Privacy policy

This is a courtesy translation. The German version is legally binding.

At a glance

This website sets no cookies, uses no analytics or advertising services and loads its fonts from our own server. We only process personal data where this is necessary to run the site, answer your enquiry or handle your booking. Google Maps only loads when you explicitly click on it.

Controller

We have not appointed a data protection officer as we are not required to do so.

Hosting and server log files

This website is hosted by Hostinger International Ltd., 61 Lordou Vironos str., 6023 Larnaca, Cyprus. The server is located in the European Union. When you open a page, Hostinger processes technically necessary data: IP address, date and time, the address requested, the amount of data transferred, browser and operating system, and the previously visited page. This serves to deliver the website and keep it secure. The log files are deleted automatically after a short period.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in stable and secure operation. We have a data processing agreement with Hostinger (Art. 28 GDPR).

Encryption

This site uses SSL/TLS encryption, recognisable by the padlock symbol and “https://” in the address bar. Data you send us via the contact form is therefore protected in transit.

Contact form

When you write to us via the contact form, we process your details (name, email address and message, and optionally the accommodation, travel dates, number of guests and whether you are bringing a dog) in order to answer your enquiry. A script on our web server sends your details as an email to our mailbox (see “Contact by email”). The enquiry itself is not stored on the web server. An invisible check field keeps out automated spam. No tracking takes place.

The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a booking, otherwise Art. 6(1)(f) GDPR (answering enquiries). We delete your enquiry once it has been dealt with and no statutory retention obligations apply, at the latest after six months. If the enquiry leads to a booking, the retention periods under tax and commercial law apply.

Contact by email

If you email us, we process your address and the content of your message in order to reply. Our mailbox is hosted by Hostinger (see “Hosting and server log files”), with whom we have a data processing agreement. For processing, we forward incoming messages to a mailbox at Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be transferred to Google LLC in the USA, which is certified under the EU-U.S. Data Privacy Framework. The same legal basis and retention period apply as for the contact form.

Search bar and booking via Lodgify

For checking availability and booking we use Lodgify, operated by Codebay Solutions Ltd., Magma House, 16 Davy Court, Castle Mound Way, Rugby, Warwickshire CV23 0UZ, United Kingdom, together with Codebay Solutions S.L.U., Av. Josep Tarradellas 20, 08015 Barcelona, Spain.

The search bar on our pages is loaded from Lodgify’s servers (app.lodgify.com) when you open a page. Lodgify receives your IP address and technical browser data. Based on our checks, the search bar does not set any cookies. When you search for dates or click “Book”, you are taken to Lodgify’s pages (checkout.lodgify.com), where you enter your booking and payment details directly with Lodgify. The Lodgify privacy policy also applies to processing there.

The legal basis is Art. 6(1)(b) GDPR for the booking and Art. 6(1)(f) GDPR for loading the search bar. Our legitimate interest is simple online booking. An adequacy decision of the European Commission exists for the United Kingdom. We have a data processing agreement with Lodgify.

Google Maps

On the home page you can display a map from Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The map only loads when you click “Show map”; no connection to Google is made before then. After your click, Google receives your IP address, among other data. Data may also be transferred to Google LLC in the USA, which is certified under the EU-U.S. Data Privacy Framework. Google may also set cookies.

The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. So that you don’t have to click again on every visit, your browser remembers your consent in local storage (entry “m6-karte”). You can withdraw it at any time by deleting the site data for this website in your browser.

The route planner opens Google Maps in a new tab only after you submit it. The Google privacy policy then applies.

Local storage in your browser

On your first visit we show a short opening animation once per session. So that it doesn’t reappear every time you change pages, we store the entry “m6-vorhang” in your browser’s session storage. It contains no personal data and disappears when you close the tab. This is technically necessary for the service you have requested (§ 25(2) no. 2 TDDDG).

Links to other websites

Among others, we link to the regional transport association Verkehrsverbund Großraum Nürnberg (VGN) and to our holiday apartments in Debring (fewo-k2.de). Data is only transferred to the respective provider once you follow a link; their privacy policy then applies.

Your rights

You have the right to:

• access to your stored data (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing based on legitimate interests (Art. 21 GDPR)
• withdraw consent at any time with effect for the future (Art. 7(3) GDPR)

An informal email to anfrage@das-m6-bamberg.de is sufficient.

Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.