Privacy Policy – Liebenstein Castle

§ 1 General Information

Your personal data (e.g. title, name, address, email address, telephone number) is processed by us solely in accordance with the provisions of the German Data Protection Act and the data protection laws of the European Union (EU). The following information explains the purposes of processing, the recipients, legal bases, storage periods, your rights, and the controller responsible for processing your data. This privacy policy applies only to our websites. If you are redirected to other websites via links on our pages, please refer to the respective privacy policies on those websites.
We use AI-assisted systems in certain areas to support our internal processes and to optimize our online services. Compliance with applicable data protection laws is strictly observed; personal data is processed only within the legally permissible framework. 

§ 2 Contacting Us

(1) Purpose of Processing
We process the personal data you provide to us via email, etc., for the purpose of responding to and handling your inquiries. You are not required to provide your personal data. However, without your email address, we cannot respond to you by email.

(2) Legal Bases
a) If you have given us explicit consent to process your data, the legal basis is Art. 6(1)(a) GDPR.
b) If we process your data for the performance of pre-contractual measures, the legal basis is Art. 6(1)(b) GDPR.
c) In all other cases, the legal basis is Art. 6(1)(f) GDPR.

(3) Legitimate Interest
Our legitimate interest is to communicate with you quickly and to respond to your inquiries cost-effectively. If you provide us with your postal address, we reserve the right to use it for direct mail advertising. You can protect your privacy by providing only minimal data (e.g. by using a pseudonym).

(4) Categories of Recipients
Hosting providers, mailing service providers in the case of direct mail advertising.

(5) Storage Period
Your data will be deleted once it can be inferred from the circumstances that your inquiry has been fully resolved.
If a contract is concluded, we retain the necessary data for the periods required by law, usually ten years.

(6) Right of Withdrawal
You have the right to object at any time to the processing of your data based on Art. 6(1)(f) GDPR for reasons arising from your particular situation, unless the processing serves direct marketing purposes. In the case of direct marketing, you may object to the processing at any time without stating a reason. If the processing is based on your consent, you have the right to withdraw that consent at any time. The withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.  

§ 3 Your Rights as a Data Subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights with respect to the controller:

1. Right of Access
You may request information under Art. 15 GDPR about the personal data we process concerning you.

2. Right to Rectification
If your data is inaccurate or incomplete, you can request rectification under Art. 16 GDPR.

3. Right to Erasure
Under the conditions of Art. 17 GDPR, you may request the deletion of your personal data.

4. Right to Restriction of Processing
Under Art. 18 GDPR, you have the right to request the restriction of the processing of your data.

5. Right to Data Portability
Under Art. 20 GDPR, you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request the transfer of this data to another controller.

6. Right to Withdraw Consent
Under Art. 7(3) GDPR, you have the right to withdraw your consent at any time. The legality of processing carried out prior to withdrawal remains unaffected.

7. Right to Lodge a Complaint with a Supervisory Authority
If you believe that the processing of your personal data violates the GDPR, you have the right, under Art. 77 GDPR, to lodge a complaint with a supervisory authority (in particular in the Member State of your residence, workplace, or the place of the alleged infringement).

Please also note your right to object under Art. 21 GDPR:

a) General objection: justification required
If your personal data is processed
for the protection of our overriding legitimate interests (Art. 6(1)(f) GDPR), or
in the public interest (Art. 6(1)(e) GDPR),
you have the right to object at any time for reasons arising from your particular situation. This also applies to profiling based on these provisions.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

b) Special case: Direct Marketing (no justification required)
If your personal data is processed for direct marketing purposes, you may object at any time and without providing any reason. This also applies to profiling related to direct marketing.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes.

Controller Responsible for Data Processing
Remy Freiherr von Preuschen von und zu Liebenstein
Data Protection Officer
Albert Freiherr von Preuschen von und zu Liebenstein

Liebenstein Castle
Zu den Burgen 1, 56341 Kamp-Bornhofen
Telefon: +49 6773 308
E-Mail: info@burghotel-liebenstein.de