Website Owner:
Monika & Franz Erhardt
Alleestraße 28
82467 Garmisch-Partenkirchen

Data protection officer within the meaning of the GDPR:
info@werdenfelserei.de

Value added tax ID: DE 309800517

// Legal information

The owner of this website is responsible for the processing of your personal data. You can find our legal business data in our legal notice. We attach great importance to the protection of your personal data and process it exclusively in accordance with the statutory data protection regulations and this privacy policy. It is generally possible to use our website without providing personal data. Insofar as personal data – e.g. contact data such as name, address or e-mail address – is collected on our website, this is always done on a voluntary basis as far as possible. 

// WEBHOSTING & DATA PROCESSING

This website is hosted by the external service provider IONOS, based in Montabaur, Germany. Personal data collected on this website is stored on the hoster’s servers. This may include IP addresses, contact requests, meta and communication data, website access and other data generated via a website.

We collect the data listed in order to ensure a smooth connection to the website and the technically error-free provision of our services. The processing of this data is absolutely necessary in order to make the website available to you. The legal basis for the processing of the data is our legitimate interest in the correct presentation and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR.

We have concluded an order processing contract with the provider in accordance with the provisions of Art. 28 GDPR, in which we oblige the provider to protect our customers’ data and not to pass it on to third parties.

Your personal data is processed with the support of processors, such as web hosts and email newsletter delivery services. The processors are obliged to protect your personal data and may not process personal data for any purpose other than to provide our own services. Your personal data will only be passed on to typical business service providers such as banks, tax consultants or shipping service providers, etc.

// Server log files

When you visit our websites, it is technically necessary for data to be transmitted to our web server via your Internet browser. The following data is recorded during an ongoing connection for communication between your internet browser and our web server:

Date and time of the request
Name of the requested file
Page from which the file was requested
Access status
Web browser and operating system used
(Full) IP address of the requesting computer
Amount of data transferred

We collect the data listed in order to ensure a smooth connection to the website and to enable users to use our website conveniently. The log file is also used to evaluate system security and stability as well as for administrative purposes. The legal basis for the temporary storage of data and log files is Art. 6 (1) (f) GDPR.

For reasons of technical security, in particular to defend against attempted attacks on our web server, this data is stored by us for a short time. This data does not allow us to identify individual persons. After seven days at the latest, the data is anonymized by shortening the IP address at domain level so that it is no longer possible to establish a link to the individual user. The data may also be processed in anonymized form for statistical purposes. At no time is this data stored together with other personal data of the user, compared with other databases or passed on to third parties.

// SSL encryption

Our site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as bookings, orders or inquiries that you send to us. You can recognize the encrypted connection by the fact that the URL of the website is displayed with “https” at the beginning. The small lock symbol in your browser line – i.e. where you enter the URL – is another indicator of a secure connection. Active SSL encryption ensures that the data you enter, which is then transmitted to us, cannot be read by third parties.

// Contact form

To send our contact form, you must give your consent to the processing of the personal data you have entered. This is because some personal data such as name, address, contact and communication data such as telephone number and e-mail address are collected so that they can be used to process and answer your request and for possible follow-up questions. There is no legal or contractual obligation to provide personal data. If you do not consent to the provision of personal data, the only consequence is that your request cannot be transmitted to us and subsequently processed. Of course, you have the right to withdraw your consent at any time by sending us a written message. Data processing is carried out in accordance with Art. 6 para. 1b GDPR.

// Direct booking via the website

Personal data requested by us in connection with a room booking will only be stored for as long as is necessary for the execution of the contract and any subsequent contract-related correspondence (usually one year) or, in the case of documents relevant under commercial and/or tax law that contain personal data, for as long as the statutory periods of the German Commercial Code and the German Fiscal Code provide for the retention of these documents (usually 6 to 10 years). The processing and storage of your personal data is based on Article 6 (1b) GDPR as the legal basis. We also process your booking data in accordance with Art. 6 para. 1f GDPR on the basis of our legitimate interests in fraud prevention, the enforcement of our legal claims, accounting and risk management purposes. In accordance with Art. 6 para. 1c GDPR to fulfill legal obligations, e.g. to comply with retention obligations under commercial and tax law or to fulfill obligations to disclose data due to a legally binding court order or official order.

// Newsletter

By subscribing and ticking the associated data protection provisions, you consent to the processing of the personal data you have entered for the purpose of informing you about our current offers by means of an e-mail newsletter until revocation or objection. There is no legal or contractual obligation to provide personal data. If you do not consent to the provision of personal data, the only consequence is that you will not receive an e-mail newsletter from us. Of course, you have the right to withdraw your consent at any time by sending us a written message or by clicking on the unsubscribe link in the email newsletter. Data processing is carried out in accordance with Art. 6 para. 1b GDPR

// COOKIES

Yes, like almost all service providers, we also use cookies on this website. Cookies make websites more user-friendly and efficient for the user. A cookie is a small text file that is placed on your computer or mobile device by your browser and enables your computer or device to be recognized across different websites. If you visit our website again later, the website can read the data of the previously stored cookie and thus determine, for example, whether you have already visited our website at an earlier time and which areas of the website you were particularly interested in. You can find more information on cookies on the website of Verbraucherzentrale.de

Changing the cookie settings
As a user of our website, you can independently determine how your web browser handles cookies, which cookies it allows or rejects. Depending on your web browser, you can make this adjustment in the settings of your web browser. If you have restricted the use of cookies yourself, you may no longer be able to use all the functions of this website to their full extent.

We use these cookies on our website

• Borlabs cookies: Storage of consent to the use of cookies on our website
• Google: Storage of user data in connection with the website statistics software Google Analytics by Google. Further information can be found at Google-Analytics.
• Meta: Storage of user data in connection with the Meta pixel – formerly Facebook & Instagram. For more information, see Meta for Developer and the Meta Cookie Hinweisen.
• FloDesk: Storage of user data in connection with email newsletter registration. You can find more information at FloDesk

// Google Analytics

This website uses Google Analytics, a web analytics service provided by Google IncLLC. (hereinafter: Google). The legal basis is our legitimate interest pursuant to Art. 6 (1f) GDPR in analyzing and evaluating the use of our website. When our website is accessed, a connection to Google’s servers is established via software and data is transmitted to Google servers, some of which are located in the USA. Google Analytics also uses cookies to store information about the website user and to analyze the use of the website by website users. However, due to the activation of IP anonymization on these websites, Google’s IP address will be shortened beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. You can find detailed information on the handling of user data by Google Analytics in Google’s privacy policy.

Use of Google web fonts
For the purpose of demand-oriented design and optimization of our pages, we use external fonts integrated via Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (“Google”) on the basis of Art. 6 para. 1f GDPR. Your Internet browser automatically establishes a connection to Google’s servers, during which the above-mentioned data is transferred from your browser to Google. If you have a Google user account and are logged in to Google, your data may be assigned to your account by Google. However, we have no influence on this data transfer and further data processing by Google. Further information on the purpose and scope of data collection and processing by Google, your rights and setting options to protect your privacy can be found here: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework Google

Deactivate Analytics
You can generally prevent the collection of your user data on our website by setting “do not track” in your web browser. Our website takes into account the “do not track” signal that your web browser then sends to all websites. You can generally prevent the collection of your user data by Google Analytics on all websites. To do this, you must download and install the browser plugin available at the following link:

• Download the browser extension.
• Prevent the collection of your user data by Google Analytics on this website only.
• Set an opt-out cookie that prevents the collection of your data on future visits to our website -> deactivate Google Analytics

// Meta Pixel & other meta marketing services and functions

We integrate the “Meta Pixel” of Meta Inc, 1 Hacker Way, Menlo Park, CA 94025, USA, on our websites.

In the European Union (EU) and the European Economic Area (EEA), the service is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

// Google ReCaptcha

We use the reCAPTCHA service from Google Inc (Google) to protect your orders via the Internet form. The query is used to distinguish whether the input is made by a human or abusively by automated, machine processing. The query includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google. For this purpose, your input is transmitted to Google and used there. By using reCaptcha, you agree that the recognition you provide will be included in the digitization of old works. However, if IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.

Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of this service. The IP address transmitted by your browser as part of reCaptcha will not be merged with other Google data. The deviating data protection provisions of Google apply to this data. You can find more information about Google’s privacy policy at https://www.google.com/intl/de/policies/privacy/.

// Subject to change

We reserve the right to amend or update this privacy policy if necessary in compliance with the applicable data protection regulations. In this way, we can adapt it to the current legal requirements and take into account changes to our services, e.g. when introducing new services. The current version applies to your visit.

Status of this privacy policy: August 2023