Privacy policy

1. Controller

The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

2. Hosting and server log files

This website runs on a server operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, in a data centre within the European Union. A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner.

When you open the website, your browser automatically transmits technical data to the server. This includes your IP address, the date and time of the request, the page requested, the HTTP status code, the amount of data transferred, the page visited before (referrer) as well as your browser and operating system. This data is stored in server log files.

We need this data to deliver the website, find errors and defend against attacks. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). The log files are deleted after 7 days at the latest. The data is neither merged with other data nor evaluated for advertising purposes.

3. Encryption

The connection to this website is encrypted with TLS. You can tell by the “https://” in your browser’s address bar.

4. Cookies, fonts and third-party content

We set no cookies and store nothing in your browser. All fonts and images are hosted on our own server. No third-party content such as Google Fonts, map or video services is loaded when you open a page.

5. Contact and reservations

If you call us, send an e-mail or write to us on Instagram, we process the details you give us, for example your name, your phone number, the date you would like and the number of people. We use them only to answer your enquiry or manage your reservation.

For reservations the legal basis is the performance of pre-contractual measures (Art. 6(1)(b) GDPR); for other enquiries it is our legitimate interest in replying (Art. 6(1)(f) GDPR). We delete the data as soon as it is no longer needed, unless statutory retention periods apply.

6. Links to Instagram, Facebook and Google Maps

This website contains plain links to our Instagram profile, our Facebook page and to route planning on Google Maps. These are not embedded contents: as long as you do not click, no data is transmitted to these providers.

Only when you follow a link do you leave our website. The privacy terms of the respective provider then apply: for Instagram and Facebook, Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (Instagram privacy policy, Facebook privacy policy); for Google Maps, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google privacy policy).

7. Your rights

You have the right at any time to

• access to the data we hold about you (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure of your data (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR) and
• objection to processing based on our legitimate interest (Art. 21 GDPR).

An informal message to the address above is enough for any of these requests.

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Saxon Data Protection and Transparency Commissioner, Postfach 11 01 32, 01330 Dresden, www.datenschutz.sachsen.de.