Privacy statement according to the DSGVO

Welcome to the website of Hotel Gutsgasthof Stangl, which offers you information about our company as well as the possibility of making an online reservation. 

Name and address of the responsible person

The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

HOTEL-GUEST INN STANGL
Owner: Bärbel Fauth-Stangl
Münchener Strasse 1
85646 Neufarn/Vaterstetten
Germany
Phone: +49 89905010
Email: info@hotel-stangl.de
Website: www.hotel-stangl.de

 

 

General information about data processing

Extent of processing of personal data
We process personal data only to the extent necessary for providing a functional website and our content and services. Personal data is processed only with your consent. An exception applies in cases where obtaining prior consent is not possible for practical reasons and the processing of data is permitted by law.

Legal basis for the processing of personal data
Where we obtain consent from the data subject for processing personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis. When processing personal data necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations necessary for taking steps prior to entering into a contract.
Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 Para. 1 lit. c GDPR as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the person concerned do not outweigh the first-mentioned interest, Article 6 (1) lit. f GDPR as the legal basis for processing.

Data erasure and storage duration
Personal data will be erased or blocked as soon as the purpose for which it was stored no longer applies. Data may also be stored if this is provided for by European or national legislation in EU regulations, laws, or other provisions to which the controller is subject. Data will also be blocked or erased when a storage period prescribed by the aforementioned regulations expires, unless further storage of the data is necessary for the conclusion or performance of a contract.

 

Provision of the website and creation of Log files

Description and scope of data processing
Generally, no personal data is collected when you visit our website. Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device. The following data is collected:

• Full IP address of the requesting computer
• Date and time of the request
• The page from which the visitor arrived at the current website or file (referrer)
• Name or URI of the requested file or page
• Web browser and operating system used by the visitor
• Access status (page/file transferred, page/file not found, etc.)
• Protocol version
• Access type (e.g. GET/HEAD/POST)
• Amount of data transferred

The data is stored in the log files of our system. A storage of this data together with other personal data of the user does not take place.

Legal basis for data processing
The legal basis for the temporary storage of the data and the log files is Article 6, Paragraph 1, Letter f GDPR.

Purpose of data processing
The temporary storage of the IP address by the system is necessary to ensure the functionality of the website. For this purpose, the user's IP address must be stored for the duration of the session. Storage takes place in log files. There is a legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f GDPR.

Duration of storage
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the IP addresses of the users are deleted or alienated so that it is no longer possible to assign the calling client.

Opposition and removal possibility
The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no contradiction on the part of the user.

 

Use of Cookies

Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored on your computer system by your web browser. This cookie contains a unique string of characters that allows the browser to be uniquely identified when you revisit the website. No personal data is collected. The data is not stored together with other personal data of the users. When you visit our website, you will be informed about the use of cookies via an information banner and referred to this privacy policy. The cookie is only stored if you give your consent.

Legal basis for data processing
The legal basis for the processing of personal data using cookies is Art. 6 Para. 1 lit. f GDPR.

Purpose of data processing
The purpose of using technically necessary cookies is to simplify the use of websites. Some functions of our website cannot be offered without the use of cookies.

Duration of storage, objection and disposal options
Cookies are stored on your computer and transmitted from there to our website. Therefore, you have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, some of its functions may no longer be fully available.

 

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies," which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, if IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Anonymization of IP addresses: We use "anonymizeIP". This means that your recorded IP address is shortened by removing the last three digits, thus making it impossible to identify you.

Preventing Google Analytics with a browser plugin: You can prevent the storage of cookies by adjusting your browser settings; however, please note that in this case you may not be able to fully utilize all the functions of this website. Furthermore, you can prevent Google from collecting and processing data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plugin available at the following link. The current link is https://tools.google.com/dlpage/gaoptout/.

 

Third-party plugins and modules

Google Web Fonts
This website uses only fonts that are stored locally on the web server. No connection is made to fonts.google.de produced.

Google Maps
This website uses the Google Maps API to visually display maps. When using Google Maps, Google also collects, processes, and uses data about how visitors use the map features. You can find more information about data processing by Google in the [link to Google's privacy policy]. Data protection information from Google You can find this information there. In the privacy center, you can also change the settings to protect and manage your data. Here you will find further instructions on managing your own data in connection with Google products. The use of Google Maps is in the interest of providing a clear display of location maps. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR.

jQuery Libraries
jQuery is necessary for this website to function correctly with all its features. The jQuery libraries are retrieved from so-called CDN servers, which involves transmitting your IP address; however, no personal data is transmitted. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR.

Bootstrap
This website uses Bootstrap to ensure all its functions work correctly. The Bootstrap libraries are retrieved from CDN servers, which involves transmitting your IP address, but no other personal data is transmitted. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR.

Other web fonts such as Fontawesome, Simple Icons, Simple Line Icons
This website uses web fonts, provided by various manufacturers, for the graphical display of symbols. When you access a page, your browser loads the necessary web fonts into its browser cache to display text and fonts correctly. For this purpose, your browser must connect to the font providers' servers. This allows the providers to know that our website was accessed via your IP address. The use of web fonts is in the interest of a consistent and appealing presentation of our online services. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR. If your browser does not support web fonts, a standard font from your computer will be used.

 

Links to other websites

Our website contains links to external websites of third parties, over whose content we have no control. Therefore, we cannot assume any liability for this external content. The respective provider or operator of the linked pages is always responsible for their content. The linked pages were checked for possible legal violations at the time the links were created.

 

Newsletter

Description and scope of data processing
You can subscribe to our free newsletter on our website. The following data will be transmitted to us during registration.

• E-mail address
• Vorname und Nachname
• Your IP address
• Date and time of registration

For the processing of the data, your consent is obtained during the registration process.

Legal basis for data processing

The legal basis for processing the data after registration for the newsletter and confirmation by registration email is Art. 6 para. 1 lit. a GDPR.

Purpose of data processing
The collection of the user's e-mail address serves to deliver the newsletter.

Duration of storage
The data will be deleted as soon as the newsletter subscription is terminated.

Opposition and removal possibility
You can unsubscribe from the newsletter at any time. Each newsletter contains a corresponding link for this purpose. You will also find an additional link on our website where you can unsubscribe from the newsletter list.

 

Registration / Login

Description and scope of data processing
This website offers the option to register by providing personal data. The data is entered into an input form, transmitted to us, and stored. The data will not be shared with third parties. The following data is collected during the registration process:

• Your IP address
• Your email address
• Your username
• Your access password (required to ensure login; you can change the password at any time)
• Date and time of registration

Legal basis for data processing
The legal basis for processing the data is the user's registration (Art. 6 para. 1 lit. a GDPR). If the registration serves the purpose of fulfilling a contract or carrying out pre-contractual measures, the additional legal basis for processing the data is Art. 6 para. 1 lit. b GDPR.

Purpose of data processing
Registration is required to access certain content and services on our website.

• Access to the website's backend
• Access to website administration tools
• Access to password-protected areas of the website

Duration of storage
The data will be deleted as soon as it is no longer necessary for the purpose of its collection.

Opposition and removal possibility
You can cancel your registration at any time. You can also have your stored data modified at any time. To do so, please contact the data controller at the address listed above.

 

Contact form and email contact

Description and scope of data processing
Our website includes a contact form that can be used to contact us electronically. If you use this option, all data you enter in the input fields will be transmitted to us and stored.

At the time of sending the message, the following data is also stored:

• Your IP address
• Your Name
• Your email address
• Your username
• Date and time of registration

By clicking the "Submit" button during the submission process, you consent to the processing of your data and are referred to this privacy policy. Alternatively, you can contact us via the provided email address. In this case, the personal data you transmit with your email will be stored. Your data will not be shared with third parties. The data will be used solely for processing your inquiry.

Legal basis for data processing
The legal basis for processing the data is Art. 6 Para. 1 lit. a GDPR.
The legal basis for the processing of the data that is transmitted in the course of sending an email is Art. 6 Para. 1 lit. f GDPR. If the aim of the email contact is to conclude a contract, the additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR.

Purpose of data processing
The processing of the personal data from the input mask serves us only to process the contact. In the case of contact via e-mail, this also includes the required legitimate interest in the processing of the data.
The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

Duration of storage
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. For the personal data from the input form of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the relevant facts have been finally clarified.
The additional personal data collected during the sending process will be deleted at the latest after a period of seven days.

Opposition and removal possibility
You have the right to withdraw your consent to the processing of your personal data at any time. If you contact us by email, you can object to the storage of your personal data at any time. In such a case, the conversation cannot be continued.
You can object to the storage of your data by contacting the data controller at the address provided above. In this case, all data stored in connection with your contact will be deleted.

Safety
We have implemented technical and organizational security measures to protect your personal data from loss, destruction, manipulation, and unauthorized access. Our employees have been trained on all relevant data protection aspects and are bound by the obligation of data secrecy under the German Federal Data Protection Act (BDSG) and the EU General Data Protection Regulation (GDPR) to handle personal data confidentially.

 

Data protection Online room booking

Description and scope of data processing
For the purposes of clear identification and contacting the guest, personal data is requested during the online room reservation process. The required information includes title, first name, last name, telephone number, and email address. A credit card is also required for guarantee and/or payment.

Legal basis for data processing
The legal basis for processing this data is Art. 6 para. 1 sentence 1 b) GDPR, because this data is required according to § 29 f BMG so that we can fulfill our contractual obligations to you.

Purpose of data processing
We need to process the personal data from the input form to ensure a clear assignment of your room reservation. You will receive your booking confirmation at the email address you provided after booking. We need your telephone number for any questions or other contact purposes (e.g., for late-arriving guests). Depending on the rate, your credit card will be used for guarantee or payment purposes.

Duration of storage
Unless specifically stated, we store personal data only as long as necessary to fulfill the purposes pursued.
In some cases, the legislator provides for the retention of personal data, for example in tax or commercial law. In these cases, the data will be stored by us only for these legal purposes, but not otherwise processed and deleted after expiration of the statutory retention period.
Personal data generated during a booking will be stored for a maximum of 10 years.

Disclosure of data to third parties
Basically, we only use your personal data within our company.
If and to the extent that we engage third parties in the performance of contracts (such as logistics service providers), these personal data will only be received to the extent that the transmission is required for the corresponding service.
In the event that we outsource certain parts of the data processing ("order processing"), we contractually obligate the processor to use personal data only in accordance with the requirements of data protection laws and to ensure the protection of the data subject's rights.

Data security
We make every effort to ensure the security of your data within the framework of applicable data protection laws and technical possibilities.
Your personal data is transmitted to us in encrypted form. We use the SSL (Secure Socket Layer) encryption system; however, we would like to point out that data transmission on the internet (e.g., when communicating via email) can have security vulnerabilities. Complete protection of data against access by third parties is not possible.
To safeguard your data, we maintain technical and organizational security measures in accordance with Art. 32 DSGVO, which we always adapt to state-of-the-art technology.

 

Data protection Job advertisements

On our website, we publish a list of job postings provided to us by StepStone Deutschland GmbH, Völklinger Straße 1, 40219 Düsseldorf, Germany, as the data controller. This content is loaded automatically from their website. The links redirect to content provided by StepStone Deutschland GmbH. The legal basis for this processing is our legitimate interest in providing comprehensive services to our users, in accordance with Article 6(1)(f) GDPR. Further details regarding data protection at StepStone Deutschland GmbH can be found in their privacy policy at [link to privacy policy]. https://www.hotelcareer.de/datenschutzerklärung.

Your rights

If personal data is processed by you, you are the person concerned within the meaning of the DSGVO and you have the following rights towards the responsible person:

 

right to information

You can request confirmation as to whether and how we process personal data concerning you. To do so, please contact the data controller at the address provided above.

 

Right to rectification

You have a right to rectification and / or completion to the controller, provided the personal data you process is incorrect or incomplete. The responsible person must make the correction without delay.

 

Right to demand processing restrictions

You may request the restriction of the processing of your personal data under the following conditions:

• if you contest the accuracy of your personal information for a period of time that enables the controller to verify the accuracy of your personal information;
• the processing is unlawful and you refuse to delete the personal data and instead request the restriction of the use of the personal data;
• The controller no longer needs the personal data for the purposes of processing, but you require it for the establishment, exercise or defense of legal claims.
• if you have objected to the processing in accordance with Art. 21 Paragraph 1 GDPR and it has not yet been determined whether the legitimate reasons of the person responsible outweigh your reasons.

If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest Union or a Member State.
If the restriction on processing has been restricted in accordance with the above conditions, the person responsible will inform you before the restriction is lifted.

 

Right to delete

deletion obligations
You may require the controller to delete your personal information without delay, and the controller is required to delete that information immediately if one of the following is true:

• Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
• You revoke your consent on which the processing was based according to. Art. 6 para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR, and there is no other legal basis for the processing.
• You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
• Your personal data has been processed unlawfully.

Information to third parties
If the person responsible has made the personal data concerning you public and is acc. According to Art. 17 Para. 1 GDPR, he shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform those responsible for data processing who process the personal data that you are the data subject You have requested that you delete all links to this personal data or copies or replications of this personal data.

 

Right to information

If you have the right of rectification, erasure or restriction of processing to the controller, he / she is obliged to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless: this proves to be impossible or involves a disproportionate effort. You have a right to the person responsible to be informed about these recipients.

 

Right to data portability

You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. Furthermore, you have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR.
the processing is done using automated procedures.
In exercising this right, you also have the right to obtain that your personal data relating to you are transmitted directly from one person to another, insofar as this is technically feasible. Freedoms and rights of other persons may not be affected.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller.

 

Right of objection

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) of the GDPR. To do so, please contact the data controller at the address provided above.

 

Right to revoke the data protection consent declaration

You have the right to withdraw your consent to data processing at any time. Withdrawing your consent does not affect the lawfulness of processing based on consent before its withdrawal. To do so, please contact the data controller named above.

 

Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged violation, if you are of the opinion that the processing of your personal data is against violates the GDPR. The supervisory authority to which the complaint was submitted informs the complainant of the status and the results of the complaint, including the possibility of a judicial remedy according to Art. 78 GDPR.

 

Prohibition of using contact details published here

We prohibit the use of all contact details published on this website, such as postal addresses, telephone and fax numbers, and email addresses, for advertising purposes and for market and opinion research. We expressly reserve the right to take legal action against senders of so-called spam emails who violate this prohibition.

 

 

We reserve the right to change this privacy policy at any time, insofar as this is required by law.
Status: November 2025