Privacy policy
Information under Articles 13 and 14 of the General Data Protection Regulation. In short, we collect as little as possible, pass nothing on and sell nothing.
1. Controller
Responsible for data processing on this website
Gasthof Mustermann GbR, Musterstraße 3, 83xxx Musterdorf am See
Phone 08641 0000, e-mail info@mustermann.de
We have not appointed a data protection officer, because the legal requirements for one don’t apply to us. If you have questions, please contact us directly at the address above.
2. Hosting and server log files
This website is hosted by a provider with servers in Germany. Each time a page is opened, the server automatically records data that your browser sends. These are:
- Shortened IP address
- Date and time of access
- Name and URL of the file requested
- Amount of data transferred and whether the request was successful
- Browser type and operating system
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in running the website without technical errors and keeping it secure. The log files are deleted after seven days. We have a data processing agreement with the hosting provider under Article 28 GDPR.
3. Encryption
This site uses SSL or TLS encryption. You can tell by the padlock in your browser’s address bar. It means that data you send us can’t be read by third parties along the way.
4. Cookies and visitor statistics
This website sets no cookies that aren’t technically necessary. We don’t use Google Analytics, ad networks, social media plugins or external fonts that send data to third parties when the page loads. That’s why you won’t see a cookie banner here. We don’t know who you are, and we don’t want to know.
5. Booking request and contact form
When you send us a request through the form, we process the details you enter. That covers arrival and departure dates, number of guests, preferred room, occasion, name, phone number, e-mail address and your comments.
We use this data only to answer your request and prepare your stay. The legal basis is Art. 6(1)(b) GDPR, because the processing is needed to take steps before entering into a contract.
If no booking follows, we delete the request after six months. If a booking does follow, the retention periods under tax and commercial law apply, which run from six to ten years.
6. Enquiries by e-mail or phone
If you call us or send an e-mail, we store your details so we can deal with your enquiry. We don’t pass this data on without your consent. The legal basis is Art. 6(1)(b) GDPR for enquiries related to a contract, otherwise Art. 6(1)(f) GDPR based on our legitimate interest in replying.
7. Registration duties for accommodation
As an accommodation business, the Federal Registration Act (Bundesmeldegesetz) requires us to have overnight guests fill in a registration form. The legal basis is Art. 6(1)(c) GDPR in conjunction with § 29 and § 30 of the Federal Registration Act. We keep the registration forms for one year and then destroy them. Data for the visitor’s tax (Kurbeitrag) is passed to the municipality to the extent required by law.
8. Recipients of data
We only pass on your data when it’s needed to fulfill the contract or when the law requires it. Recipients may be: our hosting provider, our tax advisor, the municipality for the visitor’s tax and, if you pay by card, the payment provider. No data is transferred to countries outside the European Union.
9. Your rights
You have the right at any time to:
- Access to the data stored about you under Article 15 GDPR
- Correction of inaccurate data under Article 16 GDPR
- Erasure under Article 17 GDPR, unless a retention obligation stands in the way
- Restriction of processing under Article 18 GDPR
- Data portability under Article 20 GDPR
- Object to processing under Article 21 GDPR
- Withdraw consent you have given, with effect for the future
A phone call or an e-mail is enough, we don’t need a form. We’ll reply within one month.
10. Right to lodge a complaint with the supervisory authority
If you believe that the processing of your data violates the GDPR, you can complain to a supervisory authority. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (Bavarian Data Protection Authority), Promenade 27, 91522 Ansbach.
11. External links and map
On the Directions page we show a map as an image placeholder. No map service is loaded and no data is sent to third parties. Should a map service be added in a later version, it will only load after you click on it, with its own notice in this section.
12. Changes to this policy
We update this privacy policy when our website or the law changes. The version published on this page always applies. Version date: January 2026.
We’ll explain it over the phone, too.
If you want to know what we’ve stored about you, give us a call. It usually takes less than five minutes.