Data Protection Statement

The responsible party, within the meaning of basic data protection regulation and other national data protection laws of the member states as well as other data protection regulations is the:

ATLANTIC Hotels Management GmbH
Ludwig-Roselius-Allee 2
28329 Bremen
Deutschland
Telephone: +49 (0) 421 944888-0
Telefax: +49 (0) 421 944888-552
Email: info@atlantic-hotels.de
Website: www.atlantic-hotels.de/en

Joint controllers 

ATLANTIC Hotels Management GmbH, Ludwig-Roselius-Allee 2 - 28329 Bremen - Deutschland, central administration Bremen, and the respective operating companies of the affiliated hotels (see operating companies) jointly determine the purposes and means of certain group-wide coordinated processing activities (incl. central administration or control). 

operating companies 

ATLANTIC Hotel Airport GmbH (Hotelwebsite) 
ATLANTIC Grand Hotel Bremen GmbH (Hotelwebsite) 
ATLANTIC Hotel Rennbahn GmbH (Hotelwebsite) 
ATLANTIC Hotel Universum GmbH (Hotelwebsite) 
ATLANTIC Hotel Vegesack GmbH (Hotelwebsite) 
ATLANTIC Hotel Sail City GmbH (Hotelwebsite) 
ATLANTIC Hotel Kiel GmbH (Hotelwebsite) 
ATLANTIC Hotel Lübeck / Hotel Betriebsgesellschaft Schmiedestraße mbH (Hotelwebsite) 
ATLANTIC Hotel Wilhelmshaven GmbH  (Hotelwebsite) 
ATLANTIC Hotel Münster GmbH (Hotelwebsite) 
ATLANTIC Hotel Heidelberg Europaplatz Betriebsgesellschaft mbH (Hotelwebsite) 
ATLANTIC Hotel Landgut Horn / OPATZ Hotel und Services GmbH (Hotelwebsite) 
gottlieb Bremen/ ATLANTIC Hotel Rennbahn Catering GmbH (Website) 
ATLANTIC Hotel Frankfurt Messe GmbH (Hotelwebsite) 
unique by ATLANTIC Hotels Management GmbH (Hotelwebsite) 
Linnemann Hotel GmbH (Hotelwebsite) 
unique by ATLANTIC Hotels Betriebs GmbH Kiel (Hotelwebsite) 
Severin*s Resort & Spa GmbH (Hotelwebsite Severin*s Resort & Spa) / (Hotelwebsite Landhaus Severin*s) / (Hotelwebsite Severin*s Tegernsee) 
Severin’s Öschberghof GmbH (Hotelwebsite) 
Severin's Lech GmbH (Hotelwebsite) 
LOUIS HOTEL GmbH (Hotelwebsite) 

Legal bases and intra-group data transfers 

We process personal data on the basis of Art. 6 GDPR, in particular for the initiation and performance of contracts such as accommodation agreements, for legal obligations and for legitimate interests. Intra-group transfers between the management company and the hotels are additionally based on the “small group privilege” (Recital 48 GDPR) for internal administrative purposes and, where applicable, on joint controllership under Art. 26 GDPR. Consents within the meaning of Art. 6 Para. 1 lit. a GDPR and, where applicable, Art. 9 Para. 2 lit. a GDPR are obtained separately where required and may be withdrawn at any time with effect for the future. 

Data categories and sources 

The data concerned may include in particular master and contact data, contract or booking and billing data, communication and usage data, and security or log data. Special categories of personal data are processed only with the relevant consent, e.g. health information. The data originate from you, from parties involved in handling your booking or stay, e.g. travel agencies, online travel agencies and other travel intermediaries, or from internal group systems for the purposes described above. 

Recipients and transfers to third countries 

Recipients include internal units of the central administration in Bremen and of the hotels. Processors within the meaning of Art. 4 No. 8 GDPR and Art. 28 GDPR may also receive data, e.g. IT, cloud, communications and support service providers, as well as other third parties where required, e.g. banks, advisers and authorities. For transfers to third countries, we ensure an adequate level of data protection, e.g. by an adequacy decision of the European Union such as the EU-US Data Privacy Framework or by Standard Contractual Clauses with supplementary measures. 

Retention 

Personal data are stored only for as long as necessary for the purposes or as long as statutory retention obligations apply. Afterwards the data are deleted or anonymised. Applicable periods include in particular commercial and tax retention periods. 

Obligation to provide data 

Certain information is required for the initiation or performance of contracts and for compliance with legal obligations. Without this information services may not be provided. 

Your rights 

You may exercise all rights described in this data protection statement, incl. those under Chapter III GDPR, against any of the joint controllers. We coordinate requests internally within the framework of the joint controllership. The contact details of our data protection officer are provided in this data protection statement.

The data protection officer of the responsible party is:

SHIELD GmbH Datenschutz & Sicherheit
Managing Director: Martin Vogel
Ohlrattweg 5
25497 Prisdorf
Phone: +49 (0) 4101 8050600
E-mail: datenschutz@atlantic-hotels.de
www.shield-datenschutz.de

1. Scope of processing of personal data
We process personal data from our users principally only to the extent necessary to provide
a functional website and our content and services. The processing of personal data of our
users is regularly only carried out with their consent. These consents can be revoked at any
time with effect for the future by informing the responsible. The contact details can be
found under "I. Name and address of the responsible".

2. Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for the processing of personal data, art.
6 (1) (a) EU General Data Protection Regulation (GDPR) serves as the legal basis for the
processing of personal data.
In the processing of personal data necessary for the performance of a contract to which the
data subject is a party, art. 6 (1) (b) GDPR serves as the legal basis. This also applies to
processing operations required to carry out pre-contractual actions.
Insofar as processing of personal data is required to fulfill a legal obligation that is required
for our company, art. 6 (1) (c) GDPR serves as the legal basis. In the event that vital interests
of the data subject or another natural person require the processing of personal data, art. 6
(1) (d) GDPR serves as the legal basis. If processing is necessary to safeguard the legitimate
interests of our company or a third party, and if the interests, fundamental rights and
freedoms of the data subject do not prevail over the first interest, art. 6 (1) (f) GDPR serves
as legal basis for processing.

3. Data deletion and storage duration
The personal data of the data subject will be deleted or blocked as soon as the purpose of
the storage expires. Additional storage may take place if provided for by the European or
national legislator in EU regulations, laws or other regulations to which the data controller is
subject. Blocking or deletion of the data also takes place when a storage period prescribed
by the standards mentioned expires, unless there is a need for further storage of the data
for conclusion of a contract or fulfillment of the contract.

1. Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the calling computer.

The following data is collected:

Information about the browser type and the version used
The operating system of the users
The Internet service provider of the user
The IP address of the user
Date and time of access
Websites from which the user's system accesses our website
Websites accessed by the user's system through our website
The data is also stored in the log files of our system. A storage of this data together with other personal data of the user does not take place.

2. Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6 (1) (f) GDPR.

3. Purpose of the data processing

The temporary storage by the system of the IP address is necessary to allow delivery of the website to the computer of the user. To do this, the user's IP address must be kept for the duration of the session.

Storage in log files is done to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

We have a justified interest in the processing of data for this purpose, according to Art. 6 (1) (f) GDPR.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose of its collection. In the case of collecting the data for providing the website, this is the case when the session is completed. In the case of storing the data in log files, data is stored for no more than seven days. After one day, the IP addresses of the users are anonymized, so that an assignment of the calling client is no longer possible.

5. Objection and removal possibility

The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website. Consequently, there is no possibility for the user to object.

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is reopened. We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser be identified even after switching pages. In addition, we use cookies on our website that allow an analysis of users' browsing behavior.

In this way, the following data is transmitted:
1. IP address, age, gender, interests
2. activities on the website during the visit
3. frequency of page views
4. use of website features
5. origin / visitor source

Technical precautions pseudonymize the data of the users collected in this way. This makes it much more difficult to assign the data to the calling user and is only possible with the help of an appropriate "key". The data will not be stored together with other personal data of the user.

2. Legal basis for data processing
The legal basis for the processing of personal data using cookies that are technically necessary or necessary for the provision of the service is Art. 6 (1) (f) GDPR. The legal basis for the processing of personal data using all other cookies or cookies not strictly necessary for the provision of the service is Art. 6 (1) (a) GDPR.

3. Purpose of the data processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some features of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after switching pages. The user data collected through technically necessary cookies will not be used to create user profiles. The use of the analysis cookies is for the purpose of improving the quality of our website and its contents. Through the analysis cookies, we learn how the website is used and so we can constantly optimize our services offered.

4. Duration of storage, objection and removal options
Cookies are stored on the computer of the user and transmitted by it to our page. For cookies requiring consent, a so-called cookie consent banner is made available to you when you visit the website. There you have the possibility, if you wish, to use our website only with the technically necessary cookies.

Furthermore, you as a user also have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to fully use all the functions of the website.

1. Description and scope of data processing 

Contact via the provided e-mail address is possible. In this case, the user's personal data that are transmitted by e-mail will be stored. In this context, data is not passed on to third parties. The data is used exclusively for processing the conversation. 

2. Legal basis for data processing 

The legal basis for the processing of the data is in the presence of the consent of the user Art. 6 (1) (a) GDPR. The legal basis for the processing of the data transmitted in the course of sending an e-mail is Art. 6 (1) (f) GDPR. If the e-mail contact aims to conclude a contract, then additional legal basis for the processing is Art. 6 (1) (b) GDPR. 

3. Purpose of the data processing 

The processing of the personal data from the input mask serves us only to establish contact with the user. In the case of contact via e-mail, this also includes the required legitimate interest in the processing of the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems. 

4. Duration of storage 

The data will be deleted as soon as it is no longer necessary for the purpose of its collection. 

5. Objection and removal possibility 

The user has the option at any time to revoke his or her consent to the processing of the personal data. If the user contacts us by e-mail, he or she may object to the storage of his or her personal data at any time. In such a case, the conversation can not continue. You can always object to the storing of your data for the future by contacting info@atlantic-hotels.de, by mail to ATLANTIC Hotels Management GmbH, Ludwig-Roselius-Allee 2, 28329 Bremen or by phone +49 (0) 421 944888-0. All personal data stored in the course of the conversation will be deleted in this case. 

If your personal data are processed, you are the person affected within the meaning of  GDPR and you have the following rights vis-à-vis the data controller:

1. Right to information
You may ask the person responsible to confirm whether personal data concerning you is processed by us.
If your data is being processed, you can request information from the person responsible about the following information:

the purposes for which the personal data are being processed;
the categories of personal data being processed;
the recipients or the categories of recipients to whom personal data concerning you have been disclosed or are being disclosed;
the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;
the existence of a right to rectification or deletion of your personal data, a right to restriction of processing by the data controller or a right to object to such processing;
the existence of a right of appeal to a supervisory authority;
all available information on the source of the data, if the personal data is not collected from the data subject;
the existence of automated decision-making, including profiling under Article 22 (1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved, and the scope and intended impact of such processing on the data subject.

You have the right to request information about whether your personal information is passed on to a third country or an international organization. In this context, you can request to be informed of the appropriate guarantees in accordance with Art. 46 GDPR in connection with the transfer.

2. Right to rectification

You have a right to rectification and / or completion by the data controller, if your personal data being processed is incorrect or incomplete. The responsible person must make the correction immediately.

3. Right to restriction of processing

You may request the restriction of the processing of your personal data under the following conditions:

if you contest the accuracy of the information relating to you for a period of time, that allows the data controller to verify the accuracy of your personal information;
the processing is unlawful and you refuse the deletion of the personal data and instead demand restriction of the use of your personal data;
the data controller no longer needs the personal data for the purposes of processing, but you need it in order to assert, exercise or defend legal claims; or
if you have objected to the processing pursuant to Art. 21 (1) GDPR, and it is not yet certain whether the legitimate reasons of the data controller outweigh your reasons.
If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person, or for reasons of important public interests of the Union or a Member State. If the restriction of processing was restricted according to the above conditions, you will be informed by the data controller before the restriction is lifted.

4. Right to deletion

a) Obligation to delete

You may demand that the controller delete your personal information immediately, and the controller is required to delete that information immediately if one of the following is true:

Personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
You revoke your consent, which the processing was based on according to Art. 6 (1) (a) or Art. 9 (2) (a) GDPR and there is no other legal basis for processing.
You object to the processing according to Art. 21 (1) GDPR and there are no prior justifiable reasons for the processing, or you object to the processing according to Art. 21 (2) GDPR.
Your personal data have been processed unlawfully.
The deletion of personal data concerning you is required, in order to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject.
The personal data concerning you were collected in relation to information society services, pursuant to Article 8 (1) of the GDPR.
b) Information to third parties

If the data controller has made the personal data concerning you public and is required to delete them according to  Article 17 (1) of the GDPR, he must take appropriate measures, including technical means, with due regard to available technology and implementation costs, to inform data controllers that you, the data subject, have requested the deletion of all links to such personal data or copies or replications of this personal data.

Exceptions

The right to erasure is not in force if the processing is necessary:

to exercise the right to freedom of expression and information;
to fulfill a legal obligation required by the law of the Union or of the Member States to which the controller is subject, or performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
for reasons of public interest in the field of public health pursuant to Art. 9 (2) (h) and (i) and Art. 9 (3) GDPR;
for archival purposes of public interest, scientific or historical research purposes or for statistical purposes according to Article 89 (1) GDPR, to the extent that the law referred to in subparagraph (a) is likely to render impossible or seriously affect the achievement of the objectives of that processing, or
to assert, exercise or defend legal claims.
5. Right to information

If you have the right of rectification, erasure or restriction of processing to the controller, he / she is obliged to notify all recipients, to whom your personal data have been disclosed, of this correction or deletion of the data or restriction of processing, unless: this proves to be impossible or involves a disproportionate effort. You have a right to be informed about these recipients by the data controller.

6. Right to Data Portability

You have the right to receive personally identifiable information that you provided to the controller in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another person without hindrance by the person responsible for providing the personal data, provided that

the processing is based on consent according to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract according to Art. 6 (1) (b) GDPR
the processing is done by automated means.
In exercising this right, you also have the right to obtain that your personal data are transmitted directly from one controller to another, as far as technically feasible. This situation should not affect the freedoms and rights of other persons.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority vested in the controller.

7. Right to object

You have the right at any time, for reasons arising from your particular situation, to object to the processing of your personal data, which occurs pursuant to Art. 6 (1) (e) or (f) GDPR; this also applies to profiling based on these provisions.
The controller will no longer process the personal data concerning you, unless he can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, exercising or defending legal claims.
If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.
If you object to processing for direct advertising purposes, your personal data will no longer be processed for these purposes.
Regardless of Directive 2002/58/EC, you have the option, in the context of the use of information society services, to exercise your right to object through automated procedures that use technical specifications.

8. Right to revoke the data protection consent declaration

You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent before the revocation.

9. Automated decision in individual cases, including profiling

You have the right not to be subjected to a decision based solely on automated processing - including profiling - that will have legal effect or negatively affect you in a similar manner. This does not apply if the decision

is required for the conclusion or performance of a contract between you and the controller,
is permitted by Union or Member State legislation to which the controller is subject, and where such legislation contains appropriate measures to safeguard your rights and freedoms and legitimate interests, or
occurs with your express consent.
However, these decisions may not be based on special categories of personal data pursuant to Art. 9 (1) GDPR, unless Art. 9 (2) (a) or (g) apply, and reasonable measures have been taken to protect your rights and freedoms and your legitimate interests.
With regard to the cases referred to in (1) and (3), the person responsible shall take reasonable measures to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain the intervention of a person from the side of the controller, to present the case and to challenge the decision.
Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of your place of residence, employment or the place of the alleged infringement, if you believe that the processing of the personal data concerning you violates the GDPR.

The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.

Die Landesbeauftragte für Datenschutz und Informationsfreiheit der Freien Hansestadt Bremen (State Data Protection and Freedom of Information Officer)
Arndtstraße 1, 27570 Bremerhaven
Tel.: +49 471 596 2010 oder +49 421 361 2010
Fax: +49 421 496 18495
E-Mail: office@datenschutz.bremen.de

1. Scope of Processing of Personal Data

For our online application process, we use an applicant management solution provided by rexx systems GmbH, Süderstraße 75–79, 20097 Hamburg, Germany. Data processing is conducted via a reverse proxy technology, meaning applicant data is processed on the systems of rexx without direct external visibility. rexx systems GmbH has contractually committed to implementing appropriate technical and organisational measures in compliance with the EU General Data Protection Regulation (GDPR) to ensure the protection of your personal data.

The processing is carried out exclusively for the purpose of managing the application process. No data is shared with unauthorised third parties.

As part of the application, the following information may be collected: title, first name, last name, email address, CV, cover letter, and any additional relevant documents. You may upload this data via a web-based form and submit your application digitally.

In addition to the online application, you have the option to register for our job alert. In doing so, we process your email address and, if applicable, your job preferences in order to inform you about suitable new job openings.

Please note that by submitting your application, you consent to the processing of your personal data. Further information can also be found in the privacy notice of rexx systems:
https://www.rexx-systems.com/data-protection/  

2. Legal Basis for the Processing of Personal Data

ATLANTIC Hotels Management GmbH collects, processes and stores your applicant data on the basis of:

-    § 26 Para. 1 Sentence 1 of the German Federal Data Protection Act (BDSG)

-    Article 6 Para. 1 lit. b GDPR (processing for the performance of pre-contractual measures)

-    and, where applicable, Article 6 Para. 1 lit. f GDPR (legitimate interest in an efficient application process).

3. Purpose of Data Processing

The processing of your personal data is carried out for the purpose of managing and responding to your application and for the recruitment process. The information you provide is used exclusively for applicant selection and for filling job vacancies within ATLANTIC Hotels Management GmbH.

4. Duration of Data Storage

If your application is unsuccessful, your data will be deleted six months after the conclusion of the application process, in accordance with § 15 Para. 4 of the German General Equal Treatment Act (AGG). See also Section IX: Privacy Notice for the Application Process. Any extended storage will only occur with your explicit consent.

5. Right to Object and Erasure Options

You have the right to object to the processing of your personal data at any time, and to request rectification or erasure of your stored data.

Please contact bewerbung@atlantic-hotels.de, or send a written request to:
ATLANTIC Hotels Management GmbH, Human Resources, Ludwig-Roselius-Allee 2, 28329 Bremen, Germany
or call us at +49 (0) 421 944888-571.

If you revoke your consent, your data will be deleted without undue delay, provided there are no statutory retention obligations. Please note that in such cases, your application can no longer be considered.

The Controller processes applicants’ personal data for the purpose of managing the application process.

Processing is carried out in particular for the following purposes:

• Receipt, review and assessment of your application
• Communication with you (e.g. scheduling appointments, follow-up questions, sending/receiving documents)
• Conducting interviews and making selection decisions
• Preparing an employment relationship (initiation of a contract)
• Where applicable: asserting/defending legal claims (e.g. documentation obligations, in particular in connection with the German General Equal Treatment Act (AGG))
• Optional: inclusion in an applicant pool for future vacancies (only if you give us your consent)

Categories of personal data:

Depending on the type and scope of your application, we process in particular the following data:

• Master data: surname, first name, where applicable form of address
• Contact data: address, email address, telephone number
• Application data: cover letter, CV, references, qualification certificates, references (if provided by you), salary expectations, earliest possible start date, preferred area/working hours
• Communication data: content of messages/phone calls/emails, interview notes, appointment arrangements

Important note:

Please only provide us with data that are necessary for the application process. If you voluntarily provide information relating to special categories of personal data (Art. 9 GDPR; e.g. health data, religious affiliation), we will process such data only insofar as this is permitted and necessary in the individual case or you have expressly consented.

Legal bases for processing:

Depending on the circumstances, processing is carried out on the following legal bases:

• § 26 Para. 1 BDSG (data processing for purposes of the employment relationship, in particular for deciding on the establishment of an employment relationship) in conjunction with Art. 6 Para. 1 lit. b GDPR (pre-contractual measures)
• Art. 6 Para. 1 lit. c GDPR, insofar as we are subject to legal obligations (e.g. documentation obligations)
• Art. 6 Para. 1 lit. f GDPR (legitimate interests) (in particular: efficient conduct of the application process, internal organisation/communication, IT security, as well as asserting/defending legal claims (in particular in the context of the AGG))
• Art. 6 Para. 1 lit. a GDPR (consent) (e.g. for extended retention (applicant pool) or for processing special information where required)
• Where special categories of personal data are concerned: Art. 9 Para. 2 GDPR (in particular lit. b and/or lit. a) in conjunction with § 26 Para. 3 BDSG, where applicable

Recipients / categories of recipients:

Within our company, only those persons have access to your data who require them for the decision-making and implementation of the application process (e.g. HR managers, management, the responsible department).

External recipients may include:

• IT/system service providers, hosting and communication service providers (e.g. email), insofar as we use them as processors pursuant to Art. 28 GDPR
• Legal advisers, courts, authorities or other bodies, insofar as this is necessary for the assertion/defence of legal claims or where a legal obligation exists

Transfers to third countries:

We generally process your application data within the European Union / the European Economic Area. Where, in individual cases, service providers in third countries are used, this is done only in compliance with the requirements of Art. 44 et seq. GDPR (e.g. EU standard contractual clauses, adequacy decision).

Retention period / deletion:

We store your personal data only for as long as this is necessary for the purposes stated above.

If your application is successful, relevant application documents will be transferred to the personnel file and stored in accordance with statutory retention periods.

Longer retention (e.g. applicant pool) will take place only with your consent; in that case until withdrawal or until expiry of the agreed period (maximum one year).

If the Controller does not conclude an employment contract with the applicant, the application documents will be automatically deleted six months after notification of the rejection decision, unless other legitimate interests of the Controller prevent deletion. Such other legitimate interests in this sense include, for example, an obligation to provide evidence in proceedings under the German General Equal Treatment Act (AGG).

We use 'Cookiebot' on our website. The provider is Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter referred to as 'Cookiebot'). 

Cookiebot is a consent management technology which enables us to inform you about the use of cookies and comparable technologies on our website, obtain, manage and document consent, and control the use of services requiring consent in accordance with your selection. When you access our website, Cookiebot may display an overview of the cookies and comparable technologies used, structured by categories. You can specify there which categories or services you wish to allow. 

When you make a selection or change your consent, your IP address in shortened or anonymised form, the date and time of your consent decision, the URL of our website, browser and device information, an encrypted anonymous key and the consent status for the individual cookie categories or services may be processed in particular. These data are processed in order to store your consent decision, recognise your selection during later visits to the website, demonstrate consent and withdrawals, and control the use of cookies and comparable technologies in accordance with your selection. 

The processing of consent data is carried out for the fulfilment of our legal obligation to obtain and be able to demonstrate consent for the use of certain cookies and comparable technologies, on the basis of Art. 6 Para. 1 lit. c GDPR. Where the processing additionally serves the legally compliant, user-friendly and technically reliable management of your consent decision, it is carried out on the basis of our legitimate interest pursuant to Art. 6 Para. 1 lit. f GDPR. The storage and access of the technically necessary Cookiebot cookie, in particular the 'CookieConsent' cookie, are carried out on the basis of Section 25 Para. 2 No. 2 TDDDG, as this cookie is necessary to store the consent decision you have made and to provide the website in accordance with your selection. 

The consent data processed by Cookiebot are stored for as long as this is necessary for documenting your consent decision and demonstrating consent. You can withdraw or change your consent at any time with effect for the future by reopening the cookie settings on our website. Statutory retention and documentation obligations remain unaffected. 

Usercentrics A/S has its registered office in Denmark and therefore within the European Union. Where Cookiebot transfers personal data to third countries or has them processed by sub-processors in third countries, this is carried out in accordance with the data protection requirements of Art. 44 et seq. GDPR, in particular on the basis of appropriate safeguards such as standard contractual clauses within the meaning of Art. 46 GDPR. 

Cookiebot processes personal data of visitors to our website as a processor within the meaning of Art. 4 No. 8 GDPR, insofar as this processing is carried out on our behalf for the provision and operation of the consent management technology. We have concluded a data processing agreement with Cookiebot within the meaning of Art. 28 Para. 3 GDPR. In this agreement, Cookiebot undertakes in particular to process personal data only in accordance with our instructions and for the provision of the agreed services, to implement appropriate technical and organisational protective measures, and to use sub-processors only in accordance with the contractual provisions. 

Further information on data processing by Cookiebot can be found at https://www.cookiebot.com/en/privacy-policy/ . Further information on Cookiebot’s Data Processing Agreement can be found at https://www.cookiebot.com/en/data-processing-agreement/   

The data controller has integrated on this website the component Google Analytics (with anonymization function). Google Analytics is a web analytics service. Web analysis is the collection and analysis of data about the behavior of visitors to websites. Among other things, a web analysis service collects data about referrers - from which website the user came to the website, which subpages of the website were accessed, or how often and for how long a subpage was viewed. A web analysis is mainly used for optimization of a website and for cost-benefit analysis of Internet advertising.

The operating company of the Google Analytics component is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland.

The controller uses the addition "_gat._anonymizeIp" for web analytics via Google Analytics. By means of this addition, the IP address of the Internet connection of the data subject will be shortened and anonymized by Google, if the access to our website is from a Member State of the European Union or from another state party to the Agreement on the European Economic Area.

The purpose of the Google Analytics component is to analyze streams of visitors on our website. Among other things, Google uses the data and information obtained to evaluate the use of our website, to compile online reports for us showing the activities on our websites, and to provide other services related to the use of our website.

Google Analytics uses a cookie on the information technology system of the person concerned. What cookies are has already been explained above. Using this cookie makes it possible for Google to analyze the usage of our website. Each time one of the pages of this website, that is processed by the data controller and where a Google Analytics component is integrated, is accessed, the Internet browser on the information technology system of the person concerned is automatically initiated by the respective Google Analytics component to submit data to Google for online analysis purposes. As part of this technical process, Google receives information about personal data, such as the IP address of the person concerned, which among other things serves Google to track the origin of visitors and clicks, and subsequently to allow commission billing.
The cookie stores personal data, such as access time, the location from which access was made, and the frequency of site visits by the data subject. Each time a user visits our website, this personal information, including the IP address of the Internet connection used by the data subject, is transferred to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may transfer such personal data collected through this technical process to third parties.

The data subject can prevent the setting of cookies at any time by our website, as explained above, by changing the Internet browser settings and thus permanently preventing the setting of cookies. Such Internet browser settings would also prevent Google from setting a cookie on the data subject's information technology system. In addition, a cookie already set by Google Analytics can be deleted at any time through the Internet browser or other software programs.
Furthermore, the data subject has the option of objecting to and preventing the collection of the data generated by Google Analytics for the use of this website and the processing of this data by Google. To do this, the person must download and install a browser add-on at tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data and information about website visits may be transmitted to Google Analytics. The installation of the browser add-on is considered by Google to be an objection. If the data subject's information technology system is later deleted, formatted or reinstalled, the data subject must re-install the browser add-on to disable Google Analytics. If the browser add-on is uninstalled or disabled by the data subject or any other person within their sphere of control, it is possible to reinstall or reactivate the browser add-on.
Additional information and Google's privacy policy can be found at www.google.com/intl/en/policies/privacy/ and www.google.com/analytics/terms/en.html. Google Analytics is explained in more detail at www.google.com/intl/de_de/analytics/.

You can prevent collection by Google Analytics by clicking on the following link. An opt-out cookie will be set, which prevents the future collection of your data when visiting this website: Disable Google Analytics

A web service from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: DoubleClick) is loaded on our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to DoubleClick.

You can prevent DoubleClick from collecting and processing your data by refusing your consent when you enter the website, deactivating the execution of script code in your browser or installing a script blocker in your browser.
The legal basis for the use of Google Double Click is your consent in accordance with Art. 6 Para. 1 lit. a GDPR.

The data will be deleted as soon as the purpose of their collection has been fulfilled. Further information on the handling of the transferred data can be found in the DoubleClick data protection declaration: policies.google.com/privacy

Our website uses conversion tracking from Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). Microsoft Bing Ads places a cookie on your computer if you have reached our website via a Microsoft Bing ad. In this way, Microsoft Bing and we can recognize that someone clicked on an ad, was redirected to our website and reached a previously determined target page (conversion page). We only find out the total number of users who clicked on a Bing ad and were then forwarded to the conversion page. No personal information about the identity of the user is disclosed. If you do not want to participate in the tracking process, you can also reject the setting of a cookie required for this - for example via a browser setting that generally disables the automatic setting of cookies.

The legal basis for the use of Bing Ads is your consent pursuant to Art. 6 Para. 1 lit. a GDPR.

Further information on data protection and the cookies used by Microsoft Bing can be found on the Microsoft website: https://privacy.microsoft.com/de-de/privacystatement

We use Google Tag Manager on our website. Google Tag Manager is a solution that allows marketers to manage website tags through one interface. The Tag Manager tool itself (which implements the tags) is a cookie-free domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation has been carried out at the domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.

The legal basis for the use of this web service is your consent in accordance with Art. 6 Para.
1 lit. a GDPR.

Further information on Google Tag Manager and Google's data protection declaration can be found at the following link: https://policies.google.com/privacy

A web service from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Gstatic) is loaded on our website. We use this data to ensure the full
functionality of our website. In this context, your browser may transmit personal data to Gstatic.

The legal basis for the use of this web service is your consent in accordance with Art. 6 Para.
1 lit. a GDPR.

You can prevent Gstatic from collecting and processing your data by refusing your consent when you enter the website, deactivating the execution of script code in your browser or installing a script blocker in your browser.

The data will be deleted as soon as the purpose of their collection has been fulfilled. Further information on the handling of the transferred data can be found in Google's data protection declaration: https://policies.google.com/privacy

Google Fonts (https://fonts.google.com/) are used to visually improve the presentation of various information on this website. The web fonts are transferred to the cache of the
browser when the page is called up so that they can be used for display. If the browser does not support Google Fonts or prevents access, the text is displayed in a standard font.
When the page is called up, no cookies are stored by the website visitor. Data that are transmitted in connection with the page view are sent to resource-specific domains such as
fonts.googleapis.com or fonts.gstatic.com. You will not be associated with data that may be collected or used in connection with the parallel use of authenticated Google services such as Gmail.

You can prevent the collection and processing of your data by this web service by refusing your consent when entering the website, deactivating the execution in your browser or
installing a script blocker in your browser. If your browser does not support the Google Fonts or you prevent access to the Google servers, the text is displayed in the system's standard font.

The legal basis for the use of this web service is your consent in accordance with Art. 6 Para.
1 lit. a GDPR.

You can find information on the data protection conditions of Google Fonts at: https://developers.google.com/fonts/faq#Privacy

General information on data protection can be found in the Google Privacy Center at: https://policies.google.com/privacy

Videos from the YouTube platform are integrated on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland or Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as ‘YouTube’).
When you access a page with an embedded YouTube video, personal data is transmitted to YouTube/Google, in particular your IP address and - depending on the configuration - other device and browser-related information. If you are logged into your Google account, this assignment can also be made directly to your user profile. The data processing is carried out by Google under its own responsibility.
The data collected may also be stored and processed in the USA, i.e. a third country for which there is no adequacy decision by the European Commission.
However, Google bases the data transfer to the USA on the EU-U.S. Data Privacy Framework of the European Commission.
The integration of YouTube videos and the associated data processing are based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR in conjunction with § 25 Para. 1 TDDDG. Consent can be revoked at any time with effect for the future via our Consent Banner.
Further information on data processing by YouTube can be found in Google's privacy policy at https://policies.google.com/privacy 

This website uses the Meta Pixel for conversion measurement and to optimise advertising activities. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter referred to as 'Meta').

With the help of the Meta Pixel, the behaviour of website visitors can be tracked after they have been redirected to our website by clicking on a Meta advert (e.g. on Facebook or Instagram). This allows us to evaluate the effectiveness of adverts, create audiences (e.g. 'Custom Audiences') and optimise future advertising measures. In this context, usage and interaction data (e.g. page views, content accessed, click paths, time of access), technical information (e.g. IP address, device and browser information) and event data ('events') are processed.

We use the Advanced Matching function within the Meta Pixel. In doing so, additional hashed customer data (e.g. email address or phone number) may be transmitted to Meta in order to improve conversion attribution and create more precise audiences.

The use of this service is based on your consent pursuant to Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TDDDG. Your consent may be withdrawn at any time.

Insofar as personal data is collected on our website and transmitted to Meta by means of the Meta Pixel, we and Meta Platforms Ireland Limited are joint controllers for this processing (Art. 26 GDPR). Joint controllership is limited solely to the collection of the data and its transmission to Meta. Any processing carried out by Meta after transmission is not part of the joint controllership and is carried out under Meta’s own responsibility. Meta provides terms for joint controllership for this purpose.

The data collected may also be stored and processed in the USA, i.e. a third country for which no adequacy decision of the European Commission exists. However, Meta relies on the European Commission’s EU-U.S. Data Privacy Framework for the transfer of data to the USA.

Further information about data protection at Meta can be found in Meta’s privacy policy at https://www.facebook.com/privacy/policy/

You can also manage settings for interest-based advertising with Meta in your advertising preferences (login required) at https://accountscenter.facebook.com/ad_preferences/

This website uses the Insight Tag from LinkedIn. The provider of this service is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (hereinafter referred to as "LinkedIn").

With the help of the LinkedIn Insight Tag, we receive information about visitors to our website. If a website visitor is registered with LinkedIn, we can, among other things, analyse the key professional data (e.g. career level, company size, country, location, industry and job title) of our website visitors and thus better tailor our site to the respective target groups. Furthermore, we can use LinkedIn Insight Tags to measure whether visitors to our websites make a purchase or take another action (conversion measurement). Conversion measurement can also take place across devices (e.g. from PC to tablet). LinkedIn Insight Tag also offers a retargeting function that allows us to display targeted advertising outside the website to visitors to our website, whereby, according to LinkedIn, no identification of the advertising addressee takes place.

LinkedIn itself also collects so-called log files (URL, referrer URL, IP address, device and browser properties and time of access). The IP addresses are shortened or (if they are used to reach LinkedIn members across devices) hashed (pseudonymised).

The direct identifiers of LinkedIn members are deleted by LinkedIn after seven days. The remaining pseudonymised data is then deleted within 180 days.

The data collected by LinkedIn cannot be assigned to specific individuals by us as website operators. LinkedIn will store the collected personal data of website visitors on its servers in the USA and use it in the context of its own advertising measures.

The use of LinkedIn Insight exclusively on the basis of your consent pursuant to Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TDDDG. The consent can be revoked at any time with effect for the future.

Data transfer to the USA is based on the standard contract clauses of the EU Commission (“SCC”). Details can be found here: www.linkedin.com/legal/l/dpa and www.linkedin.com/legal/l/eu-sccs

You can object to the analysis of usage behaviour and targeted advertising by LinkedIn at the following link: www.linkedin.com/psettings/guest-controls

Furthermore, LinkedIn members can control the use of their personal data for advertising purposes in their account settings. To prevent LinkedIn from linking data collected on our website with your LinkedIn account, you must log out of your LinkedIn account before visiting our website. For more information on data protection at LinkedIn, please see their privacy policy at www.linkedin.com/legal/privacy-policy

We use the plug-ins of the social networks listed below on our website. To integrate these plug-ins, we in turn use the "Shariff" plug-in.
The legal basis is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in improving the quality of our website.

Shariff is an open source program developed by c't and heise. By integrating this plug-in, linked graphics prevent the social network plug-ins named in more detail below from automatically establishing a connection to the respective server of the social network plug-in when you visit our website(s) on which the respective social network plug-in is integrated. Only when you click on one of these linked graphics will you be redirected to the service of the respective social network. Only then will information about the usage process be collected by the respective social network. This information includes, for example, your IP address, the date and time as well as the page you visited on our website.

If you are logged into one of the social network services while visiting one of our websites with the corresponding plug-in, the provider of the respective social network may be able to recognise the information collected from your specific visit and assign it to your personal user account or publish it via this. If, for example, you use the so-called "share" button of the respective social network, this information may be stored in your user account there and published via the platform of the respective social network provider. If you want to prevent this, you must either log out of the respective social network before clicking on the graphic or make the corresponding settings in your user account of the social network.
Further information on "Shariff" is available from heise at
http://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html 

The following social networks are integrated into our website:

•    Google+ of Google LLC, 1600 Amphitheatre Parkway, Mountain View, California, 94043, USA. Data protection information can be found at https://policies.google.com/privacy  
•    Facebook of Meta Platforms, Inc., 1601 Willow Rd, Menlo Park, CA 94025, USA, operated within the EU by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Data protection information can be found at https://www.facebook.com/policy.php 
•    Twitter of Twitter Inc, 795 Folsom St, Suite 600, San Francisco, CA 94107, USA. Data protection information can be found at https://twitter.com/privacy  

We have integrated the kununu Score on our careers page. To view it, an image is retrieved from the kununu server and the browser's IP address is sent to kununu for this purpose. It is processed there. No other data is processed by kununu.

Here you can find the kununu privacy policy for your further information.

ATLANTIC Hotels use the services of Perspective Software GmbH to make potential applicants aware of vacancies at ATLANTIC Hotels.

Provision of the online offer

We use an external service provider for the provision of our online offer:
Perspective Software GmbH, Mailbox 659770, D-96035 Bamberg (hereinafter "Perspective").

Perspective itself stores your data exclusively on European servers. However, there is a possibility that your data may be accessible to entities in the United States of America, as Perspective uses sub-processors located in the USA. As the European Union Commission has determined that the data protection laws of the United States do not ensure an adequate level of protection for personal data collected from data subjects in the European Union, Perspective provides additional measures and safeguards for data transfers to the United States in accordance with the requirements of the GDPR to ensure an adequate level of protection. For example, by entering into standard contractual clauses between Perspective and sub-processors.

I. Description and scope of data processing
Perspective processes your data for us in order to provide you with our online services. For this purpose, Perspective will automatically transmit your IP address to deliver the content and functionality of our Online Services to your browser or terminal device.

The following data may be collected:
1. information about the type of browser and the version used
2. the operating system of your computer
3. the Internet service provider you are using
4. the IP address of your terminal device
5. the date and time you access the Funnel
6. websites from which you came to our website ("referrer")

II. legal basis for data processing
Perspective stores the data mentioned under I. in so-called log files. This is done to ensure
- to ensure a smooth connection of the website,
- to ensure a comfortable use of our website
- the evaluation of system security and stability, and
- for other administrative purposes.

The temporary storage of the IP address by the system is also necessary to enable delivery of the website to your computer. For this purpose, the IP address of your computer must remain stored for the duration of the session. Our legitimate interest in data processing also lies in these purposes. The legal basis for data processing is therefore Art. 6 para. 1 p. 1 lit. f DSGVO.

III. Duration of processing
The personal data processed by Perspective are deleted as soon as they are no longer necessary to achieve the purpose for which they were collected:
- In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
- In the case of storage of the IP address in log files, this is the case after 7 days at the latest.

IV. Data subject rights
You have the right to obtain information free of charge at any time about the origin, recipient and purpose of your stored personal data. You also have the right to demand the correction, blocking or deletion of this data. You can contact us at any time at the address given in the imprint with regard to this and other questions on the subject of data protection. Furthermore, you have the right to lodge a complaint with the competent supervisory authority in the event of violations of the GDPR. Because the data processing is based on Art. 6 (1) sentence 1 lit. f DSGVO, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims (objection under Article 21(1) DSGVO). Since the collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of our website, there should mostly be no possibility for you to object. You also have the right to request the restriction of the processing of your personal data under certain circumstances.
The right to restriction of processing exists in the following cases:
- If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
- If the processing of your personal data has happened / is happening unlawfully, you can request the restriction of data processing instead of deletion.
- If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request restriction of the processing of your personal data instead of erasure.
- If you have lodged an objection pursuant to Art. 21 (1) DSGVO, a balancing of your and our interests must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to demand the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, such data may - apart from being stored - only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

Contact and enquiry management

We use an external service provider for the provision of contact, enquiry or application forms: Perspective Software GmbH, Mailbox 659770, D-96035 Bamberg (hereinafter "Perspective"). Perspective itself stores your data exclusively on European servers.
However, there is a possibility that your data may be accessible to entities in the United States of America because Perspective uses sub-processors located in the United States. As the European Union Commission has determined that the data protection laws of the United States do not ensure an adequate level of protection for personal data collected from data subjects in the European Union, Perspective provides additional measures and safeguards for data transfers to the United States in accordance with the requirements of the GDPR to ensure an adequate level of protection. For example, by concluding standard contractual clauses between Perspective and the sub-processors.

I. Description and scope of data processing
When using Perspective's contact, enquiry or application forms, the following data is transmitted to Perspective's servers:
- Date and time of access
- Websites from which you came to our website ("referrer")
- Context information (e.g. button clicks on the pages, selections made on the pages)
- Contents of all completed text fields (e.g. contact data, such as your name or address, or other personal data, depending on the question posed in the specific text field)
- Files uploaded by you

II. Purpose Legal basis of data processing
The purpose of this data processing is to ensure the communication you have entered into. The processing of your data from contact or enquiry or application forms is therefore initially based on your consent. The legal basis is Art. 6 para. 1 p. 1 lit. a DSGVO. If a contract is initiated via an enquiry form, the legal basis is also Art. 6 para. 1 p. 1 lit. b DSGVO. The legal basis for the processing of data in an application form may also be Art. 88 DSGVO in conjunction with 26 BDSG in addition to Art. 6 para. 1 p. 1 lit. f DSGVO.

III. Duration of processing
Your personal data will be kept for as long as it is necessary to fulfil the purpose of the processing or until you withdraw your consent. Exempt from this principle is data that Perspective must retain due to legal obligations. These include, for example, the retention obligations under commercial and tax law. These retention periods are - currently - up to ten years.

IV. Data subject rights
You have the right at any time to receive information free of charge about the origin, recipient and purpose of your stored personal data. You also have the right to demand the correction, blocking or deletion of this data. You can contact us at any time at the address given in the imprint for this purpose and for further questions on the subject of data protection.
Furthermore, you have the right to lodge a complaint with the competent supervisory authority in the event of violations of the GDPR. You can revoke your consent to data processing at any time by informally notifying us (e.g. by e-mail). The revocation does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. You also have the right to request the restriction of the processing of your personal data under certain circumstances.
The right to restriction of processing exists in the following cases:
- If you dispute the accuracy of your personal data stored by us, we usually need time to check this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
- If the processing of your personal data has happened / is happening unlawfully, you can request the restriction of data processing instead of erasure.
- If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request restriction of the processing of your personal data instead of erasure.
- If you have lodged an objection pursuant to Art. 21 (1) DSGVO, a balancing of your and our interests must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to demand the restriction of the processing of your personal data. If you have restricted the processing of your personal data, this data may - apart from being stored - only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the European Union or a Member State.

This website uses Lime Connect, a live chat software of the company Userlike UG, Probsteigasse 44-46, 50670  Cologne, Germany.

Lime Connect uses "cookies". These are text files that are stored on the computer of the website visitor and computer and which enable a personal conversation in the form of a real-time chat on the website.

The live chat can be used in the same way as a contact form and represents an additional customer service for visitors to our website to communicate almost personally with our staff. The data collected will not be used to personally identify the visitor to the website. They are only combined with personal data of the owner of the pseudonym if personal data is voluntarily provided for the live chat when using the tool.
The connection between the operator and the visitor is encrypted. The live chat can be terminated by the website visitor at any time.

The data processing takes place on the basis of your consent pursuant to Art. 6 Para. 1 lit. a GDPR or, insofar as no processing takes place that requires your consent, on the basis of our legitimate interest pursuant to Art. 6 Para. 1 lit. f GDPR. Our interests lie primarily in simplifying and improving communication with website visitors.

Further information on data protection at Lime Connect can be found at:
https://connect.lime-technologies.com/en/legal/privacy-policy/