Privacy­Policy

1. Data Controller

Hotel Andante OHG
Peter-Thumb-Str. 2, 77977 Rust
Telephone: +49 7822 44693-0
Email: hotel@andante-rust.de

2. General Information on Data Processing

As a matter of principle, we process the personal data of our users only to the extent necessary to provide a functioning website along with our content and services. The legal basis is Art. 6(1)(b) GDPR (performance of a contract), (c) GDPR (legal obligation), and (f) GDPR (legitimate interest). Where we obtain your consent, Art. 6(1)(a) GDPR applies.

3. Server Log Files

The hosting provider automatically collects information in server log files: browser type and version, operating system used, referrer URL, hostname of the accessing computer, time of the server request, and IP address. These data cannot be matched to other data sources and are deleted after no more than 7 days. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure operation).

4. Cookies and Consent Management

4.1 Cookiebot (Consent Management)

This website uses the Cookiebot service provided by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark. Cookiebot enables the collection and management of your cookie consents in compliance with data protection law. The tool sets a technically necessary cookie (CookieConsent) which stores your consent decision for 12 months. Data is transferred within the EU. Legal basis: Art. 6(1)(c) GDPR (legal obligation to demonstrate consent).
Privacy policy: cookiebot.com/de/privacy-policy/

4.2 Overview of Cookies Set

Depending on your consent, the following cookies are set:

You can withdraw or adjust your consent at any time via the cookie banner at the bottom of the screen.

5. Google Tag Manager and Google Analytics

We use the Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Tag Manager itself does not set any cookies and does not process personal data. It serves to manage website tags and loads – following your consent – the following services:

Google Analytics 4 (GA4) analyses user behaviour on our website (pages visited, time spent, visitor origin). For this purpose, cookies are set and anonymised usage data is transmitted to Google servers (potentially to the USA; standard contractual clauses under Art. 46 GDPR). IP addresses are anonymised before transmission (IP anonymisation enabled). Legal basis: Art. 6(1)(a) GDPR (consent).
Opt-out: tools.google.com/dlpage/gaoptout · Privacy policy: policies.google.com/privacy

6. Triptease

Triptease (Triptease Ltd., 1 Vincent Square, London SW1P 2PN, UK) is a hotel marketing service that shows visitors direct price comparisons and personalised offers, thereby improving the direct booking rate. Triptease sets marketing cookies and processes usage data (potentially transferred to the EEA/UK; standard contractual clauses). Legal basis: Art. 6(1)(a) GDPR (consent).
Privacy policy: triptease.com/privacy-policy/

7. Mews Booking Engine

For online bookings we use the Mews Distributor system provided by Mews Systems B.V., Haarlemmerstraat 121, 1013 EQ Amsterdam, Netherlands. As part of the booking process, Mews processes name, email address, telephone number and payment details. Payments are handled via PCI-DSS-compliant systems. Legal basis: Art. 6(1)(b) GDPR (initiation and performance of a contract).
Mews privacy policy: mews.com/en/privacy-policy

8. Contact Form

When using our contact form, the data you enter (name, email, message) is processed to handle your enquiry and is not passed on to third parties without your consent. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). The data will be deleted as soon as it is no longer required for that purpose.

9. External Fonts

This website loads the fonts (Cormorant Garamond and Inter) from Google Fonts (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). In doing so, your IP address is transmitted to Google servers. We use Google Fonts with the display=swap parameter and have configured the integration so that only technically necessary data is transmitted. Legal basis: Art. 6(1)(f) GDPR.

10. Your Rights

You have the following rights with regard to the personal data concerning you:

• → Right of access (Art. 15 GDPR)
• → Right to rectification (Art. 16 GDPR)
• → Right to erasure (Art. 17 GDPR)
• → Right to restriction of processing (Art. 18 GDPR)
• → Right to data portability (Art. 20 GDPR)
• → Right to object (Art. 21 GDPR)
• → Right to withdraw consent (Art. 7(3) GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data. Competent authority in Baden-Württemberg: The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.