Data privacy

Preamble

With the following privacy policy, we would like to inform you about the types of your personal data (hereinafter referred to as “data”) we process, for what purposes, and to what extent. This privacy policy applies to all processing of personal data carried out by us, both within the scope of providing our services and, in particular, on our websites, in mobile applications, and on external online platforms such as our social media profiles (collectively referred to as the “online offering”). Last updated: March 7, 2025

Controller

Fuchs Hotels
Tivolistraße 3
83435 Bad Reichenhall
Email: [email protected]
Phone: +49 8651 78060
Legal Notice: https://fuchs-hotels.de/impressum/

Types of Data Processed

• Inventory data (e.g., name, address, date of birth, nationality)
• Payment data (e.g., bank account, credit card details)
• Contact data (e.g., email, phone number)
• Contract data (e.g., booking information, length of stay)
• Usage data (e.g., access data, log files, WLAN usage, cookies)
• Video surveillance data (if applicable)
• Meta, communication, and procedural data (e.g., IP addresses, browser information, log data)

Purposes of Processing

• Processing hotel bookings and reservations
• Customer service and communication
• Payment processing
• Compliance with legal obligations (e.g., registration forms required by law)
• Provision of WLAN services
• Video surveillance for security purposes (if applicable)
• Marketing and direct advertising (only with consent)
• Provision and optimization of the website
• Analysis of user behavior to improve our offering
• Security measures and fraud prevention

Legal Bases for Processing

• Consent pursuant to Art. 6(1)(a) GDPR
• Contract performance pursuant to Art. 6(1)(b) GDPR
• Legal obligations pursuant to Art. 6(1)(c) GDPR
• Legitimate interests pursuant to Art. 6(1)(f) GDPR

Retention Periods and Deletion

We only store personal data as long as necessary for the respective purpose or as required by legal retention periods:

• Invoice data: 10 years (according to tax regulations)
• Booking data: 3 years (after last use)
• Registration data: 1 year (according to Federal Registration Act)
• Cookies: see section “Use of Cookies”
• Server log files: 30 days

Use of Cookies

Our website uses cookies and similar technologies to provide you with a better user experience. The following types of cookies can be distinguished:

• Essential cookies: Required for the basic functionality of the website.
• Functional cookies: Enable advanced features and personalization.
• Analytics and performance cookies: Help us analyze user behavior and optimize the website.
• Marketing cookies: Used to display personalized advertisements.

You can manage and opt out of cookie use via your browser settings. Details can be found in the cookie settings on our website.

Use of Third-Party Services

Our website uses third-party services to provide various features:

• Google Fonts: External fonts provided by Google. Your IP address may be transmitted to Google. More info: Google Privacy Policy.
• Google Analytics: Analytics service to improve our website. Users can opt out of data processing.
• Social Media Plugins: Facebook, Instagram, and other platforms may collect data when users visit our website.

Disclosure to Third Parties

We only disclose personal data to third parties when permitted by law or when you have given your consent. This includes:

• Payment service providers (e.g., credit card companies, PayPal)
• IT service providers (e.g., web hosting, hotel software, analytics tools)
• Tax consultants and financial authorities
• Authorities within the framework of legal reporting obligations

Data transfers to third countries (e.g., USA in case of Google or Facebook) are only made in accordance with the GDPR (e.g., via EU Standard Contractual Clauses or Data Privacy Framework).

Data Subject Rights

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR): What data do we store about you?
• Right to rectification (Art. 16 GDPR): Correction of inaccurate data
• Right to erasure (Art. 17 GDPR): “Right to be forgotten”
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)

Requests can be directed to the address listed above.

Use of WLAN

If you use our hotel WLAN, technical access data (e.g., IP address, time of use) is stored temporarily. This data is not shared with third parties and is deleted after a maximum of 30 days.

Changes to this Privacy Policy

We reserve the right to update this privacy policy as needed. The current version is always available on our website.

This privacy policy was created based on the data protection generator by Dr. Thomas Schwenke and individually adapted to the needs of the hotel.