1. Privacy at a glance

General information

This policy explains what happens to your personal data when you visit this website. Personal data is any information that can identify you.

Data collection on this website

Who is responsible for data collection?

The website operator processes the data. Contact details are provided below under “Controller”.

How do we collect and use your data?

We collect information you provide, for example in an enquiry. Our IT systems also collect technical data such as browser, operating system and access time automatically, or with your consent. This data enables us to provide the website correctly and may be used to analyse usage.

Your rights

You may request information about your stored data, its source, recipients and purpose, and request correction or deletion. You may withdraw consent with future effect, request restriction of processing, data portability, object to processing and lodge a complaint with a supervisory authority. Contact us at any time to exercise these rights.

2. Hosting

Hosting by Vercel

We currently host this website with Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Access data required to deliver the site may be transferred to the USA on the basis of Art. 6(1)(f) GDPR. We use the European Commission’s standard contractual clauses under Art. 46(2)(c) GDPR. See Vercel’s privacy policy and data processing addendum. We have concluded the legally required data processing agreement with Vercel.

3. General and mandatory information

Data protection and controller

We treat your personal data confidentially and in accordance with data protection law. Internet communication, including email, can have security vulnerabilities and cannot be protected completely against third-party access.

SchlossHOTEL Gedern
Schlossberg 5
63688 Gedern, Germany
Phone: +49 6045 9615-0
Email: info@schlosshotel-gedern.de

The controller is the natural or legal person who determines the purposes and means of processing personal data.

Storage period and legal rights

Unless a more specific period is stated, we retain personal data until its processing purpose no longer applies. We delete data following a valid deletion request or withdrawal of consent unless legal retention duties or other lawful grounds require continued storage.

Consent may be withdrawn at any time without affecting processing carried out before withdrawal. Under Art. 21 GDPR, you may object to processing based on Art. 6(1)(e) or (f) GDPR for reasons arising from your situation, and may always object to direct marketing.

You also have rights to complain to a competent supervisory authority, receive data processed automatically on the basis of consent or a contract in a machine-readable format, obtain information, correction and deletion, and restrict processing where the legal requirements are met.

SSL/TLS encryption

This website uses SSL/TLS encryption to protect confidential transmissions. An encrypted connection is indicated by “https://” and the lock symbol in your browser.

4. Data collection on this website

Cookies

This website may use temporary session cookies and permanent cookies. Necessary cookies support requested functions and are used on the basis of Art. 6(1)(f) GDPR unless another legal basis applies. Optional cookies are used only with consent under Art. 6(1)(a) GDPR, which can be withdrawn at any time. You can configure your browser to restrict or delete cookies, although this may limit website functionality.

Contact enquiries

If you contact us by a form, email, phone or fax, we process your enquiry and contact details to respond and handle follow-up questions. We do not disclose them without consent. Processing is based on Art. 6(1)(b) GDPR for contractual or pre-contractual enquiries, otherwise on Art. 6(1)(f) GDPR or consent under Art. 6(1)(a) GDPR. Data is retained until you request deletion, withdraw consent or the purpose ends, subject to statutory retention duties.

5. Plugins and tools

DIRS21 online booking tool by TourOnline AG

We use the DIRS21 online booking tool from TourOnline AG, Borsigstraße 26, 73249 Wernau, Germany, for accommodation bookings and enquiries. TourOnline AG processes booking data as controller. Details are available in the DIRS21 privacy policy.

The German privacy policy is the authoritative version. This English translation is provided for information.