In short, no cookies, no tracking, no outside content. This site loads nothing from other servers · even the price estimate is worked out in your own browser.
The party responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Mustermann Inn
Owner: Josef Mustermann
Hauptstraße 12
83xxx Musterdorf
Phone: 08641 0000
E-mail: info@mustermann.de
We have not appointed a data protection officer. The legal requirements of § 38 BDSG (Federal Data Protection Act) don’t apply to us.
When you open this site, the web hosting provider (host) automatically stores data that your browser transmits in so-called server log files:
Purpose: delivering the site without technical errors, keeping the server stable and secure, fending off attacks.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, working website).
Storage period: The log files are deleted automatically after seven days at the latest. They are not combined with any other data.
This website is run by a service provider with servers in Germany. The host processes the data listed above only on our behalf and on our instructions. We have a data processing agreement with the host under Art. 28 GDPR.
Legal basis: Art. 6(1)(f) GDPR. No data is transferred to countries outside the EU.
Encryption: The site is only ever delivered over a TLS encrypted connection (you can tell by the “https” in the address bar). That also protects what you type into the form on its way to us.
The form on the Booking request page goes beyond a simple contact request. You enter travel dates there.
Required: arrival and departure date, name, phone number and email address. Without these we can’t assign a room or reply to you.
Optional: preferred room type, number of adults, number and ages of children, whether you’re bringing a dog, and your notes. We need the children’s ages because the visitor tax and the extra bed depend on them.
Purpose: checking availability, assigning a suitable room, calculating the price and answering your request.
Legal basis:
Art. 6(1)(b) GDPR · the processing is needed to take steps at your request before entering into a contract. If the booking goes ahead, it serves to perform the accommodation contract. For requests with no contractual link we rely on Art. 6(1)(f) GDPR.
Recipients: Your request goes to the business’s email inbox. Only the innkeepers have access. It is not passed on to third parties · in particular not to a booking portal.
Storage period: If no booking is made, we delete the request no later than six months after the last contact. If a booking is made, the data becomes part of our business records, and the statutory retention periods apply (§ 257 HGB, § 147 AO, six or ten years).
When you call us, write to us or send an email, we process the details you give us.
Legal basis: Art. 6(1)(b) GDPR where there is
a contract or steps toward one, otherwise
Art. 6(1)(f) GDPR.
Storage period: as described in section 5.
For a reservation we write down your name, number of people, time and a phone number in case we need to check something. These details go in the reservation book in the dining room and are crossed out after the day in question.
For parties in the side room, the arrangements for the menu, the number of guests and the billing address are added. They become part of our business records.
Legal basis: Art. 6(1)(b) GDPR.
Anyone staying overnight with us must fill in and personally sign a registration form under §§ 29 and 30 of the Federal Registration Act (BMG). We are legally required to provide this form, collect it and keep it. That isn’t our choice, and you can’t opt out of it.
Data: date of arrival and departure, surname and first names, date of birth, nationality, address and the number of people traveling with you. For foreign guests, also the type and number of the ID document they carry (§ 29(2), § 30(2) BMG).
Legal basis:
Art. 6(1)(c) GDPR in conjunction with §§ 29, 30 BMG (compliance with a legal obligation).
Recipients: On request, the competent authorities under § 30(4) BMG · such as the police, the registration office or security authorities within the legal framework. Nobody else.
Storage period: One year from the day the retention obligation begins. After that the forms must be destroyed without delay (§ 30(3) BMG). We shred them.
For the visitor tax we report the number of overnight stays and the details required for it to the municipality of Musterdorf (Art. 6(1)(c) GDPR in conjunction with the visitor tax bylaw). We keep invoices for ten years under § 147 of the Fiscal Code and § 257 of the Commercial Code.
You have the following rights toward us regarding the personal data that concerns you:
For any of these, a simple phone call or a message to the contact details above is enough. Exercising your rights costs you nothing.
You have the right to lodge a complaint with a data protection supervisory authority about the processing of your data (Art. 77 GDPR). The authority responsible for us is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27
91522 Ansbach
www.lda.bayern.de
You don’t have to tell us anything to read this site. For a booking request we need travel dates, names and a way to reach you · without them we can’t promise you a room. The details on the registration form are required by law, and without them we aren’t allowed to put you up.
We update this policy when the law or the way we work changes. The version you find here is always the one that applies.
Last updated January 2026