Home · Reservation/Contact

Privacy Policy

1) Controller

Jewgeni Morozov
Giersbergstr. 160, DE-57072 Siegen, Germany
Tel.: +49 271 23-560-112
E-mail: jemor7 [at] gmail [dot] com

2) Processing of technical data when visiting the website (server log files)

Each time you access our website, the web server automatically processes technical information required to establish the connection, deliver the pages and ensure system stability and security (so-called server log files).

IP address of the requesting device,
date and time of access,
requested resource (URL) and request method (e.g. GET/POST),
server response code (HTTP status) and amount of data transferred,
referrer URL (previous page), if provided by your browser,
user-agent data (browser type/version, operating system and device type), if transmitted.

Purposes: providing the website, ensuring operation, protection against attacks and abuse, troubleshooting.
Legal basis: our legitimate interests (Art. 6(1)(f) GDPR).
Retention of server log files: logs are generated and rotated automatically and are generally stored for no longer than 14 days. In individual cases (e.g. security incidents), data may be stored longer to the extent necessary for investigation and to assert/defend legal claims.

3) Hosting

The website is hosted by Host Europe. The hosting provider processes technical data (in particular the data listed in section 2) to the extent necessary to provide the infrastructure and to ensure stability and security. Under the GDPR, the hosting provider acts as a processor (Art. 28 GDPR).

The hosting provider’s servers are generally located within the European Union/EEA. Data transfers to third countries are not intended within the scope of hosting (unless required in individual cases for technical support or security reasons).

4) Cookies and consent management

We use cookies and similar technologies. Some of them are strictly “unavoidably necessary” (German: unbedingt erforderlich) to operate the website and/or provide features you explicitly request (e.g. storing language selection and/or your choice in the cookie banner). In these cases, consent is generally not required (§ 25(2) no. 2 TDDDG; until 14 May 2024: TTDSG). For all other cookies/technologies that are not necessary (e.g. analytics), storing information on your device and/or accessing information already stored is only carried out with your consent (§ 25(1) TDDDG) and based on Art. 6(1)(a) GDPR.

Analytics cookies and technologies (Google Analytics 4) are used only after your prior consent. You can withdraw your consent at any time (see Cookie Policy).

5) Google Analytics 4

If you have given your consent, we use the web analytics service Google Analytics 4. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The gtag.js tag is used to collect statistics. More information: Google Privacy Policy and information on data transfer mechanisms.

Purposes: audience measurement and statistical analysis of website use, improvement of content and technical stability.
Legal basis: your consent (Art. 6(1)(a) GDPR) and § 25(1) TDDDG (storage/access to cookies).
Withdrawal: you may withdraw consent at any time via the cookie settings (see Cookie Policy); the lawfulness of processing before withdrawal remains unaffected (Art. 7(3) GDPR).

Categories of data: online identifiers (in particular cookies), information on interactions with the website (page views/events), technical information (e.g. browser/device), and the IP address, which is transmitted to Google for technical reasons. Google may process the IP address in truncated form depending on Google Analytics 4 functionality and service settings.

Contractual arrangements: we have concluded a data processing agreement with Google (Art. 28 GDPR).
Retention in Google Analytics: is determined by the settings in the Google Analytics account and any configured automatic deletion.

Recipients and possible third-country transfers: processing may be carried out by companies within the Google group, including Google LLC (USA). As a result, data may be transferred to third countries (e.g. the USA). As safeguards, Google refers in particular to certification under the EU–U.S. Data Privacy Framework (DPF) and/or Standard Contractual Clauses (SCC) of the European Commission. Details and current status depend on Google settings and contractual terms.

6) Contact and booking

If you contact us (e.g. by e-mail, phone or via a form on the website) or submit a booking enquiry, we process the contact details you provide and the content of your message solely to handle the enquiry and respond. If you use WhatsApp, section 7 also applies.
Legal basis: performance of (pre-)contractual measures or a contract (Art. 6(1)(b) GDPR) or our legitimate interest in processing the enquiry (Art. 6(1)(f) GDPR), depending on the content of your request.
Retention: until the enquiry has been fully processed; thereafter, only to the extent and for the period required by law (e.g. commercial/tax law).

7) External links and messengers (WhatsApp / Google Maps)

The website contains links to third-party services (e.g. WhatsApp and Google Maps). We do not embed these services (no iframe) and do not load their maps/scripts on our pages. Data is transferred to the respective provider only after you take action (click the link). Providing these links serves our legitimate interests in offering convenient ways to contact us and plan a route (Art. 6(1)(f) GDPR).

WhatsApp: if you click the WhatsApp link (wa.me) and/or communicate with us via WhatsApp, your data is also processed by WhatsApp as an independent controller: WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (Meta group company). Typically, the phone number, communication metadata (e.g. time/participants) and, if necessary, message content are processed. WhatsApp messages are generally protected by end-to-end encryption; however, metadata may be processed by the provider; transfers to third countries are possible. If you do not want your data to be processed by WhatsApp/Meta, please use alternative contact channels (e-mail/phone). More information: WhatsApp Privacy Policy (EEA).

Google Maps: when you click the link to Google Maps, the respective provider (generally Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) processes data (e.g. IP address, browser/device information) in accordance with its privacy policy; transfers to third countries are possible. We do not control how third-party providers process data.

Transfers to the USA and safeguards: when using services from Meta/Google group companies, processing in the USA may occur. For the USA, there is an adequacy decision by the European Commission under the EU–U.S. Data Privacy Framework (Art. 45 GDPR) to the extent that the recipient in the USA is certified under the DPF. As of the date of this policy, Google LLC and Meta Platforms, Inc. state that they are certified under the DPF. If the DPF does not apply, other safeguards may be used, in particular Standard Contractual Clauses (SCC) under Art. 46 GDPR.

8) Data subject rights

Under the GDPR, you have, in particular, the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection (Art. 21), and the right to withdraw consent at any time (Art. 7(3)). You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

Competent supervisory authority at our place of establishment: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

9) Security

We apply appropriate technical and organisational measures to protect data against unauthorised access, loss and misuse. For data transmission between your browser and our server, a secure connection (TLS/HTTPS) is used if supported by your browser. Please note that data transmission on the internet (e.g. by e-mail) may have security vulnerabilities and absolute protection against access by third parties is not possible.

Status: 2026-02-22