Privacy policy

1. Controller

The party responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Mustermann Inn
Owner: Josef Mustermann
Hauptstraße 12
83xxx Musterdorf
Phone: 08641 0000
E-mail: info@mustermann.de

We have not appointed a data protection officer. The legal requirements of § 38 BDSG (Federal Data Protection Act) don’t apply to us.

2. What this site does NOT do

• No cookies. No cookies of any kind are set, neither technically necessary ones nor any others. That’s why there’s no consent banner on this site.
• No tracking, no statistics. We don’t use Google Analytics, Matomo or any similar tool. We don’t know how many people visit this site.
• No external content. No fonts from other servers, no maps, no videos, no social media buttons, no ad networks, no booking portals. When you open the site, no connection is made to any third party.
• No form. You can’t send us anything through this site. There’s only the phone number.
• No profiling and no automated decision making under Art. 22 GDPR.
• No sharing for advertising. We don’t sell or rent out any data.

3. Visiting the site and server logs

When you open this site, the web hosting provider (host) automatically stores data that your browser transmits in so-called server log files:

• shortened IP address
• date and time of access
• Name and address of the requested file
• amount of data transferred and whether the request succeeded
• browser type, browser version and operating system

Purpose: delivering the site without technical errors, keeping the server stable and secure, fending off attacks.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, working website).
Storage period: The log files are deleted automatically after seven days at the latest. They are not combined with any other data.

4. Hosting

This website is run by a service provider with servers in Germany. The host processes the data listed above only on our behalf and on our instructions. We have a data processing agreement with the host under Art. 28 GDPR.

Legal basis: Art. 6(1)(f) GDPR. No data is transferred to countries outside the EU.

Encryption: The site is only ever delivered over a TLS encrypted connection (you can tell by the “https” in the address bar).

5. Phone, post and e-mail

When you call us, write to us or send an e-mail, we process the details you give us. Usually that’s your name, phone number and what you need.

Purpose: handling your request, such as a table reservation, a room request or a party.
Legal basis: Art. 6(1)(b) GDPR where there is a contract or a step toward one, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).
Storage period: We note reservations in our table book and cross them out after the day. Written enquiries that don’t lead to a booking are deleted no later than six months after the last contact.

6. Table reservations

For a reservation we note your name, the number of people, the time and a phone number in case we have a question. These details go into the reservation book in the dining room and are crossed out after the day in question. Nothing is passed on to third parties.

Legal basis: Art. 6(1)(b) GDPR.

7. Overnight stays, registration form and invoice

Anyone who stays the night with us has to fill in and sign a registration form under §§ 29 and 30 of the Federal Registration Act (BMG). We are required by law to collect this form and keep it.

Data: name, date of birth, address, nationality, number of fellow travelers, arrival and departure date. For guests from abroad, also the type and number of their ID document.
Legal basis: Art. 6(1)(c) GDPR in conjunction with §§ 29, 30 BMG (legal obligation).
Recipients: The responsible authorities on request under § 30(4) BMG. Nobody else.
Storage period: One year from the day the retention period begins. After that the registration forms are destroyed (§ 30(3) BMG).

For the Kurbeitrag (the local visitor’s tax) we report the number of overnight stays and the details needed for it to the municipality of Musterdorf. We keep invoices for ten years under § 147 of the Fiscal Code (AO) and § 257 of the Commercial Code (HGB).

8. Your rights

You have the following rights toward us regarding the personal data that concerns you:

• Access (Art. 15 GDPR). You can find out what data we process about you.
• Rectification (Art. 16 GDPR). We correct wrong data and complete data that’s incomplete.
• Erasure (Art. 17 GDPR). You can ask us to delete your data, as long as no legal retention period stands in the way.
• Restriction of processing (Art. 18 GDPR).
• Data portability (Art. 20 GDPR).
• Objection (Art. 21 GDPR). You can object to processing that we base on a legitimate interest.
• Withdrawing consent (Art. 7(3) GDPR). At any time, with effect for the future.

For any of these, a simple phone call or a message to the contact details above is enough. Exercising your rights costs you nothing.

9. Right to complain to the supervisory authority

You have the right to complain to a data protection supervisory authority about how your data is processed (Art. 77 GDPR). The authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27
91522 Ansbach
www.lda.bayern.de

10. Obligation to provide data

You don’t have to tell us anything to read this site. Without a name and phone number, though, we can’t reserve a table or a room for you. The details on the registration form are required by law, and without them we aren’t allowed to put you up.

11. Changes to this policy

We update this policy when the law or the way we work changes. The version you find here is always the one that applies.

Last updated January 2026