Privacy Policy

Mandatory information according to the EU General Data Protection Regulation (GDPR)

I. Name and address of the responsible party

The controller within the meaning of the General Data Protection Regulation and other data protection regulations is:

Erlenbad Resort GmbH
Managing Director: Armin Bengel
Erlenbadstraße 75
77880 Sasbach

Email: info@erlenbad-suites.de

Telephone: +49 (0)170 968 70 09

II. Data Protection Officer

We are not required to appoint a data protection officer.

III. Allgemeines zur Datenverarbeitung

1. Scope of processing personal data
We generally process the personal data of our users only to the extent necessary for providing a functional website and for processing our services. Processing takes place either on the basis of legal permission or with the consent of the data subject.

2. Legal basis for processing

The processing of personal data is based on the following legal grounds:
Article 6 paragraph 1 letter a GDPR – Consent
Article 6 paragraph 1 letter b GDPR – Contract / pre-contractual measures
Article 6(1)(c) GDPR – legal obligation
Article 6 paragraph 1 letter f GDPR – legitimate interest

3. Data deletion and storage period
Personal data will be deleted or blocked as soon as the purpose of storage no longer applies or statutory retention periods have expired.
Further storage only occurs if required by law.

IV. Provision of the website and log files

1. Description and scope of data processing
The following data is automatically collected each time our website is accessed:

Browser type and version
operating system
Internet service provider
IP address
Date and time of access
Referrer URL
pages visited

This data is stored in log files and is not combined with other personal data.

2. Legal basis
Article 6 paragraph 1 letter f GDPR (legitimate interest)

3. Purpose of data processing
The processing serves to ensure the functionality of the website, system security, and technical optimization.

4. Storage duration
Log files are deleted or anonymized after seven days at the latest.

5. Right to object and have the matter removed
The collection of data for the provision of the website and the storage of data in log files is mandatory.
There is no possibility of appeal.

V. Contact via email

1. Description
When contacting us via email, the personal data you provide will be processed solely for the purpose of handling your request.
The data will not be shared with third parties.

2. Legal basis
Article 6 paragraph 1 letter f GDPR
In the case of contract negotiations, additionally Art. 6 para. 1 lit. b GDPR.

3. Purpose of data processing
The data is processed solely for the purpose of handling the contact request.

4. Storage duration
The data will be deleted once the request has been fully processed.

5. Right to object
The user can object to the processing of their personal data at any time.
In this case, the conversation cannot be continued and the data will be deleted.

VI. Cookies and technically necessary services

Our website uses only technically necessary cookies, which are required for the operation and display of the website.
These cookies are used to ensure the secure provision of the website and its technical functionality.
The legal basis is Article 6(1)(f) GDPR. A separate cookie opt-in is not required for this.

VII. External booking and platform services

For processing bookings and inquiries, we link to external platforms, in particular:

Booking.com
Airbnb

Clicking on these links will take you away from our website.
The respective provider is solely responsible for the processing of personal data on their platform. Their privacy policies apply.

VIII. Website Hosting

Our website is hosted by an external hosting provider.
Personal data (e.g. IP addresses and log files) are processed to the extent necessary for the provision and security of the website.
The legal basis is Article 6 paragraph 1 letter f GDPR.

IX. Rights of the data subject

You have the right to:

Information pursuant to Article 15 GDPR
Correction pursuant to Article 16 GDPR
Erasure pursuant to Article 17 GDPR
Restriction of processing pursuant to Article 18 GDPR
Data portability pursuant to Article 20 GDPR
Objection pursuant to Article 21 GDPR
Revocation of consent granted pursuant to Art. 7 para. 3 GDPR

X. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority pursuant to Article 77 GDPR, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement.