Privacy policy

01Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation is:

02Your rights

You have the following rights in relation to your personal data:

• Access to the data stored (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent given, with effect for the future (Art. 7 (3) GDPR)

Where your personal data are processed on the basis of legitimate interests under Art. 6 (1) (f) GDPR, you have the right to object to that processing under Art. 21 GDPR.

You may also lodge a complaint with a supervisory authority. The competent authority is the Hessian Commissioner for Data Protection and Freedom of Information, Postfach 3163, 65021 Wiesbaden.

03When you visit the website

Our website is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin. The mailbox through which enquiries from the contact form are sent is also held there. When the website is called up, your browser automatically sends information to the server, which is stored in what are known as log files:

• Visitor's IP address
• Date and time of access
• Referrer URL
• Name and URL of the file retrieved
• Browser and operating system used
• Volume of data transferred

These data are technically necessary in order to display the website and are not used to draw conclusions about you personally. They are stored in order to ensure smooth operation and to guarantee system security .

You will find further information in STRATO's privacy policy.

04Contact form and booking enquiries

We process personal data only to the extent necessary to provide our website, answer enquiries or handle bookings.

If you contact us via the contact form, by email or by WhatsApp, we process:

• Name
• Email address
• Telephone number
• Period of stay
• Number of people

These data are used exclusively to deal with your enquiry.

05Spam protection (Google reCAPTCHA)

To protect the enquiry form against automated submissions we use the service reCAPTCHA provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA assesses whether an entry comes from a human being or from a program. For this purpose your IP address, the time spent on the page and mouse and keyboard movements, among other things, are transmitted to Google and evaluated there; transfer to the USA cannot be ruled out. reCAPTCHA is loaded only once you have agreed in the consent dialogue. The legal basis is your consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. You can still submit the form without consenting; the submission is then checked without any transfer to Google.

Further details can be found in the Privacy policy and the Terms of Service of Google.

06Contact via WhatsApp

If you contact us via WhatsApp , we process the data you provide — such as name, telephone number and the content of the enquiry. WhatsApp is a service of WhatsApp Ireland Limited.

You can find their privacy policy here.

07Cookies and consent

Our website makes partial use of cookies, in order to make the site easier to use and to provide certain functions.

• Technically necessary cookies: for basic functions, for example the enquiry forms.
• External services — 3D tours and spam protection: only with your consent.
• Analytics and advertising cookies: we do not use them.

Third-party content — in particular the 3D tours — is loaded only after your express consent. You may withdraw your consent at any time with effect for the future and additionally disable cookies in your browser settings.

08Legal basis for processing

Your data are processed on the basis of Art. 6 (1) GDPR:

• (b) for the performance of contracts or pre-contractual measures, for example booking enquiries
• (f) to safeguard legitimate interests, for example the security of the website
• (a) where you have expressly given consent, for example for optional cookies

09Fonts

This website uses the Bricolage Grotesque and Karla typefaces. They are served from our own server. No connection to third-party servers is established and your IP address is not transmitted.

103D tours (Matterport)

For the virtual tours of our rooms we use the Matterport service provided by Matterport, Inc., 352 East Java Drive, Sunnyvale, CA 94089, USA.

The tour is not loaded automatically. Only when you actively start it is a connection to the provider's servers established, transmitting your IP address among other data. The transfer is to the USA. The legal basis is your consent under Art. 6 (1) (a) GDPR. Further details of the provider's processing can be found in the Matterport privacy policy.

11Maps and directions

The map links on this website open Google Maps in a new window. No map is embedded in our page; data are transmitted to Google only when you click the link. Google's privacy terms then apply.

12Retention period

We store personal data only for as long as is necessary for the purposes stated or as required by statutory retention periods. The data are then erased.

13Changes to this policy

We update this privacy policy whenever the legal situation or the processing on our website changes. The version published here is the one that applies.