as it is necessary to establish, or modify legal relationships with us (master data). This is done based on Art. 6 (1) (b) GDPR, which allows the processing of data to fulfill a contract or for measures preliminary to a contract. We collect, process and use your personal data when accessing our website (usage data) only to the extent required to enable you to access our service or to bill you for the same.

Collected customer data shall be deleted after completion of the order or termination of the business relationship. Legal retention periods remain unaffected.

Data transferred when signing up for services and digital content

We transmit personally identifiable data to third parties only to the extent required to fulfill the terms of your contract with us, for example, to banks entrusted to process your payments.

Your data will not be transmitted for any other purpose unless you have given your express permission to do so. Your data will not be disclosed to third parties for advertising purposes without your express consent.

The basis for data processing is Art. 6 (1) (b) GDPR, which allows the processing of data to fulfill a contract or for measures preliminary to a contract.

3. Social media

Sharing Content in Social Networks
(Facebook, Instagram, Google+1, Twitter & Co.)

The content on our web pages can be shared in social networks such as Facebook, Twitter or Google+ in accordance with data protection regulations. Direct contact between the networks and the users of this website is only established when a user actively clicks on one of the social media buttons. In this case, the URL to be shared is transmitted to the network.

Instagram Content

Our website loads Instagram content. The Instagram online service is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA.

When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to Instagram's servers. Instagram receives the information that your browser has called the corresponding page of our site, even if you do not have an Instagram profile or are not currently logged into Instagram. Technical information (including your IP address) is transferred directly from your browser to an Instagram server in the United States and stored there. In this regard, we refer you to the Instagram privacy policy: https://help.instagram.com/155833707900388/

4. Analytics and advertising

Google Analytics

This website uses Google Analytics, a web analytics service. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called "cookies". These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

Google Analytics cookies are stored based on on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising.

IP anonymization by Google Analytics

We have activated the IP anonymization feature on this website. Your IP address will be shortened by Google within the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases is the full IP address sent to a Google server in the US and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website activity and Internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.

Objection to data collection at Google Analytics

Browser plugin or Opt-Out-Cookie from Google

You can prevent these cookies being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=en.

Objecting to the collection of data

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this site:

For more information about how Google Analytics handles user data, see Google's privacy policy:
https://support.google.com/analytics/answer/6004245?hl=en.

Outsourced data processing

We have entered into an agreement with Google for the outsourcing of our data processing and fully implement the strict requirements of the German data protection when using Google Analytics.

Google AdWords and Google Conversion Tracking

This website uses Google AdWords. AdWords is an online advertising program from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States ("Google").

As part of Google AdWords, we use so-called conversion tracking. When you click on an ad served by Google, a conversion tracking cookie is set. Cookies are small text files that your internet browser stores on your computer. These cookies expire after 30 days and are not used for personal identification of the user. Should the user visit certain pages of the website and the cookie has not yet expired, Google and the website can tell that the user clicked on the ad and proceeded to that page.

Each Google AdWords advertiser has a different cookie. Thus, cookies cannot be tracked using the website of an AdWords advertiser. The information obtained using the conversion cookie is used to create conversion statistics for the AdWords advertisers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, advertisers do not obtain any information that can be used to personally identify users. If you do not want to participate in tracking, you can opt-out of this by easily disabling the Google Conversion Tracking cookie by changing your browser settings. In doing so, you will not be included in the conversion tracking statistics.

Conversion cookies are stored based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising.

For more information about Google AdWords and Google Conversion Tracking, see the Google Privacy Policy:
https://www.google.de/policies/privacy/.

You can configure your browser to inform you about the use of cookies so that you can decide on a case-by-case basis whether to accept or reject a cookie. Alternatively, your browser can be configured to automatically accept cookies under certain conditions or to always reject them, or to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of this website.

Matomo (formerly Piwik)

This website uses the open source web analytics service Matomo. Matomo uses so-called "cookies". These are text files that are stored on your computer and that allow an analysis of the use of the website by you. For this purpose, the information generated by the cookie about the use of this website is stored on our server. The IP address is anonymized before it is stored.

The setting of cookies by Matomo has been deactivated for this website. The IP address is also anonymized before it is saved.

The storage of Matomo cookies is based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

The information generated by the cookies about your use of this website will not be disclosed to third parties. You can prevent these cookies being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website.

If you do not agree with the storage and use of your data, you can disable this feature here. In this case, an opt-out cookie will be stored in your browser to prevent Matomo from storing your usage data. Matomo cookies remain on your device until you delete them. If you delete your cookies, this will mean that the opt-out cookie will also be deleted. You will then need to reactivate it when you return to our site if you wish your activity not to be tracked.

5. Newsletter

Newsletter data

If you would like to receive our newsletter, we require a valid email address as well as information that allows us to verify that you are the owner of the specified email address and that you agree to receive this newsletter. No additional data is collected or is only collected on a voluntary basis. We only use this data to send the requested information and do not pass it on to third parties.

We will, therefore, process any data you enter onto the contact form only with your consent per Art. 6 (1)(a) GDPR. You can revoke consent to the storage of your data and email address as well as their use for sending the newsletter at any time, e.g. through the "unsubscribe" link in the newsletter. The data processed before we receive your request may still be legally processed.

The data provided when registering for the newsletter will be used to distribute the newsletter until you cancel your subscription when said data will be deleted. Data we have stored for other purposes (e.g. email addresses for the members area) remain unaffected.

Newsletter dispatch with Smart Host

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data is collected, or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.
The data entered in the newsletter registration form is processed exclusively on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent to the storage of the data, the e-mail address and its use for sending the newsletter at any time, for example via the ‘unsubscribe’ link in the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the cancellation.

This website uses the services of Smart Host to send newsletters. The provider is Smart Host GmbH, Am Kupfergraben 6A, 10117 Berlin.
Smart Host is a service that can be used to organise and analyse the sending of newsletters, among other things. When you open an email sent with Smart Host, a file contained in the email (known as a web beacon) connects to the Smart Host servers. This makes it possible to determine whether a newsletter message has been opened and which links, if any, have been clicked on. Technical information is also recorded (e.g. time of access, IP address, browser type and operating system). This information is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.
If you do not wish to be analysed by Smart Host, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message.
The data processing takes place on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the cancellation.
The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted from both our servers and the servers of Smart Host after you unsubscribe from the newsletter. Data stored by us for other purposes remains unaffected by this.
We have concluded a Data Processing Agreement (“DPA”) with Smart Host in accordance with Art. 28 Para. 3 GDPR. In this contract, we oblige this service provider to protect our customers' data and not to pass it on to third parties.

Further information on data protection at Smart Host can be found in their privacy policy at: www.smart-host.com/en/privacy-policy

Purpose of Data Collection

For the facilitation and realisation of guest booking; the successful execution of the guest’s stay; to coordinate the hotel stay according to the wishes and interests of the guest; to ensure the provision of future hotel services which correspond with the interests of the guest; for marketing purposes as pertaining to hotel performance and the improvement of this performance.

Disclosure of Data to Third Parties

To contracted service providers who supply cloud-based software and data handling solutions to the hotel. These providers operate with the sole purpose of processing and analysing guest data for the aforementioned purposes.

6. Plugins und Tools

Google Web Fonts

For uniform representation of fonts, this page uses web fonts provided by Google. When you open a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.

When you call up a page of our website that contains a social plugin, your browser makes a direct connection with Google servers. Google thus becomes aware that our web page was accessed via your IP address. The use of Google Web fonts is done in the interest of a uniform and attractive presentation of our website. This constitutes a justified interest pursuant to Art. 6 (1) (f) GDPR.

If your browser does not support web fonts, a standard font is used by your computer.

Further information about handling user data, can be found at https://developers.google.com/fonts/faq and in Google's privacy policy at https://www.google.com/policies/privacy/.

Google Maps

This site uses the Google Maps map service via an API. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use Google Maps, it is necessary to save your IP address. This information is generally transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.

The use of Google Maps is in the interest of making our website appealing and to facilitate the location of places specified by us on the website. This constitutes a justified interest pursuant to Art. 6 (1) (f) GDPR.

Further information about handling user data, can be found in the data protection declaration of Google at
https://policies.google.com/privacy.

7. Video Surveillance Notice

We use video surveillance in selected areas of our hotel. The processing of personal data is carried out in accordance with Article 6(1)(f) of the General Data Protection Regulation (GDPR). Our legitimate interest is to ensure the safety and security of our guests, visitors, and employees, to protect our property, and to investigate security-related incidents where necessary.

Camera Locations

Cameras are installed exclusively in publicly accessible areas where there is an increased need for security, such as entrance areas, the lobby, and access points to certain floors.

There is no video surveillance in guest rooms, sanitary facilities, or any other private areas.

Purposes of Data Processing

  • Protection of guests, employees, and visitors

  • Prevention, detection, and investigation of criminal offences

  • Enforcement of the hotel's house rules

  • Ensuring the safe and orderly operation of the hotel

Data Retention

Video recordings are generally deleted automatically after a maximum of 72 hours, unless an incident has occurred that requires longer retention (e.g. a security-related event). In such cases, the recordings will only be retained for as long as necessary to investigate and resolve the matter.

Recipients of the Data

Access to the recordings is restricted to authorized employees only. In the event of a security-related incident, recordings may be disclosed to law enforcement authorities where legally required or permitted.

Your Rights

Under Articles 15–22 of the GDPR, you have the right to request access to your personal data, rectification, erasure, restriction of processing, and to object to the processing of your personal data.

If you wish to exercise any of these rights, please contact us using the contact details provided below.

8. Room Booking via MEWS

We use the online booking service MEWS, provided by HotelNetSolutions GmbH, Genthiner Str. 8, 10785 Berlin, Germany (www.hotelnetsolutions.de), to enable room reservations through our website.

If you wish to book a room with us, it is necessary to provide certain personal data required to conclude and perform the accommodation contract. Mandatory information required for the booking process is clearly marked; any additional information is provided voluntarily.

The information entered into the booking form is transmitted to us and stored. During the booking process, the following data may be collected:

  • IP address

  • Date and time of the booking

  • Room category and number of guests

  • Stay period

  • Optional extras (e.g. packages, restaurant reservations, amenities)

  • Optional comments or special requests to the hotel

  • Title

  • Name of the person making the booking

  • Name of the guest (if different from the booker)

  • Postal address

  • Email address

  • Telephone number

  • Alternative billing address (if applicable)

  • Country

  • Credit card details

The data is also transmitted to the provider of the online booking service, MEWS, and to the payment service providers listed below.

Apart from this, personal data will only be disclosed to third parties if this is necessary for the performance of the contract, billing purposes, debt collection, or if you have expressly consented to such disclosure. Only the data required for the respective purpose will be shared.

Recipients of your data may include:

  • Delivery or service providers (where applicable) receiving your name and address

  • Debt collection agencies, if payment collection becomes necessary (name, address, booking details)

  • Financial institutions for direct debit processing, where applicable

  • Payment service providers, depending on the selected payment method

The legal basis for processing mandatory booking data is Article 6(1)(b) GDPR (performance of a contract). The legal basis for processing voluntary information is Article 6(1)(a) GDPR (consent).

A Data Processing Agreement pursuant to Article 28(3) GDPR has been concluded between the hotel and MEWS.

Purpose of Processing

The mandatory information collected is required to fulfil the accommodation contract, including confirmation of your reservation and provision of the booked services.

Your personal data is processed for the following purposes:

  • Responding to your enquiries

  • Processing and managing your reservation

  • Creditworthiness assessment where necessary

  • Debt collection where applicable

  • Technical administration of the website

Voluntary information may also be processed to prevent misuse of our services and, where necessary, to investigate criminal offences.

Additionally, we may use your contact details to inform you about products or services from our portfolio or to send you information by email, where legally permitted.

Data Retention

Your personal data will be deleted as soon as it is no longer required for the purposes for which it was collected.

However, under applicable commercial and tax legislation, we are legally required to retain address, payment and booking information for ten (10) years following completion of the contract.

After three (3) years, access to these data is restricted, meaning they are retained solely to comply with statutory retention obligations.

Where an ongoing contractual relationship exists between you and the hotel, your data will be stored for the duration of the contractual relationship and for ten years thereafter.

Voluntarily provided data will generally be deleted three years after completion of the contract, unless another contract is concluded within that period. In such cases, deletion will occur three years after completion of the most recent contract.

Where processing is necessary for the performance of a contract or for pre-contractual measures, early deletion is only possible if no contractual or legal retention obligations prevent such deletion.

You may request the deletion of your personal data held by us at any time, insofar as no legal obligations require us to retain it.

You may also withdraw your consent to the processing of voluntary information at any time. Upon receipt of your withdrawal, the voluntarily provided data will be deleted without undue delay.

Please also refer to the Privacy Policy of the Provider (MEWS).


MEWS Payments (Payment Processing)

To process secure payments, we use MEWS Payments, a payment service provided by MEWS Systems B.V., Amsterdam.

MEWS Payments is used for:

  • Credit card pre-authorisations

  • Payment processing

  • Refund processing

The following data may be processed:

  • Payment information (encrypted/tokenised)

  • Name, address and email address

  • Booking reference and stay details

  • IP address and device information

  • Security and fraud prevention data

Processing is carried out:

  • pursuant to Article 6(1)(b) GDPR for the performance of the accommodation contract; and

  • pursuant to Article 6(1)(f) GDPR based on our legitimate interest in secure and reliable payment processing.

MEWS may use external payment service providers such as Stripe or Adyen.

Where data is transferred outside the European Economic Area, appropriate safeguards are implemented, including the use of Standard Contractual Clauses (SCCs) where required.


Triptease – Direct Booking & Conversion Optimisation

Provider

Triptease Ltd.
24 Southwark Bridge Road
London SE1 9HF
United Kingdom

Purpose of Processing

Triptease is used to improve the direct booking experience and optimise our website's booking performance.

This includes:

  • Displaying price comparison information (Price Check Widget)

  • Analysing user behaviour on the website

  • Conversion rate optimisation

  • Displaying dynamic content (e.g. booking messages, price comparisons and incentives)

  • Tracking page views and user interactions throughout the booking journey

Categories of Data Processed

  • IP address

  • Browser type and device type

  • Usage data (clicks, scrolling behaviour, time spent on pages)

  • Anonymous session ID

  • Referrer URL

  • Search and booking information (e.g. travel dates)

Legal Basis

  • Article 6(1)(a) GDPR – Consent (tracking and marketing purposes)

  • Article 6(1)(f) GDPR – Legitimate interest (optimisation of direct booking performance for purely functional features)

Place of Processing

European Union and United Kingdom.

The United Kingdom benefits from an EU adequacy decision, ensuring an adequate level of data protection.

Data Retention

  • Cookies are generally stored for 1 to 12 months.

  • Session data is retained only until the end of the respective browsing session.

For further information, please refer to Triptease's Privacy Policy.

 

 

9. Credit Card Payments

Our website includes components that enable secure payment by credit card for products and services purchased online.

The payment service is provided by:

Concardis GmbH
Helfmann-Park 7
65760 Eschborn
Germany
www.concardis.com

A secure, encrypted interface is used between our hotel software and Concardis. This interface is provided by:

3C Payment Luxembourg S.A.
5–7 rue Léon Laval
L-3372 Leudelange
Grand Duchy of Luxembourg
www.3cpayment.com

If you choose "Credit Card" as your payment method during the online booking or purchasing process, the information required to process the payment will be transmitted automatically to the respective credit card provider.

By selecting this payment method, you consent to the transfer of the personal data necessary for processing the payment.

The following information is transmitted in encrypted form:

  • Cardholder's name

  • Credit card number

  • Card Verification Code (CVV/CVC)

  • Expiry date of the credit card

The credit card provider processes this information solely for the purpose of authorising and completing the payment transaction. Following a successful technical verification, the payment is processed and transferred to us.

The transmission of your data serves exclusively for payment processing.

For further information, please refer to the provider's Privacy Policy.