Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Hotel Rosenhof GmbH
Am Koehlwäldchen 16
66877 Ramstein-Miesenbach, Germany
Phone: +49 (0)6371 80010
Email: info@hotel-rosenhof.de

2. General information

We process personal data only where this is necessary to provide a functioning website together with our content and services, or where you have given your consent. The legal bases are in particular Art. 6(1)(a) GDPR (consent), (b) GDPR (contract and pre-contractual measures), (c) GDPR (legal obligation) and (f) GDPR (legitimate interest).

3. Server log files

When you access our website, information transmitted by your browser is recorded automatically: browser type and version, operating system, referrer URL, time of the server request and IP address. This data is used for the technical provision, security and stability of our website (Art. 6(1)(f) GDPR) and is not merged with other data sources.

4. Cookies, consent and third-party services

We use technically necessary cookies and local storage entries required to operate this website (Sec. 25(2) TDDDG, Art. 6(1)(f) GDPR). This includes storing your cookie decision.

All other services are loaded only after you have given your explicit consent in the cookie notice (Sec. 25(1) TDDDG, Art. 6(1)(a) GDPR). Without your consent no connection to these providers is established. Your decision is stored in your browser together with a timestamp and the version of this notice; you can change or withdraw it at any time with effect for the future via the “Cookie settings” link in the website footer.

Services requiring consent on this website:

• DIRS21 booking engine: Loaded only after your consent or after you click a booking button. Your IP address, browser and device data and your booking details are transmitted to DIRS21 in order to process the online booking.
• Google Maps (Google Ireland Limited): The map on the contact page is embedded only after you click “Load Google Maps”. Your IP address and browser data are transmitted to Google; a transfer to the USA cannot be excluded (Art. 44 et seq. GDPR).
• Google Analytics 4 web analytics (Google Ireland Limited): Loaded only after your consent. It records, in pseudonymised form, the pages viewed, time on site, approximate location, device and browser data and a shortened IP address in order to analyse website usage and improve our content. A transfer to the USA cannot be excluded (Art. 44 et seq. GDPR). Without your consent the script is not loaded and no analytics cookie is set.

Fonts are served exclusively from our own server. No connection to Google Fonts takes place. Web analytics takes place only with your consent (see above).

We use rapidmail (rapidmail GmbH, Freiburg, Germany) to send our newsletter and an email delivery provider for confirmation and notification emails. The website and database are operated in data centres within the European Union. Data processing agreements under Art. 28 GDPR are in place with these providers.

5. Contact, reservation and enquiry forms

If you contact us through a form on this website – for example for a table reservation, a room enquiry or a conference or celebration request – we process the data you provide (e.g. name, email address, phone number, date, number of guests and your message) in order to handle your request. The legal basis is Art. 6(1)(b) GDPR, or Art. 6(1)(f) GDPR for general enquiries. The data is deleted as soon as it is no longer required and no statutory retention obligations apply.

6. Digital registration form and guest directory

For the legally required guest registration form (Sections 29 et seq. of the German Federal Registration Act) we process your registration and identity document data, travel dates and your signature. The legal basis is Art. 6(1)(c) GDPR in conjunction with the Federal Registration Act; registration forms are retained for the statutory period and then deleted. Through the digital guest directory you can request additional services (e.g. breakfast, room cleaning, table reservation); the data provided is processed solely to deliver these services (Art. 6(1)(b) GDPR).

7. Hosting and database

Our website is hosted by a service provider within the European Union. Form and booking data is stored in a database located in the EU region. Data processing agreements pursuant to Art. 28 GDPR are in place with our service providers.

8. Email delivery

We use an email delivery provider as a processor to send confirmation, reminder and notification emails. This involves processing your email address and the content of the relevant message.

9. Online booking

For room bookings we integrate the booking engine of our booking system. When you start a booking, the booking data you enter is transmitted to the provider and processed there to complete your booking. The legal basis is Art. 6(1)(b) GDPR.

10. Newsletter

If you subscribe to our newsletter, we process your email address on the basis of your consent (Art. 6(1)(a) GDPR). Registration uses a double opt-in procedure via a delivery provider acting as processor. You can unsubscribe at any time using the link in every email.

11. Chat assistant

An automated chat assistant is available on our website. Your input is transmitted to an AI service acting as processor in order to answer your question. Please do not enter sensitive personal data in the chat. The legal basis is Art. 6(1)(f) GDPR (answering guest enquiries).

12. Social media links

We link to our profiles on Instagram and Facebook. These are simple links; data is only transferred to the providers once you click the link. The privacy policies of the respective provider then apply.

13. Retention period

We store personal data only for as long as it is required for the respective purpose. It is then deleted unless commercial or tax retention periods apply (generally 6 or 10 years).

14. Your rights

You have the right to information (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and the right to object to processing based on legitimate interests (Art. 21 GDPR). You may withdraw consent at any time with effect for the future. Please contact info@hotel-rosenhof.de.

15. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate, Hintere Bleiche 34, 55116 Mainz, Germany.

16. Data security

Data is transmitted in encrypted form via TLS (indicated by the padlock symbol in your browser). We take technical and organisational measures to protect your data against manipulation, loss, destruction and unauthorised access, and continuously adapt them to the state of the art.