Privacy Policy
Controller
The controller within the meaning of the General Data Protection Regulation (GDPR), other national data protection laws and other data protection regulations is:
Hotel Lethehof
Contact person: Björn SchulzeFriedrichstraße 74
D – 26203 Wardenburg
Principles of Data Processing
We generally collect and process our users' personal data only to the extent necessary to provide a functional website and our content and services. Our users' personal data is generally collected and processed only with the user's consent. An exception applies where prior consent cannot be obtained for practical reasons and the processing of the data is permitted by law.
Where we obtain the data subject's consent to process personal data, Article 6(1)(a) EU GDPR serves as the legal basis. Where personal data is processed to perform a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis.
Your Rights as a Data Subject
You have the following rights toward us regarding your personal data:
- Right of access (Art. 15 GDPR) — You have the right to obtain information about the personal data we store about you.
- Right to rectification (Art. 16 GDPR) — You have the right to have inaccurate data corrected or incomplete data completed.
- Right to erasure (Art. 17 GDPR) — You have the right to request the erasure of your personal data where the legal requirements are met.
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR) - You have the right to object to the processing of your personal data.
- Right to lodge a complaint — You have the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority in Lower Saxony is: The State Commissioner for Data Protection of Lower Saxony, Prinzenstraße 5, 30159 Hanover.
To exercise your rights, please contact: [email protected]
Data Collection When Using the Website
Each time our website is accessed, our system automatically collects data and information from the computer system of the device accessing it. The following data is collected:
- Information about the browser type and version used
- The user's operating system
- The user's internet service provider
- The user's IP address
- Date and time of access
- Websites from which the user's system accesses our website
The data is also stored in our system's log files. This data is not stored together with other personal data relating to the user. The legal basis for the temporary storage of the data is Article 6(1)(f) GDPR.
Contact Form & Email Contact
If you send us enquiries via the contact form or email, the information you provide in the form or email, including the contact details you enter there, will be stored by us for the purpose of processing the enquiry and in case of follow-up questions. We do not share this data without your consent.
The data entered in the contact form is therefore processed exclusively on the basis of your consent (Article 6(1)(a) GDPR). You may withdraw this consent at any time. An informal notification by email is sufficient. The lawfulness of the data processing carried out before the withdrawal remains unaffected.
The data you enter in the contact form remains with us until you request its erasure, withdraw your consent to its storage or the purpose for storing the data no longer applies. Mandatory statutory provisions — in particular retention periods — remain unaffected.
Hosting
This website is hosted by an external service provider (host). Personal data collected on this website is stored on the host's servers. This may include IP addresses, contact enquiries, metadata and communication data, contract data, contact details, names, website access data and other data generated through a website.
The host is used for the purpose of fulfilling contracts with our potential and existing customers (Article 6(1)(b) GDPR) and in the interest of providing our online services securely, quickly and efficiently through a professional provider (Article 6(1)(f) GDPR).