Privacy Policy
Information on the processing of personal data on this website and in connection with our services.
This privacy policy explains how we handle your personal data. We do so in accordance with applicable data protection legislation, in particular the General Data Protection Regulation (GDPR). With the exception of the service providers and third parties named in this privacy policy, we do not pass on any data to third parties. If you have any questions, please do not hesitate to contact us.
Contents
- Responsible person
- General information
- Website hosting
- Cookies, web beacons and mobile identifiers
- Getting in touch
- Newsletter
- Registering for a user account
- Job applications
- Other third-party services
- Rights of data subjects
Responsible person
The data controller is
Silbersee Resort Betriebsgesellschaft mbH
Zum Silbersee 19
29229 Celle
Data Protection Officer:
Lars Rether
Email: info@silbersee-resort.de
Tel.: +49 05141 9669790
General information
Website hosting
Every time our website is accessed, the user’s browser transmits various data. The following data is processed for the duration of the visit to the website:
- Browser type and version used
- Operating system
- Pages and files accessed
- Amount of data transferred
- Date and time of access
- The user’s internet service provider
- IP address
- Referrer URL
The processing of this data is necessary in order to deliver the website to the user and to optimise it for their device. We do not store any personal data in log files.
The legal basis for the processing is Article 6 (1) (f) of the GDPR. Our legitimate interest lies in providing the website.
Cookies, web beacons and mobile identifiers
On our website we use technologies to recognize the device being used. These may include cookies, tracking pixels and/or mobile identifiers.
Recognizing a device can generally serve different purposes. It may be necessary to provide functions of our website, for example to make a shopping cart available. In addition, the technologies mentioned can be used to track the behavior of users on the site, for example for advertising purposes. Which technologies we use in detail and for what purposes is described separately in this privacy policy.
For a better understanding, we explain below in general how cookies, tracking pixels and mobile identifiers work:
Cookies are small text files that contain certain information and are stored on the user's device. In most cases, this is an identification number assigned to a device (cookie ID).
A tracking pixel is a transparent graphic file that is embedded on a page and enables log file analysis.
A mobile identifier is a unique number (mobile ID) that is stored on a mobile device and can be read by a website.
Cookies may be necessary for our website to function properly. The legal basis for the use of such cookies is Art. 6(1)(f) GDPR. Our legitimate interest is in providing the functions of our website.
We use cookies that are not necessary for the operation of our website to make our offering more user-friendly or to track the use of our website. The legal basis here depends on whether the user's consent must be obtained or whether we can rely on a legitimate interest. A user can revoke consent given at any time, including through the settings in their browser.
Users can prevent and object to the processing of data using cookies through appropriate settings in their browser. In the event of an objection, it is possible that not all functions of our website will be available. We provide separate information in this privacy policy about other options for objecting to the processing of personal data through cookies. Where applicable, we provide links with which an objection can be declared. These are labeled "Opt-Out".
Getting in touch
In the event of contact, we process the user's information, date and time for the purpose of handling the inquiry including any follow-up questions.
The legal basis for data processing is Art. 6(1)(f) GDPR. Our legitimate interest is in responding to our users' inquiries. An additional legal basis is Art. 6(1)(b) GDPR if the processing is necessary for the performance of a contract or for the implementation of pre-contractual measures.
The data will be deleted as soon as the inquiry including any follow-up questions has been answered. We review at regular intervals, but at least every two years, whether data collected in connection with contact requests should be deleted.
Newsletter
Users have the option to sign up for newsletters on our site. In doing so, we process the data entered during registration in order to send a confirmation email to the user's email address. After confirmation, we process the data in order to send newsletters. For the purpose of personalization, we may also process the user's name if the user has provided it.
Upon registration, the date and time as well as the user's IP address are stored in order to be able to prove registration. We continue to process this data for verification purposes after unsubscription and delete it after three years at the end of the year.
The legal basis for processing is the user's consent pursuant to Art. 6(1)(a) GDPR. Otherwise, processing is carried out pursuant to Art. 6(1)(f) GDPR. Our legitimate interests are sending newsletters, personalized communication with the user, and proof that the user has signed up for the newsletter.
Registering for a user account
Users can register for our offering on our website. In this context, we process the data entered during registration. We have the email address confirmed by sending a link (double opt-in) to prevent misuse of the registration function. We also process the date and time and the user's IP address for this purpose. For verification purposes, we also process the date, time and IP address of the user when they click on the confirmation link.
The data will be deleted with the deletion of the user account after three years at the end of the year, unless a longer statutory retention obligation prevents this.
The legal basis for processing is Art. 6(1)(a) GDPR insofar as we obtain the user's consent. If the processing is necessary for the performance of a contract or for the implementation of pre-contractual measures, it is based on Art. 6(1)(b) GDPR. The legal basis otherwise is Art. 6(1)(f) GDPR. Our legitimate interest is in providing users with access to our registration-required offering, protecting ourselves against misuse of the registration function, and being able to prove proper registration. After deletion of the user account, our legitimate interest also lies in defending against possible claims.
Job applications
When users apply for a position, we process personal data for the purpose of the application process. In addition to the data transmitted by the user, we process additional data that arises during the application process (e.g. during an interview). Should we include data in an applicant pool, this only happens on the basis of the user's prior consent. In this case, the data will be processed beyond the completion of the application process so that contact can be made for suitable job offers.
Applicant data will be deleted three months after completion of the application process. If included in an applicant pool, the data will be retained for a maximum of two years unless the consent given is revoked earlier.
The legal basis for processing is Art. 6(1)(b) GDPR. In the case of consent given for inclusion in an applicant pool, processing is based on Art. 6(1)(a) GDPR. After completion of the application process, processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest is in defending against possible claims under the General Equal Treatment Act.
Other third-party services
We embed content and buttons from the social network Instagram on our website via a plugin. Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
In order to load content from Instagram, it is technically necessary to transfer the user's IP address to the company. If the user is logged in to Instagram, the visit to a page can be associated with the account.
Insofar as we obtain the user's consent, data processing is carried out on the legal basis of Art. 6(1)(a) GDPR. Otherwise, it is based on Art. 6(1)(f) GDPR. Our legitimate interest in embedding Instagram content and buttons is in the user-friendly design of our website.
We embed content and buttons from the social network LinkedIn on our website via a plugin. Provider: LinkedIn Corp., 1000 W. Maude Ave., Sunnyvale, California 94085, USA.
In order to load content from LinkedIn, it is technically necessary to transfer the user's IP address to the company. If the user is logged in to LinkedIn, the visit to a page can be associated with the account.
Insofar as we obtain the user's consent, data processing is carried out on the legal basis of Art. 6(1)(a) GDPR. Otherwise, it is based on Art. 6(1)(f) GDPR. Our legitimate interest in embedding LinkedIn content and buttons is in the user-friendly design of our website.
Gravatar
For personalization of our website, we use Gravatar. Provider: Aut O'Mattic A8C Ireland Ltd., Business Centre, No.1 Lower Mayor Street, International Financial Services Centre, Dublin 1, Ireland.
Posts or comments from users in which they provide their email address are personalized with profile pictures from Gravatar. Exclusively for this purpose, the hashed email address is transmitted to the Gravatar server in this case to verify whether a Gravatar account exists. In order to provide the service, it is also technically necessary to transmit the user's IP address.
The legal basis for processing is Art. 6(1)(f) GDPR. Our legitimate interest is in the user-friendly design of our website.
Rights of data subjects
If personal data of the user is processed, they are a data subject within the meaning of the GDPR. Data subjects have the following rights:
Right to information: The data subject has the right to request confirmation as to whether personal data concerning them is being processed. If personal data is being processed, the data subject has the right to free information as well as a copy of the personal data that is the subject of the processing.
Right to rectification: The data subject has the right to request the immediate correction of inaccurate or completion of incomplete personal data.
Right to erasure: The data subject has the right to request the immediate deletion of personal data concerning them in accordance with statutory provisions.
Right to restriction of processing: The data subject has the right to request a restriction of the processing of personal data concerning them in accordance with statutory provisions.
Right to data portability: The data subject has the right to receive the personal data concerning them in a structured, commonly used and machine-readable format or to request transmission to another controller.
Right to object: The data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them which is carried out on the basis of Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions. If personal data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning them for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing.
Right to withdraw consent: The data subject has the right to withdraw their consent at any time.
Right to lodge a complaint: The data subject has the right to lodge a complaint with a supervisory authority.
Status of privacy policy: July 16, 2026
