Privacy Policy

This English translation is provided for your convenience only. The German version is legally binding.

How Gästehaus Bavaria in Regensburg handles your personal data.

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data refers to any data that can be used to personally identify you. For detailed information on data protection, please refer to the privacy policy below.

1. Privacy at a Glance

General Information and Mandatory Disclosures

We take the protection of your personal data very seriously. That is why we act in accordance with applicable laws regarding the protection of personal data and data security. Information about when we store which data and how we use it can be found in this Privacy Policy, in accordance with applicable German law. When you visit and use this website, various types of personal data are collected. Personal data is information that can be used to identify you personally. This Privacy Policy explains what data we collect and how we use it. It also explains how and for what purpose this is done. Please note that data transmission over the Internet (e.g., when communicating via email) may be subject to security vulnerabilities. It is not possible to completely protect data from access by third parties.

Note regarding the responsible body

The responsible body for data processing on this website is: Gästehaus Bavaria GmbH
represented by Andreas Frieser
Belgrader Straße 2
93055 Regensburg
Tel: +49 (0)941 / 600 90 200
Email: reservierung@gaestehaus-bavaria.de The controller determines, either alone or jointly with others, the purposes and means of processing personal data (e.g., names, contact information, etc.).

Legal Basis for Data Processing

We process personal data only in compliance with the applicable data protection regulations. This means that user data is processed only when there is legal authorization to do so, that is,

to provide our contractual services (e.g., processing orders) and online services, or where such processing is required by law (Art. 6(1)(b) and (c) of the GDPR)
you have given your consent (Art. 6(1)(a) and Art. 7 of the GDPR), as well as
based on our legitimate interests (i.e., our interest in the analysis, optimization, and cost-effective operation and security of our online offering within the meaning of Article 6(1)(f) of the GDPR, particularly with regard to audience measurement, creating profiles for advertising and marketing purposes, as well as the collection of access data and the use of third-party services).

Data Transfer to Third Parties

Data is disclosed to third parties only in accordance with legal requirements. We disclose user data to third parties only when necessary, for example, for contractual purposes or based on legitimate interests in the efficient and effective operation of our business. If we use subcontractors to provide our services, we take appropriate legal precautions as well as corresponding technical and organizational measures to ensure the protection of personal data in accordance with the relevant legal provisions.

Data Transfer to a Third Country or an International Organization

A “third country” refers to countries in which the GDPR is not directly applicable. This generally includes all countries outside the EU or the European Economic Area. No data will be transferred to a third country or an international organization without your consent or a legal basis.

Notice Regarding the Transfer of Data to the United States and Other Third Countries

Among other things, we use tools from companies based in the United States or other third countries that do not provide a level of data protection comparable to that of the EU. When these tools are active, your personal data may be transferred to these third countries and processed there. Please note that these countries cannot guarantee a level of data protection comparable to that of the EU. For example, U.S. companies are required to disclose personal data to law enforcement agencies, and you, as the data subject, would have no legal recourse against this. It therefore cannot be ruled out that U.S. authorities (e.g., intelligence agencies) may process, analyze, and permanently store your data located on U.S. servers for surveillance purposes. We have no influence over these processing activities.

Retention Period

Unless a more specific retention period is stated in this Privacy Policy, we will retain your personal data until the purpose for which it was collected no longer applies. If you submit a valid request for erasure or revoke your consent to data processing, your data will be erased unless we have other legally permissible grounds for retaining your personal data (e.g., retention periods under tax or commercial law); in the latter case, the data will be deleted once these grounds no longer apply.

Withdrawal of Your Consent to Data Processing

Certain data processing activities are only possible with your express consent. You may withdraw your previously given consent at any time. To do so, simply send an informal email. The withdrawal does not affect the lawfulness of the data processing that took place prior to the withdrawal.

Right to lodge a complaint with the competent supervisory authority

As a data subject, you have the right to lodge a complaint with the competent supervisory authority in the event of a data protection breach. The competent supervisory authority for data protection matters is the State Data Protection Commissioner of the federal state in which our company is based. The following link provides a list of data protection commissioners and their contact details: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Right to Data Portability

You have the right to have data that we process automatically—based on your consent or in fulfillment of a contract—provided to you or to a third party. The data will be provided in a machine-readable format. If you request that the data be transferred directly to another data controller, this will only be done to the extent that it is technically feasible.

Right to Access, Correction, Restriction, deletion

You have the right, at any time and in accordance with applicable legal provisions, to receive information free of charge regarding your stored personal data, the origin of the data, its recipients, and the purpose of data processing, as well as, where applicable, the right to have this data corrected, restricted, or deleted. In this regard, and for any other questions regarding personal data, you may contact us at any time using the contact information listed in the legal notice.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential information that you send to us as the website operator, our website uses SSL or TLS encryption. This means that data you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the “https://” in your browser’s address bar and the padlock icon in the browser bar.

Server Log Files

In server log files, the website provider automatically collects and stores information that your browser automatically transmits to us. This includes:

Page visited on our domain
Date and time of the server request
Browser type and browser version
Operating system used
Referrer URL
Hostname of the accessing computer
IP address

This data is not combined with any other data sources. The legal basis for data processing is Article 6(1)(b) of the GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.

2. Data Collection / Cookies

Cookies

We use cookies on our website. Cookies do not harm your computer and do not contain viruses. Cookies help make our website more user-friendly, effective, and secure. Cookies are small text files. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted at the end of your visit. Persistent cookies remain stored on your device until you delete them yourself or your web browser deletes them automatically. Cookies serve various purposes. Many cookies are technically necessary, as certain website features would not work without them (e.g., the shopping cart feature or the display of videos). Other cookies are used to analyze user behavior or display advertisements. Cookies that are necessary to carry out the electronic communication process (essential cookies), to provide certain features you have requested (functional cookies, e.g., for the shopping cart feature), or to optimize the website (e.g., cookies for measuring website traffic) are stored on the basis of Article 6(1)(f) of the GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies to ensure the technically error-free and optimized provision of its services. If consent to the storage of cookies has been requested, the relevant cookies are stored exclusively on the basis of this consent (Article 6(1)(a) of the GDPR); consent may be revoked at any time.

Borlabs Cookies

This website uses Borlabs Cookie, which sets a technically necessary cookie (borlabs-cookie) to store your cookie consent settings. Borlabs Cookie does not process any personal data. The borlabs-cookie stores the consent you provided when you first visited the website. If you wish to revoke this consent, simply delete the cookie from your browser. When you visit or reload the website, you will be asked again for your cookie consent.

Contact form

Data submitted via the contact form, including your contact details, will be stored in order to process your request and to be available for follow-up questions. This data will not be shared without your consent. The processing of the data entered in the contact form is based solely on your consent (Art. 6(1)(a) GDPR). You may withdraw your consent at any time. To do so, simply send an informal email. The lawfulness of the data processing operations carried out up until the withdrawal of consent remains unaffected by the withdrawal. Data submitted via the contact form will remain with us until you request that we delete it, revoke your consent to its storage, or there is no longer a need to store the data. Mandatory legal provisions—in particular, retention periods—remain unaffected.

3. Plug-ins / Widgets / Tools / External Content

External Content

We use widgets, plugins, or third-party content on our website. Use of the service is based on your consent in accordance with Art. 6(1)(a) of the GDPR and § 25(1) of the TDDDG. This external content is not loaded or displayed until you accept all cookies or actively consent to the third-party content. In this case, the respective provider remains responsible for ensuring that the service operates in compliance with data protection regulations. For details on data collection, as well as your rights and settings options, please refer to the respective privacy notices.

4. Google Services

Google Web Fonts

This site uses so-called web fonts provided by Google to ensure consistent font display. The Google Fonts are installed locally. No connection is made to Google’s servers.

Google Maps

This site uses the Google Maps mapping service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To use the features of Google Maps, it is necessary to store your IP address. This information is generally transmitted to a Google server in the United States and stored there. The provider of this site has no influence over this data transmission. The IP address is only transmitted to Google if the website visitor consents to the transmission. We use Google Maps to ensure that our online offerings are presented in an appealing way and to make it easy for users to find the locations listed on our website. The use of Google Maps is based on your consent in accordance with Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG. For more information on how user data is handled, please see Google’s Privacy Policy: https://policies.google.com/privacy.

Google reCAPTCHA

To protect our contact and cancellation forms from spam and abusive automated use, we use “Google reCAPTCHA” (Version 3). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. reCAPTCHA uses usage behavior (e.g., IP address, time spent on the website, mouse movements) to determine whether an entry is made by a human or by an automated program. This data is transmitted to Google; transmission to the United States is possible. Google is certified under the EU-U.S. Data Privacy Framework. The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in protecting our website from spam and abusive requests. For more information, please see Google’s Privacy Policy: https://policies.google.com/privacy and its Terms of Service: https://policies.google.com/terms.

We reserve the right to amend the Privacy Policy to adapt it to changes in the legal landscape or to changes in the service and data processing. However, this applies only to statements regarding data processing. If user consent is required, or if parts of the Privacy Policy contain provisions governing the contractual relationship with users, changes will be made only with the users’ consent.