Datenschutz NEU

PRIVACY

When you submit a reservation request via our website, we process the information you provide in order to handle your request and communicate with you regarding the status of your reservation.

In particular, the following data may be processed:

• Name
• Email address
• Phone number
• Number of guests
• Date and time of the requested reservation
• Voluntary information provided in the message field

The legal basis for this processing is Art. 6(1)(b) GDPR. The processing is necessary in order to handle your reservation request and to take pre-contractual measures at your request.

The guest’s IP address is not stored as part of the reservation record.

Reservation data is generally stored for up to 180 days after the reservation date and is then deleted, unless statutory retention obligations or other legitimate reasons require longer storage.

If you contact us by email or telephone, we process the personal data you provide in order to handle your enquiry and communicate with you.

In particular, the following data may be processed:

• Name
• Email address
• Telephone number, if provided
• Content of your message
• Any other information you voluntarily provide

The legal basis for the processing depends on the nature of your enquiry. If your contact relates to the initiation or performance of a contractual relationship, the processing is based on Art. 6(1)(b) GDPR. In other cases, the processing is based on our legitimate interest in handling your enquiry appropriately in accordance with Art. 6(1)(f) GDPR.

Data provided in connection with your enquiry will be deleted as soon as it is no longer required for processing your request, unless statutory retention obligations or other legitimate reasons require longer storage.

To protect our website against unauthorised access, attacks, malware and other forms of misuse, we use the Wordfence security plugin.

For this purpose, Wordfence may process technical access data, in particular IP addresses, the time and type of access, as well as security-related events. This data is required to detect suspicious access attempts, prevent attacks and ensure the security of our website.

Wordfence is provided by Defiant, Inc., USA. As part of its security functions, our website may communicate with Wordfence servers. Where personal data is transferred to third countries, the provider states that it relies, among other safeguards, on the Standard Contractual Clauses adopted by the European Commission.

The processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of our website and in protecting it against attacks and unauthorised access.

On our directions page, we provide an interactive map using the OpenStreetMap mapping service.

The map is not loaded automatically when you visit the page. A connection to OpenStreetMap servers is only established once you actively load the map.

In this context, your IP address, browser and device information, the time of access, as well as information about the page you are visiting may in particular be transmitted to the map provider.

The map service is provided by the OpenStreetMap Foundation. Once you actively load the map, the processing is based on your consent pursuant to Art. 6(1)(a) GDPR.

Further information about data processing by OpenStreetMap can be found in the OpenStreetMap Foundation’s privacy policy.

Subject to the applicable legal requirements, you have the right to obtain information about the personal data we process about you.

• Right of access pursuant to Art. 15 GDPR
• Right to rectification pursuant to Art. 16 GDPR
• Right to erasure pursuant to Art. 17 GDPR
• Right to restriction of processing pursuant to Art. 18 GDPR
• Right to data portability pursuant to Art. 20 GDPR
• Right to object pursuant to Art. 21 GDPR

Where processing is based on your consent, you may withdraw your consent at any time with effect for the future. The lawfulness of any processing carried out prior to the withdrawal remains unaffected.

You also have the right to lodge a complaint with a data protection supervisory authority.

The competent supervisory authority in Berlin is the Berlin Commissioner for Data Protection and Freedom of Information. Berliner Beauftragte für Datenschutz und Informationsfreiheit.