Privacy Policy

1. Controller

The controller for data processing on this website, in the sense of the General Data Protection Regulation (GDPR), is:

S4H Schwarzenbach Hotelsoftware
Senserstr. 2
82140 Olching
Germany

Email: kontakt[at]software4hotels.de

2. General Information on Data Processing

We take the protection of your personal data very seriously. We treat your personal data confidentially and process it exclusively within the framework of applicable data protection regulations, in particular the General Data Protection Regulation (GDPR) and the Telecommunications-Digital Services Data Protection Act (TDDDG).

This privacy policy informs you about which personal data we collect when you visit our website, use our services, or contact us, for what purposes we process this data, and on what legal basis this occurs.

Personal data is any information relating to an identified or identifiable natural person. This includes, for example, your name, email address, telephone number, IP address, and information you provide to us when contacting us.

3. Visiting Our Website and Server Log Files

Each time you access our website, information is automatically collected by the web server and temporarily stored in so-called server log files.

The following data may be processed in particular:

Website or URL accessed
Date and time of access
Amount of data transferred
Website from which the access originates (referrer URL)
Browser type and browser version
Operating system used
IP address
Request status code

The processing is carried out to technically provide the website, ensure the stability and security of our information technology systems, and to detect and investigate possible attacks, misuse, or technical disruptions.

The legal basis for the processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in particular in the secure, stable, and technically proper provision of our website.

Server log files are generally stored for a maximum of 7 days and then deleted, unless longer storage is exceptionally required to resolve a specific security incident or to assert or defend legal claims.

4. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Cookies are small text files that are stored on your device. They can be used to enable the technical function of the website, store settings, or – if you have consented – to analyze website usage or support marketing measures.

Technically Necessary Cookies

Technically necessary cookies are those that are required for the operation and basic functions of our website.

The legal requirements of § 25 para. 1 and para. 2 TDDDG apply to the setting or reading of technically necessary information on your device. Insofar as personal data is processed in this context, the processing is based on the respective applicable legal basis of the GDPR.

Analytics, Statistics, and Marketing Technologies

Non-technically necessary cookies and similar technologies are generally only used if you have given your consent.

The legal basis for storing or reading information on your device in this case is § 25 para. 1 TDDDG. If personal data is subsequently processed, the processing is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR.

You can revoke or change your consent at any time with effect for the future via the cookie settings on our website.

Cookie Banner

We use the cookie banner integrated into Shopify to manage your consent.

Via the cookie banner, you can give your consent for non-essential cookies and similar technologies, refuse them, or change your selection.

5. Shopify

Our website and online shop are operated with Shopify.

Shopify provides the technical infrastructure of our online shop and processes personal data that may arise when using our website, placing orders, and interacting with our online shop in other ways.

This may include, in particular, technical data, device information, IP address, browser information, cookie information, and order and contact data entered by you.

The processing is carried out in particular for the technical provision of the website, the processing of orders and payments, and for the security and operation of our online shop.

Shopify Network Intelligence is deactivated in our shop.

Further information on the processing of personal data by Shopify can be found in Shopify's privacy policy:

https://www.shopify.com/de/legal/privacy/consumers

6. Google Ads Conversion Tracking via AdTrack

We use AdTrack – Google Ads Tracking to measure conversions in connection with our Google Ads advertising.

AdTrack enables, in particular, the recording and assignment of interactions with Google ads, for example, when visitors perform an action defined as a conversion after visiting our website.

This may involve processing technical information about the device used, the browser, the visit to our website, and information about conversion actions performed.

Google Consent Mode v2

Google Consent Mode v2 is activated in AdTrack for Google Ads conversion tracking.

The processing is adapted to the consent decision made via our Shopify cookie banner.

Non-technically necessary advertising and tracking technologies are generally only used if corresponding consent has been given.

Insofar as processing is based on consent, it is carried out in accordance with Art. 6 para. 1 lit. a GDPR and, insofar as information is stored or read on the end device, in accordance with § 25 para. 1 TDDDG.

You can change or revoke your consent at any time with effect for the future via the cookie settings on our website.

In connection with Google Ads, data may be transmitted to and processed by Google. Processing of data outside the European Union or the European Economic Area cannot be ruled out.

Further information on data protection at Google can be found at:

https://policies.google.com/privacy

7. Contact and Contact Form

If you contact us via a contact form, by email, or by other means, we process the personal data you transmit.

This may include, in particular:

First name and last name
Email address
Telephone number
Address or place of residence
Other information you provide
Technical details that may arise during transmission

The processing is carried out for the purpose of processing and responding to your inquiry, and, if applicable, for carrying out pre-contractual measures or fulfilling a contract.

The legal basis is – depending on the specific request – Art. 6 para. 1 lit. b GDPR, Art. 6 para. 1 lit. f GDPR, or, if consent is required, Art. 6 para. 1 lit. a GDPR.

We store the information only for as long as necessary for processing the request or as long as statutory retention obligations or legitimate interests justify further storage.

Disclosure to third parties only occurs if there is a legal basis for doing so or if it is necessary to process your request, for example, if technical service providers employed by us process personal data on our behalf.

8. Disclosure of Personal Data to Third Parties

Personal data is only disclosed if there is a legal basis for it.

This may be necessary in particular:

to fulfill a contract,
to fulfill legal obligations,
based on your consent,
to safeguard legitimate interests,
or if service providers employed by us process personal data on our behalf.

Insofar as we use external service providers as processors, the processing is carried out on the basis of a corresponding contract in accordance with Art. 28 GDPR, provided that the legal requirements for this are met.

Possible categories of recipients include, in particular:

Hosting and IT service providers
Providers of email and communication services
Providers of marketing services
Payment service providers
Tax advisors, legal advisors, and other professional service providers
Authorities and other public bodies, insofar as there is a legal obligation to do so

9. Transfer to Third Countries

Personal data may also be processed in countries outside the European Union or the European Economic Area.

A transfer to a third country only takes place if the requirements of Art. 44 et seq. GDPR are met. This can be based, in particular, on an adequacy decision of the European Commission or appropriate safeguards, such as standard contractual clauses.

This may be particularly relevant when using services from Google or other international service providers.

10. Storage Duration

We store personal data only for as long as necessary for the respective processing purpose.

In addition, legal retention periods may require longer storage. In these cases, the data will be stored for the duration of the legal retention obligation and then deleted.

Further storage may occur if it is necessary for the establishment, exercise, or defense of legal claims.

11. Your Rights

In accordance with legal requirements, you have the following rights in particular:

Right of access according to Art. 15 GDPR
Right to rectification according to Art. 16 GDPR
Right to erasure according to Art. 17 GDPR
Right to restriction of processing according to Art. 18 GDPR
Right to data portability according to Art. 20 GDPR
Right to object according to Art. 21 GDPR
Right to withdraw given consent according to Art. 7 para. 3 GDPR

The withdrawal of consent does not affect the lawfulness of processing carried out based on the consent before its withdrawal.

If you wish to exercise your rights, you can contact us at any time using the contact details provided above.

12. Right to Object

Insofar as we process your personal data on the basis of Art. 6 para. 1 lit. f GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation.

If personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such marketing. This also applies to profiling to the extent that it is related to such direct marketing.

13. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

The supervisory authority responsible is, in particular, the data protection supervisory authority of your habitual residence, your place of work, or the place of the alleged infringement.