PRIVACY STATEMENT

You may visit our websites without providing any personal data. Each time a webpage is accessed, the web server automatically stores a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of access, the volume of data transferred and the requesting provider (access data), and documents the access.

This access data is analysed solely for the purpose of ensuring the smooth operation of the website and improving our services. This serves to safeguard our overriding legitimate interests in the correct presentation of our services following a balancing of interests, in accordance with Article 6(1), sentence 1, point (f) of the GDPR.
All access data is processed only for as long as is necessary to achieve the processing purposes stated above and is deleted no later than seven days after the end of your visit to the website.

Content Delivery Network (CDN)

For the purpose of reducing loading times, we use a so-called Content Delivery Network (“CDN”) for some of our services. With this service, content such as large media files is delivered via regionally distributed servers operated by external CDN service providers. In this process, access data is processed.

Our service providers act on our behalf as data processors.

Our service providers are based in and/or use servers in countries outside the EU and the EEA. For some of these countries, there is no adequacy decision by the European Commission. Our cooperation is therefore based on the European Commission’s Standard Contractual Clauses.

Contact

We collect personal data when you voluntarily provide it to us when contacting us (e.g. via a contact form, live chat tool or email). Mandatory fields are marked as such, as we require this data in order to process your enquiry.
Processing is carried out in accordance with Article 6(1), sentence 1, point (b) of the GDPR. Once your enquiry has been fully processed, your data will be deleted unless you have expressly consented to its further use or further processing is permitted by law.

Contract performance / bookings

For the purpose of performing the contract, we collect personal data when you provide it to us as part of a booking. Mandatory fields are marked accordingly.

For the operation of the hotel booking platform, we work with
HotelNetSolutions GmbH, Genthiner Straße 8, 10785 Berlin,
as a data processor on our behalf.

Once the contract has been fully performed, your data will be subject to restricted processing and deleted after the expiry of statutory retention periods, unless consent for further use has been given.

3.1 Email newsletter with subscription and newsletter tracking

If you subscribe to our newsletter, we use your data on the basis of your consent in accordance with Article 6(1), sentence 1, point (a) of the GDPR.

If you have given separate consent, we analyse your usage behaviour (open and click rates) using tracking pixels and web beacons. In this process, data such as your IP address, browser type, time of access and email address are processed.

You may unsubscribe from the newsletter and from newsletter tracking at any time.

3.2 Newsletter distribution

The newsletter may be distributed by service providers acting as data processors on our behalf.

4.1 General information

We use cookies and comparable technologies to provide our online services. Session cookies are deleted when the browser is closed, while persistent cookies remain stored on your device.

Protection of privacy on end devices

Technologies that are strictly necessary do not require consent. For all other functions, your consent is required and may be withdrawn at any time.

4.2 Use of Borlabs to manage consents

We use the Borlabs Cookie plugin to obtain and document consent in a legally compliant manner.
Provider:
• Borlabs GmbH, Hamburger Straße 11, 22083 Hamburg
• Borlabs – Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg

The data is stored for a maximum period of one year.

5.1 Google services

We use, among others:

• Google Tag Manager
• Google Analytics (including User ID, DoubleClick cookie)
• Google Ads & conversion tracking
• Google Maps
• YouTube video plugin (enhanced privacy mode)

Provider: Google Ireland Ltd., Dublin

Data may be transferred to the United States on the basis of Standard Contractual Clauses or adequacy decisions.

5.2 Facebook/Meta services

• Facebook Pixel
• Facebook Ads

Provider: Meta Platforms Ireland Ltd., Dublin

Pseudonymised profiling takes place and data may be transferred to third countries.

5.3 Other services

• Adobe Fonts
• HubSpot (CRM, web analytics, newsletter distribution)
• Taboola Content Discovery
• Pinterest

All services are fully integrated into the data protection assessment, including legal bases, third-country transfers and appropriate safeguards.

Social buttons

Social buttons are integrated as HTML links and only establish a connection with the respective provider once they are clicked.

Online presences

We maintain online presences on:

Facebook, X (Twitter), Instagram, YouTube, Pinterest, LinkedIn and Xing.

Data processing is carried out on the basis of your consent in accordance with Article 6(1), point (a) of the GDPR and, where applicable, on the basis of joint controllership pursuant to Article 26 of the GDPR.

7.1 Your rights

You have the rights under Articles 15–20 of the GDPR as well as the right to lodge a complaint in accordance with Article 77 of the GDPR.

You may object to the processing of your personal data at any time, in particular to processing for direct marketing purposes.