Privacy Policy

1. Overview

Controller:
Nägele GmbH – Bayerischer Hof Kempten
Füssener Str. 96
87437 Kempten, Germany
Phone: +49 (0) 831 5718-0
E-Mail: hotel@bayerischerhof-kempten.de

Supervisory Authority:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
www.lda.bayern.de

Your rights under GDPR:

Right of access, rectification, erasure, restriction of processing, and data portability
Right to withdraw consent at any time
Right to object to certain processing activities
Right to lodge a complaint with a supervisory authority

2. General Information

We process personal data in compliance with the GDPR and the German Telecommunications Telemedia Data Protection Act (TTDSG). Please note that data transmission over the internet (e.g., via email) may be subject to security gaps.

3. Cookies & Consent Banner

Our website uses a cookie consent tool. When you first visit our site, you can decide whether to allow only necessary cookies or also statistics and marketing cookies.

Necessary: Essential for website functionality.
Statistics: Google Analytics (user behavior).
Marketing: Facebook/Instagram plugins, Google Maps.

Legal basis: Your consent (Art. 6 (1)(a) GDPR, §25 (1) TTDSG).
You can adjust or withdraw your consent at any time via the consent tool.

4. Data Collection and Processing

Server Log Files

Automatically collected: browser type, operating system, IP address, time of access, referrer URL.
Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in security and error analysis).

Contact (form, phone, email)

Data is processed for handling your request or to fulfill a contract.
Legal basis: Art. 6 (1)(b) GDPR (contract) and/or Art. 6 (1)(f) GDPR (general inquiries).

Booking Engine

We use an external provider to process bookings.
Data processed: name, contact details, payment details.
Legal basis: Art. 6 (1)(b) GDPR (contract).

5. Analytics and Tracking Tools

Google Analytics

Provider: Google Ireland Limited, Dublin, Ireland
Purpose: Website usage analysis
Special feature: IP anonymization enabled
Legal basis: Consent (Art. 6 (1)(a) GDPR)
Data transfer: USA (Standard Contractual Clauses)
Retention: 14 months

6. Plugins and Tools

Google Maps

Provider: Google Ireland Limited, Dublin, Ireland
Purpose: Display of interactive maps
Legal basis: Consent (Art. 6 (1)(a) GDPR)

Facebook / Instagram Plugins

Provider: Meta Platforms Ireland Ltd., Dublin, Ireland
Purpose: Social media integration and marketing
Legal basis: Consent (Art. 6 (1)(a) GDPR)

TrustYou (Guest Reviews)

Provider: TrustYou GmbH, Munich, Germany
Purpose: Display of guest reviews
Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in online presence)

7. Newsletter (Smarthost)

We use Smarthost GmbH, Dornbirn, Austria to send our newsletters.
Data processed: email address, name (if provided), sign-up data.
Legal basis: Consent (Art. 6 (1)(a) GDPR).
You may withdraw your consent at any time via the unsubscribe link in the newsletter.

8. Data Retention

We only retain personal data for as long as necessary to fulfill the intended purpose or as required by statutory retention obligations. Data is then deleted or anonymized.

Google Analytics deactivation.

For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at: https://support.google.com/analytics/answer/6004245?hl=en.

Contract data processing

We have executed a contract data processing agreement with Google and are implementing the stringent provisions of the German data protection agencies to the fullest when using Google Analytics.

Archiving period

Data on the user or incident level stored by Google linked to cookies, user IDs or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) will be anonymized or deleted after 14 month. For details please click the following link: https://support.google.com/analytics/answer/7667196?hl=en

5. Newsletter

Newsletter data

If you would like to subscribe to the newsletter offered on this website, we will need from you an e-mail address as well as information that allow us to verify that you are the owner of the e-mail address provided and consent to the receipt of the newsletter. No further data shall be collected or shall be collected only on a voluntary basis. We shall use such data only for the sending of the requested information and shall not share such data with any third parties.

The processing of the information entered into the newsletter subscription form shall occur exclusively on the basis of your consent (Art. 6 Sect. 1 lit. a GDPR). You may revoke the consent you have given to the archiving of data, the e-mail address and the use of this information for the sending of the newsletter at any time, for instance by clicking on the „Unsubscribe“ link in the newsletter. This shall be without prejudice to the lawfulness of any data processing transactions that have taken place to date.

The data deposited with us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter or the newsletter service provider and deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored for other purposes with us remain unaffected.

After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist to prevent future mailings. The data from the blacklist is used only for this purpose and not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). The storage in the blacklist is indefinite. You may object to the storage if your interests outweigh our legitimate interest.