This policy explains what happens to your personal data when you visit this website. Personal data is any information that can identify you.
The website operator processes the data. Contact details are provided below under “Controller”.
We collect information you provide, for example in an enquiry. Our IT systems also collect technical data such as browser, operating system and access time automatically, or with your consent. This data enables us to provide the website correctly and may be used to analyse usage.
You may request information about your stored data, its source, recipients and purpose, and request correction or deletion. You may withdraw consent with future effect, request restriction of processing, data portability, object to processing and lodge a complaint with a supervisory authority. Contact us at any time to exercise these rights.
We currently host this website with Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Access data required to deliver the site may be transferred to the USA on the basis of Art. 6(1)(f) GDPR. We use the European Commission’s standard contractual clauses under Art. 46(2)(c) GDPR. See Vercel’s privacy policy and data processing addendum. We have concluded the legally required data processing agreement with Vercel.
We treat your personal data confidentially and in accordance with data protection law. Internet communication, including email, can have security vulnerabilities and cannot be protected completely against third-party access.
SchlossHOTEL Gedern
Schlossberg 5
63688 Gedern, Germany
Phone: +49 6045 9615-0
Email: info@schlosshotel-gedern.de
The controller is the natural or legal person who determines the purposes and means of processing personal data.
Unless a more specific period is stated, we retain personal data until its processing purpose no longer applies. We delete data following a valid deletion request or withdrawal of consent unless legal retention duties or other lawful grounds require continued storage.
Consent may be withdrawn at any time without affecting processing carried out before withdrawal. Under Art. 21 GDPR, you may object to processing based on Art. 6(1)(e) or (f) GDPR for reasons arising from your situation, and may always object to direct marketing.
You also have rights to complain to a competent supervisory authority, receive data processed automatically on the basis of consent or a contract in a machine-readable format, obtain information, correction and deletion, and restrict processing where the legal requirements are met.
This website uses SSL/TLS encryption to protect confidential transmissions. An encrypted connection is indicated by “https://” and the lock symbol in your browser.
This website may use temporary session cookies and permanent cookies. Necessary cookies support requested functions and are used on the basis of Art. 6(1)(f) GDPR unless another legal basis applies. Optional cookies are used only with consent under Art. 6(1)(a) GDPR, which can be withdrawn at any time. You can configure your browser to restrict or delete cookies, although this may limit website functionality.
If you contact us by a form, email, phone or fax, we process your enquiry and contact details to respond and handle follow-up questions. We do not disclose them without consent. Processing is based on Art. 6(1)(b) GDPR for contractual or pre-contractual enquiries, otherwise on Art. 6(1)(f) GDPR or consent under Art. 6(1)(a) GDPR. Data is retained until you request deletion, withdraw consent or the purpose ends, subject to statutory retention duties.
If you subscribe using the newsletter form, we process your first name, last name and email address to send the Villa Geriwada newsletter. We rely on your consent under Art. 6(1)(a) GDPR and use double opt-in: we add you to the mailing list only after you confirm the email sent to you. You can withdraw consent at any time using the unsubscribe link in each email or by contacting us. We retain the subscription data until you unsubscribe or the purpose ends, subject to any applicable legal duties.
We use Kit, Inc. as a processor to manage subscriptions and send emails. Processing outside the European Economic Area may occur. Information about Kit’s processing and transfer safeguards is available in its data processing addendum. Kit’s data processing addendum.
Kit stores a version of the consent text and the signup time generated by our server. To limit abuse, the server temporarily processes the IP address in process memory for rate limiting; this limiter does not persist the address. The newsletter form itself does not set cookies, and we do not use email open tracking. Kit routes links in newsletter emails through its tracking service and records clicks for newsletter analytics; click activity may be associated with your subscriber profile.
We use the DIRS21 online booking tool from TourOnline AG, Borsigstraße 26, 73249 Wernau, Germany, for accommodation bookings and enquiries. TourOnline AG processes booking data as controller. Details are available in the DIRS21 privacy policy.
The German privacy policy is the authoritative version. This English translation is provided for information.