Privacy Policy

General Information on Data Processing

The following notes provide a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to personally identify you. We treat your personal data confidentially and in accordance with the statutory data protection regulations (in particular the GDPR) and this privacy policy.

Your data is collected in part by you providing it to us (e.g. via entries in a contact form). Other data is collected automatically or with your consent when visiting the website by our IT systems – mainly technical data (e.g. internet browser, operating system, time of page access, or the IP address, see also server log files). Part of the data is collected to ensure the error-free provision of the website and the security of our IT systems. Other data may be used – only with your explicit consent – to analyze your user behavior or to provide certain functions (e.g. map display). Details on all specific data processing can be found in the following sections of this privacy policy.

Please note that data transmission over the internet (e.g. when communicating by email) can have security vulnerabilities. Complete protection of data from access by third parties is not possible.

Responsible Entity

The responsible entity for data processing on this website is:

Deutsches Haus Hotel- & Gaststätten-Betriebs-GmbH
Friedrich-Heinrich-Platz 1
29633 Munster, Germany
Phone: +49 (0) 5192 98900
Email: info@deutscheshausmunster.de

The responsible entity is the natural or legal person who alone or together with others decides on the purposes and means of processing personal data.

Hosting with STRATO

Our website is hosted by the external service provider STRATO (STRATO AG, Germany). Personal data collected on this website is processed on the servers of STRATO. This mainly concerns the storage of website files, database contents, as well as all data generated as part of website usage. We have concluded a data processing agreement (DPA) with STRATO in accordance with Art. 28 GDPR, obligating STRATO to protect the data of our website visitors and not to disclose it to third parties.

The use of STRATO as a hosting provider is based on our legitimate interest in the secure, fast, and efficient provision of our online offering in accordance with Art. 6(1)(f) GDPR.

Server Log Files

When visiting the website, STRATO automatically collects information in so-called server log files. These log files contain, for example, your IP address (in anonymized form), time of access, the requested page, data volume transferred, referrer (the previously visited page), browser including version, operating system of the accessing device, and possibly other technical data. This data is not merged with other data sources. The log data is used solely for the technical monitoring of server operations, security, and optimization of our offering.

The processing of server log data is based on Art. 6(1)(f) GDPR. We have a legitimate interest in storing log files to ensure the stable and secure provision of our website (e.g. for investigating misuse or fraud). Server log data is only stored by our hoster as long as necessary for the purposes mentioned. Typically, log files are automatically deleted after six weeks at the latest.

SSL or TLS Encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content (such as inquiries via the contact form). You can recognize an encrypted connection by the address line of the browser changing to https:// and the lock symbol in your browser line. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Cookies and Consent Management

Our website uses cookies. Cookies are small text files that your browser stores on your device. We use cookies to make our website more user-friendly and to enable certain functions. Some cookies are “essential” or technically necessary for the website to function correctly (e.g. to store your cookie settings); these essential cookies are also set without consent because we have a legitimate interest in providing our service without technical errors (Art. 6(1)(f) GDPR) or because they are necessary to fulfill our website’s features (Art. 6(1)(b) GDPR).

Other, non-essential cookies (especially for statistical purposes or integration of external services) are only used with your consent. When you first visit our website (and again if necessary after your decision expires), we will ask for your consent via a cookie banner for various categories of cookies and external services. This consent management is implemented using the tool Complianz. Your choice is stored as a consent cookie on your device so that your settings are respected during future visits. The Complianz consent cookie is technically necessary and contains no personal data except possibly an anonymous identifier of your consent. You can change or revoke your cookie settings at any time on our website (e.g. by clicking the small icon or the “Cookie settings” link, if available, or by deleting your browser cookies, which will cause the query to reappear).

If you have agreed to the use of certain cookies, the legal basis for processing is Art. 6(1)(a) GDPR (consent). You can revoke any given consent at any time with effect for the future by changing the settings mentioned. The legality of data processing that has occurred up to the point of revocation remains unaffected. Further information about the specific cookies used and their purposes can be found in this privacy policy, in our cookie policy (if available), or in the cookie banner on our website.

Contact Form

If you send us inquiries via the contact form, your information from the form (in particular your name, email address, telephone number, and the message content) will be processed for the purpose of handling the inquiry. Providing a phone number is optional and helps us respond more quickly to inquiries. Your data will be used exclusively to respond to your inquiry and for the associated technical administration. We do not share this data with third parties without your consent.

The processing of data entered in the contact form is based – depending on the nature of your inquiry – on Art. 6(1)(b) GDPR (for pre-contractual measures or fulfillment of a contract) or Art. 6(1)(f) GDPR (legitimate interest in efficiently handling incoming requests). If you have given your consent, the legal basis is Art. 6(1)(a) GDPR. You may revoke your consent at any time.

The data you enter into the contact form will remain with us until the purpose for data processing ceases (your request is completely handled). After that, the data will be deleted unless legal retention obligations (e.g. commercial or tax law obligations) prevent deletion.

Google Analytics

If you have given your consent, this website uses the web analytics service Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics enables us to analyze user behavior on our website. For example, information about page views, duration of visits, devices used, and origin of visitors is collected. Google Analytics uses cookies, which enable your browser to be recognized.

We have configured Google Analytics so that IP addresses of visitors to our website are anonymized before further processing by Google (so-called IP anonymization). Your IP address is truncated by Google within the European Union or the European Economic Area before being transmitted to Google servers. This excludes direct personal reference via IP address. Google uses the collected information on our behalf to evaluate the use of the website, compile reports on website activity, and provide other services related to website and internet usage.

Data processing by Google Analytics is based on your consent (Art. 6(1)(a) GDPR). You can revoke this consent at any time with future effect by deactivating the “Statistics” category in the cookie settings or deleting any previously set analytics cookies. Google also offers an opt-out tool: You can install the browser plugin to disable Google Analytics, available at https://tools.google.com/dlpage/gaoptout?hl=en. Please note that deactivating Google Analytics may limit the functionality of this website.

We have concluded a data processing agreement with Google. The data collected by Google Analytics may be transmitted to servers of Google LLC in the USA. We point out that the USA does not guarantee an EU-equivalent level of data protection. Google relies on the EU Commission’s Standard Contractual Clauses. For more information about Google’s data privacy, see the Google Privacy Policy and the Google Analytics information.

Google reCAPTCHA

Our website integrates the Google reCAPTCHA service when needed. The provider is also Google Ireland Limited, Dublin, Ireland (Google LLC, USA). reCAPTCHA is used only with your explicit consent and serves to ensure that inputs (e.g. in our contact form) are made by a human and not abused by automated bots. This helps us prevent spam and attacks on our website.

When you activate (consent to) reCAPTCHA, a connection to Google servers is established. Google collects various data to determine whether the website visitor is a human or a script. reCAPTCHA analyzes your behavior (e.g. mouse movements or inputs) and technical characteristics of your device (e.g. IP address, browser data, time spent on the page). The collected data is transmitted to and processed by Google. Google may also use cookies for this analysis.

The use of Google reCAPTCHA is based on your consent (Art. 6(1)(a) GDPR). You may revoke this consent at any time via our cookie settings, preventing reCAPTCHA from being loaded. Please note that some functions (e.g. form submission) may not be available without reCAPTCHA. We may have concluded a data processing agreement with Google. Data collected through reCAPTCHA may be transferred to servers in the USA. Again, we point out that the USA is not a safe third country under EU data protection law. By consenting to the use of reCAPTCHA, you also consent to the possible transfer of your data to the USA. Further information about Google reCAPTCHA is available in Google’s privacy policy: https://policies.google.com/privacy?hl=en.

Google Maps

This website uses Google Maps to visually display geographic information when needed. The provider is Google Ireland Limited, Dublin, Ireland (Google LLC, USA). Google Maps allows us to show interactive maps directly on our website and make route planning to our location easier. The service is only loaded if you have consented to the use of Google Maps.

When you activate Google Maps on our website (by giving consent via the cookie banner), a connection to Google servers is established. Your IP address may be transmitted to and stored by Google. Google may also collect other data (e.g. device identifiers, location data if permitted on your device). Google Maps may set cookies for map display. The data processing by Google Maps is based on your consent (Art. 6(1)(a) GDPR). You can revoke your consent at any time by disabling the “External Media” or Google Maps option in the cookie settings. Without consent, no connection to Google is established and no map is displayed.

Data may also be transferred to the USA. If Google Maps is activated, please note that the USA does not guarantee an EU-equivalent level of data protection. By consenting to the use of Google Maps, you also consent to the possible transfer of your data to the USA. For details on how Google handles user data, see the Google Privacy Policy.

Plugins and Other Tools Used

In addition to the services listed above, we use several plugins and tools on our website to support its functionality and security. These plugins either do not process personal data at all or only to the extent necessary for their function:

• Elementor Pro: We use the website builder “Elementor Pro” to design our pages. According to the developer, the plugin does not transmit personal data of website visitors to the provider or third parties. Elementor is solely used to build page layouts and structure. It does not set additional cookies for visitors and does not perform its own data processing beyond what is described in this privacy policy.
• Complianz: The plugin “Complianz” controls our cookie and consent management (see “Cookies and Consent Management” section). Complianz only processes your data to the extent necessary for obtaining and managing your consents. It sets an essential cookie to store your approval or rejection of cookie categories. This process is required for proper consent management. No personal data is transmitted to the Complianz provider or third parties.
• The SEO Framework: We use the “The SEO Framework” plugin for search engine optimization. This plugin does not process any personal data from visitors. It does not create user profiles or share data with third parties. It only influences meta data and technical SEO elements of the site and does not affect your privacy as a visitor.
• Limit Login Attempts Reloaded: We use the security plugin “Limit Login Attempts Reloaded” to protect our site against unauthorized login attempts (brute-force attacks). The plugin logs the IP address of the attacking device in encrypted form after multiple failed login attempts and stores it in the WordPress database to temporarily block further attempts. This information is not used for any other purpose. The use of Limit Login Attempts Reloaded is based on our legitimate interest in protecting our site and preventing attacks (Art. 6(1)(f) GDPR).

Social Media Links

Our website includes links to our profiles on the social networks Facebook and Instagram. These are simple hyperlinks to our external social media pages. We do not use social plugins that transmit data to the social media providers when the page is loaded.

Only when you voluntarily click such a social media link will you leave our website and a connection to the servers of Facebook or Instagram be established. The respective platform may then collect information about you (e.g. your IP address, visited page, cookies of the platform). We have no control over this data processing. Please review the privacy policies of Facebook and Instagram when using their services. As long as you do not click on these links, no data will be transmitted to the social networks.

Rights of Data Subjects

You have the following rights regarding the processing of your personal data. You may exercise these rights at any time by contacting us using the details provided above:

• Right to access (Art. 15 GDPR): You have the right to request confirmation of whether we process personal data concerning you. If so, you have the right to access this data and further details (e.g. purposes, categories, recipients, storage period).
• Right to rectification (Art. 16 GDPR): You have the right to request the immediate correction of inaccurate personal data concerning you and to request completion of incomplete data.
• Right to erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data, provided that legal requirements are met. This right may not apply if processing is necessary for fulfilling a legal obligation or asserting, exercising, or defending legal claims.
• Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of processing if the accuracy of the data is contested, the processing is unlawful but you oppose erasure, we no longer need the data but you need it for legal claims, or you have objected and it is not yet clear whether our legitimate reasons outweigh yours.
• Right to data portability (Art. 20 GDPR): You have the right to receive your personal data, which we process on the basis of your consent or a contract, in a commonly used, machine-readable format, or to request the transfer to another controller if technically feasible.
• Right to object (Art. 21 GDPR): If your data is processed based on legitimate interests (Art. 6(1)(f) GDPR) or public interest (Art. 6(1)(e) GDPR), you have the right to object to the processing at any time for reasons related to your particular situation. In such cases, we will stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
  If your personal data is processed for direct marketing purposes (note: we do not send advertising ourselves, see below), you have the right to object to such processing at any time.
• Right to withdraw consent (Art. 7(3) GDPR): If you have given us consent to process your data, you can withdraw it at any time with future effect. The withdrawal does not affect the lawfulness of processing carried out based on consent before its withdrawal.
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR): You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data. You can contact the authority of your habitual residence, your workplace, or our company headquarters. In our case, the responsible authority is typically the Data Protection Commissioner for Lower Saxony (website of the supervisory authority).

Objection to Promotional Emails

We hereby object to the use of contact details published within the scope of the legal notice obligation for sending unsolicited advertising and informational materials. As the website operator, we expressly reserve the right to take legal action in the event of unsolicited promotional information (e.g. spam emails).

Currency and Amendment of This Privacy Policy

This privacy policy is valid as of May 2025. We reserve the right to amend this content if required, to reflect changes in legal regulations or our services. The current version of the privacy policy can be viewed on our website at any time.