DEENENTWURF · DRAFT · Sample site for Mustermann Inn. The business does not exist, bookings are not possible. Built by Thomas Eichinger · peaksites.de · © Thomas Eichinger · Creator’s legal notice
Mustermann InnTavern · Rooms 08641 · 0000Call
Home · Privacy policy
Article 13 GDPR

Privacy policy

The short version first. No cookies, no tracking, no outside content. This site doesn’t load anything from other servers.

1. Controller

The party responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Mustermann Inn
Owner: Josef Mustermann
Hauptstraße 12
83xxx Musterdorf
Phone: 08641 0000
E-mail: info@mustermann.de

We have not appointed a data protection officer. The legal requirements of § 38 BDSG (Federal Data Protection Act) don’t apply to us.

2. What this site does NOT do

  • No cookies. No cookies of any kind are set, neither technically necessary ones nor any others. That’s why there is no consent banner on this site.
  • No tracking, no statistics. We don’t use Google Analytics, Matomo or any similar tool.
  • No external content. No fonts from outside servers, no maps, no videos, no social media buttons, no ad networks, no booking portals. The reviews on the home page are fixed text too, and are not loaded from a provider.
  • No profiling and no automated decision making under Art. 22 GDPR.
  • No sharing for advertising. We don’t sell or rent out any data.

3. Visiting the site and server logs

When you open this site, the web hosting provider (host) automatically stores data that your browser transmits in so-called server log files:

  • shortened IP address
  • date and time of access
  • Name and address of the requested file
  • amount of data transferred and whether the request succeeded
  • browser type, browser version and operating system

Purpose: delivering the site without technical errors, keeping the server stable and secure, fending off attacks.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, working website).
Storage period: The log files are deleted automatically after seven days at the latest. They are not combined with any other data.

4. Hosting

This website is run by a service provider with servers in Germany. The host processes the data listed above only on our behalf and on our instructions. We have a data processing agreement with the host under Art. 28 GDPR.

Legal basis: Art. 6(1)(f) GDPR. No data is transferred to countries outside the EU.

Encryption: The site is only ever delivered over a TLS encrypted connection (you can tell by the “https” in the address bar). That also protects what you type into the form on its way to us.

5. Enquiry form

When you send us the form on the Enquiry page, we process the details you enter there.

Required: Name and phone number. Without these we can’t reply to you.
Optional: Email address, type of enquiry, preferred date, number of people, your message and attached pictures. What you write in the message field is entirely up to you. Please don’t put any health data or other especially sensitive information in there. For things like that, please call.

Purpose: Handling your request, whether it’s a table reservation, a room enquiry, a party in the side room or any other question.
Legal basis: Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract). Where your enquiry isn’t aimed at a contract, we rely on Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).
Recipients: Your message goes to the business’s email inbox. The innkeepers have access to it. It is not passed on to third parties.
Storage period: If no booking comes of it, we delete the message six months after the last contact at the latest. If the enquiry leads to an overnight stay or a party, the data becomes part of our business records, and the statutory retention periods apply (§ 257 HGB, § 147 AO, six or ten years).

6. Pictures you attach

The enquiry form lets you attach image files, for example a sketch of the seating plan or a poster for a club night.

Purpose: We want to understand what it’s about without lots of back and forth on the phone.
Legal basis: Art. 6(1)(b) GDPR, as the pictures are part of your enquiry. Attaching them is optional. Without a picture we handle the enquiry just the same.
Scope: Image files can contain more information than you might think, for example the location where it was taken (GPS) or the camera model in the EXIF data. We don’t analyze this information. If you don’t want to share it, remove it before attaching or don’t send a picture.
Please no people: If possible, don’t upload pictures in which other people can be recognized. If you do, you need their consent.
Storage period: We delete attached pictures as soon as the enquiry has been dealt with, after six months at the latest. If they become part of the records for a party, the periods under section 5 apply.

On this sample page The form isn’t connected to any sending. Nothing is transferred, nothing is saved and no file is uploaded. The picture preview is created in the memory of your own browser and disappears as soon as you close the page.

7. Phone, post and email

When you call us, write to us or send an email, we process the details you give us.

Legal basis: Art. 6(1)(b) GDPR where there is a contract or steps toward one, otherwise Art. 6(1)(f) GDPR.
Storage period: as described in section 5.

8. Table reservations and parties

For a reservation we write down your name, number of people, time and a phone number in case we need to check something. These details go in the reservation book in the dining room and are crossed out after the day in question.

For parties in the side room we also note what was agreed on the menu, number of guests and billing address. These become part of our business records.

Legal basis: Art. 6(1)(b) GDPR.

9. Overnight stays, registration form and invoice

Anyone who stays the night with us has to fill in and sign a registration form under §§ 29 and 30 of the Federal Registration Act (BMG). We are required by law to collect this form and keep it.

Data: Name, date of birth, address, nationality, number of fellow travelers, arrival and departure dates. For foreign guests also the type and number of their ID document.
Legal basis: Art. 6(1)(c) GDPR in conjunction with §§ 29, 30 BMG (legal obligation).
Recipients: The competent authorities on request under § 30(4) BMG. Nobody else.
Storage period: One year from the day the retention obligation begins. After that the registration forms are destroyed (§ 30(3) BMG).

For the Kurbeitrag (the local visitor’s tax) we report the number of overnight stays and the details needed for it to the municipality of Musterdorf. We keep invoices for ten years under § 147 of the Fiscal Code (AO) and § 257 of the Commercial Code (HGB).

10. Your rights

You have the following rights toward us regarding the personal data that concerns you:

  • Access (Art. 15 GDPR). You can find out what data we process about you.
  • Rectification (Art. 16 GDPR). We correct wrong data and complete data that’s incomplete.
  • Erasure (Art. 17 GDPR): You can request erasure as long as no statutory retention obligation prevents it.
  • Restriction of processing (Art. 18 GDPR).
  • Data portability (Art. 20 GDPR).
  • Objection (Art. 21 GDPR). You can object to processing that we base on a legitimate interest.
  • Withdrawing consent (Art. 7(3) GDPR). At any time, with effect for the future.

For any of these, a simple phone call or a message to the contact details above is enough. Exercising your rights costs you nothing.

11. Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your data (Art. 77 GDPR). The authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27
91522 Ansbach
www.lda.bayern.de

12. Obligation to provide data

You don’t have to tell us anything to read this site. Without your name and phone number, though, we can’t answer an enquiry sent through the form. Attaching pictures is always optional. The details on the registration form are required by law. Without them we’re not allowed to put you up.

13. Changes to this policy

We update this policy when the law or the way we work changes. The version you find here is always the one that applies.

Last updated January 2026

About this page This is a sample page by PEAK. The business “Mustermann Inn” and all people, addresses, reviews and contact details are entirely made up. The text shows what a complete privacy policy looks like for an inn with guest rooms, an enquiry form and file attachments, with no cookies, no tracking and no outside content.