Data Protection at a Glance

General information

The following information provides you with a simple overview of what happens to your personal data when you visit our website. Personal data means all data which enables you to be personally identifiable. For detailed information on the topic of data protection, please refer to our Privacy Policy, set out below this text.

Controller in the sense of GDPR is Mr Jörg Winkler as the proprietor of the hotel. Please see the legal notice for his contact details.

Transfer of data / disclosure

We basically only use your personal data for the provision of the services you request. Insofar as external service providers are used by us within the scope of our service, their access to the data also exclusively ensues for the purpose of providing services.

We use technical and organisational procedures to ensure adherence to data protection provisions and also obligate our external service providers accordingly. Our service providers are carefully selected, in particular with regard to data protection and data security, and data processing is carried out in principle in the EU.

Furthermore, we will not disclose your data to any third party without your explicit consent, and especially not for advertising purposes. A transfer of your personal data only occurs if you have consented to the data transfer, or if we are authorised or obligated to do so due to statutory provisions and/or official or judicial ordinances. Thereby this can relate, in particular, to the disclosure of information for prosecution purposes, to avert danger or to assert intellectual property rights.

General Information and mandatory Information

SSL and/or TLS encryption

This website uses SSL and/or TLS encryption for security reasons and to protect the transfer of confidential content, such as orders or enquiries which you send to us as the website operator. You can recognise an encrypted connection as the address line in the browser changes from “http://” to “https://”, and by the lock symbol in your browser line.

If SSL and/or TLS encryption is enabled, the data you transfer to us cannot be accessed by third parties.

Analysis tools and third-party tools

When you visit our website, your surfing behaviour can be statistically analysed. This largely takes place by means of cookies and so-called analysis programmes. Your surfing behaviour is usually analysed anonymously; the surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Please find detailed information on this in the following Privacy Policy.

Data acquisition on our website

Cookies

Some of the web pages use so-called cookies. Cookies do not harm your computer and do not contain any viruses. Cookies serve to make our website more user-friendly, effective and secure. Cookies are small text files that are placed on your computer and stored by your browser.

Most of the cookies used by us are so-called “session cookies”. These are erased automatically at the end of your visit. Other cookies are stored on your end device until you delete them. These cookies allow us to recognise your browser when you next visit our site.

You can adjust your browser to inform you when cookies are being set and to only allow cookies on a case-by-case basis, to refuse cookies in certain cases or in general, and to activate the automatic deletion of cookies when you close the browser. Deactivating cookies may limit the full functionality of this website.

Cookies that are required for execution of the electronic communication process or for the provision of certain features requested by you (e.g. shopping cart feature) are saved on the basis of Art. 6 (1) point (f) GDPR. The website operator has a legitimate interest in the storage of cookies for the technically smooth and optimised provision of their services. If other cookies (e.g. cookies for the analysis of your browsing behaviour) are stored, these are dealt with separately in this Privacy Policy.

Server log files

The website provider automatically collects and stores information in so-called server log files, which your browser automatically sends to us. This information includes:

  • browser type and version
  • operating system used
  • referrer URL
  • host name of the accessing computer
  • time of the server query
  • IP address

This data is not combined with other data sources.

The basis for the data processing is Art. 6 (1) point (f) GDPR on the basis of a weighing of interests. The prevailing interest is the secure and functional operation of this website.

Contact form

If you send us enquiries using the contact form, we store and process your data from the enquiry form including the contact data specified there by you for the purpose of processing the enquiry and in case follow-up questions arise. Thus, processing of the data entered into the contact form is carried out exclusively on the basis of Art. 6 (1) point (b) GDPR. Processing is necessary to carry out pre-contractual measures. We delete the data collected in this context after its storage is no longer required, or limit processing if there are statutory retention obligations.

If you wish to reserve a room with us, you are obligated to provide your credit card details. The legal basis for this is Art. 6 (1) point (b) GDPR, as this data is required for the execution of the booking. We use Geo Trust secured insofar as it optimally protects the data from access by third parties. The Privacy Policy of the provider can be found under https://www.digicert.com/digicert-privacy-policy/

Analysis tools and advertising

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called “cookies”. These are text files which are stored on your computer and which allow analysis of how you use the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the US and stored there. Google has agreed to comply with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

The Google Analytics cookies are stored on the basis of Art. 6 (1) point (f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both their web offer and their advertising.

IP anonymisation

We have activated the IP anonymisation function on this website. This means that your IP address is abbreviated by Google within European Union member states or other states which are part of the European Economic Area before it is transmitted to the US. Only in exceptional cases will the full IP address be transmitted to a Google server in the US and shortened there. On behalf of the provider of this website, Google will use this information to analyse your use of the website, to compile reports about website activities and to provide further services connected to the use of this website and of the internet for the website provider. The IP address transferred by your browser in the context of Google Analytics is not combined with any other data from Google.

Browser plug-in

You can prevent cookies from being stored by setting your browser accordingly; however, please note that you may not have full access to all website functions in this case. In addition, you may prevent any data created by the cookie and relating to website usage on your part (including your IP address) from being transmitted to and being processed by Google by downloading and installing the browser plug-in available at the link below: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data collection

You can prevent Google Analytics from collecting your data by clicking on the following link. This places an opt-out cookie which prevents the future collection of your data when visiting this website: Deactivate Google Analytics.

Please refer to the privacy policy of Google for further information about the handling of user data at Google Analytics: https://support.google.com/analytics/answer/6004245?hl=de.

Order Data Processing

We have concluded an agreement with Google for order data processing and fully implement the strict regulations of the German data protection authorities when using Google Analytics.

Demographic data in Google Analytics

This website uses the “demographic data” function of Google Analytics. This allows for the compilation of reports that contain information regarding the age, gender, and interests of the visitors to the website. This data originates from interest-based advertising from Google as well as third-party visitor data. This data cannot be associated with a specific person. You can deactivate this function using the display settings in your Google account at any time, or you can generally prevent the collection of your data by Google Analytics as described in the “objection to data processing” section.

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our websites. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

With reCAPTCHA, it should be checked whether the data entry on our website (e.g. in a contact form) is carried out by a person or an automated programme. To this end, reCAPTCHA analyses the behaviour of the website visitors, using various characteristics. This analysis begins automatically, as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates a range of information (e.g. IP address, dwell time of the website visitor on the website, or mouse movements made by the user). The data collected in the analysis is forwarded to Google.

The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place.

The data processing takes place on the basis of Article 6 (1) point (f) GDPR. The website provider has a legitimate interest in protecting its web content from fraudulent automated spying and SPAM.

You can find further information about Google reCAPTCHA and the privacy policy of Google using the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

Plug-ins and tools

Google web fonts

For the uniform representation of fonts, this website uses “web fonts”, which are provided by Google. When accessing a website, your browser will load the necessary web fonts into your browser cache in order to display texts and fonts correctly.

For this purpose, the browser you use must establish a connection to the Google servers. This informs Google that our website has been accessed via your IP address. Google web fonts are used to ensure a uniform and appealing presentation of our online offers. This is a legitimate interest in terms of Art. 6 (1) point (f) GDPR.

If your browser does not support web fonts, one of your computer’s standard fonts will be used.

For more information regarding Google web fonts, please refer to https://developers.google.com/fonts/faq and the Google privacy policy: https://www.google.com/policies/privacy/.

Google Maps

This website uses the map service Google Maps via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

For you to use the functions of Google Maps, your IP address needs to be stored. This information is usually transferred to a Google server in the USA and stored there. The provider of this website has no influence on this transfer of data.

Google Maps is used in the interest of ensuring an appealing representation of our online offers and to facilitate the search for the places specified by us on the website. This is a legitimate interest in terms of Art. 6 (1) point (f) GDPR.

Please see the Google privacy policy for more information regarding the handling of user data: https://www.google.de/intl/de/policies/privacy/.

Your rights and contacts

It is important for us to explain the processing of your personal data as clearly as possible and to also inform you of your rights. If you wish for additional information or wish to exercise your rights, you may contact us at any time, so that we can deal with your enquiry.

Rights of data subjects

You have comprehensive rights with regard to the processing of your personal data. Firstly, you have a comprehensive right to information and can request the rectification and/or erasure or blocking of your personal data. You can also request a restriction of processing and have a right to object. With regard to the personal data you have transferred to us, you also have a right to data portability.

If you wish to assert your rights and/or wish for further information about this, please use the contact form to contact our staff. Alternatively, you can also address our data protection officer.

Withdrawal of consent and objection

Any consent given can be withdrawn at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent granted before withdrawal. The points of contact responsible for this are also our employees who can be contacted using the contact form and our data protection officer.

Insofar as the processing of your personal data is not carried out on the basis of your consent but on a different legal basis, you may object to this processing. Your objection leads to an examination and possibly to an end to the data processing. You will be informed of the result of the examination and will receive - if the data processing is nevertheless continued - additional information from us explaining why the data processing is permissible.

Data protection officer and contact

We have commissioned an external data protection officer, who assists us in terms of data protection law and who can also be directly addressed by you. Please contact our data protection officer with any queries with regard to our handling of personal data, or for further information on matters relating to data protection law:

Ana Núñez Díaz
Gierather Str 48
51069 Köln
E-Mail: This email address is being protected from spambots. You need JavaScript enabled to view it.

Complaints

If you are of the opinion that the processing of your personal data by us does not comply with this Privacy Policy or the applicable data protection regulations, you may lodge a complaint with our data protection officer. The data protection officer will then investigate the matter and inform you of the results of the investigation. In addition, you also have the right to lodge a complaint with a supervisory authority.