First things first. This site sets no cookies, doesn’t count visitors and loads nothing from other servers. Data only comes about when you send us the form, call us or stay the night with us.
The party responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Mustermann Inn
Owner: Josef Mustermann
Hauptstraße 12
83xxx Musterdorf
Phone: 08641 0000
E-mail: info@mustermann.de
We have not appointed a data protection officer. The legal requirements of § 38 BDSG (Federal Data Protection Act) don’t apply to us.
When you open this site, the web hosting provider (host) automatically stores data that your browser transmits in so-called server log files:
Purpose: delivering the site without technical errors, keeping the server stable and secure, fending off attacks.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, working website).
Storage period: The log files are deleted automatically after seven days at the latest. They are not combined with any other data.
This website is run by a service provider with servers in Germany. The host processes the data listed above only on our behalf and on our instructions. We have a data processing agreement with the host under Art. 28 GDPR.
Legal basis: Art. 6(1)(f) GDPR. No data is transferred to countries outside the EU.
Encryption: The site is only ever delivered over a TLS encrypted connection (you can tell by the “https” in the address bar). That also protects what you type into the form on its way to us.
When you send us the form on the Contact page, we process the details you enter there.
Required: Name and phone number. Without these
we can’t get back to you.
Optional: E-mail address, what it’s about
and your message. What you write in the message field is entirely
up to you. Please don’t put health data or other particularly
sensitive information in there. For things like that, please give us a call.
Purpose: Handling your request · a
table reservation, a room request, a party in the side room
or any other question.
Legal basis: Art. 6(1)(b) GDPR
(steps taken at your request before entering into a contract).
Where your request isn’t aimed at a contract, we rely
on Art. 6(1)(f) GDPR (legitimate interest in
answering enquiries).
Consent: The tick box under the form
confirms that you have read this policy. It doesn’t replace any
of the legal bases above, and you can object to it at
any time.
Recipients: Your message goes to the
business’s e-mail inbox. Only the innkeepers have access. Nothing is
passed on to third parties.
Storage period: If no booking comes of it, we delete the message no later than six months after our last contact. If the enquiry leads to an overnight stay or a party, the data becomes part of our business records, and the statutory retention periods apply (§ 257 HGB, § 147 AO, six or ten years).
When you call us, write to us or send us an e-mail, we process the details you give us.
Legal basis: Art. 6(1)(b) GDPR where there is
a contract or steps toward one, otherwise
Art. 6(1)(f) GDPR.
Storage period: as described in section 5.
For a reservation we note your name, the number of people, the time and a phone number in case we have a question. These details go into the reservation book in the dining room and are crossed out after the day in question. Nothing is passed on to third parties.
Legal basis: Art. 6(1)(b) GDPR.
Anyone who stays the night with us has to fill in and sign a registration form under §§ 29 and 30 of the Federal Registration Act (BMG). We are required by law to collect this form and keep it.
Data: name, date of birth, address, nationality, number of fellow travelers, arrival and departure date. For guests from abroad, also the type and number of their ID document.
Legal basis: Art. 6(1)(c) GDPR in conjunction with §§ 29, 30 BMG (legal obligation).
Recipients: The responsible authorities on request under § 30(4) BMG. Nobody else.
Storage period: One year from the day the retention period begins. After that the registration forms are destroyed (§ 30(3) BMG).
For the Kurbeitrag (the local visitor’s tax) we report the number of overnight stays and the details needed for it to the municipality of Musterdorf. We keep invoices for ten years under § 147 of the Fiscal Code (AO) and § 257 of the Commercial Code (HGB).
You have the following rights toward us regarding the personal data that concerns you:
For any of these, a simple phone call or a message to the contact details above is enough. Exercising your rights costs you nothing.
You have the right to complain to a data protection supervisory authority about how your data is processed (Art. 77 GDPR). The authority responsible for us is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27
91522 Ansbach
www.lda.bayern.de
You don’t have to tell us anything to read this site. Without a name and phone number, though, we can’t answer an enquiry sent through the form. The details on the registration form are required by law. Without them we aren’t allowed to put you up.
We update this policy when the law or the way we work changes. The version you find here is always the one that applies.
Last updated January 2026