Privacy Policy

food hotel Neuwied GmbH

Information on the Processing of Personal Data (Privacy Notice)

Welcome to the privacy policy section of food hotel Neuwied GmbH. We are very pleased that you are interested in our company. Through this privacy policy, we would like to provide you with detailed information about when we collect which data and how it is processed.

Data Controller
The data controller pursuant to Article 4(7) of the EU General Data Protection Regulation (GDPR) is:
food hotel Neuwied GmbH
Managing Director: Jörg Germandi
Address: Langendorfer Straße 155, 56564 Neuwied
Phone: +49 2631 8252 444
Email: info@food-hotel.de

Data Protection Officer
You can contact our Data Protection Officer at:
Gesellschaft für Personaldienstleistungen mbH
Pestalozzistraße 27
34119 Kassel
Phone: +49 561 78968-93
Fax: +49 561 78968-61
Email: datenschutz@gfp24.de

General Information on the Collection of Personal Data
The following information provides you with transparent details regarding the nature and scope of the processing of personal data,

that are collected during your visit to our website,
the use of our online services,
external online presence on social media platforms
as part of the hiring process
as well as in business dealings with customers and service providers

be collected.

The legal basis for our data protection practices is provided, in particular, by the provisions of the General Data Protection Regulation (GDPR) and the supplementary provisions of the Federal Data Protection Act (BDSG) (new).

Purpose / Legal Basis for Processing
In cases where we obtain your consent for the processing of personal data, Article 6(1)(a) of the GDPR serves as the legal basis.

When processing personal data necessary to fulfill a contract concluded between you and us, Article 6(1)(b) of the GDPR serves as the legal basis. This also applies to processing operations necessary to take steps prior to entering into a contract.

In the event that the processing of personal data is necessary to comply with a legal obligation to which we are subject, Article 6(1)(c) of the GDPR serves as the legal basis.

In cases where the vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) of the GDPR serves as the legal basis.

If the processing of personal data is necessary to safeguard a legitimate interest of our company or a third party, and your interests, fundamental rights, and fundamental freedoms do not override the aforementioned interest, then Article 6(1)(f) of the GDPR serves as the legal basis for the processing.

Disclosure of Personal Data
If, in the course of our data processing activities, we transfer your personal data to other parties or disclose it to them, we do so exclusively on the basis of one of the legal grounds specified above. Recipients of this data may include, for example, payment service providers in connection with the fulfillment of a contract. In cases where we are required by law or by court order to do so, we must disclose your data to authorities entitled to receive such information.

If we use external service providers to assist us in processing your data (e.g., data analysis, newsletter distribution), this is done within the framework of data processing on our behalf in accordance with Article 28 of the GDPR. In such cases, we only enter into contracts with service providers that offer sufficient guarantees that appropriate technical and organizational measures will ensure the protection of your data.

Data Transfers to Third Countries
Data transfers to third countries (outside the European Union or the European Economic Area) take place only to the extent that this is in accordance with legal requirements. Subject to express consent or a transfer required by contract or law, we process data—or have it processed—only in third countries with a recognized level of data protection or, pursuant to Art. 44 et seq. of the GDPR, on the basis of specific safeguards, such as contractual obligations through the European Commission’s “Standard Data Protection Clauses” (European Commission information page: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de).

Data Retention
As soon as the purpose for which the data was stored no longer applies, we will delete or block your personal data. Furthermore, your personal data will only be retained if specific statutory retention periods (in particular, retention obligations under commercial and tax law) at the national or European level prevent its deletion.

Definitions
Our privacy policy is based on terminology used and defined in the GDPR. To ensure that our privacy policy is easy to read and understand, we would like to explain the most important terms in advance.

Personal Data
“Personal data” refers to any information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”). A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier, or one or more specific characteristics that reflect the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

Processing
“Processing” means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, distribution, or any other form of disclosure, the matching or linking, the restriction, erasure, or destruction.”

Data Controller
“Data controller” means the natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union law or the law of the Member States, the data controller or the specific criteria for its designation may be provided for by Union law or the law of the Member States.

Pseudonymization
“Pseudonymization” is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures that ensure the personal data is not attributed to an identified or identifiable natural person.

Data Processor
A “data processor” is a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the data controller.

Recipient
“Recipient” means a natural or legal person, public authority, agency, or other body to whom personal data is disclosed, regardless of whether or not that entity is a third party. However, public authorities that may receive personal data in the course of a specific investigative mandate under Union law or the law of the Member States are not considered recipients.

Third Party
“Third party” means a natural or legal person, public authority, agency, or other entity, other than the data subject, the controller, the processor, and the persons authorized under the direct responsibility of the controller or the processor to process the personal data.

Consent
“Consent” means any freely given, specific, informed, and unambiguous indication of the data subject’s wishes, expressed in the form of a statement or other clear affirmative action, by which the data subject indicates that he or she consents to the processing of personal data relating to him or her.

Profiling
“Profiling” means any form of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.

Rights of Affected Individuals

The processing of personal data grants you, as a data subject, certain rights that you may exercise with us at any time. These are:

Right to withdraw a declaration of consent under data protection law pursuant to Article 7(3) of the GDPR
Right to access your personal data stored by us pursuant to Article 15 of the GDPR
Right to rectification of inaccurate data or to have incomplete data completed, pursuant to Article 16 of the GDPR
Right to erasure of your data stored by us pursuant to Article 17 of the GDPR
Right to Restriction of Processing of Your Data Pursuant to Article 18 of the GDPR
Right to Data Portability under Article 20 of the GDPR
Right to Object under Article 21 of the GDPR
Automated decision-making in individual cases, including profiling, pursuant to Article 22 of the GDPR.

Right of Access
You have the right to ask us whether we are processing any of your personal data and, if so, what personal data we are processing, as well as to request copies of your personal data from us. Please note that your right of access may be restricted under certain circumstances in accordance with applicable laws.

Right to Rectification
If the information concerning you is not (or is no longer) accurate, you have the right to request, without delay, the rectification of any inaccurate personal data concerning you and, where applicable, the completion of any incomplete personal data.

Right to Erasure
In accordance with legal requirements, you have the right to request that data concerning you be erased without delay, e.g., if the data is no longer necessary for the purposes for which it was collected and if statutory retention and archiving requirements do not preclude erasure.

Right to Restriction of Processing
Under the provisions of Article 18 of the GDPR, you have the right to request a restriction on the processing of your personal data, for example, if you have objected to the processing, for the duration of the review to determine whether the objection can be granted.

Right to Data Portability
You have the right to have data that you have provided to us transferred to you or to a third party in a commonly used, machine-readable format. If you request that the data be transferred directly to another controller, this will only be done to the extent that it is technically feasible.

Right to Withdraw a Declaration of Consent Under Data Protection Law
If the processing of your personal data is based on consent you have provided to us, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of that consent prior to its withdrawal.

Please send your revocation in any form to food Hotel Neuwied GmbH, Langendorfer Straße 157, 56564 Neuwied, email: info@food-hotel.de. Please note that your revocation may also be made—or, for technical reasons, must be made—in other procedures. You can find further information on this in the respective service descriptions.

Right to Object to Processing
Under the conditions set forth in Article 21(1) of the GDPR, you may object to data processing based on Article 6(1)(e) or (f) of the GDPR for reasons arising from your particular situation. This also applies to profiling based on these provisions. If you exercise your right to object, we will no longer process your personal data in question, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

Please submit your objection in an informal manner to food Hotel Neuwied GmbH, Langendorfer Straße 157, 56564 Neuwied, email: info@food-hotel.de. Please note that your objection may also be submitted in other procedures or, for technical reasons, must be submitted in those procedures. You can find further information on this in the respective services described.

Right to File a Complaint with the Data Protection Authority
Pursuant to Article 77 of the GDPR, you have the right to file a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful. The address of the supervisory authority responsible for our company is:

The State Commissioner for Data Protection and Freedom of Information in Rhineland-Palatinate
Hintere Bleiche 34
55116 Mainz
Phone: +49 6131 8920 0
Email: poststelle@datenschutz.rlp.de
P.O. Box 30 40, 55020 Mainz

Automated Decision-Making in Individual Cases, Including Profiling
You have the right not to be subject to a decision based solely on automated processing—including profiling—that produces legal effects concerning you or similarly significantly affects you.

Use of Online Services

Below, we explain when and in what context data is processed when you use our online services.

Collection of Personal Data When Visiting Our Website
When you use the website solely for informational purposes—that is, if you do not register or otherwise provide us with information—we collect only the personal data that your browser transmits to our server. When you view our website, we collect the data listed below. This data is technically necessary to display our website to you and to ensure the stability and security of the display (the legal basis is Art. 6(1)(f) of the GDPR):

IP address
Date and time of the request
Time Zone Difference from Greenwich Mean Time (GMT)
Content of the Request (specific page)
Access Status / HTTP Status Code
amount of data transferred in each instance
Website from which the request originates
Browser
Operating system and its user interface

This data is temporarily stored in our system's log files for a maximum of 30 days. Storage beyond this period is possible; however, in such cases, the IP addresses are partially deleted or anonymized so that the client making the request can no longer be identified.

Use of Cookies on
In addition to the data mentioned above, cookies are stored on your device (e.g., PC, laptop, smartphone) when you use our website. Cookies are small text files that are stored on your device and associated with the browser you are using, and through which certain information is transmitted to the entity that sets the cookie (in this case, us). Cookies cannot execute programs or transfer malware to your devices. They serve to make the online service more user-friendly and effective overall.

This website uses the following types of cookies, the scope and functionality of which are explained below:

Transient Cookies
Transient cookies are automatically deleted when you close your browser. These include, in particular, session cookies. These cookies store a so-called session ID, which allows various requests from your browser to be associated with the same session. This enables your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.

Persistent Cookies
Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete these cookies at any time in your browser's security settings.

We use only those cookies on our website that are generated by us as the website operator and that are necessary for the full functionality and presentation of our website. We use these cookies based on a legitimate interest pursuant to Article 6(1)(f) of the GDPR to ensure the proper functioning of our online services.

You can configure your browser settings as you wish and, for example, refuse to accept cookies from third-party providers or even all cookies. Please note, however, that this may prevent you from using all features of this website. If you have consented to the use of cookies and wish to withdraw that consent in the future, you can delete the stored cookies in your browser settings.

Cookie Settings in Web Browsers
Web browsers can be configured to notify you when cookies are set, or to reject or disable cookies entirely or in part. By disabling and deleting all cookies, you can also revoke any consent you previously provided. If you disable or restrict cookies using your browser, certain features on our website may not be available to you. You can delete stored cookies at any time using your web browser, including automatically.

You can use the links below to learn more about this feature for the most commonly used browsers:

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-informationen-websites-auf-ihrem-computer
Google Chrome: https://support.google.com/chrome/bin/answer.py?hl=de&answer=95647
Apple Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Microsoft Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Microsoft Edge: https://support.microsoft.com/de-de/help/4027947/microsoft-edge-delete-cookies
Opera: https://help.opera.com/de/latest/web-preferences/

If no restrictions have been applied to your cookie settings, cookies that are intended to enable and ensure the necessary technical functions will remain on your device until you close your browser; other cookies may remain on your device for a longer period. The exact cookie expiration times are displayed in the consent banner.

SSL or TLS Encryption
Our website uses TLS encryption (formerly SSL) to ensure security and protect confidential information during transmission. Orders or contact requests you send to us are therefore transmitted using transport encryption. Depending on your browser type, you can recognize this by the padlock icon and/or the "https" protocol in the address bar.

Contact Us
Contact Form
When you contact us via a contact form, we will store the data you provide (your email address, your name, the content of your message, and, if applicable, your phone number) in order to respond to your inquiry. The processing of the data entered into the contact form is based on your consent in accordance with Article 6(1)(a) of the GDPR. If your contact request is related to the performance of a contract or the implementation of pre-contractual measures, we process your data based on Article 6(1)(b) of the GDPR. We will delete the data collected in this context once storage is no longer necessary, or we will restrict processing if statutory retention obligations apply. You may withdraw this consent at any time. The lawfulness of the data processing operations carried out prior to the withdrawal remains unaffected by the withdrawal.

Inquiries via Email, Phone, or Fax
When you contact us via email, phone, or fax, we will store the personal data you provide—including your email address, the content of your message, and, if applicable, your name and phone number—in order to process your request. We will not share this data without your consent.

Data processing is based on Article 6(1)(b) of the GDPR if your inquiry relates to the performance of a contract or is necessary for the implementation of precontractual measures. In all other cases, we process your data based on your consent pursuant to Article 6(1)(a) of the GDPR and/or based on our legitimate interests pursuant to Article 6(1)(f) of the GDPR. Our legitimate interest lies, in particular, in the effective handling of your inquiry.

The data you send us via contact requests will remain with us until you request that we delete it, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g., after your request has been processed). Mandatory legal provisions—in particular, statutory retention periods—remain unaffected.

Chat Inquiries
WhatsApp Chat
To efficiently process your inquiries, we use the live chat and WhatsApp messaging services provided by Meta Platforms Inc. on this website. The provider is WhatsApp Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

The legal basis for the processing of your data is your consent pursuant to Article 6(1)(a) of the GDPR. A Data Processing Agreement (DPA) with WhatsApp governs the lawful processing of data subjects’ data by WhatsApp in accordance with the GDPR.

You can send us inquiries through our chat window. In addition to your chat messages, we store your IP address for legal purposes. You do not need to provide your name in the chat.

The data you enter in the contact form or via chat will be deleted once the purpose has been fulfilled (e.g., after your inquiry has been processed) or upon your request. If there are mandatory legal provisions (such as retention requirements), these will not be affected by the deletion.

If you do not agree to us processing your request via WhatsApp, you may alternatively contact us by [email, phone, or fax].

For more information, please see WhatsApp's Privacy Policy at https://www.whatsapp.com/legal/#privacy-policy/. Email contact for WhatsApp's Data Protection Officer: dpo-inquiries@support.whatsapp.com

Online Store We offer an online store where you can purchase our products. In this context, we process your personal data pursuant to Article 6(1)(b) of the GDPR. Required information necessary for the fulfillment of contracts is marked separately; additional information is voluntary. The data required for the conclusion, performance, or termination of a contract includes:

First Name, Last Name

Billing and Shipping Address

Email address

Billing and Payment Information

Unless we use your contact information for marketing purposes, we will retain the data collected for contract processing until the statutory retention periods expire. Retention periods under commercial and tax law require us to retain the necessary information for a period of ten years (following the conclusion of the contract).

As part of the order processing, we may disclose your required data (title, first and last name, address) to the following third parties for the purpose of fulfilling the contract (Art. 6(1)(b) GDPR), who use this data to process and deliver the order. These third parties are logistics service providers. If you have given your explicit consent during the ordering process, we will also transmit your email address and/or phone number to the shipping service provider prior to delivery of the goods, in accordance with Article 6(1)(a) of the GDPR, for the purpose of tracking the shipment.

Consent may be revoked at any time, with future effect, by notifying the data controller listed above or the service provider.
DHL / Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn. For more information on data processing, please see the privacy policy at https://www.deutschepost.de/de/d/deutsche-post-direkt/deutsche-post-direkt-datenschutz.html.

Customer Account / Registration
You may voluntarily create a customer account, which allows us to store your information for future purchases. When you create an account, the information you provide is stored on a revocable basis. At the same time, we also store your IP address and the date and time of your registration. This information is not shared with third parties.

If you have given your consent, the legal basis for processing the data is Article 6(1)(a) of the GDPR. If the registration serves to fulfill a contract to which you are a party or to take steps prior to entering into a contract, the additional legal basis for processing the data is Article 6(1)(b) of the GDPR.

In addition to the information requested when placing an order, you must provide a password of your choice to set up a customer account. This password, along with your email address, is used to access your customer account. Please keep your personal login information confidential and, in particular, do not disclose it to any unauthorized third parties.

Your data will only be used for as long as necessary to maintain our existing customer relationship. In addition, you can view and edit the data we have stored about you in your customer account at any time. You may close your user account at any time. In that case, your data will be deleted, unless we are required to retain it under commercial and tax laws.

Ordering Gift Certificates
You can order gift certificates from us through our online store. In this case, we will process your personal data to create, bill, and ship the ordered gift certificates in accordance with Article 6(1)(b) of the GDPR.
For this purpose, we collect your name, address, and email address to send you the order confirmation and to clarify any questions that may arise during the ordering process. If you have any further questions or comments, please use the comment field.

Payment Systems / Credit Checks / Fraud Prevention
In our online store, you can choose from various payment methods. To do so, we collect the relevant payment information in order to process your order and complete the payment transaction. In addition, your IP address is processed for technical reasons and to ensure legal compliance.

Certain personal data (required information), without which we cannot fulfill the contract, will be transmitted to our payment service providers for payment processing, depending on the selected payment method.

The payment system we use employs TLS encryption to ensure the secure transmission of your data.

Credit Card Payment
When paying by credit card, the necessary information—such as your name, address, and purchase details—will be forwarded to the respective credit card company.

As is standard for credit card payments, the credit card information is verified and an authorization is processed by Concardis GmbH.

PayPal
PayPal is a company of PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. If you select “PayPal” as a payment option during the ordering process in our online store, your data will be automatically transmitted to PayPal. By selecting this payment option, you consent to the transfer of personal data required for payment processing. The personal data transmitted to PayPal generally includes: first name, last name, address, email address, IP address, and phone number—all of which are necessary for payment processing. Personal data related to the specific order is also required to fulfill the purchase agreement.

PayPal's current privacy policy can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Data Processing for Advertising Purposes
Newsletter
With your consent, you can subscribe to our newsletter, through which we’ll keep you informed about current and interesting offers. We regularly provide updates on our company’s product offerings, events and trade shows, special sales promotions, tips on our product categories, and offers from our partners.

We use the so-called double opt-in procedure for newsletter sign-ups. This means that after you sign up, we will send an email to the email address you provided, asking you to confirm that you wish to receive the newsletter. If you do not confirm your subscription within [24 hours], your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses you used as well as the times of your subscription and confirmation. The purpose of this procedure is to verify your subscription and, if necessary, to investigate any potential misuse of your personal data.

The only required information for receiving the newsletter is your email address. Providing any additional, separately marked information is voluntary and is used to address you personally. After you confirm your subscription, we will store your email address for the purpose of sending you the newsletter. The legal basis for this is Article 6(1)(a) of the GDPR (consent).

You may revoke your consent to receive the newsletter at any time and unsubscribe from it. You can revoke your consent by clicking the "unsubscribe" link provided in every newsletter email.

We work with the following email marketing provider:

Sendinblue GmbH (formerly Newsletter2Go), Köpenicker Straße 126, 10179 Berlin, Germany

Conclusion of a Data Processing Agreement
We have entered into a data processing agreement with Sendinblue GmbH. Under this agreement, Sendinblue GmbH is obligated to protect our customers’ data and not to disclose it to third parties.

The data is collected exclusively in pseudonymized form; this means that the IDs are not linked to your other personal data, and direct identification of individuals is ruled out.

We use the data collected in this way to create a user profile so that we can tailor the newsletter to your individual interests. In doing so, we track when you read our newsletters and which links you click on within them, and use this information to determine your personal interests. We then link this data to the actions you take on our website.

You can opt out of this tracking at any time by clicking the separate "unsubscribe" link provided in every email. The information will be stored for as long as you remain subscribed to the newsletter. After you unsubscribe, we will store the data for purely statistical purposes and in an anonymous form.

Furthermore, this type of tracking is not possible if you have disabled the display of images by default in your email program. In this case, the newsletter will not be displayed in its entirety, and you may not be able to use all of its features. If you manually enable the display of images, the tracking described above will take place.

Contests on Social Media Channels
The processing of personal data is necessary to participate in a contest on our social media channels.

The purpose of data processing is to conduct the sweepstakes. Unless otherwise specified in the respective sweepstakes or unless you have provided us with further explicit consent, the personal data you provide to us in connection with your participation in the sweepstakes will be used exclusively for the administration of the sweepstakes (e.g., determining the winner, notifying the winner, and sending the prize). Participation in our sweepstakes is not possible without providing this data.

The legal basis for the data processing described is generally Article 6(1)(b) of the GDPR. If you have provided consent as part of a sweepstakes, Article 6(1)(a) of the GDPR serves as the legal basis for the data processing based on that consent. If you have provided consent as part of a sweepstakes, you have the option to revoke that consent at any time with future effect.

When we hold a contest on our social media channels, we generally process the following data:

Public profile information, including username
Comments Posted (Text & Image)

Submitted images (and comments, if any)

We collect the following information from winners as part of our contests:

Last Name, First Name, and Address
Email address

We will not disclose your personal data to unauthorized third parties without your express consent. Your data will only be disclosed or transferred to the extent necessary for the fulfillment of the contract, e.g., for the purpose of delivering a prize via a shipping service provider.

After the contest ends, participants’ personal data will be deleted, provided that no further statutory retention periods apply.

Online Reservations
theFork
We have integrated the theFork service, provided by La Fourchette SAS, 70, rue Saint-Lazare, 75009 Paris, France, into our online offerings. theFork allows us to accept online reservations from our guests for our restaurants.
The conclusion of a data processing agreement ensures that personal data is processed exclusively for this purpose. When processing data, theFork is subject to the instructions of the data controller, food-hotel Neuwied GmbH, and does not process any collected data for its own purposes.

For more information on data protection, please visit the theFork website: https://www.thefork.de/legal#datenschutzerklarung-und-cookie-richtlinien

Customer Reviews TrustYou
To enable our guests and customers to rate our establishment, our services, and our products, and to support our own quality management, we have integrated the TrustYou review software—provided by TrustYou GmbH, Steinerstr. 15, 81369 Munich—into our website. After your visit, you have the opportunity to submit an anonymous review of your stay at our property. Provided the legal requirements are met (i.e., your consent), you will receive an email on our behalf containing a link to the review. Submitting a review via the TrustYou review software is voluntary. TrustYou publishes the review in a permanently anonymized form. If you submit a review, the legal basis for the associated data processing is your consent pursuant to Article 6(1)(a) of the GDPR.

You may revoke this consent at any time by sending an informal notice, effective for the future.

For more information about TrustYou and TrustYou's privacy policy, visit https://www.trustyou.com/de/downloads/TrustYou_GmbH_Privacy_Policy_ENG_12-2020_clean.pdf (PDF document)

Messaging Services
We use messaging services to stay in touch with customers and prospective customers.

In this context, user data may be processed outside the European Union. This may pose risks to you as a user and, in some cases, may make it more difficult to enforce your rights. When selecting the messaging services we use, we ensure that the providers commit to complying with the European Union’s data protection standards.

If you use our messenger service, we—food hotel Neuwied GmbH, Langendorfer Straße 155, 56564 Neuwied—are jointly responsible with the provider of the respective messenger service in accordance with Article 26 of the GDPR and other data protection regulations.

We have no control over how personal data is processed by the respective service provider. For example, messaging services may use your data for market research and advertising purposes. Among other things, they may analyze user behavior and create a usage profile based on the user’s resulting interests. Messaging services can read the contact information stored on the devices you use and, if necessary, share it with third parties. Data processing may also affect individuals who are not registered as users of the respective messaging service.

Messenger services provide statistical data in various categories. These statistics are generated and provided by the respective messenger service provider. As users of the messenger service, we have no influence over how they are generated or presented. We do not use the data that is available in aggregated form. Due to the constant evolution of the service providers, the availability and presentation of the data are subject to change; therefore, for further details, we refer you to the service providers’ current privacy policies.

Legal Basis
For the use of messaging services, including the processing of users’ personal data, we request your consent to provide modern and supportive channels for information and interaction for and with our customers and prospective customers in accordance with Article 6(1)(a) of the GDPR. Consent may also be granted through registration, if applicable.

Retention Period Data collected directly by us via messenger services is deleted from our systems as soon as the purpose for its processing no longer applies, you request that we delete it, or you revoke your consent to its storage. Mandatory legal provisions—in particular retention periods—remain unaffected.

We have no control over how long your data is stored by messenger service providers for their own purposes. For more information on this, please contact the service provider directly (e.g., in its privacy policy; see below).

Data Subject Rights
You may generally exercise your rights (right of access, rectification, erasure, restriction of processing, data portability, and the right to lodge a complaint) with both us and the service provider.

Although we share responsibility, please note that we do not have full access to your personal data. For this reason, you should contact the messenger service provider directly regarding requests for information and the exercise of data subject rights. This is because only the providers have access to user data and can take direct action and provide information. If you would like assistance with this, please contact us.

Our messaging services:
WhatsApp
Information about the service provider: WhatsApp Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

On the WhatsApp website at https://www.whatsapp.com/, you will find the privacy policy at https://www.whatsapp.com/legal/#privacy-policy as well as the data protection officer’s email address at mailto:dpo-inquiries@support.whatsapp.com.

Instagram Direct
Information about the service provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

For more information on data protection, please visit:https://instagram.com/about/legal/privacy.

Analysis Tools

Microsoft Advertising (Bing Ads)

The website operator uses Microsoft Advertising. Microsoft Advertising is an online advertising program provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

Microsoft Advertising allows us to display ads on the Bing search engine or on third-party websites when users enter specific search terms on Bing (keyword targeting). Furthermore, targeted ads can be displayed based on user data held by Microsoft (e.g., location data and interests) (audience targeting). As website operators, we can quantitatively evaluate this data by, for example, analyzing which search terms led to the display of our ads and how many ads resulted in clicks.

Use of this service is based on your consent pursuant to Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG. You may withdraw your consent at any time.

Data transfers to the United States are based on the European Commission's Standard Contractual Clauses. For details, please visit:https://learn.microsoft.com/de-de/compliance/regulatory/offering-eu-model-clauses.

The company is certified under the “EU-U.S. Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards when data is processed in the United States. Every company certified under the DPF commits to complying with these data protection standards. For more information on this, please visit the provider’s website at the following link:https://www.dataprivacyframework.gov/participant/6474.

Order Processing

We have entered into a Data Processing Agreement (DPA) for the use of the service mentioned above. This is a contract required under data protection law that ensures the service provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies.” These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie regarding your use of this website is generally transmitted to Google’s servers in the United States and stored there. However, if IP anonymization (AnonymizeIP) is enabled on this website, your IP address will be truncated by Google beforehand within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to Google’s servers in the United States and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics is not combined with any other data held by Google.

This website uses Google Analytics with the “Anonymize IP” extension. This truncates IP addresses before they are processed, making it virtually impossible to identify individuals. If the data collected about you can be used to identify you, it will be deleted immediately.

We use Google Analytics to analyze how our website is used and to make regular improvements. The statistics we collect allow us to improve our website and make it more interesting for you as a user. The legal basis for using Google Analytics is the consent you have provided in accordance with Article 6(1)(a) of the GDPR.

We also use Google Analytics to analyze visitor traffic across devices using a user ID. You can disable cross-device analysis of your usage in your customer account under “My Data,” “Personal Data.”

You can prevent cookies from being stored by adjusting your browser settings accordingly; however, please note that in this case, you may not be able to fully use all features of this website. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address), as well as from processing this data, by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Third-Party Provider Information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of Use: https://www.google.com/analytics/terms/de.html, Privacy Overview: https://support.google.com/analytics/answer/6004245?hl=de, and Privacy Policy: https://policies.google.com/privacy?hl=de&gl=de.

Marketing Tools

Google Tag Manager
This website uses “Google Tag Manager,” a service provided by Google Ireland Limited. Google Tag Manager allows you to manage website tags through a single interface. The Google Tag Manager tool, which implements the tags, is a cookie-free domain and does not itself collect any personal data. Google Tag Manager triggers other tags, which may in turn collect data. Google Tag Manager does not access this data. If deactivation has been performed at the domain or cookie level, it remains in effect for all tracking tags implemented with Google Tag Manager.

Google Tag Manager FAQ: https://www.google.com/intl/de/tagmanager/faq.html

Google Tag Manager Terms of Service: https://www.google.com/intl/de/tagmanager/use-policy.html

Google Dynamic Remarketing
We use “Google Dynamic Remarketing” on our website, a service provided by Google Ireland Limited (hereinafter referred to as “Google”). This is a method we use to reach out to you again. Through this application, our advertisements may be displayed to you as you continue browsing the Internet after visiting our website. This is done using cookies stored in your browser, which Google uses to track and analyze your browsing behavior as you visit various websites. This allows Google to identify your previous visit to our website. According to Google’s own statements, the data collected as part of remarketing is not combined with your personal data, which may be stored by Google. In particular, Google states that pseudonymization is used in remarketing.

We use Google Dynamic Remarketing for marketing and optimization purposes, in particular to provide you with relevant and interesting offers. The service also helps improve campaign management reports and ensure the fair calculation of advertising costs. The legal basis for this is the consent you have provided in accordance with Article 6(1)(a) of the GDPR.

You can prevent the use of cookies by deleting existing cookies and disabling cookie storage in your web browser’s settings. Please note that in this case, you may not be able to fully use all features of our website. You can also prevent cookies from being stored by configuring your web browser to block cookies from the domain www.googleadservices.com. To do so, go to the website https://www.google.de/settings/ads. Please note that this setting will be deleted if you clear your cookies. You can also disable interest-based ads via the link http://optout.aboutads.info/?c=2&lang=EN. This setting will also be reset if you clear your cookies.

Third-party provider information: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland

For more information about Google's use of data, options for adjusting settings and opting out, and data protection, please visit the following Google website.

Google Website Statistics: https://services.google.com/sitestats/de.html

Google Ads
This website uses “Google Ads” (formerly Google AdWords), a service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as “Google”). Google Ads offers the ability to use advertisements on external websites to draw attention to attractive offers on websites that users have already visited. This helps determine how successful individual advertising campaigns are. These advertisements are delivered by Google via so-called “ad servers.” So-called ad server cookies are used for this purpose, which allow certain parameters for measuring success—such as ad impressions or user clicks—to be tracked. If you access our website via a Google ad, Google Ads will store a cookie on your device. These cookies typically expire after 30 days. Cookies are not used to identify you personally. This cookie typically stores the following information as analytics data: unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), and opt-out information (indicating that the user no longer wishes to be targeted). These cookies enable Google to recognize your web browser. If a user visits specific content or pages on a Google Ads customer’s website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to that page. Each Google Ads customer is assigned a different cookie. Cookies therefore cannot be tracked across the websites of Google Ads customers. We ourselves do not collect or process any personal data in connection with the advertising measures mentioned. We receive only anonymized, statistical reports from Google. Based on these reports, we can assess the effectiveness of the advertising measures used. We do not receive any further data from the use of the advertising materials; in particular, we cannot identify users based on this information. Due to the marketing tools used, your browser automatically establishes a direct connection to Google’s servers. We have no influence over the scope or further use of the data collected by Google through the use of Google Ads. To the best of our knowledge, Google receives the information that you have accessed the relevant section of our website or clicked on one of our ads. If you have a Google user account and are logged in, Google can associate your visit with your user account. Even if you are not registered with Google or are not logged in, it is possible that Google may obtain, store, and process your IP address for other purposes.

We use Google Ads for marketing and optimization purposes, specifically to show you relevant and interesting ads, improve our analysis of campaign performance, and ensure that advertising costs are calculated fairly. The legal basis for this is the consent you have provided pursuant to Article 6(1)(a) of the GDPR.

You can prevent cookies from functioning by deleting existing cookies and disabling the storage of new cookies in your web browser settings. Please note that in this case, you may not be able to fully utilize all features of our website. You can also prevent cookies from being stored by configuring your web browser via https://www.google.de/settings/ads to block cookies from the domain www.googleadservices.com. Please note that this setting will be deleted if you clear your cookies. You can also disable interest-based ads via the link https://optout.aboutads.info. Please note that this setting will also be deleted if you clear your cookies in your web browser.

Third-party provider information: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland

For more information about Google's use of data, options for settings and opting out, and data protection, please visit the following Google websites:

Google Website Statistics: https://services.google.com/sitestats/de.html

Microsoft Advertising (Bing Ads)

The website operator uses Microsoft Advertising. Microsoft Advertising is an online advertising program provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

Microsoft Advertising allows us to display ads on the Bing search engine or on third-party websites when a user enters specific search terms on Bing (keyword targeting). Furthermore, targeted ads can be displayed based on user data held by Microsoft (e.g., location data and interests) (audience targeting). As website operators, we can quantitatively evaluate this data by, for example, analyzing which search terms led to the display of our ads and how many ads resulted in corresponding clicks.

We use Microsoft Advertising’s Universal Event Tracking (UET) on this site. This involves collecting pseudonymized data to track the actions you take on our websites after you click on an ad through Microsoft Advertising. UET collects your IP address (anonymized), device identifiers, information about device and browser settings, Microsoft Click ID (stored in a cookie), the duration of your visit to the website, which sections of the website were accessed, which ad brought you to the website, and the keyword you clicked on.

Use of this service is based on your consent pursuant to Art. 6(1)(a) of the GDPR and § 25(1) of the TDDDG. You may withdraw your consent at any time.
Data transfers to the United States are based on the European Commission’s Standard Contractual Clauses. Details can be found here: https://learn.microsoft.com/de-de/compliance/regulatory/offering-eu-model-clauses.

The company is certified under the “EU-U.S. Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards when data is processed in the United States. Every company certified under the DPF commits to complying with these data protection standards. For more information on this, please visit the provider’s website at the following link: https://www.dataprivacyframework.gov/participant/6474.

Order Processing

Embedded Third-Party Content

YouTube
We have embedded YouTube videos in our website that are stored on https://www.youtube.com/ and can be played directly from our website. These are all embedded in “enhanced privacy mode,” which means that no data about you as a user is transmitted to YouTube unless you play the videos. According to YouTube, data is only transmitted once you play the videos. We have no control over this data transmission.

When you visit the website, YouTube receives information indicating that you have accessed the corresponding page on our website. In addition, metadata—which may include personally identifiable information—is transmitted to the service provider. This occurs regardless of whether you are logged in to a YouTube account or do not have a YouTube account. If you are logged in to Google, your data is directly associated with your account. If you do not wish for your data to be associated with your YouTube profile, please log out before activating the feature. YouTube stores your data as usage profiles and uses them for advertising, market research, and/or to tailor its website to your needs. Such analysis is conducted in particular (even for users who are not logged in) to deliver targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you should preferably contact YouTube.

The feature is not activated and data is not transmitted to the service provider until the service is activated. The legal basis for the processing of your data is Article 6(1)(a) of the GDPR (consent). You may revoke your consent at any time with future effect.

Third-party provider information: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland.

For more information on data protection, please visit the following Google website: https://policies.google.com/privacy?hl=de.

Adobe Typekit Web Fonts
Our website uses so-called web fonts from Adobe Typekit to ensure consistent display of certain fonts. When you visit our pages, your browser loads the necessary fonts directly from Adobe so that they can be displayed correctly on your device. In doing so, your browser establishes a connection to Adobe’s servers in the United States. As a result, Adobe becomes aware that our website was accessed via your IP address. According to Adobe, no cookies are stored when the fonts are provided.

The use of Adobe Typekit Web Fonts is necessary to ensure a consistent typographic appearance on our website. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR.

Third-party information: Adobe Systems Software Ireland Limited, Ireland, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland; privacy@adobe.com.

For more information about Adobe Typekit Web Fonts, visit: https://www.adobe.com/de/privacy/policies/typekit.html.

Adobe's privacy policy can be found at: https://www.adobe.com/de/privacy/policy.html.

Processing of (Personal) Data by the Mobile Funnel Operator

General Information

This website uses Mobile Funnel (hereinafter: “Funnel”), operated by Perspective Software GmbH (hereinafter: “Perspective”), a company based in Germany that offers software for creating and operating Mobile Funnel (https://perspective.co/impressum). The data entered when using Mobile Funnel is transmitted via SSL encryption and stored in a database. The operator of this website is solely responsible for this data within the meaning of Art. 24 of the GDPR. Perspective is merely the operator of the software and, in this context, a data processor pursuant to Art. 28 of the GDPR. The basis for the processing by Perspective is a data processing agreement between the controller and Perspective. In addition, Perspective Software GmbH processes further data—some of which may also be personal data—in order to provide its services, particularly for the operation of Mobile Funnel. This is discussed in more detail below.
Data Controller

The data controller as defined by data protection law is:

Perspective Software GmbH
Müggelstraße 22
10247 Berlin
Email: privacy@perspective.co

Access Logs (“Server Logs”)

Every time the Funnel is accessed, general log data—known as server logs—is automatically collected. This data is generally pseudonymous and therefore does not allow for the identification of any natural person. Without this data, it would in some cases be technically impossible to deliver and display the software’s content. Furthermore, the processing of this data is absolutely necessary for security reasons, particularly for controlling access, data entry, data transmission, and data storage. In addition, the anonymous information may be used for statistical purposes as well as to optimize the service and the technology. Moreover, the log files may be reviewed and analyzed retrospectively if there is suspicion of unlawful use of the software. The legal basis for this is found in Section 15(1) of the German Telemedia Act (TMG) and Article 6(1)(f) of the GDPR. Generally, the data collected includes the website’s domain name, the web browser and its version, the operating system, and the timestamp of the access to the software. The user’s IP address is not stored. However, the user is assigned a so-called session ID. The scope of this logging does not exceed the standard scope of any other website on the Internet. These access logs are stored for up to 7 days. There is no right to object.

Collection of User Behavior Data

Generally, data such as the website’s domain name, the web browser and its version, the operating system, the user’s session ID, and the timestamp of the software access are collected. All data that the user enters while using the funnel (e.g., filling out form fields; using interactive components) is assigned to the user via a session ID and made available to the operator of this website. The operator of this website is responsible for deleting, storing, and further processing this personal data in accordance with current legislation.

Use of Cookies

So-called cookies are used in the funnel. These are small text files that are stored on the device you use to access the funnel. The cookies used serve to ensure security when visiting a website (“strictly necessary”), to implement certain functionalities such as default language settings (“functional”), and to improve the user experience or performance on the website (“performance”). Within the funnels, strictly necessary, functional, and performance cookies are used, in particular to implement certain default settings such as language, to store answers provided even when the internet connection is poor, or to analyze the performance of a funnel and the channel through which a user accessed these funnels. The use of cookies is strictly necessary for the provision of our services and thus for the fulfillment of the contract (Art. 6 (1) b) GDPR). Retention period: Up to 1 month or until the end of the browser session. Right to object: You can use your browser settings to decide for yourself whether to allow cookies or to object to their use. Please note that disabling cookies may result in limited or completely disabled functionality of the funnels. The operator of this website has the option to decide individually for each funnel used which choices regarding the use of cookies are offered to the user. It is the responsibility of the website operator to use cookies in accordance with applicable legal restrictions. If the website operator uses extensions from external companies within the funnels, it is the responsibility of the website operator to inform the user of this.

Rights of Affected Individuals

If Perspective Software GmbH, as the data controller, processes personal data, you, as the data subject, have certain rights under Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and purpose of the processing; these may include, in particular, the right of access (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to data portability (Art. 20 GDPR), and the right to object (Art. 21 GDPR). If the processing of personal data is based on your consent, you have the right to withdraw this consent under Article 7(3) of the GDPR. To exercise your rights as a data subject with regard to the data processed for the operation of the funnel, please contact the Data Protection Officer at Perspective Software GmbH (see Section B.).

Final Provisions

Perspective reserves the right to amend this Privacy Policy at any time to ensure that it always complies with current legal requirements or to reflect changes to the services described in the Privacy Policy, such as when new services are introduced. The new Privacy Policy will then apply to any subsequent visits to the Funnel.

Online Video Conferencing Tools

Microsoft Teams
We use the “Microsoft Teams” tool to conduct phone and video conferences, online meetings, video consultations, digital coaching, and/or webinars (hereinafter referred to as “online meetings”). Microsoft Teams is a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

If you visit the Microsoft Teams website (https://teams.microsoft.com/), Microsoft is responsible for data processing. Visiting this website is necessary to download the required software if you do not wish to, or are unable to, use the service directly through a web browser without downloading it.

Data Categories
When using Microsoft Teams, various types of data are processed. The total volume of data processed also depends on the information the user provides before, during, and after an “online meeting.”

The following personal data may generally be subject to processing:

User Information: First Name, Last Name, Phone Number (optional), Email Address, Password (if "Single Sign-On" is not used), Profile Picture (optional), Department (optional)

Meeting metadata:Topic, description (optional), date, time, duration, participants' IP addresses, device/hardware information

For recordings (optional):MP4 file containing all video, audio, and presentation recordings; M4A file containing all audio recordings; text file of the online meeting chat.

When dialing in by phone:Information regarding the incoming and outgoing phone numbers, country name, and start and end times. If applicable, additional connection data, such as the device's IP address, may be stored.

Text, audio, and video data: Youmay have the option to use the chat, question, or poll features during an “online meeting.” The text you enter is processed to display it during the “online meeting” and, if applicable, to log it. To enable video display and audio playback, data from a microphone and any video camera on your device is processed during the meeting. Data transmission from the camera and microphone can be turned off or muted at any time and by any user independently via the Microsoft Teams application.

To participate in an “online meeting” or enter the “meeting room,” you must at least provide your name.

Data Storage
"Online meetings" are not recorded. If we wish to record "online meetings," we will notify you in advance and obtain your consent. You will also be notified of the recording in the Microsoft Teams app.

When using Microsoft Teams, Microsoft logs the content of chats. If necessary for the purpose of logging the results of an online meeting, we may also log chat content.

In the case of webinars, we may also process questions asked by webinar participants for the purposes of recording and following up on webinars

Automated decision-making as defined in Article 22 of the GDPR is not used.

Legal Basis for Data Processing
To the extent that personal data of employees of food hotel Neuwied GmbH is processed, § 26 of the Federal Data Protection Act (BDSG) serves as the legal basis for such data processing.

If, in connection with the use of Microsoft Teams, personal data is not necessary for the establishment, performance, or termination of the employment relationship but is nonetheless an essential component of using Microsoft Teams, then Article 6(1)(f) of the GDPR serves as the legal basis for data processing. In such cases, our legitimate interest lies in the effective conduct of “online meetings.”

Furthermore, the legal basis for data processing in connection with the conduct of “online meetings” is Article 6(1)(b) of the GDPR, provided that the meetings are held within the framework of contractual relationships.

Recipients / Disclosure of Data
Personal data processed in connection with participation in “online meetings” is generally not disclosed to third parties, unless it is specifically intended for such disclosure. Apart from that, data is disclosed to third parties only if we are legally obligated to do so (e.g., by court order) or if the data subjects have expressly consented to the disclosure of their data.

The provider of Microsoft Teams, which assists us in conducting “online meetings,” necessarily gains access to the aforementioned data to the extent provided for in our data processing agreement with Microsoft.

Through the data processing agreement entered into with Microsoft Teams, Microsoft is obligated to comply with the legal requirements of applicable data protection laws based on the EU Standard Contractual Clauses. A current version can be viewed at the following link:

https://www.microsoftvolumelicensing.com/Downloader.aspx?DocumentId=18030.

Data Processing Outside the European Union
As a general rule, data is not processed outside the European Union (EU), as we have limited our data storage to data centers within the European Union. However, we cannot technically rule out the possibility of data being routed to or stored on servers outside the European Union by our data processor, Microsoft.

A secure level of data protection is ensured through the adoption of supplemented EU Standard Data Protection Clauses as well as technical and organizational measures. For example, data is encrypted during transmission over the Internet and is thus generally protected against unauthorized access by third parties. Furthermore, in a statement dated July 20, 2020, Microsoft guarantees—with regard to personal data stored by Microsoft in the U.S. and Europe that may be subject to official requests for information from U.S. authorities—that any court orders that would allow access to personal data will be challenged in court.

For more information on data protection in Microsoft Teams, visit
For additional information on Microsoft's data protection practices, visithttps://privacy.microsoft.com/de-de/privacystatement (section titled "Online Services for Businesses"), as well as:https://www.microsoft.com/de-de/trust-center/privacy/customer-data-definitions

Social Media Presence

Information About Social Media
We maintain publicly accessible profiles on social media platforms to raise awareness of our services and products. Through these platforms, we hope to connect with you as a visitor and user of these pages and our website.

In this context, user data may be processed outside the European Union. This may pose risks to you as a user and, in some cases, may make it more difficult to enforce your rights. When selecting the social media platforms we use, we ensure that the operators commit to complying with EU data protection standards.

When you visit one of our social media pages (e.g., Facebook), we—food hotel Neuwied GmbH, Langendorfer Straße 155, 56564 Neuwied—are jointly responsible with the operator of the respective social media platform in accordance with the GDPR and other data protection regulations.

Data Processing on Social Media Platforms
We have no influence over the processing of personal data by the respective platform operator. For example, social networks such as Facebook use your data for market research and advertising purposes. Among other things, user behavior may be analyzed, and a usage profile may be created based on the user’s resulting interests. Social media operators use cookies to store and further process this information. These are text files that are stored on the user’s various devices. If you have a profile on the respective social media platform and are logged in to it, the storage and analysis even take place across devices. In this way, interest-based advertising can be displayed to you both on and off the respective social media platform. Data processing may also affect individuals who are not registered as users on the respective social media platform.

We can access statistical data in various categories through social media platforms. These statistics are generated and provided by the social media operator. As the operator of the fan page, we have no influence over their generation or presentation. We use this aggregated data (total number of page views, “Likes,” page activity, post interactions, reach, video views, post reach, comments, shared content, replies, percentage of men and women, location by country and city, language, views and clicks in the shop, clicks on route planners, clicks on phone numbers) to make our posts and activities on our fan page more appealing to users. Due to the constant evolution of social media platforms, the availability and presentation of data are subject to change; therefore, we refer you to the platforms’ privacy policies for further details.

Legal Basis
The operation of these fan sites, including the processing of users’ personal data, is based on our legitimate interests in providing a modern and supportive platform for information and interaction for and with our users and visitors, in accordance with Article 6(1)(f) of the GDPR. In some cases, you may also have given a platform operator your consent to data processing; in this case, the legal basis is Article 6(1)(a) of the GDPR.

For a comprehensive description of the relevant data processing and the options for opting out, please refer to the privacy policies and information provided by the respective platform operator.

Retention Period The data we collect directly through our social media channels is deleted from our systems as soon as the purpose for which it was stored no longer applies, you request that we delete it, or you revoke your consent to its storage. Stored cookies remain on your device until you delete them. Mandatory legal provisions—in particular retention periods—remain unaffected.

We have no control over how long your data is stored by social media providers for their own purposes. You can find more information on this directly from the social media provider (e.g., in its privacy policy; see below).

Exercising Your Rights
You may generally exercise your rights (right of access, rectification, erasure, restriction of processing, data portability, and the right to lodge a complaint) with both us and the operator of the respective portal (e.g., Facebook).

Although we share responsibility, please note that we do not have full access to your personal data. For this reason, you should contact the social media platform providers directly regarding requests for information and the exercise of data subject rights. This is because only the providers have access to user data and can take direct action and provide information. If you need assistance with this, please contact us: food hotel Neuwied GmbH, Langendorfer Straße 155, 56564 Neuwied, Email: info@food-hotel.de.

Our Social Media Channels
Facebook:

Facebook:

Provider: Meta Platforms, Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland

Agreement on the Joint Processing of Personal Data on Facebook Pages: https://www.facebook.com/legal/terms/page_controller_addendum

Certification under the "EU-US Data Privacy Framework" (DPF) at https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000GnywAAC&status=Active.

Option to Opt Out: https://www.facebook.com/settings?tab=ads

Instagram:

Provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland Privacy Policy: http://instagram.com/about/legal/privacy

Option to Opt Out: http://instagram.com/about/legal/privacy

Certification under the "EU-US Data Privacy Framework" (DPF) at https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000GnywAAC&status=Active.

kununu:

Provider: New Work SE, Am Strandkai 1, 20457 Hamburg, Germany

Option to Opt Out: https://privacy.xing.com/de/datenschutzerklaerung

LinkedIn:

Provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

Option to Opt Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Pinterest:

Provider: Pinterest Europe Ltd, WeWork, 2 Dublin Landings, N Wall Quay, Dublin 1, D01 V4A3

Option to Opt Out: https://help.pinterest.com/en/article/personalization-and-data

X (Twitter):

Provider: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA

Option to Opt Out: https://twitter.com/personalization

Xing:

Provider: New Work SE, Am Strandkai 1, 20457 Hamburg, Germany

Option to Opt Out: https://privacy.xing.com/de/datenschutzerklaerung

YouTube:

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Option to Opt Out: https://adssettings.google.com/authenticated

Certification under the “EU-US Data Privacy Framework” (DPF) at https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active.

We offer you the option of applying to us via email or by mail. Below, we provide information about the scope, purpose, and use of the personal data collected from you as part of the application process.

Handling of Applicant Data

We offer you the opportunity to apply for a position with us (e.g., by email, mail, or through our online application form). Below, we provide information about the scope, purpose, and use of the personal data collected from you as part of the application process. We assure you that the collection, processing, and use of your data are carried out in accordance with applicable data protection laws and all other legal requirements, and that your data will be treated as strictly confidential.

Scope and Purpose of Data Collection

If you submit an application to us, we will process your associated personal data (e.g., contact and communication information, application documents, notes taken during interviews, etc.) to the extent necessary to make a decision regarding the establishment of an employment relationship. The legal basis for this is Section 26 of the German Federal Data Protection Act (BDSG) (initiation of an employment relationship), Article 6(1)(b) of the General Data Protection Regulation (GDPR) (general pre-contractual measures), and—if you have provided consent—Article 6(1)(a) of the GDPR. You may withdraw your consent at any time. Your personal data will be shared within our company exclusively with those individuals involved in processing your application.

If your application is successful, the data you submitted will be stored in our data processing systems in accordance with Section 26 of the German Federal Data Protection Act (BDSG) and Article 6(1)(b) of the General Data Protection Regulation (GDPR) for the purpose of administering the employment relationship.

Data Retention Period

If we are unable to offer you a position, if you decline a job offer, or if you withdraw your application, we reserve the right to retain the data you have submitted for up to 6 months from the end of the application process (rejection or withdrawal of the application) based on our legitimate interests (Art. 6(1)(f) GDPR). After that, the data will be deleted and the physical application documents will be destroyed. This retention serves, in particular, as evidence in the event of a legal dispute. If it becomes apparent that the data will be required after the 6-month period has expired (e.g., due to an impending or pending legal dispute), the data will not be deleted until the purpose for its continued retention no longer applies.

Data may also be retained for a longer period if you have provided the appropriate consent (Art. 6(1)(a) of the GDPR) or if statutory retention requirements prevent its deletion.

Inclusion in the Candidate Pool

If we do not extend a job offer to you, we may add you to our applicant pool. If you are added to the pool, all documents and information from your application will be transferred to the applicant pool so that we can contact you should any suitable openings arise.

Inclusion in the candidate pool is based solely on your explicit consent (Art. 6(1)(a) GDPR). Providing consent is voluntary and has no bearing on the ongoing application process.The data subject may withdraw their consent at any time.In this case, the data will be permanently deleted from the applicant pool, provided there are no legal grounds for retaining it.

Data from the applicant pool will be permanently deleted no later than two years after consent is granted.

Brick-and-mortar business premises

Registration Form pursuant to Sections 29 and 30 of the Federal Registration Act (BMG)
The requirement to complete a registration form when providing lodging to guests is governed by federal and state laws. The scope of the data collected is specified by law. This includes:

Check-in & Check-out Dates
Guest's First and Last Name
Date of Birth
Nationality
Address
Number of fellow travelers and their nationalities
ID Number for International Guests

Security Cameras
We use video surveillance in our stores to detect criminal offenses, protect property, prevent vandalism, and deter such acts. Audio is not recorded. The legal basis is Article 6(1)(f) of the GDPR. The use of video surveillance is indicated by a clearly visible pictogram in the stores. We generally delete the footage from the security cameras 72 hours after it is recorded. In the event of a crime, we reserve the right to store the footage until the purpose of the collection no longer applies. The footage is not transferred to third parties, with the exception of investigative authorities who request the footage in the event of a crime. Maintenance companies contracted by us may have access to stored data for installation and maintenance purposes.

Age Verification
For the sale of age-restricted products (such as alcohol and tobacco products), our cashiers will visually inspect identification documents to verify the customer’s age. The legal basis for this is Article 6(1)(c) of the GDPR.

Processing of Cashless Payments
When you make a payment with your debit card, credit card, or using the contactless payment method (NFC), we, as the merchant, collect personal data via the payment terminal. We then transmit this collected data to the network operator. The network operator and the respective payment service providers responsible for accepting and settling payment transactions (acquirers) further process the data, in particular for payment processing, to prevent card fraud, to limit the risk of payment defaults, and for legally mandated purposes, such as combating money laundering and law enforcement. For these purposes, your data is also transferred to other data controllers, such as your card-issuing bank.

Data Controller
We, as the merchant, and the network operator or acquirer are each separate data controllers responsible for processing the data.

As the payee, we are responsible for operating the payment terminal at the checkout and, where applicable, for our internal network up to the point of secure transmission via the Internet or telephone line to the network operator. The network operator and the acquirer are responsible for the further processing of the data, in particular for executing and settling the payment transactions.

When using electronic payment methods, data is transmitted to the company acting as the so-called network operator, including its name and contact information.

For information regarding data processing by [Name of Network Operator], please refer to the privacy policy at [Link to the network operator's privacy policy].

For information regarding data processing by [Name of Acquirer], please refer to the privacy policy at [Link to the Acquirer's Privacy Policy].

Nature and Scope
We process your card information (IBAN or account number and BIC, card expiration date, and card serial number) and other payment data (amount, date, time, terminal ID, location, company, and branch where you make the payment, and your signature).

If a direct debit is not honored (e.g., due to revocation), we will collect the data related to the returned direct debit as well as the data associated with the outstanding debt (first and last name, address, proof of purchase, bank fees incurred, late fees, and the reason for the returned direct debit).

Most of the information listed above is stored on your card. We receive this information when the card is swiped at the payment terminal. We obtain your PIN or signature from you. In the event of a chargeback, we may receive information from your credit union or bank.

Purpose/Legal Basis
We process your data, in particular, to fulfill the purchase agreement (legal basis: Art. 6(1)(b) of the GDPR), to comply with legal obligations (legal basis: Art. 6(c) of the GDPR), and to investigate fraud and other criminal offenses (Art. 6(1)(f) of the GDPR), as well as to pursue our legitimate interest in protecting our assets and preventing payment defaults.

The network operator processes the data, in particular, for payment processing (legal basis: Art. 6(1)(b) GDPR), to prevent card fraud, to limit the risk of payment defaults (legal basis: Art. 6(1)(f) GDPR, pursuit of the legitimate interest in protecting assets), and for purposes required by law, such as combating money laundering and criminal prosecution (Art. 6(1)(c) GDPR). For more information on this, please contact the payment service provider or your bank.

Disclosure to Third Parties
We transmit the data listed above to Concadis GmbH, Helfmann-Park 7, 65760 Eschborn, for the purpose of processing payments. Concadis GmbH, in turn, transmits this data to your participating bank or credit card company. To the extent necessary for payment processing, your data may be transmitted to other participating service providers as part of this payment processing.

Transfer to Third Countries
We do not transfer your payment data to third countries or to organizations outside the EU. Such a transfer can only take place if you pay by credit card and the credit card company is based outside the EU.

Providing Data
Providing your data is voluntary. You are under no legal or contractual obligation to provide us with your data. However, a card payment is not possible without this information.

Business Relationships

The following information explains how we handle your data when you contact us, when contract negotiations are underway with us, and/or when contractual agreements are in place with us.

Purposes of Processing and Legal Basis
Data processing is carried out for the purpose of contract fulfillment. The processing of your data is necessary for the initiation and fulfillment of contracts pursuant to Article 6(1)(b) of the GDPR.

Furthermore, the processing of your personal data may be necessary on the basis of Article 6(1)(f) of the GDPR to protect our legitimate interests. Our legitimate interests include avoiding economic disadvantages through credit checks, inviting you to events, asserting legal claims and avoiding legal disadvantages (e.g., in the event of insolvency), defending against threats and liability claims and avoiding legal risks, sending emails, and preventing criminal offenses.

Data Categories and Data Sources
We process the following categories of data:

Master and contact data: Title, name (first and last), department and position within the company, address, email, phone, fax, date of birth, purchase history, contract details, billing information.

The data from the categories listed above was provided to us directly by our customers and prospective customers.

Recipient
We do not share your personal data with third parties. Exceptions to this include our service partners when necessary to fulfill the contract, such as package and mail delivery services, banks for processing direct debits, tax authorities, and state agencies (e.g., the State Statistical Office).

Retention Period
The personal data stored about you will be deleted upon fulfillment of the contract, provided that no further statutory retention obligations prevent this. Such data includes, for example, information related to commercial and financial law. This data will be deleted after ten years in accordance with legal requirements, unless longer retention periods are mandated or necessary for legitimate reasons. If you revoke your consent to the use of your data, it will be deleted immediately, provided that the reasons stated above do not preclude this.

Right to Object
You have the right to object to the processing of your data. You may object to the use of your data at any time, effective for the future.

Provision of Data
The provision of personal data is required by contract or is necessary for entering into a contract. If the required personal data is not provided, this would mean that we would be unable to enter into a business relationship with you.

Privacy Policy and Legal Notice for Social Media

Click here to view our legal notice and privacy policy for our social media accounts.

Legal Notice: https://www.food-hotel.de/wp-content/uploads/Impressum-Food-Hotel-social-Media.pdf

Customer testimonials

The Food Hotel is an ideal starting point for excursions to the Rhine, Moselle and Lahn. It is also centrally located for tours to Bonn and Cologne. In this respect, it is just as suitable for business travelers as for vacationers.

Everything well organized, very friendly and helpful staff in all areas, clean rooms and bathrooms, plus exciting decor. And the restaurant has very tasty cuisine. The BBQ evening was excellent.

Here was a great idea implemented great. Great rooms, large and clean. The dinner and breakfast left nothing to be desired. The staff is very friendly and helpful.

Very nice, cozy, unusual and spacious rooms. The breakfast is very varied, there is hardly a wish unfulfilled and is prepared with a lot of love.

Super location and great rooms. Very friendly staff. Great breakfast with everything your heart desires. We will definitely like to stay there again.

We are thrilled by the great concept and the pleasant atmosphere and were not the last time here. Very friendly and attentive staff, professional conference support and very tasty food. Absolutely recommendable!

The Food Hotel is a modern business hotel, where almost exclusively business travelers are accommodated during the week. The location is very good due to the proximity to the center, and the train station is also in the immediate vicinity. The rooms are modern and functionally furnished.

Great hotel with fantastic staff. Rarely have I seen the saying “the guest is king” put into practice so well. Bravo—we’d love to come back. We stayed in a Raffaello-themed room, and it was wonderful. We’ll definitely be back. The breakfast was top-notch. The staff in every department were extremely friendly and service-oriented. A fantastic stay. You really feel at home here, and the guest truly is king.

Very friendly and accommodating staff—beautiful rooms, fantastic food! We always enjoy coming back to the food hotel in Neuwied for our staff events. —Ms. Dostert (Assistant to the Sales Manager, Viessmann Central Region)

We had a wonderful girls' weekend at your hotel. The hotel was top-notch, the rooms were unique and clean, and the staff was incredibly nice, attentive, and always friendly. We'd definitely come back anytime.

Your service staff was always available to answer our questions and provided us with helpful advice and assistance. I would especially like to highlight the friendliness and professionalism of your staff. Everyone, whether at the front desk or in the restaurant, always greeted us with a smile and made us feel welcome. State Chamber of Pharmacists of Rhineland-Palatinate

It was simply amazing! The food was incredible—a solid 10 out of 10. The guests raved about it, especially the salmon and the lamb. The bride and groom were over the moon and absolutely delighted.
Angelika Siebert, Wedding Planner

Your event space was perfect, and the food you provided was truly delicious. I’d also like to thank you for letting us enjoy the breakfast buffet as early as 6 a.m. on September 24. That was fantastic!!! All the staff were always friendly and helpful.

We felt very comfortable and were delighted with the staff in every area! All our requests were handled promptly, with great friendliness and courtesy. The food in the restaurant received high praise. The catering during the conference was also excellent—the fruit and the fully automatic coffee machine were particularly well-received. Some of the themed rooms could have been designed a bit better by the sponsors.