Data Protection Notice

To ensure that you feel safe and comfortable when visiting our websites, we would like to inform you below about how your data is handled, in particular pursuant to Art. 13 of the General Data Protection Regulation (GDPR).

Controller

The controller responsible for the data collection and processing described below is:

Jugendherberge Berlin Ostkreuz gGmbH
Marktstraße 9-12
10317 Berlin
Phone: +49 (0) 30 / 2 00 50 92-21
Fax: +49 (0) 30 / 2 00 50 92-22
zentrale@JugendherbergeBerlinOstkreuz.de 

Storage of the IP Address

We store the IP address transmitted by your web browser strictly for a specific purpose for a period of seven days in the interest of being able to detect, limit, and eliminate attacks on our websites. After this period, we delete or anonymize the IP address. The legal basis is Art. 6 (1) sentence 1 lit. f GDPR.

Usage Data

To improve the quality of our websites, we store data about individual access to our pages for statistical purposes. This data set consists of:

• The page from which the file was requested
  
  
• The name of the file
  
  
• The date and time of the query
  
  
• The amount of data transferred
  
  
• The access status (file transferred, file not found)
  
  
• A description of the type of web browser used
  
  
• The IP address of the requesting computer, shortened by the last three digits

This data is only stored in anonymized form. The creation of personal user profiles is therefore excluded.

Handling of Data

As a visitor to our websites, you rightly expect responsible and competent handling of your data. We only pass on your data that we have collected and stored to third parties if we are legally entitled or obliged to do so (e.g., for contractual or law enforcement purposes) or if you expressly request it. In addition, we transfer your personal data to service providers in order to provide the services and products you have requested. We work here with carefully selected providers as processors pursuant to Art. 28 GDPR, who perform precisely defined functions for us, and thus also for you. Examples include companies that assist us with: online marketing, newsletter distribution, processing of payment transactions, IT services, data storage, printing processes, and the provision of services and products. The current list of our service providers/processors can be found here. In these cases, we strictly observe the requirements of data protection law, in particular the German Federal Data Protection Act (BDSG) and the EU General Data Protection Regulation (GDPR). The scope of data transmission is limited to the necessary extent. Processors pursuant to Art. 28 GDPR may not use your personal data for their own purposes.

Data Protection Information for Bookings at Youth Hostel Berlin Ostkreuz
Nature, Purposes, and Legal Basis of Data Processing

We process the following personal data about you:

• Data of the person booking (name, address, email, phone/mobile number, DJH membership number)
• Data of accompanying persons (name, address, if applicable email, phone/mobile number, DJH membership number)
• Booking data (number and age of guests, booking period, catering details, selected accommodation)
• Bank details (if applicable)
• Data on our paid offers (additional services, e.g., leisure activities, etc.) that you utilize during your stay.

The legal basis for data processing is Art. 6 (1) lit. b GDPR (for the performance of a contract or implementation of pre-contractual measures). If the contract is or is to be concluded with a legal entity or institution (e.g., club, school, daycare, authority, company), the data of the contact persons of the legal entity or institution will be processed on the basis of Art. 6 (1) lit. f GDPR. Our legitimate interest lies in the performance of the contract with the legal entity or institution to which you belong.

Furthermore, we process special categories of personal data (e.g., information on a disability – to provide a suitable room; on allergies – for consideration in meal preparation). The legal basis for processing this data is Art. 9 (2) lit. a GDPR (consent). Consent can be revoked at any time with effect for the future. Data processing carried out until the revocation of consent remains lawful.

We process your name and address in accordance with Art. 6 (1) lit. f GDPR to inform you about our offers by post (based on the legitimate interest in advertising our service). You can object to the use of your data for advertising purposes at any time. To do so, please contact

If we received your email address in the context of a contractual relationship, we will use it to inform you about the same or similar products and offers. This advertising is carried out in the legitimate interest of increasing the occupancy of our youth hostels. You can object to the use of your email address for advertising purposes at any time without incurring any costs other than the transmission costs according to the basic rates. To do so, please contact zentrale@JugendherbergeBerlinOstkreuz.de.

Contact Form

You have the option to contact us via our contact form. To use our contact form, we first require the data marked as mandatory fields. We use this data on the basis of Art. 6 (1) sentence 1 lit. f GDPR to answer your inquiry. In addition, you can decide for yourself whether you would like to provide us with further information. This information is voluntary and is not strictly required for contacting us. We process your voluntary information on the basis of your consent according to Art. 6 (1) sentence 1 lit. a GDPR.

Your data will only be processed to answer your inquiry. We delete your data if it is no longer required and there are no legal retention obligations to the contrary.

To the extent that your data submitted via the contact form is processed on the basis of Art. 6 (1) sentence 1 lit. f GDPR, you can object to the processing at any time. Furthermore, you can revoke your consent to the processing of voluntary information at any time. To do so, please contact zentrale@JugendherbergeBerlinOstkreuz.de.

Online-Feedback System

When guests stay at our youth hostels, we ask them if they would like to give us one-time online feedback on their stay after their departure. For this purpose, the name and email address are processed in accordance with Art. 6 (1) lit. a GDPR. Of course, only anonymous feedback data and no personal data are published on our websites. Your consent can be revoked at any time, e.g., by email to zentrale@JugendherbergeBerlinOstkreuz.de. Data processing is lawful until your consent is revoked.

Membership

A prerequisite for admission to a youth hostel is always membership in the German Youth Hostel Association (DJH) or another association of the International Youth Hostel Federation (IYHF).

We collect the following information in the membership application: first name, last name, gender/salutation, address, date of birth, valid email address, phone number. In the case of family memberships, the name and date of birth of the partner and children up to 26 years of age are also recorded if they are to be included in the family membership free of charge.

This data is collected to identify you as a member of the German Youth Hostel Association (e.g., for invoicing the membership fee) and to fulfill our contractual obligations (e.g., issuing the internationally valid membership card) as well as for correspondence with you.

The inclusion of the date of birth results from the fact that membership fees and overnight prices in youth hostels are age-dependent (membership up to 26 years, membership from 27 years, child prices).

The legal basis for data processing is Art. 6 (1) lit. b GDPR.

Membership data is stored in a central membership file at the DJH-Hauptverband, Leonardo-da-Vinci-Weg 1, 32760 Detmold.

Newsletter

On our website, we offer you the opportunity to subscribe to our newsletters. We only require your email address for this. Providing a salutation as well as first and last names is voluntary and is only used for personal address in the newsletter. We use the so-called double opt-in procedure for registering for our newsletter. This means that we will only send you newsletters after you have confirmed the link sent in the activation email.

The legal basis for processing your personal data is your consent according to Art. 6 (1) lit. a GDPR.

Withdrawal of consent: You can unsubscribe from the newsletter at any time for the future, e.g., by email to zentrale@JugendherbergeBerlinOstkreuz.de or via a corresponding link at the end of each newsletter. Data processing is lawful until your consent is revoked.

As part of the newsletter registration, we store further data in addition to the data already mentioned, if this is necessary for us to prove that you have ordered our newsletter. This may include storing the full IP address at the time of ordering or confirming the newsletter, as well as a copy of the confirmation email sent by us. The corresponding data processing is based on Art. 6 (1) sentence 1 lit. f GDPR and in the legitimate interest of being able to provide accountability regarding the legality of the newsletter distribution.

Sweepstakes

If you register for sweepstakes organized by us, we use the data you provided during registration for the purpose of conducting the participation, in particular for notification of prizes. Detailed information can be found in the respective terms and conditions for the respective sweepstakes. The legal basis for this data processing is Art. 6 (1) lit. b GDPR.

If you have given us your separate consent for this, we will also use the data provided during your registration for sending advertising/newsletters regarding our offers. The legal basis for this is Art. 6 (1) lit. a GDPR.

Withdrawal of consent: You can unsubscribe from the newsletter at any time for the future, e.g., by email to zentrale@JugendherbergeBerlinOstkreuz.de or via a corresponding link at the end of each newsletter. Data processing is lawful until your consent is revoked.

Cookies

We use cookies on our websites. Cookies are small files that allow a website to collect and store a range of data on your end device (e.g., desktop computer, laptop, mobile device). Cookies allow information to be kept for a certain period of time and the visitor's end device to be re-identified if necessary.

Cookies are small text files used by websites to make the user experience more efficient. This site uses different types of cookies. Some cookies are placed by third parties that appear on our pages. By law, we can store cookies on your device if they are strictly necessary for the operation of this site. Processing is carried out on the basis of Section 25 (2) No. 2 TDDDG in conjunction with Art. 6 (1) lit. f GDPR.

For all other cookie types, we need your permission. The processing of your personal data takes place, provided you give us your consent, in accordance with Section 25 (1) TDDDG (consent for setting or reading the cookies) in conjunction with Art. 6 (1) sentence 1 lit. a GDPR (consent for the subsequent data processing).

To the extent you have given your consent for the use of cookies, you can change or withdraw your consent at any time from the Cookie Declaration on our website. Data processing is lawful until your consent is revoked.

Please provide your consent ID and the date when you contact us regarding your consent (see "Show Cookie Details"). Your consent applies to the following domains: (siehe Show Cookie Details). Your consent applies to the following domains: www.jugendherbergeberlinostkreuz.de, buchung.diejugendherbergen.de

Change Cookie Settings

Show Cookie Details

Google Analytics

Our website uses Google Analytics, a web analysis service from Google Inc. Google Analytics uses cookies that enable a pseudonymous analysis of your use of the website, provided you have declared your express consent (opt-in). In this way, we are able to recognize recurring visitors and count them as such. Data processing is based on your consent according to Art. 6 (1) lit. a GDPR.

The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Since we have activated IP anonymization on this website, your IP address will be shortened by Google beforehand within member states of the European Union. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. For transfers to the USA, an adequate level of data protection is guaranteed due to the provider's certification under the adequacy decision (EU-U.S. Data Privacy Framework). We have also concluded a processing agreement with Google Inc. (USA) according to Art. 28 GDPR. Google may therefore only use all information strictly for the intended purpose of evaluating the use of our website for us and compiling reports on website activity and providing other services related to website use and internet use to the website operator.

You can revoke your consent to the creation of pseudonymous user profiles at any time. Please use one of the following options:

1) You can prevent the storage of cookies by adjusting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.

2) You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link here.

3) You can additionally prevent collection by Google Analytics by clicking on the following link. A corresponding cookie will be set that permanently prevents future collection of your data when visiting this website:
Click here to object to the processing of your data by Google Analytics.

4) To the extent you have given your consent for the use of cookies, you can change or withdraw your consent at any time from the Cookie Declaration on our website. Data processing is lawful until your consent is revoked.

Third-Party Tracking Technologies for Advertising Purposes

We use cross-device tracking technologies so that targeted advertising can be displayed to you on other internet pages based on your visit to our websites and so that we can see how effective our advertising measures were.

The processing of your personal data for this purpose takes place, provided you give us your consent, in accordance with Section 25 (1) TDDDG (consent for setting or reading cookies) in conjunction with Art. 6 (1) sentence 1 lit. a GDPR (consent for the subsequent data processing). To the extent you have given your consent for the use of cookies, you can change or withdraw your consent at any time from the Cookie Declaration on our website. Data processing is lawful until your consent is revoked.

How does tracking work?

When you visit our websites, it is possible that the third-party providers mentioned below retrieve identification features for your browser or end device (e.g., a so-called browser fingerprint), evaluate your IP address, store or read identification features on your end device (e.g., cookies), or gain access to individual tracking pixels.

The individual features can be used by third-party providers to recognize your end device on other websites. We can commission the corresponding third-party providers to display advertising based on the pages you have visited on our site.

What does cross-device tracking mean?

If you log in to the third-party provider with your own user data, the respective recognition features of different browsers and end devices can be linked with each other. For example, if the third-party provider has created a separate feature for the laptop, desktop PC, or smartphone/tablet you use, these individual features can be assigned to each other as soon as you use a service of the third-party provider with your login data. In this way, the third-party provider can also steer our advertising campaigns in a targeted manner across different end devices.

Below we list the third-party providers with whom we cooperate for advertising purposes. To the extent that data is processed outside the EU or EEA in this context, we provide information on the adequate level of data protection. You will also learn how you can revoke your consent:

1) Google LLC (USA):

For transfers to the USA, an adequate level of data protection is guaranteed due to the provider's certification under the adequacy decision (EU-U.S. Data Privacy Framework).

2) Facebook / Meta (USA): 

For transfers to the USA, an adequate level of data protection is guaranteed due to the provider's certification under the adequacy decision (EU-U.S. Data Privacy Framework).

3) Facebook-Pixel / Meta (USA): 

For transfers to the USA, an adequate level of data protection is guaranteed due to the provider's certification under the adequacy decision (EU-U.S. Data Privacy Framework).

Data Security

To protect your data as comprehensively as possible from unwanted access, we take technical and organizational measures. We use an encryption process on our pages. Your information is transmitted from your end device to our server and vice versa via the internet using TLS encryption. You can recognize this by the fact that, for example, the lock symbol in the status bar of your browser is closed and the address line starts with https:// or is marked as "Secure".

Storage Duration

Unless we have already informed you in detail about the storage period, we delete personal data when it is no longer required for the aforementioned processing purposes and no legal retention obligations prevent deletion.

Your Rights as a User

When processing your personal data, the GDPR grants you certain rights as a website user:

a. Right of access (Art. 15 GDPR): You have the right to request confirmation as to whether personal data concerning you is being processed... [Standard GDPR rights language continues as per German original].
Sie haben das Recht, eine Bestätigung darüber zu verlangen, ob Sie betreffende personenbezogene Daten verarbeitet werden; ist dies der Fall, so haben Sie ein Recht auf Auskunft über diese personenbezogenen Daten und auf die in Art. 15 DSGVO im Einzelnen aufgeführten Informationen.

b. Recht auf Berichtigung und Löschung (Art. 16 und 17 DSGVO):
Sie haben das Recht, unverzüglich die Berichtigung Sie betreffender unrichtiger personenbezogener Daten und ggf. die Vervollständigung unvollständiger personenbezogener Daten zu verlangen.

Sie haben zudem das Recht, zu verlangen, dass Sie betreffende personenbezogene Daten unverzüglich gelöscht werden, sofern einer der in Art. 17 DSGVO im einzelnen aufgeführten Gründe zutrifft, z. B. wenn die Daten für die verfolgten Zwecke nicht mehr benötigt werden.

c. Recht auf Einschränkung der Verarbeitung (Art. 18 DSGVO):
Sie haben das Recht, die Einschränkung der Verarbeitung zu verlangen, wenn eine der in Art. 18 DSGVO aufgeführten Voraussetzungen gegeben ist, z. B. wenn Sie Widerspruch gegen die Verarbeitung eingelegt haben, für die Dauer einer etwaigen Prüfung.

d. Recht auf Datenübertragbarkeit (Art. 20 DSGVO):
In bestimmten Fällen, die in Art. 20 DSGVO im Einzelnen aufgeführt werden, haben Sie das Recht, die Sie betreffenden personenbezogenen Daten in einem strukturierten, gängigen und maschinenlesbaren Format zu erhalten bzw. die Übermittlung dieser Daten an einen Dritten zu verlangen.

e. Widerspruchsrecht (Art. 21 DSGVO):
Werden Daten auf Grundlage von Art. 6 Abs. 1 lit. f) erhoben (Datenverarbeitung zur Wahrung berechtigter Interessen), steht Ihnen das Recht zu, aus Gründen, die sich aus Ihrer besonderen Situation ergeben, jederzeit gegen die Verarbeitung Widerspruch einzulegen. Wir verarbeiten die personenbezogenen Daten dann nicht mehr, es sei denn, es liegen nachweisbar zwingende schutzwürdige Gründe für die Verarbeitung vor, die die Interessen, Rechte und Freiheiten der betroffenen Person überwiegen, oder die Verarbeitung dient der Geltendmachung, Ausübung oder Verteidigung von Rechtsansprüchen.

f. Widerrufsrecht aufgrund Einwilligung:
Werden personenbezogene Daten auf Grundlage von Art. 6 Abs. 1 lit. a) DSGVO (Einwilligung) eingeholt, steht Ihnen jederzeit das Recht zu, für die Zukunft die Einwilligung zu widerrufen. Die Datenverarbeitung erfolgt bis zum Widerruf rechtmäßig. Zur Ausübung des Widerrufs wenden Sie sich bitte an die unter Nr. 1 benannten Ansprechpartner.

g. Beschwerderecht bei einer Aufsichtsbehörde:
Sie haben gem. Art. 77 DSGVO das Recht auf Beschwerde bei einer Aufsichtsbehörde, wenn Sie der Ansicht sind, dass die Verarbeitung der Sie betreffenden Daten gegen datenschutzrechtliche Bestimmungen verstößt. Das Beschwerderecht kann insbesondere bei einer Aufsichtsbehörde in dem Mitgliedstaat Ihres Aufenthaltsorts, Ihres Arbeitsplatzes oder des Orts des mutmaßlichen Verstoßes geltend gemacht werden.

Für Auskünfte, Wünsche oder Anregungen zum Thema Datenschutz stehen wir Ihnen gerne zur Verfügung.                        

Data Protection Officer

Our operational data protection officer is available to provide you with information or suggestions on the subject of data protection:

RA Dr. iur. Christian Borchers
Managing Director of datenschutz süd GmbH
office@datenschutz-sued.de
Phone: +49 (0) 931 304 976 0

Changes to our Data Protection Notice

This data protection notice replaces all previous versions. We may change the notice at any time; therefore, please check our data protection notices regularly on our website for any updates. If the changes are significant, we will provide a clearly recognizable message on our websites. In addition, we will send an electronic notification about changes to our data protection notices if we consider this appropriate.