Online Reservierungsssystem:
Software, Datenbank & Hosting

Preambel to the English translation

This document is a translation of the German language original to the best of our knowledge and the nearest possible sense. However, the German original version is the legally binding version. You can read the German version by choosing the language "Deutsch" from the language drop down selector at the bottom right end of this page.

1. Responsible and Data Protection Officer

Responsible in terms of art. 5 II GDPR for the offer https://reservation-system-bb.bitpalast.net and all subdomains to bitpalast.net is

Bitpalast GmbH
Sensburger Allee 27
D-14055 Berlin (Germany)

 from Barbados: +49 30 32 70 18 92
Fax from Barbados +49 30 32 70 18 91

service@bitpalast.net

In the privacy statement "we", "us", "our" and "" means the person in charge "Bitpalast GmbH". Any data subject can contact us directly at any time with any questions or suggestions regarding data protection.

In accordance with BDSG and GDPR is not obliged to appoint a data protection officer.

The following privacy policy applies only to this website, its subpages and all other subdomains to bitpalast.net, e.g. also, but not limited to partner.bitpalast.net, bugtracker.bitpalast.net, but not for any linked third-party websites.

2. Subject of Protection

The subject of protection is personal data, that is to say, details of personal or factual circumstances of a specific or identifiable natural person. This includes, in particular, information that allows you to identify your identity (for example, details such as name, postal address, e-mail address, IP address or telephone number).

3. Collecting General Data

With each request the websites record various general data and information, which are stored in so-called logfiles (logs) of the server. These data include

• Date and time of a transaction
• Your ip address (at the moment 3.133.133.39)
• What pages, scripts and graphics you have downloaded
• The type and version of your browser
• Click-through-paths between pages, scripts and graphics
• From what page you came if you have been referred by a link
• Parameters that the referring page has transmitted

needs the aforementioned data in order to deliver the content of our website correctly and to ensure the long-term functioning of our information technology systems and the technology of our website. The stored data will only be evaluated for statistical purposes. In principle, this data cannot be assigned to specific persons by . Personal user profiles cannot be formed. The data will not be merged with other data sources.

The processing of the data is based on art. 6 I lit. b) GDPR. According to this regulation, the processing of personal data is required to fulfill a contract for the use of this website of which you are a party or to carry out pre-contractual measures. In addition, the processing by art. 6 I lit. f) justified because it is in our particular interest and does not outweigh your interests or fundamental rights and freedoms. Our interest is to deliver our web content properly and in a user-friendly manner.

4. Contact Via the Website

On the websites you will find various information for contact (e-mail, fax, telephone, contact form). If you contact , the personal data you provide will be automatically saved. These are regularly the following data:

• Your name
• Your address
• Additional contact information, e.g. phone, fax, website, chat and instant messaging addresses
• additional business data, e.g. tax id or EU VAT-ID
• Comments that you add to a service or an order
• Payment data, e.g. bank code and account number

Such personal data transmitted on a voluntary basis will be stored for the purpose of processing or contacting. does not disclose this personal data to third parties.

The legal basis for processing is your consent (art. 6 I a) GDPR) as well as our justified interest (art. 6 I lit. f) GDPR) for processing. The legitimate interest is that we want to continue a conversation you initiated. Insofar as the data, such as payment data, are transmitted for the initiation or execution of a contractual relationship, the legal basis is art. 6 para. 1 lit. b) GDPR.

5. Recipient / Third Country

The data transmitted by you will normally be processed within the EU. For the purpose of contracting domain leases, passes on the registration data of the domain owner and administrator to the responsible domain registrar, which may also be located outside the EU and which is therefore not necessarily subject to EU data protection law.

Processing and storage countries of domain owner data 

This sharing is inevitable because it is a prerequisite for registering domains. If you do not agree with this, you do not register any domains whose registries are located in countries whose data protection law does not comply with EU data protection law. Some domain registries require additional information for the registration of domains that is not necessarily required for contract fulfillment, e.g. your identity card number or tax code. If you do not agree, do not register such domains. will only pass on the necessary data and only if you have made it explicitly available for domain registration. For other reasons, your data will not be disclosed to third parties, in particular for advertising purposes.

The legal basis for the transfer of data is art. 6 para. 1 lit. b) GDPR.

6. Cookies

The websites use "cookies". "Cookies" are small files on your hard drive that help make the website more personal. Most cookies are "session cookies," which means they are automatically deleted from your computer when you log out. Session cookies do not require any special consent. Without them, the website is not fully functional. You can still refuse to accept these cookies in your browser. However, this will prevent the website from functioning properly.

In the course of a purchase process, offers its customers to set a cookie so that the browser can recognize the customer later and simplify further processes for the customer by pre-filling form fields with already known data. This cookie is only set if you expressly agree to it in the purchase process.

You can set your browser so that you are informed about the setting of cookies and individually decide on their acceptance or the acceptance of cookies for certain cases or generally deny cookies. If cookies are not accepted, the functionality of the websites may be limited.

Insofar as the cookies serve the proper delivery of our web offer, the legal basis of the processing is art. 6 I lit. b) GDPR. Incidentally, the processing by art. 6 I lit. f) GDPR justified because the processing is necessary to safeguard the legitimate interests of our company. Our legitimate interest lies in the fact that we align our web offer specifically to the needs of our users, simplify the use of the web offer and allocate commissions to partners.

7. Facebook Plugin

This website uses a plugin from facebook.com. Facebook.com is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. The plugin is labeled "F Like" and the mouse over popup "Facebook 'Like' Button". If you activate the plugin by clicking on the button or click on the corresponding link, your browser connects to the servers of Facebook. Your IP address and the requested URL will be transmitted. Facebook receives the information that you have accessed the respective page of the website. In addition, Facebook will receive information from your browser (e.g., the browser type, version, your current IP address). If you are logged in to Facebook, Facebook can assign your visit to this website to your Facebook account. If you do not want this, log out of Facebook before using the social plugin. For further information on the purpose and extent of the data collection by Facebook and its further processing or use, please refer to the privacy policy of Facebook.

Facebook privacy policy 

The data processing is justified by art. 6 para. 1 lit. f) GDPR as it is our legitimate interest to link our offer to social media channels.

8. Google CDN

The site uses software from the Google Content Delivery Network (CDN) to deliver files faster that are frequently identical to other websites. The Google Content Delivery Network is a service of Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Your IP address, browser type, operating system version and time of retrieval will be known to Google. For more information, see the Google Privacy Policy.

Google privacy policy 

The data processing is justified by art. 6 para. 1 lit. f) GDPR as it is our legitimate interest to optimally optimize our offer.

9. Google Translator

If your browser does not have English, Spanish, or German as the default language, Google Translator will be used on this site. Google Translator is a service of Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Google may use cookies and "web beacons", invisible graphics. Your browsing habits are analyzed and additional information is transmitted from your browser to Google. Your IP address, browser type, operating system version and time of retrieval will be known to Google. For more information, see the Google Privacy Policy.

Google privacy policy 

The data processing is justified by art. 6 para. 1 lit. f) GDPR. It is our legitimate interest to make our offer available for other languages as well.

10. Google Maps

The website uses the map service Google Maps on the pages, which inform about country domain endings. Google Maps is a service of Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. By calling up Google Maps, your IP address, browser type, operating system version and time of retrieval will be transmitted to Google. Your surfing behavior can be analyzed. Your current location may also be submitted to Google. For more information, see the Google Privacy Policy.

Google privacy policy 

The data processing is by justified art. 6 para. 1 lit. f) GDPR. It is our legitimate interest to show you the geographical reference of the desired domain endings.

11. Let's Encrypt

Webspace users have the option of obtaining free SSL certificates from Let's Encrypt in some products. Let's Encrypt is a service of the Internet Security Research Group (ISRG), 548 Market St, PMB 77519, San Francisco, CA 94104-5401, USA. To set up and renew a Let's Encrypt SSL certificate, Let's Encrypt is provided with the domain name, the server IP address of the web space account and an e-mail address for technical notifications. You can specify this e-mail address yourself in the Webspace Control Panel before applying for a certificate. The specification of an e-mail address is necessary because in a multi-user environment, as is the case with our hosting offers, rate limiting and assignment procedures for user administration as well as protection against misuse must ensure the security of all users. If you do not specify a specific e-mail address yourself, the web space control center will default to the e-mail address you provided when you ordered the hosting product. If employees set up an SSL certificate for you, they will always use an alias email address for your domain, such as letsencrypt@your-domain.tld, which does not allow any inferences to be made about any other personal data. Further information on data processing by Let's Encrypt can be found in the Let's Encrypt privacy policy.

Let's Encrypt privacy policy 

The data processing is by justified art. 6 para. 1 lit. f) GDPR. Without providing the information required for an SSL certificate, it cannot be created.

12. Seals of approval / Awards / Reviews

On some pages rating widgets are shown. These are graphics or scripts that are displayed in our pages by a vendor comparison portal. Your IP address, browser type, operating system version and time of retrieval will be transmitted to the external portal. The vendor comparison portals may draw conclusions and find out that you have visited our site. Widgets from the following providers are used:

• HOSTtest.de: RevolutionMedia - Marco Keul, Gerhart-Hauptmann-Straße 5, D-33824 Werther (Westfalen), Telefon +49 (0)5203 9 18 59 03, Weitere Kontaktdetails siehe bitte https://www.hosttest.de
  HOSTtest.de 
   
• HOSTSUCHE.de: hostSuche - Jan Bärje, Auf den Rathen 59, D-27721 Ritterhude, info@hostsuche.de, Telefon +49 (0)4292 8 19 95 97
  HOSTSUCHE.de 
   
• homepage-kosten.de: touchdesign - Christin Gruber, Paradeplatz 10, D-24768 Rendsburg, info@homepage-kosten.de, Telefon +49 (0)4331 6 64 90 09
  homepage-kosten.de 

The data processing is justified by art. 6 para. 1 lit. f) GDPR. It is our legitimate interest to promote the quality seals, awards and ratings awarded to us.

13. Use of Web Space, Mailboxes or Databases

stores all operations related to configurations, files and directories of your webspace, database(s) and e-mail(s).

Legal basis for the storage is art. 6 para. 1 lit. f) GDPR, since it is in our legitimate interest for safety reasons to adequately document all processes that affect access to our systems.

14. Data Erasure and Storage Duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is eliminated. The data will be anonymized after 24 hours at the latest and will be deleted within 30 days after collection. However, they will be held legally permissible, as far as permitted by law, until the expiration of civil or criminal limitation periods or tax retention periods for transactions that are or may become legally significant (such as in the case of orders) for the purpose of performing the order and for protection against misuse and criminal offenses (e.g. fraudulent orders). stores the log data only and as long as it is absolutely necessary for the purpose of the order or to protect against misuse and crime. This also applies to log files that we create as a customer data processor. typically stores logs affecting webspace, e-mail inbox, or database usage for up to 30 days.

Personal data sent by email will be deleted or blocked when the conversation with the user ends. The conversation is ended when it can be inferred from the circumstances that the relevant facts have been finally clarified. Any further storage takes place if required or permitted by law. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.

15. Your Rights

Information, Confirmation and Right of Rectification

Upon request, will inform you free of charge if and what personal information we have stored with us. Likewise confirms on request if certain data are processed. In addition, will provide you with information on the purposes of processing, the categories of data processed, the recipients or categories of recipients of the data and, if possible, the planned duration for which the data will be stored or, if that is not possible, the criteria for the determination of this duration, the existence of a right to rectification or deletion of personal data concerning you or for the restriction of our processing or a right to object to processing, the existence of a right of appeal to a supervisory authority.

Unless the personal information is collected from the data subject, will provide you with all available information about the source of the data, the existence of automated decision-making including profiling, the scope and intended impact of such processing on the data subject. In addition, will inform you whether your personal information has been transferred to a third country or to an international organization. If this is the case, will advise you of the appropriate warranties in connection with the transfer.

Right to Rectification

You have the right to demand the correction or completion of incorrect personal data concerning you.

Right to Deletion

You have the right to demand from that the personal data concerning you be deleted immediately, if one of the following reasons applies and if the processing is not required

• The personal data has been collected for such purposes or otherwise processed for which they are no longer necessary.
• You have revoked your consent, to which the processing according to art. 6 I lit. a) GDPR or art. 9 II lit. a) GDPR was supported, and no other legal basis for the processing exist.
• You object to the processing in accordance with art. 21 I GDPR and there are no prior justifiable grounds for processing, or you object to the processing according to art. 21 II GDPR.
• The personal data were processed unlawfully.
• The deletion of personal data is required to fulfill a legal obligation.
• The personal data have been recorded in relation to information society services provided in accordance with art. 8 I GDPR.

Right to Restriction of Processing

You may require to restrict processing if any of the following conditions exist:

• The accuracy of your personal information is contested by you for a period of time that enables the person responsible to verify the accuracy of your personal information.
• The processing is unlawful, you refuse the deletion of personal data and instead require the restriction of the use of personal data.
• We no longer need your personal information for processing purposes, but you need it to assert, exercise or defend your rights.
• You object to the processing according art. 21 I GDPR and it is not yet clear whether our legitimate reasons prevail over yours.

Right to Data Transfer

You have the right to receive personal data concerning you, that processes by means of automated procedures based on your consent (art. 6 I letter a) or art. 9 II lit. a) GDPR) or on the basis of a contract (art.6 I letter b) GDPR), in a structured, common and machine-readable format. These data may be transmitted to another person or transmitted by , as far as this is technically feasible and if this does not affect the rights and freedoms of other persons.

Right to Object

For reasons arising out of your particular situation, you may at any time object to the processing of personal data relating to you, which takes place on the basis of art. 6 I lit. e) or f) GDPR.

Upon receipt of your objection, will no longer process the relevant personal data, unless can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or if the processing is to assert, exercise or defend legal claims.

You can object to the processing of your data for the purpose of direct mail at any time. In this case, will no longer process the personal data for this purpose. This also applies to the profiling, as far as it is associated with such direct mail.

Right to Revoke a Data Protection Consent

You may revoke your consent to processing personal data at any time without giving reasons.

16. Asserting Your Rights

The rights to which you are entitled can be claimed directly from us or our data protection officer.

17. Right of Appeal to a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of personal data concerning you is contrary to data protection. The regulator that files the complaint will notify you of the status and outcome of your complaint, including the possibility of a judicial remedy.

More information and information on the right to file access can be found on the website of the Brandenburg State Commissioner for Data Protection and the website of the Berlin State Commissioner for Data Protection and Freedom of Information.

Brandenburg State Commissioner for Data Protection 

Berlin State Commissioner for Data Protection and Freedom of Information 

18. Security

To protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorized persons, implements technical and organizational security measures according to art. 32 GDPR. Our security measures are continuously improved in line with technological developments. Access to them is only possible for a small number of authorized persons and persons subject to special data protection who are involved in the technical, administrative or editorial support of data.

19. No Automated Decision-Making / Profiling

We refrain from automatic decision-making or profiling.

20. Subject to Change

The privacy policy can be amended at any time. The current version will be published here on the website.

Last updated 6/2024 revision a

Print the privacy policy