Privacy Policy
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Schloss Drachenburg gGmbH
Drachenfelsstraße 118
53639 Königswinter
Germany
Phone: +49 2223 90197-0
Email: mail@schloss-drachenburg.de
If a Data Protection Officer has been appointed, you may contact them at the above contact details using the reference “Data Protection”.
2. General Information on Data Processing
We process personal data only to the extent necessary to provide a functional website as well as our content and services. The processing of your personal data generally takes place only with your consent or where such processing is permitted by statutory provisions.
3. Legal Basis for Processing
Your personal data is processed on the basis of:
Art. 6(1)(a) GDPR (consent),
Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures),
Art. 6(1)(c) GDPR (legal obligation),
Art. 6(1)(f) GDPR (legitimate interests pursued by our company).
Our legitimate interest particularly lies in ensuring the functionality, security and optimisation of our website as well as the proper conduct of our business operations.
4. Collection and Storage of Personal Data When Visiting the Website
When you access our website, information is automatically transmitted by your browser to our website server. This information is temporarily stored in so-called log files.
The following information is collected without your intervention:
IP address of the requesting device
Date and time of access
Name and URL of the retrieved file
Website from which access is made (referrer URL)
Browser used and, if applicable, the operating system of your device
Name of your internet service provider
The processing of this data is carried out on the basis of Art. 6(1)(f) GDPR to ensure a smooth connection setup, system security and stability, and for administrative purposes.
This data is not merged with other data sources.
5. Cookies
Our website uses cookies. Cookies are small text files that are stored on your device.
Where cookies are technically necessary for the operation of the website, processing is carried out on the basis of Art. 6(1)(f) GDPR.
Where other cookies (e.g. analytics or marketing cookies) are used, this is done exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR.
You may adjust your cookie settings at any time via the consent tool or delete/disable cookies in your browser settings.
6. Contacting Us
If you contact us by email or via a contact form, the information you provide will be stored for the purpose of processing your request and in case of follow-up questions.
Processing is carried out on the basis of Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in handling your inquiry).
7. Disclosure of Data
Your personal data will only be transferred to third parties:
if you have given your explicit consent (Art. 6(1)(a) GDPR),
if this is necessary for the performance of a contract (Art. 6(1)(b) GDPR),
if there is a legal obligation (Art. 6(1)(c) GDPR),
or if processing is necessary to safeguard legitimate interests (Art. 6(1)(f) GDPR).
Where external service providers are engaged (e.g. hosting providers), this is done within the framework of a data processing agreement pursuant to Art. 28 GDPR.
A transfer of data to third countries outside the EU or EEA will only take place if appropriate safeguards pursuant to Art. 44 et seq. GDPR are ensured.
8. Data Retention
Your personal data will only be stored for as long as necessary to achieve the respective purposes or as long as statutory retention periods apply.
After the purpose ceases to apply or statutory periods expire, the data will be routinely deleted or restricted in accordance with legal requirements.
9. Your Rights as a Data Subject
You have the following rights:
Right of access pursuant to Art. 15 GDPR
Right to rectification pursuant to Art. 16 GDPR
Right to erasure (“right to be forgotten”) pursuant to Art. 17 GDPR
Right to restriction of processing pursuant to Art. 18 GDPR
Right to data portability pursuant to Art. 20 GDPR
Right to object pursuant to Art. 21 GDPR
Right to withdraw consent pursuant to Art. 7(3) GDPR
To exercise your rights, an informal notification to the contact details listed above is sufficient.
10. Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.
As a rule, you may contact the supervisory authority at your habitual residence, place of work, or at the registered office of our company.
11. Data Security
We use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorised access by third parties.
12. Validity and Amendments to This Privacy Policy
This Privacy Policy is currently valid.
Due to the further development of our website or changes in legal requirements, it may become necessary to amend this Privacy Policy.