Privacy policy

2. The main points at a glance

This website uses no tracking, analytics tools, advertising cookies or social media plugins. We only process what is technically necessary to run the website (server logs and, in certain cases, a session cookie), along with anything you choose to tell us (by email or telephone). Google Maps is not embedded; we simply provide a link. A connection to Google is only made when you click that link.

3. Hosting and server logs

The website is hosted on a server provided by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxemburg (AWS). The server is located in a data centre in Ireland (EU). We have a data processing agreement with AWS under Article 28 GDPR.

Whenever you visit the website, the server automatically records the following in log files: your device’s IP address, the date and time, the page requested, the amount of data transferred, the browser and operating system used, and the page you visited previously (referrer). We need this data to deliver the website, identify faults and prevent attacks. The legal basis is our legitimate interest in keeping the website secure and running reliably (Article 6(1)(f) GDPR). Logs are deleted within seven days at the latest and are not combined with other data. Backup copies of the server and database, which may contain such data, are overwritten within seven days at the latest. To protect the website’s administration area, failed login attempts are stored with the IP address for no more than 24 hours.

4. Cookies

This website only sets a cookie when it is technically necessary: when you change the language using the language menu or log in to the administration area as an operator. This is a session cookie with a random identifier, which retains your chosen language or login during your visit and is deleted when you close your browser. It is not used to recognise you on later visits or to track you. No third-party cookies are set. Storage is strictly necessary for the service you have requested (Section 25(2) No. 2 TDDDG); processing is based on Article 6(1)(f) GDPR. Consent through a cookie banner is therefore not required.

5. Contact by email or telephone

If you contact us by email or telephone, we process the information you give us (such as your name, contact details, travel dates and enquiry) so that we can answer your enquiry and handle a booking. The legal basis is Article 6(1)(b) GDPR (steps towards entering into, or fulfilment of, an accommodation contract), or Article 6(1)(f) GDPR for other enquiries (our interest in responding). You provide your details voluntarily; without them, we cannot deal with your enquiry. We delete the data once the matter has been dealt with, unless statutory retention requirements apply (for example, under tax or commercial law). Please note that unencrypted emails could be read by third parties during transmission.

6. Google Maps (link only)

On the home page and the “Directions & Contact” page, we show our own overview map as an image hosted on our server. No Google Maps map is embedded. The “Open in Google Maps” button is a link: only when you click it does Google Maps open with our listing in a new window, and your browser establishes a connection to Google. From that point onwards, Google’s privacy policy applies (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland): https://policies.google.com/privacy. Unless you click the link, no data is sent to Google. You can also find your way here without Google Maps; our address and directions are given on the page.

7. Booking through Booking.com and other external links

The booking button takes you to Booking.com (Booking.com B.V., Oosterdokskade 163, 1011 DL Amsterdam, Niederlande). This is a link, not an embedded booking tool: unless you click it, no data is sent to Booking.com. Once you click it, Booking.com’s privacy policy applies. If you book a room there, Booking.com sends us the data needed for the booking (name, contact details and travel dates); we process it to fulfil the accommodation contract (Article 6(1)(b) GDPR) and retain it for the statutory periods.

Links to restaurants, wineries and other websites are also simply links. The privacy policies of the respective providers apply to the linked pages.

8. Fonts, scripts and photos

All fonts, scripts and images on this website are stored on our own server. No content is loaded from Google Fonts or other third-party servers.

9. Encryption

This website uses an encrypted connection (HTTPS/TLS) throughout, indicated by the padlock symbol in your browser’s address bar.

10. Your rights

You have the right to access the data we hold about you (Article 15 GDPR), to have it corrected (Article 16), erased (Article 17), or its processing restricted (Article 18), and to data portability (Article 20). You may withdraw any consent you have given at any time, with effect for the future (Article 7(3) GDPR).

Right to object: Where we process data on the basis of our legitimate interest (Article 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation (Article 21 GDPR).

You may also lodge a complaint with a data protection supervisory authority (Article 77 GDPR). The authority responsible for us is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, www.baden-wuerttemberg.datenschutz.de.

11. No sharing with others, no automated decisions

We only share your data with the recipients named in this policy (AWS as our hosting provider, Booking.com in connection with a booking), or where we are legally required to do so. We do not use automated decision-making or profiling.

12. Language versions and changes

Our legal notice and privacy policy are available in several languages; the German version is binding. We update this policy when the law or our website changes; the version published here at any given time applies.