Privacy Policy

Scope

This Privacy Policy applies to all pages of www.kingshotels.de. It does not apply to any linked websites or online presences of other providers.

Data Controller

The entity responsible for the processing of personal data within the scope of this Privacy Policy is:

KCS Hotel GmbH
Dachauer Str. 13, 80335 Munich
Tel.: 004989551870
office@king-group.de

Questions about Spirit Legal

If you have any questions regarding data protection in relation to our company or our website, you can contact us using the contact information provided in the “Data Controller” section.

Security

We have implemented comprehensive technical and organizational measures to protect your personal data from unauthorized access, misuse, loss, and other external threats. To this end, we regularly review our security measures and adapt them to the latest technological standards.

Your Rights

You have the following rights regarding your personal data, which you may exercise by contacting us:

Right of access: You may request information regarding your personal data that we process in accordance with Article 15 of the GDPR.
Right to rectification: If the information concerning you is no longer accurate, you may request rectification in accordance with Article 16 of the GDPR. If your data is incomplete, you may request that it be completed.
Right to erasure: You may request the erasure of your personal data in accordance with Article 17 of the GDPR.
Right to restriction of processing: In accordance with Article 18 of the GDPR, you have the right to request a restriction on the processing of your personal data.
Right to object to processing: You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data carried out pursuant to Article 6(1)(e) or (f) of the GDPR, in accordance with Article 21(1) of the GDPR. In this case, we will no longer process your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms. Further processing may also take place if the processing serves to assert, exercise, or defend legal claims (Article 21(1) of the GDPR). Furthermore, pursuant to Article 21(2) of the GDPR, you have the right to object at any time to the processing of your personal data for the purposes of direct marketing; this also applies to any profiling to the extent that it is related to such direct marketing. We draw your attention to the right to object in this Privacy Policy in connection with the respective processing.
Right to withdraw your consent: To the extent that you have given your consent to processing, you have the right to withdraw your consent under Article 7(3) of the GDPR.
Right to data portability: You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format (“data portability”), as well as the right to have this data transmitted to another controller if the conditions of Article 20(1)(a) and (b) of the GDPR are met (Article 20 of the GDPR).

You may exercise your rights by contacting us using the contact information provided in the “Controller” section.

If you believe that the processing of your personal data violates data protection law, you also have the right under Article 77 of the GDPR to lodge a complaint with a data protection supervisory authority of your choice. This includes the data protection supervisory authority responsible for the controller:

Bavarian State Office for Data Protection Supervision, Promenade 18, 91522 Ansbach, Mailing Address: P.O. Box 1349, 91504 Ansbach, Phone: 0981/180093-0, Email:poststelle@lda.bayern.de , https://www.lda.bayern.de.

Visiting Our Website

When you visit our website, your browser transmits information to the server to establish a connection and display the content securely, quickly, stably, and in the correct format on your device.

The following data may be processed in this process:

Browser type/browser version,
operating system used,
language and version of the browser software,
Date and time of access,
Hostname of the accessing device,
IP address,
Content of the request (specific webpage),
Notification of whether the request was successful, and

This data is further stored to ensure the functionality of the website and the security of the IT systems.

The legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interests lie in ensuring the functionality of the website as well as its integrity and security. Upon request, we will provide you with the statement of legitimate interests free of charge. Storing access data, in particular the IP address, enables us to detect and prevent misuse. This includes, for example, defending against requests that overload the service or potential bot usage. The access data is deleted as soon as it is no longer necessary to achieve the purpose of its processing. In the case of data collected for the provision of the website, this is the case when you end your visit to the website. The log data is deleted after thirty days at the latest.

You may object to the processing. Your right to object applies for reasons arising from your particular situation. You may submit your objection to us using the contact details provided in the “Controller” section.

Device Information

In addition to the aforementioned access data, technologies are used when you use the website that store information on your device (e.g., desktop PC, laptop, tablet, and smartphone) or access information already stored on your device. These technologies may include, for example, so-called cookies, pixels, LocalStorage, SessionStorage, IndexedDB, or browser fingerprinting technologies. These technologies can be used to recognize you across devices and websites.

Pursuant to Section 25(1) of the TDDDG, we generally require your consent to use these technologies. According to Section 25(2) of the TDDDG, such consent is not required only if the technologies either enable the transmission of a message via a public telecommunications network or if they are absolutely necessary to provide a telemedia service that you have expressly requested.

Technically Necessary Device Information

Some elements of our website serve the sole purpose of transmitting a message (Section 25(2)(1) TDDDG) or are strictly necessary to provide you with our website or individual functionalities of our website (Section 25(2)(2) TDDDG):

Language settings,
Shopping cart.

These elements are deleted once storage is no longer necessary.

You can prevent this processing by adjusting the settings in your browser software. For elements whose storage duration is not limited to the session, you can delete them in your browser settings after your session ends.

Non-technically necessary device information

We also use elements on the website that are not technically necessary. In accordance with legal requirements, we use these technologies only with your consent. Information on the individual technologies and functions can be found in “Advanced Settings” within the consent management platform (“cookie banner”) as well as organized by individual functions in the following information: .

Consent Management Platform

We use a consent tool on our website to request your consent for the processing of your device information and personal data via cookies or other tracking technologies. This tool allows you to consent to or refuse the processing of your device information and personal data via cookies or other tracking technologies for the purposes listed. Such processing purposes may include, for example, the integration of external elements, the integration of streaming content, statistical analysis, audience measurement, personalized product recommendations, or personalized advertising.

You can grant or deny your consent for all processing purposes, or grant or deny your consent for individual purposes or individual third-party providers.

You can also change the settings you have made at a later time. The purpose of integrating the consent management platform is to allow users of our website to decide whether to accept cookies and similar functionalities and to offer them the option to change settings they have already made while continuing to use our website.

In the course of using the consent management platform, we process personal data as well as information about the end devices used. The information regarding the settings you have made is also stored on your end device.

The legal basis for the processing is Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR, insofar as the processing serves to fulfill the legally prescribed obligations to provide evidence of consent. In all other cases, Article 6(1)(f) of the GDPR is the applicable legal basis. Our legitimate interests in the processing lie in the storage of user settings and preferences regarding the use of cookies and the evaluation of consent rates. Upon request, we will provide you with the balancing of interests free of charge.

Twelve months after the user settings are configured, consent will be requested again. The user settings will then be stored again for this period, unless you delete the information about your user settings yourself beforehand from the designated device storage.

You may object to the processing to the extent that the processing is based on Art. 6(1)(f) of the GDPR. Your right to object applies for reasons arising from your particular situation. You may submit your objection to us using the contact details provided in the “Controller” section.

The recipient of the personal data processed in this context is the provider of the consent management platform we use:

Consentmanager GmbH (Eppendorfer Weg 183, 20253 Hamburg, Germany) with regard to the consent management platform “consentmanager”

Application Process

As part of the application process, we process your contact information, such as your first and last name and email address, data from your application documents—in particular, certificates, resume, cover letter, date of birth, and gender—and, where applicable, special categories of personal data, such as marital status and degree of disability. The purpose of the processing is to assess your suitability for a position in our company and to conduct the application process. In the case of a (spontaneous) application via email, we also process metadata from your email, such as the date and time, to conduct the application process. When applying via our career portal on our website, the access data mentioned in the section “Use of Our Website” is also processed to enable you to submit your application documents and other materials digitally to us as part of the application process.

The legal basis for the processing is Art. 6(1)(b) GDPR in conjunction with § 26(1) BDSG, insofar as the data processing is necessary for the establishment and performance of the employment relationship. When processing special categories of personal data, the legal basis is Article 9(2)(b) of the GDPR in conjunction with Section 26(3) of the BDSG. The provision of your data is necessary and mandatory for the conclusion or performance of the contract. If you do not provide your data, you cannot apply for a position with us.

We store your data for as long as it is necessary in connection with the application process. As a rule, we delete your personal data as soon as it is no longer required for the aforementioned purposes and unless otherwise required by law. In particular, we retain personal data for as long as we need it to assert legal claims or to defend against claims. Accordingly, we delete applicants’ data in the event of a rejection six months after sending the rejection notice. The legal basis for processing for the purposes of legal enforcement is Art. 6(1)(b) GDPR in conjunction with § 26(1) BDSG. When processing special categories of personal data, in particular regarding any disabilities, the legal basis is Article 9(2)(b) of the GDPR in conjunction with Section 26(3) of the BDSG or Article 9(2)(f) of the GDPR.

When applying through our website, you can also use the data stored on “LinkedIn” (LinkedIn Corporation, 1000 W Maude Ave, Sunnyvale, CA, USA). If you select this option, LinkedIn will be notified that you are accessing LinkedIn from our website. In addition, your data stored on LinkedIn (such as your name, photos, profile slogans, current position, and the email address linked to your LinkedIn or Xing account) will be transmitted to us. The transfer of data from LinkedIn to us is based on your consent during the forwarding process and thus on the legal basis of Article 6(1)(a) of the GDPR. The transmission of your IP address to LinkedIn is based on Article 6(1)(f) of the GDPR. The purpose of this processing is to enable the integration of LinkedIn into our website. Our legitimate interests in the processing lie in improving our service offerings and making our website more attractive and applicant-friendly. Upon request, we will provide you with the balancing of interests free of charge. LinkedIn also processes the data in the United States. An adequacy decision by the European Commission exists for data transfers to the United States. LinkedIn is certified under this framework. We have entered into so-called standard contractual clauses with LinkedIn to oblige LinkedIn to maintain an adequate level of data protection. We will gladly provide you with a copy upon request. Further information on data protection and the retention period at LinkedIn can be found at https://www.linkedin.com/legal/privacy-policy.

You may revoke your consent to the processing of your LinkedIn data at any time by sending us a message (see the contact details in the “Data Controller” section). The lawfulness of the processing remains unaffected until the revocation is exercised. In addition, you have the right to object to the processing of your other data, provided that the processing is based on the legal basis pursuant to Art. 6(1)(f) of the GDPR. Your right to object applies for reasons arising from your particular situation. You may submit your objection to us using the contact details provided in the “Data Controller” section.

Career Portal

For talent acquisition and to manage and streamline the application process, we use the career portal “HotelCareer by stepstone” provided by the vendor (The StepStone Group Deutschland GmbH, Völklinger Straße 1, 40219 Düsseldorf, hereinafter “StepStone”). The purposes of processing are to provide a simple input form for applicants and to digitally organize and carry out the job posting and recruitment process. You can enter the personal data required for the application in the “StepStone” form. When you submit your application via the career portal, your data from the form and your IP address are also processed by “StepStone.” The provider processes your personal data as our data processor based on a data processing agreement pursuant to Art. 28 GDPR.

Establishment, exercise, or defense of legal claims

In addition, we process personal data for the establishment, exercise, or defense of legal claims. The legal basis for the processing is Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR. In these cases, we have a legitimate interest in asserting or defending claims.

You may object to the processing provided it is based on Article 6(1)(f) of the GDPR. Your right to object applies for reasons arising from your particular situation. You may submit your objection to us using the contact details provided in the “Controller” section.

Compliance with Other Legal Obligations

We may also process the aforementioned personal data to fulfill other legal obligations, in particular if we have received an enforceable administrative or judicial order or are required to do so by law. The legal basis in these cases is Article 6(1)(c) of the GDPR.

Booking System

If you wish to make a booking on our website, it is necessary and mandatory for the initiation and conclusion of the contract that you provide personal data such as your first and last name, your address, your email address, and your nationality. We process your data for booking purposes and, for this purpose, will in particular forward payment data to the payment service provider you have selected or to our house bank. The legal basis for the processing is Art. 6(1)(b) of the GDPR. The provision of your data is necessary and mandatory for the conclusion and/or performance of the contract. If you do not provide your data, it is not possible to conclude and/or perform the contract.

We will delete the data collected in this context once storage is no longer necessary, or restrict processing if statutory retention obligations apply. Due to mandatory commercial and tax law regulations, we are required to retain your address, payment, and booking data for a period of up to ten years. Two years after the contract ends, we will restrict processing and limit it to compliance with existing legal obligations.

We use an external service provider for the internal processing and administration of your order as well as for shipping:

HP+ (Hotelpartner Deutschland GmbH; Steinstraße 24, 20095 Hamburg) with regard to the shop system. The provider is the recipient of the aforementioned data.

The provider processes your personal data as our data processor pursuant to a data processing agreement in accordance with Art. 28 of the GDPR.

Payment Processing

We offer various payment methods on our website. After selecting one of the available payment methods, the payment details you provided (e.g., during the booking process), along with information about your order, your first and last name, and booking number, will be processed for the purpose of payment processing. To be able to assign your payment, we process your name, email address, and the selected payment method. If data required for payment processing is transmitted, this is done via the secure “SSL” protocol.

For payment processing, we also use external payment service providers in some cases, unless you have selected the “prepayment” payment method. Further information on these payment service providers can be found in the “Payment Service Providers” section.

The legal basis for processing is Art. 6(1)(b) of the GDPR. The provision of your payment data is necessary and mandatory for the conclusion or performance of the contract. If payment data is not provided, it is not possible to conclude and/or perform the contract using the selected payment method.

We delete the data collected in this context once storage is no longer necessary, or restrict processing if statutory retention obligations apply. Due to mandatory commercial and tax law regulations, we are required to retain your address, payment, and order data for a period of up to eight years. One year after the contract ends, we restrict processing and limit it to compliance with existing legal obligations.

Payment service providers:

Credit card payment

For the purpose of payment processing, we transfer the payment data required for the credit card payment to the financial institution responsible for the payment or to the payment and billing service provider we may have engaged. Processing is based on Article 6(1)(b) of the GDPR. The provision of your payment data is necessary and mandatory for the conclusion or performance of the contract. If payment data is not provided, it is not possible to conclude and/or perform the contract via credit card payment. The data required for payment processing is transmitted securely via SSL and processed exclusively for the purpose of payment processing. We delete the data collected in this context once storage is no longer necessary, or restrict processing if statutory retention obligations apply. Due to mandatory commercial and tax law regulations, we are required to retain your address, payment, and order data for a period of up to ten years. Two years after the termination of the contract, we restrict processing and limit it to compliance with existing legal obligations.

PayPal

On our website, we offer you the option to pay via “PayPal” (PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, and PayPal Holdings, Inc., 2211 North First Street, 95131 San José, California, USA; hereinafter: “PayPal”). To make a payment, you must log in to your PayPal account. The payment details you provided to PayPal are processed by PayPal for the purpose of payment processing. For more information on data processing by PayPal, please visit: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

To be able to process your payment, we process your shipping/billing address, email address, and the selected payment method. We delete the data collected in this context once storage is no longer necessary, or restrict processing if statutory retention obligations apply. Due to mandatory commercial and tax law regulations, we are required to retain your address, payment, and order data for a period of up to ten years. Two years after the contract ends, we restrict processing and limit it to compliance with existing legal obligations.

The legal basis is Art. 6(1)(b) of the GDPR. The provision of your payment data is necessary and mandatory for the conclusion or performance of the contract. If payment data is not provided, it is not possible to conclude and/or perform the contract using PayPal as the payment method.

PayPal also processes your data in the United States. Standard data protection clauses have been concluded with PayPal Holdings, Inc. to ensure that PayPal Holdings, Inc. maintains an adequate level of data protection. You can view a copy of the standard data protection clauses on PayPal’s website at https://www.paypal.com/de/smarthelp/contact-us/privacy. For more information, including details on the retention period, please refer to PayPal’s Privacy Policy at https://www.paypal.com/de/smarthelp/contact-us/privacy.

If you select the PayPal service “SEPA Direct Debit,” “Credit Card,” or “Purchase on Account” as part of your order, “PayPal” (PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, and PayPal Holdings, Inc., 2211 North First Street, 95131 San José, California, USA; hereinafter: “PayPal”) will process the collected personal data for the purpose of payment processing. You do not need a PayPal account to use this service. For more information about data processing at PayPal, please visit: https://www.paypal.com/de/smarthelp/contact-us/privacy.

We process the payment method you specify in connection with your order. We delete the data collected in this context once storage is no longer necessary, or restrict processing if statutory retention obligations apply. Due to mandatory commercial and tax law regulations, we are required to retain your address, payment, and order data for a period of up to ten years. Two years after the termination of the contract, we will restrict processing and limit it to compliance with existing legal obligations.

In our online store, you have the option to use “Express Checkout,” a service offered by “PayPal” (PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, and PayPal Holdings, Inc., 2211 North First Street · 95113 San Jose, California, USA; hereinafter: “PayPal”). This allows you to shorten the ordering process. In this case, PayPal processes your name, address, payment information, and information about the order placed. The legal basis for this processing is Art. 6(1)(b) of the GDPR. The provision of your payment data is necessary and mandatory for the conclusion or performance of the contract. If you do not provide your payment data, it will not be possible to conclude and/or perform the contract using the PayPal service you have selected. We will delete the data collected in this context once storage is no longer necessary, or restrict processing if statutory retention obligations apply. Due to mandatory commercial and tax law regulations, we are required to retain your address, payment, and order data for a period of up to ten years. Two years after the termination of the contract, we will restrict processing and limit it to compliance with existing legal obligations.

Adyen

The “Credit Card” payment option is integrated via “Adyen” (Adyen N.V. – German Branch, Jägerstr. 27, 10117 Berlin, hereinafter “Adyen”). If you select this payment option, the payment data you provide during the booking process, along with your booking information, will be transmitted to Stripe for the purpose of processing the payment. This processing is based on Article 6(1)(b) of the GDPR. The provision of payment data is necessary and mandatory for the conclusion and/or performance of the contract. If payment data is not provided, it is not possible to conclude and/or perform the contract using the aforementioned payment method.

Adyen also processes your data for the purpose of fraud prevention. To this end, Adyen uses cookies or other technologies to track certain user behavior on our website. Using cookies and other tracking technologies, Adyen processes the information generated about your device’s use of our website—e.g., that you have visited a specific webpage—and processes, among other things, the data listed in the section “Use of Our Website,” in particular your IP address, browser information, the previously visited website, and the date and time of the server request. The processing is based on Art. 6(1)(f) of the GDPR. Our legitimate interests lie in fraud prevention. Upon request, we will provide you with the balancing of interests free of charge. The information collected can be used to detect potentially harmful or illegal activities.

Hosting

We use external hosting services provided by Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany, hereinafter “Hetzner Online”), which serve to provide infrastructure and platform services. For these purposes, all data—including the access data mentioned under “Use of Our Website”—required for the operation and use of our website is processed. Strato processes your personal data as our data processor based on a data processing agreement pursuant to Art. 28 GDPR.

Embedding Third-Party Content

Google Fonts

We use so-called web fonts, provided by “Google” (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, and Google, LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter: “Google” and “Google Fonts”), to ensure consistent font display. When you visit a webpage, your browser loads the necessary web fonts from Google into its browser cache to display text and fonts correctly and more quickly. To this end, the browser transmits your IP address to Google to establish a connection to Google’s servers. In doing so, Google receives the information that you have accessed our website. The legal basis for the processing is Art. 6(1)(f) GDPR. By using Google Fonts, we pursue the legitimate interest in a uniform and appealing presentation of our online offerings. Upon request, we will provide you with the balancing of interests free of charge. Google also processes your personal data in the United States. An adequacy decision by the European Commission exists for data transfers to the United States. Google, LLC is certified under this decision. Additionally, so-called standard contractual clauses have been concluded with Google, LLC to commit Google, LLC to an adequate level of data protection. You can obtain a copy of the standard contractual clauses at https://cloud.google.com/terms/sccs. Further information on the purpose and scope of processing by Google and the retention period for Google Fonts can be found at https://developers.google.com/fonts/faq and in Google’s Privacy Policy: https://policies.google.com/privacy.

You may object to the processing provided it is based on Art. 6(1)(f) of the GDPR. Your right to object applies for reasons arising from your particular situation. You may submit your objection to us using the contact details provided in the “Data Controller” section.

Services for Statistical, Analytical, and Marketing Purposes

We use third-party services for statistical, analytical, and marketing purposes. This enables us to provide you with a user-friendly, optimized website experience. The third-party providers use cookies, pixels, browser fingerprinting, or other tracking technologies to manage their services. Below, we provide information about the third-party services currently used on our website, the specific processing involved in each case, and your options for revoking consent.

Google Analytics 4

To tailor our websites optimally to user interests, we use “Google Analytics 4,” a web analytics service provided by “Google” (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, and Google, LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter: “Google” and “Google Analytics 4”). Google Analytics 4 uses so-called cookies, which are stored on your device for recognition purposes, as well as similar tracking methods for device recognition such as web beacons, device fingerprinting, and programming interfaces (e.g., APIs and SDKs) to process information from your device. For this purpose, a randomly generated identification number (cookie ID/device ID) is assigned to your device. Using these technologies, Google processes the information generated about your device’s use of our websites, as well as access data, for the purpose of statistical analysis—e.g., visits to a specific webpage, number of unique visitors, entry and exit pages, duration of visit, click, swipe, and scroll behavior, button interactions, newsletter sign-ups, bounce rate, and similar user interactions. For this purpose, it may also be determined whether different devices belong to you or your household. Access data includes, in particular, the IP address, browser and device information, cookie ID/device ID, the previously visited website, and the date and time of the server request. In Google Analytics 4 systems, individual IP addresses are not logged or stored. When Google captures the IP address in special local data centers within the EU, your IP address is used to determine location information. The IP address is then deleted before the access data is stored in a data center or on a server for Google Analytics. Google Analytics 4 does not provide precise data on geographic location, but only general location information such as the region and city of the end device’s location, which is derived from the IP address. Google will process this information to evaluate your use of the website, compile reports on website activity for us, and—to the extent we specifically indicate—to provide us with other services related to website usage. If you are registered with a Google service, Google may associate the website visit with a user account and create and evaluate user profiles across applications.

In addition, a cross-platform analysis of user behavior is conducted on websites and apps that use Google Analytics 4 technologies. This allows user behavior to be equally tracked, measured, and compared across different environments. For example, the user’s scroll events are automatically recorded to provide a better understanding of how websites and apps are used. For this purpose, different cookie IDs/device IDs are used for various end devices. Subsequently, we are provided with anonymized statistics on the use of the various platforms, generated according to selected criteria. With the help of Google Analytics 4, target groups are also automatically created for specific cookie IDs/device IDs or mobile advertising IDs, which can later be used for personalized advertising.

The legal basis for the storage of and access to information on your device is Section 25(1) of the TDDDG; the legal basis for further processing is Article 6(1)(a) of the GDPR. Google also processes some of the data in the United States. An adequacy decision by the European Commission exists for data transfers to the United States. Additionally, so-called standard contractual clauses have been concluded with Google to commit Google to an adequate level of data protection. You can obtain a copy of the standard contractual clauses at https://cloud.google.com/terms/sccs. Your data in connection with Google Analytics 4 will be deleted after 24 months at the latest. For more information on data protection at Google, please visit: http://www.google.de/intl/de/policies/privacy.

You may withdraw your consent to the processing at any time by refusing the use of cookies and similar tracking technologies in our consent tool [ Insert link ]. The lawfulness of the processing until the withdrawal is exercised remains unaffected.

Hijiffy

If you have any questions about our hotels, accommodations, recreational activities, your reservation, or our company, you can reach us via the “HiJiffy” chat window (HiJiffy S.A., Rua das Eiras, No. 5, Lot 14, 1st Floor, Apartment 7960-262 Vidigueira, Portugal; hereinafter: “HiJiffy”) and send us a message through it. This allows you to obtain information on various topics related to your hotel stay or to make a booking. The information provided via the chat is processed in this process. “HiJiffy” uses cookies and similar tracking technologies to enable you to use the chat. Some of the data listed in the “Use of Our Website” section is transmitted to “HiJiffy.” We use “HiJiffy” to communicate with you more effectively and conveniently. We delete the data collected in this context once processing is no longer necessary, or restrict processing to comply with existing mandatory legal retention requirements. The legal basis for the use of “HiJiffy” is Art. 6(1)(f) GDPR. Our legitimate interests in using “HiJiffy” lie in offering a customer-friendly and efficient booking process and providing information about your stay. Upon request, we will provide you with the balancing of interests free of charge. The data processed in this context will be deleted as soon as it is no longer necessary for the purpose of processing. Further information on data protection and the retention period can be found at https://www.hijiffy.com/privacy-policy.