Data protection
1. General notes & mandatory information
meine Hotel und Gastro GmbH, as the operator of the hotel Das Badersee, takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection provisions and this privacy policy. We process personal data on the basis of the requirements of the EU General Data Protection Regulation (GDPR), the Bundesdatenschutzgesetz (BDSG) and in accordance with the Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz (TDDDG).
When you use this website, various personal data are collected. Personal data are data by which you can be personally identified.
This privacy policy provides information on which data we collect, the purposes for which we process them and the rights to which you are entitled in this respect.
Our website contains links to external websites. The operators of those websites are solely responsible for the data processing on those websites. Please note the respective privacy notices of the linked providers.
Information on the controller
The controller for the data processing on this website is:
meine Hotel und Gastro GmbH
Am Badersee 1-5
82491 Grainau
Telephone: 08821/821-0
Email: info@dasbadersee.de
The controller is the natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, email addresses or similar).
Withdrawal of consent and objection to processing
Where the processing of personal data is based on your consent, you may withdraw it at any time with effect for the future. The lawfulness of the processing carried out up to the time of withdrawal remains unaffected.
Insofar as we process personal data on the basis of a legitimate interest, you have the right to object to the processing on grounds relating to your particular situation.
To exercise your rights, an informal notification to the contact details given in the section ‘Controller’ is sufficient.
Right to lodge a complaint with the competent supervisory authority
In the event of infringements of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. Competent supervisory authority for data protection matters:
Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach
SSL encryption
For security reasons and to protect confidential content, this website uses SSL or TLS encryption.
Rights of data subjects
Within the scope of the statutory provisions, you have the rights of access to your stored personal data, rectification of inaccurate data, erasure, restriction of processing, data portability and objection to the processing of your personal data.
In addition, you have the right to withdraw any consent given at any time with effect for the future and to lodge a complaint with a data protection supervisory authority about the processing of your personal data by us.
To exercise your rights, you may contact us at any time using the contact details given in the section ‘Controller’.
Storage period
Unless a more specific storage period is stated within this privacy policy, we store personal data only for as long as is necessary to fulfil the respective processing purposes. The data are then erased, unless statutory retention obligations or other statutory grounds prevent erasure.
If you have any questions about data protection, you may contact our data protection officer:
meine Volksbank Raiffeisenbank eG
Data protection officer
Tegernseestraße 20
83022 Rosenheim
Telephone: 08031/185-22752
Email: datenschutz-hotelambadersee@vbrb.de
2. Cookies
Our website uses technically necessary cookies that are required for the operation and security of the website. In addition, analytics or convenience cookies are used only on the basis of your consent.
You may give, change or withdraw your consent at any time via our consent management tool. Further information on the cookies used and their storage period can be found in the cookie settings of our consent banner. You can access this at any time via the lower area of our website.
3. Server log files
When our website is accessed, the hosting provider automatically processes information in so-called server log files. This includes in particular:
- IP address of the requesting device
- date and time of access
- page or file accessed
- volume of data transferred
- HTTP status code
- browser type and browser version
- operating system used
- referrer URL (where transmitted by the browser)
The processing is carried out to ensure the security, stability and technical functionality of the website and to detect and defend against attempted misuse and attacks.
The legal basis for the processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and uninterrupted provision of our online offering.
The server log files are stored for 7 days and then erased, unless longer retention is necessary for the investigation of security incidents.
4. Data entered by users
4.1. Contacting us
The website offers you various contact forms for the purpose of contacting us and communicating directly with us. If you send us enquiries in this way, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in case of follow-up questions.
The basis for this processing of your personal data is Art. 6(1)(f) GDPR, our legitimate interest being the careful handling of your request.
4.2. Booking tool
The website offers you the option of making a hotel booking. For this purpose, we use the tool OnePageBooking of our service provider HotelNetSolutions GmbH, Genthiner Str. 8, 10785 Berlin. The basis for this processing of your personal data is Art. 6(1)(b) GDPR, the performance of contractual agreements or the implementation of pre-contractual measures.
4.3. Newsletter
If you subscribe to our newsletter, we process the data you provide in order to send the requested information.
The processing is carried out on the basis of your consent pursuant to Art. 6(1)(a) GDPR.
For sending the newsletter, we use CleverReach GmbH & Co. KG, Mühlenstraße 43, 26180 Rastede, as a technical service provider.
A data processing agreement pursuant to Art. 28 GDPR has been concluded with CleverReach GmbH & Co. KG.
Your data are stored until you unsubscribe from the newsletter and are then erased.
Further information can be found in the privacy notices of CleverReach at: https://www.cleverreach.com/de/datenschutz/
4.4. Careers page: data protection for applications and in the application process
We collect and process personal data of applicants for the purpose of carrying out the application process. The processing is carried out on the basis of Art. 6(1)(b) GDPR in conjunction with Section 26 BDSG.
For this purpose, we process the application documents you submit and the data provided in the application form.
Within meine Hotel und Gastro GmbH, only those departments that need your data in order to carry out the application process are given access to them. These include in particular the persons responsible for human resources and the respective responsible managers.
If an employment relationship is established, the data transmitted are stored for the purpose of carrying out the employment relationship in compliance with the statutory provisions.
If no employment relationship is established, the application documents are erased six months after notification of the rejection decision, unless statutory retention obligations or other legitimate interests prevent erasure.
5. Analytics tools and advertising
5.1. Google Analytics
This website uses Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables us to analyse the use of our website. For this purpose, information on the use of the website is processed, in particular pages accessed, technical information on the browser and device, the IP address, referrer URLs and user interactions.
The information collected by Google Analytics may be processed by Google on servers in the USA. The basis for the data transfer to the USA is the adequacy decision of the European Commission for the EU-U.S. Data Privacy Framework pursuant to Art. 45 GDPR, insofar as the respective data recipient is certified under it.
Where consent has been given, the processing is carried out on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time with effect for the future.
We have activated IP anonymisation. As a result, your IP address is truncated by Google within member states of the European Union or in other contracting states of the European Economic Area prior to transmission, insofar as technically possible.
Further information on data processing by Google can be found at Google Privacy Policy.
5.2 IP anonymisation
We have activated the IP anonymisation function on this website. As a result, in the event of the above-mentioned consent, your IP address is truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area prior to transmission to the USA. Only in exceptional cases is the full IP address transferred to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website use and internet use to the website operator. The IP address transmitted by your browser in the context of Google Analytics is not merged with other data held by Google.
Demographic characteristics in Google Analytics
This website uses the demographic characteristics function of Google Analytics. This allows reports to be created that contain statements on the age, gender and interests of visitors to the site. These data originate from interest-based advertising by Google and from visitor data from third-party providers. These data cannot be attributed to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the item Objection to data collection.
5.3. Google Ads
This website uses Google Ads and Google Ads Conversion Tracking, services of Google Ireland Limited.
With the help of Google Ads, we can analyse the effectiveness of our advertisements and evaluate statistically whether users have become aware of our website via a Google advertisement.
The processing is carried out exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR.
In this context, personal data, in particular your IP address and online identifiers, may be transmitted to Google and processed on servers outside the European Union.
Further information on Google can be found in the section ‘Third-party provider information’.
5.4 Google Remarketing
This website uses the remarketing function of Google Ads. This allows interest-based advertisements to be displayed within the Google advertising network to users who have already visited our website or our YouTube channel.
The processing is carried out exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR.
Please note that the data protection provisions of Google apply to data processing by Google. These may differ from the data protection provisions of our company.
Further information on Google can be found in the section ‘Third-party provider information’.
Third-party provider information:
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001
Terms of use: https://policies.google.com/terms?hl=de
Overview of data protection and the privacy policy: https://policies.google.com/privacy/update?hl=de.
6. Plugins & tools
6.1 Automated decisions
Automated individual decision-making, including profiling, is not used on our website.
6.2. Matterport
On our website we offer a virtual 3D tour. The tour is loaded only after you have actively selected it by clicking on ‘Explore 3D space’.
When the tour is accessed, personal data are transmitted to Matterport LLC. These may include in particular the IP address, information on the browser and device used, and usage and connection data required for the provision of the service. Technically necessary cookies may be set in connection with the provision of the tour.
The recipient of the data is Matterport LLC. Personal data may also be processed in the USA.
Further information on data protection matters relating to the service provider is available at https://matterport.com/de/privacy-policy.
6.3. Social media links
Our website contains links to social networks such as LinkedIn, Instagram, YouTube and others. The mere display of the links does not result in any personal data being transmitted to the operators of the respective social networks.
Only when you click on the respective link and visit the corresponding social network may personal data be processed by the respective platform operator.
For further information on the data processing that takes place when you visit a social network and on the controller responsible for it within the meaning of Art. 4(7) GDPR, please refer to the website of the respective social network that you access.
Updates to this privacy policy
It may be necessary to update this privacy policy from time to time. We will then inform you at this point. This policy is dated 08.09.2026, last updated on 08.09.2026.