Welcome to our website!
BlackF House GmbH in Freiburg has placed a very high value on compliance with data protection regulations not only since the introduction of the GDPR. This was also the case before that. Nevertheless, we would like to explain everything about data protection on this website to you here, because we want you to feel safe when you visit us online.
In principle, it is possible to visit our website without providing any personal data. However, if you want to use special services that we provide on our website, processing of personal data could become necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we will obtain your consent before processing.
The processing of your personal data, for example your name, address, e-mail address or telephone number, is always carried out in compliance with the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG), as well as in accordance with the country-specific data protection regulations applicable to us. In this data protection declaration, we inform you about the type, scope and purpose of the personal data processed by us during your visit to our website.
This is accompanied by your rights as a data subject of the data protection processing, which we would also like to inform you about.
As the responsible party, we have implemented numerous technical and organisational measures in advance to ensure the most complete protection possible for the personal data processed via this website. Nevertheless, Internet-based data transmissions (e.g., e-mail) can always have security vulnerabilities, so that absolute protection cannot always be guaranteed. This is not the case if the transmissions take place outside our sphere of influence. For this reason, you are free at any time to transmit personal data to us by alternative means, for example by telephone, post or in person.
Our data protection declaration includes terms used by the European Directive and Regulation Maker in the adoption of the General Data Protection Regulation (GDPR).
Our privacy policy should be comprehensible and understandable for you as a visitor to this website. To ensure this, we list below the definitions we use in accordance with the wording from Art. 4 GDPR:
a) personal data
Personal data means any information relating to an identified or identifiable natural person (hereinafter "data subject" or direct address such as "you"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
b) Data subject
Data subject means any identified or identifiable natural person whose personal data are processed by the controller.
c) Processing
Processing is any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
d) Restriction of processing
Restriction of processing is the marking of stored personal data with the aim of limiting their future processing.
e) Pseudonymisation
Pseudonymisation is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures which ensure that the personal data are not attributed to an identified or identifiable natural person.
f) Responsible body
The controller or the controller is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for under Union or Member State law.
g) Processor
Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
h) Recipient
A recipient is a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not a third party. However, public authorities that may receive personal data in the context of a specific investigation mandate under Union or Member State law shall not be considered as recipients.
i) Third party
Third party means a natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and the persons authorised to process the personal data under the direct responsibility of the controller or the processor.
j) Consent
Consent is any freely given indication of the data subject's wishes for the specific case in an informed and unambiguous manner, in the form of a declaration or any other unambiguous affirmative act on a voluntary basis, by which the data subject indicates that he or she consents to the processing of personal data relating to him or her.
The responsible body within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is:
BlackF House GmbH
Waldkircher Str. 30
79106 Freiburg
Tel.: 0761-61167740
E-mail: info@blackf.house
We use cookies on our website. These are small text files that are stored on your computer system via an internet browser (e.g. Firefox, Chrome, Safari, Edge, Internet Explorer, Opera).
As a rule, these contain a cookie ID. This is a unique identifier of the cookie and consists of a string of characters by means of which websites and servers can be assigned to the internet browser you are using in which the cookie was stored. This enables the visited website and servers to distinguish the individual browser of the person concerned from other internet browsers that contain other cookies. A specific internet browser can be recognised and identified via the unique cookie ID.
Through the use of cookies, we can provide the users of this website with more user-friendly services that would not be possible without the cookie setting.
You can prevent the setting of cookies by our website at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time using an internet browser or other software programmes. This is possible in all common Internet browsers. If you deactivate the setting of cookies in the Internet browser used, it may not be possible to use all the functions of our website to their full extent.
When you access our website, our system collects a series of general data and information. This general data and information is stored in the server's log files. The following can be recorded:
When using this general data and information, we do not draw any conclusions about you as a data subject. This information is rather required in order to to deliver the contents of our website correctly
This anonymously collected data and information is therefore evaluated by us on the one hand statistically and on the other hand with the aim of increasing data protection and information security in our enterprise, in order to ultimately ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from any personal data of the data subjects.
On our website you will find a contact form that enables you to contact our company quickly and electronically and to communicate directly with us. For this purpose, we use a general e-mail address to which several internally assigned persons have access.
If a data subject contacts us by e-mail or via a contact form, the personal data transmitted by the data subject will be stored automatically. Such personal data transmitted on a voluntary basis by a data subject to the controller will be stored for the purpose of processing or contacting the data subject. This personal data will not be disclosed to third parties.
Via our website you have the possibility to book our flats directly. For this purpose we have integrated the online booking tool Dirs21 of the company Tour Online AG on our website.
Your personal data is entered into an input mask and transmitted to the online booking tool and stored. You can find the privacy policy of the online booking tool here: https://www.dirs21.de/datenschutz/
When you make a reservation via our website, we collect the following data:
The processing of this data takes place,
Separate consent to the processing of your personal data is not required, as the data processing is carried out within the framework of your reservation and thus in accordance with Art. 6 (1) lit. b) GDPR for the fulfilment of obligations from the accommodation contract on which your reservation is based or for the legitimate interest of our company in accordance with Art. 6 (1) lit. f) GDPR.
The personal data collected by us for the processing of your reservation will be stored until the expiry of the statutory storage obligation and then deleted, unless we are obliged to store the data for a longer period of time in accordance with Article 6 (1) c) of the German Data Protection Act (GDPR) due to tax and commercial storage and documentation obligations (from the German Commercial Code (HGB), the German Criminal Code (StGB) or the German Tax Code (AO)) or you have consented to or requested further storage in accordance with Article 6 (1) a) of the GDPR.
We use SSL encryption on our website to protect your transmitted data (e.g. via the contact form) from unauthorised third-party access in the best possible way during transport. Such a secure connection can be recognised by the prefix "https://" in the URL of your address line, e.g.:
https://www.blackf.house
For unencrypted, the prefix looks like this: http://
We only store your personal data for as long as it is necessary for the purpose of storage or insofar as this has been permitted by the European Directive and Regulation Maker or a country-specific legislator in laws or regulations to which we are subject.
If the purpose of storage no longer applies or if a storage period prescribed above expires, your personal data will be blocked or deleted in accordance with the statutory provisions.
You have the right to receive free information from us at any time about whether we are storing personal data about you.
Should this be the case, you have the right to the following information:
The purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organisations, if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration, if this is not possible, the criteria for determining this duration the existence of a right to rectification or erasure of the personal data concerning them or to restriction of processing by us or a right to object to such processing the existence of a right of appeal to a supervisory authority if the personal data are not collected from the data subject: Any available information about the origin of the data the
existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, in such cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
If you wish to exercise your right to information, you can contact one of our employees at any time.
You have the right to request the rectification without delay of inaccurate personal data concerning you. You also have the right, taking into account the purposes of the processing, to request that incomplete personal data be completed, including by means of a supplementary declaration.
If you wish to exercise your right to rectification, you can contact one of our employees at any time.
You have the right to request that we delete personal data relating to you without delay, provided that one of the following reasons applies and insofar as the processing is not required by other statutory provisions:
If you wish to assert your right to deletion, you can contact one of our employees at any time.
You have the right to request us to restrict processing if one of the following conditions is met:
If you wish to exercise your right to restrict processing, you can contact one of our employees at any time.
You have the right to receive personal data relating to you that you have provided to us in a structured, commonly used and machine-readable format.
You also have the right to have this data transferred to another controller without hindrance from us, provided that the processing is based on consent pursuant to Art. 6 (1) lit. a) GDPR or Art. 9 (2) lit. a) GDPR or on a contract pursuant to Art. 6 (1) lit. b) GDPR and the processing is carried out with the aid of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Furthermore, you have the right to data portability in accordance with Art. 20 (1) GDPR and may request that your personal data be transferred directly from us to another controller without hindrance or disadvantage, insofar as this is technically feasible and insofar as the rights and freedoms of other persons are not affected thereby.
If you wish to exercise your right to data transfer, you can contact one of our employees at any time.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 (1) lit. e) or f) GDPR. This also applies to profiling based on these provisions.
We will no longer process your personal data in the event of objection, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If we process personal data for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing. This also applies to profiling, insofar as it is connected with such direct advertising. If you object to us processing your personal data for direct marketing purposes, we will no longer process your personal data for these purposes.
Furthermore, you have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out by us for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.
To exercise your right to object, you may contact one of our employees directly. You are also free to exercise your right to object in connection with the use of information society services, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications.
You have the right to withdraw your consent to the processing of your personal data at any time.
If you wish to exercise your right to withdraw your consent, you can contact one of our employees at any time.
You have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes this Regulation.
On our website we have integrated the Google Tag Manager component (with anonymisation function). It controls so-called tags from third-party providers on our site and triggers them at the request of the third-party provider. However, only anonymised data (e.g. shortened IP addresses) is transmitted to the third-party providers, so that no conclusions can be drawn about you and your personal data (e.g. your surfing behaviour).
On our website, we integrate the fonts ("Google Fonts") of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This is done within the framework of the legitimate interest of our company pursuant to Art. 6 (1) lit. f) GDPR, in order to be able to guarantee better findability, faster loading times and a uniform presentation of our website across all devices on the basis of optimised search engine entries.
We use the fonts in offline mode. This means that they are installed on the web server on which our website is hosted and therefore no personal data is transferred from you to Google.
The privacy policy for Google Fonts can be found at the following link: https://www.google.com/policies/privacy/,
You can find the opt-out option here: https://adssettings.google.com/authenticated.
By subscribing to our newsletter, you agree to receive it and to the following procedures for sending the newsletter.
We only send e-mails with advertising content (hereinafter referred to as "newsletter") with the consent of the recipient, which he or she has given by recorded consent, or with legal permission. If the contents of the newsletter are specifically described in the course of registration, they are decisive for the user's consent. Apart from that, our newsletters contain information about our services and us.
Registration for our newsletter takes place in a double opt-in process. This means that after registration you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can register with other people's email addresses. The registrations for the newsletter are logged in order to be able to prove the registration process in accordance with the legal requirements. This includes the storage of the registration and confirmation time as well as the IP address. Changes to your data stored with the dispatch service provider are also logged.
Registration data: To register for the newsletter, it is sufficient to enter your e-mail address. Optionally, we ask you to provide a name for the purpose of a personal address in the newsletter.
The newsletter is sent and its success measured on the basis of the recipient's consent pursuant to Art. 6 (1) lit. a), Art. 7 GDPR in conjunction with. § 7 (2) No. 3 UWG or on the basis of the legal permission pursuant to § 7 (3) UWG.
The logging of the registration process is based on our legitimate interests pursuant to Art. 6 (1) lit. f) GDPR. We are interested in using a user-friendly and secure newsletter system that serves our business interests, meets the expectations of users and allows us to prove consent.
You can revoke your consent to receive our newsletter at any time in writing, by telephone or by e-mail. You will find the link to unsubscribe at the end of each newsletter. We may store unsubscribed email addresses for up to three years based on our legitimate interests before deleting them in order to be able to prove consent previously given. The processing of this data is limited to the purpose of a possible defence against claims. An individual deletion request is possible at any time, provided that the former existence of consent is confirmed at the same time.
The following legal bases that allow us to process personal data may come into consideration, unless we have explicitly mentioned them in the preceding paragraphs:
The criterion for the duration of storage of personal data is the respective statutory retention period. Two common regulations are listed below as examples:
After expiry of the deadline, the corresponding data is routinely deleted if it is no longer required for the fulfilment or initiation of the contract.
If no retention periods or other legal regulations govern the retention of your personal data, it will be deleted or blocked as soon as the purpose of the processing has been fulfilled.
We also inform you that the provision of personal data may in some cases be required by law (e.g. by tax regulations) or may also result from contractual provisions (e.g. information on the contractual partner).
Sometimes, in order to conclude a contract, it may be necessary for you as the data subject to provide us with data as the data controller, which must subsequently be processed by us. For example, you are obliged to provide us with personal data if our company concludes a contract with you. Failure to provide the personal data would mean that the contract with you could not be concluded.
Before you provide personal data, you must contact one of our employees. Our employee will explain to you on a case-by-case basis whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and what the consequences of not providing the personal data would be.
Concept, design, marketing & programming by myhotelshop in cooperation with medirata | Copyright © 2023