CINXE.COM

<!DOCTYPE html><html dir="ltr" lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><link rel="preload" href="https://app.usercentrics.eu/browser-ui/latest/loader.js" as="script"/><link rel="alternate" hrefLang="en" href="https://hrewards.com/en/legal/data-protection"/><link rel="alternate" hrefLang="ja" href="https://hrewards.com/ja/legal/data-protection"/><link rel="alternate" hrefLang="ko" href="https://hrewards.com/ko/legal/data-protection"/><link rel="alternate" hrefLang="cs" href="https://hrewards.com/cs/legal/data-protection"/><link rel="alternate" hrefLang="de" href="https://hrewards.com/de/legal/datenschutz"/><link rel="alternate" hrefLang="fr" href="https://hrewards.com/fr/legal/protection-des-donnees"/><link rel="alternate" hrefLang="es" href="https://hrewards.com/es/legal/proteccion-de-datos"/><link rel="alternate" hrefLang="it" href="https://hrewards.com/it/legal/privacy"/><link rel="alternate" hrefLang="da" href="https://hrewards.com/da/legal/privacy"/><link rel="alternate" hrefLang="sv" href="https://hrewards.com/sv/legal/integritet"/><link rel="alternate" hrefLang="zh" href="https://hrewards.com/zh/legal/privacy"/><link rel="alternate" hrefLang="hu" href="https://hrewards.com/hu/legal/privacy"/><link rel="alternate" hrefLang="pt" href="https://hrewards.com/pt/legal/privacidade"/><link rel="alternate" hrefLang="nl" href="https://hrewards.com/nl/legal/privacy"/><link rel="alternate" hrefLang="uk" href="https://hrewards.com/uk/legal/data-protection"/><link rel="alternate" hrefLang="ru" href="https://hrewards.com/ru/legal/data-protection"/><link rel="preload" href="/_next/static/media/hrewards.96db3594.svg" as="image" fetchpriority="high"/><link rel="preload" href="/_next/static/media/hrewards-white.15739481.svg" as="image" fetchpriority="high"/><title>H Rewards | Privacy</title><meta name="description" content="Information on data protection at a glance | H Rewards"/><link rel="canonical" href="https://hrewards.com/en/legal/data-protection"/><meta name="robots" content="noindex"/><script type="application/ld+json">{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"item":{"@id":"https://hrewards.com/en/legal","name":"Legal Documents"}},{"@type":"ListItem","position":2,"item":{"@id":"https://hrewards.com/en/legal/data-protection","name":"Privacy"}}]}</script><meta name="next-head-count" content="26"/><meta name="format-detection" content="telephone=no"/><script>if(!Element.prototype.matches || !('IntersectionObserverEntry' in window) || !Element.prototype.closest || !Object.fromEntries) {document.write("<script src='/scripts/polyfills.js'"+"><"+"/script>")}</script><script>if(!('ResizeObserver' in window)) {document.write("<script src='/scripts/resize-observer.min.js'"+"><"+"/script>")}</script><link rel="dns-prefetch" href="https://assets.hrewards.com"/><link rel="preconnect" href="https://assets.hrewards.com"/><link rel="shortcut icon" media="(prefers-color-scheme: light)" type="image/png" href="/images/favicon.png"/><link rel="shortcut icon" media="(prefers-color-scheme: dark)" type="image/png" href="/images/favicon-dark.png"/><link rel="preload" href="/_next/static/css/48d20cfd0d721c2c.css" as="style"/><link rel="stylesheet" href="/_next/static/css/48d20cfd0d721c2c.css" data-n-g=""/><link rel="preload" href="/_next/static/css/a2894191b9311932.css" as="style"/><link rel="stylesheet" href="/_next/static/css/a2894191b9311932.css" data-n-p=""/><link rel="preload" href="/_next/static/css/21fa3eb3832f14ed.css" as="style"/><link rel="stylesheet" href="/_next/static/css/21fa3eb3832f14ed.css"/><noscript data-n-css=""></noscript><script defer="" nomodule="" src="/_next/static/chunks/polyfills-78c92fac7aa8fdd8.js"></script><script defer="" src="/_next/static/chunks/5183.8e7c29e46e5122a9.js"></script><script defer="" src="/_next/static/chunks/9207.042aaa6ae96d9ca6.js"></script><script defer="" src="/_next/static/chunks/6707.12e10e63206a0ce8.js"></script><script defer="" src="/_next/static/chunks/4042.260659f2b288eee7.js"></script><script src="/_next/static/chunks/webpack-2622a9f15136f84e.js" defer=""></script><script src="/_next/static/chunks/framework-4392053ca19f7a6b.js" defer=""></script><script src="/_next/static/chunks/main-52f9cde0bcf834d5.js" defer=""></script><script src="/_next/static/chunks/pages/_app-674a8c6f0acc99b6.js" defer=""></script><script src="/_next/static/chunks/78e521c3-2bfd2ea069cfc9b9.js" defer=""></script><script src="/_next/static/chunks/5675-9e54a393ca7aa076.js" defer=""></script><script src="/_next/static/chunks/6245-64fef339c7dcff54.js" defer=""></script><script src="/_next/static/chunks/1966-8546b3466f8ff35d.js" defer=""></script><script src="/_next/static/chunks/1441-69d6b7a3fa29361e.js" defer=""></script><script src="/_next/static/chunks/7851-79878bf77306500f.js" defer=""></script><script src="/_next/static/chunks/8547-ca6ca943ba549d3a.js" defer=""></script><script src="/_next/static/chunks/3018-162a5fbf567de0f0.js" defer=""></script><script src="/_next/static/chunks/7971-78aa60b01aecc146.js" defer=""></script><script src="/_next/static/chunks/8484-91af496e396e7b03.js" defer=""></script><script src="/_next/static/chunks/8050-5ad930373d86feed.js" defer=""></script><script src="/_next/static/chunks/9003-f62b4c5e3f62c40b.js" defer=""></script><script src="/_next/static/chunks/7520-69b7f6d4dc86eccd.js" defer=""></script><script src="/_next/static/chunks/pages/%5B%5B...slug%5D%5D-35f1fb4a3f78f580.js" defer=""></script><script src="/_next/static/X8D8n9x-Q1zlvtpIR0rgk/_buildManifest.js" defer=""></script><script src="/_next/static/X8D8n9x-Q1zlvtpIR0rgk/_ssgManifest.js" defer=""></script><style id="__jsx-759776656">:root{--avenir-font:'__avenirFont_961114', '__avenirFont_Fallback_961114';--beatrice-font:'__beatriceFont_52defb', '__beatriceFont_Fallback_52defb';--dubai-font:'__dubaiFont_ad8b43', '__dubaiFont_Fallback_ad8b43';--gazpacho-font:'__gazpachoFont_832b39', '__gazpachoFont_Fallback_832b39';--gtsuper-font:'__gtsuperFont_8cd832', '__gtsuperFont_Fallback_8cd832';--markpro-font:'__markproFont_59b648', '__markproFont_Fallback_59b648';--opensans-font:'__Open_Sans_7fc08e', '__Open_Sans_Fallback_7fc08e';--oswald-font:'__oswaldFont_b53ec3', '__oswaldFont_Fallback_b53ec3';--larken-font:'__larkenFont_e7c6f8', '__larkenFont_Fallback_e7c6f8';--tradegothic-font:'__tradeGothicFont_6d7bbe', '__tradeGothicFont_Fallback_6d7bbe';--tradegothiccondensed-font:'__tradeGothicCondensedFont_b650cc', '__tradeGothicCondensedFont_Fallback_b650cc';--lato-font:'__latoFont_f2d549', '__latoFont_Fallback_f2d549';--voga-font:'__vogaFont_09c279', '__vogaFont_Fallback_09c279';--brushup-font:'__brushUpFont_d4530b', '__brushUpFont_Fallback_d4530b'}</style></head><body><div id="__next"><div class="flex min-h-screen flex-col"><header class="relative z-20 flex items-center justify-between bg-white px-2 py-1 dark:bg-dm-panel-bg md:px-5 md:py-4 hidden md:flex"><div class="block flex-1 md:hidden xl:block"></div><a target="_self" rel="" class="cursor-pointer underline hover:text-global-gray-400 dark:hover:text-white hover:no-underline text-plum focus:text-plum-600 dark:text-white flex" data-href="/" data-router-locale="en" data-testid="header-logo" href="/en"><div class="brand-logo ie11--header-logo flex w-32 justify-center dark:hidden sm:w-32 md:w-32 xl:w-48 xl:px-4"><span style="box-sizing:border-box;display:inline-block;overflow:hidden;width:initial;height:initial;background:none;opacity:1;border:0px none;margin:0px;padding:0px;position:relative;max-width:100%"><span style="box-sizing:border-box;display:block;width:initial;height:initial;background:none;opacity:1;border:0px none;margin:0px;padding:0px;max-width:100%"><img style="display:block;max-width:100%;width:initial;height:initial;background:none;opacity:1;border:0px none;margin:0px;padding:0px" alt="" aria-hidden="true" src="data:image/svg+xml,%3csvg%20xmlns=%27http://www.w3.org/2000/svg%27%20version=%271.1%27%20width=%27205%27%20height=%2750%27/%3e"/></span><img alt="Logo" fetchpriority="high" decoding="async" data-nimg="fill" style="position:absolute;height:100%;width:100%;left:0;top:0;right:0;bottom:0;color:transparent;max-width:100%" src="/_next/static/media/hrewards.96db3594.svg"/></span></div><div class="brand-logo ie11--header-logo hidden w-32 justify-center dark:flex sm:w-32 md:w-32 xl:w-48 xl:px-4"><span style="box-sizing:border-box;display:inline-block;overflow:hidden;width:initial;height:initial;background:none;opacity:1;border:0px none;margin:0px;padding:0px;position:relative;max-width:100%"><span style="box-sizing:border-box;display:block;width:initial;height:initial;background:none;opacity:1;border:0px none;margin:0px;padding:0px;max-width:100%"><img style="display:block;max-width:100%;width:initial;height:initial;background:none;opacity:1;border:0px none;margin:0px;padding:0px" alt="" aria-hidden="true" src="data:image/svg+xml,%3csvg%20xmlns=%27http://www.w3.org/2000/svg%27%20version=%271.1%27%20width=%27205%27%20height=%2750%27/%3e"/></span><img alt="Logo" fetchpriority="high" decoding="async" data-nimg="fill" style="position:absolute;height:100%;width:100%;left:0;top:0;right:0;bottom:0;color:transparent;max-width:100%" src="/_next/static/media/hrewards-white.15739481.svg"/></span></div></a><div class="flex flex-1 justify-end"><div class="hidden flex-1 items-center justify-end md:flex MetaNavigation_childrenSpacing__LLcHV"><a target="_self" rel="" class="cursor-pointer focus:outline-none text-plum focus:text-plum-600" data-href="/corporate" data-router-locale="en" data-testid="meta-navigation-link__Corporate" href="/en/corporate"><span class="flex cursor-pointer items-center whitespace-nowrap py-2 text-sm font-medium transition duration-300 dark:text-white hover:text-plum-600 dark:hover:text-white dark:hover:text-opacity-80">Corporate</span></a><div class="relative" data-headlessui-state=""><button class="block focus:outline-none text-plum hover:text-plum-600 focus:text-plum-600" data-testid="language-selector" id="headlessui-menu-button-:R1j8qe5j6:" type="button" aria-haspopup="menu" aria-expanded="false" data-headlessui-state=""><span class="flex cursor-pointer items-center whitespace-nowrap py-2 text-sm font-medium transition duration-300 dark:text-white hover:text-plum-600 dark:hover:text-white dark:hover:text-opacity-80">English (EN)<span class="text-xs ltr:ml-2 rtl:mr-2"><svg stroke="currentColor" fill="currentColor" stroke-width="0" viewBox="0 0 12 16" height="1em" width="1em" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" d="M0 5l6 6 6-6H0z"></path></svg></span></span></button></div><div class="relative"><button class="block focus:outline-none text-plum focus:text-plum-600" data-testid="currency-selector" id="headlessui-listbox-button-:R6r8qe5j6:" type="button" aria-haspopup="listbox" aria-expanded="false" data-headlessui-state=""><span class="flex cursor-pointer items-center whitespace-nowrap py-2 text-sm font-medium transition duration-300 dark:text-white hover:text-plum-600 dark:hover:text-white dark:hover:text-opacity-80 w-12">EUR<span class="text-xs ltr:ml-2 rtl:mr-2"><svg stroke="currentColor" fill="currentColor" stroke-width="0" viewBox="0 0 12 16" height="1em" width="1em" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" d="M0 5l6 6 6-6H0z"></path></svg></span></span></button></div></div><div class="ltr:ml-6 ltr:mr-3 rtl:ml-3 rtl:mr-6 ltr:md:mr-0 rtl:md:ml-0" style="font-size:0"><button class="relative inline-flex items-center justify-center text-center px-5 transition duration-300 leading-tight h-11 text-base text-transparent focus:outline-none pointer-events-none cursor-default border-transparent bg-global-not-active base hidden md:inline-flex rounded-md font-hrewards font-bold border" data-testid="member-button"><span class="text-xl ltr:mr-2 ltr:last:mr-0 rtl:ml-2 rtl:last:ml-0"><svg stroke="currentColor" fill="currentColor" stroke-width="0" viewBox="0 0 24 24" height="1em" width="1em" xmlns="http://www.w3.org/2000/svg"><g><path fill="none" d="M0 0h24v24H0z"></path><path d="M4 22a8 8 0 1 1 16 0h-2a6 6 0 1 0-12 0H4zm8-9c-3.315 0-6-2.685-6-6s2.685-6 6-6 6 2.685 6 6-2.685 6-6 6zm0-2c2.21 0 4-1.79 4-4s-1.79-4-4-4-4 1.79-4 4 1.79 4 4 4z"></path></g></svg></span><span class="absolute inset-0 flex items-center justify-center border-violet"><span class="h-5 w-5 animate-spin rounded-full border-2 border-t-2 border-global-gray-200" style="border-top-color:inherit"></span></span><span>Login</span></button><button type="button" aria-label="Login" class="rounded p-1 outline-none transition duration-300 focus:outline-none text-2xl bg-stone-100 text-black hover:bg-stone-100 focus:bg-stone-100 md:hidden"><svg stroke="currentColor" fill="currentColor" stroke-width="0" viewBox="0 0 24 24" height="1em" width="1em" xmlns="http://www.w3.org/2000/svg"><g><path fill="none" d="M0 0h24v24H0z"></path><path d="M4 22a8 8 0 1 1 16 0h-2a6 6 0 1 0-12 0H4zm8-9c-3.315 0-6-2.685-6-6s2.685-6 6-6 6 2.685 6 6-2.685 6-6 6zm0-2c2.21 0 4-1.79 4-4s-1.79-4-4-4-4 1.79-4 4 1.79 4 4 4z"></path></g></svg></button></div></div></header><div class="sticky top-0 z-10 shadow-lg"><div class="z-10 flex h-16 w-full items-center justify-between px-5 dark:border-t dark:border-dm-border md:px-8 lg:justify-start xl:px-10 text-white bg-plum dark:bg-dm-panel-bg font-hrewards" data-headlessui-state=""><div class="flex pr-10 lg:flex-1"><a target="_self" rel="" class="cursor-pointer underline hover:text-global-gray-400 dark:hover:text-white hover:no-underline text-plum focus:text-plum-600 dark:text-white inline-flex" data-href="/" data-router-locale="en" href="/en"><div class="brand-logo flex w-32 xl:w-32"><span style="box-sizing:border-box;display:inline-block;overflow:hidden;width:initial;height:initial;background:none;opacity:1;border:0px none;margin:0px;padding:0px;position:relative;max-width:100%"><span style="box-sizing:border-box;display:block;width:initial;height:initial;background:none;opacity:1;border:0px none;margin:0px;padding:0px;max-width:100%"><img style="display:block;max-width:100%;width:initial;height:initial;background:none;opacity:1;border:0px none;margin:0px;padding:0px" alt="" aria-hidden="true" src="data:image/svg+xml,%3csvg%20xmlns=%27http://www.w3.org/2000/svg%27%20version=%271.1%27%20width=%27205%27%20height=%2750%27/%3e"/></span><img alt="Logo" fetchpriority="high" decoding="async" data-nimg="fill" style="position:absolute;height:100%;width:100%;left:0;top:0;right:0;bottom:0;color:transparent;max-width:100%" src="/_next/static/media/hrewards-white.15739481.svg"/></span></div></a></div><button aria-label="toggle menu" class="relative z-10 ml-auto flex items-center bg-transparent p-2 focus:outline-none lg:hidden rtl:order-first rtl:rotate-180 rtl:transform" id="headlessui-menu-button-:R9ae5j6:" type="button" aria-haspopup="menu" aria-expanded="false" data-headlessui-state=""><svg stroke="currentColor" fill="currentColor" stroke-width="0" viewBox="0 0 24 24" class="text-xl" height="1em" width="1em" xmlns="http://www.w3.org/2000/svg"><g><path fill="none" d="M0 0h24v24H0z"></path><path d="M3 4h18v2H3V4zm0 7h12v2H3v-2zm0 7h18v2H3v-2z"></path></g></svg></button><div class="hidden lg:flex"><nav class="flex w-full flex-col px-5 py-8 md:px-8 lg:flex-row lg:items-center lg:p-0"><div class="mb-1 last:mb-0 last:mr-0 lg:mb-0 lg:mr-7"><button class="group flex w-full items-center bg-transparent focus:outline-none" data-testid="main-navigation-button__[object Object]" id="headlessui-menu-button-:R29hae5j6:" type="button" aria-haspopup="menu" aria-expanded="false" data-headlessui-state=""><div class="group relative cursor-pointer select-none py-2 rtl:text-lg text-sm uppercase font-medium">Hotels<div class="absolute bottom-0 left-0 right-0 w-0 py-px transition-all duration-300 lg:mx-auto lg:group-hover:visible lg:group-hover:w-3/4 lg:group-focus:visible lg:group-focus:w-3/4 invisible bg-white"></div></div><svg stroke="currentColor" fill="currentColor" stroke-width="0" viewBox="0 0 24 24" class="rotate-0 transform text-xl lg:hidden ltr:ml-auto rtl:mr-auto" height="1em" width="1em" xmlns="http://www.w3.org/2000/svg"><g><path fill="none" d="M0 0h24v24H0z"></path><path d="M12 13.172l4.95-4.95 1.414 1.414L12 16 5.636 9.636 7.05 8.222z"></path></g></svg></button></div><div class="mb-1 last:mb-0 last:mr-0 lg:mb-0 lg:mr-7"><a target="_self" rel="" class="cursor-pointer group flex" data-href="/hotel-deals" data-router-locale="en" data-testid="main-navigation-link__Offers" href="/en/hotel-deals"><div class="group relative cursor-pointer select-none py-2 rtl:text-lg text-sm uppercase font-medium">Offers<div class="absolute bottom-0 left-0 right-0 w-0 py-px transition-all duration-300 lg:mx-auto lg:group-hover:visible lg:group-hover:w-3/4 lg:group-focus:visible lg:group-focus:w-3/4 invisible bg-white"></div></div></a></div><div class="mb-1 last:mb-0 last:mr-0 lg:mb-0 lg:mr-7"><a target="_self" rel="" class="cursor-pointer group flex" data-href="/destinations" data-router-locale="en" data-testid="main-navigation-link__Destinations" href="/en/destinations"><div class="group relative cursor-pointer select-none py-2 rtl:text-lg text-sm uppercase font-medium">Destinations<div class="absolute bottom-0 left-0 right-0 w-0 py-px transition-all duration-300 lg:mx-auto lg:group-hover:visible lg:group-hover:w-3/4 lg:group-focus:visible lg:group-focus:w-3/4 invisible bg-white"></div></div></a></div><div class="mb-1 last:mb-0 last:mr-0 lg:mb-0 lg:mr-7"><a target="_self" rel="" class="cursor-pointer group flex" data-href="/meeting-event" data-router-locale="en" data-testid="main-navigation-link__Meeting & Event" href="/en/meeting-event"><div class="group relative cursor-pointer select-none py-2 rtl:text-lg text-sm uppercase font-medium">Meeting & Event<div class="absolute bottom-0 left-0 right-0 w-0 py-px transition-all duration-300 lg:mx-auto lg:group-hover:visible lg:group-hover:w-3/4 lg:group-focus:visible lg:group-focus:w-3/4 invisible bg-white"></div></div></a></div><div class="mb-1 last:mb-0 last:mr-0 lg:mb-0 lg:mr-7"><a target="_self" rel="" class="cursor-pointer group flex" data-href="/loyalty" data-router-locale="en" data-testid="main-navigation-link__Loyalty Program" href="/en/loyalty"><div class="group relative cursor-pointer select-none py-2 rtl:text-lg text-sm uppercase font-medium">Loyalty Program<div class="absolute bottom-0 left-0 right-0 w-0 py-px transition-all duration-300 lg:mx-auto lg:group-hover:visible lg:group-hover:w-3/4 lg:group-focus:visible lg:group-focus:w-3/4 invisible bg-white"></div></div></a></div><div class="mb-1 last:mb-0 last:mr-0 lg:mb-0 lg:mr-7"><a target="_blank" rel="" class="cursor-pointer group flex" data-href="https://shop.hrewards.com/en" data-router-locale="en" data-testid="main-navigation-link__Voucher Shop" href="https://shop.hrewards.com/en"><div class="group relative cursor-pointer select-none py-2 rtl:text-lg text-sm uppercase font-medium">Voucher Shop<div class="absolute bottom-0 left-0 right-0 w-0 py-px transition-all duration-300 lg:mx-auto lg:group-hover:visible lg:group-hover:w-3/4 lg:group-focus:visible lg:group-focus:w-3/4 invisible bg-white"></div></div></a></div><div class="my-4 w-full opacity-25 lg:hidden bg-white" style="height:1px"></div><div class="mb-1 last:mb-0 last:mr-0 lg:mb-0 lg:mr-7 lg:hidden"><button class="group flex w-full items-center bg-transparent focus:outline-none" data-testid="main-navigation-button__English, (,EN,)" id="headlessui-menu-button-:R1bhae5j6:" type="button" aria-haspopup="menu" aria-expanded="false" data-headlessui-state=""><div class="group relative cursor-pointer select-none py-2 rtl:text-lg text-sm uppercase font-medium">English (EN)<div class="absolute bottom-0 left-0 right-0 w-0 py-px transition-all duration-300 lg:mx-auto lg:group-hover:visible lg:group-hover:w-3/4 lg:group-focus:visible lg:group-focus:w-3/4 invisible bg-white"></div></div><svg stroke="currentColor" fill="currentColor" stroke-width="0" viewBox="0 0 24 24" class="rotate-0 transform text-xl lg:hidden ltr:ml-auto rtl:mr-auto" height="1em" width="1em" xmlns="http://www.w3.org/2000/svg"><g><path fill="none" d="M0 0h24v24H0z"></path><path d="M12 13.172l4.95-4.95 1.414 1.414L12 16 5.636 9.636 7.05 8.222z"></path></g></svg></button></div><div class="my-4 w-full opacity-25 lg:hidden bg-white" style="height:1px"></div><div class="mb-1 last:mb-0 last:mr-0 lg:mb-0 lg:mr-7 lg:hidden"><a target="_self" rel="" class="cursor-pointer group flex" data-href="/" data-router-locale="en" data-testid="main-navigation-link__Loading" href="/en"><div class="group relative cursor-pointer select-none py-2 rtl:text-lg text-sm uppercase font-medium">Loading<div class="absolute bottom-0 left-0 right-0 w-0 py-px transition-all duration-300 lg:mx-auto lg:group-hover:visible lg:group-hover:w-3/4 lg:group-focus:visible lg:group-focus:w-3/4 invisible bg-white"></div></div></a></div><div class="my-4 w-full opacity-25 lg:hidden bg-white" style="height:1px"></div><div class="mb-1 last:mb-0 last:mr-0 lg:mb-0 lg:mr-7 lg:hidden"><button class="group flex w-full items-center bg-transparent focus:outline-none" data-testid="main-navigation-button__EUR" id="headlessui-menu-button-:Rehae5j6:" type="button" aria-haspopup="menu" aria-expanded="false" data-headlessui-state=""><div class="group relative cursor-pointer select-none py-2 rtl:text-lg text-sm uppercase font-medium">EUR<div class="absolute bottom-0 left-0 right-0 w-0 py-px transition-all duration-300 lg:mx-auto lg:group-hover:visible lg:group-hover:w-3/4 lg:group-focus:visible lg:group-focus:w-3/4 invisible bg-white"></div></div><svg stroke="currentColor" fill="currentColor" stroke-width="0" viewBox="0 0 24 24" class="rotate-0 transform text-xl lg:hidden ltr:ml-auto rtl:mr-auto" height="1em" width="1em" xmlns="http://www.w3.org/2000/svg"><g><path fill="none" d="M0 0h24v24H0z"></path><path d="M12 13.172l4.95-4.95 1.414 1.414L12 16 5.636 9.636 7.05 8.222z"></path></g></svg></button></div></nav></div><div class="hidden lg:block lg:flex-1"></div></div></div><main class="ie11-content flex-1 dark:bg-dm-bg"><div class=""><div class=""><div class="py-6"><div class="mx-auto w-full px-4 xl:px-0 max-w-container text-left"><div class=""><a target="_self" rel="" class="cursor-pointer focus:outline-none" data-href="/legal/imprint" data-router-locale="en" href="/en/legal/imprint"><span class="focus:outline-none block border-b-2 py-2 px-6 font-medium sm:inline-block hover:border-plum-800 focus:border-plum-800 font-hrewards border-plum-200 text-plum">Imprint</span></a><a target="_self" rel="" class="cursor-pointer focus:outline-none" data-href="/legal/data-protection" data-router-locale="en" href="/en/legal/data-protection"><span class="focus:outline-none block border-b-2 py-2 px-6 font-medium sm:inline-block hover:border-plum-800 focus:border-plum-800 font-hrewards border-plum-800 text-black">Privacy policy</span></a><a target="_self" rel="" class="cursor-pointer focus:outline-none" data-href="/legal/information-duties-facebook" data-router-locale="en" href="/en/legal/information-duties-facebook"><span class="focus:outline-none block border-b-2 py-2 px-6 font-medium sm:inline-block hover:border-plum-800 focus:border-plum-800 font-hrewards border-plum-200 text-plum">Information requirements Facebook</span></a><a target="_self" rel="" class="cursor-pointer focus:outline-none" data-href="/legal/terms-conditions" data-router-locale="en" href="/en/legal/terms-conditions"><span class="focus:outline-none block border-b-2 py-2 px-6 font-medium sm:inline-block hover:border-plum-800 focus:border-plum-800 font-hrewards border-plum-200 text-plum">Conditions of participation</span></a><a target="_self" rel="" class="cursor-pointer focus:outline-none" data-href="/legal/video-surveillance" data-router-locale="en" href="/en/legal/video-surveillance"><span class="focus:outline-none block border-b-2 py-2 px-6 font-medium sm:inline-block hover:border-plum-800 focus:border-plum-800 font-hrewards border-plum-200 text-plum">Video surveillance</span></a></div></div></div></div></div><div style="display:contents"><div class=""><div class="py-16 md:py-10"><div class="mx-auto w-full px-4 xl:px-0 max-w-container"><div style="max-width:100%" class="prose prose-sm sm:prose rtl:prose-ul:pl-0 rtl:prose-ul:pr-7 Text_prose__LZN2l Text_hrewards__m72Nd w-full"><h2 id="h-rewards-loyalty-program-privacy-policy-since-february-2023">H REWARDS LOYALTY PROGRAM PRIVACY POLICY (SINCE FEBRUARY 2023)</h2> <p>The following information is intended to give you an overview of the processing of your personal data in connection with the following services and to inform you about your rights under the GDPR:</p> <ul> <li>Within the framework of the membership in our loyalty program (including becoming a member).</li> <li>Within the framework of membership in a loyalty program of cooperation partners.</li> <li>In the context of the documentation of changes, corrections of personal data.</li> </ul> <p><strong>I. Information on processing of personal data regarding H Rewards Loyalty Program.</strong></p> <p><strong>1. Controller for data processing</strong></p> <p>H Rewards Pte. Ltd.<br/>11 Penang Lane<br/>238485, Singapore<br/>Phone: +65 6771 1121<br/>email: <a target="_self" rel="" class="cursor-pointer underline hover:no-underline" data-href="mailto:dpo@hworld.com" data-router-locale="en" href="mailto:dpo@hworld.com">dpo@hworld.com</a> </p> <p>H World Holdings Singapore Pte. Ltd. is the parent company of Steigenberger Hotels GmbH and of H Rewards Pte. Ltd. H Rewards Pte. Ltd. operates the H Rewards Loyalty Program.</p> <p><strong>2. Contact details of the Data Protection Officer and EU Representative</strong></p> <p>2.1 You can reach our Data Protection Officer at</p> <p>Wodianka privacy legal GmbH<br/>Dockenhudener Straße 12a<br/>22587 Hamburg, Germany<br/>email: <a target="_self" rel="" class="cursor-pointer underline hover:no-underline" data-href="mailto:dpo@hworld.com" data-router-locale="en" href="mailto:dpo@hworld.com">dpo@hworld.com</a> </p> <p>2.2 You can reach our EU Representative at</p> <p>Steigenberger Hotels GmbH<br/>Lyoner Strasse 25<br/>60528 Frankfurt am Main, Germany<br/>Phone: +49 69 80 88 57 88<br/>eMail: <a target="_self" rel="" class="cursor-pointer underline hover:no-underline" data-href="mailto:eu-representative@hrewards.com" data-router-locale="en" href="mailto:eu-representative@hrewards.com">eu-representative@hrewards.com</a> </p> <p><strong>3. Your personal data</strong></p> <p>3.1 Membership in the H Rewards Loyalty Program<br/>Within the scope of membership in our own H Rewards Loyalty Program, we collect, process and store the personal data listed under point 3.5.</p> <p>3.2 Membership in the loyalty program of a cooperation partner<br/>Within the framework of membership in a loyalty program of one of our cooperation partners, such as Miles & More or bahn.bonus, we collect, process and store the personal data listed under point 3.5.</p> <p>3.3 Usage of the customer account<br/>For the use of the customer account we collect, process and store the personal data listed under point 3.5.</p> <p>3.4 Documentation of changes and corrections of personal data<br/>In accordance with our duty of documentation, we process and store all changes and corrections to the personal data listed under point 3.5.</p> <p>3.5 Your personal data<br/>We collect the following personal data and process it in accordance with the GDPR.</p> <ul> <li>Name and surname </li> <li>Residential address and, if applicable, different billing and communication addresses </li> <li>Date of birth </li> <li>Sex and form of address </li> <li>Email address(es), if more than one is used or provided </li> <li>Telephone number(s), if more than one is used or indicated </li> <li>Membership numbers of loyalty programs </li> <li>Residence preferences and wishes </li> <li>General interests, preferences and wishes </li> <li>Password</li> </ul> <p>Please see below the section “Your rights as a data subject” regarding your rights as a data subject, including information on the correction or deletion of your respective personal data.</p> <p>3.6 Personal Information We Collect from Third Party Providers When you register or sign in to the H Rewards Platform through a third-party service (e.g., Facebook, Google, Apple), you instruct the service to provide us with information such as, but not limited to, your email address, first and last name, title, and date of birth.</p> <p>a) Google single sign-on</p> <p>For registration on our website, we also use the authentication service Google Single-Sign-On, of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is the representative of Google LLC in Europe. In the context of the single sign-on process, the following information is transmitted to us: Name, email address, language, title and date of birth. Your data will also be processed in the USA, among other places. Google is certified under the EU-US Data Privacy Framework. In doing so, the US providers undertake to comply with the EU level of data protection when processing the relevant data. Furthermore, Google uses so-called standard contractual clauses. You can revoke your consent to the use of single sign-on applications at <a target="_blank" rel="nofollow" class="cursor-pointer underline hover:no-underline" data-href="https://adssettings.google.com/authenticated" data-router-locale="en" href="https://adssettings.google.com/authenticated">https://adssettings.google.com/authenticated</a>. More information on data processing can be found in Google's privacy policy: <a target="_blank" rel="nofollow" class="cursor-pointer underline hover:no-underline" data-href="https://policies.google.com/privacy?hl=de" data-router-locale="en" href="https://policies.google.com/privacy?hl=de">https://policies.google.com/privacy?hl=de</a>.</p> <p>b) Facebook Single-Sign-On</p> <p>For registration on our website, we also use the authentication service Facebook Single-Sign-On, of Meta Platforms, Inc, 1601 Willow Road 94025 Menlo Park, CA. Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour Dublin 2 Ireland, is the agent of Meta Platforms, Inc in Europe. In the context of the single sign-on process, the following information is transmitted to us: Name, email address, title and date of birth. Your data will also be processed in the USA, among other places. Meta is certified under the EU-US Data Privacy Framework. In doing so, the US providers undertake to comply with the EU level of data protection when processing the relevant data. Furthermore, Meta uses so-called standard contractual clauses. At <a target="_blank" rel="nofollow" class="cursor-pointer underline hover:no-underline" data-href="https://www.facebook.com/adpreferences/ad_settings" data-router-locale="en" href="https://www.facebook.com/adpreferences/ad_settings">https://www.facebook.com/adpreferences/ad_settings</a> you can revoke your consent to the use of single sign-on applications. More information on data processing can be found in Meta's privacy policy: <a target="_blank" rel="nofollow" class="cursor-pointer underline hover:no-underline" data-href="https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0" data-router-locale="en" href="https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0">https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0</a>.</p> <p>c) Apple Single-Sign-On</p> <p>For registration on our website, we also use the authentication service Facebook Single-Sign-On, of Apple Inc., One Apple Park Way, Cupertino, Kalifornien, Apple Distribution International Limited, Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, is the agent of Apple Inc. in Europe. In the context of the single sign-on process, the following information is transmitted to us: Name, email address, title and date of birth. Your data will also be processed in the USA, among other places. Apple is certified under the EU-US Data Privacy Framework. In doing so, the US providers undertake to comply with the EU level of data protection when processing the relevant data. Furthermore, Apple uses so-called standard contractual clauses. At <a target="_blank" rel="nofollow" class="cursor-pointer underline hover:no-underline" data-href="https://www.apple.com/legal/privacy/en-ww/" data-router-locale="en" href="https://www.apple.com/legal/privacy/en-ww/">https://www.apple.com/legal/privacy/en-ww/</a> you can revoke your consent to the use of single sign-on applications. More information on data processing can be found in Apple's privacy policy: <a target="_blank" rel="nofollow" class="cursor-pointer underline hover:no-underline" data-href="https://www.apple.com/legal/privacy/data/en/apple-id/" data-router-locale="en" href="https://www.apple.com/legal/privacy/data/en/apple-id/">https://www.apple.com/legal/privacy/data/en/apple-id/</a></p> <p><strong>4. Purposes and legal basis for processing personal data</strong></p> <p>We process your personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG) as well as all other relevant legislation for the purposes and on the legal basis as set out below:</p> <p>(a) In order to create, edit, update and manage your Member Account and to properly process credits and debits to your Member Account, and to provide our services in connection with membership in the H Rewards Loyalty Program. The legal basis for this is Article 6 (1) (b) GDPR.</p> <p>(b) For processing bonus credits (points, miles, etc.) and other services in connection with your membership in the loyalty programs of our cooperation partners. The legal basis is the fulfilment of the contract in accordance with Article 6 (1) (b) GDPR.</p> <p>(c) For comprehensive recognition, especially if you are a member of our H Rewards Loyalty Program, at all service contact points (personal and/or digital) of the hotels and entities belonging to H World Group and automatic updating of your recurring wishes, preferences and requirements, e.g. always two pillows, in order to always be able to provide a high-quality service corresponding to the hotel brand. The legal basis for this is our justified interest in offering our customers the best possible service in accordance with Article 6 (1) (f) GDPR.</p> <p>(d) For the purpose of processing your enquiries, information and complaints, insofar as the processing is connected with the fulfilment of a contract or is necessary for the implementation of pre-contractual measures, the legal basis for the processing of your personal data is Article 6 (1) (b) GDPR. In other cases, the legal basis is our legitimate interest in the effective processing of inquiries addressed to us in accordance with Article 6 (1) (f) GDPR.</p> <p>(e) To compile statistics based on anonymous data analysis for the improvement and development of products, services and program content of the H Rewards Loyalty Program. The legal basis for this is our legitimate interest in the further development of our H Rewards Loyalty Program in accordance with Article 6 (1) (f) GDPR.</p> <p>(f) For the purposes of authentication and fraud prevention, especially in connection with membership of the H Rewards Loyalty Program or a loyalty program of our cooperation partners such as Miles & More or bahn.bonus. The legal basis for this is Article 6 (1) (f) GDPR.</p> <p>(g) In order to safeguard domestic authority, to prevent and resolve criminal offences, to assert and defend legal claims and to safeguard interests in legal disputes, to ensure IT security and IT operation and to identify credit risks. The respective legal basis for this is Article 6 (1) (f) GDPR. </p> <p>Our overriding legitimate interests result from our obligation to ensure a safe stay of our guests in the hotel as well as from our interest in enforcing our material and immaterial claims and safeguarding our rights and in defending against unjustified claims. Furthermore, the processing of personal data to the extent absolutely necessary for the prevention of fraud also constitutes a legitimate interest of our company in accordance with recital 47 of the GDPR.</p> <p><strong>5. Minors</strong></p> <p>Minors may not transmit any personal data to us without the consent of the respective parent(s) or guardian(s). Furthermore, we do not store any personal data of minors without the consent of their parents or guardians. Through our website, we do not process personal data of minors that we knowingly obtain.</p> <p><strong>6. Categories of personal data recipients</strong></p> <p>If and to the extent necessary for the purposes set out in section 4 above, we will also disclose your personal data to the following recipients or categories of recipients in accordance with Article 4 No. 9 GDPR:</p> <p>Within our H World Group, only those entities will be granted access to your data (to the extent necessary in each case) that need it to fulfil our contractual and statutory obligations.</p> <p>We use Steigenberger Hotels GmbH (“Steigenberger") as a data processor to operate H Rewards Loyalty Program (including operating the respective website and app). We have concluded a data processing agreement with EU standard contractual clauses (Module Two: controller to processor data transfer). Steigenberger processes and stores your personal data in our central guest database in particular for internal administrative purposes such as the administration and updating of consents and revocations as well as the member account and other connected services. In this context, your personal data is also disclosed to other hotels/entities belonging to H World Group, if you use H Rewards Loyalty Program with a hotel/entity of our H World Group. Disclosure is only made to the extent necessary within the scope of a specific purpose and only to companies that are noted accordingly in the <a target="_self" rel="" class="cursor-pointer underline hover:no-underline" data-href="/legal/operating-company" data-router-locale="en" href="/en/legal/operating-company">list of hotel operators</a>. Furthermore, only authorized employees are allowed to view and process your personal data within the scope of their function.</p> <p>We may also obtain personal data for these purposes from service providers (e.g. within the scope of order processing in accordance with Article 28 GDPR) and vicarious agents. These are companies in the following categories: credit services and payment processing, IT services, cleaning services, logistics, printing services, telecommunications, debt collection, consulting and advisory services, and sales and marketing. The respective service providers can be seen from the<a target="_self" rel="" class="cursor-pointer underline hover:no-underline" data-href="/service-providers-processors" data-router-locale="en" href="/en/service-providers-processors"> list of service providers processors</a>, which is updated regularly.</p> <p>Furthermore, data may be passed on to public bodies and institutions if there is a legal obligation to do so (e.g. financial authorities, law enforcement agencies).</p> <p>Other data recipients may be those entities for which you have given us your consent to transfer data.</p> <p><strong>7. Transfer of personal data to a third country</strong></p> <p>A transfer of personal data to bodies in states outside the European Union (so-called third countries) takes place insofar as</p> <p>(a) it is necessary for the execution of your reservations and handling of your hotel stay.</p> <p>(b) it is necessary for implementation as part of membership of the H Rewards Loyalty Program or with a cooperating partner.</p> <p>(c) it is required by law.</p> <p>(d) you have given us your consent.</p> <p>As can be seen in detail from the list of service providers/processors provided above, our company uses service providers for certain tasks who are based in a third country or belong to an international group with companies in third countries or who in turn cooperate with service providers based in a third country. Personal data may be transferred to such service providers if the European Commission has decided that an adequate level of protection exists in the third country in question (in accordance with GDPR requirements). If the Commission has not made such a decision, our company or the service provider may only transfer personal data to a third country or to an international organisation if appropriate safeguards are in place and enforceable rights and effective legal remedies are available (Article 46 (1) GDPR). Beyond the cases mentioned above, our company does not transfer personal data to bodies in third countries or to international organisations.</p> <p>We transfer personal data to Steigenberger based on a data processing agreement with EU standard contractual clauses (Module Two: controller to processor data transfer).</p> <p><strong>8. Period of retention of personal data and criteria for determining that period</strong></p> <p>We process and store your personal data as long as it is necessary for the fulfilment of our contractual and legal obligations. If the data are no longer required for the fulfilment of contractual obligations, they are regularly deleted, unless their temporary further processing is necessary due to</p> <p>(a) national or regional reporting laws or regulations at the place of data collection or contract implementation.</p> <p>(b) national commercial and fiscal retention periods at the place of data collection or contract implementation.</p> <p>(c) national, regional or local tax code at the place of data collection or contract implementation.</p> <p>(d) membership of its own H Rewards Loyalty Program.</p> <p>The periods of retention or documentation specified there are one to ten years.</p> <p><strong>9. Your rights as a data subject</strong></p> <p>Every data subject has the right of access by the controller to the personal data concerned in accordance with Article 15 GDPR, the right of rectification in accordance with Article 16 GDPR, the right of deletion in accordance with Article 17 GDPR, the right to limit processing in accordance with Article 18 GDPR, the right to object to processing in accordance with Article 21 GDPR and the right of transferability in accordance with Article 20 GDPR. The right of information and the right of deletion are also subject to the restrictions pursuant to Sections 34 and 35 of the BDSG.</p> <p>Please see section 12 regarding more information on your right to object to processing under Article 21 GDPR.</p> <p>If the processing of your personal data is based on a consent granted to us, you have the right to revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.</p> <p>Furthermore, you have the right of appeal with a data protection supervisory authority in accordance with Article 77 GDPR.</p> <p><strong>10. Obligation to provide data</strong></p> <p>The obligation to provide personal data always exists when such provision is necessary for the performance of a contract or when we are legally obliged to process such data; this applies in particular to</p> <p>(a) the drafting of a contract and the execution of the contract;</p> <p>(b) the creation and management of the Member's account in its own H Rewards loyalty program;</p> <p>(b) compliance with the laws and regulations governing registration at the hotel location.</p> <p>If you do not provide us with the necessary information, we may not be able to provide the services you have requested or may not be able to provide them completely.</p> <p><strong>11. Automated decision-making and profiling</strong></p> <p>When establishing and executing our contractual relationship, you will not be subjected to a decision based solely on automated processing, including profiling, pursuant to Article 22 GDPR, which produces legal effects concerning you or similarly affects you in a serious way.</p> <p><strong>12. Additional information on your right to object pursuant to Article 21 GDPR</strong></p> <p>You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you that is carried out on the basis of Article 6 (1) (e) GDPR (processing in the public interest) or Article 6 (1) (f) GDPR (processing based on a balancing of interests); this also applies to profiling based on this provision in accordance with Article 4 (4) GDPR.</p> <p>If you file an objection, we will no longer process your personal data unless we can demonstrate compelling reasons for processing that are worthy of protection and outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.</p> <p>If your personal data is processed by us in order to acquire existing customers, you have the right to object at any time to the processing of personal data relating to you for the purpose of such advertising; this also applies to profiling, insofar as it is connected with such acquisition of existing customers.</p> <p>The objection is possible by using the unsubscribe function in digital media, corresponding settings in the Member Area or Subscriber Area, using the contact form on the website or by sending an informal letter to the contact data mentioned above.</p> <p><strong>II. Additional Information regarding data processes on our website</strong></p> <p><strong>1. Membership Account</strong></p> <p>You can register on our website as a member of the H Rewards Loyalty Program (user account/account) by providing your full first and last name, your current home address, date of birth, preferred email address and a password. This registration can be done via the menu item "Login/Register" in the header or by adding a password during your booking and when entering your personal data.</p> <p>Upon successful login/registration, a member account will automatically be created for you, which is available for the H Rewards Loyalty Program’s website and the websites of all hotel brands/entities belonging to H World Group. </p> <p>Regarding your membership, we transfer your data to the respective service providers and respective operators.</p> <p>In your member account you can view and change your personal data. In addition, all important information about your membership is displayed, such as membership status. In the member area, you can book hotel accommodation, change or cancel reservations that you have made using your membership details, and make award bookings according to your account balance.</p> <p>You can cancel your membership at any time. The member account will automatically be deleted after final termination of the membership (see termination in the terms of participation). The legal basis for the processing of your personal data in connection with the setting up and use of your membership account is your membership in accordance with the terms and conditions of the H Rewards Loyalty Program.</p> <p><strong>2. Connection and synchronization of different customer profiles</strong></p> <p>Your personal data is collected at different contact points (e.g. member account, hotel, ...) in different forms (handwritten and digital). This may result in multiple customer profiles and contradictory information, especially in the context of the administration of consents or in the case of multiple membership numbers. In order to provide you with the best possible service and to ensure the correct processing of your personal data, we are careful to combine multiple data based on unique characteristics, such as first name, surname and address, to form a unique profile. For the merging of customer profiles we use the information that we collect in the course of your membership and hotel stay as well as the personal data that you have voluntarily submitted to us by other means.</p> <p>Without this automated and in some cases necessary manual merging, we cannot guarantee the proper processing of your personal data, as different customer profiles may have different settings. The processing and merging takes place in the central guest database of our processor Steigenberger.</p> <p><strong>3. User account/account</strong></p> <p>You can register for a user account (account) on our website with your email address and the allocation of a password. This registration can be done via the menu item “Registration” in the header or by adding a password when you make your booking and input your personal data.</p> <p>Upon successful registration, a user account (account) will be created for you automatically, which is valid for the websites of all hotel brands/entities belonging to H World Group. </p> <p>In the user account you can see and edit (e.g. cancel or change) all the bookings you have transacted since your registration by providing your user data via one of the respective websites. You may delete your user account at any time.</p> <p>The legal basis for processing your personal data in connection with the creation and use of your user account is your membership agreement.</p> <p><strong>4. Digital offers (newsletter), acquisition of existing customers and program information</strong></p> <p><strong>4.1 Advertising (newsletter)</strong></p> <p>With the email newsletter, we will regularly inform you about the offers and services of H World Group as well as offers within the framework of membership in the H Rewards Loyalty Program, according to the preferences you specify (please see list of operators above).</p> <p>If you would like to receive the email newsletter, we need a valid email address from you. We use the so-called double-opt-in procedure to register you for our newsletter. This means that after your registration we will send you an email to the email address you have provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within two weeks, your information will be blocked and automatically deleted after one month. In addition, we store your IP address and the time of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.</p> <p>Please note that members, who originally provided their marketing consent to Steigenberger, will continue to receive email marketing messages from Steigenberger, unless they revoke their respective consent with regard to further processes.</p> <p><strong>4.2 Advertising regarding existing customers</strong></p> <p>4.2.1 Advertising for members within the framework of membership of the loyalty program With respect to the H Rewards Loyalty Program, we reserve the right to send our members offers from our range of services as membership advertising by email. Our justified interest in the implementation of existing customer acquisition is to inform our members about the current membership status and to be able to offer individual and exclusive offers to target groups. We can process your personal data, which you have entered in the member account or which you provide during a stay, for the purpose of member recruitment within the framework of the existing membership.</p> <p>4.2.2 Advertising to existing customers within the framework of a stay We reserve the right to send our guests offers from our range of services as an advertisement for existing customers by email. Our justified interest in the execution of existing customer advertising is to be able to offer our guests individual offers in a target group-oriented manner, which are based on a previous booking (transaction) or the existing customer relationship.</p> <p>Your personal data, which you provide us with when making a booking, can be processed by us within twelve (12) months after a previous transaction for the purpose of sending advertising to existing customers. If you do not make a new booking within this period or do not carry out any other transaction, your personal data will no longer be processed for the purpose of acquiring existing customers and will be deleted accordingly, unless you have subscribed to a newsletter or your personal data must continue to be stored due to other regulations.</p> <p><strong>4.3 Obligatory communication</strong></p> <p>4.3.1 Communication in the context of membership Within the framework of the operation of the loyalty program, we are legally obliged to inform you about changes in the program (conditions of participation). The communication will be made exclusively by email to the email address stored in the member account. If this is no longer valid, we reserve the right to contact you by other means, e.g. by post.</p> <p> 4.3.2 Communication media For the aforementioned communication purposes, we use the following communication media according to the settings and consents stored in the central customer profile: • Email<br/>• Messenger Services<br/>• Phone<br/>• Post </p> <p><strong>4.4 Revocation of consents and objections to Member Advertising</strong></p> <p>4.4.1 Revocation of consents As a subscriber to the email newsletter, you can revoke your consent to the processing of your email address to send the email newsletter at any time. The revocation can be made via the relevant link in each email newsletter or by email with the subject "Unsubscribe" to <a target="_self" rel="" class="cursor-pointer underline hover:no-underline" data-href="mailto:update@news.hrewards.com" data-router-locale="en" href="mailto:update@news.hrewards.com">update@news.hrewards.com</a>.</p> <p>4.4.2 Objections to Member Advertising You can object to the use of your email address for the purpose of sending advertising to existing customers or members at any time without incurring any costs other than the transmission costs according to the basic rates. For more information on exercising your right to object to the use of your email address for direct marketing purposes, please refer to the section above “Your rights as a data subject”.</p> <p>Current version: February 2023</p> <hr/> <h2 id="data-privacy-information-website">DATA PRIVACY INFORMATION - WEBSITE</h2> <p>The following information is designed to give an overview of how we process your personal data in connection with the services outlined below and to inform you about your rights under the European Data Protection Regulation (GDPR):</p> <ul> <li>Processing personal data as part of contacting us with general inquiries</li> <li>Processing personal data in the context of reservations of tables in bars or restaurants or appointments and bookings of spa visits</li> <li>Processing personal data in connection with and directly after your stay at one of our hotels</li> <li>Processing personal data as part of video surveillance on our premises</li> <li>Processing personal data in connection with digital offers (newsletters), existing customer marketing, and program information</li> <li>Processing personal data as part of your membership of our loyalty program and loyalty programs of our cooperation partners</li> <li>Mandatory communication as part of the loyalty program</li> <li>Processing personal data as part of purchasing vouchers</li> <li>Processing personal data as part of arranging services</li> <li>Processing personal data by a processor on behalf of the controller</li> <li>Processing personal data in the context of using this website</li> </ul> <p>I. <strong>General information and your rights as data subject</strong></p> <p><strong>1. Party responsible for data processing (“controller”)</strong></p> <p><strong>2. The controller as defined in Article 4 (7) GDPR</strong> is:</p> <p>Steigenberger Hotels GmbH Lyoner Straße 25 60528 Frankfurt am Main, Germany Phone: +49 (0)69 66564-460 Fax: +49 (0)69 66564-888 E-Mail: <a target="_self" rel="" class="cursor-pointer underline hover:no-underline" data-href="mailto:service@hrewards.com" data-router-locale="en" href="mailto:service@hrewards.com">service@hrewards.com</a></p> <p>Full details pursuant to Section 5 of the German Digital Services Act (Digitale-Dienste Gesetz DDG) <a target="_self" rel="" class="cursor-pointer underline hover:no-underline" data-href="en/legal/imprint" data-router-locale="en" href="/en/legal/imprint">(Imprint)</a></p> <ol start="3"> <li> Contact details of the Data Protection Officer You can contact our Data Protection Officer at</li> </ol> <p>TÜV Informationstechnik GmbH Am TÜV 1 45307 Essen, Germany <a target="_self" rel="" class="cursor-pointer underline hover:no-underline" data-href="mailto:datenschutz@deutschehospitality.com" data-router-locale="en" href="mailto:datenschutz@deutschehospitality.com">E-Mail</a></p> <p><strong>4. Your rights as a data subject</strong></p> <p>Every data subject whose personal data is processed has the right of access to obtain from the controller information about the personal data concerning him or her pursuant to Art. 15 GDPR, the right to rectification pursuant to Art. 16 GDPR, the right to erasure pursuant to Art. 17 GDPR, the right to restriction of processing pursuant to Art. 18 GDPR, the right to object to processing pursuant to Art. 21 GDPR, and the right to data portability pursuant to Art. 20 GDPR. In addition, the restrictions pursuant to Sections 34 and 35 of the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) apply to the right of access by the data subject and the right to erasure.</p> <p>Where processing of your personal data is based on your consent that you have given us, you have the right to withdraw your consent at any time without this affecting the lawfulness of processing based on consent before its withdrawal.</p> <p>In addition, data subjects have the right to lodge a complaint with the responsible Data Protection Authority under Art. 77 GDPR in conjunction with Section 19 BDSG.</p> <p><strong>5. Processing the data of minors</strong></p> <p>Minors may not transmit any personal data to us without the consent of a parent or legal guardian. We do not process any data knowingly obtained from minors on our website.</p> <p><strong>6. Automated decision-making and profiling</strong></p> <p>When entering into or performing a contract with you, you will not be subject to any decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, as set out in Art. 22 GDPR.</p> <p><strong>7. Additional information on your right to object pursuant to Art. 21 GDPR</strong></p> <p>You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Art. 6 (1) (f) GDPR (data processing on the basis of balancing interests). </p> <p>If you object, your personal data will no longer be processed unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or unless the processing is carried out for the establishment, exercise, or defense of legal claims.</p> <p>If your personal data is processed by us for the purpose of existing customer marketing, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing. To object to processing you can use the unsubscribe function in digital media, select the corresponding settings in the membership or subscriber area, use the contact form on our website, or use the contact details provided in section I. to inform us of your objection without using a particular format.</p> <p><strong>8. Personal data storage periods and criteria for determining these periods</strong></p> <p>We process and store your personal data for as long as is necessary to fulfill our contractual and legal duties and obligations. If the data is no longer required to fulfill our contractual duties, it will be erased on a regular basis unless temporary further processing of the data is necessary because of </p> <p>(a) national or regional registration laws and regulations at the place of data collection and/or contract performance </p> <p>(b) national retention periods under commercial or fiscal law at the place of data collection and/or contract performance </p> <p>(c) national, regional, or local tax regulations (such as visitors’ tax, tourist tax, etc.) at the place of data collection and/or contract performance </p> <p>(d) membership of our own H Rewards loyalty program </p> <p>The periods for retention and/or documentation specified thereunder are usually two to ten years. For further information on the storage period of your personal data please see the relevant sections on different types of processing. </p> <p><strong>9. Documentation of modifications to and corrections of personal data</strong></p> <p>Under our duty of documentation, we process and keep a record of all modifications to and corrections of your personal data such as</p> <ul> <li>First and last name </li> <li>Home address and, where different, billing and correspondence addresses </li> <li>Date of birth </li> <li>Gender, salutation, title </li> <li>Email address(es) if multiple addresses are used or specified </li> <li>Phone number(s) if multiple numbers are used or specified </li> <li>Passport data</li> <li>Loyalty program membership numbers </li> <li>Preferences and wishes related to your stay </li> <li>General interests, preferences, and wishes </li> <li>Password</li> </ul> <p><strong>10. Duty to provide data</strong></p> <p>You have a duty to provide personal data whenever this data is required in order (to render our services) or whenever we are required by law to collect this data; this applies in particular to</p> <ul> <li>performing an accommodation contract </li> <li>managing your membership account of our own loyalty program, H Rewards</li> <li>complying with registration laws and requirements applicable at the hotel location</li> </ul> <p>If you fail to provide us with necessary information we may not be able to provide the requested services in full or may not be able to provide them at all.</p> <p><strong>II. Contacting us</strong> Contacting us with general inquiries through our website or the service center You can contact us in various ways, including via the contact form on our website or by calling our service center.</p> <p><strong>1. Processed personal data</strong> As part of general inquiries, we receive, process, and store the following personal data depending on the nature of your request:</p> <ul> <li>First and last name </li> <li>Gender, salutation, title,</li> <li>Email address(es) if multiple addresses are used or specified </li> <li>Phone number(s) if multiple numbers are used or specified </li> <li>Loyalty program membership numbers </li> <li>Other personal data that you provide voluntarily in your inquiry</li> <li>Audio recordings of calls to the service center (only with your consent)</li> </ul> <p><strong>2. Purposes and legal bases of processing your personal data</strong></p> <p>We process your personal data for the following purposes and on the following legal bases: To process your queries, requests for information, and complaints if such processing is related to the performance of a contract or the implementation of pre-contractual measures. In this case, the legal basis for processing your personal data is Art. 6 (1) (b) GDPR. In other cases, the legal basis is our legitimate interest in effectively processing any queries that we receive pursuant to Art. 6 (1) (f) GDPR. Calls to our service center are only recorded if you have previously consented to this (Art. 6 (1) (a) GDPR). Recordings are only made for the purpose of providing training for employees on how to handle queries. </p> <p><strong>3. Categories of recipients of personal data</strong></p> <p>If you have a direct question for the hotel, for example regarding your reservation, your query will be forwarded directly to that hotel. We also work with a service provider in our service center who supports us in handling your queries.<br/>If your query is related to data privacy, such as requests for information, it will be forwarded to the data protection department for processing. All other queries will be forwarded to the offices/departments whose involvement is necessary for handling your query. </p> <p><strong>4. Duration of storage of personal data</strong></p> <p>If you contact us we will store your personal data. The only purpose of storing your data is to be able to deal with your request and to contact you. Your contact requests are usually erased after 10 years.</p> <p><strong>5. Transfer of data to third countries</strong></p> <p>If your query is related to a hotel in a third country, the data that we receive when you contact us will be transferred to the third country where the hotel is located to be dealt with. </p> <p><strong>III. Processing your personal data in connection with your stay</strong></p> <p>Queries, bookings/reservations, travel preparations, arrival/check-in, departure</p> <p><strong>1. Processed personal data</strong></p> <p>We process your data in order to handle and manage your reservation requests and reservations and to provide our services under the accommodation contract, including managing your stay at our hotel (including the access to the hotel)and processing the payment. In addition, the hotels are generally obligated under the relevant applicable registration laws and regulations to collect the aforementioned personal data from guests staying at the hotel. We also process and store any preferences and wishes expressed to us on a voluntary basis which are either relevant to the specific visit or are of a general nature (recurring requirements, preferences, and wishes). We are also obligated under our contract with you to inform you of any significant changes. We will use the personal data we hold on you for this purpose.</p> <ul> <li>First and last name </li> <li>Home address and, where different, billing and correspondence addresses</li> <li>Date of birth </li> <li>Payment data and credit card data</li> <li>Gender, salutation, title</li> <li>Email address(es) if multiple addresses are used or specified</li> <li>Phone number(s) if multiple numbers are used or specified</li> <li>Passport data</li> <li>Reservation number</li> <li>Loyalty program membership numbers</li> <li>Preferences and wishes related to your stay</li> <li>General interests, preferences, and wishes</li> </ul> <p><strong>2. Purposes and legal bases of processing your personal data</strong></p> <p>We process your personal data for the following purposes and on the following legal bases:</p> <p>To handle and manage your reservation requests and reservations and provide our services under the accommodation contract, including managing your stay at our hotel and processing payment (in particular also for tracking your use of our services (telephone, bar, spa, chargeable TV channels etc.), performing check-in activities (digitally and on site), and managing access to the rooms). The legal basis for this is Art. 6 (1) (b) GDPR.</p> <p>As part of contractual performance, we are required to inform you of any significant changes that occur during your stay. We provide this information preferably via email to the email address stored in the central guest profile. If this is no longer valid we reserve the right to contact you by different means, such as by post. The legal basis for this is the performance of our accommodation contract with you pursuant to Art. 6 (1) (b) GDPR.</p> <p>To fulfill a legal obligation that our company is subject to as the controller (e.g., due to registration laws, fiscal law, obligation to keep records, etc.). The legal basis for this is Art. 6 (1) (c) GDPR. To ensure that your stay with us meets your needs and expectations based on your personal data that is already stored in our system and helps us recognize you at all service contact points (in person and/or digital), in particular if you are a member of our loyalty program, e.g., data transferred with your reservation, data provided voluntarily during previous visits (regular guests, returning guests), and any add-on services or requirements related to your visit, e.g., bouquet of flowers in your room, two pillows. The legal basis for this is Art. 6 (1) (f) GDPR. Our legitimate interest is in offering our guests the highest possible standard of service.</p> <p>To create, edit, manage, and update your membership account and to correctly deal with any credits and debits to your membership account as well as to provide our services as part of your membership of our H Rewards loyalty program. The legal basis for this is Art. 6 (1) (b) GDPR. To process bonus credits (points, miles, etc.) and other services rendered as part of your membership of the loyalty programs of our <a target="_self" rel="" class="cursor-pointer underline hover:no-underline" data-href="/en/partners" data-router-locale="en" href="/en/partners">cooperation partners</a>. The legal basis for this is the performance of the contract pursuant to Art. 6 (1) (f) GDPR. To maintain, assure, and improve the quality of our products and services, in particular by carrying out and analyzing satisfaction surveys and comments from guests, by processing your personal data in our central guest database, which allows us to recognize you as a returning guest, to better assess your needs and wishes, to improve the quality and personal touch of our communication with you, and to create offers tailored to you – the legal basis for this is Art. 6 (1) (f) GDPR. Our overriding legitimate interests arise from the accommodation contract entered into with you, which constitutes a relevant and appropriate relationship within the meaning of recital (47) GDPR, and from the fact that this type of data processing is customary for international hotel chains and in line with the reasonable expectations of the majority of guests. As part of a group of companies, which includes businesses operating hotels under the umbrella brand H World International, our company also has a legitimate interest pursuant to recital 48 GDPR, namely to transfer personal data of guests within the group of companies for internal administrative purposes.</p> <p>To uphold the house rules, to prevent and investigate crimes and offenses, to assert legal claims and defend against legal claims and represent our interests in legal disputes, to ensure IT security and maintain IT operations, to identify risks related to creditworthiness – the legal basis for this is Art. 6 (1) (f) GDPR. Our overriding legitimate interests stem from our obligation to ensure our guests’ safe and secure stay at the hotel and from our interest in asserting our material and immaterial claims and exercising our rights and in defending ourselves against unjustified claims. Furthermore, it is also a legitimate interest of our company to process personal data to the extent strictly necessary in order to prevent fraud pursuant to recital (47) GDPR.</p> <p><strong>3. Categories of recipients of personal data</strong></p> <p>If and where necessary for the aforementioned purposes, we will also disclose your personal data to the following recipients or categories of recipients as defined in Art. 4 (9) GDPR: Within our company, only those offices/departments that need your personal data in order for us to fulfill our contractual and legal duties will be able to view or access it (to the extent necessary).</p> <p>To the extent that your personal data is processed in our central guest database it will also be disclosed to other companies that operate one or several hotels of the brands which are part of H World International (Steigenberger Hotel & Resorts, IntercityHotel, Jaz in the city, Maxx by Steigenberger). The respective operators of each of these hotels are shown on <a target="_self" rel="" class="cursor-pointer underline hover:no-underline" data-href="/en/legal/operating-company" data-router-locale="en" href="/en/legal/operating-company">the list</a> of hotel operators. <a target="_self" rel="" class="cursor-pointer underline hover:no-underline" data-href="/en/legal/operating-company" data-router-locale="en" href="/en/legal/operating-company">This list</a> is updated on a regular basis and all hotels that use our central guest database are specially marked here. When crediting any points accrued by you in membership programs of cooperation partners during your visit, we transfer your data to the relevant <a target="_self" rel="" class="cursor-pointer underline hover:no-underline" data-href="/en/partners" data-router-locale="en" href="/en/partners">cooperation partners</a>. </p> <p>Service providers used by us (e.g., for data processing on our behalf as set out in Art. 28 GDPR) and vicarious agents may also receive personal data for these purposes. These are companies that belong to the categories of credit services and payment processing, IT services, cleaning services, logistics, printing services, telecommunications, debt collection, consulting, and sales and marketing. The relevant service providers are shown in <a target="_self" rel="" class="cursor-pointer underline hover:no-underline" data-href="/en/service-providers-processors" data-router-locale="en" href="/en/service-providers-processors">The list</a> of service providers/processors , which is updated on a regular basis. Furthermore, data may be transferred to official bodies and institutions if we are under a legal obligation to do so (e.g., fiscal authorities, law enforcement authorities, registration authorities). Other recipients of data may be those bodies and institutions to which you have given your consent for the transfer of data.</p> <p><strong>4. Duration of storage of personal data</strong></p> <p>We process and store your personal data for as long as is necessary to fulfill our contractual and legal duties and obligations. When the data is no longer needed for the fulfillment of contractual obligations, it will regularly be erased unless temporary further processing of the data is necessary because of retention periods specified under commercial and fiscal law (including the German Commercial Code (Handelsgesetzbuch, HGB), the German Fiscal Code (Abgabenordnung, AO), the German Federal Act on Registration (Bundesmeldegesetz, BMG)). The periods of retention and/or documentation specified thereunder are between two and ten years.</p> <p><strong>5. Transfer of data to third countries</strong></p> <p>If you booked a stay in a hotel in a country outside the European Union (third country), your data will be transferred to this third country if it is necessary to do so in order to make your reservations and manage your stay at the hotel. If you are a member of our loyalty program or that of one of our cooperation partners, it will be necessary to transfer the points you accrued to the partner to perform services under the membership scheme. </p> <p><strong>6. Merging your guest profiles</strong></p> <p>Your personal data is collected at various points of contact (e.g., membership account, hotel) in different ways (in writing and digitally). This is why it may be the case that multiple different guest profiles exist in our database which contain inconsistent information. As we strive to offer you the best possible service and wish to ensure that your personal data is processed correctly, we are keen to merge multiple copies of data into one unique profile using unique characteristics, such as first name, last name, and address. To merge guest profiles, we use the information collected in the context of your H Rewards membership and your stay in our hotel as well as the personal data that you communicated to us in any other way on a voluntary basis.</p> <p>The legal basis for this is Art. 6 (1) (f) GDPR. Without this automated and sometimes necessary manual merging we cannot ensure that your personal data will be processed properly and correctly. This is why we have a legitimate interest in merging the data.</p> <p>The processing and merging is carried out in the central guest database of Steigenberger Hotels GmbH.</p> <p><strong>IV. Other processing immediately after your stay (post-stay messages)</strong></p> <p>After your stay you will receive from us a post-stay message in which we ask you to rate your stay in our hotel (satisfaction survey) unless you have previously unsubscribed from this communication by email or by using the unsubscribe link in a post-stay message. </p> <p><strong>1. Processed personal data</strong></p> <ul> <li>First and last name</li> <li>Membership number</li> <li>Gender, salutation, title</li> <li>IP address</li> <li>Email address(es) if multiple addresses are used or specified</li> <li>Preferences and wishes related to your stay </li> <li>General interests, preferences, and wishes</li> <li>Data that you transfer to us in a satisfaction survey</li> </ul> <p><strong>2. Purposes and legal bases of processing personal data</strong></p> <p>We process your personal data for the following purposes and on the following legal bases:</p> <p>To maintain, assure, and improve the quality of our products and services, in particular through analyzing complaints, satisfaction surveys, and comments from guests. The legal basis for this is our legitimate interest in offering our customers the best possible service pursuant to Art. 6 (1) (f) GDPR.</p> <p><strong>3. Categories of recipients of personal data</strong></p> <p>In the context of the customer satisfaction survey included in the post-stay messages we work with a service provider who is the recipient of this data (processor).</p> <p><strong>4. Duration of storage of personal data</strong></p> <p>We store any data collected in the customer satisfaction survey for a period of 3 years. Your IP address will be anonymized after 28 days. </p> <p><strong>5. Transfer of data to third countries</strong></p> <p>We do not intend to transfer this data to a third country or an international organization.</p> <p><strong>V. Video surveillance on our premises during your stay</strong></p> <p><a target="_self" rel="" class="cursor-pointer underline hover:no-underline" data-href="/legal/video-surveillance" data-router-locale="en" href="/en/legal/video-surveillance">Video surveillance</a></p> <p><strong>VI. Processing personal data in connection with digital offers (newsletter), existing customer marketing, and program information</strong></p> <ol> <li> Newsletter Our email newsletter provides you with information on a regular basis and in line with your specified preferences about the offers and services provided by the hotels belonging to H World International (see list of hotel operators), the offers and services provided by our cooperation partners <a target="_self" rel="" class="cursor-pointer underline hover:no-underline" data-href="/en/partners" data-router-locale="en" href="/en/partners">(see list)</a> , and the offers associated with your membership of the H Rewards loyalty program.</li> </ol> <p>If you wish to receive the email newsletter, we need you to provide us with a valid email address. We use the double-opt-in process for you to sign up to our newsletter. This means we will send an email to the specified email address after you register asking you to confirm that you wish to receive the newsletter. If you fail to confirm your sign-up within a period of two weeks, your information will be blocked and, after one month, automatically erased. We also store the IP address used by you in each case and the times of your registration and confirmation. The purpose of this process is to be able to prove your registration and, where necessary, investigate any misuse of your personal data.</p> <p>1.1. Processed personal data We process the following personal data in connection with sending our newsletter:</p> <ul> <li>First and last name </li> <li>Home address and, where different, billing and correspondence addresses</li> <li>Date of birth </li> <li>IP address</li> <li>Gender, salutation, title </li> <li>Email address(es) if multiple addresses are used or specified</li> <li>Loyalty program membership numbers </li> <li>General interests, preferences, and wishes</li> </ul> <p>1.2. Purposes and legal bases of processing personal data We process your personal data for the following purposes and on the following legal bases:</p> <p>To send our email newsletter to you, including administering your subscription to the newsletter. The legal basis for this is your consent pursuant to Art. 6 (1) (a) GDPR. As a subscriber to our email newsletter, you may withdraw at any time your consent to us processing your data in order to send our email newsletter. To withdraw your consent, you can use the relevant link included in every email newsletter or send an email to <a target="_self" rel="" class="cursor-pointer underline hover:no-underline" data-href="mailto:news@update.hrewards.com" data-router-locale="en" href="mailto:news@update.hrewards.com">news@update.hrewards.com</a> specifying "Abmelden" (Unsubscribe) in the subject line.</p> <p>1.3. Categories of recipients of personal data We use an external service provider (processor) to send our newsletters to subscribers. 1.4. Duration of storage of personal data As soon as you withdraw your consent to receive the newsletter, your personal data will be erased. 1.5. Transfer of data to third countries We do not intend to transfer this data to a third country or an international organization.</p> <p>1.6. Tracking in connection with the newsletter service We use tracking service providers in connection with our newsletter service in order to measure open and click rates of the emails. </p> <ol start="2"> <li> Existing customer marketing 2.1. Existing customer marketing in the context of loyalty program membership We reserve the right to send our loyalty program members emails with offers from our range of services as members’ marketing. Your membership allows us to process your personal data provided to us in your membership account or during a visit to one of our hotels for the purpose of members’ marketing. For the purpose of communicating with you as described above, we use the following communication media in accordance with the settings and permissions stored in the central guest profile:</li> </ol> <ul> <li>Email</li> <li>Telephone</li> <li>Post</li> </ul> <p>2.2. Existing customer marketing We reserve the right to send our guests emails with offers from our range of services as existing customer marketing. Our legitimate interest in engaging in existing customer marketing is to be able to offer our guests targeted, individual offers prepared on the basis of a previous booking (transaction) or existing customer relationship. We may process your personal data provided to us in a booking for a period of 12 months after the transaction was made in order to send marketing messages to existing customers. If no other booking or other transaction is made within this period, your personal data will no longer be processed for the purpose of existing customer marketing and will therefore be erased unless you have a newsletter subscription or your personal data must be retained for longer due to other arrangements. You may object at any time to the use of your email address for the purpose of sending marketing to existing customers without incurring any costs other than the transmission costs at basic rates. If your personal data is processed by us for the purpose of existing customer marketing, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing.</p> <p>2.3. Processed personal data We collect the following personal data in connection with existing customer marketing:</p> <ul> <li>First and last name </li> <li>Home address and, where different, billing and correspondence addresses</li> <li>Date of birth </li> <li>Gender, salutation, title </li> <li>Email address(es) if multiple addresses are used or specified</li> <li>Loyalty program membership numbers </li> <li>General interests, preferences, and wishes</li> </ul> <p>2.4. Purposes and legal bases of processing personal data We process your personal data for the following purposes and on the following legal bases:</p> <p>To send marketing messages about our offers and services to existing customers – the legal basis for this is Art. 6 (1) (f) GDPR. Our legitimate interest in engaging in existing customer marketing is to inform our members about their current membership status and send our members and existing customers targeted, individual, exclusive offers.</p> <p>You may object at any time to the use of your email address for the purpose of sending marketing to existing customers or members without incurring any costs other than the transmission costs at basic rates. More detailed information on exercising your right to object to the use of your email address for direct marketing measures is provided within this Privacy Policy.</p> <p>2.5. Categories of recipients of personal data When we carry out existing customer marketing measures, your personal data will only be disclosed to those employees in our company who can view our central guest database. In addition, we use an external service provider (processor) to send marketing messages to existing customers.</p> <p>2.6. Duration of storage of personal data If no other booking or other transaction is made within a period of 12 months, your personal data will no longer be processed for the purpose of existing customer marketing and will therefore be erased unless you have a newsletter subscription, are a loyalty program member, or your personal data must be retained for longer due to other arrangements.</p> <p>2.7. Transfer of data to third countries We do not intend to transfer this data to a third country or an international organization.</p> <p><strong>VII. Loyalty program membership, membership account (user account / account), communication</strong></p> <ol> <li> Membership/user account You can register as a member of the H Rewards loyalty program (user account / account) in accordance with the applicable Terms & Conditions of Membership by providing us with your full first name and last name, salutation, your current home address, your date of birth, your preferred email address and specifying a password. You can register in the following ways:</li> </ol> <ul> <li>on the H Rewards app</li> <li>on the H Rewards website </li> <li>during the booking process </li> <li>before using the high-speed Wi-Fi or</li> <li>after receiving an invitation to register sent out by a hotel employee</li> <li>by scanning a registration QR code</li> </ul> <p>Following your successful registration, a membership account will be created automatically based on the applicable Terms & Conditions of Membership. When you register to become a member, you are deemed to have agreed to the transfer of the data that you provided during your registration to the relevant operators of the brands of H World International.</p> <p>You can view and amend your personal details in the membership account. Any important information regarding your membership, such as your membership status, will also be displayed here. In the members’ area, you can book hotel accommodation or cancel bookings that you made on the website or the app specifying your membership details and you can redeem rewards according to your account status. You may cancel your membership at any time. The membership account will be automatically deleted after the final cancelation of the membership (see cancelation in the terms and conditions of membership).</p> <p>1.1 Processed personal data We process the following personal data as part of your membership of our own loyalty program: • First and last name • Home address and, if different, billing and communication addresses • Date of birth • Gender, salutation, title • Email address(es) if multiple addresses are used or specified • Phone number(s) if multiple numbers are used or specified • Loyalty program membership number • Preferences and wishes related to your stay • General interests, preferences, and wishes • Password • Reward redemptions</p> <p>1.2 Purposes and legal bases of processing personal data We process your personal data for the following purposes and on the following legal bases: To carry out and manage your membership of our loyalty program – the legal basis for this is the performance of our contract with you pursuant to Art. 6 (1) (b) GDPR. The legal bases for processing your personal data in connection with the creation and use of your membership account are your membership in accordance with the Terms & Conditions of the Loyalty Program as well as Art. 6 (1) (b) GDPR. To create, edit, manage, and update your membership account and to correctly deal with any credits and debits to your membership account as well as to provide our services as part of your membership of our H Rewards loyalty program. The legal basis for this is Art. 6 (1) (b) GDPR. To create statistics based on anonymized data analyses to improve and enhance products, services, and the contents of the H Rewards loyalty program. The legal basis for this is our legitimate interest in enhancing our loyalty program pursuant to Art. 6 (1) (f) GDPR. For authentication and fraud prevention in the context of your membership of the H Rewards loyalty program or a loyalty program of one of our cooperation partners, such as Miles & More or bahn.bonus. The legal basis for this is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. </p> <p>To ensure comprehensive recognition, in particular of members of our loyalty program, across all service contact points (in person and/or digital) at hotels belonging to H World International and to ensure automatic updates of your recurring wishes, preferences, and needs, e.g., always two pillows, in order for us to provide you with a high-quality service appropriate to the hotel brand. The legal basis for this is our legitimate interest pursuant to Art. 6 (1) (f) GDPR to provide our customers with the highest possible standard of service.</p> <p>1.3 Categories of recipients of personal data In the context of fulfilling the membership requirements it is necessary for us to transfer your data to various recipients. These are in particular the hotels of H World International and our cooperation partners. 1.4 Duration of storage of personal data Your membership account data will be stored until your membership is canceled. Any unredeemed points, rewards, and the membership status achieved will become invalid six months after the cancelation's effective date. 1.5 Transfer of data to third countries If you provide your membership number voluntarily for a stay in a hotel located in a third country, your data will be transferred to the hotel in question so that the points can be credited. </p> <p><strong>2. Communication in the context of a contract</strong> As part of the performance of the contract with you, we are required by law to inform you of any significant changes that occur during your stay. We primarily provide this information via email to the email address stored in the central customer profile. If this is no longer valid we reserve the right to contact you by different means, such as by post.</p> <p>2.1 Communication media For the purpose of communicating with you as described above, we use the following communication media in accordance with the settings and permissions stored in the central customer profile:</p> <ul> <li>Email</li> <li>Messenger services</li> <li>Telephone</li> <li>Post</li> </ul> <p>2.2 Mandatory communication as part of the loyalty program As part of operating the loyalty program, we are required by law to inform you of any changes to the program (Terms & Conditions of Membership). We usually provide this information via email to the email address stored in the membership account. If this is no longer valid we reserve the right to contact you by different means, such as by post. 2.3 Categories of recipients of personal data We use an external service provider to send out our communications. 2.4 Duration of storage of personal data As part of operating the loyalty program, we are required by law to inform you of any changes to the program. 2.5 Transfer of data to third countries We do not intend to transfer this data to a third country or an international organization. </p> <p><strong>3. Membership of a loyalty program of a cooperation partner</strong> We process personal data in connection with your membership of a loyalty program of one of our cooperation partners, such as Miles & More or bahn.bonus. [(List of cooperation partners)]/en/partners</p> <p>3.1 Processed personal data • Email address(es) if multiple addresses are used or specified • Loyalty program membership numbers </p> <p>3.2 Purposes and legal bases of processing personal data We process your personal data for the following purposes and on the following legal bases:</p> <p>To process bonus credits (points, miles, etc.) and other services rendered as part of your membership of the loyalty programs of our cooperation partners. The legal basis is our legitimate interest pursuant to Art. 6 (1) (b) GDPR.</p> <p>3.3 Categories of recipients of personal data It is necessary to transfer your data to the respective cooperation partner so that the bonus can be credited. 3.4 Duration of storage of personal data We will store your data for a period of 10 years. 3.5 Transfer of data to third countries The data will only be transferred to a third country in cases where the cooperation partner in question is located in a third country or if you have provided your membership number when making a reservation at a hotel in a third country. In these cases, the data will be transferred on the basis of Art. 49 (1) (b) GDPR.</p> <p><strong>VIII. Purchasing vouchers</strong> The voucher shop allows you to purchase general vouchers and hotel-specific vouchers. 1. Processed personal data We process the following personal data in connection with the purchase of vouchers:</p> <ul> <li>Salutation, title</li> <li>First and last name</li> <li>Email address</li> <li>Phone number</li> <li>Date of birth </li> <li>Address</li> <li>Payment details</li> </ul> <ol start="2"> <li><p> Purposes and legal bases of processing personal data We process your personal data for the following purposes and on the following legal bases: To handle the purchase of vouchers – the legal basis for this is Art. 6 (1) (b) GDPR.</p> </li> <li><p> Duration of storage of personal data The data that we received from you when you purchased vouchers will be stored for 10 years.</p> </li> <li><p> Categories of recipients of personal data We forward your data to a service provider in order to be able to send you the voucher. We also use various service providers to process the transaction, depending on the payment type. </p> </li> <li><p> Transfer of data to third countries If you purchase a voucher for a hotel in a third country, the data that we receive from you when you purchase the voucher will be transferred for processing to the third country where the hotel is located.</p> </li> </ol> <p>IX. Brokering hotel reservations On its website, Steigenberger Hotels GmbH acts as a broker for booking accommodation in hotels of third-party hotel operators <a target="_self" rel="" class="cursor-pointer underline hover:no-underline" data-href="/en/legal/operating-company" data-router-locale="en" href="/en/legal/operating-company">(see list of hotel operators)</a>. The parties entering into the accommodation contract are yourself and the respective hotel operator. As part of this brokering service it is necessary for us to transfer the data required for the fulfillment of the contract (e.g., first and last name of the guest, reservation period, email address) to the respective hotel operator. The legal basis for this is Art. 6 (1) (b) GDPR. If the brokering service is provided for a reservation in a hotel in a third country, the related transfer of data is based on Art. 49 (1) (b) GDPR.</p> <p>X. Reservations of tables in bars or restaurants or scheduling and booking of spa visits Steigenberger Hotels GmbH offers the possibility to reserve tables in bars or restaurants as well as to schedule and book spa visits in its hotels via the website and app. The RESERViSiON reservation tool is used for this purpose. Data processing for table reservations via RESERViSiON: We process your personal data via RESERViSiON to make the reservation and to prepare your visit to our restaurant (legal basis Art. 6 para. 1 p. 1 lit. b DSGVO or for voluntary information Art. 6 para. 1 p. 1 lit. a DSGVO). RESERViSiON provides us with your data for this purpose on our behalf. After your visit to the restaurant, your personal data will be deleted from RESERViSiON, unless you have created a user profile with RESERViSiON with your consent in order to make future reservations easier. The following data is stored here: Salutation, first name, surname, e-mail and telephone. If you voluntarily enter further data, this will also be stored in RESERViSiON: title, company, cost centre, street, house number, address suffix, postcode, town, VAT ID number, allergies, reason. You can have your user profile in RESERViSiON deleted at any time by sending an e-mail to RESERViSiON and revoking your consent (<a target="_self" rel="" class="cursor-pointer underline hover:no-underline" data-href="mailto:datenschutz@reservision.de" data-router-locale="en" href="mailto:datenschutz@reservision.de">datenschutz@reservision.de</a>). After your visit to the restaurant, we will send you an e-mail which you can use to rate us. If you do not wish to receive such an e-mail, you can object to it at any time by clicking on the relevant link in the confirmation of your reservation. With your rating you help us to improve our service and quality. Submitted ratings will only be published without reference to your person (anonymised). Data processing for scheduling and booking spa visits via RESERViSiON: We process your personal data via RESERViSiON to make the reservation and to prepare your visit to our spa (legal basis Art. 6 para. 1 p. 1 lit. b DSGVO or for voluntary information Art. 6 para. 1 p. 1 lit. a DSGVO). RESERViSiON provides us with your data for this purpose on our behalf. After your visit to the spa, your personal data will be deleted from RESERViSiON unless you have created a user profile at RESERViSiON with your consent in order to make future reservations easier. Only the following data will be stored here: Salutation, first name, surname, e-mail and telephone. If you voluntarily enter further data, this will also be stored in RESERViSiON: title, company, cost centre, street, house number, address suffix, postcode, town, VAT ID number, allergies, reason. You can have your user profile in RESERViSiON deleted at any time by sending an e-mail to RESERViSiON and revoking your consent (<a target="_self" rel="" class="cursor-pointer underline hover:no-underline" data-href="mailto:datenschutz@reservision.de" data-router-locale="en" href="mailto:datenschutz@reservision.de">datenschutz@reservision.de</a>). After your visit to the spa, we will send you an e-mail which you can use to rate us. If you do not wish to receive such an e-mail, you can object to it at any time by clicking on the relevant link in the confirmation of your reservation. With your rating you help us to improve our service and quality. Submitted ratings will only be published without reference to your person (anonymised). </p> <p>XI. Information regarding the use of cookies and payment service providers on this website 1. Transfer to third countries If you consent to the use of cookies , you are at the same time explicitly consenting to the transfer of your personal data pursuant to 49 (1) (a) GDPR to an insecure third country. The United States in particular is regarded by the Court of Justice of the European Union as a country that does not have an adequate level of data protection. There is a risk that your data may be processed by U.S. authorities for control and monitoring purposes and you are left with no effective legal remedies in that regard.</p> <p>As can be seen specifically from the [List of service providers / processors] (/en/service-providers-processors), our company uses service providers for certain tasks whose registered office is in a third country or who belong to an international group with companies in third countries or who themselves work with service providers based in a third country. The transfer of personal data to such service providers is permitted if the European Commission has decided that the third country in question offers an adequate level of protection (Art. 45 GDPR). In the absence of such a decision, our company or the service provider may transfer personal data to a third country or an international organization only if provisions are made for appropriate safeguards and if enforceable rights and effective legal remedies are available (Art. 46 (1) GDPR). If neither an adequacy decision pursuant to Art. 45 (3) GDPR has been made nor appropriate safeguards pursuant to Art. 46 GDPR are in place, the transfer of your personal data to a third country is only permissible under one of the following conditions:</p> <ul> <li>You have explicitly consented to the proposed transfer of data, after having been informed of the possible risks of such transfers for you due to the absence of an adequacy decision and appropriate safeguards</li> <li>The transfer is necessary for the performance of a contract between you and the controller or for the implementation of pre-contractual measures</li> </ul> <ol start="2"> <li> Integration of payment service providers for online payments To process online payments we use the following external service providers whose platforms you can freely choose between to process your payment:</li> </ol> <ul> <li>Concardis GmbH (Helfmann-Park 7, 65760 Eschborn, Germany, Tel. +49 (0)69 79220)</li> <li>American Express Payment Service Limited (Theodor-Heuss-Allee 112, 60486 Frankfurt/Main, Germany)</li> <li>Paypal S.à r.l. et Cie, S.C.A. (22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg)</li> <li>Computop Paygate GmbH (Schwarzenbergstraße 4, 96050 Bamberg, Germany)</li> <li>PPro & Nets If you wish to make an online payment this can be integrated into the booking or voucher purchase processes or you may do so via a corresponding link sent to an email address specified by you. If you click on such a link you will be forwarded to the payment platform. Further details regarding the handling of your personal data in this connection are provided there.</li> </ul> <p><strong>3. Cookies</strong> 3.1 Information about cookies We use cookies on our website. Cookies are small files created automatically by your browser and stored on your device (laptop, tablet, smartphone, or similar) when you visit our website. Cookies do not cause any harm to your device and do not contain any viruses, Trojans, or other malware. Their purpose is to store information obtained in connection with the specific device that you use. This does not mean, however, that we gain direct knowledge of your identity. Using cookies has a twofold objective: On the one hand, we want to make it more convenient for you to use our website and, on the other hand, we want to gather statistics on the use of our website and analyze these with the aim of optimizing the services we offer you. To achieve this, we use cookies for the following purposes: </p> <p>Necessary functions:<br/>These cookies contribute significantly to improving your browsing and booking experience on our website. Basic functionalities and applications such as shopping carts or electronic billing procedures are optimized, and their use is made possible. These cookies do not collect information about you that can be used for marketing campaigns or statistical analysis. These cookies are necessary for the use of the website, the legal basis for these cookies is Art. 6 para. 1 lit. b) DS-GVO and § 25 para. 2 Telekommunikation-Telemedien-Datenschutzgesetz (TTDSG).</p> <p>• Statistical analysis:<br/>Statistical analysis is the processing and presentation of data on user actions and interactions on websites and apps (e.g., number of page visits, number of unique visitors, number of returning visitors, entry and exit pages, time spent, bounce rate, click of buttons, booking or voucher order) and, if applicable, the classification of users into groups based on technical data on the software settings used (e.g., browser type, operating system, language setting, screen resolution). The legal basis for these cookies is consent in accordance with Art. 6 (1) a) DS-GVO and § 25 (1) TTDSG.</p> <p>• Personalized advertising:<br/>Certain functions of websites and apps are used to display personalized advertising materials (ads or commercials) to users in other contexts, for example on other websites, platforms, or apps. For this purpose, conclusions about the interests of users are drawn from demographic information, search terms used, contextual content, user behavior on websites and in apps, or from the location of users. Based on these interests, advertising materials will be selected and displayed on online content of other providers in the future. The legal basis for these cookies is consent in accordance with Art. 6 (1) a) DS-GVO and § 25 (1) TTDSG.</p> <p>• Personalized advertising incl. data transfer to other countries:<br/>Certain functions of websites and apps are used to display personalized advertising materials (ads or commercials) to users in other contexts, for example on other websites, platforms or apps. For this purpose, conclusions about the interests of users are drawn from demographic information, search terms used, contextual content, user behavior on websites and in apps or from the location of users. Based on these interests, advertising materials will be selected and displayed at other online content providers in the future. The legal basis for these cookies is consent pursuant to Art. 6 (1) a) DS-GVO and Section 25 (1) TTDSG. In addition, you explicitly consent to the transfer of your personal data to other countries (USA) according to Art. 49 para. 1 lit. a) DSGVO. In the listed countries, there is no adequate level of data protection and there are no suitable guarantees for the protection of your personal data (such as lack of enforcement of data subject rights and possible, inappropriate access to your personal data by state authorities). Your consent to the transfer of your personal data to third countries is voluntary and can be revoked at any time via our Privacy Policy. Further information on the processing of your personal data, including third country transfers, can also be found in our Privacy Policy.</p> <p>3.2 Using the cookie consent tool to specify your cookie settings You can use the cookie consent tool to adjust your cookie settings at any time. Click the button in the lower left corner of your screen to open the tool and select your settings for the above mentioned categories of cookies by giving or refusing your consent to the use of these cookies in your browser. In this Privacy Policy you will find information about the partner companies and third-party providers who place cookies on our website and what categories these cookies belong to. </p> <p><a class="cursor-pointer underline hover:no-underline">Consent Tool</a></p> <p>3.3 Using your browser to specify your cookie settings You can specify in your browser that cookies should only be stored with your consent. Most browsers automatically accept cookies. However, you can reconfigure your browser so that no cookies are stored on your computer or that a warning appears before a new cookie is created. However, if all cookies are deactivated you may not be able to use all the functions of our website. If you want to accept only Steigenberger cookies but not cookies from our partners, then please select the option “Block third-party cookies” in your browser. To find out how you can refuse new cookies and deactivate existing ones, go to the Help function on the menu bar of your web browser. If you use shared computers that accept cookies and flash cookies, we recommend that you always log out completely at the end of your session. </p> <p><strong>3.4 Cookie providers used</strong></p> <p>Category Duration Purpose </p> <p>AWIN AG Eichhornstraße 3 10785 Berlin, Germany Necessary functions 90 days Billing purposes </p> <p>Criteo SA 32 Rue Blanche, 75009 Paris, France Personalized advertising 13 months Advertising </p> <p>Dailypoint: Toedt, Dr. Selk & Coll. GmbH Augustenstr. 79, 80333, Munich, Germany Personalized advertising 90 days max. Profiling, advertising </p> <p>DerbySoft (Hong Kong) Limited 14800 Landmark Blvd., Suite 640, Dallas, Texas 75254, USA Necessary functions 30 days/24 months Billing purposes </p> <p>Facebook Inc. 1 Hacker Way, Menlo Park 94025, CA. USA Personalized advertising 28 days Advertising </p> <p>Mapp Intelligence: Webtrekk GmbH Robert-Koch-Platz 4, 10115 Berlin, Germany Statistical analysis 6 months Analysis </p> <p>Google Ads: Google Ireland Ltd. Gordon House, Barrow Street, Dublin 4, Ireland Personalized advertising 24 months max. Advertising</p> <p>Youtube Video: Google Ireland Ltd. Gordon House, Barrow Street, Dublin 4, Ireland Personalized advertising 24 months max. Advertising </p> <p>The Hotels Network S.L. Calle Muntaner, 262, 3º-1ª, 08021 Barcelona, Spain Storage period: Up to 2 years, Purpose: Advertising</p> <p>Microsoft Advertising/Bing Ads: Microsoft Corporation One Microsoft Way, Redmond, WA 98052-6399, USA Personalized advertising 13 months Advertising </p> <p>Duetto Research Inc, 333 Bush St San Francisco, CA, 94104-2806 United States; Personalized advertising, 180 days period of storage, purpose Analysis</p> <p>TripAdvisor LLC 400 1st Avenue, Needham, MA 02494 USA Personalized advertising 24 months max. Advertising </p> <p>Wingify Software Pvt. Ltd. (VWO) 14th Floor, KLJ Tower North, Netaji Subhash Place, Pitam Pura, Delhi 110034, India Personalized advertising, 10 years period of storage, purpose A/B Testing</p> <p>LinkedIn LinkedIn Ireland Unlimited, Wilton Place, Dublin 2, Irland; Personalized advertising, 180 days period of storage, purpose advertising</p> <p>zenloop GmbH Erich-Weinert-Straße 145, 10409 Berlin, Germany Statistical analysis 24 months max. Analysis </p> <p><strong>Further information on the providers of cookies</strong></p> <p><strong>zenloop</strong> Recipient: zenloop GmbH, Erich-Weinert-Straße 145, 10409 Berlin, Germany Process: Marketing tools for personalized advertising are all similar in terms of their technical functions, which is why reference is made to this process in the following text with regard to all the providers mentioned above. Providers of personalized advertising use technologies such as cookies, tracking pixels, and device fingerprinting in order to show users ads that are relevant to them and to improve the reports on campaign performance. These providers enable us to display interest-based ads on the providers’ websites and on our website. This process also includes processing information stored on the users’ devices. The providers offer functions for this purpose that are generally referred to as remarketing. Remarketing allows website users to be recognized on other websites within the advertising network of the provider and to be presented with ads tailored to their interests. The ads may also be related to products and services that the user has already looked at on our website. This is made possible by analyzing user interaction on our website, e.g., what offers interest the users, in order to show them targeted advertising on other websites even after they leave our website. When a user visits our website the relevant provider places a cookie on the user’s device. The provider then uses cookies or tracking pixels to process the information generated by the users’ devices about their use of our website and their interaction with it as well as their access data, in particular their IP address, browser information, the website visited before the current one, and the date and time of the server request in order to display and analyze personalized ads. The providers mentioned above also use the conversion function to draw attention to our attractive offers with the help of advertising material on external websites. We are able to determine how successful individual campaigns are with regard to the advertising campaign data. The providers use ad servers to deliver this advertising material. We use ad server cookies for this purpose, which enable us to measure certain parameters for measuring reach – e.g., the insertion of ads, the time spent looking at them, or the clicks made by users. This process also includes processing information stored on the users’ devices. If a user lands on our website via one of the provider's ads, the provider will place a cookie on the user’s device. The provider uses cookies or tracking pixels to process the information generated by the users’ devices about interaction with our advertising material (accessing certain web pages or clicking on an ad) as well as the users’ access data, in particular their IP address, browser information, the website visited before the current one, and the date and time of the server request in order to analyze and visualize the measured reach of our ads. Based on the marketing tools used, the users’ browser automatically establishes a direct connection to the provider’s server. </p> <p><strong>Derbysoft</strong> Recipient: DerbySoft (Hong Kong) Limited, 14800 Landmark Blvd., Suite 640, Dallas, Texas 75254, USA Process: Derbysoft is a web service for measuring reach as well as for classic conversion tracking. Derbysoft therefore uses technologies such as cookies and tracking pixels in order to track a specific user behavior on the websites of our advertising partners. Derbysoft uses cookies or tracking pixels to process the information generated by the users’ devices about interactions with our advertising material (accessing certain internet pages or clicking on an ad) as well as the users’ access data, in particular their IP address, browser information, the website visited before the current one, and the date and time of the server request in order to analyze and visualize the measured reach of our advertisements. Based on the marketing tools used, the users’ browser automatically establishes a direct connection to the provider’s server. </p> <p><strong>Mapp Intelligence</strong> This website uses Mapp Intelligence, a web analysis service of Webtrekk GmbH whose registered office is in Berlin, Germany.<br/>Recipient: Webtrekk GmbH, Robert-Koch-Platz 4, 10115 Berlin, Germany Process: The Mapp Intelligence web analysis service uses technologies such as cookies, tracking pixels, and device fingerprinting in order to track a specific user behavior on websites and therefore transfers information to a server of Mapp located in Nuremberg, Germany, where this information is stored. This process also includes processing information stored on the users’ devices. With the help of tracking pixels embedded in websites and the cookies placed on the users’ devices, Mapp Intelligence processes the information generated about the usage of our website by the users’ devices, such as that a specific web page was accessed, and the users’ access data for the purpose of statistical website usage analysis. The access data includes in particular the IP address, browser information, the website visited before the current one, and the date and time of the server request. According to information from Mapp, the IP addresses are anonymized and erased immediately during preprocessing. On behalf of the operator of this website, Mapp will use the information collected by Mapp Intelligence in order to analyze how you use the website, to prepare reports on website activities, and to provide the website operator with further services associated with the use of the website and the internet. For further information about the terms and conditions of use and data privacy at Mapp please go to <a target="_blank" rel="nofollow" class="cursor-pointer underline hover:no-underline" data-href="https://docs.mapp.com/display/CDBD/Allgemeine+Nutzungsbedingungen" data-router-locale="en" href="https://docs.mapp.com/display/CDBD/Allgemeine+Nutzungsbedingungen">https://docs.mapp.com/display/CDBD/Allgemeine+Nutzungsbedingungen</a> or <a target="_blank" rel="nofollow" class="cursor-pointer underline hover:no-underline" data-href="https://www.webtrekk.com/privacy-notice.html" data-router-locale="en" href="https://www.webtrekk.com/privacy-notice.html">https://www.webtrekk.com/privacy-notice.html</a> </p> <p><strong>The Hotels Network</strong> Recipient: The Hotels Network S.L., Calle Muntaner, 262, 3º-1ª, 08021 Barcelona, Spain Using The Hotels Network, we are able to measure your user behavior in an anonymised way to better understand how visitors use our website and offer a more relevant user experience. To enable this, The Hotels Network generates a backend hash with website users data. As any analysis or processing is always anonymised, it is impossible to identify the user in person from this data. Device identification data (IP addresses, MAC addresses) and user behavior data (visited URLs, completed bookings) are collected from end users and relevant content is displayed to them depending on their behavior.</p> <p><strong>Wingify</strong> Our websites use Visual Website Optimizer, an A/B testing tool/web analytics service provided by Wingify, 14th Floor, KLJ Tower North, Netaji Subhash Place, Pitam Pura, Delhi 110034, India (hereinafter "Wingify"). Wingify uses cookies that enable an analysis of your use of our websites. The information generated by the cookies about your use of this website and your IP address are transmitted to a Wingify server in Belgium and stored there. For more information about the cookies used, please see this <a target="_blank" rel="nofollow" class="cursor-pointer underline hover:no-underline" data-href="https://vwo.com/knowledge/what-are-the-cookies-stored-by-vwo/" data-router-locale="en" href="https://vwo.com/knowledge/what-are-the-cookies-stored-by-vwo/">link</a>. On our behalf, Wingify uses this information to evaluate your use of the website and, based on this, to optimize our websites. Wingify stores your data and these are deleted regularly. You can prevent the storage of cookies by setting your browser software accordingly or delete them. You can also object to the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Wingify as well as the processing of this data altogether under this <a target="_blank" rel="nofollow" class="cursor-pointer underline hover:no-underline" data-href="https://vwo.com/opt-out/" data-router-locale="en" href="https://vwo.com/opt-out/">link</a>. Details on the handling of your personal data can be found at the following <a target="_blank" rel="nofollow" class="cursor-pointer underline hover:no-underline" data-href="https://vwo.com/privacy-policy/" data-router-locale="en" href="https://vwo.com/privacy-policy/">link</a>.</p> <p><strong>3.5 Local storage of data</strong> To optimize the design of our website, we collect the following data and store it locally on your device (e.g., in the browser). Provider/tool Category Duration Purpose <a target="_blank" rel="nofollow" class="cursor-pointer underline hover:no-underline" data-href="http://www.hrewards.com" data-router-locale="en" href="http://www.hrewards.com">www.hrewards.com</a> Necessary functions 365 days Log in Token Cat UID Member level Currency</p> <p><strong>3.6 Integration of services and content of third-party providers (capture of IP addresses by third-party services)</strong></p> <p>Content of third parties (hereinafter referred to as “third-party providers”) is embedded in our online presence. To use such content, it is technically required to transfer the user’s IP address to the relevant third-party provider. This is because without the IP address the third-party providers would not be able to send the content embedded in the website to the relevant user’s browser. We have no influence on whether a third-party provider saves the IP address, e.g., for statistical purposes, or uses it in any other way. We use the following third-party providers on our website: </p> <p><strong>Third-party provider</strong></p> <p>MapTiler AG Höfnerstrasse 98 Unterägeri, Zug 6314 Switzerland <strong>Function</strong> Displaying maps on websites <strong>Purpose</strong> Maintaining, ensuring and improving the quality of products and services, in particular improving the user experience. </p> <p>Monotype Imaging Holdings, Inc., 600 Unicorn Park Drive, Woburn, Massachusetts 01801, USA Myfonts.com <strong>Function</strong> displaying text on websites <strong>Purpose</strong> Maintaining, ensuring and improving the quality of products and services, in particular improving the user experience. </p> <p><strong>Shiji Deutschland GmbH</strong> Saarbrücker Str. 36 A, 10405 Berlin, Germany <strong>Function</strong> B2B Software-as-a-Service platform for evaluating customer feedback provided at various touch points <strong>Purpose</strong> Customer and product reviews for quality management and improving the customer experience </p> <p><strong>Status of and updates to the Privacy Policy</strong> This Privacy Policy is valid from July 30th, 2024. We will update this Privacy Policy from time to time in the event of relevant changes to our website, the way in which we process personal data, or changes in the law. The updated version will be valid from the date of its publication. In the event of significant changes to this Privacy Policy you will be notified in good time before the changes come into effect by a corresponding notice on our website. Our guests may also be notified of the changes by email or in another way.</p> </div></div></div></div></div></main><div style="display:contents"><footer class="rtl:text-base w-full pb-5 md:py-8 lg:pt-20 bg-plum dark:bg-dm-panel-bg text-white font-hrewards text-sm"><div class="mx-auto w-full max-w-container px-5 xl:px-0"><div class="-mx-5 flex flex-wrap"><div class="w-full flex-col md:order-none md:mb-8 md:w-1/3 md:px-4 lg:mb-12 lg:w-1/4 lg:px-5 flex"><div class="w-full border-b border-light-200 md:border-none"><button class="flex w-full appearance-none items-center justify-between px-4 py-5 focus:outline-none ltr:text-left rtl:text-right md:mb-3 md:cursor-text md:px-0 md:py-0" id="headlessui-disclosure-button-:R4mae5j6:" type="button" aria-expanded="false" data-headlessui-state=""><span class="w-full text-white uppercase font-bold">Quick Links</span><svg stroke="currentColor" fill="currentColor" stroke-width="0" viewBox="0 0 24 24" class="ml-auto rotate-0 transform text-xl md:hidden" height="1em" width="1em" xmlns="http://www.w3.org/2000/svg"><g><path fill="none" d="M0 0h24v24H0z"></path><path d="M12 13.172l4.95-4.95 1.414 1.414L12 16 5.636 9.636 7.05 8.222z"></path></g></svg></button><div class="hidden md:block"><ul class="flex w-full flex-col items-start"><li class="pb-2 last:pb-0"><a target="_self" rel="" class="cursor-pointer transition duration-300 font-medium hover:text-plum-400 focus:text-plum-400" data-href="/loyalty" data-router-locale="en" href="/en/loyalty">About H Rewards</a></li><li class="pb-2 last:pb-0"><a target="_self" rel="" class="cursor-pointer transition duration-300 font-medium hover:text-plum-400 focus:text-plum-400" data-href="/corporate/staysmart" data-router-locale="en" href="/en/corporate/staysmart">Staysmart</a></li><li class="pb-2 last:pb-0"><a target="_blank" rel="" class="cursor-pointer transition duration-300 font-medium hover:text-plum-400 focus:text-plum-400" data-href="https://jobs.deutschehospitality.com/eng" data-router-locale="en" href="https://jobs.deutschehospitality.com/eng">Career</a></li><li class="pb-2 last:pb-0"><a target="_self" rel="" class="cursor-pointer transition duration-300 font-medium hover:text-plum-400 focus:text-plum-400" data-href="/partners" data-router-locale="en" href="/en/partners">Partner</a></li><li class="pb-2 last:pb-0"><a target="_self" rel="" class="cursor-pointer transition duration-300 font-medium hover:text-plum-400 focus:text-plum-400" data-href="/csr" data-router-locale="en" href="/en/csr">CSR</a></li><li class="pb-2 last:pb-0"><a target="_self" rel="" class="cursor-pointer transition duration-300 font-medium hover:text-plum-400 focus:text-plum-400" data-href="/help-center/contact" data-router-locale="en" href="/en/help-center/contact">Contact</a></li><li class="pb-2 last:pb-0"><a target="_self" rel="" class="cursor-pointer transition duration-300 font-medium hover:text-plum-400 focus:text-plum-400" data-href="/help-center/faq" data-router-locale="en" href="/en/help-center/faq">FAQ</a></li><li class="pb-2 last:pb-0"><a target="_self" rel="" class="cursor-pointer transition duration-300 font-medium hover:text-plum-400 focus:text-plum-400" data-href="/app" data-router-locale="en" href="/en/app">H Rewards App</a></li><li class="pb-2 last:pb-0"><a target="_self" rel="" class="cursor-pointer transition duration-300 font-medium hover:text-plum-400 focus:text-plum-400" data-href="/checkin" data-router-locale="en" href="/en/checkin">Check-In</a></li></ul></div></div></div><div class="w-full flex-col md:order-none md:mb-8 md:w-1/3 md:px-4 lg:mb-12 lg:w-1/4 lg:px-5 order-7 flex"><div class="flex flex-col items-center px-4 pt-8 text-center md:items-start md:px-0 md:py-0 ltr:md:text-left rtl:md:text-right"><span class="w-full text-white uppercase font-bold mb-3">H Rewards App</span><div class="inlin-flex -mb-3 w-full flex-col pt-1 ltr:-mr-3 rtl:-ml-3" style="font-size:0"><a href="https://apps.apple.com/en/app/h-rewards-hotelzimmer-buchen/id1554067603" target="_blank" rel="nofollow noreferrer" class="inline-block transition duration-300 hover:opacity-75 focus:opacity-75 focus:outline-none mb-3 ltr:mr-3 rtl:ml-3"><img alt="App Store" loading="lazy" width="120" height="40" decoding="async" data-nimg="1" style="color:transparent" src="/_next/static/media/en.7871e5bb.svg"/></a><a href="https://play.google.com/store/apps/details?id=com.hrewards.app&hl=en&gl=US" target="_blank" rel="nofollow noreferrer" class="inline-block transition duration-300 hover:opacity-75 focus:opacity-75 focus:outline-none mb-3 ltr:mr-3 rtl:ml-3"><img alt="Google Play" loading="lazy" width="135" height="40" decoding="async" data-nimg="1" style="color:transparent" src="/_next/static/media/en.c67f8b33.svg"/></a></div></div></div><div class="w-full flex-col md:order-none md:mb-8 md:w-1/3 md:px-4 lg:mb-12 lg:w-1/4 lg:px-5 order-8 flex"><div class="flex flex-col items-center px-4 pt-8 text-center md:items-start md:px-0 md:py-0 ltr:md:text-left rtl:md:text-right"><span class="w-full text-white uppercase font-bold mb-3">Steigenberger Hotels GmbH</span><div class="whitespace-pre-wrap text-sm"><p>Lyoner Straße 25 60528 Frankfurt am Main Germany</p> </div></div></div><div class="w-full flex-col md:order-none md:mb-8 md:w-1/3 md:px-4 lg:mb-12 lg:w-1/4 lg:px-5 flex"><div class="flex flex-col items-center px-4 pt-8 text-center md:items-start md:px-0 md:py-0 ltr:md:text-left rtl:md:text-right"><span class="w-full text-white uppercase font-bold mb-3"> Pay at H Rewards.com using:</span><ul class="-mr-2 flex w-full flex-wrap justify-center pb-2 pt-1 md:justify-start"><li class="pb-2 pr-2"><img alt="mastercard" loading="lazy" width="52" height="35" decoding="async" data-nimg="1" style="color:transparent" srcSet="/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fmastercard%402x.31cd3295.png&w=100&q=75 1x, /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fmastercard%402x.31cd3295.png&w=500&q=75 2x" src="/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fmastercard%402x.31cd3295.png&w=500&q=75"/></li><li class="pb-2 pr-2"><img alt="jcb" loading="lazy" width="52" height="35" decoding="async" data-nimg="1" style="color:transparent" srcSet="/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fjcb%402x.cd8f2f40.png&w=100&q=75 1x, /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fjcb%402x.cd8f2f40.png&w=500&q=75 2x" src="/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fjcb%402x.cd8f2f40.png&w=500&q=75"/></li><li class="pb-2 pr-2"><img alt="paypal" loading="lazy" width="52" height="35" decoding="async" data-nimg="1" style="color:transparent" srcSet="/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fpaypal%402x.974d1ea5.png&w=100&q=75 1x, /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fpaypal%402x.974d1ea5.png&w=500&q=75 2x" src="/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fpaypal%402x.974d1ea5.png&w=500&q=75"/></li><li class="pb-2 pr-2"><img alt="americanexpress" loading="lazy" width="52" height="35" decoding="async" data-nimg="1" style="color:transparent" srcSet="/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Famericanexpress%402x.0f175544.png&w=100&q=75 1x, /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Famericanexpress%402x.0f175544.png&w=500&q=75 2x" src="/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Famericanexpress%402x.0f175544.png&w=500&q=75"/></li><li class="pb-2 pr-2"><img alt="visa" loading="lazy" width="52" height="35" decoding="async" data-nimg="1" style="color:transparent" srcSet="/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fvisa%402x.1473beec.png&w=100&q=75 1x, /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fvisa%402x.1473beec.png&w=500&q=75 2x" src="/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fvisa%402x.1473beec.png&w=500&q=75"/></li><li class="pb-2 pr-2"><img alt="dinersclub" loading="lazy" width="52" height="35" decoding="async" data-nimg="1" style="color:transparent" srcSet="/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fdinersclub%402x.561bb371.png&w=100&q=75 1x, /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fdinersclub%402x.561bb371.png&w=500&q=75 2x" src="/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fdinersclub%402x.561bb371.png&w=500&q=75"/></li><li class="pb-2 pr-2"><img alt="klarna" loading="lazy" width="52" height="35" decoding="async" data-nimg="1" style="color:transparent" srcSet="/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fklarna%402x.1ae5514f.png&w=100&q=75 1x, /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fklarna%402x.1ae5514f.png&w=500&q=75 2x" src="/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fklarna%402x.1ae5514f.png&w=500&q=75"/></li></ul><p class="w-full text-xs text-light-500 rtl:text-sm">Please note that there may be a variation in payment methods offered at individual hotels.</p></div></div></div></div><div class="mx-auto w-full max-w-container px-5 xl:px-0"><div class="flex w-full flex-col items-center justify-center sm:flex-row md:mt-0 lg:-mx-3 lg:justify-start mt-8"><a target="_blank" rel="" class="cursor-pointer relative px-3 last:overflow-hidden font-medium hover:text-plum-400 focus:text-plum-400 text-plum-400 underline" data-href="/legal/data-protection" data-router-locale="en" href="/en/legal/data-protection">Privacy Policy<span class="absolute bottom-0 top-0 my-auto hidden h-3 w-px bg-white ltr:right-0 ltr:-mr-px rtl:left-0 rtl:-ml-px sm:block"></span></a><a target="_blank" rel="" class="cursor-pointer relative px-3 last:overflow-hidden font-medium hover:text-plum-400 focus:text-plum-400" data-href="/legal/imprint" data-router-locale="en" href="/en/legal/imprint">Imprint<span class="absolute bottom-0 top-0 my-auto hidden h-3 w-px bg-white ltr:right-0 ltr:-mr-px rtl:left-0 rtl:-ml-px sm:block"></span></a><a target="_blank" rel="" class="cursor-pointer relative px-3 last:overflow-hidden font-medium hover:text-plum-400 focus:text-plum-400" data-href="/legal/terms-of-participation" data-router-locale="en" href="/en/legal/terms-of-participation">H Rewards terms of participation<span class="absolute bottom-0 top-0 my-auto hidden h-3 w-px bg-white ltr:right-0 ltr:-mr-px rtl:left-0 rtl:-ml-px sm:block"></span></a><a target="_blank" rel="" class="cursor-pointer relative px-3 last:overflow-hidden font-medium hover:text-plum-400 focus:text-plum-400" data-href="/legal/operating-company" data-router-locale="en" href="/en/legal/operating-company">Operating Company<span class="absolute bottom-0 top-0 my-auto hidden h-3 w-px bg-white ltr:right-0 ltr:-mr-px rtl:left-0 rtl:-ml-px sm:block"></span></a><a target="_blank" rel="" class="cursor-pointer relative px-3 last:overflow-hidden font-medium hover:text-plum-400 focus:text-plum-400" data-href="/legal/travel-policy" data-router-locale="en" href="/en/legal/travel-policy">Travel Policy<span class="absolute bottom-0 top-0 my-auto hidden h-3 w-px bg-white ltr:right-0 ltr:-mr-px rtl:left-0 rtl:-ml-px sm:block"></span></a><a target="_blank" rel="" class="cursor-pointer relative px-3 last:overflow-hidden font-medium hover:text-plum-400 focus:text-plum-400" data-href="/legal/terms-conditions" data-router-locale="en" href="/en/legal/terms-conditions">Terms & Conditions<span class="absolute bottom-0 top-0 my-auto hidden h-3 w-px bg-white ltr:right-0 ltr:-mr-px rtl:left-0 rtl:-ml-px sm:block"></span></a></div></div></footer></div></div></div><script id="__NEXT_DATA__" type="application/json">{"props":{"pageProps":{"locale":"en","preview":false,"messages":{"member-menu":{"login":"Login","aria_close":"Close","member":"Member","dashboard":"Dashboard","my_bookings":"My Bookings","my_rewards":"My Rewards","my_settings":"My Profile","logout":"Log Out","loading":"Loading","points":"Points","my_preferences":"My Preferences","my_favorites":"My Favorites","notification_logout":"Logged out","promotions":"Promotions","my_specials":"My Preferences"},"login-modal":{"registration_title":"Not a member yet?","registration_description":"At H Rewards, you can enjoy the benefits of your membership right from the start.","registration_features":"Exclusive and appealing rates for members\n Highly attractive redemption options\n Appreciation of long-term customers","registration_button":"Become an H Rewards member","login_tab":"Login","registration_tab":"Registration","login_title":"Sign In","login_description":"Sign in for Steigenberger Hotels \u0026 Resorts, MAXX Hotels, Jaz in the City, IntercityHotel or Zleep Hotels.","login_email":"E-Mail address","login_password":"Password","login_button":"Login","login_reset_password":"Forgot Password?","aria_back_to_login":"Back to Login","reset_password_title":"Password Reset","reset_password_description":"In order to reset your password, please enter your e-mail address and then click the link provided in the e-mail.","reset_password_email":"E-Mail address","reset_password_button":"Reset Password","reset_password_title_link_sent":"Password Link has been sent","reset_password_title_link_sent_description":"We have sent you an email with a link to reset your password. You can then log in here with your new password.","reset_password_title_link_sent_button":"Back to Login","aria_close":"Close","aria_description":"Login/Registration","aria_title":"Login/Registration","validation_email_required":"Please enter your E-mail","validation_email_email":"Please enter valid E-mail","validation_password":"Please enter your password","validation_email_password_invalid":"E-mail or password are invalid, please try again","unknown_error":"Unknown error, please try again later","continue-with-email":"Continue with Email","continue-with-apple":"Continue with Apple","or":"or","error-modal-email-text":"Please allow sharing the email in your {method} account settings and then try again","error-modal-text":"Something went wrong, please try again","account-exists":"Account exists","account-exists-text":"Account with this email already exists. To log in via Social Login, please enter your existing H Rewards account password.","otp":"One Time Code","otp_login_description":"We have just sent a one-time verification code to {email}. To complete the authentication process, please check your email inbox (including spam folder) and enter the code below:","validation_otp_invalid":"Invalid code","validation_otp_required":"Code is required","continue-with-google":"Continue with Google","login-with-otp":"Login with One-Time Code","login_otp_title":"Login with One-Time Code","login_otp_description":"In order to receive your one-time code, please enter your e-mail address. The code will be sent to the provided address and will be valid for 15 minutes.","continue-with-facebook":"Continue with Facebook","find_reservation":"Find Reservation"},"member-area":{"dashboard":"Dashboard","logout":"Logout","access_denied":"Access Denied","access_denied_description":"\u003cp\u003ePlease login to access this page\u003c/p\u003e\n","access_denied_button":"Login","my_rewards":"My Rewards","welcome_back":"Welcome Back","points":"Reward Points","view_rewards":"View Rewards","my_membership":"My Membership","membership_status":"Status","nights":"Qualifying night(s)","membership_number":"Membership Number","membership_description":"\u003cp\u003eIf you have any questions about your membership, please contact our H Rewards service team on \u003cstrong\u003e\u003ca href=\"tel:496980885788\"\u003e+4969 80 88 57 88\u003c/a\u003e\u003c/strong\u003e or email \u003ca href=\"mailto:service@hrewards.com\"\u003eservice@hrewards.com\u003c/a\u003e\u003c/p\u003e\n","active_rewards":"Available Rewards","see_bonus":"View More","redeem_points":"Redeem Reward Points","conditions":"Conditions","hotels":"Hotels","inactive_rewards":"Inactive Rewards","voucher_redeem_error":"Error activating voucher, please try again later","my_settings":"My Profile","account_details":"Account Details","email":"E-mail","name":"Name","password":"Password","reset_password":"Reset Password","password_reset_error":"Unknown Error, please try later","personal_data":"Personal Data","address":"Address","change_address":"Change Address","birthday":"Birthday","change_birth_date":"Change Birthday","unknown_error":"Unknown Error","cancel":"Cancel","save":"Save","password_reset_success":"Password reset link was sent to your E-mail","voucher_redeem_confirmation":"Are you sure?","back_to_all_bookings":"Back to my bookings","book_now":"Book Now","booking_details":"Bookings Details","cancelled_bookings":"Cancelled Bookings","in_days":"In {days} days","my_bookings":"My Bookings","no_bookings_yet":"Reservations not found","no_cancelled_bookings_yet":"No cancelled bookings yet","no_past_bookings_yet":"No past bookings yet","no_upcoming_bookings_yet":"No upcoming bookings yet","past_bookings":"Past Bookings","reservation_numbers":"Confirmation Number","show_details":"Show details","to":"to","today":"today","tomorrow":"tomorrow","travel_dates":"Travel Dates","upcoming_bookings":"Upcoming Bookings","seo_dashboard_title":"Account Dashboard | H Rewards","seo_my_settings_title":"My settings | H Rewards","seo_my_rewards_title":"My Rewards | H Rewards","seo_my_bookings_title":"My bookings | H Rewards","seo_booking_details_title":"My booking | H Rewards","my_old_bookings":"Bookings from Global.Hrewards","newsletters":"Newsletters","my_preferences":"My Preferences","preferences":"Preferences","seo_preferences_title":"My Preferences","brand-preferences":"Brand Preferences","favorites":"Favorite Hotels","my_favorites":"My Favorites","no_favorites":"\u003cp\u003eYou don\u0026#39;t have any favorite hotels. \u003ca href=\"/find-a-hotel\"\u003eSearch now\u003c/a\u003e\u003c/p\u003e\n","seo_favorites_title":"My Favorites","valid_to":"Valid to","status_points":"Qualifying charges in €","notification_logout":"Logged out","bookings_nights":"Nights","points_title":"Points History","promotions_description":"Enter promo code in the form below to receive your bonus","promo_code_success_message_pending":"Code successfully redeemed, you will receive your bonus soon","promo_code_success_message":"Code successfully redeemed","promo_code_fail_reason_2":"Code is already activated","promo_code_fail_reason_1":"Unknown error, please try later","promo_code_fail_reason_0":"Code not found or not active","promo_code":"Promo Code","validation_code_required":"Code is required","submit_promo_code":"Redeem Code","promotions":"Promotions","points_history":"Points History","points_history_is_empty":"Points history is empty","my_profile":"My Profile","my_status":"My Status","my_specials":"My Preferences","overview":"Overview","seo_profile_title":"My Profile","points_after_redemption":"Reward points after:","description":"Description","reward_price":"{points} reward points","reached":"Reached on","points_next_reward_description":"only {nights} status nights or {points} status points more needed","rewards":"Rewards","all_rewards":"All Rewards","not_enough_points_description":"You still need {points} reward points to be able to order your reward!","hrewards_service_center_title":"H Rewards Service Center","hrewards_service_center_description":"\u003cp\u003eMon.-Fri. 9:00-18:00\u003c/p\u003e\n\u003cp\u003ePhone: \u003ca href=\"tel:496980885788\"\u003e+4969 80 88 57 88\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eE-mail: \u003ca href=\"service@hrewards.com\"\u003eservice@hrewards.com\u003c/a\u003e\u003c/p\u003e\n","member_benefit_1":"Reward points (per 1 € turnover)","member_benefit_2":"Discount on the room rate","member_benefit_3":"Preferential access to private sales promotions","member_benefit_4":"Exclusive offers - only for our members","member_benefit_5":"The \"we-always-have-a-room-for-you\" guarantee","member_benefit_6":"Upgrade to the next higher room category","member_benefit_7":"Discount on your bar and restaurant bills","member_benefit_8":"Early check-in (based on availability)","member_benefit_9":"Late check-out (based on availability)","member_benefit_11":"Free breakfast per day","member_benefit_12":"A bottle of water in the room","member_benefit_13":"Access to co-working areas","member_benefit_14":"H Rewards Service Center","member_benefit_15":"Public transport tickets in participating IntercityHotels","seo_points_history_title":"My Points History","yes":"Yes","seo_status_title":"My Status","your_current_status":"Your current status","your_prev_status":"Status Level","your_next_status":"Your future status","level_benefits":"All Status Benefits","benefits_in_comparsion_title":"Benefits in {to} compared to {from}","no":"No","benefits_in_comparsion_title_lost":"Benefits in {to} compared to {from}","your_next_status_header":"Your next status: {status}","you_already_have":"You already have","nights_status_string":"{current} of {needed} status nights","points_status_string":"{current} of {needed} points","you_need_status":"\u003cp\u003eYou need \u003cstrong\u003e{nights} status nights\u003c/strong\u003e or \u003cstrong\u003e{points} status points\u003c/strong\u003e. See what you can achieve first.\u003c/p\u003e\n","maintain_status":"\u003cp\u003eTo maintain {level} you need \u003cstrong\u003e{nights} status nights\u003c/strong\u003e or \u003cstrong\u003e{points} status points\u003c/strong\u003e. (Expires {expires})\u003c/p\u003e\n","maintained_status_success":"Your status extension has already been achieved","points_expires_at":"Expires on","all_benefits":"All Benefits","what_level_offers":"What {level} offers","additional_benefits":"Additional Benefits","seo_specials_title":"My Preferences","all_levels_comparsion":"All statuses in comparsion","compare_your_benefits":"Compare Benefits","benefit":"Benefit","points_status_maintain_tooltip":"\u003cp\u003e\u003cstrong\u003e{points}\u003c/strong\u003e status points needed to maintain {level} status\u003c/p\u003e\n","nights_status_maintain_tooltip":"\u003cp\u003e\u003cstrong\u003e{nights}\u003c/strong\u003e nights needed to maintain {level} status\u003c/p\u003e\n","nights_status_upgrade_tooltip":"\u003cp\u003e\u003cstrong\u003e{nights}\u003c/strong\u003e nights needed to achieve {level} status\u003c/p\u003e\n","points_status_upgrade_tooltip":"\u003cp\u003e\u003cstrong\u003e{points}\u003c/strong\u003e status points needed to achieve {level} status\u003c/p\u003e\n","request_points":"Request Points","next_booking_title":"Your next booking","date_from":"Check In","date_to":"Check Out","guests":"Guests","button_cancel_membership":"Cancel Membership","button_keep_membership":"Keep Membership","button_redeem_points":"Redeem Reward Points","cancel_membership":"Cancel Membership","cancel_membership_text":"Do you wish to delete your account and end your H Rewards membership at the earliest possible date?","cancel_membership_alert":"You still have {points} reward points on your account. Would you like to redeem them now?\n\nAll unredeemed reward points, redemption awards and promotional awards as well as achieved member status will be forfeited after expiry of six months from the effective date of cancellation and may not be reinstated or transferred thereafter.","error_cancel_membership":"Something went wrong.\nPlease contact H Rewards Service Center at service@hrewards.com for further assistance.","success_cancel_membership":"Your account has been deleted and your membership will be terminated as soon as possible.","add_external_booking":"+ Add booking","add_external_booking_description":"If you did not book through our app or website or have not been logged in when booking, you can add your booking here.","firstName":"First Name","lastName":"Last Name","reservationNumber":"Confirmation Number","hotelId":"Hotel","reservation-added":"Your reservation has been added.","add_reservation_error":"Your booking could not be added. Please check your entries.","complete_profile":"Complete your profile","validation_required":"Please enter a confirmation number","validation_max_length":"The entered confirmation number is too long","detach_from_account":"Remove","detach_external_description":"Do you want to remove the booking from your account? The booking will not be canceled.","detach_external_no":"No","detach_external_yes":"Yes","add_reservation_error_name_mismatch":"Your booking could not be added. Please check that the spelling of your name matches the details on the booking confirmation.","reward_points":"Rewards Points","reward_status_points":"Qual. Points","status_nights_points":"Qual. Nights","points_history_title":"My Points History","expire_this_month":"Expire this month","expire_next_month":"Expire next month","book_again":"Book Again","seo_my_partners_title":"My Partners","my_partners":"My Partners","add_reservation_error_already_exists":"Your booking is already linked to another member account. Remove the booking there and try again.","change_name":"Change Name","connected_accounts":"Connected Accounts","connect_account":"Connect","disconnect_account":"Disconnect","you_are_connected_to":"You are connected to {account}","connect_to":"Connect to {account}","donate_points":"Donate Points","continue":"Continue","disconnect_account_modal_header":"Disconnect from {account}","disconnect_account_modal_text":"Ensure your password is reset before disconnecting to avoid login hiccups later on.","invite_friends":"Invite Friends","my_invites":"Share the H Rewards benefits with others!","send_invite":"Send H Rewards Invite","validation_email_required":"Please enter your E-mail","validation_email_email":"Please enter valid E-mail","more_invite_options_text":"More invite options on the next H Rewards level","more_invite_options_link":"/","billing_address_fallback_text":"Provide your billing address to speed up the payment process during bookings","billing_addresses":"Billing Addresses","remove_billing_address":"Remove Billing Address","remove_billing_address_description":"Are you sure you want to remove this Billing Address?","edit":"Edit","remove":"Remove","billing_addresses_fallback":"Provide your billing address to speed up the payment process during bookings","add_billing_address":"Add Billing Address","edit_billing_address":"Edit Billing Address","use_by_default":"Use by default","salutation":"Salutation","expire_on_date":"Expire on 30.04. (as of today)","breakfast-info":"*These benefits are granted if the booking is based on a \"qualifying rate\". Benefits vary depending on the brand. Details can be found in the participation.\n\n*Subject to availability in the participating hotels\n\n**Voucher per stay, for room rates including breakfast","expire_next_2_month":"Expire in next two months","preference_center_notice":"You're viewing your member preference center. To see subscriber preference center please log out from your account.","gender-male":"Male","gender-female":"Female","gender-diverse":"Diverse","gender-unknown":"Unknown","gender":"Gender","preference_center":"Preference center","seo_title_preference_center":"Preference center","day":"Day","month":"Month","year":"Year","saved":"Saved","snooze":"Snooze","snooze_period":"Snooze period","unsubscribe_all":"Unsubscribe the Newsletter!","opt_out_consent":"I consent to Steigenberger Hotels GmbH collecting the following data with the aim of analysing my preferences and user behaviour in order to send me personalised, interest-related promotional emails: Time of newsletter opening, my device and my clicks on the links in the newsletter.","resume":"Resume","opt_out_form_title":"Unsubscribe","reset_dates":"Reset Dates","calendar_ready":"Done","are_you_sure":"Are you sure","validation_otp_invalid":"Invalid code","otp_confirm_description":"We have just sent a one-time confirmation code to {email}. To complete the profile cancelling process, please check your email inbox (including spam folder) and enter the code below:","validation_otp_required":"Code is required","cancel_membership_confirm_button":"Cancel membership","change_name_otp_description":"We have just sent a one-time confirmation code to {email}. To complete the name change process, please check your email inbox (including spam folder) and enter the code below:","confirm":"Confirm","unexpected_error":"An unexpected error occurred. Please try again later.","change_email":"Change E-mail","change_email_description":"Enter your new E-mail address below. We will send a one-time password to confirm this change. Please ensure you have access to the new E-mail to complete the update.","change_email_otp_description":"We have just sent a one-time confirmation code to {email}. To complete the E-mail update, please check your email inbox (including spam folder) and enter the code below:","validation_email_exists":"E-mail is already registered","invite_friends_desc":"Invite family, friends or business associates to join H Rewards with a higher status level.","invites_active_fallback":"You have no active invites yet, get started by clicking on Send Invite.","invites_left":"{membership_level} - {available} out of {original} left","copy_url":"Simply choose the status level you like to gift, copy the URL or select a channel below and send it to your contact.","share_link":"You're invited to H Rewards! Use this link to accept the invite: {link}","copied":"Copied to the clipboard","invite_accept_loading":"Status Upgrade in progress","member_benefit_10":"10 € beverage voucher per stay","Accepted":"Accepted","my_invites_fallback":"Status Invites are available for Members with \nSilver Status or higher","from_date_to_date":"{from} to {to}"},"registration":{"validation_birthday_18":"You must be at least 18 years old","birthday":"Birthday*","day":"Day","month":"Month","year":"Year","password":"Password*","validation_password":"Please enter password","validation_password_rules":"The password must be at least 6 characters long and contain at least: 1 uppercase letter, 1 lowercase letter, 1 number, 1 special character.","password_confirmation":"Repeat password*","validation_password_confirmation":"Password confirmation should be equal to password","password_description":"The password must be at least 6 characters long and contain at least: 1 uppercase letter, 1 lowercase letter, 1 number, 1 special character.","validation_salutation":"Please select salutation","salutation":"Salutation*","country":"Country*","validation_country":"Please choose country","validation_state":"Please choose state","state":"State*","legal":"\u003cp\u003eYes, I agree that H Rewards Pte. Ltd. and/or Steigenberger Hotels GmbH contact me for their respective marketing purpose in order to inform me about promotions, special offers, services and news via email. This includes i.a. information about offers by their respective partners, communication about my stay, best price offers, competitions/sweepstakes, satisfaction surveys, general surveys and on the occasion of my birthday as well as invitations to events.\u003c/p\u003e\n\u003cp\u003eYou may revoke your consent at any time without giving reasons with effect for the future. In this case, we will no longer contact you for marketing purposes via email.\u003c/p\u003e\n\u003cp\u003eIn order to revoke your consent, you can click on the unsubscribe link in the respective message or send us an email to \u003ca href=\"mailto__R2WP__u0026#x75;\u0026#112;\u0026#x64;\u0026#97;\u0026#x74;\u0026#x65;\u0026#64;\u0026#x6e;\u0026#101;\u0026#x77;\u0026#115;\u0026#x2e;\u0026#x68;\u0026#x72;\u0026#101;\u0026#119;\u0026#97;\u0026#114;\u0026#100;\u0026#x73;\u0026#46;\u0026#x63;\u0026#111;\u0026#109;\"\u003e\u0026#x75;\u0026#112;\u0026#x64;\u0026#97;\u0026#x74;\u0026#x65;\u0026#64;\u0026#x6e;\u0026#101;\u0026#x77;\u0026#115;\u0026#x2e;\u0026#x68;\u0026#x72;\u0026#101;\u0026#119;\u0026#97;\u0026#114;\u0026#100;\u0026#x73;\u0026#46;\u0026#x63;\u0026#111;\u0026#109;\u003c/a\u003e. You can find further information in our data protection statement.\u003c/p\u003e\n","personal_data":"Personal data*","validation_first_name":"Please enter first name","validation_last_name":"Please enter last name","validation_email_required":"Please enter your E-mail","validation_email_email":"E-mail is not valid, please check","residence":"Residence*","validation_address":"Please enter your address","address_2":"Address 2","address":"Address*","validation_zip":"Please enter postal code","zip":"Postal Code*","city":"City*","terms":"\u003cp\u003eBy clicking on \u0026quot;Register\u0026quot;, you accept both the conditions of participation for the H Rewards loyalty programme in the currently valid version and in the amended version that will come into force on 01.02.2024. \u003c/p\u003e\n","legal_more":"\u003cp\u003eFor more information, see our \u003ca href=\"#l-privacy\"\u003ePrivacy Policy\u003c/a\u003e.\nYou can find a current list of our cooperation partners \u003ca href=\"/partners\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n","register_button":"Register","validation_city":"Please enter city","required_note":"*Required field","first_name":"First Name*","last_name":"Last Name*","email":"E-mail*","validation_ESU01":"Unknown error, please try again later","title_success":"JUST ONE MORE STEP TOWARDS YOUR H REWARDS MEMBERSHIP","description_success":"\u003cp\u003eWe\u0026#39;ve sent you an E-mail with activation link.\u003c/p\u003e\n\u003cp\u003e This link can only be used once, it will expire after \u003cstrong\u003e48 hours\u003c/strong\u003e. If you don’t see our mail in our inbox, please check your \u003cstrong\u003espam file\u003c/strong\u003e.\u003c/p\u003e\n","validation_day":"Please enter day","validation_month":"Please enter month","validation_year":"Please enter year","title":"CREATE YOUR H REWARDS MEMBER ACCOUNT","title_activate_error":"Error activating account","activate_error":"\u003cp\u003eCan\u0026#39;t activate your account, please try again later or \u003ca href=\"/help-center/contact\"\u003econtact us\u003c/a\u003e.\u003c/p\u003e\n","login":"Login","description_activated":"\u003cp\u003eYour registration was successfully completed. You can now use your credentials to log in.\u003c/p\u003e\n","title_activated":"Registration completed","description_activate":"\u003cp\u003eWe\u0026#39;re activating your account, please wait.\u003c/p\u003e\n","title_activate":"Activating...","unknown_error":"Unknown error, please try again later","validation_token":"Token is required","description_password_update":"You can reset your password here by entering a new password for your account.","password_update_confirm":"Update Password","title_password_update":"Update Password","title_password_updated":"Password Updated","description_password_updated":"\u003cp\u003ePlease wait for 2 minutes before using your new password!\u003c/p\u003e\n","seo_title_activate":"Registration sent | H Rewards","seo_title_activated":"Confirm registration | H Rewards","seo_title_created":"Registration confirmed | H Rewards","seo_password_update_title":"New password requested | H Rewards","seo_password_updated_title":"Password successfully reset | H Rewards","home":"Back to homepage","validation_name_pattern":"Name shouldn't contain special characters or numbers","title_activated_new":"Registration completed","description_activated_new":"\u003cp\u003eWe are happy to welcome you as a valued member of the H Rewards family!\u003c/p\u003e\n\u003cp\u003eDon\u0026#39;t forget to redeem your Welcome Gift, \u003ca href=\"/hotel-deals/welcome-special\"\u003eour exclusive Welcome Special*\u003c/a\u003e, for new members.\u003c/p\u003e\n\u003cp\u003eBenefit once from__R2WP__u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOvernight stay with 10% off on the flex price\u003c/li\u003e\n\u003cli\u003eNo advance payment\u003c/li\u003e\n\u003cli\u003eFlexible cancellation conditions\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eWe look forward to welcoming you to one of our hotels soon.\u003c/p\u003e\n","email_confirmation":"Repeat E-mail*","validation_email_confirmation":"The E-mail confirmation does not match.","password_strength_label":"Your password must contain:","password_strength_length":"At least 6 characters","password_strength_lowercase":"Lowercases","password_strength_uppercase":"Uppercases","password_strength_mixed":"Numeric OR special characters","share_additional_info":"Optional: Share additional information for further benefits","save_checkin_time":"Save time at check-in","never_billing_address":"Never enter billing addresses again","special_offers":"Receive special offers for your birthday","change_name":"Change Name","cancel":"Cancel","save":"Save","apple_pay_payment_label":"Booking at {hotel}.","validation_phone_pattern":"Please enter a valid phone number","phone":"Mobile Phone","phone_ibe":"Phone (optional)","session_refresh":"Session Refreshed","you_are_logged_in_as":"You are logged in as","validation_email_exists":"E-mail is already registered. Please \u003ca href=\"#open-login-popup\"\u003elogin\u003c/a\u003e","invite_benefit":"You will be upgraded to {level} member level upon registration with this invite code.","bahnbonus":"By checking this box you confirm to be a member of Bahnbonus*"},"locale":{"en":"English","de":"Deutsch","da":"Dansk","es":"Español","fr":"Français","hu":"Magyar","it":"Italiano","nl":"Nederlands","pt":"Português","sv":"Svenska","zh":"中文","ru":"Русский","uk":"Українська","ar":"العربية","cs":"Čeština","ko":"한국인","ja":"日本語"},"targeted-message":{"countdown-days":"Days","countdown-hours":"Hours","countdown-minutes":"Minutes","countdown-seconds":"Seconds"}},"metaNavigationLinks":[{"id":8,"label":"Corporate","link":"/corporate"}],"footer":{"locale":"en","menuItems":[{"id":18,"__component":"navigation.footer-menu-item","header":"Quick Links","links":[{"id":147,"label":"About H Rewards","link":"/loyalty"},{"id":150,"label":"Staysmart","link":"/corporate/staysmart"},{"id":153,"label":"Career","link":"https://jobs.deutschehospitality.com/eng"},{"id":195,"label":"Partner","link":"/partners"},{"id":1115,"label":"CSR","link":"/csr"},{"id":204,"label":"Contact","link":"/help-center/contact"},{"id":206,"label":"FAQ","link":"/help-center/faq"},{"id":2096,"label":"H Rewards App","link":"/app"},{"id":5869,"label":"Check-In","link":"/checkin"}]},{"id":15,"__component":"navigation.footer-menu-app-links","header":"H Rewards App","androidLink":"https://play.google.com/store/apps/details?id=com.hrewards.app\u0026hl=de\u0026gl=US","iOSLink":"https://apps.apple.com/de/app/h-rewards-hotelzimmer-buchen/id1554067603"},{"id":15,"__component":"navigation.footer-menu-text","header":"Steigenberger Hotels GmbH","text":"\u003cp\u003eLyoner Straße 25\n60528 Frankfurt am Main\nGermany\u003c/p\u003e\n"},{"id":15,"__component":"navigation.footer-menu-payments","header":" Pay at H Rewards.com using:","description":"Please note that there may be a variation in payment methods offered at individual hotels.","mastercard":true,"jcb":true,"paypal":true,"americanexpress":true,"visa":true,"dinersclub":true,"klarna":true}],"staticLinks":[{"id":159,"label":"Privacy Policy","link":"/legal/data-protection"},{"id":156,"label":"Imprint","link":"/legal/imprint"},{"id":162,"label":"H Rewards terms of participation","link":"/legal/terms-of-participation"},{"id":165,"label":"Operating Company","link":"/legal/operating-company"},{"id":168,"label":"Travel Policy","link":"/legal/travel-policy"},{"id":1280,"label":"Terms \u0026 Conditions","link":"/legal/terms-conditions"}]},"page":{"notFound":false,"link":"/legal/data-protection","pageType":null,"name":"Privacy","menuSort":null,"publishedAt":"2022-06-28T17:46:21.202Z","locale":"en","canonical":null,"noIndex":true,"approvalStatus":null,"brand":{"data":{"id":43,"attributes":{"hdataBrandCode":"-","brandName":"H Rewards","brandNameSync":false,"code":"hrewards","locale":"en","teaser":null}}},"seo":{"id":8975,"title":"H Rewards | Privacy","keywords":"","description":"Information on data protection at a glance | H Rewards"},"localizations":{"data":[{"id":43264,"attributes":{"link":"/legal/data-protection","pageType":null,"name":"Ochrana osobních údajů","menuSort":null,"publishedAt":"2023-08-30T14:33:28.009Z","locale":"cs","canonical":null,"noIndex":true,"approvalStatus":null}},{"id":6176,"attributes":{"link":"/legal/privacy","pageType":null,"name":"Privatlivets fred","menuSort":null,"publishedAt":"2022-06-28T17:46:29.166Z","locale":"da","canonical":null,"noIndex":true,"approvalStatus":null}},{"id":2022,"attributes":{"link":"/legal/datenschutz","pageType":null,"name":"Datenschutz","menuSort":null,"publishedAt":"2022-06-28T17:46:18.006Z","locale":"de","canonical":null,"noIndex":true,"approvalStatus":null}},{"id":6170,"attributes":{"link":"/legal/proteccion-de-datos","pageType":null,"name":"Privacidad","menuSort":null,"publishedAt":"2022-06-28T17:46:26.204Z","locale":"es","canonical":null,"noIndex":true,"approvalStatus":null}},{"id":6167,"attributes":{"link":"/legal/protection-des-donnees","pageType":null,"name":"Vie privée","menuSort":null,"publishedAt":"2022-06-28T17:46:22.632Z","locale":"fr","canonical":null,"noIndex":true,"approvalStatus":null}},{"id":6185,"attributes":{"link":"/legal/privacy","pageType":null,"name":"Adatvédelem","menuSort":null,"publishedAt":"2022-06-28T17:46:32.267Z","locale":"hu","canonical":null,"noIndex":true,"approvalStatus":null}},{"id":6173,"attributes":{"link":"/legal/privacy","pageType":null,"name":"La privacy","menuSort":null,"publishedAt":"2022-06-28T17:46:28.235Z","locale":"it","canonical":null,"noIndex":true,"approvalStatus":null}},{"id":48782,"attributes":{"link":"/legal/data-protection","pageType":null,"name":"プライバシー","menuSort":null,"publishedAt":"2023-12-07T14:09:48.215Z","locale":"ja","canonical":null,"noIndex":true,"approvalStatus":null}},{"id":48779,"attributes":{"link":"/legal/data-protection","pageType":null,"name":"개인정보 보호","menuSort":null,"publishedAt":"2023-12-07T14:09:47.219Z","locale":"ko","canonical":null,"noIndex":true,"approvalStatus":null}},{"id":6191,"attributes":{"link":"/legal/privacy","pageType":null,"name":"Privacy","menuSort":null,"publishedAt":"2022-06-28T17:46:34.726Z","locale":"nl","canonical":null,"noIndex":true,"approvalStatus":null}},{"id":6188,"attributes":{"link":"/legal/privacidade","pageType":null,"name":"Privacidade","menuSort":null,"publishedAt":"2022-06-28T17:46:33.995Z","locale":"pt","canonical":null,"noIndex":true,"approvalStatus":null}},{"id":36499,"attributes":{"link":"/legal/data-protection","pageType":null,"name":"Конфиденциальность","menuSort":null,"publishedAt":"2023-04-19T08:51:00.957Z","locale":"ru","canonical":null,"noIndex":true,"approvalStatus":null}},{"id":6179,"attributes":{"link":"/legal/integritet","pageType":null,"name":"Integritet","menuSort":null,"publishedAt":"2022-06-28T17:46:30.402Z","locale":"sv","canonical":null,"noIndex":true,"approvalStatus":null}},{"id":36496,"attributes":{"link":"/legal/data-protection","pageType":null,"name":"Конфіденційність","menuSort":null,"publishedAt":"2023-04-19T08:51:00.221Z","locale":"uk","canonical":null,"noIndex":true,"approvalStatus":null}},{"id":6182,"attributes":{"link":"/legal/privacy","pageType":null,"name":"隐私权","menuSort":null,"publishedAt":"2022-06-28T17:46:31.466Z","locale":"zh","canonical":null,"noIndex":true,"approvalStatus":null}}]},"restaurant":{"data":null},"hotel":{"data":null},"page":{"data":null},"pages":{"data":[]},"badge":{"data":null},"copiedPage":{"data":null},"content":[{"id":4406,"__component":"content.page-snippet","page_snippet":{"data":{"id":446,"attributes":{"code":"Legal Tab","locale":"en","content":[{"id":92,"__component":"content.tabs","position":null,"items":[{"id":353,"label":"Imprint","link":"/legal/imprint"},{"id":356,"label":"Privacy policy","link":"/legal/data-protection"},{"id":359,"label":"Information requirements Facebook","link":"/legal/information-duties-facebook"},{"id":362,"label":"Conditions of participation","link":"/legal/terms-conditions"},{"id":1436,"label":"Video surveillance","link":"/legal/video-surveillance"}]}]}}}},{"id":740,"__component":"content.text","text":"\u003ch2 id=\"h-rewards-loyalty-program-privacy-policy-since-february-2023\"\u003eH REWARDS LOYALTY PROGRAM PRIVACY POLICY (SINCE FEBRUARY 2023)\u003c/h2\u003e\n\u003cp\u003eThe following information is intended to give you an overview of the processing of your personal data in connection with the following services and to inform you about your rights under the GDPR__R2WP__u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eWithin the framework of the membership in our loyalty program (including becoming a member).\u003c/li\u003e\n\u003cli\u003eWithin the framework of membership in a loyalty program of cooperation partners.\u003c/li\u003e\n\u003cli\u003eIn the context of the documentation of changes, corrections of personal data.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eI. Information on processing of personal data regarding H Rewards Loyalty Program.\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e1. Controller for data processing\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eH Rewards Pte. Ltd.\u003cbr\u003e11 Penang Lane\u003cbr\u003e238485, Singapore\u003cbr\u003ePhone: +65 6771 1121\u003cbr\u003eemail: \u003ca href=\"mailto__R2WP__u0026#x64;\u0026#112;\u0026#x6f;\u0026#64;\u0026#x68;\u0026#119;\u0026#x6f;\u0026#x72;\u0026#108;\u0026#100;\u0026#x2e;\u0026#x63;\u0026#111;\u0026#x6d;\"\u003e\u0026#x64;\u0026#112;\u0026#x6f;\u0026#64;\u0026#x68;\u0026#119;\u0026#x6f;\u0026#x72;\u0026#108;\u0026#100;\u0026#x2e;\u0026#x63;\u0026#111;\u0026#x6d;\u003c/a\u003e \u003c/p\u003e\n\u003cp\u003eH World Holdings Singapore Pte. Ltd. is the parent company of Steigenberger Hotels GmbH and of H Rewards Pte. Ltd. H Rewards Pte. Ltd. operates the H Rewards Loyalty Program.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e2. Contact details of the Data Protection Officer and EU Representative\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e2.1 You can reach our Data Protection Officer at\u003c/p\u003e\n\u003cp\u003eWodianka privacy legal GmbH\u003cbr\u003eDockenhudener Straße 12a\u003cbr\u003e22587 Hamburg, Germany\u003cbr\u003eemail: \u003ca href=\"mailto__R2WP__u0026#100;\u0026#x70;\u0026#x6f;\u0026#x40;\u0026#104;\u0026#x77;\u0026#x6f;\u0026#x72;\u0026#x6c;\u0026#x64;\u0026#x2e;\u0026#99;\u0026#x6f;\u0026#x6d;\"\u003e\u0026#100;\u0026#x70;\u0026#x6f;\u0026#x40;\u0026#104;\u0026#x77;\u0026#x6f;\u0026#x72;\u0026#x6c;\u0026#x64;\u0026#x2e;\u0026#99;\u0026#x6f;\u0026#x6d;\u003c/a\u003e \u003c/p\u003e\n\u003cp\u003e2.2 You can reach our EU Representative at\u003c/p\u003e\n\u003cp\u003eSteigenberger Hotels GmbH\u003cbr\u003eLyoner Strasse 25\u003cbr\u003e60528 Frankfurt am Main, Germany\u003cbr\u003ePhone: +49 69 80 88 57 88\u003cbr\u003eeMail: \u003ca href=\"mailto__R2WP__u0026#101;\u0026#117;\u0026#x2d;\u0026#x72;\u0026#x65;\u0026#x70;\u0026#x72;\u0026#x65;\u0026#x73;\u0026#x65;\u0026#x6e;\u0026#116;\u0026#x61;\u0026#116;\u0026#x69;\u0026#118;\u0026#x65;\u0026#64;\u0026#104;\u0026#114;\u0026#101;\u0026#x77;\u0026#97;\u0026#114;\u0026#100;\u0026#x73;\u0026#x2e;\u0026#99;\u0026#x6f;\u0026#109;\"\u003e\u0026#101;\u0026#117;\u0026#x2d;\u0026#x72;\u0026#x65;\u0026#x70;\u0026#x72;\u0026#x65;\u0026#x73;\u0026#x65;\u0026#x6e;\u0026#116;\u0026#x61;\u0026#116;\u0026#x69;\u0026#118;\u0026#x65;\u0026#64;\u0026#104;\u0026#114;\u0026#101;\u0026#x77;\u0026#97;\u0026#114;\u0026#100;\u0026#x73;\u0026#x2e;\u0026#99;\u0026#x6f;\u0026#109;\u003c/a\u003e \u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e3. Your personal data\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e3.1 Membership in the H Rewards Loyalty Program\u003cbr\u003eWithin the scope of membership in our own H Rewards Loyalty Program, we collect, process and store the personal data listed under point 3.5.\u003c/p\u003e\n\u003cp\u003e3.2 Membership in the loyalty program of a cooperation partner\u003cbr\u003eWithin the framework of membership in a loyalty program of one of our cooperation partners, such as Miles \u0026amp; More or bahn.bonus, we collect, process and store the personal data listed under point 3.5.\u003c/p\u003e\n\u003cp\u003e3.3 Usage of the customer account\u003cbr\u003eFor the use of the customer account we collect, process and store the personal data listed under point 3.5.\u003c/p\u003e\n\u003cp\u003e3.4 Documentation of changes and corrections of personal data\u003cbr\u003eIn accordance with our duty of documentation, we process and store all changes and corrections to the personal data listed under point 3.5.\u003c/p\u003e\n\u003cp\u003e3.5 Your personal data\u003cbr\u003eWe collect the following personal data and process it in accordance with the GDPR.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eName and surname \u003c/li\u003e\n\u003cli\u003eResidential address and, if applicable, different billing and communication addresses \u003c/li\u003e\n\u003cli\u003eDate of birth \u003c/li\u003e\n\u003cli\u003eSex and form of address \u003c/li\u003e\n\u003cli\u003eEmail address(es), if more than one is used or provided \u003c/li\u003e\n\u003cli\u003eTelephone number(s), if more than one is used or indicated \u003c/li\u003e\n\u003cli\u003eMembership numbers of loyalty programs \u003c/li\u003e\n\u003cli\u003eResidence preferences and wishes \u003c/li\u003e\n\u003cli\u003eGeneral interests, preferences and wishes \u003c/li\u003e\n\u003cli\u003ePassword\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003ePlease see below the section “Your rights as a data subject” regarding your rights as a data subject, including information on the correction or deletion of your respective personal data.\u003c/p\u003e\n\u003cp\u003e3.6 Personal Information We Collect from Third Party Providers\nWhen you register or sign in to the H Rewards Platform through a third-party service (e.g., Facebook, Google, Apple), you instruct the service to provide us with information such as, but not limited to, your email address, first and last name, title, and date of birth.\u003c/p\u003e\n\u003cp\u003ea) Google single sign-on\u003c/p\u003e\n\u003cp\u003eFor registration on our website, we also use the authentication service Google Single-Sign-On, of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is the representative of Google LLC in Europe. In the context of the single sign-on process, the following information is transmitted to us: Name, email address, language, title and date of birth. \nYour data will also be processed in the USA, among other places. Google is certified under the EU-US Data Privacy Framework. In doing so, the US providers undertake to comply with the EU level of data protection when processing the relevant data. Furthermore, Google uses so-called standard contractual clauses.\nYou can revoke your consent to the use of single sign-on applications at \u003ca href=\"https://adssettings.google.com/authenticated\"\u003ehttps://adssettings.google.com/authenticated\u003c/a\u003e. More information on data processing can be found in Google\u0026#39;s privacy policy: \u003ca href=\"https://policies.google.com/privacy?hl=de\"\u003ehttps://policies.google.com/privacy?hl=de\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eb) Facebook Single-Sign-On\u003c/p\u003e\n\u003cp\u003eFor registration on our website, we also use the authentication service Facebook Single-Sign-On, of Meta Platforms, Inc, 1601 Willow Road 94025 Menlo Park, CA. Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour Dublin 2 Ireland, is the agent of Meta Platforms, Inc in Europe. In the context of the single sign-on process, the following information is transmitted to us: Name, email address, title and date of birth.\nYour data will also be processed in the USA, among other places. Meta is certified under the EU-US Data Privacy Framework. In doing so, the US providers undertake to comply with the EU level of data protection when processing the relevant data. Furthermore, Meta uses so-called standard contractual clauses.\nAt \u003ca href=\"https://www.facebook.com/adpreferences/ad_settings\"\u003ehttps://www.facebook.com/adpreferences/ad_settings\u003c/a\u003e you can revoke your consent to the use of single sign-on applications. More information on data processing can be found in Meta\u0026#39;s privacy policy: \u003ca href=\"https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect\u0026entry=0\"\u003ehttps://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect\u0026amp;entry=0\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003ec) Apple Single-Sign-On\u003c/p\u003e\n\u003cp\u003eFor registration on our website, we also use the authentication service Facebook Single-Sign-On, of Apple Inc., One Apple Park Way, Cupertino, Kalifornien, Apple Distribution International Limited, Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, is the agent of Apple Inc. in Europe. In the context of the single sign-on process, the following information is transmitted to us: Name, email address, title and date of birth.\nYour data will also be processed in the USA, among other places. Apple is certified under the EU-US Data Privacy Framework. In doing so, the US providers undertake to comply with the EU level of data protection when processing the relevant data. Furthermore, Apple uses so-called standard contractual clauses.\nAt \u003ca href=\"https://www.apple.com/legal/privacy/en-ww/\"\u003ehttps://www.apple.com/legal/privacy/en-ww/\u003c/a\u003e you can revoke your consent to the use of single sign-on applications. More information on data processing can be found in Apple\u0026#39;s privacy policy: \u003ca href=\"https://www.apple.com/legal/privacy/data/en/apple-id/\"\u003ehttps://www.apple.com/legal/privacy/data/en/apple-id/\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e4. Purposes and legal basis for processing personal data\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eWe process your personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG) as well as all other relevant legislation for the purposes and on the legal basis as set out below__R2WP__u003c/p\u003e\n\u003cp\u003e(a) In order to create, edit, update and manage your Member Account and to properly process credits and debits to your Member Account, and to provide our services in connection with membership in the H Rewards Loyalty Program. The legal basis for this is Article 6 (1) (b) GDPR.\u003c/p\u003e\n\u003cp\u003e(b) For processing bonus credits (points, miles, etc.) and other services in connection with your membership in the loyalty programs of our cooperation partners. The legal basis is the fulfilment of the contract in accordance with Article 6 (1) (b) GDPR.\u003c/p\u003e\n\u003cp\u003e(c) For comprehensive recognition, especially if you are a member of our H Rewards Loyalty Program, at all service contact points (personal and/or digital) of the hotels and entities belonging to H World Group and automatic updating of your recurring wishes, preferences and requirements, e.g. always two pillows, in order to always be able to provide a high-quality service corresponding to the hotel brand. The legal basis for this is our justified interest in offering our customers the best possible service in accordance with Article 6 (1) (f) GDPR.\u003c/p\u003e\n\u003cp\u003e(d) For the purpose of processing your enquiries, information and complaints, insofar as the processing is connected with the fulfilment of a contract or is necessary for the implementation of pre-contractual measures, the legal basis for the processing of your personal data is Article 6 (1) (b) GDPR. In other cases, the legal basis is our legitimate interest in the effective processing of inquiries addressed to us in accordance with Article 6 (1) (f) GDPR.\u003c/p\u003e\n\u003cp\u003e(e) To compile statistics based on anonymous data analysis for the improvement and development of products, services and program content of the H Rewards Loyalty Program. The legal basis for this is our legitimate interest in the further development of our H Rewards Loyalty Program in accordance with Article 6 (1) (f) GDPR.\u003c/p\u003e\n\u003cp\u003e(f) For the purposes of authentication and fraud prevention, especially in connection with membership of the H Rewards Loyalty Program or a loyalty program of our cooperation partners such as Miles \u0026amp; More or bahn.bonus. The legal basis for this is Article 6 (1) (f) GDPR.\u003c/p\u003e\n\u003cp\u003e(g) In order to safeguard domestic authority, to prevent and resolve criminal offences, to assert and defend legal claims and to safeguard interests in legal disputes, to ensure IT security and IT operation and to identify credit risks. The respective legal basis for this is Article 6 (1) (f) GDPR. \u003c/p\u003e\n\u003cp\u003eOur overriding legitimate interests result from our obligation to ensure a safe stay of our guests in the hotel as well as from our interest in enforcing our material and immaterial claims and safeguarding our rights and in defending against unjustified claims. Furthermore, the processing of personal data to the extent absolutely necessary for the prevention of fraud also constitutes a legitimate interest of our company in accordance with recital 47 of the GDPR.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e5. Minors\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eMinors may not transmit any personal data to us without the consent of the respective parent(s) or guardian(s). Furthermore, we do not store any personal data of minors without the consent of their parents or guardians. Through our website, we do not process personal data of minors that we knowingly obtain.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e6. Categories of personal data recipients\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eIf and to the extent necessary for the purposes set out in section 4 above, we will also disclose your personal data to the following recipients or categories of recipients in accordance with Article 4 No. 9 GDPR__R2WP__u003c/p\u003e\n\u003cp\u003eWithin our H World Group, only those entities will be granted access to your data (to the extent necessary in each case) that need it to fulfil our contractual and statutory obligations.\u003c/p\u003e\n\u003cp\u003eWe use Steigenberger Hotels GmbH (“Steigenberger\u0026quot;) as a data processor to operate H Rewards Loyalty Program (including operating the respective website and app). We have concluded a data processing agreement with EU standard contractual clauses (Module Two: controller to processor data transfer). Steigenberger processes and stores your personal data in our central guest database in particular for internal administrative purposes such as the administration and updating of consents and revocations as well as the member account and other connected services. In this context, your personal data is also disclosed to other hotels/entities belonging to H World Group, if you use H Rewards Loyalty Program with a hotel/entity of our H World Group. Disclosure is only made to the extent necessary within the scope of a specific purpose and only to companies that are noted accordingly in the \u003ca href=\"/legal/operating-company\"\u003elist of hotel operators\u003c/a\u003e. Furthermore, only authorized employees are allowed to view and process your personal data within the scope of their function.\u003c/p\u003e\n\u003cp\u003eWe may also obtain personal data for these purposes from service providers (e.g. within the scope of order processing in accordance with Article 28 GDPR) and vicarious agents. These are companies in the following categories: credit services and payment processing, IT services, cleaning services, logistics, printing services, telecommunications, debt collection, consulting and advisory services, and sales and marketing. The respective service providers can be seen from the\u003ca href=\"/service-providers-processors\"\u003e list of service providers processors\u003c/a\u003e, which is updated regularly.\u003c/p\u003e\n\u003cp\u003eFurthermore, data may be passed on to public bodies and institutions if there is a legal obligation to do so (e.g. financial authorities, law enforcement agencies).\u003c/p\u003e\n\u003cp\u003eOther data recipients may be those entities for which you have given us your consent to transfer data.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e7. Transfer of personal data to a third country\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eA transfer of personal data to bodies in states outside the European Union (so-called third countries) takes place insofar as\u003c/p\u003e\n\u003cp\u003e(a) it is necessary for the execution of your reservations and handling of your hotel stay.\u003c/p\u003e\n\u003cp\u003e(b) it is necessary for implementation as part of membership of the H Rewards Loyalty Program or with a cooperating partner.\u003c/p\u003e\n\u003cp\u003e(c) it is required by law.\u003c/p\u003e\n\u003cp\u003e(d) you have given us your consent.\u003c/p\u003e\n\u003cp\u003eAs can be seen in detail from the list of service providers/processors provided above, our company uses service providers for certain tasks who are based in a third country or belong to an international group with companies in third countries or who in turn cooperate with service providers based in a third country. Personal data may be transferred to such service providers if the European Commission has decided that an adequate level of protection exists in the third country in question (in accordance with GDPR requirements). If the Commission has not made such a decision, our company or the service provider may only transfer personal data to a third country or to an international organisation if appropriate safeguards are in place and enforceable rights and effective legal remedies are available (Article 46 (1) GDPR). Beyond the cases mentioned above, our company does not transfer personal data to bodies in third countries or to international organisations.\u003c/p\u003e\n\u003cp\u003eWe transfer personal data to Steigenberger based on a data processing agreement with EU standard contractual clauses (Module Two: controller to processor data transfer).\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e8. Period of retention of personal data and criteria for determining that period\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eWe process and store your personal data as long as it is necessary for the fulfilment of our contractual and legal obligations. If the data are no longer required for the fulfilment of contractual obligations, they are regularly deleted, unless their temporary further processing is necessary due to\u003c/p\u003e\n\u003cp\u003e(a) national or regional reporting laws or regulations at the place of data collection or contract implementation.\u003c/p\u003e\n\u003cp\u003e(b) national commercial and fiscal retention periods at the place of data collection or contract implementation.\u003c/p\u003e\n\u003cp\u003e(c) national, regional or local tax code at the place of data collection or contract implementation.\u003c/p\u003e\n\u003cp\u003e(d) membership of its own H Rewards Loyalty Program.\u003c/p\u003e\n\u003cp\u003eThe periods of retention or documentation specified there are one to ten years.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e9. Your rights as a data subject\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eEvery data subject has the right of access by the controller to the personal data concerned in accordance with Article 15 GDPR, the right of rectification in accordance with Article 16 GDPR, the right of deletion in accordance with Article 17 GDPR, the right to limit processing in accordance with Article 18 GDPR, the right to object to processing in accordance with Article 21 GDPR and the right of transferability in accordance with Article 20 GDPR. The right of information and the right of deletion are also subject to the restrictions pursuant to Sections 34 and 35 of the BDSG.\u003c/p\u003e\n\u003cp\u003ePlease see section 12 regarding more information on your right to object to processing under Article 21 GDPR.\u003c/p\u003e\n\u003cp\u003eIf the processing of your personal data is based on a consent granted to us, you have the right to revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.\u003c/p\u003e\n\u003cp\u003eFurthermore, you have the right of appeal with a data protection supervisory authority in accordance with Article 77 GDPR.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e10. Obligation to provide data\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eThe obligation to provide personal data always exists when such provision is necessary for the performance of a contract or when we are legally obliged to process such data; this applies in particular to\u003c/p\u003e\n\u003cp\u003e(a) the drafting of a contract and the execution of the contract;\u003c/p\u003e\n\u003cp\u003e(b) the creation and management of the Member\u0026#39;s account in its own H Rewards loyalty program;\u003c/p\u003e\n\u003cp\u003e(b) compliance with the laws and regulations governing registration at the hotel location.\u003c/p\u003e\n\u003cp\u003eIf you do not provide us with the necessary information, we may not be able to provide the services you have requested or may not be able to provide them completely.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e11. Automated decision-making and profiling\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eWhen establishing and executing our contractual relationship, you will not be subjected to a decision based solely on automated processing, including profiling, pursuant to Article 22 GDPR, which produces legal effects concerning you or similarly affects you in a serious way.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e12. Additional information on your right to object pursuant to Article 21 GDPR\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eYou have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you that is carried out on the basis of Article 6 (1) (e) GDPR (processing in the public interest) or Article 6 (1) (f) GDPR (processing based on a balancing of interests); this also applies to profiling based on this provision in accordance with Article 4 (4) GDPR.\u003c/p\u003e\n\u003cp\u003eIf you file an objection, we will no longer process your personal data unless we can demonstrate compelling reasons for processing that are worthy of protection and outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.\u003c/p\u003e\n\u003cp\u003eIf your personal data is processed by us in order to acquire existing customers, you have the right to object at any time to the processing of personal data relating to you for the purpose of such advertising; this also applies to profiling, insofar as it is connected with such acquisition of existing customers.\u003c/p\u003e\n\u003cp\u003eThe objection is possible by using the unsubscribe function in digital media, corresponding settings in the Member Area or Subscriber Area, using the contact form on the website or by sending an informal letter to the contact data mentioned above.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eII. Additional Information regarding data processes on our website\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e1. Membership Account\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eYou can register on our website as a member of the H Rewards Loyalty Program (user account/account) by providing your full first and last name, your current home address, date of birth, preferred email address and a password. This registration can be done via the menu item \u0026quot;Login/Register\u0026quot; in the header or by adding a password during your booking and when entering your personal data.\u003c/p\u003e\n\u003cp\u003eUpon successful login/registration, a member account will automatically be created for you, which is available for the H Rewards Loyalty Program’s website and the websites of all hotel brands/entities belonging to H World Group. \u003c/p\u003e\n\u003cp\u003eRegarding your membership, we transfer your data to the respective service providers and respective operators.\u003c/p\u003e\n\u003cp\u003eIn your member account you can view and change your personal data. In addition, all important information about your membership is displayed, such as membership status. In the member area, you can book hotel accommodation, change or cancel reservations that you have made using your membership details, and make award bookings according to your account balance.\u003c/p\u003e\n\u003cp\u003eYou can cancel your membership at any time. The member account will automatically be deleted after final termination of the membership (see termination in the terms of participation).\nThe legal basis for the processing of your personal data in connection with the setting up and use of your membership account is your membership in accordance with the terms and conditions of the H Rewards Loyalty Program.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e2. Connection and synchronization of different customer profiles\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eYour personal data is collected at different contact points (e.g. member account, hotel, ...) in different forms (handwritten and digital). This may result in multiple customer profiles and contradictory information, especially in the context of the administration of consents or in the case of multiple membership numbers. In order to provide you with the best possible service and to ensure the correct processing of your personal data, we are careful to combine multiple data based on unique characteristics, such as first name, surname and address, to form a unique profile. For the merging of customer profiles we use the information that we collect in the course of your membership and hotel stay as well as the personal data that you have voluntarily submitted to us by other means.\u003c/p\u003e\n\u003cp\u003eWithout this automated and in some cases necessary manual merging, we cannot guarantee the proper processing of your personal data, as different customer profiles may have different settings.\nThe processing and merging takes place in the central guest database of our processor Steigenberger.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e3. User account/account\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eYou can register for a user account (account) on our website with your email address and the allocation of a password. This registration can be done via the menu item “Registration” in the header or by adding a password when you make your booking and input your personal data.\u003c/p\u003e\n\u003cp\u003eUpon successful registration, a user account (account) will be created for you automatically, which is valid for the websites of all hotel brands/entities belonging to H World Group. \u003c/p\u003e\n\u003cp\u003eIn the user account you can see and edit (e.g. cancel or change) all the bookings you have transacted since your registration by providing your user data via one of the respective websites. You may delete your user account at any time.\u003c/p\u003e\n\u003cp\u003eThe legal basis for processing your personal data in connection with the creation and use of your user account is your membership agreement.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e4. Digital offers (newsletter), acquisition of existing customers and program information\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e4.1 Advertising (newsletter)\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eWith the email newsletter, we will regularly inform you about the offers and services of H World Group as well as offers within the framework of membership in the H Rewards Loyalty Program, according to the preferences you specify (please see list of operators above).\u003c/p\u003e\n\u003cp\u003eIf you would like to receive the email newsletter, we need a valid email address from you. We use the so-called double-opt-in procedure to register you for our newsletter. This means that after your registration we will send you an email to the email address you have provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within two weeks, your information will be blocked and automatically deleted after one month. In addition, we store your IP address and the time of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.\u003c/p\u003e\n\u003cp\u003ePlease note that members, who originally provided their marketing consent to Steigenberger, will continue to receive email marketing messages from Steigenberger, unless they revoke their respective consent with regard to further processes.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e4.2 Advertising regarding existing customers\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e4.2.1 Advertising for members within the framework of membership of the loyalty program\nWith respect to the H Rewards Loyalty Program, we reserve the right to send our members offers from our range of services as membership advertising by email. Our justified interest in the implementation of existing customer acquisition is to inform our members about the current membership status and to be able to offer individual and exclusive offers to target groups.\nWe can process your personal data, which you have entered in the member account or which you provide during a stay, for the purpose of member recruitment within the framework of the existing membership.\u003c/p\u003e\n\u003cp\u003e4.2.2 Advertising to existing customers within the framework of a stay\nWe reserve the right to send our guests offers from our range of services as an advertisement for existing customers by email. Our justified interest in the execution of existing customer advertising is to be able to offer our guests individual offers in a target group-oriented manner, which are based on a previous booking (transaction) or the existing customer relationship.\u003c/p\u003e\n\u003cp\u003eYour personal data, which you provide us with when making a booking, can be processed by us within twelve (12) months after a previous transaction for the purpose of sending advertising to existing customers. If you do not make a new booking within this period or do not carry out any other transaction, your personal data will no longer be processed for the purpose of acquiring existing customers and will be deleted accordingly, unless you have subscribed to a newsletter or your personal data must continue to be stored due to other regulations.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e4.3 Obligatory communication\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e4.3.1 Communication in the context of membership\nWithin the framework of the operation of the loyalty program, we are legally obliged to inform you about changes in the program (conditions of participation). The communication will be made exclusively by email to the email address stored in the member account. If this is no longer valid, we reserve the right to contact you by other means, e.g. by post.\u003c/p\u003e\n\u003cp\u003e 4.3.2 Communication media\nFor the aforementioned communication purposes, we use the following communication media according to the settings and consents stored in the central customer profile__R2WP__n• Email\u003cbr\u003e• Messenger Services\u003cbr\u003e• Phone\u003cbr\u003e• Post \u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e4.4 Revocation of consents and objections to Member Advertising\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e4.4.1 Revocation of consents\nAs a subscriber to the email newsletter, you can revoke your consent to the processing of your email address to send the email newsletter at any time. The revocation can be made via the relevant link in each email newsletter or by email with the subject \u0026quot;Unsubscribe\u0026quot; to \u003ca href=\"mailto__R2WP__u0026#x75;\u0026#x70;\u0026#100;\u0026#x61;\u0026#116;\u0026#x65;\u0026#64;\u0026#x6e;\u0026#x65;\u0026#x77;\u0026#x73;\u0026#46;\u0026#x68;\u0026#114;\u0026#x65;\u0026#x77;\u0026#97;\u0026#114;\u0026#100;\u0026#115;\u0026#x2e;\u0026#x63;\u0026#111;\u0026#109;\"\u003e\u0026#x75;\u0026#x70;\u0026#100;\u0026#x61;\u0026#116;\u0026#x65;\u0026#64;\u0026#x6e;\u0026#x65;\u0026#x77;\u0026#x73;\u0026#46;\u0026#x68;\u0026#114;\u0026#x65;\u0026#x77;\u0026#97;\u0026#114;\u0026#100;\u0026#115;\u0026#x2e;\u0026#x63;\u0026#111;\u0026#109;\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e4.4.2 Objections to Member Advertising\nYou can object to the use of your email address for the purpose of sending advertising to existing customers or members at any time without incurring any costs other than the transmission costs according to the basic rates. For more information on exercising your right to object to the use of your email address for direct marketing purposes, please refer to the section above “Your rights as a data subject”.\u003c/p\u003e\n\u003cp\u003eCurrent version: February 2023\u003c/p\u003e\n\u003chr\u003e\n\u003ch2 id=\"data-privacy-information---website\"\u003eDATA PRIVACY INFORMATION - WEBSITE\u003c/h2\u003e\n\u003cp\u003eThe following information is designed to give an overview of how we process your personal data in connection with the services outlined below and to inform you about your rights under the European Data Protection Regulation (GDPR)__R2WP__u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eProcessing personal data as part of contacting us with general inquiries\u003c/li\u003e\n\u003cli\u003eProcessing personal data in the context of reservations of tables in bars or restaurants or appointments and bookings of spa visits\u003c/li\u003e\n\u003cli\u003eProcessing personal data in connection with and directly after your stay at one of our hotels\u003c/li\u003e\n\u003cli\u003eProcessing personal data as part of video surveillance on our premises\u003c/li\u003e\n\u003cli\u003eProcessing personal data in connection with digital offers (newsletters), existing customer marketing, and program information\u003c/li\u003e\n\u003cli\u003eProcessing personal data as part of your membership of our loyalty program and loyalty programs of our cooperation partners\u003c/li\u003e\n\u003cli\u003eMandatory communication as part of the loyalty program\u003c/li\u003e\n\u003cli\u003eProcessing personal data as part of purchasing vouchers\u003c/li\u003e\n\u003cli\u003eProcessing personal data as part of arranging services\u003c/li\u003e\n\u003cli\u003eProcessing personal data by a processor on behalf of the controller\u003c/li\u003e\n\u003cli\u003eProcessing personal data in the context of using this website\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eI.\t\u003cstrong\u003eGeneral information and your rights as data subject\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e1.\tParty responsible for data processing (“controller”)\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e2. The controller as defined in Article 4 (7) GDPR\u003c/strong\u003e is__R2WP__u003c/p\u003e\n\u003cp\u003eSteigenberger Hotels GmbH\nLyoner Straße 25\n60528 Frankfurt am Main, Germany\nPhone: +49 (0)69 66564-460\nFax: +49 (0)69 66564-888 \nE-Mail: \u003ca href=\"mailto__R2WP__u0026#x73;\u0026#101;\u0026#114;\u0026#118;\u0026#x69;\u0026#x63;\u0026#101;\u0026#64;\u0026#104;\u0026#x72;\u0026#101;\u0026#x77;\u0026#x61;\u0026#x72;\u0026#100;\u0026#115;\u0026#46;\u0026#x63;\u0026#x6f;\u0026#x6d;\"\u003e\u0026#x73;\u0026#101;\u0026#114;\u0026#118;\u0026#x69;\u0026#x63;\u0026#101;\u0026#64;\u0026#104;\u0026#x72;\u0026#101;\u0026#x77;\u0026#x61;\u0026#x72;\u0026#100;\u0026#115;\u0026#46;\u0026#x63;\u0026#x6f;\u0026#x6d;\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eFull details pursuant to Section 5 of the German Digital Services Act (Digitale-Dienste Gesetz DDG) \u003ca href=\"en/legal/imprint\"\u003e(Imprint)\u003c/a\u003e\u003c/p\u003e\n\u003col start=\"3\"\u003e\n\u003cli\u003e Contact details of the Data Protection Officer\nYou can contact our Data Protection Officer at\u003c/li\u003e\n\u003c/ol\u003e\n\u003cp\u003eTÜV Informationstechnik GmbH\nAm TÜV 1\n45307 Essen, Germany\n\u003ca href=\"mailto:datenschutz@deutschehospitality.com\"\u003eE-Mail\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e4.\tYour rights as a data subject\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eEvery data subject whose personal data is processed has the right of access to obtain from the controller information about the personal data concerning him or her pursuant to Art. 15 GDPR, the right to rectification pursuant to Art. 16 GDPR, the right to erasure pursuant to Art. 17 GDPR, the right to restriction of processing pursuant to Art. 18 GDPR, the right to object to processing pursuant to Art. 21 GDPR, and the right to data portability pursuant to Art. 20 GDPR. In addition, the restrictions pursuant to Sections 34 and 35 of the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) apply to the right of access by the data subject and the right to erasure.\u003c/p\u003e\n\u003cp\u003eWhere processing of your personal data is based on your consent that you have given us, you have the right to withdraw your consent at any time without this affecting the lawfulness of processing based on consent before its withdrawal.\u003c/p\u003e\n\u003cp\u003eIn addition, data subjects have the right to lodge a complaint with the responsible Data Protection Authority under Art. 77 GDPR in conjunction with Section 19 BDSG.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e5.\tProcessing the data of minors\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eMinors may not transmit any personal data to us without the consent of a parent or legal guardian. We do not process any data knowingly obtained from minors on our website.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e6.\tAutomated decision-making and profiling\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eWhen entering into or performing a contract with you, you will not be subject to any decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, as set out in Art. 22 GDPR.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e7.\tAdditional information on your right to object pursuant to Art. 21 GDPR\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eYou have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Art. 6 (1) (f) GDPR (data processing on the basis of balancing interests). \u003c/p\u003e\n\u003cp\u003eIf you object, your personal data will no longer be processed unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or unless the processing is carried out for the establishment, exercise, or defense of legal claims.\u003c/p\u003e\n\u003cp\u003eIf your personal data is processed by us for the purpose of existing customer marketing, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing. To object to processing you can use the unsubscribe function in digital media, select the corresponding settings in the membership or subscriber area, use the contact form on our website, or use the contact details provided in section I. to inform us of your objection without using a particular format.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e8.\tPersonal data storage periods and criteria for determining these periods\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eWe process and store your personal data for as long as is necessary to fulfill our contractual and legal duties and obligations. If the data is no longer required to fulfill our contractual duties, it will be erased on a regular basis unless temporary further processing of the data is necessary because of \u003c/p\u003e\n\u003cp\u003e(a) national or regional registration laws and regulations at the place of data collection and/or contract performance \u003c/p\u003e\n\u003cp\u003e(b) national retention periods under commercial or fiscal law at the place of data collection and/or contract performance \u003c/p\u003e\n\u003cp\u003e(c) national, regional, or local tax regulations (such as visitors’ tax, tourist tax, etc.) at the place of data collection and/or contract performance \u003c/p\u003e\n\u003cp\u003e(d) membership of our own H Rewards loyalty program \u003c/p\u003e\n\u003cp\u003eThe periods for retention and/or documentation specified thereunder are usually two to ten years. For further information on the storage period of your personal data please see the relevant sections on different types of processing. \u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e9.\tDocumentation of modifications to and corrections of personal data\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eUnder our duty of documentation, we process and keep a record of all modifications to and corrections of your personal data such as\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFirst and last name \u003c/li\u003e\n\u003cli\u003eHome address and, where different, billing and correspondence addresses \u003c/li\u003e\n\u003cli\u003eDate of birth \u003c/li\u003e\n\u003cli\u003eGender, salutation, title \u003c/li\u003e\n\u003cli\u003eEmail address(es) if multiple addresses are used or specified \u003c/li\u003e\n\u003cli\u003ePhone number(s) if multiple numbers are used or specified \u003c/li\u003e\n\u003cli\u003ePassport data\u003c/li\u003e\n\u003cli\u003eLoyalty program membership numbers \u003c/li\u003e\n\u003cli\u003ePreferences and wishes related to your stay \u003c/li\u003e\n\u003cli\u003eGeneral interests, preferences, and wishes \u003c/li\u003e\n\u003cli\u003ePassword\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003e10.\tDuty to provide data\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eYou have a duty to provide personal data whenever this data is required in order (to render our services) or whenever we are required by law to collect this data; this applies in particular to\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eperforming an accommodation contract \u003c/li\u003e\n\u003cli\u003emanaging your membership account of our own loyalty program, H Rewards\u003c/li\u003e\n\u003cli\u003ecomplying with registration laws and requirements applicable at the hotel location\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eIf you fail to provide us with necessary information we may not be able to provide the requested services in full or may not be able to provide them at all.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eII.\tContacting us\u003c/strong\u003e\nContacting us with general inquiries through our website or the service center\nYou can contact us in various ways, including via the contact form on our website or by calling our service center.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e1.\tProcessed personal data\u003c/strong\u003e\nAs part of general inquiries, we receive, process, and store the following personal data depending on the nature of your request__R2WP__u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFirst and last name \u003c/li\u003e\n\u003cli\u003eGender, salutation, title,\u003c/li\u003e\n\u003cli\u003eEmail address(es) if multiple addresses are used or specified \u003c/li\u003e\n\u003cli\u003ePhone number(s) if multiple numbers are used or specified \u003c/li\u003e\n\u003cli\u003eLoyalty program membership numbers \u003c/li\u003e\n\u003cli\u003eOther personal data that you provide voluntarily in your inquiry\u003c/li\u003e\n\u003cli\u003eAudio recordings of calls to the service center (only with your consent)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003e2.\tPurposes and legal bases of processing your personal data\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eWe process your personal data for the following purposes and on the following legal bases__R2WP__nTo process your queries, requests for information, and complaints if such processing is related to the performance of a contract or the implementation of pre-contractual measures. In this case, the legal basis for processing your personal data is Art. 6 (1) (b) GDPR. \nIn other cases, the legal basis is our legitimate interest in effectively processing any queries that we receive pursuant to Art. 6 (1) (f) GDPR.\nCalls to our service center are only recorded if you have previously consented to this (Art. 6 (1) (a) GDPR). Recordings are only made for the purpose of providing training for employees on how to handle queries. \u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e3.\tCategories of recipients of personal data\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eIf you have a direct question for the hotel, for example regarding your reservation, your query will be forwarded directly to that hotel. We also work with a service provider in our service center who supports us in handling your queries.\u003cbr\u003eIf your query is related to data privacy, such as requests for information, it will be forwarded to the data protection department for processing. \nAll other queries will be forwarded to the offices/departments whose involvement is necessary for handling your query. \u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e4.\tDuration of storage of personal data\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eIf you contact us we will store your personal data. The only purpose of storing your data is to be able to deal with your request and to contact you. Your contact requests are usually erased after 10 years.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e5.\tTransfer of data to third countries\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eIf your query is related to a hotel in a third country, the data that we receive when you contact us will be transferred to the third country where the hotel is located to be dealt with. \u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eIII.\tProcessing your personal data in connection with your stay\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eQueries, bookings/reservations, travel preparations, arrival/check-in, departure\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e1.\tProcessed personal data\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eWe process your data in order to handle and manage your reservation requests and reservations and to provide our services under the accommodation contract, including managing your stay at our hotel (including the access to the hotel)and processing the payment. In addition, the hotels are generally obligated under the relevant applicable registration laws and regulations to collect the aforementioned personal data from guests staying at the hotel. We also process and store any preferences and wishes expressed to us on a voluntary basis which are either relevant to the specific visit or are of a general nature (recurring requirements, preferences, and wishes). We are also obligated under our contract with you to inform you of any significant changes. We will use the personal data we hold on you for this purpose.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFirst and last name \u003c/li\u003e\n\u003cli\u003eHome address and, where different, billing and correspondence addresses\u003c/li\u003e\n\u003cli\u003eDate of birth \u003c/li\u003e\n\u003cli\u003ePayment data and credit card data\u003c/li\u003e\n\u003cli\u003eGender, salutation, title\u003c/li\u003e\n\u003cli\u003eEmail address(es) if multiple addresses are used or specified\u003c/li\u003e\n\u003cli\u003ePhone number(s) if multiple numbers are used or specified\u003c/li\u003e\n\u003cli\u003ePassport data\u003c/li\u003e\n\u003cli\u003eReservation number\u003c/li\u003e\n\u003cli\u003eLoyalty program membership numbers\u003c/li\u003e\n\u003cli\u003ePreferences and wishes related to your stay\u003c/li\u003e\n\u003cli\u003eGeneral interests, preferences, and wishes\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003e2.\tPurposes and legal bases of processing your personal data\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eWe process your personal data for the following purposes and on the following legal bases__R2WP__u003c/p\u003e\n\u003cp\u003eTo handle and manage your reservation requests and reservations and provide our services under the accommodation contract, including managing your stay at our hotel and processing payment (in particular also for tracking your use of our services (telephone, bar, spa, chargeable TV channels etc.), performing check-in activities (digitally and on site), and managing access to the rooms). The legal basis for this is Art. 6 (1) (b) GDPR.\u003c/p\u003e\n\u003cp\u003eAs part of contractual performance, we are required to inform you of any significant changes that occur during your stay. We provide this information preferably via email to the email address stored in the central guest profile. If this is no longer valid we reserve the right to contact you by different means, such as by post. The legal basis for this is the performance of our accommodation contract with you pursuant to Art. 6 (1) (b) GDPR.\u003c/p\u003e\n\u003cp\u003eTo fulfill a legal obligation that our company is subject to as the controller (e.g., due to registration laws, fiscal law, obligation to keep records, etc.). The legal basis for this is Art. 6 (1) (c) GDPR.\nTo ensure that your stay with us meets your needs and expectations based on your personal data that is already stored in our system and helps us recognize you at all service contact points (in person and/or digital), in particular if you are a member of our loyalty program, e.g., data transferred with your reservation, data provided voluntarily during previous visits (regular guests, returning guests), and any add-on services or requirements related to your visit, e.g., bouquet of flowers in your room, two pillows. The legal basis for this is Art. 6 (1) (f) GDPR. Our legitimate interest is in offering our guests the highest possible standard of service.\u003c/p\u003e\n\u003cp\u003eTo create, edit, manage, and update your membership account and to correctly deal with any credits and debits to your membership account as well as to provide our services as part of your membership of our H Rewards loyalty program. The legal basis for this is Art. 6 (1) (b) GDPR.\nTo process bonus credits (points, miles, etc.) and other services rendered as part of your membership of the loyalty programs of our \u003ca href=\"/en/partners\"\u003ecooperation partners\u003c/a\u003e. The legal basis for this is the performance of the contract pursuant to Art. 6 (1) (f) GDPR.\nTo maintain, assure, and improve the quality of our products and services, in particular by carrying out and analyzing satisfaction surveys and comments from guests, by processing your personal data in our central guest database, which allows us to recognize you as a returning guest, to better assess your needs and wishes, to improve the quality and personal touch of our communication with you, and to create offers tailored to you – the legal basis for this is Art. 6 (1) (f) GDPR. Our overriding legitimate interests arise from the accommodation contract entered into with you, which constitutes a relevant and appropriate relationship within the meaning of recital (47) GDPR, and from the fact that this type of data processing is customary for international hotel chains and in line with the reasonable expectations of the majority of guests. As part of a group of companies, which includes businesses operating hotels under the umbrella brand H World International, our company also has a legitimate interest pursuant to recital 48 GDPR, namely to transfer personal data of guests within the group of companies for internal administrative purposes.\u003c/p\u003e\n\u003cp\u003eTo uphold the house rules, to prevent and investigate crimes and offenses, to assert legal claims and defend against legal claims and represent our interests in legal disputes, to ensure IT security and maintain IT operations, to identify risks related to creditworthiness – the legal basis for this is Art. 6 (1) (f) GDPR. Our overriding legitimate interests stem from our obligation to ensure our guests’ safe and secure stay at the hotel and from our interest in asserting our material and immaterial claims and exercising our rights and in defending ourselves against unjustified claims. Furthermore, it is also a legitimate interest of our company to process personal data to the extent strictly necessary in order to prevent fraud pursuant to recital (47) GDPR.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e3.\tCategories of recipients of personal data\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eIf and where necessary for the aforementioned purposes, we will also disclose your personal data to the following recipients or categories of recipients as defined in Art. 4 (9) GDPR__R2WP__nWithin our company, only those offices/departments that need your personal data in order for us to fulfill our contractual and legal duties will be able to view or access it (to the extent necessary).\u003c/p\u003e\n\u003cp\u003eTo the extent that your personal data is processed in our central guest database it will also be disclosed to other companies that operate one or several hotels of the brands which are part of H World International (Steigenberger Hotel \u0026amp; Resorts, IntercityHotel, Jaz in the city, Maxx by Steigenberger). The respective operators of each of these hotels are shown on \u003ca href=\"/en/legal/operating-company\"\u003ethe list\u003c/a\u003e of hotel operators. \u003ca href=\"/en/legal/operating-company\"\u003eThis list\u003c/a\u003e is updated on a regular basis and all hotels that use our central guest database are specially marked here. \nWhen crediting any points accrued by you in membership programs of cooperation partners during your visit, we transfer your data to the relevant \u003ca href=\"/en/partners\"\u003ecooperation partners\u003c/a\u003e. \u003c/p\u003e\n\u003cp\u003eService providers used by us (e.g., for data processing on our behalf as set out in Art. 28 GDPR) and vicarious agents may also receive personal data for these purposes. These are companies that belong to the categories of credit services and payment processing, IT services, cleaning services, logistics, printing services, telecommunications, debt collection, consulting, and sales and marketing. The relevant service providers are shown in \u003ca href=\"/en/service-providers-processors\"\u003eThe list\u003c/a\u003e of service providers/processors , which is updated on a regular basis.\nFurthermore, data may be transferred to official bodies and institutions if we are under a legal obligation to do so (e.g., fiscal authorities, law enforcement authorities, registration authorities).\nOther recipients of data may be those bodies and institutions to which you have given your consent for the transfer of data.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e4.\tDuration of storage of personal data\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eWe process and store your personal data for as long as is necessary to fulfill our contractual and legal duties and obligations. When the data is no longer needed for the fulfillment of contractual obligations, it will regularly be erased unless temporary further processing of the data is necessary because of retention periods specified under commercial and fiscal law (including the German Commercial Code (Handelsgesetzbuch, HGB), the German Fiscal Code (Abgabenordnung, AO), the German Federal Act on Registration (Bundesmeldegesetz, BMG)). The periods of retention and/or documentation specified thereunder are between two and ten years.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e5.\tTransfer of data to third countries\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eIf you booked a stay in a hotel in a country outside the European Union (third country), your data will be transferred to this third country if it is necessary to do so in order to make your reservations and manage your stay at the hotel. If you are a member of our loyalty program or that of one of our cooperation partners, it will be necessary to transfer the points you accrued to the partner to perform services under the membership scheme. \u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e6.\tMerging your guest profiles\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eYour personal data is collected at various points of contact (e.g., membership account, hotel) in different ways (in writing and digitally). This is why it may be the case that multiple different guest profiles exist in our database which contain inconsistent information. As we strive to offer you the best possible service and wish to ensure that your personal data is processed correctly, we are keen to merge multiple copies of data into one unique profile using unique characteristics, such as first name, last name, and address. To merge guest profiles, we use the information collected in the context of your H Rewards membership and your stay in our hotel as well as the personal data that you communicated to us in any other way on a voluntary basis.\u003c/p\u003e\n\u003cp\u003eThe legal basis for this is Art. 6 (1) (f) GDPR. Without this automated and sometimes necessary manual merging we cannot ensure that your personal data will be processed properly and correctly. This is why we have a legitimate interest in merging the data.\u003c/p\u003e\n\u003cp\u003eThe processing and merging is carried out in the central guest database of Steigenberger Hotels GmbH.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eIV.\tOther processing immediately after your stay (post-stay messages)\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eAfter your stay you will receive from us a post-stay message in which we ask you to rate your stay in our hotel (satisfaction survey) unless you have previously unsubscribed from this communication by email or by using the unsubscribe link in a post-stay message. \u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e1.\tProcessed personal data\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFirst and last name\u003c/li\u003e\n\u003cli\u003eMembership number\u003c/li\u003e\n\u003cli\u003eGender, salutation, title\u003c/li\u003e\n\u003cli\u003eIP address\u003c/li\u003e\n\u003cli\u003eEmail address(es) if multiple addresses are used or specified\u003c/li\u003e\n\u003cli\u003ePreferences and wishes related to your stay \u003c/li\u003e\n\u003cli\u003eGeneral interests, preferences, and wishes\u003c/li\u003e\n\u003cli\u003eData that you transfer to us in a satisfaction survey\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003e2.\tPurposes and legal bases of processing personal data\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eWe process your personal data for the following purposes and on the following legal bases__R2WP__u003c/p\u003e\n\u003cp\u003eTo maintain, assure, and improve the quality of our products and services, in particular through analyzing complaints, satisfaction surveys, and comments from guests. The legal basis for this is our legitimate interest in offering our customers the best possible service pursuant to Art. 6 (1) (f) GDPR.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e3.\tCategories of recipients of personal data\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eIn the context of the customer satisfaction survey included in the post-stay messages we work with a service provider who is the recipient of this data (processor).\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e4.\tDuration of storage of personal data\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eWe store any data collected in the customer satisfaction survey for a period of 3 years. Your IP address will be anonymized after 28 days. \u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e5.\tTransfer of data to third countries\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eWe do not intend to transfer this data to a third country or an international organization.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eV.\tVideo surveillance on our premises during your stay\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"/legal/video-surveillance\"\u003eVideo surveillance\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eVI.\tProcessing personal data in connection with digital offers (newsletter), existing customer marketing, and program information\u003c/strong\u003e\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003e Newsletter\nOur email newsletter provides you with information on a regular basis and in line with your specified preferences about the offers and services provided by the hotels belonging to H World International (see list of hotel operators), the offers and services provided by our cooperation partners \u003ca href=\"/en/partners\"\u003e(see list)\u003c/a\u003e , and the offers associated with your membership of the H Rewards loyalty program.\u003c/li\u003e\n\u003c/ol\u003e\n\u003cp\u003eIf you wish to receive the email newsletter, we need you to provide us with a valid email address. We use the double-opt-in process for you to sign up to our newsletter. This means we will send an email to the specified email address after you register asking you to confirm that you wish to receive the newsletter. If you fail to confirm your sign-up within a period of two weeks, your information will be blocked and, after one month, automatically erased. We also store the IP address used by you in each case and the times of your registration and confirmation. The purpose of this process is to be able to prove your registration and, where necessary, investigate any misuse of your personal data.\u003c/p\u003e\n\u003cp\u003e1.1.\tProcessed personal data\nWe process the following personal data in connection with sending our newsletter__R2WP__u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFirst and last name \u003c/li\u003e\n\u003cli\u003eHome address and, where different, billing and correspondence addresses\u003c/li\u003e\n\u003cli\u003eDate of birth \u003c/li\u003e\n\u003cli\u003eIP address\u003c/li\u003e\n\u003cli\u003eGender, salutation, title \u003c/li\u003e\n\u003cli\u003eEmail address(es) if multiple addresses are used or specified\u003c/li\u003e\n\u003cli\u003eLoyalty program membership numbers \u003c/li\u003e\n\u003cli\u003eGeneral interests, preferences, and wishes\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e1.2.\tPurposes and legal bases of processing personal data\nWe process your personal data for the following purposes and on the following legal bases__R2WP__u003c/p\u003e\n\u003cp\u003eTo send our email newsletter to you, including administering your subscription to the newsletter. The legal basis for this is your consent pursuant to Art. 6 (1) (a) GDPR.\nAs a subscriber to our email newsletter, you may withdraw at any time your consent to us processing your data in order to send our email newsletter. To withdraw your consent, you can use the relevant link included in every email newsletter or send an email to \u003ca href=\"mailto__R2WP__u0026#110;\u0026#x65;\u0026#119;\u0026#x73;\u0026#x40;\u0026#117;\u0026#x70;\u0026#x64;\u0026#97;\u0026#116;\u0026#101;\u0026#x2e;\u0026#x68;\u0026#x72;\u0026#101;\u0026#x77;\u0026#x61;\u0026#x72;\u0026#x64;\u0026#x73;\u0026#46;\u0026#99;\u0026#111;\u0026#x6d;\"\u003e\u0026#110;\u0026#x65;\u0026#119;\u0026#x73;\u0026#x40;\u0026#117;\u0026#x70;\u0026#x64;\u0026#97;\u0026#116;\u0026#101;\u0026#x2e;\u0026#x68;\u0026#x72;\u0026#101;\u0026#x77;\u0026#x61;\u0026#x72;\u0026#x64;\u0026#x73;\u0026#46;\u0026#99;\u0026#111;\u0026#x6d;\u003c/a\u003e specifying \u0026quot;Abmelden\u0026quot; (Unsubscribe) in the subject line.\u003c/p\u003e\n\u003cp\u003e1.3.\tCategories of recipients of personal data\nWe use an external service provider (processor) to send our newsletters to subscribers. \n1.4.\tDuration of storage of personal data\nAs soon as you withdraw your consent to receive the newsletter, your personal data will be erased. \n1.5.\tTransfer of data to third countries\nWe do not intend to transfer this data to a third country or an international organization.\u003c/p\u003e\n\u003cp\u003e1.6.\tTracking in connection with the newsletter service\nWe use tracking service providers in connection with our newsletter service in order to measure open and click rates of the emails. \u003c/p\u003e\n\u003col start=\"2\"\u003e\n\u003cli\u003e Existing customer marketing\n2.1.\tExisting customer marketing in the context of loyalty program membership\nWe reserve the right to send our loyalty program members emails with offers from our range of services as members’ marketing. \nYour membership allows us to process your personal data provided to us in your membership account or during a visit to one of our hotels for the purpose of members’ marketing.\nFor the purpose of communicating with you as described above, we use the following communication media in accordance with the settings and permissions stored in the central guest profile__R2WP__u003c/li\u003e\n\u003c/ol\u003e\n\u003cul\u003e\n\u003cli\u003eEmail\u003c/li\u003e\n\u003cli\u003eTelephone\u003c/li\u003e\n\u003cli\u003ePost\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e2.2.\tExisting customer marketing\nWe reserve the right to send our guests emails with offers from our range of services as existing customer marketing. Our legitimate interest in engaging in existing customer marketing is to be able to offer our guests targeted, individual offers prepared on the basis of a previous booking (transaction) or existing customer relationship. We may process your personal data provided to us in a booking for a period of 12 months after the transaction was made in order to send marketing messages to existing customers. If no other booking or other transaction is made within this period, your personal data will no longer be processed for the purpose of existing customer marketing and will therefore be erased unless you have a newsletter subscription or your personal data must be retained for longer due to other arrangements.\nYou may object at any time to the use of your email address for the purpose of sending marketing to existing customers without incurring any costs other than the transmission costs at basic rates. If your personal data is processed by us for the purpose of existing customer marketing, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing.\u003c/p\u003e\n\u003cp\u003e2.3.\tProcessed personal data\nWe collect the following personal data in connection with existing customer marketing__R2WP__u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFirst and last name \u003c/li\u003e\n\u003cli\u003eHome address and, where different, billing and correspondence addresses\u003c/li\u003e\n\u003cli\u003eDate of birth \u003c/li\u003e\n\u003cli\u003eGender, salutation, title \u003c/li\u003e\n\u003cli\u003eEmail address(es) if multiple addresses are used or specified\u003c/li\u003e\n\u003cli\u003eLoyalty program membership numbers \u003c/li\u003e\n\u003cli\u003eGeneral interests, preferences, and wishes\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e2.4.\tPurposes and legal bases of processing personal data\nWe process your personal data for the following purposes and on the following legal bases__R2WP__u003c/p\u003e\n\u003cp\u003eTo send marketing messages about our offers and services to existing customers – the legal basis for this is Art. 6 (1) (f) GDPR. Our legitimate interest in engaging in existing customer marketing is to inform our members about their current membership status and send our members and existing customers targeted, individual, exclusive offers.\u003c/p\u003e\n\u003cp\u003eYou may object at any time to the use of your email address for the purpose of sending marketing to existing customers or members without incurring any costs other than the transmission costs at basic rates. More detailed information on exercising your right to object to the use of your email address for direct marketing measures is provided within this Privacy Policy.\u003c/p\u003e\n\u003cp\u003e2.5.\tCategories of recipients of personal data\nWhen we carry out existing customer marketing measures, your personal data will only be disclosed to those employees in our company who can view our central guest database. In addition, we use an external service provider (processor) to send marketing messages to existing customers.\u003c/p\u003e\n\u003cp\u003e2.6.\tDuration of storage of personal data\nIf no other booking or other transaction is made within a period of 12 months, your personal data will no longer be processed for the purpose of existing customer marketing and will therefore be erased unless you have a newsletter subscription, are a loyalty program member, or your personal data must be retained for longer due to other arrangements.\u003c/p\u003e\n\u003cp\u003e2.7.\tTransfer of data to third countries\nWe do not intend to transfer this data to a third country or an international organization.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eVII.\tLoyalty program membership, membership account (user account / account), communication\u003c/strong\u003e\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003e Membership/user account\nYou can register as a member of the H Rewards loyalty program (user account / account) in accordance with the applicable Terms \u0026amp; Conditions of Membership by providing us with your full first name and last name, salutation, your current home address, your date of birth, your preferred email address and specifying a password. You can register in the following ways__R2WP__u003c/li\u003e\n\u003c/ol\u003e\n\u003cul\u003e\n\u003cli\u003eon the H Rewards app\u003c/li\u003e\n\u003cli\u003eon the H Rewards website \u003c/li\u003e\n\u003cli\u003eduring the booking process \u003c/li\u003e\n\u003cli\u003ebefore using the high-speed Wi-Fi or\u003c/li\u003e\n\u003cli\u003eafter receiving an invitation to register sent out by a hotel employee\u003c/li\u003e\n\u003cli\u003eby scanning a registration QR code\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFollowing your successful registration, a membership account will be created automatically based on the applicable Terms \u0026amp; Conditions of Membership. \nWhen you register to become a member, you are deemed to have agreed to the transfer of the data that you provided during your registration to the relevant operators of the brands of H World International.\u003c/p\u003e\n\u003cp\u003eYou can view and amend your personal details in the membership account. Any important information regarding your membership, such as your membership status, will also be displayed here. In the members’ area, you can book hotel accommodation or cancel bookings that you made on the website or the app specifying your membership details and you can redeem rewards according to your account status. You may cancel your membership at any time. The membership account will be automatically deleted after the final cancelation of the membership (see cancelation in the terms and conditions of membership).\u003c/p\u003e\n\u003cp\u003e1.1\tProcessed personal data\nWe process the following personal data as part of your membership of our own loyalty program__R2WP__n• First and last name \n• Home address and, if different, billing and communication addresses\n• Date of birth\n• Gender, salutation, title \n• Email address(es) if multiple addresses are used or specified \n• Phone number(s) if multiple numbers are used or specified \n• Loyalty program membership number \n• Preferences and wishes related to your stay \n• General interests, preferences, and wishes \n• Password \n• Reward redemptions\u003c/p\u003e\n\u003cp\u003e1.2\tPurposes and legal bases of processing personal data\nWe process your personal data for the following purposes and on the following legal bases__R2WP__nTo carry out and manage your membership of our loyalty program – the legal basis for this is the performance of our contract with you pursuant to Art. 6 (1) (b) GDPR. The legal bases for processing your personal data in connection with the creation and use of your membership account are your membership in accordance with the Terms \u0026amp; Conditions of the Loyalty Program as well as Art. 6 (1) (b) GDPR.\nTo create, edit, manage, and update your membership account and to correctly deal with any credits and debits to your membership account as well as to provide our services as part of your membership of our H Rewards loyalty program. The legal basis for this is Art. 6 (1) (b) GDPR.\nTo create statistics based on anonymized data analyses to improve and enhance products, services, and the contents of the H Rewards loyalty program. The legal basis for this is our legitimate interest in enhancing our loyalty program pursuant to Art. 6 (1) (f) GDPR.\nFor authentication and fraud prevention in the context of your membership of the H Rewards loyalty program or a loyalty program of one of our cooperation partners, such as Miles \u0026amp; More or bahn.bonus. The legal basis for this is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. \u003c/p\u003e\n\u003cp\u003eTo ensure comprehensive recognition, in particular of members of our loyalty program, across all service contact points (in person and/or digital) at hotels belonging to H World International and to ensure automatic updates of your recurring wishes, preferences, and needs, e.g., always two pillows, in order for us to provide you with a high-quality service appropriate to the hotel brand. The legal basis for this is our legitimate interest pursuant to Art. 6 (1) (f) GDPR to provide our customers with the highest possible standard of service.\u003c/p\u003e\n\u003cp\u003e1.3\tCategories of recipients of personal data\nIn the context of fulfilling the membership requirements it is necessary for us to transfer your data to various recipients. These are in particular the hotels of H World International and our cooperation partners. \n1.4\tDuration of storage of personal data\nYour membership account data will be stored until your membership is canceled. Any unredeemed points, rewards, and the membership status achieved will become invalid six months after the cancelation\u0026#39;s effective date. \n1.5\tTransfer of data to third countries\nIf you provide your membership number voluntarily for a stay in a hotel located in a third country, your data will be transferred to the hotel in question so that the points can be credited. \u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e2.\tCommunication in the context of a contract\u003c/strong\u003e\nAs part of the performance of the contract with you, we are required by law to inform you of any significant changes that occur during your stay. We primarily provide this information via email to the email address stored in the central customer profile. If this is no longer valid we reserve the right to contact you by different means, such as by post.\u003c/p\u003e\n\u003cp\u003e2.1\tCommunication media\nFor the purpose of communicating with you as described above, we use the following communication media in accordance with the settings and permissions stored in the central customer profile__R2WP__u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eEmail\u003c/li\u003e\n\u003cli\u003eMessenger services\u003c/li\u003e\n\u003cli\u003eTelephone\u003c/li\u003e\n\u003cli\u003ePost\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e2.2\tMandatory communication as part of the loyalty program\nAs part of operating the loyalty program, we are required by law to inform you of any changes to the program (Terms \u0026amp; Conditions of Membership). We usually provide this information via email to the email address stored in the membership account. If this is no longer valid we reserve the right to contact you by different means, such as by post.\n2.3\tCategories of recipients of personal data\nWe use an external service provider to send out our communications. \n2.4\tDuration of storage of personal data\nAs part of operating the loyalty program, we are required by law to inform you of any changes to the program.\n2.5\tTransfer of data to third countries\nWe do not intend to transfer this data to a third country or an international organization. \u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e3.\tMembership of a loyalty program of a cooperation partner\u003c/strong\u003e\nWe process personal data in connection with your membership of a loyalty program of one of our cooperation partners, such as Miles \u0026amp; More or bahn.bonus. [(List of cooperation partners)]/en/partners\u003c/p\u003e\n\u003cp\u003e3.1\tProcessed personal data \n• Email address(es) if multiple addresses are used or specified \n• Loyalty program membership numbers \u003c/p\u003e\n\u003cp\u003e3.2\tPurposes and legal bases of processing personal data\nWe process your personal data for the following purposes and on the following legal bases__R2WP__u003c/p\u003e\n\u003cp\u003eTo process bonus credits (points, miles, etc.) and other services rendered as part of your membership of the loyalty programs of our cooperation partners. The legal basis is our legitimate interest pursuant to Art. 6 (1) (b) GDPR.\u003c/p\u003e\n\u003cp\u003e3.3\tCategories of recipients of personal data\nIt is necessary to transfer your data to the respective cooperation partner so that the bonus can be credited. \n3.4\tDuration of storage of personal data\nWe will store your data for a period of 10 years.\n3.5\tTransfer of data to third countries\nThe data will only be transferred to a third country in cases where the cooperation partner in question is located in a third country or if you have provided your membership number when making a reservation at a hotel in a third country. In these cases, the data will be transferred on the basis of Art. 49 (1) (b) GDPR.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eVIII.\tPurchasing vouchers\u003c/strong\u003e\nThe voucher shop allows you to purchase general vouchers and hotel-specific vouchers. \n1.\tProcessed personal data \nWe process the following personal data in connection with the purchase of vouchers__R2WP__u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSalutation, title\u003c/li\u003e\n\u003cli\u003eFirst and last name\u003c/li\u003e\n\u003cli\u003eEmail address\u003c/li\u003e\n\u003cli\u003ePhone number\u003c/li\u003e\n\u003cli\u003eDate of birth \u003c/li\u003e\n\u003cli\u003eAddress\u003c/li\u003e\n\u003cli\u003ePayment details\u003c/li\u003e\n\u003c/ul\u003e\n\u003col start=\"2\"\u003e\n\u003cli\u003e\u003cp\u003e Purposes and legal bases of processing personal data\nWe process your personal data for the following purposes and on the following legal bases__R2WP__nTo handle the purchase of vouchers – the legal basis for this is Art. 6 (1) (b) GDPR.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cp\u003e Duration of storage of personal data\nThe data that we received from you when you purchased vouchers will be stored for 10 years.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cp\u003e Categories of recipients of personal data\nWe forward your data to a service provider in order to be able to send you the voucher. We also use various service providers to process the transaction, depending on the payment type. \u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cp\u003e Transfer of data to third countries\nIf you purchase a voucher for a hotel in a third country, the data that we receive from you when you purchase the voucher will be transferred for processing to the third country where the hotel is located.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ol\u003e\n\u003cp\u003eIX.\tBrokering hotel reservations\nOn its website, Steigenberger Hotels GmbH acts as a broker for booking accommodation in hotels of third-party hotel operators \u003ca href=\"/en/legal/operating-company\"\u003e(see list of hotel operators)\u003c/a\u003e. The parties entering into the accommodation contract are yourself and the respective hotel operator. As part of this brokering service it is necessary for us to transfer the data required for the fulfillment of the contract (e.g., first and last name of the guest, reservation period, email address) to the respective hotel operator. The legal basis for this is Art. 6 (1) (b) GDPR. If the brokering service is provided for a reservation in a hotel in a third country, the related transfer of data is based on Art. 49 (1) (b) GDPR.\u003c/p\u003e\n\u003cp\u003eX.\tReservations of tables in bars or restaurants or scheduling and booking of spa visits \nSteigenberger Hotels GmbH offers the possibility to reserve tables in bars or restaurants as well as to schedule and book spa visits in its hotels via the website and app. The RESERViSiON reservation tool is used for this purpose. \nData processing for table reservations via RESERViSiON: We process your personal data via RESERViSiON to make the reservation and to prepare your visit to our restaurant (legal basis Art. 6 para. 1 p. 1 lit. b DSGVO or for voluntary information Art. 6 para. 1 p. 1 lit. a DSGVO). RESERViSiON provides us with your data for this purpose on our behalf. After your visit to the restaurant, your personal data will be deleted from RESERViSiON, unless you have created a user profile with RESERViSiON with your consent in order to make future reservations easier. The following data is stored here: Salutation, first name, surname, e-mail and telephone. If you voluntarily enter further data, this will also be stored in RESERViSiON: title, company, cost centre, street, house number, address suffix, postcode, town, VAT ID number, allergies, reason. You can have your user profile in RESERViSiON deleted at any time by sending an e-mail to RESERViSiON and revoking your consent (\u003ca href=\"mailto__R2WP__u0026#x64;\u0026#x61;\u0026#x74;\u0026#101;\u0026#x6e;\u0026#x73;\u0026#99;\u0026#104;\u0026#x75;\u0026#116;\u0026#x7a;\u0026#64;\u0026#x72;\u0026#x65;\u0026#x73;\u0026#x65;\u0026#114;\u0026#118;\u0026#x69;\u0026#115;\u0026#x69;\u0026#111;\u0026#x6e;\u0026#46;\u0026#x64;\u0026#x65;\"\u003e\u0026#x64;\u0026#x61;\u0026#x74;\u0026#101;\u0026#x6e;\u0026#x73;\u0026#99;\u0026#104;\u0026#x75;\u0026#116;\u0026#x7a;\u0026#64;\u0026#x72;\u0026#x65;\u0026#x73;\u0026#x65;\u0026#114;\u0026#118;\u0026#x69;\u0026#115;\u0026#x69;\u0026#111;\u0026#x6e;\u0026#46;\u0026#x64;\u0026#x65;\u003c/a\u003e).\nAfter your visit to the restaurant, we will send you an e-mail which you can use to rate us. If you do not wish to receive such an e-mail, you can object to it at any time by clicking on the relevant link in the confirmation of your reservation. With your rating you help us to improve our service and quality. Submitted ratings will only be published without reference to your person (anonymised). \nData processing for scheduling and booking spa visits via RESERViSiON: We process your personal data via RESERViSiON to make the reservation and to prepare your visit to our spa (legal basis Art. 6 para. 1 p. 1 lit. b DSGVO or for voluntary information Art. 6 para. 1 p. 1 lit. a DSGVO). RESERViSiON provides us with your data for this purpose on our behalf. After your visit to the spa, your personal data will be deleted from RESERViSiON unless you have created a user profile at RESERViSiON with your consent in order to make future reservations easier. Only the following data will be stored here: Salutation, first name, surname, e-mail and telephone. If you voluntarily enter further data, this will also be stored in RESERViSiON: title, company, cost centre, street, house number, address suffix, postcode, town, VAT ID number, allergies, reason. You can have your user profile in RESERViSiON deleted at any time by sending an e-mail to RESERViSiON and revoking your consent (\u003ca href=\"mailto__R2WP__u0026#x64;\u0026#x61;\u0026#x74;\u0026#x65;\u0026#x6e;\u0026#x73;\u0026#x63;\u0026#104;\u0026#x75;\u0026#x74;\u0026#x7a;\u0026#64;\u0026#x72;\u0026#x65;\u0026#x73;\u0026#101;\u0026#114;\u0026#118;\u0026#105;\u0026#115;\u0026#105;\u0026#x6f;\u0026#110;\u0026#46;\u0026#100;\u0026#x65;\"\u003e\u0026#x64;\u0026#x61;\u0026#x74;\u0026#x65;\u0026#x6e;\u0026#x73;\u0026#x63;\u0026#104;\u0026#x75;\u0026#x74;\u0026#x7a;\u0026#64;\u0026#x72;\u0026#x65;\u0026#x73;\u0026#101;\u0026#114;\u0026#118;\u0026#105;\u0026#115;\u0026#105;\u0026#x6f;\u0026#110;\u0026#46;\u0026#100;\u0026#x65;\u003c/a\u003e).\nAfter your visit to the spa, we will send you an e-mail which you can use to rate us. If you do not wish to receive such an e-mail, you can object to it at any time by clicking on the relevant link in the confirmation of your reservation. With your rating you help us to improve our service and quality. Submitted ratings will only be published without reference to your person (anonymised). \u003c/p\u003e\n\u003cp\u003eXI.\tInformation regarding the use of cookies and payment service providers on this website\n1.\tTransfer to third countries\nIf you consent to the use of cookies , you are at the same time explicitly consenting to the transfer of your personal data pursuant to 49 (1) (a) GDPR to an insecure third country. The United States in particular is regarded by the Court of Justice of the European Union as a country that does not have an adequate level of data protection. There is a risk that your data may be processed by U.S. authorities for control and monitoring purposes and you are left with no effective legal remedies in that regard.\u003c/p\u003e\n\u003cp\u003eAs can be seen specifically from the [List of service providers / processors] (/en/service-providers-processors), our company uses service providers for certain tasks whose registered office is in a third country or who belong to an international group with companies in third countries or who themselves work with service providers based in a third country. The transfer of personal data to such service providers is permitted if the European Commission has decided that the third country in question offers an adequate level of protection (Art. 45 GDPR). In the absence of such a decision, our company or the service provider may transfer personal data to a third country or an international organization only if provisions are made for appropriate safeguards and if enforceable rights and effective legal remedies are available (Art. 46 (1) GDPR). If neither an adequacy decision pursuant to Art. 45 (3) GDPR has been made nor appropriate safeguards pursuant to Art. 46 GDPR are in place, the transfer of your personal data to a third country is only permissible under one of the following conditions__R2WP__u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eYou have explicitly consented to the proposed transfer of data, after having been informed of the possible risks of such transfers for you due to the absence of an adequacy decision and appropriate safeguards\u003c/li\u003e\n\u003cli\u003eThe transfer is necessary for the performance of a contract between you and the controller or for the implementation of pre-contractual measures\u003c/li\u003e\n\u003c/ul\u003e\n\u003col start=\"2\"\u003e\n\u003cli\u003e Integration of payment service providers for online payments \nTo process online payments we use the following external service providers whose platforms you can freely choose between to process your payment__R2WP__u003c/li\u003e\n\u003c/ol\u003e\n\u003cul\u003e\n\u003cli\u003eConcardis GmbH (Helfmann-Park 7, 65760 Eschborn, Germany, Tel. +49 (0)69 79220)\u003c/li\u003e\n\u003cli\u003eAmerican Express Payment Service Limited (Theodor-Heuss-Allee 112, 60486 Frankfurt/Main, Germany)\u003c/li\u003e\n\u003cli\u003ePaypal S.à r.l. et Cie, S.C.A. (22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg)\u003c/li\u003e\n\u003cli\u003eComputop Paygate GmbH (Schwarzenbergstraße 4, 96050 Bamberg, Germany)\u003c/li\u003e\n\u003cli\u003ePPro \u0026amp; Nets\nIf you wish to make an online payment this can be integrated into the booking or voucher purchase processes or you may do so via a corresponding link sent to an email address specified by you. If you click on such a link you will be forwarded to the payment platform. Further details regarding the handling of your personal data in this connection are provided there.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003e3.\tCookies\u003c/strong\u003e\n3.1\tInformation about cookies \nWe use cookies on our website. Cookies are small files created automatically by your browser and stored on your device (laptop, tablet, smartphone, or similar) when you visit our website. Cookies do not cause any harm to your device and do not contain any viruses, Trojans, or other malware. Their purpose is to store information obtained in connection with the specific device that you use. This does not mean, however, that we gain direct knowledge of your identity. \nUsing cookies has a twofold objective: On the one hand, we want to make it more convenient for you to use our website and, on the other hand, we want to gather statistics on the use of our website and analyze these with the aim of optimizing the services we offer you. \nTo achieve this, we use cookies for the following purposes: \u003c/p\u003e\n\u003cp\u003eNecessary functions__R2WP__u003cbr\u003eThese cookies contribute significantly to improving your browsing and booking experience on our website. Basic functionalities and applications such as shopping carts or electronic billing procedures are optimized, and their use is made possible. These cookies do not collect information about you that can be used for marketing campaigns or statistical analysis. These cookies are necessary for the use of the website, the legal basis for these cookies is Art. 6 para. 1 lit. b) DS-GVO and § 25 para. 2 Telekommunikation-Telemedien-Datenschutzgesetz (TTDSG).\u003c/p\u003e\n\u003cp\u003e•\tStatistical analysis__R2WP__u003cbr\u003eStatistical analysis is the processing and presentation of data on user actions and interactions on websites and apps (e.g., number of page visits, number of unique visitors, number of returning visitors, entry and exit pages, time spent, bounce rate, click of buttons, booking or voucher order) and, if applicable, the classification of users into groups based on technical data on the software settings used (e.g., browser type, operating system, language setting, screen resolution). The legal basis for these cookies is consent in accordance with Art. 6 (1) a) DS-GVO and § 25 (1) TTDSG.\u003c/p\u003e\n\u003cp\u003e•\tPersonalized advertising__R2WP__u003cbr\u003eCertain functions of websites and apps are used to display personalized advertising materials (ads or commercials) to users in other contexts, for example on other websites, platforms, or apps. For this purpose, conclusions about the interests of users are drawn from demographic information, search terms used, contextual content, user behavior on websites and in apps, or from the location of users. Based on these interests, advertising materials will be selected and displayed on online content of other providers in the future. The legal basis for these cookies is consent in accordance with Art. 6 (1) a) DS-GVO and § 25 (1) TTDSG.\u003c/p\u003e\n\u003cp\u003e•\tPersonalized advertising incl. data transfer to other countries__R2WP__u003cbr\u003eCertain functions of websites and apps are used to display personalized advertising materials (ads or commercials) to users in other contexts, for example on other websites, platforms or apps. For this purpose, conclusions about the interests of users are drawn from demographic information, search terms used, contextual content, user behavior on websites and in apps or from the location of users. Based on these interests, advertising materials will be selected and displayed at other online content providers in the future. The legal basis for these cookies is consent pursuant to Art. 6 (1) a) DS-GVO and Section 25 (1) TTDSG. In addition, you explicitly consent to the transfer of your personal data to other countries (USA) according to Art. 49 para. 1 lit. a) DSGVO. In the listed countries, there is no adequate level of data protection and there are no suitable guarantees for the protection of your personal data (such as lack of enforcement of data subject rights and possible, inappropriate access to your personal data by state authorities). Your consent to the transfer of your personal data to third countries is voluntary and can be revoked at any time via our Privacy Policy. Further information on the processing of your personal data, including third country transfers, can also be found in our Privacy Policy.\u003c/p\u003e\n\u003cp\u003e3.2\tUsing the cookie consent tool to specify your cookie settings \nYou can use the cookie consent tool to adjust your cookie settings at any time. Click the button in the lower left corner of your screen to open the tool and select your settings for the above mentioned categories of cookies by giving or refusing your consent to the use of these cookies in your browser.\nIn this Privacy Policy you will find information about the partner companies and third-party providers who place cookies on our website and what categories these cookies belong to. \u003c/p\u003e\n\u003cp\u003e\u003ca href=\"#open-privacy-modal\"\u003eConsent Tool\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e3.3\tUsing your browser to specify your cookie settings \nYou can specify in your browser that cookies should only be stored with your consent. Most browsers automatically accept cookies. However, you can reconfigure your browser so that no cookies are stored on your computer or that a warning appears before a new cookie is created. However, if all cookies are deactivated you may not be able to use all the functions of our website. If you want to accept only Steigenberger cookies but not cookies from our partners, then please select the option “Block third-party cookies” in your browser. To find out how you can refuse new cookies and deactivate existing ones, go to the Help function on the menu bar of your web browser. If you use shared computers that accept cookies and flash cookies, we recommend that you always log out completely at the end of your session. \u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e3.4\tCookie providers used\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eCategory \tDuration \tPurpose \u003c/p\u003e\n\u003cp\u003eAWIN AG\nEichhornstraße 3 10785 Berlin, \nGermany\tNecessary functions \t90 days \tBilling purposes \u003c/p\u003e\n\u003cp\u003eCriteo SA\n32 Rue Blanche, 75009 Paris, \nFrance\tPersonalized advertising \t13 months \tAdvertising \u003c/p\u003e\n\u003cp\u003eDailypoint: Toedt, Dr. Selk \u0026amp; Coll. GmbH\nAugustenstr. 79, 80333, Munich, \nGermany\tPersonalized advertising \t90 days max. \tProfiling, advertising \u003c/p\u003e\n\u003cp\u003eDerbySoft (Hong Kong) Limited\n14800 Landmark Blvd., Suite 640, Dallas, Texas 75254, \nUSA\tNecessary functions \t30 days/24 months\tBilling purposes \u003c/p\u003e\n\u003cp\u003eFacebook Inc.\n1 Hacker Way, Menlo Park 94025, CA.\nUSA\tPersonalized advertising \t28 days \tAdvertising \u003c/p\u003e\n\u003cp\u003eMapp Intelligence: Webtrekk GmbH\nRobert-Koch-Platz 4, 10115 Berlin,\nGermany\tStatistical analysis \t6 months \tAnalysis \u003c/p\u003e\n\u003cp\u003eGoogle Ads: Google Ireland Ltd.\nGordon House, Barrow Street, Dublin 4, \nIreland\tPersonalized advertising \t24 months max. \tAdvertising\u003c/p\u003e\n\u003cp\u003eYoutube Video: Google Ireland Ltd.\nGordon House, Barrow Street, Dublin 4, Ireland\t\nPersonalized advertising \t24 months max. \tAdvertising \u003c/p\u003e\n\u003cp\u003eThe Hotels Network S.L. \nCalle Muntaner, 262, 3º-1ª, 08021 Barcelona, Spain\nStorage period: Up to 2 years, Purpose: Advertising\u003c/p\u003e\n\u003cp\u003eMicrosoft Advertising/Bing Ads: Microsoft Corporation\nOne Microsoft Way, Redmond, WA 98052-6399, \nUSA\tPersonalized advertising \t13 months \tAdvertising \u003c/p\u003e\n\u003cp\u003eDuetto Research Inc,\n333 Bush St San Francisco, CA, 94104-2806 United States;\nPersonalized advertising, 180 days period of storage, purpose Analysis\u003c/p\u003e\n\u003cp\u003eTripAdvisor LLC\n400 1st Avenue, Needham, MA 02494\nUSA\tPersonalized advertising \t24 months max. \tAdvertising \u003c/p\u003e\n\u003cp\u003eWingify Software Pvt. Ltd. (VWO)\n14th Floor, KLJ Tower North, Netaji Subhash Place, Pitam Pura, Delhi 110034, India\nPersonalized advertising, 10 years period of storage, purpose A/B Testing\u003c/p\u003e\n\u003cp\u003eLinkedIn\nLinkedIn Ireland Unlimited, Wilton Place, Dublin 2, Irland;\nPersonalized advertising, 180 days period of storage, purpose advertising\u003c/p\u003e\n\u003cp\u003ezenloop GmbH\nErich-Weinert-Straße 145, 10409 Berlin, Germany\tStatistical analysis \t24 months max. \tAnalysis \u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFurther information on the providers of cookies\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003ezenloop\u003c/strong\u003e Recipient: zenloop GmbH, Erich-Weinert-Straße 145, 10409 Berlin, Germany \nProcess: Marketing tools for personalized advertising are all similar in terms of their technical functions, which is why reference is made to this process in the following text with regard to all the providers mentioned above. \nProviders of personalized advertising use technologies such as cookies, tracking pixels, and device fingerprinting in order to show users ads that are relevant to them and to improve the reports on campaign performance. These providers enable us to display interest-based ads on the providers’ websites and on our website. This process also includes processing information stored on the users’ devices. \nThe providers offer functions for this purpose that are generally referred to as remarketing. Remarketing allows website users to be recognized on other websites within the advertising network of the provider and to be presented with ads tailored to their interests. The ads may also be related to products and services that the user has already looked at on our website. This is made possible by analyzing user interaction on our website, e.g., what offers interest the users, in order to show them targeted advertising on other websites even after they leave our website. When a user visits our website the relevant provider places a cookie on the user’s device. The provider then uses cookies or tracking pixels to process the information generated by the users’ devices about their use of our website and their interaction with it as well as their access data, in particular their IP address, browser information, the website visited before the current one, and the date and time of the server request in order to display and analyze personalized ads. \nThe providers mentioned above also use the conversion function to draw attention to our attractive offers with the help of advertising material on external websites. We are able to determine how successful individual campaigns are with regard to the advertising campaign data. The providers use ad servers to deliver this advertising material. We use ad server cookies for this purpose, which enable us to measure certain parameters for measuring reach – e.g., the insertion of ads, the time spent looking at them, or the clicks made by users. This process also includes processing information stored on the users’ devices. If a user lands on our website via one of the provider\u0026#39;s ads, the provider will place a cookie on the user’s device. The provider uses cookies or tracking pixels to process the information generated by the users’ devices about interaction with our advertising material (accessing certain web pages or clicking on an ad) as well as the users’ access data, in particular their IP address, browser information, the website visited before the current one, and the date and time of the server request in order to analyze and visualize the measured reach of our ads. Based on the marketing tools used, the users’ browser automatically establishes a direct connection to the provider’s server. \u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eDerbysoft\u003c/strong\u003e\nRecipient: DerbySoft (Hong Kong) Limited, 14800 Landmark Blvd., Suite 640, Dallas, Texas 75254, USA \nProcess: Derbysoft is a web service for measuring reach as well as for classic conversion tracking. Derbysoft therefore uses technologies such as cookies and tracking pixels in order to track a specific user behavior on the websites of our advertising partners. Derbysoft uses cookies or tracking pixels to process the information generated by the users’ devices about interactions with our advertising material (accessing certain internet pages or clicking on an ad) as well as the users’ access data, in particular their IP address, browser information, the website visited before the current one, and the date and time of the server request in order to analyze and visualize the measured reach of our advertisements. Based on the marketing tools used, the users’ browser automatically establishes a direct connection to the provider’s server. \u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eMapp Intelligence\u003c/strong\u003e\nThis website uses Mapp Intelligence, a web analysis service of Webtrekk GmbH whose registered office is in Berlin, Germany.\u003cbr\u003eRecipient: Webtrekk GmbH, Robert-Koch-Platz 4, 10115 Berlin, Germany \nProcess: The Mapp Intelligence web analysis service uses technologies such as cookies, tracking pixels, and device fingerprinting in order to track a specific user behavior on websites and therefore transfers information to a server of Mapp located in Nuremberg, Germany, where this information is stored. This process also includes processing information stored on the users’ devices. With the help of tracking pixels embedded in websites and the cookies placed on the users’ devices, Mapp Intelligence processes the information generated about the usage of our website by the users’ devices, such as that a specific web page was accessed, and the users’ access data for the purpose of statistical website usage analysis. The access data includes in particular the IP address, browser information, the website visited before the current one, and the date and time of the server request. According to information from Mapp, the IP addresses are anonymized and erased immediately during preprocessing. On behalf of the operator of this website, Mapp will use the information collected by Mapp Intelligence in order to analyze how you use the website, to prepare reports on website activities, and to provide the website operator with further services associated with the use of the website and the internet. For further information about the terms and conditions of use and data privacy at Mapp please go to \u003ca href=\"https://docs.mapp.com/display/CDBD/Allgemeine+Nutzungsbedingungen\"\u003ehttps://docs.mapp.com/display/CDBD/Allgemeine+Nutzungsbedingungen\u003c/a\u003e or \u003ca href=\"https://www.webtrekk.com/privacy-notice.html\"\u003ehttps://www.webtrekk.com/privacy-notice.html\u003c/a\u003e \u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eThe Hotels Network\u003c/strong\u003e\nRecipient: The Hotels Network S.L., Calle Muntaner, 262, 3º-1ª, 08021 Barcelona, Spain\nUsing The Hotels Network, we are able to measure your user behavior in an anonymised way to better understand how visitors use our website and offer a more relevant user experience. To enable this, The Hotels Network generates a backend hash with website users data. As any analysis or processing is always anonymised, it is impossible to identify the user in person from this data. Device identification data (IP addresses, MAC addresses) and user behavior data (visited URLs, completed bookings) are collected from end users and relevant content is displayed to them depending on their behavior.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eWingify\u003c/strong\u003e\nOur websites use Visual Website Optimizer, an A/B testing tool/web analytics service provided by Wingify, 14th Floor, KLJ Tower North, Netaji Subhash Place, Pitam Pura, Delhi 110034, India (hereinafter \u0026quot;Wingify\u0026quot;). Wingify uses cookies that enable an analysis of your use of our websites. The information generated by the cookies about your use of this website and your IP address are transmitted to a Wingify server in Belgium and stored there. For more information about the cookies used, please see this \u003ca href=\"https://vwo.com/knowledge/what-are-the-cookies-stored-by-vwo/\"\u003elink\u003c/a\u003e.\nOn our behalf, Wingify uses this information to evaluate your use of the website and, based on this, to optimize our websites.\nWingify stores your data and these are deleted regularly. You can prevent the storage of cookies by setting your browser software accordingly or delete them. You can also object to the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Wingify as well as the processing of this data altogether under this \u003ca href=\"https://vwo.com/opt-out/\"\u003elink\u003c/a\u003e.\nDetails on the handling of your personal data can be found at the following \u003ca href=\"https://vwo.com/privacy-policy/\"\u003elink\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e3.5\tLocal storage of data\u003c/strong\u003e \nTo optimize the design of our website, we collect the following data and store it locally on your device (e.g., in the browser).\nProvider/tool\tCategory\tDuration\tPurpose\n\u003ca href=\"http://www.hrewards.com\"\u003ewww.hrewards.com\u003c/a\u003e\tNecessary functions\t365 days\tLog in\nToken\nCat UID\nMember level\nCurrency\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e3.6\tIntegration of services and content of third-party providers (capture of IP addresses by third-party services)\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eContent of third parties (hereinafter referred to as “third-party providers”) is embedded in our online presence. To use such content, it is technically required to transfer the user’s IP address to the relevant third-party provider. This is because without the IP address the third-party providers would not be able to send the content embedded in the website to the relevant user’s browser. We have no influence on whether a third-party provider saves the IP address, e.g., for statistical purposes, or uses it in any other way. We use the following third-party providers on our website: \u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eThird-party provider\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eMapTiler AG \nHöfnerstrasse 98 Unterägeri, Zug 6314\nSwitzerland\t\n\u003cstrong\u003eFunction\u003c/strong\u003e Displaying maps on websites\t \n\u003cstrong\u003ePurpose\u003c/strong\u003e Maintaining, ensuring and improving the quality of products and services, in particular improving the user experience. \u003c/p\u003e\n\u003cp\u003eMonotype Imaging Holdings, Inc., 600 Unicorn Park Drive, Woburn, Massachusetts 01801, USA \tMyfonts.com \n\u003cstrong\u003eFunction\u003c/strong\u003e displaying text on websites\t\n\u003cstrong\u003ePurpose\u003c/strong\u003e Maintaining, ensuring and improving the quality of products and services, in particular improving the user experience. \u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eShiji Deutschland GmbH\u003c/strong\u003e Saarbrücker Str. 36 A, 10405 Berlin, Germany\n\u003cstrong\u003eFunction\u003c/strong\u003e B2B Software-as-a-Service platform for evaluating customer feedback provided at various touch points \t\n\u003cstrong\u003ePurpose\u003c/strong\u003e Customer and product reviews for quality management and improving the customer experience \u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eStatus of and updates to the Privacy Policy\u003c/strong\u003e\nThis Privacy Policy is valid from July 30th, 2024.\nWe will update this Privacy Policy from time to time in the event of relevant changes to our website, the way in which we process personal data, or changes in the law. The updated version will be valid from the date of its publication. In the event of significant changes to this Privacy Policy you will be notified in good time before the changes come into effect by a corresponding notice on our website. Our guests may also be notified of the changes by email or in another way.\u003c/p\u003e\n","actions":[]}],"breadcrumbs":[{"name":"Legal Documents","link":"/legal"}]},"mainNavigation":[{"id":199,"__component":"navigation.main-menu-item-with-submenu","label":"Hotels","subMenuItem":[{"id":2887,"label":"Hotel Search","link":"/find-a-hotel"},{"id":2890,"label":"All Hotels","link":"/all-hotels"}]},{"id":326,"__component":"navigation.main-menu-item","label":"Offers","link":"/hotel-deals"},{"id":1201,"__component":"navigation.main-menu-item","label":"Destinations","link":"/destinations"},{"id":329,"__component":"navigation.main-menu-item","label":"Meeting \u0026 Event","link":"/meeting-event"},{"id":332,"__component":"navigation.main-menu-item","label":"Loyalty Program","link":"/loyalty"},{"id":858,"__component":"navigation.main-menu-item","label":"Voucher Shop","link":"https://shop.hrewards.com/en"}]},"__N_SSG":true},"page":"/[[...slug]]","query":{"slug":["legal","data-protection"]},"buildId":"X8D8n9x-Q1zlvtpIR0rgk","isFallback":false,"dynamicIds":[35183,50075,6707,46004],"gsp":true,"locale":"en","locales":["default","en","de","fr","es","it","da","sv","zh","hu","pt","nl","ru","uk","ar","cs","ko","ja"],"defaultLocale":"default","scriptLoader":[]}</script><script>if(document.getElementById("__NEXT_DATA__")) document.getElementById("__NEXT_DATA__").textContent = (function c(e){return e.replace(/__R2WP__/g,":\\")}(document.getElementById("__NEXT_DATA__").textContent))</script></body></html>