Privacy Policy

This privacy policy informs you about the nature, scope and purpose of the processing of personal data on this website, pursuant to Art. 13 GDPR.

1. Controller

2. Server log files

When you visit this website, the hosting provider automatically collects and stores information in log files (IP address, date and time of access, amount of data transmitted, referrer URL, browser and operating system). Processing is based on Art. 6 (1) (f) GDPR to ensure the operation and security of our website. This data is not merged with other data sources.

3. Cookies

This website uses only technically necessary cookies unless you actively consent to the use of further cookies. Technically necessary cookies are set on the basis of § 25 (2) no. 2 TTDSG and Art. 6 (1) (f) GDPR.

4. Contacting us

If you contact us by email, phone or social media, your details will be stored for the purpose of processing the enquiry and for follow-up questions. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR (legitimate interest in efficient communication).

5. Reservations

Reservations can be made by phone or email. The data provided will be used solely to process your reservation.

6. Google Maps

This website uses an embedded map service from Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When loading a page containing the embedded map, data (including your IP address) is transmitted to Google and may be transferred to third countries (USA). The legal basis is your consent under Art. 6 (1) (a) GDPR and Art. 49 (1) (a) GDPR. More information is available in Google’s privacy policy.

7. Social media links

This website contains links to our profiles on Instagram. When you click these links you leave our site and are redirected to the respective platform, whose privacy policy and terms of use then apply. We have no influence over the data collected there.

8. Hosting

This website is hosted by [Hosting provider name, e.g. Vercel Inc., Cloudflare, Hetzner]. The provider processes personal data on our behalf under a data processing agreement pursuant to Art. 28 GDPR.

Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and to object (Art. 21 GDPR). You may also lodge a complaint with the competent supervisory authority. In Bavaria this is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA).

Withdrawal of consent

If you have consented to the processing of your data, you may withdraw this consent at any time with effect for the future. The lawfulness of processing carried out on the basis of consent up to the withdrawal remains unaffected.

Note: This privacy policy contains placeholders and template text. Before publication it must be adapted to the services actually used on the site (hosting, reservations, maps, analytics tools, etc.). If in doubt, have it reviewed by a lawyer.