Data protection

Controller

The controller responsible for data processing on this website is the operator of Hotel am Katharinenholz. For questions regarding data protection, please contact:

E-mail: info@hotel-katharinenholz.de
Telephone: +49 (0)331 24 34 80 40

General information on data processing

We collect and process personal data of our guests and website visitors only to the extent necessary to provide a functional website as well as our content and services. Processing is carried out in accordance with the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

Data collection when visiting the website

When accessing our website, technically necessary information is automatically transmitted to our host's server, in particular the IP address, date and time of the request, browser type and version, referrer URL and operating system. This data is processed to ensure the technical functionality and security of the website.

Contact form and email contact

If you send us enquiries via email or contact form, the data you provide (e.g. name, email address, telephone number, content of the enquiry) will be stored for the purpose of processing and answering your request. The legal basis is Art. 6 Para. 1 lit. b GDPR (pre-contractual measures or contract performance) or Art. 6 Para. 1 lit. f GDPR (legitimate interest in responding to enquiries).

Booking and reservation

For the booking of rooms and services, we process the required personal data, e.g. name, address, contact details, payment information and stay details. This data is used to perform the accommodation contract and to fulfil statutory retention obligations (including registration and tax obligations). The legal basis is Art. 6 Para. 1 lit. b GDPR and Art. 6 Para. 1 lit. c GDPR (legal obligation).

Cookies, localStorage and consent process

Our website exclusively uses storage technologies in the localStorage of your browser; we do not use classic tracking cookies. When you first visit, a consent banner appears in which you can choose between two categories. Without your selection, no data other than technically necessary functions will be stored or transferred to third parties. You can change or revoke your selection at any time via the link Cookie Settings in the footer.

1. Necessary / Functional

With your consent, we store your language setting and a cache of the translations in localStorage (keys hkh.lang and hkh.trcache.v4). Additionally, your consent decision itself is stored under hkh.consent and hkh.consent.analytics so that the banner does not reappear on every visit. The legal basis is Art. 6 Para. 1 lit. a GDPR and Section 25 Para. 1 TTDSG. Without consent, we use the language setting only for the current session.

2. Statistics (Google Analytics 4)

Only with your express consent do we use Google Analytics 4 (provider: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) for pseudonymous reach measurement. The IP address is transmitted in shortened form (anonymize_ip). Data processed includes pages accessed, duration of visit, approximate region, device and browser. Transmission to the USA is possible; Google is certified under the EU-U.S. Data Privacy Framework. The legal basis is Art. 6 Para. 1 lit. a GDPR and Section 25 Para. 1 TTDSG. Without your consent, neither Google Tag Manager scripts nor Analytics libraries are loaded. Details: policies.google.com/privacy.

3. Marketing / Advertising

We use no marketing or advertising cookies, no retargeting pixels (e.g. Meta/Facebook Pixel, Google Ads, TikTok Pixel) and no cross-provider profiling. Should we introduce such services in the future, they would be activated exclusively after prior, express consent via the consent banner.

Withdrawal of consent

You can withdraw your consent at any time with effect for the future by clicking on Cookie Settings in the footer and adjusting your selection or rejecting all categories. Processing already carried out remains unaffected by this.

External fonts and integrations

External fonts (Google Fonts) are loaded from servers of Google LLC; your IP address may be transmitted to Google in the process. For forwarding to external booking platforms or social networks (e.g. Facebook), the privacy policies of the respective providers apply.

Disclosure of data

Personal data is only passed on to third parties if this is necessary to fulfil the contract (e.g. to the booking service provider), if it is required by law or if you have consented to the transfer.

Storage duration

Personal data is only stored for as long as is necessary for the respective processing purposes. Subsequently, it is deleted or anonymised, unless statutory retention obligations (e.g. from tax and commercial law) prevent deletion.

Your rights

You have the right to information about the data processed by us, to rectification, erasure or restriction of processing, to data portability and to object to processing. To do so, please contact the address mentioned above.

Right to lodge a complaint

You have the right to complain to a data protection supervisory authority about the processing of your personal data. The supervisory authority of the federal state in which the hotel is located, or the authority responsible for the operator, is competent.

Data security

We use technical and organisational measures to protect your data against manipulation, loss, destruction or unauthorised access. This includes the use of HTTPS encryption for data transmission between your browser and our server.

Changes to this privacy policy

This privacy policy will be adapted to legal or technical changes as required. The current version can be viewed on this page.

As of: July 2026