Privacy Policy
GENERAL
We take the protection of your personal data very seriously and treat your personal data confidentially and in accordance with the applicable data protection regulations and this data protection statement.
With the following information, we would like to offer users of this website clarification on the nature, scope and purpose of the collection and use of personal data by us. The legal bases of the data protection are to be found, inter alia, in the German Federal Data Protection Act (BDSG), the Telemedia Act (TMG) and in the European General Data Protection Regulation.
Who is responsible for data processing and who can I contact?
The responsible body within the sense of data protection law is:
CORA APARTMENTS
Tschaikowskistraße 23,
04105 Leipzig
GERMANY
E-Mail : hello@cora-apartments.de
Tel : +49 (0) 173 2183320
What do we use your data for?
In principle, you can visit this website without informing us of your identity unless you send us an e-mail or send a message using the contact form, register or make a booking via this website. In these cases, we shall only process the data required for responding to your request or for the provision of our services. What data is collected, is clear from the respective input forms. The necessary items of information are marked as mandatory fields. Where we ask you for further information, this shall be voluntary information.
DATA COLLECTION ON OUR WEBSITE
SSL OR TLS ENCRYPTION
This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as the inquiries you send to us as the site operator. You can recognize an encrypted connection in your browser's address line when it changes from "http://" to "https://" and the lock icon is displayed in your browser's address bar.
If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.
Making contact via our website / registration
If you make contact or register with us by phone, by post, e-mail or via our website, we shall process your personal data for the purpose of responding to your requests, the provision of information and, if necessary, the sending of information material upon demand.
This shall concern in particular your surname and first name, your contact information, such as phone numbers, e-mail and fax, and possibly the name of the company / institution or organisation for which you work. In some cases, we will entrust a contract processor with the processing.
The legal basis for the processing of personal data Article 6 (1) f) GDPR. The data shall be treated confidentially and shall not be passed on to third parties.
Our legitimate interest in the processing of your personal data lies in providing you with the information you have requested.
Your data shall be deleted after the expiry of the statutory limitation periods and any resulting claims.
Reservation via our website
If you make a booking via our website www.cora-apartments.com, we shall process your personal data.
This shall involve your surname and first name, you title and academic degree where applicable, your address, contact information, such as your e-mail address and phone number and your credit card details.
The processing is performed for purposes of clear identification of the contractual partner and the initiation, implementation, administration and settlement of contracts, the issuing of invoices/credit notes, the administration and enforcement of claims and compliance with statutory requirements and data protection law (Article 6 (1) b) and c) GDPR). Where necessary, we shall process your data beyond the actual fulfilment of the contract in order to safeguard our legitimate interests or those of third parties for purposes of the assertion of legal claims and of defence in the case of legal disputes, for direct advertising, and in order to guarantee IT security. Furthermore, we shall process your data in order to be able to better design our offers on an individual basis or to more closely match your needs (Article 6 (1) f) GDPR).
In some cases, we shall entrust a contract processor with the processing. The data shall be treated confidentially and shall not be passed on to third parties.
We shall store the data for the duration of the contractual relationship with the customer. Should the data no longer be required to fulfil the contractual relationship, we shall delete the data after the expiry of the statutory limitation periods, any resulting claims and the relevant statutory retention obligations.
Cookies
Our website uses cookies. Cookies are text files which are stored in the internet browser or by the internet browser on the user’s computer system. If a user retrieves a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic character string, which allows unique identification of the browser when the website is revisited.
The legal basis for the processing of personal data using technically necessary cookies is Art. 6 (1) f) GDPR.
The purpose of the use of technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser can be recognized again even after a change of page. We do not use the user data collected by technically necessary cookies users to create user profiles or to provide visitors to our pages with advertising. The information generated by the cookie about your use of this website shall not be passed on to third parties.
Cookies are stored on your computer and transmitted by this to our site. Therefore, as a user you have full control over the use of cookies. You have the option to prevent the use of cookies. To do this, you must change the corresponding settings in your internet browser (e.g. Internet Explorer, Firefox, Mozilla, Opera, Safari, etc.). Previously stored cookies can be deleted at any time. This can also be automated. If cookies are disabled for our website, it is possible that not all of the features of the website will be usable to their full extent.
Access data / server log files
The provider (or its webspace provider) collects data on every access to the offer (so-called server log files). Access data includes:
The provider uses the log data only for statistical purposes and for purposes of the security and optimisation of the offer. The provider reserves the right, however, to subsequently check the log data, should concrete evidence exist regarding a legitimate suspicion of unlawful use. The legal basis for the temporary storage of the data and log files is Art. 6 (1) f) GDPR.
The data shall be deleted as soon as it is no longer required for the achievement of the purpose of the collection of such. Where the data is collected for the provision of the website, this shall be the case once the respective session is finished. The data stored in the log files shall be deleted after 30 days at the latest.
The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. It shall therefore not be possible to object to this.
Are decisions made automatically including profiling?
We generally do not use any automated decision-making including profiling in accordance with Article 22 GDPR. In the event that we deploy profiling for targeted marketing within the framework of our activities, you shall be informed of such separately.
We transmit personally identifiable data to third parties only to the extent required to fulfill the terms of your contract, for example, to companies entrusted to deliver goods to your location or banks entrusted to process your payments. Your data will not be transmitted for any other purpose unless you have given your express permission to do so. Your data will not be disclosed to third parties for advertising purposes without your express consent.
The basis for data processing is Art. 6 (1) (b) of the EU DSGVOGDPR, which allows the processing of data to fulfill a contract or for measures preliminary to a contract.
Payment
Maestro, Visa, Mastercard, American Express
If you execute the payment by credit card, the payment is handled by the payment provider Concardis GmbH, Helfmann-Park 7, 65760 Eschborn / Germany. The required data (card number, validity and check number are forwarded in encrypted form to the payment provider and are not visible to the website operator.) The electronic payment method by credit card is PCI-DSS certified and offers the highest possible data security to the customer.
PayPal
On our website we offer u.a. Payment via PayPal. Provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”).
If you choose to pay via PayPal, the payment details you enter will be sent to PayPal.
The transmission of your data to PayPal is based on Art. 6 para. 1 lit. b DSGVO (contract execution).
Integration of services, third-party content and references
It may be the case that third-party content, such as YouTube videos, maps from Google Maps, RSS feeds or graphics from other websites may be integrated within this online offer. This shall always presuppose that the providers of such content (hereinafter referred to as the "Third Party Providers") become aware of the IP address of the user. Because without the IP address, they would not be able to send the content to the respective user's browser. The IP address is thus required for the presentation of such content. We strive to only use such content, where the respective provider uses the IP address solely for the delivery of the content. However, we have no influence on whether the third-party provider stores the IP address for statistical purposes, for example. To the extent that we are aware of such, we shall explain this to the user.
In the case of direct or indirect references to other websites ("hyperlinks") which lie outside of our area of responsibility, an obligation to assume liability would take effect exclusively where we had knowledge of the contents and where it would have been technically and reasonably possible to prevent the use in the event of illegal content.
We hereby expressly declare that, at the time of the link being made, no illegal contents were recognisable on the linked pages. We have no influence on the current and future design, contents or authorship of the linked/networked pages.
We therefore expressly dissociate ourselves herewith from all contents of all linked/networked pages which were changed after the link was made. This statement shall apply to all links and references made within the own website and for external entries in our guest books, discussion forums, link directories, mailing lists and all other forms of databases, to whose contents external write accesses are possible. Liability for illegal, incorrect or incomplete contents and especially for damages resulting from the use or non-use of information presented on such a basis shall rest solely with the provider of the page to which the reference was made, not with the person/entity who merely refers to the respective publication via links.
Permanent control of the contents of the linked pages is not reasonable without concrete evidence of a violation of the law. Should we become aware of any violations of the law, we shall immediately remove such links.
Which third-party modules, plug-ins and tools are used on the website?
For uniform representation of fonts, this page uses web fonts provided by Google. When you open a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.
For this purpose your browser has to establish a direct connection to Google servers. Google thus becomes aware that our web page was accessed via your IP address. The use of Google Web fonts is done in the interest of a uniform and attractive presentation of our website. This constitutes a justified interest pursuant to Art. 6 (1) (f) of the EU DSGVOGDPR.
If your browser does not support web fonts, a standard font is used by your computer.
Further information about handling user data, can be found at https://developers.google.com/fonts/faqand in Google's privacy policy at https://www.google.com/policies/privacy/.
This site uses the Google Maps map service via an API. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use Google Maps, it is necessary to save your IP address. This information is generally transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.
The use of Google Maps is in the interest of making our website appealing and to facilitate the location of places specified by us on the website. This constitutes a justified interest pursuant to Art. 6 (1) (f) of the EU DSGVOGDPR.
Further information about handling user data, can be found in the data protection declaration of Google at https://www.google.de/intl/de/policies/privacy/.
YouTube
Our website uses plug-ins from the Google-operated website, YouTube. The operator of the pages is YouTube, LLC., 901 Cherry Ave, San Bruno, CA 94066, USA.
In order to increase the protection of your data when you visit our website, the YouTube plug-in is integrated into the site by means of a so-called "2-Click" or "Shariff" solution. This integration ensures that when you retrieve a web page containing the YouTube plug-in, no connection is immediately made to the YouTube servers. Only when you click on the “activate video” button does your browser establish a direct connection to the YouTube servers. In doing do, the YouTube server is informed regarding which of our pages you have visited.
If you are logged in to your YouTube account, you shall allow YouTube to assign your surfing behaviour directly to your personal profile. You can avoid this by logging out of your YouTube account.
The use of YouTube is in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 (1) f) GDPR.
For further information on how user data is handled, please refer to the YouTube data protection statement at: https://www.google.de/intl/de/policies/privacy
FACEBOOK, INSTAGRAM, PINTEREST & WHATSAPP
Furthermore, our website also contains so-called "social plug-ins" from online social networks
In order to increase the protection of your data when you visit a website within our internet presence, the plug-ins are integrated into the site by means of a so-called "2-Click" or "Shariff" solution. This integration ensures that when you retrieve a web page containing such plug-ins, no connection is immediately made to the Facebook, Twitter, Pinterest and Whatsapp servers. Only when you activate the plug-ins and thus give your consent to the transfer of data does your browser establish a direct connection to the Facebook, Instagram, Pinterest and Whatsapp servers.
The content of the respective plug-in is transmitted directly to your browser and is integrated into the website. The plug-in then transmits data (including your IP address) to the operators of the named social networks. We have no influence on the amount of data that the social networks collect with the assistance of plug-ins. To our knowledge, Facebook, Twitter, Instagram and PINTEREST always obtain information on which of our web pages you have currently and previously called up. By calling up the plug-ins, Facebook, Twitter, Instagram and Pinterest then also receive the information that your browser has accessed the relevant page of our website, even if you do not have a profile in the social networks in question or are not currently logged in. This information (including your IP address) is transmitted directly by your browser to a Facebook, Twitter, Instagram or Pinterest server in the USA and is stored there. The information may possibly be published on the respective social network and be shown to your contacts. Because of the transmission abroad, we refer to Point 7 of this data protection statement.
For information on the purpose and scope of the data collection and further processing and use of the data by the named social networks and your rights in this respect and settings options for protecting your privacy, please refer to the data protection notices at:
http://www.facebook.com/policy.php
HTTPS://HELP.INSTAGRAM.COM/155833707900388
https://policy.pinterest.com/de/privacy-policy
https://www.whatsapp.com/privacy
If you are a member of one of the social networks, and you would like to limit the collection of data on our web pages and the merging of your user data with the data stored in the respective social network, you should log out there before you visit our website.
ANALYSis TOOLS AND ADVERTISING
Google Universal Analytics
This website uses web analytics services with Google Universal Analytics. Provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. The usage for the areas “Location”, “Internet Browser”, “Orders”, “Movement behavior”, “Previous website” and “Time of server request” are analyzed. Google Universal Analytics is an extension of Google Analytics. This now enables cross-device analysis. As a result, the type of stored ID has changed. For Google Analytics, this is the client ID and Universal Analytics is the user ID.
Google Universal Analytics stores “cookies” with a random user ID in your Internet browser. With this, you can be recognized again when you visit again and advertising measures can be optimized in your interest. The information generated by the cookie about your use of this website is usually transmitted to a Google server in Ireland and possibly the US and stored there for 14 months. Google Universal Analytics cookies are stored on the basis of Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in analyzing user behavior in order to optimize its offer as well as its advertising. There is a pseudonymized evaluation by randomly generated User ID’s.
Google Analytics is subject to the “EU-US Privacy Shield”. See also: https://support.google.com/analytics/answer/7105316?hl=en
For more information on how to handle user data on Google Analytics, please refer to the Google Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=en.
IP anonymization
We have activated the function IP anonymization on this website. As a result, your IP address will be truncated by Google within member states of the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. The IP address provided by Google Analytics within the framework of Google Analytics will not be merged with other data provided by Google.
Disable via browser plugin
You can prevent the storage of cookies by a corresponding setting of your browser software; however, we point out that in this case you may not be able to use all functions of this website in full. You can prevent the collection of the data generated by the cookie and related to your use of the website (including your anonymized IP address) to Google as well as the processing of this data by Google by downloading the available under the following link browser plugin and install: https://tools.google.com/dlpage/gaoptout?hl=en.
Order processing
We have entered into a contract data processing agreement with Google and are fully implementing the strict requirements of the German data protection authorities when using Google Universal Analytics.
Demographics on Google Universal Analytics
This website uses the “demographics” feature of Google Universal Analytics. As a result, reports can be produced that contain information on the age, gender and interests of the site visitors. These data are from interest-based advertising from Google and from third-party visitor data. This data can not be assigned to a specific person. You can disable this feature at any time through the ad settings in your Google Account, or generally prohibit the collection of your data by Google Analytics as described in the section “Opposition to data collection”.
Google Adwords – Conversion Tracking
To improve the targeted navigation (“short advertising paths”) of our website, we carry out a so-called conversion tracking. The basis for this is a legitimate interest in the analysis of user behavior, (movement behavior) in order to optimize both the website and the advertising. The storage of “conversion cookies” is based on Art. 6 para. 1 lit. f DSGVO. Cookies are small text files that the Internet browser stores on the user’s computer. These cookies lose their validity after 30 days and are not used for the personal identification of the users.
Opposition Conversion Tracking
If you do not want to participate in tracking, you can opt-out of this by easily disabling the Google Conversion Tracking cookie through its Internet browser under User Preferences. Please follow this link for more information: https://support.google.com/searchads/answer/6193792?hl=en
For more information about Google AdWords and Google Conversion Tracking, see the Google Privacy Policy: https://www.google.com/policies/privacy/.
You can set your browser so that you are informed about the setting of cookies and cookies only in individual cases allow, the acceptance of cookies for certain cases or generally exclude and activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.
Google AdSense
This website uses Google AdSense, a service for integrating advertisements of Google Inc. (“Google”). Provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
Google AdSense uses so-called “cookies”, text files that are stored on your computer and that allow an analysis of the use of the website. Google AdSense also uses so-called web beacons (invisible graphics). These web beacons can be used to evaluate information such as visitor traffic on these pages. From the evaluations, the appropriate advertising overlays for the user of our website are preselected. Adsense works in conjunction with Google Analytics. We have made sure that your IP address is anonymized by Google Analytics before being transferred to Google Ireland / USA.
The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. The storage of AdSense cookies is based on Art. 6 para. 1 lit. f DSGVO.
To stop receiving user related advertising, please follow this link: https://adssettings.google.com/ . There you can disable various types of advertising.
Google Site Tag
This website uses Google Site Tag, a service for collecting and transferring data (non-personal) to Google Analytics of Google Inc. (“Google”). Provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
Google Site Tag uses so-called “code snippets” which are incorporated on the website. The Site Tag Manager makes it possible e.g. to provide a Google Analytics opt-out link for website visitors. The mention of this service is made for reasons of transparency.
Bing ads
We use Bing Ads (Bing Universal Event Tracking – UET) from Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, USA) on our website. In order to analyze and improve our online offer, a cookie is stored on the computer of the website visitor. The IP address and browser information are recorded and transmitted to the provider. The cookie contains a GUID assigned to the user’s browser and / or an ID assigned to the user as long as he is authenticated via the associated Microsoft account. The cookie expires automatically after 13 months. Remarketing measures automatically save the data to Microsoft Advertising for 6 months, but are not used by our company for these purposes. Microsoft Advertising does not sell this information to third parties, and it will not be shared with other advertisers. Bing Ads tells i31 Hotel GmbH only the total number of visitors who have clicked on a Bing Ad / Ad and were then redirected to the Conversion page. For our hotel i31 there is a legitimate interest to use Bing Ads for the optimization of advertising measures according to legal basis Art. 6 (1) f GDPR.
You can control and oppose the use of Microsoft’s interest-based advertising data by visiting the Microsoft opt-out page: https://about.ads.microsoft.com/en-gb/resources/policies/opt-out-of-the-microsoft-advertising-optimization-program
For more information about privacy and cookies on Microsoft Bing Ads, please refer to the Microsoft Privacy Policy: https://privacy.microsoft.com/en-us/privacystatement.
FAQ: https://help.ads.microsoft.com/#apex/3/en/53056/2/#exp69
Microsoft is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European privacy legislation: https://www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK&status=Active.
Rights of the persons concerned
In accordance with Article 15 GDPR, you have the right to request information about the personal data stored by us about you at any time and free of charge.
Furthermore, in accordance with Article 16 GDPR you may request the rectification of incorrect data and, in accordance with Article 17 GDPR, the deletion of personal data, unless the processing is required for the exercise of the right to freedom of expression and information, for compliance with a legal obligation or for the assertion, exercise or defence of legal claims.
Furthermore, in accordance with Article 18 GDPR, you have the right to request the blocking or restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you reject the deletion and we no longer require the data, but you require this for the assertion, exercise or defence of legal claims, or you have lodged an objection to the processing in accordance with Article 21 GDPR.
Insofar as the conditions of Article 20 GDPR exist, you shall have the right to obtain the personal data with which you have provided us in a structured, common and machine-readable format and to request transmission to another responsible body.
If you are of the opinion that the processing of your personal data by us is not in conformity with applicable law, in accordance with Art. 77 GDPR, you may ultimately raise a complaint with a supervisory authority.
Special note on the right of objection in accordance with Article 21 GDPR
Based on reasons related to your specific situation, you have the right to submit an objection at any time to the processing of personal data affecting you, which takes place in accordance with Article 6 (1) f) GDPR (legitimate interest in a processing of personal data based on a balancing of interests).
Should you object to the processing of personal data, we shall no longer process your personal data, unless we can prove urgent legitimate reasons for said processing, which outweigh your interests, rights and freedoms or that the processing serves the assertion, exercise or defence of legal claims.
The objection may be entered form-free under the heading "objection to the processing of personal data" whereby your name and your address are to be stated. This should be addressed to:
CORA APARTMENTS
Tschaikowskistraße 23,
04105 Leipzig
GERMANY
E-Mail : hello@cora-apartments.de
October 2022