1. PRELIMINARY NOTE.

We take the protection of your personal data very seriously and want you to feel secure when visiting our website. Our data protection practices comply in particular with the requirements of the EU General Data Protection Regulation (EU GDPR), the German Federal Data Protection Act (BDSG-neu), and the German Telemedia Act (TMG). Here, we would like to inform you about the nature, scope, and purpose of the processing of your personal data. Please note in advance that this privacy policy applies only to our websites and does not apply to third-party websites to which we provide links.

2. SCOPE OF PROTECTION.

The subject matter of protection is personal data. This refers to all information relating to an identified or identifiable natural person (hereinafter “data subject”). This includes, in particular, information that allows conclusions to be drawn about your identity (e.g., information such as your name, mailing address, email address, and phone number).

3. PURPOSE.

Hospitality Xpeterience GmbH is a holding company that holds stakes in companies in the hotel and restaurant industry.

4. COLLECTION AND PROCESSING OF PERSONAL DATA.

4.1. Website

Technical Requirements

In order for you to connect to our website, your browser transmits certain data to our website’s web server. This is technically necessary so that the website can provide the information you have requested. To enable this, your IP address, the date and time of your request, and the type of operating system you are using, among other things, are stored and used for a maximum of 30 days. We reserve the right to store this data for a limited time to protect our legitimate interests, so that in the event of unauthorized access or an attempt to intentionally cause us harm through this channel, we can trace the data back to personal information (Art. 6(1)(f) GDPR). We will retain or disclose this data solely for these purposes and for no other purpose without first informing you and obtaining your consent.

Cookies

Cookies are small text files stored on your computer or mobile device via your browser to, for example, determine whether you visit web pages repeatedly from the same device or browser. In general, we use cookies to analyze interest in our website and to improve its user-friendliness. However, you can generally access our website without cookies.

Cookies can usually be disabled or removed using tools available in most commercial browsers. The settings must be configured separately and individually for each browser you use. Different browsers offer various functions and options for this purpose. To be able to use our website fully and conveniently, you should accept those cookies that enable the use of certain features or make the user experience more convenient.

Use of Our Contact Forms

Our website features contact forms that you can use to contact us for various purposes. To ensure the secure transmission of your data, we use a state-of-the-art encrypted connection with an SSL certificate during transmission. By clicking the “Submit Form” button, you consent to the transmission of the data entered in the form to us. We store your name and email address, as well as any additional information you provide, so that we can contact you and respond to your inquiry as effectively as possible. On the one hand, this allows us to provide you with the service you expect from us, and on the other hand, it enables us to continuously improve our services (Art. 6(1)(f) GDPR). In addition, our website contains forms that can be used to submit your application to us. In addition to the information mentioned above, further information is required here to carry out the measures necessary to process your request (Art. 6(1)(f) GDPR).

This includes, among other things:

• Contact information

• Personal details (e.g., date of birth)

• Information regarding your professional background and references

• Information about your skills<o:p></o:p>

Your data is collected for the purpose of placement and is retained for the purpose of further placement.

Tracking Tools

Our website uses features from various web analytics services provided by other companies, such as Google Inc. We explain in more detail below which specific services are involved and what data is analyzed.

Use of Google Analytics with Anonymization Function

We use Google Analytics on our website, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter “Google.” Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookies regarding your use of our online service (e.g., when, where, and how often you access our website, including your IP address) is generally transmitted to a Google server in the United States and stored there. To prevent your IP address from being personally identifiable, it is truncated immediately after collection (e.g., by deleting the last 8 bits) and thereby anonymized. IP anonymization also applies to all member states of the European Union and other contracting states of the European Economic Area. For more information on IP anonymization and Google’s use of data, please visit: support.google.com/analytics/answer/2763052 - If you would like to decide for yourself which data Google collects regarding the websites you visit, you can download a deactivation add-on for your internet browser. However, this add-on does not prevent data from being transmitted to us or to other web analytics services we use. For more information on using and installing the add-on, visit: https://tools.google.com/dlpage/gaoptout?hl=de

5. ADDITIONAL GENERAL INFORMATION.

5.1. Changes to This Privacy Policy

We review this Privacy Policy at regular intervals to ensure compliance with legal provisions, case law, and the guidelines of supervisory authorities, as well as to align it with emerging trends and developments in technical standards. Accordingly, we reserve the right to amend this Privacy Policy to adapt it to new data protection laws and other changes in factual or legal circumstances. Therefore, please always review the Privacy Policy in effect at the time you begin using our website.

5.2. Responsibility

Hospitality Xpeterience GmbH is responsible for data processing on our website. You can find the contact information in the legal notice (see below). You can reach our data protection officer at the following address:

Company: Hospitality Xpeterience GmbH
Registered office: Düsseldorf
Managing Directors: Otto K. Lindner, Tobias S. Oberdieck
Commercial Register No. (HRB): 97455
Registering Court: Düsseldorf
Local Court DE355381963

5.3. Who Receives Your Personal Data? (Art. 13(1)(e), (f) GDPR)

We treat your personal data confidentially and, as a general rule, do not disclose it to third parties unless you have given your consent or the disclosure is required by law or under a contractual obligation. In isolated cases, we engage data processors to process your personal data. This is done in accordance with Art. 28 of the GDPR and on the basis of a data processing agreement. By using the contact form, you also make your data available to these affiliated companies. If you wish to restrict the use of your data for these purposes, you may notify our Data Protection Officer in writing or via email.

5.4. How long is the data stored? (Art. 13(2)(a) GDPR)

The legislature has established a variety of retention obligations and time limits. As a general rule, we store your data only for as long as required by law. Upon expiration of these time limits, the relevant data is routinely deleted if it is no longer necessary for the fulfillment of the contract. We store data that we process based on your consent until you revoke it or for as long as the data is needed. We store data that we process based on a legitimate interest for as long as the legitimate interest exists. Commercial or financial data from a closed fiscal year is deleted after an additional ten years in accordance with legal regulations, unless longer retention periods are mandated or required for legitimate reasons. Unless data is subject to specific retention periods, it will be deleted when the purposes for which it is processed no longer apply.

5.5. For what purposes and on what legal basis do we process your personal data? (Art. 13(1)(c), (d) GDPR)

We have already explained the purposes and legal bases for data processing. In addition, the following generally applies: Where necessary, we process your data to protect our legitimate interests or those of third parties in accordance with Art. 6(1)(f) of the GDPR—for example, to assert legal claims and defend ourselves in legal disputes, or to ensure IT operations and security. If we have a legitimate interest or have received your written consent to process your personal data, we process your data for external communication and marketing purposes based on Article 6(1)(a) or (f) of the GDPR. You have the right to withdraw your consent at any time. To comply with legal requirements, we may or must, where necessary, process your data and disclose it to third parties (pursuant to Article 6(1)(c)). We do not use your data in any way for automated decision-making or profiling. In addition, we use cookies to provide you with an improved service when you use our website and to make your experience on this website easier (Article 6(1)(f) of the GDPR).

5.6. What are your rights and obligations? (Art. 13(2)(b), (c), (d), (e) GDPR)

Every data subject has the following rights:

• Under Art. 15 of the GDPR, you have the right of access. This means you may request confirmation from us as to whether we are processing personal data concerning you.

• Under Article 16 of the GDPR, you have the right to rectification. This means you can request that we correct any inaccurate personal data concerning you.

• Under Article 17 of the GDPR, you have the right to erasure (“right to be forgotten”). This means you may request that we erase personal data concerning you without undue delay—unless we are unable to erase your data because, for example, we must comply with statutory retention requirements.

• Under Article 18 of the GDPR, you have the right to restriction of processing. This means that, apart from storing your personal data, we are effectively no longer permitted to process it

• Under Article 20 of the GDPR, you have the right to data portability. This means you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format and to transmit this data to another controller.

• Under Article 7(3) of the GDPR, you have the right to withdraw your consent at any time with effect for the future.

• Under Article 13 of the GDPR, you have the right to lodge a complaint with the competent supervisory authority.

In addition, you have the right to object, which we explain in more detail at the end of this privacy policy.

If you wish to exercise your rights, please contact the Data Protection Officer (see above for contact information).

5.7. Competent Supervisory Authority

State Commissioner for Data Protection
of North Rhine-Westphalia
Street address: Kavalleriestr. 2-4, 40213 Düsseldorf
Mailing address: P.O. Box 200444, 40102 Düsseldorf
Phone: +49 (0) 211 38424 -0
Email address: poststelle@ldi.nrw.de

5.8. Information Regarding Your Right to Object Under Article 21 of the General Data Protection Regulation (GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out pursuant to Article 6(1)(f) of the GDPR (data processing based on a balancing of interests); this also applies to any profiling based on this provision within the meaning of Article 4(4) of the GDPR. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims. Please submit your objection in writing (by email or mail) to our Data Protection Officer (see above for contact information).