Privacy Policy

Contact Details

Responsible

Privacy Policy, effective as of October 26th, 2023

For the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)

HotelFriend Service GmbH
Friedrichstrasse 171
10117 Berlin, Germany
Tel.: +49 30 46999 5418
Fax: +49 30 46999 5419
kontakt@hotelfriend.de

HotelFriend Service GmbH (“HotelFriend” or “we”, “us” or “our”) is committed to protecting the privacy of individuals who visit our websites (“Visitors”), individuals acting on behalf of a business entity who register to use the Services as defined below (“Customers”). “You” is used generally in this Privacy Policy and can refer to a “Visitor”, or “Customer” as the context requires. This Privacy Policy describes HotelFriend’s privacy practices in relation to the use of HotelFriend’s websites and the related applications and services offered by HotelFriend (collectively, the “Services”).

Information Collected

When expressing an interest in obtaining additional information about the Services or registering to use the Services, HotelFriend requires you to provide HotelFriend with personal contact information, such as name, company name, address, phone number, and email address (“Required Contact Information”). When purchasing the Services, HotelFriend requires you to provide billing information, such as billing name and address, credit card number (“Billing Information”). HotelFriend may also ask you to provide additional information related to financial qualification, such as company annual revenues, number of employees, or industry (“Optional Information”).

As you navigate HotelFriend’s websites, HotelFriend may also collect information through the use of commonly-used information-gathering tools, such as cookies and web beacons (“Website Navigational Tools”). The information we collect from Website Navigational Tools includes standard information from your web browser (such as browser type and browser language), your Internet Protocol (“IP”) address, and the actions you take on HotelFriend’s websites (such as the web pages viewed and the links clicked).

Use of Information collected

HotelFriend uses Customer Data to respond to your requests and perform the Services requested. For example: (a) if you fill out a “Book a Demo” or/and "Free Trial" Web form(s), HotelFriend will use the information provided to contact you about your interest in the Services; (b) the information the Services collect about Customer and Customers’ employees and Clients are used to administer accounts and provide the Services ordered or requested by Customer; and (c) payment information is used to invoice Customers (and Clients, if authorized by the applicable Customer) and collect payments.

HotelFriend may also use Customer Data for marketing purposes. For example, HotelFriend may use contact information of Customer to contact the Customer to further discuss your interest in the Services and to send you information regarding HotelFriend, and its partners, such as information about promotions or events. Other marketing purposes may include using Customer Data in the aggregate, which would not be personally identifiable, but rather general metrics about all or a segment of HotelFriend Customers.

If you enter into a contract which requires you to send us your payment information (e.g. account number for direct debits), we will require this data to process your payment. Payment transactions using common means of payment (Visa/MasterCard, direct debit) are only made via encrypted SSL or TLS connections. You can recognize an encrypted connection in your browser's address line when it changes from "http://" to "https://" and the lock icon in your browser line is visible.

In the case of encrypted communication, any payment details you submit to us cannot be read by third parties.

Sharing of information collected

Business Partners

From time to time, HotelFriend may partner with other companies to jointly offer products or services. If you purchase or specifically express interest in a jointly-offered product or service from HotelFriend, HotelFriend may share Customer Data collected in connection with your purchase or expression of interest with our joint promotion partner(s).

HotelFriend does not control our business partners’ use of the Customer Data we collect, and their use of the information will be in accordance with their own privacy policies. If you do not wish for your information to be shared in this manner, you may opt not to purchase or express interest in a jointly offered product or service.

Third parties

HotelFriend does not sell, rent or lease personal information to third parties. This does not include trusted third parties who assist us in operating our site or service, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. We may also share your information when we believe that such shared information is necessary to comply with the law, enforce our site policies, or protect ours or other’s rights, property, or safety.

WebSite Navigational Tools

This section describes the types of Website Navigational Tools used on HotelFriend’s websites and how the information collected through those tools may be used.

Cookies

HotelFriend uses cookies to make interactions with HotelFriend’s websites easy and meaningful. When you visit one of HotelFriend’s websites, HotelFriendʼs servers send a cookie to your device.

HotelFriend uses cookies that are session-based and persistent-based. Session cookies exist only during one session. They disappear from your computer when you close your browser software or turn off your computer. Persistent cookies remain on your computer after you close your browser or turn off your computer.

Web Beacons

HotelFriend uses Web beacons alone or in conjunction with cookies to compile information about Customers’ and Visitors’ usage of HotelFriend’s websites and interactions with emails from HotelFriend. For example, HotelFriend may place Web beacons in marketing emails that notify HotelFriend when you click on a link in the email that directs you to one of HotelFriend’s websites. HotelFriend uses Web beacons to operate and improve HotelFriend’s websites and email communications.

IP Addresses

When you visit HoteFriend’s websites, HotelFriend collects your Internet Protocol (“IP”) address to monitor the regions from which Customers and Visitors navigate HotelFriend’s websites. HotelFriend also collects IP addresses from Customers when they log into the Services as part of HotelFriend’s “Identity Confirmation” and “IP Range Restrictions” security features.

Links to Non-HotelFriend Sites

Our website may contain links to other websites. HotelFriend takes no responsibility for the product, services, privacy policies or contents of those other websites. We encourage you to be aware when you are leaving our site and to read the privacy policies of each web site you visit.

Your Rights

HotelFriend is committed to facilitate the exercise of your rights granted by the laws of your jurisdiction. Under the conditions of the statutory provisions of the General Data Protection Regulation (GDPR), which may include the right to request the correction, modification or deletion of your personal information and the right to opt out of the sale or sharing of your personal information (as applicable). We will do our best to honor your requests subject to any legal and contractual obligations. If you would like to make a request, cancel your account, or request we delete or no longer use your account information to provide you Services, contact us at support@hotelfriend.com or make changes to any user profile information connected to your account as described in this section.

Customers may update or change their registration information by editing their user or organization record. To update a user profile, please login to https://app.hotelfriend.com/portal/login with your HotelFriend username and password and click “My Profile”. To update an organization’s information, please login to https://app.hotelfriend.com/portal/login with your HotelFriend username and password and select “Settings” and then select “General”.

If you want to make changes in contract, please contact support@hotelfriend.com

Data processing in detail

In the following, we will inform you about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data and the respective storage period.

Server log files

The website provider automatically collects and stores information that your browser automatically transmits to us in "server log files". These are:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address
  • These data will not be combined with data from other sources.

The basis for data processing is Art. 6 (1) (f) DSGVO, which allows the processing of data to fulfill a contract or for measures preliminary to a contract.

Contact form

Should you send us questions via the contact form, we will collect the data entered on the form, including the contact details you provide, to answer your question and any follow-up questions. We do not share this information without your permission.

We will, therefore, process any data you enter onto the contact form only with your consent per Art. 6 (1)(a) DSGVO. You may revoke your consent at any time. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.

We will, therefore, process any data you enter onto the contact form only with your consent per Art. 6 (1)(a) DSGVO. You may revoke your consent at any time. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.

We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected by this provision.

Registration on this website

You can register on our website in order to access additional functions offered here. The input data will only be used for the purpose of using the respective site or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will reject your registration.

To inform you about important changes such as those within the scope of our site or technical changes, we will use the email address specified during registration.

We will process the data provided during registration only based on your consent per Art. 6 (1)(a) DSGVO. You may revoke your consent at any time with future effect. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.

We will continue to store the data collected during registration for as long as you remain registered on our website. Statutory retention periods remain unaffected.

Registration with Facebook Connect

Instead of registering directly on our website, you may also register using Facebook Connect. This service is provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

If you decide to register with Facebook Connect and click on the "Login with Facebook" or "Connect with Facebook" buttons, you will be automatically redirected to the Facebook platform. There you can log in with your Facebook username and password. This will link your Facebook profile to our website or services. This link gives us access to your data stored on Facebook. Including especially your:

  • Facebook name
  • Facebook profile picture
  • Facebook cover pictureL
  • Email address provided to Facebook
  • Facebook ID
  • Facebook friends
  • Facebook Likes
  • Birthday
  • Gender
  • Country
  • Language
  • This data will be used to set up, provide, and personalize your account.

For more information, see Facebook's Terms of Use and Privacy Policy. These can be found at https://de-de.facebook.com/about/privacy/ and https://www.facebook.com/legal/terms/.

Processing of data (Сustomer and Сontract data)

We collect, process, and use personal data only insofar as it is necessary to establish, or modify legal relationships with us (master data). This is done based on Art. 6 (1) (b) DSGVO, which allows the processing of data to fulfill a contract or for measures preliminary to a contract. We collect, process and use your personal data when accessing our website (usage data) only to the extent required to enable you to access our service or to bill you for the same.

Collected customer data shall be deleted after completion of the order or termination of the business relationship. Legal retention periods remain unaffected.

Data transmitted when entering into a contract

We transmit personally identifiable data to third parties only to the extent required to fulfill the terms of your contract, for example, to companies entrusted to deliver goods to your location or banks entrusted to process your payments. Your data will not be transmitted for any other purpose unless you have given your express permission to do so. Your data will not be disclosed to third parties for advertising purposes without your express consent.

The basis for data processing is Art. 6 (1) (b) DSGVO, which allows the processing of data to fulfill a contract or for measures preliminary to a contract.

Facebook plugins (Like & Share buttons)

Our website includes plugins for the social network Facebook, Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. The Facebook plugins can be recognized by the Facebook logo or the Like button on our site. For an overview of Facebook plugins, see https://developers.facebook.com/docs/plugins/.

When you visit our site, a direct connection between your browser and the Facebook server is established via the plugin. This enables Facebook to receive information that you have visited our site from your IP address. If you click on the Facebook "Like button" while you are logged into your Facebook account, you can link the content of our site to your Facebook profile. This allows Facebook to associate visits to our site with your user account. Please note that, as the operator of this site, we have no knowledge of the content of the data transmitted to Facebook or of how Facebook uses these data. For more information, please see Facebook's privacy policy at https://de-de.facebook.com/policy.php.

If you do not want Facebook to associate your visit to our site with your Facebook account, please log out of your Facebook account.

Twitter plugin

Functions of the Twitter service have been integrated into our website and app. These features are offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. When you use Twitter and the “Retweet” function, the websites you visit are connected to your Twitter account and made known to other users. In doing so, data will also be transferred to Twitter. We would like to point out that, as the provider of these pages, we have no knowledge of the content of the data transmitted or how it will be used by Twitter. For more information on Twitter's privacy policy, please go to https://twitter.com/privacy.

Your privacy preferences with Twitter can be modified in your account settings at https://twitter.com/account/settings.

Google+ plugin

Our pages use Google+ functions. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Collection and disclosure of information: Using the Google +1 button allows you to publish information worldwide. By means of the Google+ button, you and other users can receive custom content from Google and our partners. Google stores both the fact that you have +1'd a piece of content and information about the page you were viewing when you clicked +1. Your +1 can be displayed together with your profile name and photo in Google services, for example in search results or in your Google profile, or in other places on websites and advertisements on the Internet.

Google records information about your +1 activities to improve Google services for you and others. To use the Google + button, you need a globally visible, public Google profile that must contain at least the name chosen for the profile. This name is used by all Google services. In some cases, this name may also replace a different name that you have used to share content via your Google account. The identity of your Google profile can be shown to users who know your email address or other information that can identify you.

Use of collected data: In addition to the uses mentioned above, the information you provide is used in accordance with the applicable Google data protection policies. Google may publish summary statistics about users' +1 activity or share it with users and partners, such as publishers, advertisers, or affiliate websites.

Instagram plugin

Our website contains functions of the Instagram service. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

If you are logged into your Instagram account, you can click the Instagram button to link the content of our pages with your Instagram profile. This means that Instagram can associate visits to our pages with your user account. As the provider of this website, we expressly point out that we receive no information on the content of the transmitted data or its use by Instagram.

For more information, see the Instagram Privacy Policy: https://instagram.com/about/legal/privacy.

LinkedIn plugin

Our site uses functions from the LinkedIn network. The service is provided by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.

Each time one of our pages containing LinkedIn features is accessed, your browser establishes a direct connection to the LinkedIn servers. LinkedIn is informed that you have visited our web pages from your IP address. If you use the LinkedIn “Recommend” button and are logged into your LinkedIn account, it is possible for LinkedIn to associate your visit to our website to your user account. We would like to point out that, as the provider of these pages, we have no knowledge of the content of the data transmitted or how it will be used by LinkedIn.

More information can be found in the LinkedIn privacy policy at https://www.linkedin.com/legal/privacy-policy.

XING Plugin

Our website uses features provided by the XING network. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany.

Each time one of our pages containing XING features is accessed, your browser establishes a direct connection to the XING servers. To the best of our knowledge, no personal data is stored in the process. In particular, no IP addresses are stored nor is usage behavior evaluated.

For more information about data protection and the XING Share button, please see the XING privacy policy at https://www.xing.com/app/share?op=data_protection.

Pinterest plugin

Our website contains functions of the Pinterest social network, operated by Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA.

When you visit a page containing the Pinterest social plugin, your browser establishes a direct connection to the Pinterest servers. The plugin transmits this log data to Pinterest servers in the United States. This log data may include your IP address, the address of the websites visited, which also includes Pinterest features, browser type and settings, the date and time of the request, how you use Pinterest, and cookies.

More information about the purpose, scope and further processing and use of data by Pinterest, as well as your rights and options to protect your privacy, can be found in the privacy notices of Pinterest: https://about.pinterest.com/de/privacy-policy.

Google Analytics 4

This website uses Google Analytics, a web analytics service. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called "cookies". These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

Google Analytics cookies are stored based on Art. 6 (1) (f) DSGVO. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising.

IP anonymization

We have activated the IP anonymization feature on this website. Your IP address will be shortened by Google within the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases is the full IP address sent to a Google server in the US and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website activity and Internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.

Browser plugin

You can prevent these cookies being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Objecting to the collection of data

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this site: Disable Google Analytics.

For more information about how Google Analytics handles user data, see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

Outsourced data processing

We have entered into an agreement with Google for the outsourcing of our data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic data collection by Google Analytics

This website uses Google Analytics' demographic features. This allows reports to be generated containing statements about the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google and third-party visitor data. This collected data cannot be attributed to any specific individual person. You can disable this feature at any time by adjusting the ads settings in your Google account or you can forbid the collection of your data by Google Analytics as described in the section "Refusal of data collection".

etracker

Our website uses the etracker analytics service. The service is provided by etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Germany. This data can be used to create pseudonymous usage profiles. Cookies may be used for this purpose. Cookies are small text files stored in your local browser cache. These cookies enable the recognition of your browser. The data collected by the etracker technologies are not used to determine the personal identity of website visitors and are not compiled together with personal data related to the person referred to by the pseudonym unless expressly agreed to by the person concerned.

etracker cookies remain on your device until you delete them

The storage of etracker cookies is based on Art. 6 (1) (f) DSGVO. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising.

You can object to the collection and storage of your data at any time with future effect. To refuse the collection and storage of your visitor data for the future, you can use the etracker opt-out cookie at the following link. This means that in the future no visitor information will be collected and stored by etracker in your browser: https://www.etracker.de/privacy?et=V23Jbb.

Using this will set an opt-out-cookie called "cntcookie" from etracker. Please do not delete this cookie if you wish your refusal to consent to remain valid. For more information, see the etracker privacy policy: https://www.etracker.com/de/datenschutz.html.

Completion of an outsourced data processing contract

We have entered into an agreement with etracker for the outsourcing of our data processing and fully implement the strict requirements of the German data protection authorities when using etracker.

We have entered into an agreement with etracker for the outsourcing of our data processing and fully implement the strict requirements of the German data protection authorities when using etracker.

Google Analytics Remarketing

Our websites use the features of Google Analytics Remarketing combined with the cross-device capabilities of Google AdWords and DoubleClick. This service is provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

This feature makes it possible to link target audiences for promotional marketing created with Google Analytics Remarketing to the cross-device capabilities of Google AdWords and Google DoubleClick. This allows advertising to be displayed based on your personal interests, identified based on your previous usage and surfing behavior on one device (e.g. your mobile phone), on other devices (such as a tablet or computer).

Once you have given your consent, Google will associate your web and app browsing history with your Google Account for this purpose. That way, any device that signs in to your Google Account can use the same personalized promotional messaging.

To support this feature, Google Analytics collects Google-authenticated IDs of users that are temporarily linked to our Google Analytics data to define and create audiences for cross-device ad promotion.

You can permanently opt out of cross-device remarketing/targeting by turning off personalized advertising in your Google Account; follow this link: https://www.google.com/settings/ads/onweb/.

The aggregation of the data collected in your Google Account data is based solely on your consent, which you may give or withdraw from Google per Art. 6 (1) (a) DSGVO. For data collection operations not merged into your Google Account (for example, because you do not have a Google Account or have objected to the merge), the collection of data is based on Art. 6 (1) (f) DSGVO. The website operator has a legitimate interest in analyzing anonymous user behavior for promotional purposes.

For more information and the Google Privacy Policy, go to: https://www.google.com/policies/technologies/ads/.

Google AdWords and Google Conversion Tracking

This website uses Google AdWords. AdWords is an online advertising program from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States ("Google").

As part of Google AdWords, we use so-called conversion tracking. When you click on an ad served by Google, a conversion tracking cookie is set. Cookies are small text files that your internet browser stores on your computer. These cookies expire after 30 days and are not used for personal identification of the user. Should the user visit certain pages of the website and the cookie has not yet expired, Google and the website can tell that the user clicked on the ad and proceeded to that page.

Each Google AdWords advertiser has a different cookie. Thus, cookies cannot be tracked using the website of an AdWords advertiser. The information obtained using the conversion cookie is used to create conversion statistics for the AdWords advertisers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, advertisers do not obtain any information that can be used to personally identify users. If you do not want to participate in tracking, you can opt-out of this by easily disabling the Google Conversion Tracking cookie by changing your browser settings. In doing so, you will not be included in the conversion tracking statistics.

Conversion cookies are stored based on Art. 6 (1) (f) DSGVO. The website operator has a legitimate interest in analyzing user behavior to optimize both its webs

Facebook Pixel

Our website measures conversions using visitor action pixels from Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook").

These allow the behavior of site visitors to be tracked after they click on a Facebook ad to reach the provider's website. This allows an analysis of the effectiveness of Facebook advertisements for statistical and market research purposes and their future optimization.

The data collected is anonymous to us as operators of this website and we cannot use it to draw any conclusions about our users' identities. However, the data are stored and processed by Facebook, which may make a connection to your Facebook profile and which may use the data for its own advertising purposes, as stipulated in the Facebook privacy policy. This will allow Facebook to display ads both on Facebook and on third-party sites. We have no control over how this data is used.

Check out Facebook's privacy policy to learn more about protecting your privacy: https://www.facebook.com/about/privacy/.

You can also deactivate the custom audiences remarketing feature in the Ads Settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You will first need to log into Facebook.

If you do not have a Facebook account, you can opt out of usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

PipeDrive API

We use PipeDrive, Inc. PipeDrive API, New York, US, to access additional services and data from PipeDrive, Inc. Your IP address will be transmitted to PipeDrive, Inc. The use of PipeDrive API is based on our legitimate interests, i.e., in optimizing our online offer per Art. 6 sec. 1 lit. f. GDPR.The actual storage time of the processed data is not influenced by us but is determined by PipeDrive, Inc. For more information, see the privacy policy for HubSpot API:https://www.pipedrive.com/en/privacy

Newsletter data

If you would like to receive our newsletter, we require a valid email address as well as information that allows us to verify that you are the owner of the specified email address and that you agree to receive this newsletter. No additional data is collected or is only collected on a voluntary basis. We only use this data to send the requested information and do not pass it on to third parties.

We will, therefore, process any data you enter onto the contact form only with your consent per Art. 6 (1) (a) DSGVO. You can revoke consent to the storage of your data and email address as well as their use for sending the newsletter at any time, e.g. through the "unsubscribe" link in the newsletter. The data processed before we receive your request may still be legally processed.

The data provided when registering for the newsletter will be used to distribute the newsletter until you cancel your subscription when said data will be deleted. Data we have stored for other purposes (e.g. email addresses for the members area) remain unaffected.

To send the newsletter, we use a service of the Pipedrive Inc., New York, USA, which collects your personal data on our behalf in accordance with Art. 28 GDPR. Therefore, your data will not be passed on to third parties.

Registration of a customer account

For the use of certain areas of our website, you have the possibility to register a user account. The information collected during registration via the required fields is required to provide access to the user account. In addition, you can voluntarily provide additional information for additional (comfort) features.

For registering a user account, the transfer of your personal data takes place exclusively per this data protection declaration.

We process your data to provide a user account for the performance of a contract with you in accordance with Art. 6 sec. 1 lit.b GDPR. There is a contractual obligation to provide your data, as this information is necessary to identify you and fulfil our contract. However, there is no legal obligation to provide the data. This information is required to register a user account and, thus, enter into a contract.

In addition, the processing of additional information provided voluntarily to provide further (comfort) functions is based on your consent in accordance with Art. 6 sec. 1 lit. a GDPR. By deactivating the functions / By deleting the voluntary information in the user account, you can declare your revocation in accordance with Art. 7 sec. 3 GDPR at any time with effect for the future.

We store your personal data as part of the provision of the user account for the duration of the contractual relationship. After the end of the contract/deletion of the user account, further storage of your data will only take place if legal retention obligations (e.g., tax and commercial law) exist.

The additional information you provide based on your consent will only be stored until you revoke your consent by disabling the functions / deleting the data, but at the latest until the end of the contract on which the provision of the user account is based.

Payment service providers

PayPal

Our website accepts payments via PayPal. The provider of this service is PayPal (Europe) S.à.r.l & Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg.

If you select payment via PayPal, the payment data you provide will be supplied to PayPal based on Art. 6 (1) (a) (Consent) and Art. 6 (1) (b) DSGVO (Processing for contract purposes). You have the option to revoke your consent at any time with future effect. It does not affect the processing of data previously collected.

Klarna

Our website accepts payments via Klarna. This service is provided by Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden.

Klarna offers various payment options (e.g. installment payments). If you opt to pay using Klarna, Klarna will collect various pieces of personal data from you. Further information can be found in the Klarna privacy policy: https://www.klarna.com/de/datenschutz/.

Klarna uses cookies to optimize the use of Klarna checkout solution. Optimizing the checkout solution provides a legitimate interest within the meaning of Art. 6 (1) (f) DSGVO. Cookies are small text files that are stored on your device and do no harm. They remain on your device until you delete them. For further information on how Klarna uses cookies, go to the following link: https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_de/checkout.pdf.

Data is transmitted to Klarna based on Art. 6 (1)(a) (Consent) and Art. 6 (1)(b) DSGVO (Processing for contract purposes). You have the option to revoke your consent at any time with future effect. It does not affect the processing of data previously collected.

Sofortüberweisung

Our website accepts payments via Sofortüberweisung. The provider of this service is Sofort GmbH, Theresienhöhe 12, 80339 Munich, Germany.

Sofortüberweisung provides us with real-time payment confirmations, allowing us to begin fulfilling our end of our contract right away.

If you opt to pay using Sofortüberweisung, you will be submitting a PIN and a valid TAN to Sofort GmbH so that it can access your online banking account. Sofort GmbH will automatically check your account balance and perform the transfer to our account using the TAN you supply. It then sends an immediate transaction confirmation. After logging in, your income, the overdraft protection, and the availability of other accounts and their balances will be checked.

In addition to the PIN and TAN, the payment details you provide as well as personal information will be sent to Sofort GmbH. This personal information includes your name, address, telephone numbers, email address, IP address, and any other data required to process your payment. This data must be transferred to identify you securely and to prevent fraud.

Data is transmitted to Sofort GmbH based on Art. 6 (1) (a) (Consent) and Art. 6 (1) (b) DSGVO (Processing for contract purposes). You have the option to revoke your consent at any time with future effect. It does not affect the processing of data previously collected.

Please refer to the payment with Sofortüberweisung links below: https://www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/.

Adyen

If you use our Software as a Service, payment transactions are processed with Adyen N.V., a company registered with the Dutch Chamber of Commerce under number 34259528 and having its seat at Simon Carmiggeltstraat 6-50, 1011 DJ in Amsterdam, the Netherlands.

Adyen is a payment technology company operating under a banking license. Which means that Adyen provides payments and financial services which include handling payments for its customers and platforms via credit card, bank transfer, and other payment methods, issuing cards, providing (merchant) bank account services, fraud detection services, and other services to its customers.The concrete storage period of the processed data cannot be influenced by us but is determined by Adyen, Inc. Further information can be found in the privacy policy for Adyen: https://www.adyen.com/policies-and-disclaimer/privacy-policy

Contact Details

Questions regarding this Privacy Policy or the information practices of HotelFriend’s websites should be directed to HotelFriend Privacy by emailing privacy@hotelfriend.com or by mailing HotelFriend Privacy, Friedrichstrasse 171 10117 Berlin.