Privacy Policy

1. Responsible body

The person responsible for processing your personal data on this website is:

If you have any questions about data protection or exercising your rights, you can contact us using these contact details.

2. Hosting and access data

Our website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur. IONOS receives the access data required for delivery and secure operation. This includes your IP address, the page or file requested, the time of access, browser and device information and, if applicable, the previously visited page.

The legal basis is Art. 6 paragraph 1 lit. f GDPR. Our legitimate interest lies in the reliable provision of the website as well as the detection and defense of technical malfunctions and attacks. IONOS is the recipient of the data and is used as a technical service provider.

After the Information from IONOS about web hosting Visitor data is anonymized when collected and stored for eight weeks; IONOS does not mention any transfer to third countries outside the EU for this product. We do not use visitor statistics or analysis tools to evaluate your visit.

3. Contact form

If you use our contact form, we will process your information to answer your request. All you need is your email address and your message. First name, last name, mobile number, street, postal code, city, arrival, departure and number of people are voluntary. Without an email address and message, we cannot process the request via this form.

If the request relates to a booking or the preparation of a contract, processing takes place in accordance with Art. 6 paragraph 1 lit. b GDPR. For other inquiries, Art. 6 paragraph 1 lit. f GDPR is the basis; Our legitimate interest is to answer your request.

By not pre-selecting the data protection box, you confirm that you have read these notices. It is a read receipt; The processing of your request is not based on additional consent. The acknowledgment, version of this statement and timing will be provided along with the request. Both confirmation fields must be checked before submitting.

The request will be sent to us and delivered by email via IONOS. IONOS SE (address see section 2) receives the content and communication data required to process, send and store the message. We do not use your information for advertising or publish it.

We delete completed inquiries as soon as they have been processed and there are no longer any necessary follow-up questions, legal retention obligations or reasons to assert or defend against legal claims. If an inquiry becomes part of business documents that must be retained, further storage is based on Art. 6 paragraph 1 lit. c GDPR.

Protection against automated requests

The form contains the mandatory confirmation “I am not a robot”, a hidden check field and a limit on repeated requests. The box is a self-certification and not a technical proof of human identity. No external CAPTCHA service is loaded. To prevent misuse, the form server temporarily processes the IP address in the main memory for a period of ten minutes. Expired entries will be cleaned up with the next request and deleted at the latest when the service is restarted. They will not be included in the contact email. The legal basis is Art. 6 paragraph 1 lit. f GDPR; Our legitimate interest is to protect the form from automated misuse.

To the contact form

4. Inquiries by email and telephone

If you contact us by email or telephone, we will process your request and the personal data contained therein to process your request. If you have any questions about a booking or the preparation of a contract, this is done on the basis of Art. 6 paragraph 1 lit. b GDPR. For other inquiries, Art. 6 paragraph 1 lit. f GDPR is the basis; Our legitimate interest lies in answering your request.

We use IONOS for sending emails and storing mailboxes. IONOS SE receives message content, sender and recipient addresses, and technical transmission data. The storage and deletion criteria for contact enquiries in section 3 apply. Statutory retention obligations remain unaffected.

5. Cookies and site elements

We do not use any analysis or marketing cookies on these pages. Your expressly chosen language will be saved in your browser's local storage so that it can be used again the next time you visit. The “Cookie Settings” window provides information about the current range of functions.

The reviews displayed as well as the logos and images are provided as local content. No external rating widgets from Tripadvisor, TrustYou or HolidayCheck are reloaded. Font appearance uses fonts available on your device; No font files are retrieved from Google servers for this purpose.

If storage or access on your device is absolutely necessary for an expressly desired function, the exception to the consent requirement is governed by Section 25 Paragraph 2 TDDDG. Your consent would be required beforehand for any further storage and access requiring consent.

Language and country code

We remember the language you explicitly choose in your browser’s local storage. You can change it at any time using the globe icon. The main homepage stays in German. There we suggest a language based on your saved choice or browser language; you only switch by clicking. If your browser language cannot be determined, our server identifies the country from your IP address using a local DB-IP country database. Your IP address is not sent to DB-IP or another geolocation service. The result is used only for the language suggestion and is not stored as visitor statistics. For unsupported languages or failed country lookups, we suggest English.

6. External links and booking

Our website links, among other things, to Google Maps, rating portals, Facebook and Instagram. These offers are integrated as links. When you simply access our pages, no maps, social media plugins or rating widgets from these providers are loaded.

If you open an external link, you will leave our website. On the target page, the respective provider can process personal data, such as your IP address and browser information. Its data protection information and, if necessary, its own cookie settings apply there.

Our booking buttons open the page Book. The booking tool from Myallocator / Cloudbeds is loaded there as an iFrame. A connection is established to the provider, who receives, among other things, your IP address and browser information. Booking, contact and payment details entered in the booking tool are processed in the provider’s system. Further information, including possible international data transfers, can be found in the Cloudbeds privacy policy. The booking tool does not load on the remaining information pages. We process bookings and booking requests on the basis of Art. 6 paragraph 1 lit. b GDPR.

7. Your privacy rights

In accordance with the legal requirements, you have the following rights:

• Information: You can request information about the data processed about you, its origin, recipients and processing purposes (Article 15 GDPR).
• Correction: You can correct incorrect personal data and have incomplete data completed (Art. 16 GDPR).
• Deletion: You can request the deletion of your data, provided there are no legal exceptions (Article 17 GDPR).
• Limitation: Under the legal requirements, you can have the processing restricted, for example during the examination of disputed data (Art. 18 GDPR).
• Data portability: If the requirements are met, you can receive data processed automatically on the basis of consent or a contract in a common, machine-readable format (Article 20 GDPR).

Objection to processing

If processing is based on Article 6 paragraph 1 lit. e or f GDPR, you can object based on your particular situation. We will then no longer process the data concerned unless we can demonstrate overriding compelling legitimate reasons or require the processing to assert, exercise or defend legal claims. You can object to processing for direct advertising at any time (Art. 21 GDPR).

If you have given us your consent for another purpose, you can revoke it at any time in the future. The lawfulness of processing until revocation remains unaffected. When it comes to contact requests, we do not make exclusively automated decisions with legal or comparable significant effects and do not create corresponding profiles.

Complaint to a supervisory authority

You may lodge a complaint with a data protection supervisory authority, particularly at your usual place of residence, your workplace or the location of the suspected breach. For private businesses in Bavaria, the responsible authority is the Bavarian State Office for Data Protection Supervision responsible.

8. Storage and security

We only process personal data for as long as the respective purpose requires it. They will then be deleted unless there are legal retention requirements or legitimate reasons for further retention. For contact inquiries, the processing of the concern and necessary follow-up questions are particularly important.

To protect transmission, the published website is served via HTTPS. We also use technical protective measures for email communication. However, complete protection against all risks when communicating on the Internet cannot be guaranteed.

The contact details published in the legal notice and here may not be used to send unsolicited advertising. We expressly object to such use.

9. Video surveillance in the hostel

Prepared note: The following information is prepared for video without sound and automatic deletion no later than 72 hours. Before publication, the actual camera settings and on-site information must match.

Responsible is Dominik Ostheimer (contact details in section 1). Video surveillance serves to protect guests and property as well as to investigate specific security incidents. The legal basis is Art. 6 paragraph 1 lit. f GDPR; The prerequisite is the necessity and a balancing of interests for each covered area.

Marked access and common areas are recorded: entrance area, hallway in 1. First floor and reception area, hallway in the extension near the lounge, kitchen, hallway in the 2. First floor, basement hallway and the shared laundry and luggage room in the basement. Motion-dependent image recordings are created; Continuous recording and sound recording are not provided for this configuration.

Automatic deletion is planned no later than 72 hours after recording, regardless of whether the memory is full. Only in the case of a specific incident may the necessary excerpts for the clarification of the incident and the assertion or defense of legal claims be saved separately; they will be deleted as soon as this purpose and any legal obligations no longer apply.

Access is only permitted to authorized persons and only occurs for a specific reason. Disclosure will only be considered if it is legally necessary and permissible for the processing of such an incident, for example to the responsible investigative authorities.

The rights from section 7 also apply to this processing, in particular information and objection in accordance with Art. 21 GDPR. The designated areas must be clearly visible before entering. This website text does not replace the necessary on-site information.

10. Guest WiFi

Guest WiFi is available in the hostel via sorglosinternet GmbH, Ostpreußendamm 43, 12207 Berlin. Guest WiFi is a separate offer and is not activated by visiting this website.

You receive the relevant terms of use and privacy information for WiFi access when you connect to the guest network. Please read them before use. Details of the provider and how to contact them are in the Imprint from carefreeinternet. The information there on the provider website does not replace the information on the specific guest WiFi.