Privacy policy of Hotelpark Bodetal GmbH

This translation is provided for your convenience. Only the German version is legally binding.

1. Controller

The controller for the processing of personal data on this website and in connection with your stay is:

Hotelpark Bodetal GmbH
Hubertusstraße 9–11
06502 Thale, Germany
Telephone: 03947 77660
Email: info@hotelpark-bodetal.de

Data protection contact: datenschutz@hotelpark-bodetal.de

2. General information

Personal data means any information relating to an identified or identifiable natural person. We process your data in accordance with the GDPR and the BDSG.

3. Collection and processing of data

3.1 Data collected when you visit the website

When you visit our website, the following data is recorded automatically:

• IP address and anonymised location data
• Date and time of access
• Browser type and operating system
• Pages viewed and time spent on them

Purpose: secure operation, technical optimisation, statistics
Legal basis: Art. 6(1)(f) GDPR
Retention period: log files: 7 days; anonymised: 30 days

3.2 Use of the booking form

When you use our online booking form, we collect:

• Personal details: name, address, telephone number, email
• Booking details: dates of stay, room category, number of guests
• Payment information: credit card or bank details (for processing only)
• Special requests or messages

Purpose: processing the booking, managing your stay, invoicing, communication
Legal basis: Art. 6(1)(b) GDPR
Retention period:

• Booking and payment data: 10 years (Section 147 AO)
• Contact details in the case of enquiries: 3 years

3.3 Contact forms

From contact forms we collect: name, email, telephone number and your message.
Purpose: responding to your enquiry
Legal basis: Art. 6(1)(b) GDPR
Retention period: 3 years

3.4 Marketing

• Newsletters only with your express consent
• Offers and special promotions only with consent

Legal basis: Art. 6(1)(a) GDPR
Withdrawal: at any time via the link in the newsletter or by email to datenschutz@hotelpark-bodetal.de

3.5 Cookies & tracking

We use cookies and similar technologies:

Consent can be withdrawn at any time via the cookie banner or the website settings.

3.6 Third-party providers / external services

We use the following service providers:

Please note: data is transferred to countries outside the EU/EEA only where an adequate level of data protection or standard contractual clauses are in place.

4. Rights of data subjects

Under the GDPR you have the following rights:

1. Access to the data stored about you
2. Rectification of inaccurate data
3. Erasure (“right to be forgotten”)
4. Restriction of processing
5. Data portability
6. Withdrawal of consent already given

Please address enquiries to: datenschutz@hotelpark-bodetal.de

5. Data security

We employ appropriate technical and organisational measures to protect your data. Absolute security cannot, however, be guaranteed on the internet.

6. Changes to this privacy policy

We reserve the right to amend this privacy policy should the legal situation or our services change. The current version is always available on our website.

.     7. Right to object (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data carried out on the basis of Art. 6(1)(e) or (f) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defence of legal claims.

Where your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing; this also applies to profiling to the extent that it is related to such direct marketing.

If you object, your personal data will no longer be used for direct marketing purposes.