We use a booking solution from GauVendi GmbH (Feuerwehrstr. 10, Frankfurt, Germany) on our website, which allows you to make a room booking according to your personal needs and allows us to view and manage the necessary information about your booking.
The following data are processed:

• Number of persons
• Arrival and departure date
• Booked room features and rooms
• Booked additional services
• Booking country
• Other data relevant to the reservation and cancellation

The legal basis for processing is Art. 6 para. 1 lit. b) GDPR, the fulfillment of the booking contract concluded with you, as well as Art. 6 para. 1 lit. f) GDPR, our interest in the optimal provision of additional options during booking and maintaining business relationships.
Additionally, we use a feature that allows us to display regional additional offers tailored to your location directly during booking. For this purpose, your IP address, which we obtain through your visit to our website, is used in shortened, anonymized form to obtain a rough estimate of your geolocation and offer you suitable regional additional options. Except for the temporary processing of your IP address for this purpose, no further processing of personal data takes place within this framework. The legal basis for this processing is Art. 6 para. 1 lit. f) GDPR, our legitimate interest in displaying suitable additional services to you.
The data are processed for as long as necessary to handle the booking. Subsequently, relevant data are retained according to statutory retention periods and then deleted.
Furthermore, GauVendi assists us in evaluating website visitor data and further analysis. If you have given your consent via the cookie banner, Google Analytics is used, and this data is then shared with GauVendi. More detailed information on the processing by Google Analytics can be found in the corresponding clause in this declaration.
We have concluded a data processing agreement with GauVendi according to Art. 28 GDPR, in which we obligate the provider to ensure the protection of your data.
In the course of processing, it is possible that your data may be transferred to third countries. For potential transfers to third countries outside the EU and EEA, where no adequacy decision by the EU Commission exists, we have agreed on standard data protection clauses according to Art. 46 para. 2 lit. c GDPR with the respective recipient in the third country. These clauses obligate the recipient in the third country to process the data in accordance with the level of protection in Europe.
Further information about GauVendi can be found in the service provider's privacy policy: https://www.gauvendi.com/data-protection.

GOOGLE ANALYTICS
Our website uses Google Analytics, an internet analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses "cookies."
Google will use this information on behalf of the operator of this website to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet use to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. Processing is carried out based on Art. 6 para. 1 lit. a GDPR, on the basis of the consent you have given.
We use Google Analytics only with IP anonymization enabled. This means that your IP address is shortened by Google.
We have concluded a data processing agreement with the service provider, in which we oblige them to protect our customers' data and not to disclose them to third parties.
As the transmission of personal data by Google to affiliated companies and subcontractors in countries outside the EU and EEA is possible, further protective mechanisms are required to ensure the level of data protection of the GDPR. For the USA, an adequacy decision by the EU Commission according to Art. 45 para. 1 GDPR exists regarding companies with certification under the EU-U.S. Data Privacy Framework. Google LLC is certified under the EU-U.S. Data Privacy Framework and thus commits to compliance with adequate data protection standards, which can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search.
For potential transfers to other third countries outside the EU and EEA, for which no adequacy decision by the EU Commission exists, we have also agreed on standard data protection clauses according to Art. 46 para. 2 lit. c GDPR with the provider. These clauses oblige the recipient in the third country to process the data in accordance with the level of protection in Europe.

The terms of use of Google Analytics and information on data protection can be accessed via the following links:
http://www.google.com/analytics/terms/de.html
https://www.google.de/intl/de/policies/
The data are deleted as soon as they are no longer required for the purposes for which they were collected. Data at the user and event level linked to cookies, user identifiers (e.g., user ID), and advertising IDs (e.g., DoubleClick cookies, Android advertising ID, IDFA [Apple identifier for advertisers]) are deleted no later than 14 months after their collection.
You can prevent the storage of cookies by adjusting your browser software settings accordingly. However, please note that in this case, you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plugin available at https://tools.google.com/dlpage/gaoptout?hl=de.