Privacy Policy

This is an English translation for your convenience. In case of doubt, the German version shall prevail.

Scope

This privacy policy informs users about the nature, scope and purposes of the collection and use of personal data by the responsible provider

Markus Jungert
Stromberger Straße 4
55545 Bad Kreuznach
Germany

Phone: +49 (671) 9211 950
willkommen@villa-hartmann.de

on this website (hereinafter the “Service”). The legal basis for data protection is set out in particular in the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

Access data / server log files

The provider (or its web hosting provider) collects data on every access to the Service (so-called server log files) for statistical evaluation for the purpose of operating, securing and optimising the Service. The access data include:

Name of the website accessed
Date and time of the server request
Browser type and version
Operating system used
IP address and requesting provider
Referrer URL (address of the previously visited page)
Name of the retrieved file and amount of data transferred
Notification of whether the retrieval was successful

The provider reserves the right to check the log data subsequently if there is a justified suspicion of unlawful use based on concrete indications. These data are not merged with other data sources.

The basis for data processing is Art. 6(1)(b) GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.

Complete protection of your data against access by third parties cannot be guaranteed when transmitting data over the internet (e.g. e-mail communication) due to possible security gaps.

Handling of personal data

When using the website, no confidential personal data that could allow personal identification are collected.

Cookies

Cookies are small text files that make it possible to store specific, device-related information on the user’s device. On the one hand, they serve the user-friendliness of websites and thus the users (e.g. storing login data). On the other hand, they are used to record statistical data on website usage and to analyse it in order to improve the Service. A basic distinction is made between session cookies, which are deleted as soon as you close your browser, and cookies that remain on your device until you delete them. Users can influence the use of cookies. Most browsers offer an option to restrict or completely prevent the storage of cookies. Please note, however, that our website and services may only work to a limited extent if you prevent the use of cookies.

Cookies that are required to carry out the electronic communication process or to provide certain functions you have requested are stored on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimised provision of its services.

You can manage many online advertising cookies from companies via the US site aboutads.info or the EU site youronlinechoices.com.

Use of JavaScript

On this website we use active JavaScript content from external providers. By accessing our website, these external providers may receive personal information about your visit. Processing of data outside the EU is possible. You can prevent this by installing a JavaScript blocker such as the browser plug-in ‘NoScript’ (www.noscript.net) or by deactivating JavaScript in your browser. Please note, however, that our website and services may only work to a limited extent if you do so.

Integration of third-party services and content

Content from third parties, such as YouTube videos, Google Maps, RSS feeds or graphics from other websites, may be integrated into this Service. This always requires that the providers of this content (“third-party providers”) perceive the users’ IP address, as they could not send the content to the user’s browser without it. The IP address is therefore required to display this content. We endeavour to use only content whose providers use the IP address solely to deliver the content. However, we have no influence on whether third-party providers store the IP address, e.g. for statistical purposes. Where we are aware of this, we inform users accordingly.

Collection, processing and use of personal data

We only collect personal data if you voluntarily provide them to us in the course of a booking. We use the collected data exclusively to process the booking. After complete processing of the contract, your data are blocked and deleted after expiry of the retention periods under tax and commercial law, unless you have expressly consented to further use of your data.

To carry out bookings, for technical administration, our own marketing purposes and to ensure correspondence between you and us, we collect personal data when you register to complete a booking, which may include: surname, first name, date of birth, registered address, telephone number, e-mail address and bank details. If you conclude a contract as a company, we may collect the following data: company name, registered office, address, telephone number, e-mail address, register court, register number, legal form, name, first name and function of the legal representative and bank details. Your data may be passed on to several companies insofar as this is necessary to process our contractual relationship.

The data passed on may be used by us and any other service providers involved exclusively for the purpose for which they were passed on.

Beyond this, we will not pass on your personal data to third parties unless we are legally obliged to do so or you have given us your prior consent.

Personal data that you provide to us for processing bookings are stored for the duration of the contracts and beyond until all commercial and tax law matters have been settled.

Contact form and e-mail

If you contact us via the contact form or by e-mail, we process your name, your e-mail address, your message and – if provided – your phone number in order to answer your enquiry. Details entered in the contact form are sent to us by e-mail. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a stay with us, and otherwise Art. 6(1)(f) GDPR (our legitimate interest in answering enquiries). We delete your message once your enquiry has been dealt with, unless statutory retention obligations apply.

For booking requests via our website and for managing our room availability, we use the booking and channel management system Beds24 provided by Beds24 GmbH, Invalidenstraße 65, 10557 Berlin, Germany (beds24.com). The data are processed exclusively within the EU; the servers are located in Germany. The booking form is embedded in our website and provided by Beds24. When the form is accessed, Beds24 processes technically necessary data (including IP address, date and time of access, browser information) in order to display the form.

When you submit a booking request, we process the data you enter: title, first name and surname, e-mail address, country and – if provided – telephone and mobile number, address, expected arrival time and your message, as well as travel dates, room and number of guests. Fields marked * are mandatory; without them we cannot process your request. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures and performance of the accommodation contract).

Beds24 processes these data exclusively on our behalf and in accordance with our instructions. A data processing agreement pursuant to Art. 28 GDPR has been concluded with Beds24.

Please do not provide information about your health in the message field unless it is necessary for your stay.

Bookings via Booking.com

If you book via the Booking.com platform (Booking.com B.V., Herengracht 597, 1017 CE Amsterdam, Netherlands), Booking.com transmits to us the booking data required to provide your stay; these are transferred to our booking system via Beds24. The legal basis is Art. 6(1)(b) GDPR. Booking.com is responsible for data processing on its platform; for details, please refer to the Booking.com privacy statement.

Deposit and payment

Deposits are paid by bank transfer, the remaining balance on site. We process the resulting payment data (e.g. name of the account holder, amount, payment reference) to perform the contract and to comply with tax and commercial law obligations (Art. 6(1)(b) and (c) GDPR).

Guest registration

As an accommodation provider, we are obliged under Sections 29 and 30 of the German Federal Registration Act (Bundesmeldegesetz) to collect a registration form with the legally required information upon your arrival. The legal basis is Art. 6(1)(c) GDPR. We keep registration forms for one year from the day of departure and destroy them within three months thereafter; they are only made available to the authorities entitled by law.

Storage period for bookings

In our booking system, your personal data are automatically deleted twelve months after the (scheduled) day of departure; this also applies to booking requests that do not result in a stay. Documents that we are required to keep for commercial or tax law reasons (e.g. invoices and accounting records) are retained beyond this for the period prescribed by law (generally six to ten years).

Revocation, changes, deletion and right of access

Within the scope of the applicable legal provisions, users have the right to obtain, upon request and free of charge, information about their personal data, their origin and recipients and the purpose of the data processing. In addition, users have the right to have incorrect data corrected and to have their personal data blocked and deleted, unless this conflicts with a statutory retention obligation.

In accordance with the GDPR, you have in particular the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing based on Art. 6(1)(f) GDPR (Art. 21). To exercise these rights, please contact us at the address above.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz, Hintere Bleiche 34, 55116 Mainz, Germany.