Transparency in Data Usage

Privacy Policy

Privacy Policy

General Information on Data Processing

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data refers to any data that can be used to personally identify you. We treat your personal data confidentially and in accordance with statutory data protection regulations (especially the GDPR) and this privacy policy.

Your data is collected in part when you provide it to us (e.g., by entering it into a contact form). Other data is automatically collected or after your consent when you visit the website by our IT systems – mainly technical data (e.g., internet browser, operating system, time of page access, or IP address; see also server log files). Some data is collected to ensure the error-free provision of the website and the security of our IT systems. Other data may be used – only with your express consent – to analyze your user behavior or enable certain features (e.g., displaying maps). Details are provided in the following sections of this privacy policy.

Please note that data transmission over the Internet (e.g., when communicating via email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Responsible Party

The responsible party for data processing on this website is:

Deutsches Haus Hotel- & Restaurant Operations GmbH
Friedrich-Heinrich-Platz 1
29633 Munster, Germany
Phone: +49 (0) 5192 98900
Email: info@deutscheshausmunster.de
The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

Hosting by STRATO

Our website is hosted by the external service provider STRATO (STRATO AG, Germany). Personal data collected on this website is processed on STRATO’s servers. This includes the storage of website files, database contents, and all data generated during website use. We have concluded a data processing agreement (DPA) with STRATO pursuant to Art. 28 GDPR, obliging STRATO to protect the data of our website visitors and not disclose it to third parties.

The use of STRATO is in the interest of a secure, fast, and efficient provision of our online offering. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.

Server Log Files

When you visit the website, STRATO automatically collects information in so-called server log files. These log files may include your IP address (anonymized), the time of access, the page accessed, the amount of data transferred, the referrer URL (the previously visited page), the browser used including version, the operating system of the accessing device, and other similar technical information. This data is not merged with other data sources. The log data is used solely for technical monitoring of the server operations, security, and optimization of our services.

The processing of server log data is based on Art. 6(1)(f) GDPR. We have a legitimate interest in storing log files to ensure the stable and secure provision of our website (e.g., to investigate misuse or fraud). Log data is stored by our hoster only as long as is necessary for these purposes and is typically deleted after 6 weeks.

SSL or TLS Encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content (e.g., inquiries via the contact form). You can recognize an encrypted connection by the browser’s address line switching from “http://” to “https://” and by the lock icon in your browser line. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Google Analytics

If you have given your consent, this website uses the web analytics service Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”). Google Analytics enables us to analyze how visitors use our website. It collects information such as page views, duration of visit, device types, and the origin of visitors. To do this, Google Analytics uses cookies, which allow your browser to be recognized.

We have configured Google Analytics to anonymize IP addresses before further processing (so-called IP anonymization). Your IP address is shortened within the European Union or the European Economic Area before being transmitted to Google servers. This means that it cannot be directly linked to a person. Google will use the collected information on our behalf to evaluate website usage, compile reports on website activity, and provide other services related to website and internet use.

Data processing by Google Analytics is based on your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time with future effect by disabling the “Statistics” category in the cookie settings or by deleting any Analytics cookies already set. Additionally, Google offers an opt-out option: You can install the browser plugin to deactivate Google Analytics, available at https://tools.google.com/dlpage/gaoptout?hl=en. Note that disabling Google Analytics may limit the functionality of our website.

We have concluded a data processing agreement with Google. Data collected through Google Analytics may be transferred to servers of Google LLC in the USA. Please note that data transfers to the USA do not guarantee a level of data protection equivalent to that of the EU. Google relies on the European Commission’s standard contractual clauses. More information on data protection at Google can be found in Google’s Privacy Policy and in the Google Analytics Help.

Google reCAPTCHA

Our website may use the service Google reCAPTCHA, also provided by Google Ireland Limited. reCAPTCHA is only used with your express consent and is designed to ensure that form inputs (e.g., contact form) are made by a human and not by automated bots. This helps us prevent spam and attacks on our website.

When you activate reCAPTCHA, a connection to Google’s servers is established. Google collects various data to determine whether the user is human or a script. This includes user behavior (e.g., mouse movements, keystrokes), technical data (IP address, browser details, time spent), and may include cookies. The collected data is transmitted to Google for further analysis.

The use of Google reCAPTCHA is based on your consent (Art. 6(1)(a) GDPR). You may refuse or revoke this consent at any time through our cookie settings, which will prevent reCAPTCHA from loading. Note that without reCAPTCHA, certain functions such as form submissions may not work. We may have a data processing agreement with Google. Data may be transferred to the USA. Please be aware that the USA is not considered a safe third country under EU data protection law. By consenting to reCAPTCHA, you also consent to the potential transfer of your data to the USA. More information can be found in Google’s Privacy Policy: https://policies.google.com/privacy?hl=en.

Google Maps

This site uses Google Maps to visually display geographic information, if consent is given. The provider is Google Ireland Limited, Dublin, Ireland (Google LLC USA). Google Maps allows us to show interactive maps directly on the website and conveniently display directions to our location. The service is only loaded after you have explicitly consented to its use.

When you activate Google Maps on our website (via the cookie banner), a connection is established with Google’s servers. Your IP address may be transmitted and stored by Google. Google may also collect additional data (e.g., device IDs, location data if permitted on your device). Cookies may be used for map display. Data processing is based on your consent (Art. 6(1)(a) GDPR). You can withdraw this consent at any time in the cookie settings by disabling the “External Media” or Google Maps option. Without consent, no connection is made and no map is displayed.

As with reCAPTCHA, data may be transferred to the USA. The USA does not currently offer an EU-equivalent level of data protection. By consenting to Google Maps, you also agree to the possible transfer of your data to the USA. For more information on how Google handles user data, please refer to Google’s Privacy Policy.

Plugins and Other Tools Used

We use the following plugins and tools to enhance website functionality and security. These process personal data only to the extent necessary for their purpose:

  • Elementor Pro: Used to design and structure content on the website. According to the developer, no personal data of visitors is transferred. Elementor does not set additional cookies and does not perform its own data processing beyond what is described elsewhere in this policy.
  • Complianz: Manages our cookie and consent system (see section “Cookies and Consent Management”). It sets a technically necessary cookie to store your consent or rejection of cookie categories. No personal data is transmitted to the plugin provider or third parties.
  • The SEO Framework: Helps optimize our site for search engines. It does not process personal data, create user profiles, or share information with third parties.
  • Limit Login Attempts Reloaded: A security plugin used to protect against unauthorized login attempts (brute-force attacks). If repeated failed logins occur, the attacker’s IP address is encrypted and stored in the WordPress database to temporarily block access. This data is not used for any other purpose. Its use is based on our legitimate interest in website security (Art. 6(1)(f) GDPR).

Social Media Links

Our website includes links to our social media profiles on Facebook and Instagram. These are simple hyperlinks to our external social media pages. No social plugins are used, meaning no data is transferred to the social media providers when the page is loaded.

Only when you voluntarily click on one of these links will you leave our website and a connection to the servers of Facebook or Instagram be established. These platforms may then collect data about you (e.g., IP address, visited pages, existing platform cookies). We have no control over this data processing. Please consult the respective privacy policies of Facebook and Instagram before using their services. As long as you do not click the links, no data is transferred to these networks.

Cookies and Consent Management

Our website uses cookies. Cookies are small text files stored by your browser on your device. We use cookies to make our website more user-friendly and to enable certain functions. Some cookies are “essential” or technically necessary for the proper functioning of the site (e.g., to save your cookie settings); these essential cookies are set without consent, as we have a legitimate interest in the technically error-free provision of our services (Art. 6(1)(f) GDPR), or because they are necessary for the fulfillment of our website functions (Art. 6(1)(b) GDPR).

Other, non-essential cookies (especially for statistical purposes or the integration of external services) are only used with your consent. On your first visit to our website (and again if your consent expires), we ask for your permission to use various categories of cookies and external services via a cookie banner. This consent management is handled using the Complianz tool. Your choices are stored in the form of a consent cookie on your device so that your preferences are applied on future visits. The Complianz consent cookie is technically necessary and contains no personal data, except possibly an anonymous identifier of your consent. You can change or revoke your cookie settings at any time via our website (e.g., by clicking the “Cookie Settings” icon or link, if available, or by deleting your browser cookies, after which the banner will reappear).

If you have consented to the use of certain cookies, the legal basis for processing is Art. 6(1)(a) GDPR (consent). You can revoke your consent at any time with future effect by adjusting your settings. The legality of the processing carried out before the revocation remains unaffected. Further information on the cookies used and their purposes can be found in this privacy policy, in our cookie policy (if available), or in the cookie banner on our website.

Contact Form

If you send us inquiries via the contact form, the information you provide (especially name, email address, phone number, and message content) will be processed by us for the purpose of handling your inquiry. Providing your phone number is optional and may help us contact you more quickly with follow-up questions. Your data will be used solely for responding to your request and for the related technical administration. We do not pass this data on to third parties without your consent.

The processing of data entered into the contact form is based—depending on the content of your request—on Art. 6(1)(b) GDPR (to carry out pre-contractual measures or fulfill a contract) or Art. 6(1)(f) GDPR (legitimate interest in effectively processing incoming requests). If you have given us your consent, Art. 6(1)(a) GDPR is the legal basis. You can revoke this consent at any time.

The data you enter in the contact form will remain with us until the purpose for data storage no longer applies (e.g., your inquiry has been fully resolved). Then the data will be deleted unless legal retention obligations (e.g., commercial or tax law) prevent deletion.

Your Rights as a Data Subject

You have the following rights regarding the processing of your personal data. You can exercise these rights at any time by contacting us using the contact details provided above:

  • Right of Access (Art. 15 GDPR): You have the right to obtain confirmation as to whether or not we process personal data concerning you. If so, you may request information about the data and further details such as processing purposes, categories of data, recipients, and storage duration.
  • Right to Rectification (Art. 16 GDPR): You have the right to request the immediate correction of inaccurate personal data concerning you and to have incomplete data completed.
  • Right to Erasure (Art. 17 GDPR): You may request the deletion of your personal data, provided the legal conditions are met (e.g., the data is no longer needed or processed unlawfully). This right does not apply if processing is required to comply with legal obligations or to assert, exercise, or defend legal claims.
  • Right to Restriction of Processing (Art. 18 GDPR): You have the right to request the restriction of processing, e.g., while a claim of inaccuracy is being verified or if processing is unlawful but you oppose deletion.
  • Right to Data Portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to have it transmitted to another controller, if technically feasible.
  • Right to Object (Art. 21 GDPR): You have the right to object, on grounds relating to your particular situation, to processing based on our legitimate interests (Art. 6(1)(f) GDPR) or in the public interest (Art. 6(1)(e) GDPR). If you object, we will stop processing your data unless we can demonstrate compelling legitimate grounds. If your data is processed for direct marketing, you may object at any time and your data will no longer be used for such purposes.
  • Right to Withdraw Consent (Art. 7(3) GDPR): You may withdraw your consent at any time with future effect. The withdrawal does not affect the legality of prior data processing based on your consent.
  • Right to Lodge a Complaint (Art. 77 GDPR): If you believe your data protection rights have been violated, you may lodge a complaint with a supervisory authority. You can contact the authority of your place of residence, workplace, or our company headquarters. In our case, this is usually the Data Protection Authority of Lower Saxony (Website).

Objection to Advertising Emails

We hereby object to the use of contact details published in the legal notice for sending unsolicited advertising and information materials. The website operators reserve the right to take legal action in case of unsolicited advertising (e.g., spam emails).

Changes and Updates to This Privacy Policy

This privacy policy is current as of May 2025. We reserve the right to amend it to reflect changes in legal requirements or modifications to our services. The current version is always available on our website.

HOTEL
DEUTSCHES HAUS

HOTEL
STADT MUNSTER