Privacy Policy

Contact Details

Responsible

Privacy Policy, effective as of October 26th, 2023

For the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)

HotelFriend Service GmbH
Friedrichstrasse 171
10117 Berlin, Germany
Tel.: +49 30 46999 5418
Fax: +49 30 46999 5419
kontakt@hotelfriend.de

HotelFriend Service GmbH (“HotelFriend” or “we”, “us” or “our”) is committed to protecting the privacy of individuals who visit our websites (“Visitors”), individuals acting on behalf of a business entity who register to use HotelFriendʼs services as defined below (“Customers”). “You” is used generally in this Privacy Policy and can refer to a “Visitor”, or “Customer” as the context requires. This Privacy Policy describes HotelFriend’s privacy practices in relation to the use of HotelFriend’s websites and the related applications and services offered by HotelFriend (collectively, the “Services”).

Information Collected

When expressing an interest in obtaining additional information about the Services or registering to use the Services, HotelFriend requires you to provide HotelFriend with personal contact information, such as name, company name, phone number, email address, and the company's local address (“Required Contact Information”). When purchasing the Services, HotelFriend requires you to provide billing information, such as billing name and address, credit card number (“Billing Information”). HotelFriend may also ask you to provide additional information related to financial qualification, such as company annual revenues, number of employees, or industry (“Optional Information”).

As you navigate HotelFriend’s websites, HotelFriend may also collect information through the use of commonly-used information-gathering tools, such as cookies and web beacons (“Website Navigational Tools”). TThe information we collect from HotelFriendʼs website includes standard information from your web browser (such as browser language and browser type), your Internet Protocol (“IP”) address, and the actions you take on HotelFriend’s websites (such as the web pages viewed and the links clicked).

Use of Information collected

HotelFriend uses Customer Data to respond to your requests and perform the Services requested. For example: (a) if you fill out a “Book a Demo” or/and "Free Trial" Web form(s), HotelFriend will use the information provided to contact you about your interest in the Services; (b) the data gathered by the Services regarding Customers, their employees, and Clients is utilized to manage accounts and deliver the Services as per the Customer's orders or requests; and (c) payment details are utilized for invoicing Customers (and, if permitted by the relevant Customer, Clients) and facilitating payment collection.

HotelFriend may also use Customer Data for marketing purposes. For example, HotelFriend may use contact information of Customer to contact the Customer to further discuss your interest in the Services and to send you information regarding HotelFriend, and its partners, such as information about events or promotions. Other marketing purposes may include using Customer Data in the aggregate, which would not be personally identifiable, but rather general metrics about all or a segment of HotelFriend Customers.

Should you engage in a contract mandating the submission of payment details (such as an account number for direct debits), we will necessitate this information to facilitate your payment processing. Payment transactions using common means of payment (Visa/MasterCard, direct debit) are only made via encrypted SSL or TLS connections. You can recognize an encrypted connection in your browser's address line when it changes from "http://" to "https://" and the lock icon in your browser line is visible.

When communication is encrypted, any payment information you provide cannot be accessed by third parties

Sharing of information collected

Business Partners

From time to time, HotelFriend may partner with other companies to jointly offer products or services. If you purchase or specifically express interest in a jointly-offered product or service from HotelFriend, HotelFriend may share Customer Data collected in connection with your purchase or expression of interest with our joint promotion partner(s).

HotelFriend does not control our business partners’ use of the Customer Data we collect, and their use of the information will be in accordance with their own privacy policies. If you do not wish for your information to be shared in this manner, you may opt not to purchase or express interest in a jointly offered product or service.

Third parties

HotelFriend does not sell, rent or lease personal information to third parties. This excludes trusted third parties aiding in site or service operation, business conduct, or your service, provided they agree to maintain confidentiality. Additionally, we may share your information if deemed necessary to comply with the law, enforce site policies, or safeguard our or other’s rights, property, or safety.

WebSite Navigational Tools

This section describes the types of Website Navigational Tools used on HotelFriend’s websites and how the information collected through those tools may be used.

Cookies

HotelFriend uses cookies to make interactions with HotelFriend’s websites easy and meaningful. When you visit one of HotelFriend’s websites, HotelFriendʼs servers send a cookie to your device.

HotelFriend uses cookies that are session-based and persistent-based. Session cookies exist only during one session. When you close your browser software or power down your computer, session cookies vanish from your device. Persistent cookies, however, persist on your computer even after you shut down your browser or turn off your computer.

Web Beacons

HotelFriend uses Web beacons alone or in conjunction with cookies to compile information about Customers’ and Visitors’ usage of HotelFriend’s websites and interactions with emails from HotelFriend. For example, HotelFriend may place Web beacons in marketing emails that notify HotelFriend when you click on a link in the email that directs you to one of HotelFriend’s websites. HotelFriend uses Web beacons to operate and improve HotelFriend’s websites and email communications.

IP Addresses

When you visit HoteFriend’s websites, HotelFriend collects your Internet Protocol (“IP”) address to monitor the regions from which Customers and Visitors navigate HotelFriend’s websites. HotelFriend also gathers IP addresses from Customers during their login to the Services, as part of the security measures like "Identity Confirmation" and "IP Range Restrictions.

Links to Non-HotelFriend Sites

Our website may contain links to other websites. HotelFriend takes no responsibility for the product, services, privacy policies or contents of those other websites. We recommend staying mindful when exiting our site and suggest reviewing the privacy policies of each website you visit.

Your Rights

HotelFriend is committed to facilitate the exercise of your rights granted by the laws of your jurisdiction. Under the conditions of the statutory provisions of the General Data Protection Regulation (GDPR), which may include the right to request the correction, modification, or removal of your personal information and the option to decline the sale or sharing of your personal data (where relevant).. We'll make every effort to respect your requests, considering any legal or contractual obligations. If you wish to make a request, close your account, or ask us to delete or discontinue using your account information for providing Services, please get in touch with us at support@hotelfriend.com or make changes to any user profile information connected to your account as described in this section.

Customers can modify or update their registration information by editing their user or organization record. To update a user profile, please login to https://app.hotelfriend.com/portal/login with your HotelFriend username and password and click “My Profile”. To update an organization’s information, please login to https://app.hotelfriend.com/portal/login with your HotelFriend username and password and select “Settings” and then select “General”.

If you want to make changes in contract, please contact support@hotelfriend.com

Data processing in detail

In the following, we will inform you about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data and the respective storage period.

Server log files

The website provider automatically gathers and retains information that your browser sends to us through "server log files.". These are:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address
  • These data will not be combined with data from other sources.

This statement refers to Article 6 (1) (f) of the GDPR, which permits data processing to fulfill a contract or for actions taken before entering into a contract.

Contact form

If you reach out to us through the contact form with questions, we'll gather the information you input in the form, including the contact details you provide. This helps us respond to your initial question and any subsequent inquiries. We do not share this information without your permission.

Therefore, we'll only process the data you enter into the contact form with your explicit consent as per Art. 6 (1)(a) of the GDPR. You have the right to withdraw your consent at any time. An informal email making this request is sufficient. Data that has been processed before we receive your request may still be processed legally.

We'll keep the information you provide on the contact form until you ask for its deletion, withdraw your consent for its storage, or when its storage purpose becomes irrelevant (e.g. after fulfilling your request). Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected by this provision.

Registration on this website

Signing up on our website grants access to additional features. The details you provide will solely be used for utilizing the specific site or service you've registered for. Completing all mandatory information during registration is necessary; incomplete submissions will result in registration rejection.

We'll use the email address provided during registration to notify you about significant site changes or technical updates. The processing of data during registration relies solely on your consent as per Art. 6 (1)(a) of the GDPR, which you can revoke at any time for future actions. A simple email requesting this suffices. Any data processed before we receive your revocation will still be handled legally. The information collected during registration will be stored as long as your account is active on our website. Legal retention periods will apply as required by law.

Registration with Facebook Connect

Rather than directly registering on our website, you have the option to register using Facebook Connect. This service is facilitated by Facebook Ireland Limited, situated at 4 Grand Canal Square, Dublin 2, Ireland.

If you decide to register with Facebook Connect and click on the "Login with Facebook" or "Connect with Facebook" buttons, you will be automatically redirected to the Facebook platform. You can use your Facebook username and password to log in. This connection will link your Facebook profile to our website or services, granting us access to the data stored on your Facebook account. Including especially your:

  • Facebook name
  • Facebook profile picture
  • Facebook cover pictureL
  • Email address provided to Facebook
  • Facebook ID
  • Facebook friends
  • Facebook Likes
  • Birthday
  • Gender
  • Country
  • Language
  • This information will be utilized to establish, deliver, and tailor your account.

For further details, refer to Facebook's Terms of Use and Privacy Policy.. These can be found at https://de-de.facebook.com/about/privacy/ and https://www.facebook.com/legal/terms/.

Processing of data (Сustomer and Сontract data)

We collect, process, and use personal data only insofar as it is necessary to establish, or modify legal relationships with us (master data). This is done based on Art. 6 (1) (b) DSGVO, which allows the processing of data to fulfill a contract or for measures preliminary to a contract. We collect, process and use your personal data when accessing our website (usage data) only to the extent required to enable you to access our service or to bill you for the same.

Collected customer data shall be deleted after completion of the order or termination of the business relationship. Legal retention periods remain unaffected.

Data transmitted when entering into a contract

We only share personally identifiable information with third parties as necessary to fulfill your contract terms. For instance, this could include companies responsible for delivering goods to your specified location or banks handling your payment processing. Your data will not be transmitted for any other purpose unless you have given your express permission to do so. Your data will not be shared with third parties for advertising purposes unless we have obtained your explicit consent.

The basis for data processing is Art. 6 (1) (b) DSGVO, this provision permits data processing to complete a contract or undertake actions preparatory to a contract.

Facebook plugins (Like & Share buttons)

Our website incorporates plugins from the social network Facebook, managed by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. These Facebook plugins can be identified by the Facebook logo or the Like button on our site. You can find an overview of Facebook plugins at https://developers.facebook.com/docs/plugins/.

When you visit our site, the plugin establishes a direct connection between your browser and the Facebook server, allowing Facebook to receive information that you've visited our site from your IP address. Clicking the Facebook "Like button" while logged into your Facebook account enables you to link our site's content to your Facebook profile, associating visits to our site with your user account on Facebook.

Please note that, as the operator of this site, we have no insight into the content of data transmitted to Facebook or how Facebook utilizes this information. For more details, refer to Facebook's privacy policy at https://de-de.facebook.com/policy.php. If you prefer not to link your visit to our site with your Facebook account, kindly log out of your Facebook account.

Twitter plugin

We've integrated features of the Twitter service into our website and app, provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. When utilizing Twitter and its "Retweet" function, the websites you visit get linked to your Twitter account, visible to other users, and data will be transmitted to Twitter. Please note that, as the provider of these pages, we have no insight into the transmitted data's content or its utilization by Twitter. For further details regarding Twitter's privacy policy, visit https://twitter.com/privacy.

To adjust your privacy settings on Twitter, visit your account settings at https://twitter.com/account/settings.

Instagram plugin

Our website includes features from the Instagram service provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

If you're logged into your Instagram account, clicking the Instagram button enables you to link our page content with your Instagram profile. This allows Instagram to correlate visits to our pages with your user account. As the provider of this website, we want to clarify that we do not receive any details about the content of transmitted data or its usage by Instagram.

For additional insights, refer to the Instagram Privacy Policy at https://instagram.com/about/legal/privacy.

LinkedIn plugin

Our site uses functions from the LinkedIn network. The service is provided by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.

Each time one of our pages containing LinkedIn features is accessed, your browser establishes a direct connection to the LinkedIn servers.

LinkedIn is notified of your visit to our web pages through your IP address. By using the LinkedIn “Recommend” button while logged into your LinkedIn account, LinkedIn can potentially link your website visit to your user account. As the provider of these pages, we have no insight into the content of the transmitted data or its utilization by LinkedIn. You can find more details in the LinkedIn privacy policy at https://www.linkedin.com/legal/privacy-policy.

XING Plugin

Our website utilizes functionalities from the XING network, provided by XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany.

Each time one of our pages containing XING features is accessed, your browser establishes a direct connection to the XING servers. To the best of our knowledge, no personal data is stored in the process. In particular, no IP addresses are stored nor is usage behavior evaluated.

When you access one of our pages containing XING features, your browser establishes a direct connection to XING servers. As far as we know, no personal data is stored during this process. Specifically, neither IP addresses nor usage behavior is evaluated or stored.

For more information about data protection and the XING Share button, please see the XING privacy policy at https://www.xing.com/app/share?op=data_protection.

Pinterest plugin

Our website features functionalities from the Pinterest social network, managed by Pinterest Inc., located at 635 High Street, Palo Alto, CA, 94301, USA.

When you access a page containing the Pinterest social plugin, your browser establishes a direct connection to Pinterest servers. The plugin transmits log data to Pinterest servers situated in the United States. This log data might include your IP address, visited website addresses (which also comprise Pinterest features), browser type and settings, request date and time, your interactions with Pinterest, and cookies.

For additional insights on the purpose, extent, further processing, and use of data by Pinterest, along with your rights and privacy protection options, refer to Pinterest's privacy notices: https://about.pinterest.com/de/privacy-policy..

Google Analytics 4

This site utilizes Google Analytics, a web analysis service operated by Google Inc., situated at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics employs "cookies," text files stored on your computer that enable the analysis of your website usage. Typically, the information generated by these cookies regarding your use of this website is transmitted to and stored on a Google server in the USA.

The use of Google Analytics cookies is grounded on Art. 6 (1) (f) of the GDPR. The website owner holds a legitimate interest in analyzing user behavior to enhance both the site and its advertising.

IP anonymization:

We've activated IP anonymization on this website. Your IP address is abbreviated by Google within the European Union or in other countries adhering to the Agreement on the European Economic Area before transmission to the USA. Only in exceptional cases will the complete IP address be transferred to a Google server in the US and truncated there. Google uses this information on behalf of the website operator to assess website usage, compile activity reports, and offer other services related to website activity and internet usage. Your browser's transmitted IP address for Google Analytics won't be combined with other Google-held data.

Browser plugin

You can prevent cookie storage by adjusting your browser settings. However, this might limit some functionalities of the website. Additionally, you can prevent data (including your IP address) generated by cookies related to your website usage from being transmitted to Google and Google's processing of such data by downloading and installing the browser plugin available at the following link https://tools.google.com/dlpage/gaoptout?hl=en.

Opting out of data collection:

You can opt out of Google Analytics data collection by clicking on the following link. An opt-out cookie will be set to prevent future data collection on your visits to this site: Disable Google Analytics.

For further insights into Google Analytics' handling of user data, refer to Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

Outsourced data processing:

We've contracted Google for data processing and comply fully with stringent German data protection authority requirements when using Google Analytics.

Google Analytics' demographic data collection:

This website utilizes Google Analytics' demographic features, enabling reports on visitors' age, gender, and interests. This data originates from Google's interest-based advertising and third-party visitor information, unattributable to any specific individual. You can disable this feature by adjusting your ads settings in your Google account or by refusing data collection by Google Analytics, as described in the "Refusal of data collection" section.

etracker

Our website employs the etracker analytics service, provided by etracker GmbH, located at Erste Brunnenstraße 1, 20459 Hamburg, Germany. The data collected through this service may be used to create pseudonymous usage profiles, potentially utilizing cookies for this purpose. Cookies, small text files stored in your browser cache, facilitate browser recognition. Information gathered by etracker technologies doesn't ascertain the personal identity of website visitors and isn't combined with personal data unless explicitly consented to by the concerned individual.

etracker cookies persist on your device until manually deleted.

The storage of etracker cookies is grounded in Art. 6 (1) (f) of the GDPR. The website operator holds a legitimate interest in analyzing user behavior to enhance both the website and its advertising.

You retain the right to object to the collection and storage of your data, effective immediately and for the future. To decline future data collection and storage of your visitor data, you can utilize the etracker opt-out cookie available at this link: https://www.etracker.de/privacy?et=V23Jbb. This will set an opt-out cookie named "cntcookie" from etracker. Please refrain from deleting this cookie if you wish to uphold your refusal to consent. For more insights, refer to the etracker privacy policy: https://www.etracker.com/de/datenschutz.html

Outsourced data processing agreement completion:

We've engaged in a contract with etracker for outsourcing our data processing and adhere fully to the stringent requirements stipulated by German data protection authorities while utilizing etracker.

Google Analytics Remarketing

Our websites utilize Google Analytics Remarketing functionalities coupled with Google AdWords and DoubleClick's cross-device capabilities, provided by Google Inc., situated at 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

This feature links target audiences established through Google Analytics Remarketing with Google AdWords and Google DoubleClick's ability to span multiple devices. Consequently, advertising aligned with your personal interests, inferred from your past usage and browsing activities on one device (e.g., mobile phone), can be displayed on other devices like tablets or computers.

Upon granting consent, Google associates your web and app browsing history with your Google Account. This allows any device logged into your Google Account to access the same personalized promotional content.

To support this feature, Google Analytics collects Google-authenticated user IDs temporarily merged with our Google Analytics data to shape and generate audiences for cross-device advertising.

You can permanently opt out of cross-device remarketing/targeting by disabling personalized advertising in your Google Account settings through this link: https://www.google.com/settings/ads/onweb/.

The amalgamation of data within your Google Account relies solely on your consent under Art. 6 (1) (a) of the GDPR, which you can grant or revoke from Google. For data collection operations not merged into your Google Account (e.g., if you lack a Google Account or have objected to merging), data collection is based on Art. 6 (1) (f) of the GDPR. The website operator holds a legitimate interest in analyzing anonymous user behavior for promotional purposes.

For comprehensive details and the Google Privacy Policy, visit: https://www.google.com/policies/technologies/ads/.

Google AdWords and Google Conversion Tracking

This website employs Google AdWords, an online advertising program provided by Google Inc., located at 1600 Amphitheater Parkway, Mountain View, CA 94043, United States ("Google").

Within Google AdWords, we utilize conversion tracking. Clicking on a Google-served ad triggers the setting of a conversion tracking cookie. These cookies, small text files stored in your internet browser, expire after 30 days and are not utilized for user identification purposes. If a user visits specific website pages before the cookie expiration, Google and the website can ascertain that the user clicked on the ad and navigated to that page.

Each Google AdWords advertiser has a distinct cookie, ensuring tracking isn't cross-referenced among different advertisers' websites. Data derived from the conversion cookie assists in creating conversion statistics for AdWords advertisers utilizing conversion tracking. Advertisers receive information on the total number of users redirected to a conversion tracking tag page by clicking their ad. However, this data does not allow for the personal identification of users. Opting out of tracking is feasible by simply disabling the Google Conversion Tracking cookie through your browser settings. This action exempts you from inclusion in conversion tracking statistics.

Storage of conversion cookies is grounded in Art. 6 (1) (f) of the GDPR. The website operator holds a legitimate interest in analyzing user behavior to optimize both its website and advertising strategies.

Facebook Pixel

Our website tracks conversions using visitor action pixels from Facebook, operated by Facebook Inc., located at 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook").

These pixels enable the tracking of site visitor actions post-clicking on a Facebook ad, leading them to the provider's website. This analysis helps evaluate the efficacy of Facebook ads for statistical and market research purposes, aiming to enhance future ad performance.

The data collected remains anonymous to us as website operators, preventing us from drawing conclusions about user identities. However, Facebook stores and processes this data, potentially linking it to your Facebook profile for its advertising purposes, in line with the Facebook privacy policy. Consequently, Facebook can display ads on its platform and third-party sites. We lack control over how Facebook employs this data.

For detailed insights on safeguarding your privacy, refer to Facebook's privacy policy: https://www.facebook.com/about/privacy/.

To disable the custom audiences remarketing feature, visit the Ads Settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen after logging into Facebook.

For those without a Facebook account, opting out of Facebook's usage-based advertising can be done via the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement.

PipeDrive API

We use PipeDrive, Inc. PipeDrive API, New York, US, to access additional services and data from PipeDrive, Inc. Your IP address will be transmitted to PipeDrive, Inc. The use of PipeDrive API is based on our legitimate interests, i.e., in optimizing our online offer per Art. 6 sec. 1 lit. f. GDPR. We do not influence the actual storage duration of processed data; this is determined by PipeDrive, Inc. For more information, see the privacy policy for HubSpot API:https://www.pipedrive.com/en/privacy

Newsletter data

If you wish to receive our newsletter, we'll need a valid email address and information confirming ownership and your agreement to receive it. Additional data isn't mandatory, and if collected, it's purely voluntary. The data provided is solely utilized to send the requested information and isn't shared with third parties.

Your provided data through the contact form is processed solely upon your consent as per Art. 6 (1) (a) DSGVO. You have the right to revoke this consent for storing your data and email address, and their use for newsletter distribution, anytime, typically via the "unsubscribe" link in the newsletter. Data processed before your revocation request may still be legally processed.

Information submitted for newsletter registration is utilized until you opt-out, after which it's deleted. Other data stored for separate purposes (e.g., email addresses for the members area) remains unaffected.

For newsletter distribution, we utilize a service provided by Pipedrive Inc., New York, USA, which manages your personal data in compliance with Art. 28 GDPR on our behalf. Consequently, your data isn't shared with third parties.

Registration of a customer account

For the use of certain areas of our website, you have the possibility to register a user account. The data collected through the mandatory fields during registration is essential to grant access to the user account.. In addition, you can voluntarily provide additional information for additional (comfort) features.

For registering a user account, the transfer of your personal data takes place exclusively per this data protection declaration.

We process your data to provide a user account for the performance of a contract with you in accordance with Art. 6 sec. 1 lit.b GDPR. Your data is required due to a contractual obligation; this information is essential for your identification and fulfilling our contractual obligations. However, there is no legal obligation to provide the data. This information is required to register a user account and, thus, enter into a contract.

In addition, the processing of additional information provided voluntarily to provide further (comfort) functions is based on your consent in accordance with Art. 6 sec. 1 lit. a GDPR. You can express your revocation under Art. 7 sec. 3 GDPR by deactivating functions or deleting voluntary information within your user account, affecting future use. As part of the user account provision, we retain your personal data for the contract's duration. Upon contract termination or account deletion, data storage may continue if legal retention obligations (e.g., tax and commercial laws) apply.

The additional information you provide based on your consent will only be stored until you revoke your consent by disabling the functions / deleting the data, but at the latest until the end of the contract on which the provision of the user account is based.

Payment service providers

PayPal

Our website accepts payments via PayPal. The service provider for this platform is PayPal (Europe) S.à.r.l & Cie, S.C.A. located at 22-24 Boulevard Royal, L-2449 Luxembourg. If you opt for PayPal as your payment method, your payment details are forwarded to PayPal in line with Art. 6 (1) (a) (Consent) and Art. 6 (1) (b) DSGVO (Processing for contract purposes). You retain the right to revoke your consent at any time, affecting future transactions without impacting previously collected data.

Klarna

Our website accepts payments via Klarna. This service is provided by Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden.

Klarna offers various payment options (e.g. installment payments). If you opt to pay using Klarna, Klarna will collect various pieces of personal data from you. Further information can be found in the Klarna privacy policy: https://www.klarna.com/de/datenschutz/.

Klarna utilizes cookies to enhance the functionality of the Klarna checkout solution. Optimizing this checkout solution aligns with a legitimate interest as defined in Art. 6 (1) (f) of the DSGVO. These cookies, small text files stored on your device, do not cause any harm and persist until you manually remove them. For further information on how Klarna uses cookies, go to the following link: https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_de/checkout.pdf.

Data is transmitted to Klarna based on Art. 6 (1)(a) (Consent) and Art. 6 (1)(b) DSGVO (Processing for contract purposes). You have the option to revoke your consent at any time with future effect. It does not affect the processing of data previously collected.

Sofortüberweisung

Our website accepts payments via Sofortüberweisung. The provider of this service is Sofort GmbH, Theresienhöhe 12, 80339 Munich, Germany.

The service provider for this service is Sofort GmbH, located at Theresienhöhe 12, 80339 Munich, Germany. Sofortüberweisung enables us to promptly initiate our contractual obligations upon receiving real-time payment confirmations. If you choose Sofortüberweisung as your payment method, you'll be required to input a PIN and a valid TAN, granting Sofort GmbH access to your online banking account.

Sofort GmbH will conduct an immediate check on your account balance and execute the transfer to our account using the provided TAN. Subsequently, an instantaneous transaction confirmation is sent. Upon login, your income, overdraft protection, other account availability, and their balances will be verified.

Apart from the PIN and TAN, Sofort GmbH will receive the payment details and personal information you provide, including your name, address, phone numbers, email address, IP address, and other necessary data for payment processing. This transfer of data is crucial to securely identify you and prevent fraudulent activities.

Data is transmitted to Sofort GmbH based on Art. 6 (1) (a) (Consent) and Art. 6 (1) (b) DSGVO (Processing for contract purposes). You have the option to revoke your consent at any time with future effect. It does not affect the processing of data previously collected.

Below, you'll find the links related to payment through Sofortüberweisung: https://www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/.

Adyen

When using our Software as a Service, payment transactions are handled through Adyen N.V., a company registered with the Dutch Chamber of Commerce under number 34259528, headquartered at Simon Carmiggeltstraat 6-50, 1011 DJ in Amsterdam, the Netherlands.

Adyen operates as a payment technology company under a banking license. Which means that Adyen provides payments and financial services which include handling payments for its customers and platforms via credit card, bank transfer, and other payment methods, issuing cards, supplying (merchant) bank account services, fraud detection services, and various other services to its clientele. The concrete storage period of the processed data cannot be influenced by us but is determined by Adyen, Inc. Further information can be found in the privacy policy for Adyen: https://www.adyen.com/policies-and-disclaimer/privacy-policy

Contact Details

Questions regarding this Privacy Policy or the information practices of HotelFriend’s websites should be directed to HotelFriend Privacy by privacy@hotelfriend.com or by mailing HotelFriend Privacy, Friedrichstrasse 171 10117 Berlin.