Privacy Policy

This Privacy Policy describes the processing of personal data when using the Christian Funk Holding GmbH & Co.KG websites, including the mobile applications (our "Apps"). It also explains the choices you have regarding your personal data ("Your Rights") and how you can contact us.

I.Who is responsible and how can I contact the data protection officer?

The controller within the meaning of the GDPR is

Christian Funk Holding GmbH & Co.KG
Beim Alten Ausbesserungswerk 4
77654 Offenburg
Phone: + 49123456789
Fax: 0781/92417 - 15

Authorized Managing Directors: Christian Funk, Sandro Fiorilli, Nikolaus Gaiser, Markus Hauser

Further information about our company, details of the authorized representatives and other contact options in our imprint can be found on our website:

https://www.hotel-liberty.de/impressum/

If you have any questions about the processing of your personal data by us or about data protection in general, please contact ..., [the data protection officer who can be reached at the address given in the imprint or at the following email address: max.mustermann@domain.de

II. Your rights as a data subject

Every data subject has the following rights:

• Right to information (Art. 15 GDPR)
• Right to rectification of inaccurate data (Art. 16 GDPR)
• Right to erasure or right to be forgotten (Art. 17 GDPR)
• Right to restriction of processing of personal data (Article 18 GDPR)
• Right to data portability (Article 20 GDPR).

You may object to the processing of personal data for advertising purposes, including the analysis of customer data for advertising purposes, at any time without giving reasons.

Furthermore, data subjects have a general right to object (see Art. 21 para. 1 GDPR). In this case, the objection to data processing must be justified. If the data processing is based on consent, you can withdraw your consent at any time with effect for the future. The easiest way to exercise your data subject rights is to contact us. max.mustermann@domain.deFurthermore, you have the right to lodge a complaint with the data protection supervisory authority responsible for you.

III. On the processing of personal data by Christian Funk Holding GmbH & Co.KG.

Below we would like to give you an overview of how we ensure the protection of your personal data when you access our website and what types of personal data we process, for what purposes and to what extent.

1. Processing of data when accessing our website – log files

When you access our website, general information is automatically collected. This information (server log files) includes the type of web browser, the operating system used, the domain name of your Internet service provider, and similar information. Your IP address is also transmitted and used to provide the service you request. This information is technically necessary to correctly deliver the website content you request and is mandatory when using the Internet.

According to our IT security concept, the resulting log file data is stored for a period of two weeks in order to detect and analyze any attacks against our website. The legal basis for data processing is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR.

2. Processing of data when using the website – your inquiries

If you send us an inquiry by email or via the contact form, we collect the data you provide for processing and responding to your request. We store this information for evidentiary purposes for a period of 60 days. The legal basis for data processing is Article 6(1)(f) GDPR.

3. Subscription to an email newsletter

We use the double opt-in procedure for newsletter registration. This means that after you enter your email address, we will send a confirmation email to that address, asking you to confirm that you wish to receive the newsletter. If you do not confirm within 48 hours, your registration will be automatically deleted. If you confirm your wish to receive the newsletter, we will store your email address until you unsubscribe.ellen. The data is stored for the purpose of sending you the newsletter. Furthermore, we store your IP address and the time of your registration and confirmation to prevent misuse of your personal data and to be able to prove that the newsletter was sent correctly. The legal basis for processing your personal data is Article 6(1)(a) GDPR.

The only mandatory information required to receive the newsletter is your email address. You have the right to revoke your consent to receive the newsletter at any time. Your revocation will not affect the legality of the processing of your personal data until the revocation. You can revoke your consent by clicking on the link provided in each newsletter email or by sending a message to the contact details provided in the imprint.

4. Notes on ensuring data security

We take technical and operational security precautions on our website to protect the personal data stored by us from access by third parties, loss or misuse and to enable secure data transfer.

We must point out that, due to the structure of the Internet, unauthorized access to data by third parties is possible. It is therefore your responsibility to protect your data against misuse through encryption or other means. Without appropriate protective measures, unencrypted data, even if transmitted via email, can be read by third parties.

5. Using a Channel Manager

We use the SynXis channel manager from Sabre Hospitality Solutions to manage our online bookings. SynXis collects the data necessary for processing a room booking and forwards it to our internal booking and management system.

Data processed:

In particular, the following personal data is processed:

• First and Last Name
• Contact details (e.g. email, phone number)
• Booking details (room category, length of stay, number of guests)
• Payment information (if required)
• Special requests or information that the guest provides voluntarily

Purpose of processing:

The data is processed for the purpose of handling and managing bookings, for contract execution, for payment processing and for communication with guests.

Legal basis:

The processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR (performance of a contract or pre-contractual measures).

Recipients / Data sharing:

The data is forwarded to the provider SynXis and to our administration system as part of the booking process. Both providers act as data processors, or – if outside the EU – the transfer takes place on the basis of suitable safeguards in accordance with Art. 44 et seq. GDPR (e.g., EU Standard Contractual Clauses).

Storage time:

The data will only be stored in our systems for as long as is necessary to process the booking and in accordance with legal retention obligations.

6. Survey via Netigate

Purpose of the survey:
The data will be used exclusively for the purpose of evaluating this survey, in order to analyze and improve feedback on our booking process.

Type of data collected:
Since this survey is provided via a generic, non-personalized link, we collect:
Data that is automatically collected
The following non-personal or technical data may be processed during the technical provision of the survey platform:

• Device type and browser information
• Operating system
• language settings
• Date and time of access
• Possibly shortened/anonymized IP address
• Cookies that are technically necessary for providing the survey. This data is used exclusively for the technical operation and stability of the system. No user tracking for marketing or profiling purposes takes place.
• Data from your answers
• Your answers to the individual questions
  Timestamp of participation

Since the link is generic and contains no identifiers, the responses cannot be linked to you personally. No personal data such as name, email address, employee ID, or similar information is automatically collected via the generic link.

The results will be evaluated exclusively in anonymized form.
It is not possible to draw conclusions about individual persons.

Recipients of the data (Netigate)
We use the service to conduct the survey.
Netigate AB, St Eriksgatan 113, 113 43 Stockholm, Sweden (EU/EEA). Netigate acts as a data processor pursuant to Article 28 GDPR. The data is stored and processed exclusively within the EU.

Legal basis of processing
We process your data in accordance with Art. 6 para. 1 lit. a GDPR – consent (voluntary participation in the survey)

Duration of storage
The data will only be stored for as long as is necessary for the evaluation of the survey or as stipulated by internal guidelines.

IV. Integration of third-party services

1. Integration of social plugins

Our website uses social plug-ins ("plug-ins") from various social networks, such as Facebook.com, Twitter.com, Google+, and Pinterest. These plug-ins are designed to provide you with an opportunity to interact with your contacts.ellen and to easily spread interesting information. These plug-ins can be identified by the respective logo on the network. We use a 2-click solution, so no data is transferred simply by visiting the website.

Only when you click on such a plug-in does your browser establish a direct connection to the servers of the respective network. The content of the plug-in is transmitted directly to your browser by the network, which then integrates it into the website. If these networks are based outside the EU or EEA, we cannot rule out the possibility that your data will be transferred to a server outside the EU/EEA and processed there. We have no influence on the scope or the period of use of the data that the respective network collects using this plug-in and therefore inform you according to our current state of knowledge:

By integrating the plug-in, the respective network receives the information that you have accessed the corresponding page of our website. If you are logged in to one of the networks, this network can assign this information to your profile. If you do not want the network to collect information about your visit to our website, you must log out beforehand. However, there is a fundamental possibility that the network will obtain and store your IP address even if you are not registered there or logged in. We also have no information about the deletion of the collected data by the plug-in provider.

The plug-in provider stores the data collected about you as user profiles and uses them for advertising, market research, and/or tailoring its website to meet your needs. Such evaluations are carried out, in particular (even for users who are not logged in) to display tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles by the service providers.

The legal basis for the use of the plug-ins is Article 6(1)(f) GDPR. For information on the purpose, duration, and scope of data collection, the further processing and use of your data, as well as your related rights and privacy settings, please refer to the privacy policies of the respective social networks:

Facebook: http://www.facebook.com/policy.php.

Instagram: https://help.instagram.com/519522125107875?helpref=page_content

2. Integration of Google Tag Manager

We use Google Tag Manager on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The Google Tag Manager is used to manage website tags via a single interface. The tool itself (which implements the tags) does not process any personal data of users. It merely triggers other tags, which may in turn collect data. The Google Tag Manager does not access this data.

If deactivation has been carried out at the domain or cookie level (e.g. by opting out), this will remain in effect for all tracking tags implemented with Google Tag Manager.

The use of Google Tag Manager is based on Article 6(1)(f) GDPR. We have a legitimate interest in a fast and efficient tracking system.elleand uncomplicated integration and management of various tools on our website.

If corresponding consent has been requested (e.g. for the activation of certain tracking services), processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; consent can be revoked at any time.

For more information, please see Google's privacy policy:

https://policies.google.com/privacy

3. Integration of YouTube

Our website uses plugins from YouTube, which is operated by Google. The operator of the pages is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

If you visit one of our pages featuring a YouTube plugin, a connection to the YouTube servers is established. Here the YouTube server is informed about which of our pages you have visited.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

The use of YouTube is in the interest of an appealing presentation of our online offerings and is therefore based on Art. 6 (1) (f) GDPR. We only record the extent to which the YouTube videos embedded on our site are accessed and delete this data after [two] years.

Further information on handling user data can be found in YouTube's data protection declaration at: https://www.google.de/intl/de/policies/privacy.

4. Use of a consent management platform

On our website, we use the consent management platform operated by our commissioned and controlled service provider. This tool is used to manage consent to the use of cookies, as well as to integrate and verify external service providers. To verify consent, we store information about the device you use, information about your browser, an anonymized IP address, the date and time of your visit, and opt-in and opt-out data for three years. The legal basis for storing this data is Art. 6 (1) (c) GDPR.

V. Our Cookie Policy

1. General information on the use of cookies

Our website uses cookies. Cookies are small text files that are stored on your device and saved by your browser. They are used to make our offerings more user-friendly, effective, and secure. We use both temporary cookies, which are automatically deleted when you close your browser ("session cookies"), and persistent (permanent) cookies.

You have the choice whether you want to allow cookies to be set. You can make changes in your browser settings. You generally have the choice of whether you want to accept all cookies, be informed when cookies are set, or reject all cookies. If you choose the latter option, you may not be able to fully use our services.

When using cookies, a distinction must be made between cookies that are absolutely necessary and cookies that are used for more extensive purposes (measuring access numbers, advertising purposes).

2. Strictly necessary cookies when using the website

We use session cookies on our websites that are essential for using our websites. These include cookies that allow us to recognize you while you visit the site within a single session. These session cookies contribute to the secure use of our services by enabling the secure processing of the shopping cart function and the payment process.

3. Use of cookies with your consent

Below you will find an overview of the cookies we use with your consent, which you gave when you first used the website. You will also find an opt-out option in each description of the use. These include cookies used to record website usage behavior and cookies used for advertising purposes.

a. Use of cookies to record user behavior (tracking

The use of tracking cookies allows us to recognize users when they return to our website and thus assign usage activity to an internally assigned identifier (pseudonym). This allows us to record and analyze repeated visits to our website in a coherent manner.

Specifically, the following tracking cookies are used:

google analytics 4

This website uses Google Analytics 4, a web analysis service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
The service allows us to measure traffic and engagement on websites and mobile apps across devices using customizable reports to optimize our content and offerings.

Legal basis
Your data will be processed based on your consent in accordance with Art. 6 (1) (a) GDPR, provided you have consented to this in our cookie banner. You can revoke your consent at any time with future effect, e.g., via the cookie banner settings.

Data protection officer of the processing company
Below you will find the email address of the data protection officer of the processing company.

Scope of data processing
Google Analytics 4 uses "cookies," which are text files placed on your device, to help the website analyze how users use the site. The information collected through cookies about your use of the website is typically transferred to a Google server and stored there. GA4 does not store full IP addresses; it only truncates them, making direct identification impossible.

The data collected may include, among others:

• Tracking code
• Cookie policy
• Data collected
• This list contains all (personal) data collected from or through the use of this service.
• Device information
• Geographic Location
• Browser Information
• Device operating system
• screen resolution
• Referrer URL.
• Interaction data
• Date and time of visit
• user behavior
• Visited pages
• Online identifiers
• Shortened IP address
• User ID
• Advertising identifier
• Purchase information

Place of processing
The primary location where the collected data is processed is the European Union. Should the data also be processed in other countries, you will be informed separately.

Retention period
The retention period is the length of time the collected data is stored for processing. The data must be deleted as soon as it is no longer needed for the stated processing purposes.

Transfer to third countries
When using this service, the collected data may be transferred to another country. Please be aware that this service may involve transferring data to a country that does not have the required data protection standards. Below is a list of the countries to which data is transferred. For more information about the security measures, please refer to the privacy policy of the respective provider or contact the provider directly.

• Singapore
• Taiwan
• Chile
• United States of America

data recipients
The recipients of the collected data are listed below.

Alphabet Inc., Google LLC, Google Ireland Limited

Click here to read the data processor's privacy policy.
https://business.safety.google/privacy/?hl=en

Click here to read the data processor's cookie policy.
https://policies.google.com/technologies/cookies?hl=en

Click here to revoke on all domains of the processing company.
https://tools.google.com/dlpage/gaoptout?hl=de

Storage information
The data will be deleted after 14 months.

Google Ads conversion tracking

We use Google Ads to advertise our attractive offers on external websites using advertising materials (so-called Google Ads). These advertisements are delivered by Google via so-called "ad servers." Ad server cookies are used to analyze performance parameters such as ad impressions, clicks, and conversions. This allows us to determine the success of individual advertising measures in relation to the data from the advertising campaigns. If you access our website via a Google ad, Google Ads will store a cookie on your computer. These cookies typically expire after 30 days and are not intended to personally identify you. The following analytical data is generally stored in this cookie:

• Unique Cookie ID
• Number of ad impressions per placement (frequency)
• Last impression (relevant for post-view conversions)
• Opt-out information (marking that the user no longer wishes to be contacted)

These cookies allow Google to recognize your internet browser. If a user visits certain pages of an ad customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to that page. Each ad customer is assigned a different cookie. Therefore, cookies cannot be tracked across the websites of different ad customers. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical analyses from Google. These analyses allow us to identify which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising materials, and in particular, we cannot identify users based on this information. The legal basis for Google's storage of the cookie is the consent given (Art. 6 para. 1 sentence 1 lit. a GDPR).

Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. Please note that data processing by Google may take place outside the European Union. Google has submitted to the EU-US Privacy Shield. https://www.privacyshield.gov/EU-USFrameworkWe also have no influence on the scope and further use of the data collected through the use of this tool by Google and therefore inform you according to our current knowledge:

By integrating tracking tools, Google receives the information that you have accessed the corresponding web page on our website or clicked on one of our ads. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or logged in, there is a possibility that the provider will obtain and store your IP address. Further information on Google's privacy policy can be found here: http://www.google.com/intl/de/policies/privacy/ and https://services.google.com/sitestats/de.html

You can refuse the use of cookies. This can be done, for example, by changing your browser settings to generally deactivate the automatic use of cookies. Alternatively, you can deactivate cookies for conversion tracking by setting your browser toellen that cookies from the domain "www.googleadservices.com" are blocked. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website by installing a browser plug-in: https://tools.google.com/dlpage/gaoptout?hl=de If you do not wish to receive interest-based advertising, you can opt out of Google’s use of cookies for these purposes by visiting the https://www.google.de/settings/ads/ For more information about Google's privacy policy, please click here https://www.google.com/intl/de/policies/privacy/ Alternatively, you can visit the Network Advertising Initiative (NAI) website: http://www.networkadvertising.org/

Google Conversion Linker

We use the Google Conversion Linker on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The conversion linker is used to attribute conversions to our Google Ads campaigns. For this purpose, a cookie is set or existing cookies are used to correctly record click IDs of advertisements.

The use is based on consent pursuant to Art. 6 para. 1 lit. a) GDPR.

Further information on data protection at Google Ads can be found here: https://policies.google.com/technologies/ads

Facebook Pixel / Custom Audience

We have integrated a Facebook pixel from Facebook Ireland Limited on our website. When you access our website, you are redirected to Facebook. The following data may be transferred:

• Unique Cookie ID
• website accessed
• Time

Facebook can mark the device you are using with a cookie and a unique identifier, or read an existing cookie if one already exists. If you are logged in to Facebook, this data can be used to display targeted advertising for us on Facebook pages. Facebook also processes the data in the USA. Your data will only be transferred to the USA with your express consent. The legal basis for storing cookies is your consent (Art. 6 (1) (a) GDPR). You can revoke your consent at any time in our cookie settings. Facebook is responsible for further evaluating the data collected. You can change your Facebook advertising settings here: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

b. Use of cookies for advertising purposes

We use cookies for marketing purposes, for example, to tailor advertising to the interests of a website visitor. They are also used to limit the frequency of display and measure the effectiveness of an ad. This records which web pages and articles were clicked on. This allows us to collect information about usage habits in order to target interest-based advertising. This information is shared with third parties. In these cases, the cookies are usually set directly by the advertising partner.

As of: October 2025