Data Protection

Thank you for visiting the website of Stanley HGR B.V. For us, the protection and confidentiality of your data is of particular importance.
In the following, we will inform you about the processing of personal data in connection with our services, which we offer as part of our activity as consultants.
Personal data is any information relating to an identified or identifiable natural person (Article 4 (1) EU Data Protection Regulation “GDPR”). This includes information such as your name, e-mail address, postal address or telephone number. Information that is not directly related to your identity, such as: As the number of users of an Internet presence, do not fall under this.

1. Who is responsible for the processing of your personal data?

The person responsible (hereinafter referred to as “Stanley HGR B.V.” or “we”) within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection provisions is the:

Stanley HGR B.V.
Herengracht 269
1016 BJ, Amsterdam, NL
Phone:+31 20 623 7877
Mail: hotelhegra@stanley-hotels.com
Commercial Register
NL, Amsterdam
Commercial Register No: 82695210
SEO: Carole Kabantsov

2. Contact details of the data protection officer

You can reach our data protection officer under the following contact data:

3. Purposes and legal basis of processing and duration of storage

In the following, we inform you about the various purposes for which we process personal data, on which legal basis such processing takes place and how long we store the data.
Insofar as we obtain the consent of the data subject for processing of personal data, Art. 6 para. 1 lit. a GDPR as the legal basis for the processing of personal data. In the processing of personal data necessary for the performance of a contract of which the data subject is a party, Art. 6 para. 1 lit. b DSGVO as legal basis. This also applies to processing operations required to carry out pre-contractual measures. Insofar as the processing of personal data is required to fulfill a legal obligation that our company is subject to, Art. 6 para. 1 lit. c DSGVO as legal basis. If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interest, fundamental rights and fundamental freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f DSGVO as legal basis for processing.
We adhere to the principles of data avoidance and data minimization. Therefore, we only store your personal data for as long as is necessary to achieve the purposes mentioned here or as provided for by the various storage periods provided for by law. After discontinuation of the respective purpose or expiration of these deadlines, the corresponding data are routinely and according to the legal regulations blocked or deleted.
1. Data processing in the case of general use of our Internet pages and as part of our activity as consultants
General access to our website

Each time you visit our website, we automatically collect data and information from the calling device and store this data and information in the log files of the server. The (1) browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system accesses our website (so-called referrers), (4) the sub-web pages, which can be accessed via (5) the date and time of access to the website, (6) an Internet Protocol (IP) address, (7) the Internet service provider of the accessing system and (8) other similar data and information used in the event of attacks on our information technology systems. For security purposes, that is, in order to understand the attack in case of attacks on our platforms, we store this data including the IP address for a period of 14 days and then anonymize the IP addresses or delete the data. The IP address is needed during the connection to transfer the contents of our platform to your browser. The legal basis for the processing and subsequent storage of the IP address is a legitimate interest in accordance with Art. 6 para. 1 lit. f DS-GMO. The legitimate interest in transmitting the IP address is that it is necessary to display the contents of the platform; without transmission of the IP address, a display of the website is not possible. The legitimate interest in limited storage is our security interests.
2. Advertising contradictions
If we receive an objection from you for advertising purposes, we may put your personal contact information (name, address, telephone number, fax number, e-mail address) on a blacklist to ensure that we no longer send you any unwanted advertising. Legal basis is a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO, where the legitimate interest is that we can meet our obligations arising from your advertising conflict. The data will be stored for this purpose until you expressly revoke the advertising conflict in writing.
3. Contact form and e-mail contact
On our website contact forms are available, which can be used for electronic contact. By clicking the “Send” button, you consent to the transmission of the data entered in the input mask to us. In addition, we save the date and time of your contact. Alternatively, contact via the provided e-mail address is possible. In this case, the user’s personal data submitted by e-mail and our response will be stored. The personal data transmitted to us voluntarily serve us to process your request and to contact you. The legal basis for the transmission of data is Art. 6 para. 1 lit. a GDPR. We use the data for this purpose until the conversation with you ends. The conversation ends when it can be inferred from the circumstances that the facts are finally clarified.

4. Data processing via entrepreneurs or employees of companies
As part of our activity as an asset management company, we engage in a variety of consulting activities. In doing so, we process personal data of entrepreneurs (data relating to entrepreneurs is only personal data if the entrepreneur is a natural person) or employees of companies. The respective companies or entrepreneurs may be in a contractual or pre-contractual relationship with us, but in some cases we may also process data from companies and their employees if there is no such pre-contractual relationship. In the following sections we inform you about the purpose, the respective legal basis as well as the storage duration of these processes of entrepreneurs or company employees as well as the data categories, as far as we do not collect the personal data from the data subject. The data will be deleted as soon as they are no longer necessary for the achievement of the respective purpose, that is, there is no longer a contract with the business partners or customers and we no longer intend to enter into a contract with the respective business partner or customer, none there is no longer a legitimate interest and, moreover, we are no longer required by law to keep records in which personal data may be contained.
5. Data processing for contract management and preparation purposes
We process personal data for the purpose of contract management, that is, so that we can provide our business partners or customers with the contractual services as well as for the purpose of appropriate contract preparation. If the business partner or customer is a natural person, the legal basis is that the processing for the performance of a contract or for carrying out pre-contractual measures pursuant to Art. 6 para. 1 lit. b DSGVO is required. If we process personal data of employees of the business partner or customer, the legal basis is a legitimate interest pursuant to Art. 6 para. 1 lit. f DSGVO. The legitimate interest lies in the performance of our business and that of the business partner or customer. There is no conflicting interest on the part of the person concerned, because from the point of view of our business partner or customer, the processing is required by us in the context of the existing employment relationship with the person concerned (§ 26 BDSG-new). For this purpose, we store personal data for the duration of the contract.
Incidentally, we store accounting documents for a period of ten years and business letters, that is, any message relating to the preparation, execution or cancellation of a business, for a period of six years, in order to fulfill our statutory retention obligations under section 257 (1) 2 HGB and § 147 AO, whereby the deadline begins with the end of the calendar year in which the business letter was received or sent, or the accounting voucher arose. Legal basis is Art. 6 para. 1 lit. c DSGVO.

4. Business and Customer Care

We process the personal data of our business partners or customers, prospective customers and / or their employees as contact persons received in connection with our activity as consultants, during the initiation, conclusion and execution of a contract as well as after the end of the contract or, if no contract It is possible, for the purpose of business and customer service, and in the case of a renewed inquiry of the business partner or customer or prospective customer, on the basis of the previous contracts, the offers or inquiries received to be able to provide appropriate services themselves. Legal basis is a legitimate interest under Art. 6 para. 1 lit. f DSGVO. The legitimate interest lies in the execution of our business. For this purpose, we store personal data as long as we assume that the respective customer can conclude another or initial contract with us in the future, which is the case until the respective business partner or customer tells us that under no circumstances make a contract with us.

5. Data processing for general advertising purposes

We process personal data of our business partners or customers as well as other companies and companies that are not in business relationship with us and in this context, if necessary also from the respective contact persons for the purpose of sending direct mailings, as far as legally permissible. As far as we did not collect these data directly from the respective data subject, we can also take contact data of the data subject from public sources, in particular the website of the respective company and branch directories. In connection with these direct marketing purposes, we can also consider the previous contracts of our business partners or customers and company specifics such as industry affiliation or company size of the respective company / entrepreneur in order to make the approach and advertising as appropriate. Legal basis is a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. The legitimate interest lies in the processing of personal data for the purpose of direct advertising itself (see recital 47 GDPR). The persons concerned have the right to object at any time to the processing of personal data concerning them for the purpose of such advertising. You can raise this objection at any time under the contact details specified in clause 1. We store the data for this purpose as long as we are interested in contracting with the company in question or until an appeal has been declared.

1. Cookies and similar technologies
We use cookies in our websites. Cookies are text files that are stored and stored on a computer system via an Internet browser. We use such cookies both as technical means to provide services on our Internet pages, for example, enable certain functionalities, as well as to analyze the website behavior of our visitors and building on this the user-friendly design of our offers. For this purpose, we can also use other techniques, such as tracking pixels or a code in apps. Some of the cookies we use are deleted after the end of the browser session, ie after closing your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies). The exact storage period of a cookie, unless specified below, can be taken from the respective cookie by having the cookie displayed in your browser. You can set your browser so that you are informed about the setting of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general. Failure to accept cookies may limit the functionality of our website. In the following, we will discuss specific cookies and similar technologies.

2. Technically necessary cookies
We use technical cookies. These are those that are required solely to collect some information on our web pages in order to provide a service requested or desired by you as a user. This includes navigation or session cookies that allow smooth navigation and use of the website (for example, allowing access to the restricted area); Analysis cookies set by us to collect aggregated information about the number of visitors and their user behavior; Functional cookies that allow you to navigate according to a few selected criteria in order to optimize your service. The legal basis for these cookies is a legitimate interest according to Art. 6 para. 1 lit. f DSGVO, namely the pursuit of our business purposes.

3. Cookies and technologies that we use via third party providers
We also use cookies or other techniques provided to us by external providers in various areas. In the following we inform you about the respective providers and how you can object to the cookie or the corresponding technology. In general, in the case of websites, you can make a corresponding setting in your browser.

4. Use of Google Analytics
We also use cookies or other techniques provided to us by external providers in various areas. In the following we inform you about the respective providers and how you can object to the cookie or the corresponding technology. In general, in the case of websites, you can make a corresponding setting in your browser. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google information. The storage of cookies can be prevented by a corresponding setting of your browser software. However, we point out that in this case you may not be able to use all functions of this website in full. Furthermore, you can prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading the available under the following link browser plugin and install: browser add-on to disable Google Analytics.
You can also prevent the collection by Google Analytics by clicking on the following link. An opt-out cookie will be set which prevents the future collection of your data when visiting this website:

Disable Google Analytics
For more information about Terms of Use and Privacy, please visit https://www.google.com/analytics/terms/en.html or https://www.google.com/intl/de/analytics/privacyoverview.html. Please note that on this website Google Analytics has been extended by the code “gat.-anonymizeIp ();” in order to ensure an anonymous collection of IP addresses (so-called IP-Masking).
The legal basis for the use of Google Analytics is a legitimate interest according to Art. 6 para. 1 lit. f DSGVO, namely the pursuit of our business purposes.

1. External links and links
From own contents cross-references (“left” or links) on the contents prepared by external offerers are to be distinguished. By setting a link to other websites (“hyperlinks”), we do not endorse or endorse this website, as we can not constantly control the content on these pages. Furthermore, the company is not responsible for the availability of this website or its content. The use of hyperlinks to this content is at the user’s own risk.
Stanley HGR B.V. is not liable for any direct or indirect damages incurred by the user from the use and existence of the information on these websites. Furthermore, Stanley HGR B.V. is not liable for the virus-free nature of this information retrieved by the user.

2. Embedded YouTube videos
On some of our websites, we embed YouTube videos. The operator of these plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page with the YouTube plug-in, it will connect to YouTube’s servers. It tells YouTube which pages you visit. If you are logged in to your YouTube account, YouTube may personally associate your browsing behavior with you. This can be prevented by logging out of your YouTube account first.
If a YouTube video is started, the provider uses cookies that collect information about user behavior.
Anyone who has disabled the storage of cookies for the Google Ad program will not have to expect any such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you must block the storage of cookies in the browser.
Further information on data protection at “YouTube” can be found in the provider’s privacy policy at: https://www.google.com/intl/en/policies/privacy/

1. Rights of the person concerned
If personal data is processed by you, you are i.S.d. DSGVO and you have the following rights to the responsible person:

1. Right to information
You may request confirmation from us as to whether personal information concerning you is processed by us.
If such processing is available, you can request information from us via the following information:
1. the purposes for which the personal data are processed;
2. the categories of personal data that are processed;
3. the recipients or the categories of recipients to whom the personal data relating to you have been disclosed or are still being disclosed;
4. the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;
5. the right of rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
6. the existence of a right of appeal to a supervisory authority;
7. all available information on the source of the data, if the personal data are not collected from the data subject;
You have the right to request information about whether the personal data relating to you are transferred to a third country or an international organization. In this regard, you can request the appropriate warranties in accordance with. Art. 46 GDPR to be informed in connection with the transfer.
This right to information may be limited to the extent that it is likely to render statistical information impossible or seriously impaired, and that the restriction is necessary for statistical purposes.

2. Right to rectification
You have a right to rectification and / or completion to the controller, if the personal data you process is incorrect or incomplete. The person in charge must make the correction without delay.
Its right of rectification may be limited to the extent that it is likely to render statistical information impossible or seriously impaired, and that the restriction is necessary for statistical purposes.

3. Right to restriction of processing
You may request the restriction of the processing of your personal data under the following conditions:
1. if you contest the accuracy of your personal information for a period of time that enables us to verify the accuracy of your personal information;
2. the processing is unlawful and you refuse to delete the personal data and instead request the restriction of the use of the personal data;
3. We no longer need your personal information for the purposes of processing, but you need it to assert, exercise or defend your rights, or
4. if you have objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet certain whether our legitimate reasons prevail over your reasons.

If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest Union or a Member State.
If the limitation of the processing according to the o.g. If conditions are restricted, you will be informed by us before the restriction is lifted.
Its right to restriction of processing may be limited to the extent that it is likely to render the realization of statistics impossible or seriously impaired and the restriction necessary for the performance of statistics.

4. Right to cancellation
4.1 Obligation to delete
You may require us to immediately delete your personal information and we are required to delete that information immediately, if any of the following is true:

1. The personal data concerning you are no longer necessary for the purposes for which
they were collected or otherwise processed.
2. You revoke your consent, to which the processing acc. Art. 6 para. 1 lit. a or Art. 9 para.
2 lit. a GDPR and there is no other legal basis for the processing.
3. You place acc. Art. 21 para. 1 DSGVO objection to the processing and there are no prior justifiable reasons for the processing, or you lay gem. Art. 21 para. 2 DSGVO objection to processing.
4. Your personal data have been processed unlawfully.
5. The deletion of personal data concerning you is required to fulfill a legal obligation under Union or national law to which we are subject.
6. The personal data concerning you were collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.

4.2 Information to third parties
Have we made the personal data concerning you public and we are acc. Article 17 (1) of the GDPR, we shall take appropriate measures, including technical means, to inform data controllers who process the personal data that you have been identified as being affected by the technology and implementation costs Person requested by them to delete all links to such personal data or to make copies or replicas of such personal data.

4.3 Exceptions
The right to erasure does not exist if the processing is necessary
3.1 to exercise the right to freedom of expression and information;
3.2 to fulfill a legal obligation which requires processing under the law of the Union or of the Member States to which the controller is subject or for the performance of a public interest mission or exercise of public authority delegated to the controller;
3.3 for reasons of public interest in the field of public health pursuant to Art. 9 (2) lit. h and i and Art. 9 (3) GDPR;
3.4 for archival purposes of public interest, scientific or historical research purposes or for statistical purposes acc. Article 89 (1) GDPR, to the extent that the law referred to in subparagraph (a) is likely to render impossible or seriously affect the achievement of the objectives of that processing, or
3.5 to assert, exercise or defend legal claims.
5. Right to Data Portability
You have the right to receive personally identifiable information you provide to us in a structured, common and machine-readable format. You also have the right to transfer this data to another person without hindrance, provided that
1. the processing on a consent acc. Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a DSGVO or on a contract acc. Art. 6 para. 1 lit. b DSGVO is based and
2. the processing is done by automated means.

In exercising this right, you also have the right to obtain that personal data relating to you be transmitted directly from one controller to another controller, as far as technically feasible. Freedoms and rights of other persons may not be affected.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority that has been delegated to us.

6. Right to object

For reasons arising from your particular situation, you have the right at any time against the processing of personal data relating to you, which pursuant to Art. 6 para. 1 lit. e or f DSGVO takes an objection; this also applies to profiling based on these provisions.
We will then no longer process your personal information, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing or defending legal claims.
If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail.
If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
Regardless of Directive 2002/58 / EC, you have the option, in the context of the use of information society services, of exercising your right to opt-out by means of automated procedures that use technical specifications.
You also have the right, for reasons that arise from your particular situation, in the processing of personal data relating to you for statistical purposes. Art. 89 para. 1 GDPR is to be contradicted.
Their right of objection may be limited insofar as it presumably makes the realization of statistical purposes impossible or seriously impaired and the restriction is necessary for the fulfillment of statistical purposes.

7. Right to revoke the data protection consent declaration

You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

8. Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of your place of residence, employment or the place of the alleged infringement, if you believe that the processing of the personal data concerning you is against the DSGVO violates.
The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.

9. Modification of the privacy policy; change of purpose

We reserve the right to change this privacy policy in accordance with the data protection regulations. The current version can be found here at this point or another corresponding, easy to find place on our website. If we intend to process your data for other purposes, ie those for which it was collected, we will inform you in advance in accordance with the law.