We (aletto Service und Marketing GmbH and aletto Kudamm GmbH, Hardenbergstr. 21, 10623 Berlin, Tel: +49 (0)30 233 214 100, e-mail: datenschutz@) aletto.de take the protection of your personal data very seriously. We treat your personal data confidentially, in accordance with this privacy notice and with the data protection regulations. Any personal data collected on this website www.aletto.de will only be used for the purpose for which they were provided (e.g. for booking purposes). We will not transfer such data to any third party without your consent, except upon official order.
Hereinafter, we would like to inform you, as the user of our website, of the handling of your data and provide you with an overview of the measures we take in order to protect personal data. You may revoke your consent at any time with future effect.
2. Collection, use and storage of personal data
Based on our legitimate interests (cf. Article 6, para. 1, lit. f of the GDPR), we shall collect data on the hits on our website. Various data transmitted by your browser when you visit our website will be stored by the provider of the website in so-called logfiles (e.g. browser type and version, operating system, IP address, referrer URL, date and time of access to our website and name of the host of the accessing computer). We are not able to allocate such data to certain persons and we will not mix them with data obtained from other sources. They are only used for statistical analyses.
In addition, we only collect and use personal data the user transfers when he/she uses our website, e.g. when booking a room or sending a enquiry using the contact form. The users’ personal data will be collected, used and stored for the execution of a contract.
The data will be deleted as soon as they are no longer required for the purpose for which they were collected, unless we are required to keep such data until the expiry of the statutory limitation period, as evidence in civil-law claims or based on statutory retention periods.
In addition, we are required to store some data for accounting purposes. The bases therefor are statutory documentation requirements resulting from the Tax Code, the Commercial Code, the Act on the Prevention of Money Laundering and the Banking Act. The retention periods stipulated therein range from 2 to 10 years.
2.1 Collection of other data in the aletto hotel
On site, we will collect additional data from you. This includes registration forms in which we store our guests’ personal data, including without limitation the date of arrival and of the planned departure, forename and surname, date of birth, citizenship, address, in case of tourist parties the number of members and their citizenships as well as the passport number or the number of the provisional passports for foreigners. We will process such data for the fulfilment of the contract (Article 6, para. 1, lit. f of the GDPR), for the performance of a task carried out in the public interest (Article 6, para. 1, lit. e of the GDPR) and based on our legitimate interest (Article 6, para. 1, lit. f of the GDPR).
Based on section 29, paras. 2-4 and section 30, para. 2 of the Federal Registration Act, we are legally obliged to store such data for a certain period of time. Generally, registration forms will be retained for one year after the date of arrival and destroyed within three months after expiry of such period.
Without the consent of the parents or legal guardians, minors must not transfer any personal data to us. On our website, we do not knowingly process any personal data of minors.
Upon reservation / booking, you must state your full name, address, e-mail address and the dates of arrival and of departure. These data are required for the booking process (Article 6, para. 1, lit b of the GDPR). In addition, we might need additional information such as your telephone number, company name, tax number, banking information or credit card data.
In order to make the booking process as comfortable as possible, we offer various payment methods. The first one is payment upon arrival. In this case, your payment data will be recorded at the hotel. You may also select to pay online. In order to enable you to make online payments, we afford you the opportunity to effect payments via a number of payment service providers.
Below, please find the payment service providers with which we cooperate:
PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A, 22-24 Boulevard Royal, L-2449 Luxembourg, Luxembourg
Klarna: Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden
Saferpay: SIX Payment Services (Europe) S.A, 10, rue Gabriel Lippmann, 5365 Munsbach, Luxembourg
Datatrans: Datatrans AG, Kreuzbühlstrasse 26, CH-8008 Zurich, Switzerland
Giropay: GIROPAY GMBH, An der Welle 4, 60322 Frankfurt/Main, Germany
If you make a payment, we will receive a notification that such payment was received. The above payment service providers will not transfer to us any information you gave them in connection with the processing of your payment.
The processing of data by the above-stipulated payment service providers is based on our legitimate interest in accordance with Article 6, para. 1, lit. b and lit. f of the GDPR to provide our guests with simple and secure payment methods offered by a payment service provider of their choice.
You may contact us via telephone, e-mail or via our contact form. If you contact us via our contact form on our website (www.aletto.de/en/contact/, www.aletto.de/en/best-price-form/), we will store your contact data and your message in order to process your enquiry and any questions relating thereto. These data will be transmitted within our company and to “aletto Kudamm GmbH”. The legal basis is Article 6, para. 1, lit. b of the GDPR. The data collected in connection with our contact form will be automatically deleted after completion of your enquiry unless we must keep your enquiry in order to fulfil contractual or legal obligations (cf. “Collection, use and storage of personal data”).
For all data you need in order to apply for a position with our company, please go to our “About us” page. You may file electronic applications. For the processing of your application, we will collect the following data: forename and surname, e-mail address, application documents (e.g. curriculum vitae, references). The purpose of the data collection is the selection of candidates for the initiation of an employment contract. Your personal data will be deleted immediately after completion of the application process and will not be stored for more than 6 months. Your data may be stored longer than that based on your express consent or in case a contract is concluded. The legal basis is Article 6, para. 1, lit. b and Article 88, para. 1 of the GDPR in conjunction with section 26, para. 1, clause 1 of the Federal Data Protection Act.
3. Transfer of personal data to third parties
User data will be treated confidentially and will generally not be transferred to third-party service providers unless this is necessary in order to fulfil a contract or to process enquiries. Third-party service providers are subject to the obligation to treat such data confidentially and securely and they must not use such data except to the extent necessary to fulfil their tasks.
Otherwise, personal data shall not be transferred except in accordance with the user’s express consent (Article 6, para. 1, lit. a of the GDPR) or to the extent required for the prosecution of criminal acts. The data shall not be transferred to public authorities or government institutions that are entitled to request information except to the extent we are subject to a legal obligation or to a judicial order to provide information (Article 6, para. 1, lit. c and lit. f of the GDPR). Your vital interests will be taken into consideration in accordance with data protection regulations. Based on statutory regulations, we may be obliged to disclose your data to third parties. We will comply with such request to the extent required based on legal obligations. You may revoke any consent you give to the transfer of your data at any time and without stating any reasons.
In addition, some of our data processing tasks are fulfilled by third-party service providers. Apart from the service providers already stated in this privacy notice, this includes without limitation IT service providers that maintain our systems and data centres hosting and storing our website and data bases. Such service providers may not use the data we transfer to them other than for the fulfilment of their obligations. We carefully select and employ our third-party service providers. Our service providers apply suitable technical and organisational measures to protect your data and are contractually bound to follow our instructions.
3.1 Cooperation with partner companies:
In order to offer you comprehensive services, we cooperate with various partner companies, including without limitation travel agencies, travel operators and tourist offices. Only personal data we are allowed to have will be processed, in each case based on commissioned data processing agreements or on your express written consent.
Currently, we cooperate with the following service provider (processor):
*ASSD GmbH (internet booking system)
Provider’s website: www.assd.com/en/contact-us/
4. E-mail newsletter
If you would like to subscribe to the aletto newsletter we offer on our website, all we need is your e-mail address. No additional data will be required. We will only transfer the collected data to Newsletter2Go GmbH, Köpenicker Str. 126, 10179 Berlin, Germany in order to send the newsletter. The basis for the processing of your data is your express consent (Article 6, para. 1, lit. a of the GDPR).
You may revoke your consent to the storage of your data, your e-mail address and to the use of such data for the dispatch of the newsletter at any time. Please use the link at the end of each aletto newsletter to unsubscribe.
Below, please find a list of browsers where you can learn more about configurations in relation to cookies:
Internet Explorer: http://windows.microsoft.com/en-US/windows-vista/Block-or-allow-cookies
6. Data processing in social media
We participate in the following social media: Facebook, Twitter, YouTube, Instagram, Google+, Twitter
Please note that we cannot influence the data processing activities in the social networks. We cannot assume any liability for the conduct of the operators of the social networks stipulated above and their members.
If you communicate with us via one of the above-stated networks, we will process the information provided to us by the relevant social network (e.g. your name, profile page and the contents of the messages you sent us) in accordance with the purpose of your message.
We will delete your messages as soon as they are no longer required or the purpose of your message is fulfilled.
7. Social plugins
7.1 Facebook plugin (“like” button)
Our website uses plugins of the social network Facebook.com, operated by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. Facebook plugins are marked by the Facebook logo or the “like” button on our websites.
If you would like to prevent Facebook from allocating your visit to our website to your Facebook user account, please log out from your Facebook account before you use our website.
7.2 Google +1
Our website uses functions and plugins of „Google +1“, which is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Irland (“Google”). Google +1-plugins are marked by the Google logo or the "+1" button on our website.
If you access a page on our website featuring a "+1" button, a direct connection to Google's servers in the USA will be established and the "+1" button is transmitted to your browser and displayed on our website, transmitting the information of which of our websites you visited to Google and we assume that your IP address is transmitted to Google, as well, irrespective of whether you are registered with or logged in to Google Plus or not.
Google does not use the "+1" button in order to track the websites you visit on the internet. Moreover, the display of a "+1" button does not mean that Google will permanently log your browser history and will otherwise analyse your visit on a website containing a "+1" button. However, Google will store some data about your visit for system maintenance and fault repair purposes for a short period of time, usually for 2 weeks. However, such data will not be structured by individual profiles, user names or URLs. We, as the website provider, do not have control of the content or scope of the data Google collects via this button.
If you are a member of Google Plus and logged in to your Google Plus account while using the "+1" button, the data collected on your visit of the website will be linked to your Google Plus account and made known to other users. If your Google Plus profile is a public profile, Google may display your "+1" pages together with your profile name and your photo in Google services, e.g. in search results or in your Google profile or otherwise on websites and advertisements on the internet.
If you want to prevent Google from directly allocating such information to your Google Plus profile, please log out from Google Plus before you visit our website.
8. Google Analytics
Our website uses Google Analytics, a web analysis service operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Irland (“Google”). Google Analytics uses so-called cookies. Cookies are text files which are stored on your computer and enable us to analyse how you use our website. The data on your visits on this website including your IP address generated by such cookie shall be transmitted to and stored on one of Google's servers in the USA. The processing of the data is based on our legitimate interests in accordance with Article 6, para. 1, lit. f of the GDPR.
However, due to the fact that the IP anonymization is activated on this website, Google shall shorten your IP address before transfer within the member states of the European Union or in other countries which are parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to one of Google’s servers in the USA and shortened thereafter. Google will use such transferred information on our behalf in order to analyse your use of the website, to prepare reports on the website activities to us as the website providers and to render other services to the website operator in connection with the use of the website and of the internet. Google will not link your IP address to other Google data.
You can prevent the storage of the cookies by changing the relevant settings of your browser. However, we must point out that in such case you might not be able to fully use all of this website’s functions.
Duration of data storage
The data sent by us and linked to cookies, user IDs (eg user ID) or advertising IDs will be automatically deleted after 14 months. The deletion of data whose retention period has been reached is done automatically once a month.
In addition, you can prevent Google from collecting your personal data in relation to your use of the website as generated by the cookie (incl. your IP address) as well as from processing of such data by downloading and installing the browser plug-in available at the following link: tools.google.com/dlpage/gaoptout.
For more information to Google Analytics, please go to: http://www.google.com/intl/de/policies/privacy/partners/.
9. Google AdWords
10. Google Remarketing
11. Use of Triptease Services
12. Google Fonts
13. Google Maps
We use the services of Google Maps on this website, which enable us to show you interactive maps on the website and to provide you with the convenient use of the map function. The legal basis is article 6, para. 1, lit. f of the GDPR. Our legitimate interest is the optimisation of our website’s functionality.
Due to your visit on the website, Google will receive the information that you accessed the relevant page of our website. In addition, data will be transferred, irrespective of whether you have a user account with Google or not and are logged in or not. If you are logged in to your Google account, the data will be allocated directly to your account. If you wish to prevent the link between the data and your Google profile, you will have to log out from Google before you click on the button. Google stores your data as user profiles and uses them for marketing, market surveys and to tailor its website to your requirements. Such analysis is made – including without limitation and irrespective of whether you are logged in or not – to show you advertising tailored to your needs and in order to inform other users of the social network of your activities on our website. You have the right to object to the establishment of such user profiles. Please contact Google to exercise such right.
For more information on the purpose and scope of the data collection and processing by the plug-in provider, please read the privacy notice of the relevant provider, which also contains additional information on your rights and the settings you can make in order to protect your privacy. www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and is subject to the provisions of the EU-US Privacy Shield: www.privacyshield.gov/EU-US-Framework.
14. Links to third party websites
This website may contain links (interactive referrals) to third-party websites for which we do not assume any liability. We cannot influence the contents and design of such third-party websites to which the user is directed by clicking on the links. The provider of the website is exclusively responsible for content and design and for compliance with data protection regulations.
15. Rights of the user
You are entitled to demand free-of-charge information on your personal data (Article 15 of the GDPR), their origin, recipient and the purpose for which they are processed. In addition, you are entitled to demand that such data be corrected (Article 16 of the GDPR), made inaccessible (Article 18 of the GDPR) or deleted (Article 17 of the GDPR). In addition, you have the right to the portability of such data (Article 20 of the GDPR). Users of this Website may exercise their right to object and object to the processing of their personal data at any time. Should you be of the opinion that your data were unlawfully processed, you may lodge a complaint with the competent supervisory authority (Article 77 of the GDPR). The competent authority is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (Data Protection and Freedom of Information Commissioner, Berlin). Please contact us with any questions relating to personal data (aletto Service und Marketing GmbH and aletto Kudamm GmbH, Hardenbergstr. 21, 10623 Berlin, Tel: +49 (0)30 233 214 100, e-mail: firstname.lastname@example.org) or our data protection officer (cf. 13.)
16. Revocation of consent to the publication of photos
On our website, we only use photos with persons who gave their express consent to the use of their likenesses on our website. These persons may revoke such consent at any time and without stating any reasons by sending an e-mail to email@example.com. After receipt of such revocation, we shall delete the photos with these persons from our website and from our servers.
17. Protection of your data
In order to ensure the protection and security of your personal data, we apply up-to-date technical measures to protect us from risks, e.g. when transferring data to third parties and disclosure to third parties. These measures are kept up to date with the state of the technology. In order to protect your personal data on our website, we use Secure Sockets Layer (SSL) to encrypt the information you provide.
18. Questions to date protection and data protection officer
Users may contact us at any time if their personal data are to be corrected, made inaccessible or deleted. In addition, we will inform the user of the personal data we stored in relation to him/her, their origin, recipients and the purpose for which they are stored.
For any questions related to data protection, please contact our data protection officer:
Data protection officer
Tel: 0049 (0)257 293 65-77
Revised: 25 October 2018