I. Responsible body
Responsible for the collection, processing and use of your personal data via this Internet platform is
Note on the responsible authority
The person responsible for data processing on this website is
Information according to § 5 TMG:
Eventgasthof Hirsch GbR
Nico Meinhardt and Walter Bahlinger
Phone: 0170 4125386 or 0170 5215447
The person responsible for processing personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data. The responsible party is also the service provider in the sense of the Telemedia Act (TMG).
Please read this data protection declaration carefully. It explains the scope, type and purpose of the collection, use and processing of personal data of persons who use this website.
Personal data are all data with which you can be personally identified. These individual details include your name or your contact details, such as telephone number, address and e-mail address.
With the exception of the IP address, personal data is only collected by us if you provide this information voluntarily, for example when registering on our website or using our contact form. These personal data are
is used to identify you as a user via your e-mail address and to contact you via this address.
II. What data do we collect on our website?
1. access data and log files
When using our website for informational purposes only, i.e. when you do not register or otherwise provide us with information, we only collect the data that your browser sends to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website:
– IP address (if possible, this will be stored anonymously)
Domain name of the website you came from
Names of the retrieved files
– Amount of sent data in bytes
– Date and time of a retrieval
– Name of your Internet Service Provider
– as well as operating system and browser version of your end device, if applicable
The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website. We process these data, but we do not store them permanently. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently if there are concrete indications of illegal use.
The data will be evaluated for statistical purposes only. We do not create personal user profiles.
Cookies are used on our website to enable you to use certain functions and to make your visit to our website as practical and safe as possible.
A cookie is a text file that is created when a website is visited and is temporarily stored on the website user’s system. If the server of our website is called up again by the user of the website, the browser of the user of the website sends the previously received cookie back to the server. The server can evaluate the information obtained by this procedure. Cookies can be used, for example, to control the display of advertisements or to facilitate navigation on a website. Cookies are required in particular to enable the functionality of our website operation (the legal basis is Art. 6 Para. 1 lit. f DSGVO, the protection of the legitimate interests of the operator of this website –
Unless it is a matter of technically necessary cookies (which are kept purely locally and are not analyzed further), you will be asked for your consent to set the cookies.
3. hosting of the website
As part of a processing operation on our behalf, a third party provider located within a country of the European Union provides us with hosting and display services for the Website and provides infrastructure services, computing capacity, storage space and database services, maintenance services and security services. In doing so, we or our hosting provider process all data that is generated in the course of using our website. This includes inventory data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors of our online offer.
The processing is based on our legitimate interest in the efficient and secure provision of this online offer (Art. 6 para. 1 lit. f DSGVO in conjunction with Art. 28 DSGVO).
4 Which data do we collect and use when we contact you?
We process inventory data (e.g. names, addresses and contact details) which you have provided when contacting us (e.g. by contact form, e-mail or telephone) in order to fulfil contractual obligations or to answer your inquiries in accordance with Art. 6 Para. 1 lit. b DSGVO. Which data is collected can be seen from the respective input forms. Information that is absolutely necessary to process your inquiry is marked as mandatory fields. For inquiries via our website, we store the IP address and the time of the respective user action. This is done on the basis of our legitimate interests, as well as the interests of the users in protection against misuse and unauthorized use of their data. You can object to this at any time (right of withdrawal). We will not pass on this data to third parties, unless this is necessary to pursue our claims.
is necessary or there is a legal obligation to do so under Art. 6 para. 1 lit. c DSGVO.
We delete the data arising in this context after storage is no longer necessary or restrict processing if there are legal obligations to retain data. We review the necessity of data storage every two years.
III. how long do we store your data?
The data processed by us will be processed, deleted or their processing restricted in accordance with Art. 17 and Art. 18 DSGVO. As a matter of principle, we only store your personal data, which is generated when you use our website, for as long as this is necessary for the above-mentioned purposes. However, if the deletion is contrary to legal storage obligations, the processing of the data is only restricted, i.e. it is blocked for further use and cannot be processed for other purposes.
The following obligations of proof and retention are particularly relevant: 6 years according to § 57 para. 1 HGB (for trading books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting vouchers, etc.), 10 years according to § 147 para. 1 AO (books, records, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.). In addition, personal data may be retained for the time during which claims can be asserted against us (statutory limitation period of three or up to thirty years).
IV. What do we process your data for (purpose of processing) and on what legal basis?
We process the data resulting from the visit of our website or the use of the offered contact possibilities in accordance with the provisions of the European Data Protection Basic Regulation (DSGVO) and the Federal Data Protection Act (BDSG). There are different legal bases depending on the matter for which you contact us via the website. The specific legal basis for data processing depends on the context and purpose for which we receive your data. As a rule, the legal basis for data processing is derived from the options listed below:
Art. 6 I lit. a DSGVO serves us as the legal basis for processing operations for which we obtain consent for a specific processing purpose. A granted consent can be revoked at any time.
If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, with processing operations required for the delivery of goods or the provision of another service or consideration, the processing is based on Art. 6 I lit. b DSGVO. The same applies to such processing operations which are necessary for the performance of
pre-contractual measures are necessary, for example in cases of inquiries about our products or services.
If we are subject to a legal obligation which makes it necessary to process personal data, for example to fulfil tax obligations, the processing is based on Art. 6 I lit. c DSGVO.
Finally, processing operations could be based on Art. 6 I lit. f DS-GVO. Processing operations which are not covered by any of the above legal bases are based on this legal basis if the processing is necessary to safeguard a legitimate interest of our company or of a third party, provided that the interests, fundamental rights and freedoms of the data subject do not prevail.
V. Disclosure of your personal data to third parties?
Your personal data will not be transferred to third parties for purposes other than those listed below. We only pass on your personal data to third parties if:
– you have given your express consent in accordance with Art. 6 Para. 1 S. 1 lit. a DSGVO,
– the disclosure pursuant to Art. 6 para. 1 sentence 1 letter f DSGVO is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
– in the event that there is a legal obligation to pass on the data pursuant to Art. 6 para. 1 sentence 1 lit. c DSGVO, and
– this is legally permissible and, in accordance with Art. 6 Para. 1 S. 1 lit. b DSGVO, necessary for the processing of contractual relationships with you.
VI. is there an obligation for me to provide data?
Within the scope of our business relationship, you only have to provide those personal data that are necessary for the establishment, execution and termination of a business relationship or that we are legally obliged to collect. Without this data, we will generally not be able to conclude the contract or execute the
of the order or are no longer able to execute an existing contract and may have to terminate it.
VII. What data protection rights do I have?
You have the right:
– to request information about your personal data processed by me in accordance with Art. 15 DSGVO In particular, you may request information on the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right of rectification, cancellation, restriction of processing or opposition, the existence of a right of appeal, the origin of your data, if not collected from me, and the existence of automated decision making including profiling and, if applicable, meaningful information on the details of the data;
– in accordance with Art. 16 DSGVO, to immediately demand the correction of incorrect or incomplete personal data stored by me;
– pursuant to Art. 17 DSGVO to demand the deletion of your personal data stored with me, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
– pursuant to Art. 18 DSGVO, to demand the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer require the data, but you require it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing pursuant to Art. 21 DSGVO;
– pursuant to Art. 20 DSGVO, to receive your personal data that you have provided to me in a structured, common and machine-readable format or to request that it be transferred to another person responsible;
– in accordance with Art. 7 para. 3 DSGVO, to revoke your consent, once granted, at any time vis-à-vis me. As a result, we may no longer continue the data processing based on this consent for the future and
– pursuant to Art. 77 DSGVO, you have the right to complain to a supervisory authority, without prejudice to any other administrative or judicial remedy. As a rule, you can contact the supervisory authority at your usual place of residence or work or the place of the place where the alleged breach occurred if the data subject believes that the processing of personal data relating to him or her is in breach of the EU’s basic data protection regulation (DS-GVO).
Right of objection
If your personal data are processed on the basis of legitimate interests pursuant to Art. 6 para. 1, sentence 1, letter f) DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DSGVO, if there are reasons for doing so arising from your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right of objection, which will be implemented by us without specifying a special situation. If you wish to exercise your right of revocation or objection, an e-mail to the e-mail address given in the imprint of our website is sufficient.
A given consent can be revoked at any time. This also applies to the revocation of declarations of consent that were given to us before the Data Protection Basic Regulation came into force, i.e. before May 25, 2018.
Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.
VIII. What must be observed for links to other websites?
IX. What do we do for data security?
We use the TLS (Transport Layer Security) method in conjunction with the highest level of encryption supported by your browser. The closed key or lock symbol in the status bar of your browser indicates whether an individual page of our website is transmitted in encrypted form.
We secure our website and other IT systems by appropriate technical and organizational measures against loss, destruction, unauthorized access, unauthorized modification or unauthorized distribution of your data. However, despite all due care, complete protection against all risks is not always possible.
Data processing explanations. If the consent of the user is necessary or if parts of the data protection declaration contain a regulation of the contractual relationship with users, the data protection declaration will only be changed with the consent of the user.
Explanation of tools and aids used
It is often not enough to explain how to use a tool. Please refer to the notes at the very beginning of the document. Please also design the texts according to the tools you use. Copying the entire following text is not helpful.
Analysis tools and advertising
We use the analysis service Google Analytics. This web analysis service is operated by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
We use Google Analytics to evaluate your use of our website and to compile reports on user activity.
This analysis tool works in particular on the basis of cookies. A cookie is a text file that is sent when you visit a website and is temporarily stored on the hard disk of the user of the website to enable an analysis of your use of the website. The information stored by the cookie is usually transferred to a Google server in the USA and then stored there.
You can prevent the collection by Google Analytics by using the consent solution used on this website.
We would like to point out that Google Analytics has been extended by the extension “anonymizeIp”. This ensures anonymous collection of IP addresses.
Please note that due to the Cloud Act, American secret services could possibly gain access to personal data, which is necessarily exchanged with Google, whose headquarters are located in the USA, due to the Internet Protocol when this tool is integrated.
We have embedded YouTube videos on our website, which are stored on the servers of the provider YouTube and can be played from our website via embedding. The embedding of the videos is done with the option for advanced privacy settings activated. When you play these videos, YouTube cookies and DoubleClick cookies are stored on your computer and may transfer data to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), as YouTube operator. When playing videos stored on YouTube, at least the following data is currently transmitted to Google as YouTube operator and operator of the DoubleClick network: IP address and cookie, the specific address of the page called up on our site, system date and time of the call, identification of your browser. This data is transmitted regardless of whether you have a Google user account through which you are logged in or whether you do not have a user account. If you are so logged in, Google may associate this data directly with your account. If you do not wish to be associated with your profile, you must log out before activating the play button for the video. YouTube and Google respectively store this data as user profiles and may use it for advertising, market research and/or the design of their websites to meet your needs. Such evaluation is carried out in particular (also for non-registered users) to provide advertising tailored to your needs and to inform other users about your activities on our website. You have a right of objection
against the creation of these user profiles, whereby you must contact Google as the operator of YouTube to exercise this right. Further information on the purpose & scope of data collection and its processing by Google can be found on this information page.
Please note that due to the Cloud Act, U.S. intelligence agencies could possibly gain access to personal data that is necessarily exchanged with Google, whose headquarters are located in the USA, when this tool is integrated due to the Internet Protocol.
We use the Facebook plugin of the company Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”). The plugin shows a like button for our Facebook page (“Like Button”). When you visit our website, the plugin already sends your data to Facebook. This data includes, among other things, your IP address, the time the page was called and the address of the page you called.
If you click on the Like Button and are logged in with your Facebook account, Facebook assigns the click on the Like Button to your user profile. Even if you don’t click the Like button, Facebook can still associate you as a visitor to our website based on your Facebook account login.
You can adjust your advertising settings by clicking on the following link to Facebook in your user account: https://www.facebook.com/settings?tab=ads
Please note that due to the Cloud Act, U.S. intelligence agencies could potentially gain access to personal information that is necessarily exchanged with Facebook, headquartered in the U.S., through the use of this tool due to the Internet Protocol.
We use function of the service Instagram, provider is Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA (“Instagram”).
By using Instagram buttons, the web pages you visit will be linked to your Instagram account and shared with other users. In the process, data is also transferred to Instagram. If you do not want Instagram to link your activities on our website to your account, please log out of Instagram before visiting our website or using the Instagram plugin.
Please note that due to the Cloud Act, U.S. intelligence agencies may have access to personal data that could be
of this tool will inevitably be exchanged with Instagram due to the Internet Protocol.
Paypal is a company of PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royale, L-2449 Luxembourg (“Paypal”). When you click on a button such as “Buy Now” on our website or fill out an order form that is linked to Paypal, your IP address, together with information voluntarily entered by you, is transmitted to Paypal for the purpose of processing your order. Your personal data will be transmitted to “Paypal” exclusively for the purpose of processing your online order. You can find further information about data protection at Paypal here: https://www.paypal.com/de/cgi-bin/marketingweb?cmd=p/gen/ua/policy_privacy-outside
You have the possibility to revoke your consent to data processing for the future at any time.
We use WordPress as editorial system for our website. WordPress uses functional (necessary) cookies to ensure the login process for editors and administrators. In particular, when trying to log in to the WordPress administration interface, a cookie called wordpress_test_cookie is set. This cookie is only used for the active session and is deleted when you close the browser. The cookie is not used to evaluate users.
The reCAPTCHA component of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) is used to protect your communication via Internet forms. With reCAPTCHA, misuse through automated, machine processing can be reduced. reCAPTCHA transmits your IP address and any other data required by Google for reCAPTCHA to Google. Your input via the reCAPTCHA component will be transmitted to Google and further processed there. By using reCAPTCHA, you agree that the recognition of images provided by you will be incorporated into the digitization of old works. The IP address transmitted by your browser when using reCAPTCHA will not be merged with other data from Google. For these data the deviating
Please note that due to the Cloud Act, U.S. intelligence agencies could potentially gain access to personal information that is necessarily exchanged with Google, whose headquarters are located in the U.S., due to the Internet Protocol when this tool is integrated.
Please note that due to the Cloud Act, U.S. intelligence agencies could potentially gain access to personal information that is necessarily exchanged with Google, whose headquarters are located in the U.S., due to the Internet Protocol when this tool is integrated.
Please note that due to the Cloud Act, U.S. intelligence agencies may have access to personal information that is necessarily exchanged with Google, headquartered in the U.S., through the use of this tool due to Internet Protocol.
Handling of applicant data
We offer you the opportunity to apply for a job with us (e.g. by e-mail, by post or via online application form). In the following we will inform you about the scope, purpose and use of your personal data collected during the application process. We assure you that the collection, processing and use of your data will be in accordance with the applicable data protection laws and all other legal requirements and that your data will be treated in strict confidence.
Scope and purpose of data collection
If you send us an application, we will process your associated personal data (e.g. contact and communication data, application documents, notes taken during job interviews, etc.) to the extent that this is necessary to make a decision on the establishment of an employment relationship. The legal basis for this is § 26 BDSG-neu under German law (initiation of an employment relationship), Art. 6 para. 1 lit. b DSGVO (general contract initiation) and – if you have given your consent – Art. 6 para. 1 lit. a DSGVO. Consent can be revoked at any time. Within our company, your personal data will only be passed on to persons involved in the processing of your application.
If the application is successful, the data submitted by you will be stored in our data processing systems on the basis of § 26 BDSG-neu and Art. 6 para. 1 lit. b DSGVO for the purpose of carrying out the employment relationship.
Storage period of the data
If we are unable to offer you a job, if you reject a job offer or if we withdraw your application, we reserve the right to keep the data you have submitted with us for up to 6 months from the end of the application procedure (rejection or withdrawal of the application) on the basis of our legitimate interests (Art. 6 para. 1 letter f DSGVO).
Afterwards, the data will be deleted and the physical application documents destroyed. The storage serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the 6-month period has expired (e.g. due to an imminent or pending legal dispute),
a deletion only takes place when the purpose for further storage no longer applies.
Longer-term storage can also take place if you have given your consent (Art. 6 para. 1 lit. a DSGVO) or if statutory storage obligations prevent deletion.
Inclusion in the applicant pool
If we do not offer you a job, there may be the possibility to add you to our pool of applicants. If you are accepted, all documents and details from your application will be transferred to the applicant pool in order to contact you in case of suitable vacancies.
Admission to the applicant pool is based solely on your express consent (Art. 6 para. 1 lit. a DSGVO). Your consent is voluntary and has no relation to the current application procedure. The person concerned can revoke his/her consent at any time. In this case, the data will be irrevocably deleted from the pool of applicants, unless there are legal reasons for retention.
The data will be irrevocably deleted from the applicant pool no later than two years after consent has been granted.
7. our social media appearances
Data processing through social networks
We maintain publicly accessible profiles in social networks. You can find the social networks we use in detail below.
Social networks such as Facebook, Google+ etc. can usually analyze your user behavior comprehensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). A visit to our social media sites triggers numerous data protection-relevant processing operations. In detail:
If you are logged in to your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. Your personal data may also be collected even if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies that are stored on your end device or by recording your IP address.
With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-related advertising can be displayed to you both inside and outside the respective social media presence. If you have an account with the respective social network, interest-based advertising can be displayed on all devices on which you are or were logged in.
Our social media appearances are designed to ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. The analysis processes initiated by the social networks may be based on different legal bases, which must be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 para. 1 lit. a DSGVO).
Responsibility and assertion of rights
If you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. You can assert your rights (information, correction, deletion, restriction of processing, data transferability and complaint) against us as well as against the operator of the respective social media portal (e.g. against Facebook).
Please note that despite the joint responsibility with the social media portal operators, we do not have full influence on the data processing procedures of the social media portals. Our possibilities are largely determined by the corporate policy of the respective provider.
The data collected directly by us via the social media presence will be deleted from our systems as soon as the purpose for storing them no longer applies, you request us to delete them, revoke your consent to storage or the purpose for storing the data no longer applies. Stored cookies remain on your end device until you delete them. Mandatory legal provisions – in particular retention periods – remain unaffected.
Social networks in detail
We have a profile on Facebook. Provider is Facebook Inc, 1 Hacker Way, Menlo Park, California 94025, USA. Facebook is certified according to the EU-US Privacy Shield.
We have concluded an agreement with Facebook on joint responsibility for processing data (Controller Addendum). This agreement defines the data processing operations for which we or Facebook are responsible when you visit our Facebook fan page. You can view this agreement under the following link: https://www.facebook.com/legal/terms/page_controller_addendum
You can adjust your advertising settings independently in your user account. To do so, click on the following link and log in: https://www.facebook.com/settings?tab=ads