Person responsible in the sense of the DSGVO and the BDSG.
The responsible person in the sense of Art. 7 para. 7 DSGVO is:
Mechthild Schulze Johann
Phone: +49 2581 63800
Data protection officer
The data protection officer of the responsible party is:
André Schulze Johann
Phone: +49 2581 63800
All personal data will be treated confidentially. Our data protection practice is subject to the Federal Data Protection Act (BDSG), the Federal Registration Act (BMG) and the Telemedia Act (TMG). In the following, we inform you about the details of data protection in our company.
1. Reasons for data collection
We collect and process your data to maintain our business relationship and to provide you with the best possible service for your stay in our house.
2. What data is collected, used and processed?
- When visiting our website
Visiting our website is generally possible for you without providing any personal information.
When you access our web pages, our server automatically stores information of a general nature, mainly for the purpose of system security. This includes the type of browser used, the operating system used, the name of your Internet service provider, the connection data of the terminal device used (IP address), the original page from which you visit us (referrer URL) and the pages accessed with time information. It is not possible for us to draw any conclusions about your person from this data, and this data is not merged with other data sources.
Personal data such as name, address, telephone number or e-mail address are not collected unless you provide us with this information voluntarily, e.g. to process inquiries via the contact form or to process room bookings. The voluntarily provided data will be used exclusively for the purpose for which it was provided.
- Use of reservation and contact form
If you use one of our forms, the information and data entered there will be processed and stored by us exclusively for this purpose requested by you. We do not pass on this data to third parties.
- Creating a guestbook entry
If you use our guestbook form, the information and data entered there will be processed and stored by us exclusively for this purpose requested by you. By sending the guestbook form you agree to the publication of this data! Please do not enter any information here that you do not wish to be published. Of course, you can revoke this consent to publication at any time. See point 5: Your rights.
- Use of Google Maps and Google Streetview 360° views
On our website "Directions" we use the offer of Google Maps. This allows us to show you an interactive map directly in the website and enables you to use the map function comfortably. Furthermore, we have integrated Google Streetview 360° views of our house and our rooms on some pages. By visiting our website, Google receives the information that you have called up the corresponding sub-page of our website. In addition, your IP address, date and time of the request, content of the request (specific page), access status/HTTP status code, the amount of data transferred in each case, the website from which the request comes, browser, operating system and its interface, language and version of the browser software are transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out of Google before calling up our websites. Google stores your data as usage profiles and uses them for the purposes of market research, advertising and needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website.
You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
The legal basis for the processing is Art. 6 para. 1 lit. f) DSGVO.
In order to make the use of the web pages even more attractive, cookies are used. Cookies are files that are stored on your hard drive. By using our websites, you agree to the use and storage of cookies. However, you can also prevent cookies from being stored on your hard drive by making the appropriate browser settings. Cookies that have already been set can be deleted at any time. How to delete cookies or prevent their storage, please refer to the respective instructions of your browser. If you do not accept cookies, this may impair your use of our website.
4. Data security
We secure our website and the data received via it by technical and organizational measures against loss, destruction, access, modification or distribution. Despite regular checks and constant improvement of our security measures, complete protection against all dangers is not possible.
5. Your rights
If personal data of yours is processed, you have the following rights:
- Right to information and confirmation
You have the right to obtain from us at any time, free of charge, information and confirmation about the personal data stored about you and a copy of this information.
- Right of rectification
You have the right to demand the immediate correction of incorrect personal data concerning you. You also have the right to request that incomplete personal data be completed, taking into account the purposes of the processing.
- Erasure rights
You have the right to have the personal data concerning you erased without delay, provided that one of the following reasons applies and insofar as the processing is not necessary.
- The personal data was collected or otherwise processed for such purposes for which it is no longer necessary.
- You withdraw your consent on which the processing was based and there is no other legal basis for the processing.
- You object to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR.
- The personal data have been processed unlawfully.
- The erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which we are subject.
- The personal data was collected in relation to information society services offered pursuant to Article 8(1) of the GDPR.
- Right to restriction of processing
You have the right to request the restriction of processing if one of the following conditions is met:
- The accuracy of the personal data is contested by you for a period of time which allows us to verify the accuracy of the personal data.
- The processing is unlawful, you object to the erasure of the personal data and request instead the restriction of the use of the personal data.
- We no longer need the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims.
- You have objected to the processing pursuant to Article 21 (1) DSGVO and it is not yet clear whether our legitimate grounds outweigh yours.
- Rights to object to processing
You have the right to object at any time to the processing of personal data concerning you that is carried out on the basis of Art. 6 (1) lit. n) e) or f) DSGVO. We will no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
You have the right to object at any time to the processing of personal data for the purpose of direct marketing.
- Right to data portability
You have the right to receive the personal data concerning you, which has been provided to us, in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without hindrance from us, provided that the processing is based on consent pursuant to Art. 6(1)(a) DSGVO or Art. 9(2)(a) DSGVO or on a contract pursuant to Art. 6(1)(b) DSGVO and the processing is carried out with the aid of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Furthermore, when exercising your right to data portability pursuant to Article 20(1) of the GDPR, you have the right to obtain that the personal data be transferred directly from one controller to another controller, to the extent that this is technically feasible and provided that this does not adversely affect the rights and freedoms of other individuals.
- Right to revoke consent granted under data protection law.
You have the right to revoke your consent to the processing of personal data at any time.
- Right to complain to the supervisory authority
You have the right to contact a supervisory authority in the member state of your residence or workplace or of the alleged violation at any time if you believe that the processing of personal data concerning you violates the EU General Data Protection Regulation.
The supervisory authority responsible for us in matters of data protection law is the State Data Protection Commissioner for North Rhine-Westphalia.
6. Legal requirements for the provision of personal data.
The provision of personal data may in part be required by law (e.g. tax regulations) or may also result from contractual provisions (e.g. information on the contractual partner). Sometimes it may be necessary for the conclusion of a contract that you provide us with personal data, which must subsequently be processed by us. For example, according to the Federal Registration Act §29 and §30 paragraph 2, you are required to fill out a registration form upon arrival at each hotel, on which you must provide your name, complete registration address and also your date of birth. In the case of foreign guests, the identity card number must also be provided. Failure to provide the personal data would mean that the accommodation contract could not be concluded.