(Last updated: 6 December 2021)

Thank you for visiting our website and for your interest in our company. The protection of your personal data is important to us. In accordance with Articles 12, 13 and 21 of the General Data Protection Regulation (GDPR), we inform you below about how we handle your personal data when you use our website www.scc-munich.com.

Personal data are individual details about personal or factual circumstances of a specific or identifiable natural person. This includes information such as name, address, telephone number and date of birth.

I.    Data Controller

Data Controller in accordance with the General Data Protection Regulation:

Realotel Garching Hotelbetriebsgesellschaft mbH (Betriebsgesellschaft des Science Congress Center Munich)

c/o Science Congress Center Munich
Bahnhofstraße 67

65185 Wiesbaden

E-mail address:          info@scc-munich.com 
Website: www. scc-munich.com 

Telephone:     +49 89 614 25 027

Fax:                            +49 89 614 25 049

II.    Data Protection Officer

Contact details of our data protection officer:

The company data protection officer of Realotel Garching Hotelbetriebsgesellschaft mbH can be reached at the above address, Data Protection Department, or by e-mail at                       

datenschutz@bierwirth-kluth.de.

III.    Purposes and legal bases of the data processing

1.    Informational use of the website

You can visit our website without providing any additional personal information. If you only use our website for informational purposes, i.e. you do not otherwise provide us with any information about yourself, we do not process any personal data, with the exception of the data that your browser transmits to enable you to visit the website and information that is transmitted to us as part of cookies used for statistical analysis of the use of our website.

a)    Technical provision of the website 

For the purpose of the technical provision of the website, it is necessary that we process certain automatically transmitted information from you so that your browser can display our website and you can use the website. This information is automatically collected each time you visit our website and stored in our server log files. This information relates to the computer system of the accessing computer. The following information is collected:

• IP address, anonymised/shortened;
• browser type/version (e.g.: Firefox 59.0.2 (64 Bit));
• browser language (e.g.: German);
• used operating system (e.g.: Windows 10);
• internal resolution of the browser window;
• screen resolution;
• JavaScript activation;
• Cookies on / off;
• time of access.
  
  

Furthermore, we use cookies to make our website available and accessible to you for use. Cookies are text files that are stored on your computer system in or by the internet browser when you access a website. A cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again. We use these cookies exclusively to provide you with our website and its technical functions. Some functions of our website cannot be offered without the use of these cookies. The following information is stored in the cookies and transmitted to us:

• Web server cookie that identifies the current visitor and stores, for example, the language selected on our website (PHP session cookie)
• Cookie that stores the confirmation of the cookie notice (consent management, see below).
  
  

We do not use the information we have collected through the above cookies to create user profiles or to evaluate your surfing behaviour.

We process your personal data for the technical provision of our website on the following legal bases:

• for the performance of a contract or the implementation of pre-contractual measures in accordance with Art. 6 para. 1 lit. b GDPR, insofar as you visit our website to obtain information about us; and
• to protect our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR in order to be able to make the website technically available to you. Our legitimate interest is to be able to provide you with an attractive, technically functioning and user-friendly website, as well as to take measures to protect our website against cyber risks and to prevent cyber risks for third parties arising from our website.

Consent Management

On our website we use the consent manager "Cookiebot" of Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark. Cookiebot is a solution that we use to obtain your consent for certain data processing that requires your consent (e.g. analysis, tracking or similar). By using Cookiebot, we can inform you about the individual cookies and tools we use. You can use Cookiebot to choose which cookies and tools you want to categorically allow or reject. At the end of this privacy policy, Cookiebot also provides an overview of the cookies used and the option to change or revoke your consents. This allows you to make an informed decision about the sharing of your data and enables us to use cookies and tools in a transparent and documented manner that complies with data protection requirements.

Cookiebot processes your personal data to record your decision to allow cookies and tools and to store it for a revisit to our website. This includes the corresponding cookie with your consent decision as well as further usage data, e.g. IP address, domain name, time of request, server data (including data transmission types, server status, etc.), country, browser and operating system.

For further information and the privacy policy of Cookiebot, please visit: Privacy Policy (cookiebot.com).

We process your personal data for the technical provision of our website on the following legal bases:

• for the performance of a contract or for the implementation of pre-contractual measures in accordance with Art. 6 para. 1 lit. b GDPR, insofar as you visit our website in order to make bookings or to obtain information about them;
• for the use of cookie management in order to comply with a legal obligation to which we as Controller are subject in accordance with Art. 6 para. 1 lit. c GDPR. The legal obligation lies in informing you about the cookies we use and obtaining and documenting your consent to data processing; and
• to protect our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR in order to be able to make cookie management technically available to you. Our legitimate interest is to be able to provide you with an attractive, technically functioning and user-friendly cookie management, as well as to take measures to protect the cookie management from cyber risks and to prevent cyber risks for third parties arising from the cookie management.

b)    Statistical analysis of the use of the website and range increase

For the purpose of statistical analysis of the use of our website, we use Google Analytics, DoubleClick and thus cookies, which enable an analysis of your surfing behaviour. This allows us to improve the quality of our website and its content. We learn how the website is used and can thus constantly optimise our services.

The information obtained through the statistical analysis of our website will not be merged with your other data collected through the website.

We process your personal data for the statistical analysis of the use of our website on the basis of the following legal basis:

• your consent in accordance with Art. 6 para. 1 lit. a GDPR.

Google Analytics

On our website we use Google Analytics, a web analytics service provided by Google Ireland Ltd, Gordon House, Barrow Street,Dublin 4, Ireland (subsidiary of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). Google Analytics uses cookies, which are text files placed on your computer, to help the website analyse how users use it. The information generated by the cookie about your use of our website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymisation is activated on our website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address will be transmitted to a Google server in the USA and shortened there. Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to us as the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

On our website, we use Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are processed in a shortened form, which excludes the possibility of a direct reference to a person.

We use Google Analytics exclusively with your consent. You can revoke consent once you have given it by

• preventing the storage of cookies by selecting the appropriate settings in your browser software; however, please note that if you do this you may not be able to use the full functionality of our website;
• downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de or
• clicking this link to prevent Google Analytics from collecting data on our website in the future. This will place an opt-out cookie in your browser. Please note that you must activate the opt-out cookie in every browser you use on all of your end devices and that you may also have to reactivate it if you delete all cookies in a browser.
  
  

For more information on the terms of use and data protection of Google Analytics, please visit http://www.google.com/analytics/terms/de.html or https://www.google.de/intl/de/policies/

Google Ads/DoubleClick by Google

On our website, we also use Google Ads or Doubleclick by Google, a service of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (subsidiary of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). Doubleclick by Google uses cookies to present you with advertisements that are relevant to you. In the process, a pseudonymous identification number (ID) is assigned to your browser in order to check which advertisements were displayed in your browser and which advertisements were viewed. The use of Google Ads/DoubleClick cookies only enables Google and its partner websites to serve ads based on previous visits to our website or other websites on the Internet. The information generated by the cookies is transmitted by Google to a server in the USA for analysis and stored there. A transfer of data by Google to third parties only takes place on the basis of legal regulations or within the framework of data processing.

Additional data processing will only take place if you have consented to Google linking your web and app browsing history to your Google account and using information from your Google account to personalise the ads you see on the web. In this case, if you are logged into Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, your personal data will be temporarily linked by Google with other Google data in order to form target groups.

Revocation of your consent

We only use Google Ads/DoubleClick with your consent. You can revoke consent once you have given it by

• preventing the storage of cookies by selecting the appropriate settings in your browser software; however, please note that if you do this you may not be able to use the full functionality of our website;
• downloading and installing the browser plugin available under the following link under the item DoubleClick deactivation extension https://adssettings.google.com/u/0/authenticated?hl=en-GB Alternatively, you can deactivate the Doubleclick cookies on the Digital Advertising Alliance site at the following link http://optout.aboutads.info/?c=2#!/.

For further information on the terms of use and data protection of Google Ads/DoubleClick, please visit https://www.google.de/intl/de/policies/.

Google reCaptcha

We use Google reCaptcha (reCaptcha) on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google).

The purpose of reCaptcha is to check whether the data entry on our websites (e.g. in a contact form) is made by a human or by an automated program. For this purpose, reCaptcha analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, reCaptcha evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

reCaptcha uses, among other things, Javascript and ETags, which in interaction can enable tracking of your data and activities on the Internet. This is due in particular to the properties of ETags, which are regularly considered to be technically necessary. ETags serve to reduce data traffic by enabling the web server to recognize whether elements of a website have already been loaded once by the browser you are using and can thus be retrieved from the cache of your end device/browser instead of from the Internet.

If you would like to prevent the data transfer by Google to a large extent, you must disable the use of JavaScript in your browser. To prevent allocation via ETags, you must clear the browser cache after visiting each website. Please note, however, that website elements must then be reloaded each time you visit a website, which increases loading times and - in the case of mobile use - data volume consumption. Depending on the integration of reCaptcha, Google may also set cookies or check whether you already have other Google cookies and use them.

In addition, reCaptcha processes the following data, among others:

• All cookies set by Google in the last 6 months,
• how many mouse clicks you make on the screen/touchscreen,
• CSS informationen of the website,
• date/time of use,
• browser language,
• Plug-ins installed in the browser,
• Javascript objects.
  
  

For more information about Google reCaptcha and Google's privacy policy, please see the following links:

https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

We also process your data in the context of the use of reCaptcha to protect our legitimate interests, Art. 6 para. 1 lit. f GDPR; our legitimate interest is to protect web offers from abusive automated spying and from spam.

Google Maps

On our website, we link for you to our location on Google Maps, a service of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (subsidiary of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). Through the integration as a mere link, no data is transmitted to Google via our website. However, as soon as you click on the link, you will be redirected to Google's web pages, where your data will be processed by Google. Google is solely responsible for this data processing.

For the purpose and scope of the data collection and the further processing and use of the data by Google, as well as your rights in this regard and setting options for protecting your privacy, please refer to Google's privacy policy at https://policies.google.com/privacy?hl=de.

2.    Active use of the website

In addition to the purely informative use of our website, you can also actively use our website to book a room with us or to contact us. In addition to the processing of your personal data described above for purely informational use, we will then also process further personal data from you.

a)    Booking

When you book a conference room, we process the personal data that you provide to us in this context (e.g. by e-mail, contact form or telephone). This includes in particular your name, home address, contact details and means of payment.

We process your personal data when you book a room on the following legal basis:

• for the performance of a contract or the implementation of pre-contractual measures in accordance with Art. 6 para. 1 lit. b GDPR.

b)    Payments

For the payment processing we use banks and possibly also other payment service providers. The transmitted data may be transferred by the service provider to credit agencies for the purpose of identity and credit checks. The service provider may also pass on your data to third parties if this is necessary to fulfill contractual obligations or if the data is to be processed on your behalf. Further information on data processing by the service provider is usually available on its website.

We process your data for the above purpose on the following legal basis:

• For the performance of a contract or for the performance of pre-contractual measures pursuant to Art. 6 para. 1 lit. b GDPR as the processing of the data is necessary for the payment by means of the payment method/ service provider chosen by you and thus for the performance of the contract.

c)    User requests

In order to be able to process and respond to your requests to us, e.g. via the contact form, via chat or to our e-mail address, we process the personal data from you that you provide in this context. In any case, this includes your name and your e-mail address in order to send you an answer, as well as the other information you send us as part of your communication.

We process your personal data to respond to user requests on the basis of the following legal bases:

• to protect our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR; our legitimate interest is the appropriate response to customer requests;
• If the request is aimed at concluding a contract, the additional legal basis is Art. 6 para. 1 lit. b GDPR.

d)    Compliance with legal obligations

We also process your personal data in order to fulfil other legal obligations. These may affect us in connection with the processing of the order or business communication, among other things. These include, in particular, retention periods under commercial, trade or tax law.

We process your personal data on the following legal basis:

• for the fulfilment of a legal obligation to which we are subject in accordance with Art. 6 para. 1 lit. c GDPR in connection with commercial, trade or tax law, insofar as we are obliged to record and store your data.

e)    Law enforcement

We also process your personal data in order to be able to assert our rights and enforce our legal claims. We also process your personal data in order to be able to defend ourselves against legal claims. Finally, we process your personal data to the extent necessary to prevent or prosecute criminal offences.

We process your personal data for this purpose on the following legal basis:

• to protect our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR, insofar as we assert legal claims or defend ourselves in legal disputes or prevent or investigate criminal offences.

f)    Company sale/merger, etc.

We may process your personal data in order to complete a (partial) business sale or merger (or similar process such as acquisition in liquidation, insolvency, dissolution, etc.) with another company. In the event that another company acquires or intends to acquire the assets, which may include your personal data, from us or we carry out or seek to carry out a merger with another company, we may need to grant that company access to or transfer your personal data stored with us for the purpose of reviewing and carrying out the sale of the company/merger (e.g. to determine the value of the company or business risks, to transfer the data/assets, etc.).

In doing so, we process your personal data on the following legal basis:

• to safeguard our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR, in order to be able to organize and implement a planned company sale or merger.

IV.    Links

Some sections of our websites contain links to third-party websites. These websites are subject to their own data protection policies. We are not responsible for their operation, including their data handling practices. If you send information to or through such third-party sites, you should review their privacy policies before sending them any information that can be attributed to you.

V.    Kategorien von Empfängern

Initially, only our employees receive knowledge of your personal data. In addition, we share your personal data with other recipients who provide services for us in connection with our website, insofar as this is permitted or required by law. We limit the disclosure of your personal data to what is necessary. In some cases, our service providers receive your personal data as data processors and are then strictly bound by our instructions when handling your personal data. In some cases, the recipients act independently with the data that we transfer to them.

Below we list the categories of recipients of your personal data:

• Busy Rooms GmbH for administration and operation of the website;
• IT service provider for the hosting of our website;
• Collection agencies and legal advisors for the assertion of our claims;
• Public bodies and institutions insofar as we are legally obliged to do so.

VI.    Transfer to Third Countries

When using Google's tools, we transfer your shortened IP address to the USA. The transfer of data is based on the standard contractual clauses drafted and provided by the European Commission, which we have agreed with Google. Nevertheless, due to the laws of non-EU states (e.g. under the so-called Cloud Act in the USA), even if these agreements and sets of rules are concluded, there is a possibility that government agencies in particular will access your personal data without us being able to prevent, stop or control this. For these reasons, your consent to the use of cookies, for example, also includes the purpose of data transfer to countries outside the EU.

Otherwise, we do not transfer your personal data to countries outside the EU or the EEA or to international organisations.

VII.    Duration of storage

1.    Informational use of the website

Bei der rein informatorischen Nutzung unserer Website speichern wir Ihre personenbezogenen Daten auf unseren Servern ausschließlich für die Dauer des Besuchs unserer Website. Nachdem Sie unsere Website verlassen haben, werden Ihre personenbezogenen Daten unverzüglich gelöscht.

Cookies installed by us are usually also deleted after you leave our website. However, this does not apply to cookies from Google, for example. These cookies may remain stored for a longer period of time. If you have a Google account, the data may also be stored for a longer period. In certain cases, the storage period can also be reset and restarted when you visit the website again. The cookies we use and the respective storage periods can be found at the end of this privacy policy. In addition, you have the option to delete installed cookies yourself at any time or to revoke your consent via the consent management at the end of this privacy policy.

2.    Active use of the website

When you actively use our website, we initially store your personal data for the duration of the response to your request or for the duration of our business relationship. This also includes the initiation of a contract (pre-contractual legal relationship) and the processing/performance of a contract.

In addition, we then store your personal data until any legal claims arising from the relationship with you become time-barred, in order to use them as evidence if necessary. The limitation period is usually between 12 and 36 months, but can also be up to 30 years.

We delete your personal data when the statute of limitations expires, unless there is a legal obligation to retain it, for example from the German Commercial Code (§§ 238, 257 para. 4 HGB) or from the German Fiscal Code (§ 147 para. 3, 4 AO). These retention obligations can be two to ten years.

VIII.    Your rights as data subject

You are entitled to the following rights as a data subject, which you can assert against us, subject to the legal requirements:

Right to access: You are entitled to request confirmation from us at any time within the scope of Art. 15 of the GDPR as to whether we are processing personal data relating to you; if this is the case, you are also entitled within the scope of Art. 15 of the GDPR to receive information about this personal data as well as certain other information (including processing purposes, categories of personal data, categories of recipients, planned storage period, the origin of the data, the use of automated decision-making and, in the case of third country transfers, the appropriate safeguards and a copy of your data).

Right to rectification: In accordance with Art. 16 GDPR, you are entitled to demand that we correct the personal data stored about you if it is inaccurate or incorrect.  

Right to erasure: You have the right, under the conditions of Article 17 GDPR, to demand that we delete personal data relating to you without delay. The right to deletion does not apply, inter alia, if the processing of the personal data is necessary for (i) the exercise of the right to freedom of expression and information, (ii) compliance with a legal obligation to which we are subject (e.g. legal obligations to retain records) or (iii) the assertion, exercise or defence of legal claims.

Right to restriction of processing: You are entitled to demand that we limit the processing of your personal data under the conditions of Art. 18 GDPR.

Right to data portability: You are entitled, under the conditions of Art. 20 GDPR, to demand that we hand over to you the personal data concerning you that you have provided to us in a structured, common and machine-readable format.

Right to withdraw consent: You have the right to revoke your consent to the processing of personal data at any time with effect for the future. The lawfulness of the processing carried out on the basis of the consent until the revocation is not affected.

Right to object: You have the right to object to the processing of your personal data under the conditions of Art. 21 GDPR, so that we have to stop processing your personal data. The right to object only exists within the limits provided for in Art. 21 GDPR. In addition, our interests may conflict with the termination of processing, so that we are entitled to process your personal data despite your objection.

Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, place of work or place of the alleged infringement, under the conditions of Article 77 GDPR, if you consider that the processing of personal data concerning you infringes the GDPR. The right of complaint is without prejudice to any other administrative or judicial remedy.

The supervisory authority responsible for us is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit

Postfach 3163

65021 Wiesbaden

 E-mail: Poststelle@datenschutz.hessen.de

 Telephone: +49 611 1408 0

Telefax: +49 611 1408 611

 

However, we recommend that you always address a complaint to us first.

Your requests for exercising your rights should, if possible, be addressed in writing to the address given under section I or directly to us.

IX.    Scope of your obligation to provide data

Generally, you are not obliged to provide us with your personal data. However, if you do not do so, we may not be able to provide you with our website or social media presence, answer your requests to us or enter into a contract with you. Personal data that we do not absolutely need for the above-mentioned processing purposes are marked as voluntary by "if applicable" or another sign.

X.    Automated Decision Making / Profiling

We do not use automated decision making or profiling (an automated analysis of your personal circumstances).

Information on your right to object under Art. 21 GDPR You have the right to object at any time to the processing of your data on the basis of Art. 6 para. 1 lit. f GDPR (data processing on the basis of a balance of interests) or Art. 6 para. 1 lit. e GDPR (data processing in the public interest), if there are reasons for this arising from your particular situation. This also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR. If you object, we will no longer process your personal data, unless we can prove compelling and applicable reasons for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. The objection may be made without formality and should be sent, if possible, to Realotel Garching Hotelbetriebsgesellschaft mbH (Betriebsgesellschaft des Science Congress Center Munich)  c/o Science Congress Center Munich 65185 Wiesbaden E-mail address:                    info@scc-munich.com Website:                               www.scc-munich.com Telephone:               +49 (0)89 614 25 027 Fax:                                        +49 (0)89 614 25 049

XI.    Amendments

We reserve the right to change this privacy policy at any time. Any changes will be announced by publishing the amended privacy policy on our website. Unless otherwise specified, such changes will take effect immediately. Therefore, please check this privacy policy regularly to view the most current version.

Last updated: December 2021