Privacy Policy

1. Responsible body

The person responsible for processing your personal data on this website is:

If you have any questions about data protection or exercising your rights, you can contact us using these contact details.

2. Hosting and access data

Our website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur. IONOS receives the access data required for delivery and secure operation. This includes your IP address, the page or file requested, the time of access, browser and device information and, if applicable, the previously visited page.

The legal basis is Art. 6 paragraph 1 lit. f GDPR. Our legitimate interest lies in the reliable provision and technical optimisation of the website, as well as the detection and prevention of technical malfunctions and attacks. IONOS receives the data and acts as a technical service provider.

According to IONOS, web hosting access data is anonymised when collected and stored for eight weeks. For this product, IONOS states that no data is transferred to third countries outside the EU. Information from IONOS about web hosting.

IONOS WebAnalytics also produces statistical reports from automatically generated server log files, for example on page views, referring pages, browsers and devices. These reports provide a statistical overview and support the technical optimisation of our website. According to IONOS, this does not use cookies, and IP addresses are anonymised immediately after transmission. We do not embed additional analytics or marketing trackers on our pages. More information about IONOS WebAnalytics.

3. Contact form

If you use our contact form, we will process your information to answer your request. All you need is your email address and your message. First name, last name, mobile number, street, postal code, city, arrival, departure and number of people are voluntary. Without an email address and message, we cannot process the request via this form.

If the request relates to a booking or the preparation of a contract, processing takes place in accordance with Art. 6 paragraph 1 lit. b GDPR. For other inquiries, Art. 6 paragraph 1 lit. f GDPR is the basis; Our legitimate interest is to answer your request.

By not pre-selecting the data protection box, you confirm that you have read these notices. It is a read receipt; The processing of your request is not based on additional consent. The acknowledgment, version of this statement and timing will be provided along with the request. Both confirmation fields must be checked before submitting.

The request will be sent to us and delivered by email via IONOS. IONOS SE (address see section 2) receives the content and communication data required to process, send and store the message. We do not use your information for advertising or publish it.

We delete completed inquiries as soon as they have been processed and there are no longer any necessary follow-up questions, legal retention obligations or reasons to assert or defend against legal claims. If an inquiry becomes part of business documents that must be retained, further storage is based on Art. 6 paragraph 1 lit. c GDPR.

Protection against automated requests

The form contains the mandatory confirmation “I am not a robot”, a hidden check field and a limit on repeated enquiries. The checkbox is a self-declaration, not technical proof that someone is human. No external CAPTCHA service is loaded. To prevent misuse and duplicate delivery, the form server uses a secret server key to generate separate verification values from the IP address, email address and enquiry. These pseudonymous values are stored together with timestamps and delivery status in a protected server directory. The IP address, email address and message content are not stored in plain text in this verification file; the IP address is also not included in the contact email. Rate limiting and duplicate detection use time windows of up to 24 hours. Expired entries are removed the next time the verification data is saved. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is to protect the form against automated misuse.

To the contact form

4. Inquiries by email and telephone

If you contact us by email or telephone, we will process your request and the personal data contained therein to process your request. If you have any questions about a booking or the preparation of a contract, this is done on the basis of Art. 6 paragraph 1 lit. b GDPR. For other inquiries, Art. 6 paragraph 1 lit. f GDPR is the basis; Our legitimate interest lies in answering your request.

We use IONOS for sending emails and storing mailboxes. IONOS SE receives message content, sender and recipient addresses, and technical transmission data. The storage and deletion criteria for contact enquiries in section 3 apply. Statutory retention obligations remain unaffected.

5. Cookies and site elements

We do not use any analysis or marketing cookies on these pages. Your expressly chosen language will be saved in your browser's local storage so that it can be used again the next time you visit. The “Cookie Settings” window provides information about the current range of functions.

The reviews displayed as well as the logos and images are provided as local content. No external rating widgets from Tripadvisor, TrustYou or HolidayCheck are reloaded. Font appearance uses fonts available on your device; No font files are retrieved from Google servers for this purpose.

If storage or access on your device is absolutely necessary for an expressly desired function, the exception to the consent requirement is governed by Section 25 Paragraph 2 TDDDG. Your consent would be required beforehand for any further storage and access requiring consent.

Language and country code

We remember the language you explicitly choose in your browser’s local storage. You can change it at any time using the globe icon. The main homepage stays in German. There we suggest a language based on your saved choice or browser language; you only switch by clicking. If your browser language cannot be determined, our server identifies the country from your IP address using a local DB-IP country database. Your IP address is not sent to DB-IP or another geolocation service. The result is used only for the language suggestion and is not stored as visitor statistics. For unsupported languages or failed country lookups, we suggest English.

6. External links and booking

Our website links, among other things, to Google Maps, rating portals, Facebook and Instagram. These offers are integrated as links. When you simply access our pages, no maps, social media plugins or rating widgets from these providers are loaded.

If you open an external link, you will leave our website. On the target page, the respective provider can process personal data, such as your IP address and browser information. Its data protection information and, if necessary, its own cookie settings apply there.

Our booking buttons open the page Book. The booking tool from Myallocator / Cloudbeds is loaded there as an iFrame. A connection is established to the provider, who receives, among other things, your IP address and browser information. Booking, contact and payment details entered in the booking tool are processed in the provider’s system. Further information, including possible international data transfers, can be found in the Cloudbeds privacy policy. The booking tool does not load on the remaining information pages. We process bookings and booking requests on the basis of Art. 6 paragraph 1 lit. b GDPR.

7. Your privacy rights

In accordance with the legal requirements, you have the following rights:

• Information: You can request information about the data processed about you, its origin, recipients and processing purposes (Article 15 GDPR).
• Correction: You can correct incorrect personal data and have incomplete data completed (Art. 16 GDPR).
• Deletion: You can request the deletion of your data, provided there are no legal exceptions (Article 17 GDPR).
• Limitation: Under the legal requirements, you can have the processing restricted, for example during the examination of disputed data (Art. 18 GDPR).
• Data portability: If the requirements are met, you can receive data processed automatically on the basis of consent or a contract in a common, machine-readable format (Article 20 GDPR).

Objection to processing

If processing is based on Article 6 paragraph 1 lit. e or f GDPR, you can object based on your particular situation. We will then no longer process the data concerned unless we can demonstrate overriding compelling legitimate reasons or require the processing to assert, exercise or defend legal claims. You can object to processing for direct advertising at any time (Art. 21 GDPR).

If you have given us your consent for another purpose, you can revoke it at any time in the future. The lawfulness of processing until revocation remains unaffected. When it comes to contact requests, we do not make exclusively automated decisions with legal or comparable significant effects and do not create corresponding profiles.

Complaint to a supervisory authority

You may lodge a complaint with a data protection supervisory authority, particularly at your usual place of residence, your workplace or the location of the suspected breach. For private businesses in Bavaria, the responsible authority is the Bavarian State Office for Data Protection Supervision responsible.

8. Storage and security

We only process personal data for as long as the respective purpose requires it. They will then be deleted unless there are legal retention requirements or legitimate reasons for further retention. For contact inquiries, the processing of the concern and necessary follow-up questions are particularly important.

To protect transmission, the published website is served via HTTPS. We also use technical protective measures for email communication. However, complete protection against all risks when communicating on the Internet cannot be guaranteed.

The contact details published in the legal notice and here may not be used to send unsolicited advertising. We expressly object to such use.

9. Video surveillance in the hostel

Responsible is Dominik Ostheimer (contact details in section 1). Video surveillance serves to protect guests and property as well as to investigate specific security incidents. The legal basis is Art. 6 paragraph 1 lit. f GDPR; The prerequisite is the necessity and a balancing of interests for each covered area.

The monitored, signposted access and shared areas are the entrance, 1st-floor corridor and reception, corridor in the annex by the lounge, kitchen, 2nd-floor corridor, basement corridor and shared laundry/luggage room in the basement. Recording is triggered by movement and has no audio.

The cameras are connected through a local wired network (LAN). Recordings are stored locally on our Reolink system.

Recordings are automatically deleted no later than 72 hours after recording, regardless of whether the storage is full. Only where a specific incident occurs may necessary excerpts be retained separately to investigate it and establish, exercise or defend legal claims; they are deleted when this purpose and any statutory obligations no longer apply.

Access is restricted to the authorised person responsible for data protection within the hostel and takes place only for a specific reason. Disclosure is considered only where necessary and lawful to address such an incident, for example to the competent investigating authorities.

The rights from section 7 also apply to this processing, in particular information and objection in accordance with Art. 21 GDPR. The designated areas must be clearly visible before entering. This website text does not replace the necessary on-site information.

10. Guest WiFi

Guest WiFi is available in the hostel via sorglosinternet GmbH, Ostpreußendamm 43, 12207 Berlin. Guest WiFi is a separate offer and is not activated by visiting this website.

Internet traffic from the guest network is routed to the Internet through sorglosinternet servers. According to the provider, guests do not need to register; it does not store connection data or record browsing traffic.

The provider’s online administration supplies technical usage statistics on the number of connected devices and the amounts of data transferred.

Information from the provider about the Wi-Fi service:

• sorglosinternet terms and conditions
• Guest Wi-Fi service description
• Information about usage statistics

Privacy contact for the Wi-Fi service: datenschutz@sorglosinternet.de