Datenschutz | EuFora Hannover

We are delighted by your interest in our company. Data protection is a particularly high priority for the management of Hotel FORA Hannover Betriebsgesellschaft mbH. In principle, you can use the Hotel FORA Hannover Betriebsgesellschaft mbH website without providing any personal data.

If a data subject wishes to use special services offered by our company through our website, processing of personal data may be required. If processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the data subject’s consent.

The processing of personal data, such as a data subject’s name, address, email address or telephone number, is always carried out in accordance with the General Data Protection Regulation and the country-specific data protection regulations applicable to Hotel FORA Hannover Betriebsgesellschaft mbH. Through this privacy policy, our company wishes to inform the public about the nature, scope and purpose of the personal data we collect, use and process. This privacy policy also explains the rights to which data subjects are entitled.

As the data controller, Hotel FORA Hannover Betriebsgesellschaft mbH has implemented numerous technical and organisational measures to ensure the most complete protection possible of personal data processed through this website. Nevertheless, internet-based data transfers may have security vulnerabilities, meaning absolute protection cannot be guaranteed. For this reason, every data subject is free to send us personal data by alternative means, for example by telephone.

Definitions

The privacy policy of Hotel FORA Hannover Betriebsgesellschaft mbH is based on the terminology used by the European legislator when enacting the General Data Protection Regulation (GDPR). Our privacy policy should be easy to read and understand for the public, as well as for our customers and business partners. To ensure this, we would first like to explain the terminology used.

This Privacy Policy uses, among others, the following terms:

a) Personal data

Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”). A natural person is identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural or social identity.

b) Processing

Processing means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

c) Restriction of processing

Restriction of processing means marking stored personal data with the aim of restricting its future processing.

d) Data subject

A data subject is any identified or identifiable natural person whose personal data is processed by the data controller.

e) Profiling

Profiling is any form of automated processing of personal data that involves using such data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that person’s performance at work, financial situation, health, personal preferences, interests, reliability, behaviour, location or movements.

f) Pseudonymisation

Pseudonymisation is the processing of personal data in such a way that the data can no longer be attributed to a specific data subject without the use of additional information, provided that this additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

g) Controller

The controller is the natural or legal person, public authority, agency or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or the specific criteria for its designation may be provided for by Union law or the law of the Member States.

h) Data processors

A processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.

i) Recipients

A recipient is a natural or legal person, public authority, agency or other body to whom personal data is disclosed, whether or not they are a third party. However, public authorities that may receive personal data in the context of a specific inquiry under Union or Member State law are not considered recipients.

j) Third party

A third party is a natural or legal person, public authority, agency or other body, other than the data subject, the controller, the processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

k) Consent

Consent means any freely given, specific, informed and unambiguous indication of the data subject’s wishes, made by a statement or by a clear affirmative action, by which the data subject signifies agreement to the processing of their personal data.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator, this site uses SSL or TLS encryption. You can tell that a connection is encrypted when the browser’s address bar changes from “http://” to “https://” and a padlock icon appears in the browser bar.

When SSL or TLS encryption is enabled, the data you send to us cannot be read by third parties.

Cookies

The websites of Hotel FORA Hannover Betriebsgesellschaft mbH use cookies. Cookies are text files that are placed and stored on a computer system via an internet browser.

Numerous websites and servers use cookies. Many cookies contain what is known as a cookie ID. A cookie ID is a unique identifier for the cookie. It consists of a string of characters that allows websites and servers to identify the specific internet browser in which the cookie is stored. This enables the websites and servers visited to distinguish the data subject’s individual browser from other internet browsers that contain different cookies. A specific internet browser can be recognized and identified by its unique cookie ID.

By using cookies, Hotel FORA Hannover Betriebsgesellschaft mbH can provide users of this website with more user-friendly services that would not be possible without the use of cookies.

Cookies can be used to optimise the information and offers on our website for the user. As mentioned above, cookies enable us to recognise users of our website. The purpose of this recognition is to make it easier for users to use our website. For example, users of a website that uses cookies do not have to enter their login details again every time they visit, because the website and the cookie stored on their computer system take care of this. Another example is the shopping cart cookie used by an online shop. The online shop uses a cookie to remember the items a customer has added to their virtual shopping cart.

The data subject can prevent cookies from being set by our website at any time by adjusting the settings of their internet browser and can thereby permanently object to the setting of cookies. Cookies that have already been set can also be deleted at any time using an internet browser or other software programs. This is possible in all common internet browsers. If the data subject disables cookies in the internet browser they use, some functions of our website may not be fully available.

Collection of general data and information

Each time a data subject or automated system accesses the Hotel FORA Hannover Betriebsgesellschaft mbH website, the site collects a range of general data and information.

This general data and information is stored in the server log files. The following may be recorded:

browser types and versions used,
the operating system used by the accessing system,
the website from which an accessing system reaches our website (known as the referrer),
the subpages of our website accessed by the system,
the date and time of access to the website,
an Internet Protocol address (IP address),
the internet service provider of the accessing system and
other similar data and information used to prevent threats in the event of attacks on our information technology systems.

When using this general data and information, Hotel FORA Hannover Betriebsgesellschaft mbH does not draw any conclusions about the data subject.

This information is required in order to:

to ensure that the content of our website is delivered correctly,
to optimise the content of our website and the advertising for it,
to ensure the ongoing functionality of our information technology systems and our website’s technical infrastructure, and
to provide law enforcement authorities with the information they need to prosecute cyberattacks.

Hotel FORA Hannover Betriebsgesellschaft mbH therefore evaluates this data and information, collected anonymously, for statistical purposes and also to enhance data protection and data security within our company, ultimately ensuring an optimal level of protection for the personal data we process. The anonymous data in the server log files is stored separately from all personal data provided by a data subject.

Registration on our website

The data subject may register on the website of the controller by providing personal data. The personal data transmitted to the controller is determined by the relevant input form used for registration.

The personal data entered by the data subject is collected and stored solely for internal use by the data controller and for its own purposes. The data controller may arrange for the data to be disclosed to one or more processors, such as a parcel delivery service, which will also use the personal data solely for internal purposes attributable to the data controller.

When someone registers on the data controller's website, the IP address assigned by their internet service provider (ISP), as well as the date and time of registration, are also stored. This data is stored to help prevent misuse of our services and, if necessary, to enable the investigation of criminal offences. Storing this data is therefore necessary to protect the data controller. As a rule, this data is not shared with third parties unless there is a legal obligation to do so or sharing it serves the purpose of law enforcement.

When a data subject registers and voluntarily provides personal data, this enables the controller to offer them content or services that, by their nature, are available only to registered users. Registered users may change the personal data provided during registration at any time or have them completely erased from the controller’s records.

At any time, the controller will, upon request, inform each data subject which personal data concerning them is stored. The controller will also correct or delete personal data at the request or upon notification by the data subject, provided this does not conflict with any statutory retention obligations. All employees of the controller are available to the data subject as points of contact in this regard.

Contact option via the website

As required by law, the Hotel FORA Hannover Betriebsgesellschaft mbH website provides information that enables visitors to contact our company quickly and communicate with us directly. This includes a general email address.

If a data subject contacts the controller by email or via a contact form, the personal data provided by the data subject will be stored automatically. Personal data provided voluntarily to the controller by a data subject will be stored for the purposes of processing the enquiry or contacting the data subject. This personal data will not be shared with third parties.

Newsletter subscription

The website of Hotel Fora Hannover Betriebsgesellschaft GmbH gives users the option to subscribe to our company's newsletter. The personal data transmitted to the controller when subscribing to the newsletter is shown in the input form used for this purpose.

Hotel Fora Hannover Betriebsgesellschaft GmbH periodically informs its customers and business partners about the company’s offers by newsletter. In principle, the person concerned can receive our company’s newsletter only if:

the data subject has a valid email address and
the data subject has registered to receive the newsletter.

For legal reasons, a confirmation email is sent using the double opt-in procedure to the email address first provided by a data subject to subscribe to the newsletter. This confirmation email verifies that the owner of the email address, as the data subject, has authorised receipt of the newsletter.

When you subscribe to the newsletter, we also store the IP address assigned by the internet service provider (ISP) to the computer system used by the data subject at the time of subscription, as well as the date and time of subscription. This data is collected so that any potential misuse of a data subject’s email address can be traced at a later date, and therefore serves to protect the data controller’s legal interests.

Personal data collected when subscribing to the newsletter is used exclusively to send our newsletter. Newsletter subscribers may also be notified by email if this is necessary to operate the newsletter service or in connection with registration, for example, if changes are made to the newsletter or technical circumstances change.

Personal data collected as part of the newsletter service is not shared with third parties. The data subject may unsubscribe from our newsletter at any time. Consent to the storage of personal data provided to us for newsletter delivery may be withdrawn at any time. Each newsletter contains a link for withdrawing consent.

You can also unsubscribe from the newsletter at any time directly on the data controller’s website or notify the data controller by other means.

Newsletter tracking

The newsletters of Hotel Fora Hannover Betriebsgesellschaft GmbH contain so-called tracking pixels. A tracking pixel is a tiny graphic embedded in emails sent in HTML format to enable log file recording and analysis.

This allows us to statistically evaluate the success or failure of online marketing campaigns. Using the embedded tracking pixel, Hotel Fora Hannover Betriebsgesellschaft GmbH can determine whether and when an email was opened by the data subject and which links in the email were clicked by them.

The personal data collected through tracking pixels in the newsletters is stored and evaluated by the controller in order to optimise the newsletter service and better tailor the content of future newsletters to the interests of the data subject. This personal data is not shared with third parties.

Data subjects may withdraw at any time the separate declaration of consent given through the double opt-in process. Following withdrawal, the controller will delete these personal data. Unsubscribing from the newsletter is automatically interpreted by Hotel Fora Hannover Betriebsgesellschaft GmbH as a withdrawal of consent.

Routine erasure and blocking of personal data

The controller shall process and store the data subject’s personal data only for as long as necessary to achieve the purpose for which it was stored, or where this is provided for by the European legislator or another legislator in laws or regulations to which the controller is subject.

When the purpose for storing the data no longer applies or a storage period prescribed by European or other applicable legislation expires, the personal data are routinely blocked or erased in accordance with legal requirements.

Rights of the data subject

a) Right to confirmation

Every data subject has the right, granted by the European legislator, to obtain confirmation from the data controller as to whether personal data concerning them is being processed. Data subjects wishing to exercise this right may contact an employee of the data controller at any time.

b) Right of access

Every data subject affected by the processing of personal data has the right, as granted by the European legislator, to obtain from the controller at any time and free of charge information about the personal data stored about them and a copy of that information.

Furthermore, the European legislator has granted the data subject the right to be informed of the following:

the purposes of processing
the categories of personal data being processed
the recipients or categories of recipients to whom the personal data have been or will be disclosed, particularly recipients in third countries or international organisations
where possible, the planned period for which the personal data will be stored or, if this is not possible, the criteria used to determine that period
the existence of a right to have personal data concerning them rectified or erased, or to restrict its processing by the controller, or of a right to object to such processing
the right to lodge a complaint with a supervisory authority
if the personal data was not collected from the data subject: all available information about the source of the data
the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) GDPR and—at least in these cases—meaningful information about the logic involved, as well as the significance and intended consequences of such processing for the data subject

The data subject also has the right to know whether personal data has been transferred to a third country or an international organisation. If so, the data subject also has the right to information about the appropriate safeguards relating to the transfer.

If a data subject wishes to exercise this right of access, they may contact an employee of the data controller at any time.

c) Right to rectification

Every data subject has the right, as granted by the European legislator, to request the prompt correction of inaccurate personal data concerning them.

The data subject also has the right, taking into account the purposes of processing, to request the completion of incomplete personal data, including by means of a supplementary statement.

If the data subject wishes to exercise this right to rectification, they may contact an employee of the controller at any time.

d) Right to erasure (right to be forgotten)

Any data subject whose personal data is processed has the right, granted by the European legislator, to request that the controller erase their personal data without undue delay, provided one of the following grounds applies and processing is not necessary:

The personal data was collected or otherwise processed for purposes for which it is no longer necessary.
The data subject withdraws their consent, on which the processing was based pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing.
The data subject objects to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21(2) GDPR.
The personal data has been processed unlawfully.
The erasure of personal data is necessary to comply with a legal obligation under Union or Member State law to which the controller is subject.
Personal data was collected in connection with the information society services offered, in accordance with Art. 8(1) GDPR.

If any of the reasons listed above apply and a data subject wishes to have personal data stored by Hotel FORA Hannover Betriebsgesellschaft mbH erased, they may contact an employee of the controller at any time. The employee of Hotel FORA Hannover Betriebsgesellschaft mbH will ensure that the request for erasure is fulfilled without delay.

If Hotel FORA Hannover Betriebsgesellschaft mbH has made the personal data public and our company, as the controller, is obliged under Art. 17(1) GDPR to erase the personal data, Hotel FORA Hannover Betriebsgesellschaft mbH shall take reasonable steps, including technical measures, taking account of available technology and the cost of implementation, to inform other controllers processing the published personal data that the data subject has requested that they erase all links to, copies of or replications of those personal data, unless processing is necessary.

The employee of Hotel FORA Hannover Betriebsgesellschaft mbH will take the necessary action on a case-by-case basis.

e) Right to restriction of processing

Every data subject whose personal data is processed has the right granted by the European legislator to request that the controller restrict processing if one of the following conditions is met:

The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.
The processing is unlawful, the data subject objects to the erasure of the personal data and instead requests that its use be restricted.
The controller no longer needs the personal data for the purposes of processing, but the data subject requires it to establish, exercise or defend legal claims.
The data subject has objected to the processing pursuant to Art. 21(1) GDPR, and it has not yet been determined whether the controller’s legitimate grounds override those of the data subject.

If any of the above conditions apply and a data subject wishes to request restriction of personal data stored by Hotel FORA Hannover Betriebsgesellschaft mbH, they may contact an employee of the controller at any time.

The employee of Hotel FORA Hannover Betriebsgesellschaft mbH will arrange for the restriction of processing.

f) Right to data portability

Every data subject has the right, as granted by the European legislator, to receive the personal data concerning them that they have provided to a controller in a structured, commonly used and machine-readable format.

They also have the right to transfer this data to another data controller without hindrance from the controller to whom the personal data were provided, provided that the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, or on a contract pursuant to Art. 6(1)(b) GDPR, and the processing is carried out by automated means, unless the processing is necessary for the performance of a task in the public interest or in the exercise of official authority vested in the controller.

When exercising the right to data portability under Art. 20(1) GDPR, the data subject also has the right to have the personal data transmitted directly from one controller to another, where technically feasible and provided this does not adversely affect the rights and freedoms of others.

To exercise the right to data portability, the data subject may contact an employee of Hotel FORA Hannover Betriebsgesellschaft mbH at any time.

g) Right to object

Every data subject whose personal data are processed has the right, granted by the European legislature, to object at any time, on grounds relating to their particular situation, to the processing of their personal data pursuant to Art. 6(1)(e) or (f) GDPR. This also applies to profiling based on these provisions.

In the event of an objection, Hotel FORA Hannover Betriebsgesellschaft mbH will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, or the processing serves to establish, exercise or defend legal claims.

If Hotel FORA Hannover Betriebsgesellschaft mbH processes personal data for direct marketing purposes, the data subject has the right to object at any time to the processing of their personal data for such advertising. This also applies to profiling insofar as it is related to such direct marketing.

If the data subject objects to Hotel FORA Hannover Betriebsgesellschaft mbH processing their personal data for direct marketing purposes, Hotel FORA Hannover Betriebsgesellschaft mbH will no longer process their personal data for these purposes.

The data subject also has the right to object, on grounds relating to their particular situation, to the processing of personal data concerning them by Hotel FORA Hannover Betriebsgesellschaft mbH for scientific or historical research purposes or statistical purposes pursuant to Art. 89(1) GDPR, unless the processing is necessary for the performance of a task carried out in the public interest.

To exercise the right to object, the data subject may contact any employee of Hotel FORA Hannover Betriebsgesellschaft mbH or another member of staff directly. The data subject is also free to exercise their right to object when using information society services, irrespective of Directive 2002/58/EC, by automated means using technical specifications.

h) Automated individual decision-making, including profiling

Every data subject whose personal data are processed has the right, granted by the European legislature, not to be subject to a decision based solely on automated processing — including profiling — that produces legal effects concerning them or similarly significantly affects them, provided that the decision:

is not necessary for entering into or performing a contract between the data subject and the controller, or
is permitted under Union or Member State law to which the controller is subject, and that law provides appropriate measures to safeguard the data subject’s rights and freedoms and legitimate interests; or
is carried out with the data subject’s express consent.

Where a decision is necessary for entering into or performing a contract between the data subject and the controller, or is made with the data subject’s explicit consent, Hotel FORA Hannover Betriebsgesellschaft mbH shall take appropriate measures to safeguard the data subject’s rights and freedoms and legitimate interests. These include, at a minimum, the right to obtain human intervention from the controller, to state their own point of view and to contest the decision.

If the data subject wishes to exercise rights relating to automated decisions, they can contact an employee of the controller at any time.

i) Right to withdraw consent under data protection law

Every data subject whose personal data is processed has the right, granted by the European legislator, to withdraw their consent to the processing of personal data at any time.

If the data subject wishes to exercise their right to withdraw consent, they may contact the data controller at any time.

Data protection for job applications and the recruitment process

The data controller collects and processes applicants’ personal data for the purpose of managing the recruitment process. This processing may also be carried out electronically.

This is particularly the case if an applicant sends the relevant application documents electronically, for example by email or via a web form on the website, to the data controller.

If the data controller enters into an employment contract with an applicant, the data submitted will be stored for the purpose of managing the employment relationship in accordance with statutory requirements.

If the controller does not enter into an employment contract with an applicant, the application documents will be automatically deleted two months after the rejection decision has been communicated, unless the controller has other legitimate interests that prevent their deletion.

Another legitimate interest in this regard is, for example, the obligation to provide evidence in proceedings under the General Act on Equal Treatment (AGG).

Links to other websites

This website contains links to other websites (so-called external links).

Hotel FORA Hannover Betriebsgesellschaft mbH is responsible for its own content as a provider under applicable European and national laws.

These first-party contents must be distinguished from links to content provided by other providers. We have no control over whether the operators of other websites comply with applicable European and national laws.

Please refer to the privacy policies provided on the respective websites.

Hotel FORA Hannover Betriebsgesellschaft mbH accepts no responsibility for third-party content made available via links and clearly identified as such, and does not adopt such content as its own.

The provider of the website referred to is solely liable for illegal, incorrect or incomplete content, as well as for any damage arising from the use or non-use of the information.

Privacy policy for the use of Teburio

We use the Teburio service provided by Teburio GmbH, Technologiepark 13, 33100 Paderborn, as a cloud-based reservation system to manage our table reservations.

Reservations can be made using the online reservation form (widget) on our website or by phone/email through our staff. In either case, the personal data required to make the reservation (in particular, name, contact details, number of guests, reservation date and time, and any messages or requests) are recorded in Teburio and processed there for the purpose of planning, managing and documenting your reservation.

We process your data to initiate and fulfil our catering contract with you (Art. 6(1)(b) GDPR). If you voluntarily provide additional information or give consent to marketing, we process that data on the basis of your consent (Art. 6(1)(a) GDPR).

Teburio processes data on our behalf on servers within the European Union and uses technical and organisational measures to protect it (in particular SSL encryption and backups).

Further information on data processing by Teburio can be found in Teburio’s privacy policy at https://teburio.de/datenschutzerklaerung/

Privacy policy for the use of Facebook

The data controller has integrated components from Facebook on this website. Facebook is a social network.

A social network is an online social meeting place, an online community that generally enables users to communicate with each other and interact in a virtual space.

A social network can serve as a platform for exchanging opinions and experiences, or allow the online community to share personal or business information.

Among other things, Facebook enables users of the social network to create private profiles, upload photos and connect with others through friend requests.

Facebook is operated by Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA.

If a data subject lives outside the USA or Canada, the controller responsible for processing personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Whenever anyone accesses one of the pages on this website, which is operated by the data controller and includes a Facebook component (Facebook plugin), the web browser on the data subject’s device is automatically prompted by that component to download a display of the corresponding Facebook component from Facebook.

An overview of all Facebook plug-ins is available at https://developers.facebook.com/docs/plugins/?locale=de_DE.

As part of this technical process, Facebook learns which specific subpage of our website the data subject visits.

If the data subject is also logged in to Facebook, Facebook recognises which specific page of our website the data subject visits each time they access our website and throughout their entire visit.

This information is collected by the Facebook component and linked by Facebook to the data subject’s Facebook account.

If the data subject clicks one of the Facebook buttons integrated into our website, such as the “Like” button, or posts a comment, Facebook assigns this information to the data subject’s personal Facebook user account and stores this personal data.

Whenever the data subject is logged into Facebook at the same time as visiting our website, Facebook receives information through the Facebook component that the data subject has visited our website. This happens regardless of whether the data subject clicks on the Facebook component.

If the data subject does not want this information to be transmitted to Facebook, they can prevent it by logging out of their Facebook account before accessing our website.

Facebook’s Data Policy, available at https://de-de.facebook.com/about/privacy/, explains how Facebook collects, processes, and uses personal data.

It also explains the privacy settings Facebook offers to protect the data subject’s privacy.

Various applications are also available that allow data transmission to Facebook to be blocked. Data subjects can use such applications to prevent data from being transmitted to Facebook.

Privacy provisions on the use of Google Analytics 4

The data controller has implemented Google Analytics 4, a web analytics service provided by Google LLC, on this website.

The data controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Type and purpose of processing

Google Analytics uses cookies that allow us to analyse how you use our websites. The information collected by these cookies about your use of this website is generally transferred to a Google server in the USA and stored there.

IP anonymisation is enabled by default in Google Analytics 4. As a result, Google truncates your IP address within member states of the European Union or other states party to the Agreement on the European Economic Area.

Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. According to Google, the IP address transmitted by your browser as part of Google Analytics is not combined with other Google data.

During your visit to the website, your user behaviour is recorded in the form of “events”.

Events may include:

Page views
First visit to the website
Session start
Websites visited
Your “click path”, interactions with the website
Scrolls (whenever a user scrolls to the bottom of the page (90%))
Clicks on external links
Internal search queries
Interaction with videos
File downloads
ads viewed / clicked
Language settings

The following is also recorded:

Your approximate location (region)
Date and time of visit
Your IP address (in shortened form)
technical information about your browser and the devices you use (e.g. language setting, screen resolution)
Your Internet provider
the referrer URL (the website/ad you came from to reach this website)

Purposes of processing

On behalf of the operator of this website, Google will use this information to analyse your pseudonymised use of the website and compile reports on website activity.

The reports provided by Google Analytics help us analyse our website’s performance, other services related to the use of our website, and the success of our marketing campaigns.

Recipients

The recipients of the data are/may be:

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (data processor under Art. 28 GDPR)
Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
Alphabet Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

Transfer to third countries

For the USA, the European Commission adopted its adequacy decision on July 10, 2023.

Google LLC is certified under the EU-US Privacy Framework.

As Google’s servers are distributed worldwide and data transfers to third countries (for example, Singapore) cannot be entirely ruled out, we have also concluded the EU Standard Contractual Clauses with the provider.

Retention period

The data we send and link to cookies is automatically deleted after 2 [OR: 14 months].

Google Analytics cookies have a maximum lifespan of 2 years.

Data is automatically deleted once a month when its retention period has expired.

Legal basis

The legal basis for this data processing is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) sentence 1 TTDSG.

Withdrawal

You can withdraw your consent at any time with future effect by opening the cookie settings and changing your selection.

This does not affect the lawfulness of processing based on consent before its withdrawal.

You can also prevent cookies from being stored in the first place by changing the corresponding setting in your browser software.

However, if you configure your browser to reject all cookies, some features of this and other websites may be restricted.

You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address), and from processing this data, by:

a. withhold your consent to the use of cookies, or

b. Download and install the Google Analytics opt-out browser add-on HERE.

For more information about Google Analytics’ terms of use and Google’s privacy policy, visit https://marketingplatform.google.com/about/analytics/terms/de/ and https://policies.google.com/?hl=de.

Privacy Policy for the Use of Instagram

The data controller has integrated components of the Instagram service on this website.

Instagram is a service that qualifies as an audiovisual platform, allowing users to share photos and videos and to further distribute such data on other social networks.

Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA, operates Instagram services.

Each time one of the individual pages of this website, operated by the controller and incorporating an Instagram component (Insta button), is accessed, the web browser on the data subject’s information technology system is automatically prompted by the relevant Instagram component to download a display of the corresponding Instagram component.

As part of this technical process, Instagram learns which specific page on our website the data subject visits.

If the data subject is also logged in to Instagram, Instagram can identify which specific page the data subject visits each time they access our website, and throughout their entire visit.

This information is collected by the Instagram component and associated by Instagram with the data subject’s Instagram account.

If a data subject clicks one of the Instagram buttons integrated into our website, the data and information transmitted are associated with their personal Instagram account and stored and processed by Instagram.

Whenever the data subject is logged in to Instagram at the time they access our website, Instagram receives information through the Instagram component that the data subject has visited our website. This happens regardless of whether the data subject clicks the Instagram component.

If the data subject does not want this information to be transmitted to Instagram, they can prevent the transmission by logging out of their Instagram account before visiting our website.

Further information and Instagram’s applicable privacy policies are available at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.

Legal basis for processing

Art. 6(1)(a) GDPR serves as the legal basis for our company’s processing activities where we obtain consent for a specific processing purpose.

Where processing personal data is necessary to fulfil a contract to which the data subject is a party—for example, where processing is required to deliver goods or provide another service or consideration—it is based on Art. 6(1)(b) GDPR.

The same applies to processing operations necessary to carry out pre-contractual measures, for example in response to enquiries about our products or services.

If our company is subject to a legal obligation that requires the processing of personal data, for example to meet tax obligations, the processing is based on Art. 6 I lit. c GDPR.

In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person.

For example, this would be the case if a visitor were injured on our premises and their name, age, health insurance details or other vital information had to be passed on to a doctor, hospital or other third party.

In that case, processing would be based on Art. 6(1)(d) GDPR.

Finally, processing may be based on Article 6(1)(f) GDPR.

This legal basis applies to processing operations not covered by any of the aforementioned legal bases, where processing is necessary to protect the legitimate interests of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not override those interests.

Such processing activities are permitted in particular because they are expressly recognised by the European legislator.

In this regard, he held that a legitimate interest might be assumed if the data subject is a customer of the controller (Recital 47, second sentence, GDPR).

Legitimate interests pursued by the controller or a third party

Where the processing of personal data is based on Article 6(1)(f) GDPR, our legitimate interest is to conduct our business for the benefit of all our employees and shareholders.

Period for which personal data is stored

The retention period for personal data is determined by the applicable statutory retention period.

Once this period has elapsed, the relevant data will routinely be deleted unless it is still required to perform or enter into a contract.

Information about hellohotel hosting:

Amazon Web Services (AWS) Germany GmbHKrausenstr. 3810117 BerlinGermanyThe servers used by Amazon Web Services to store data are located in Frankfurt/Main, within the Federal Republic of Germany, and are subject to the data protection laws of national and European legislators. Amazon Web Services also processes your data in accordance with the applicable legal provisions. The Amazon Web Services Privacy Policy is available at the following link: AmazonPrivacy Notice

Existence of automated decision-making

As a responsible company, we do not use automated decision-making or profiling.

Name and address of the data controller

The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the member states of the European Union and other provisions relating to data protection is:

Hotel FORA Hannover Betriebsgesellschaft mbH

Grosser Kolonnenweg 19

30163 Hannover

Germany

Tel.: +49 511 6706 0

Email: HC025@accor.com

Website: https://all.accor.com/hotel/C025/index.de.shtml

Name and address of the Data Protection Officer

Andreas Lüerßen

AL Datenschutz e.K.

Im Riedegrund 30 A

30982 Ronnenberg

Germany

Tel.: +49 5109 4002

Email: info(at)al-datenschutz.de

Internet: www.al-datenschutz.de

Objection to promotional emails

We hereby object to the use of contact details published as part of the legal notice requirements for sending advertising or information materials that have not been expressly requested.

The site operators expressly reserve the right to take legal action in the event of unsolicited advertising, such as spam emails.

We reserve the right to amend our privacy practices and this policy, where necessary to reflect changes in relevant laws or regulations or to better meet your needs.

Any changes to our privacy practices will be announced here.

Please note the current version date of the privacy policy.

Hanover, August 2026

Privacy Policy of Hotel FORA Hannover Betriebsgesellschaft mb