Data protection
1. General notes & mandatory information
Meine Hotel und Gastro GmbH, as the operator of the Hotel am Badersee, takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with legal data protection regulations and this privacy policy. We process personal data on the basis of the requirements of the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and in accordance with the Telecommunications Digital Services Data Protection Act (TDDDG).
When you use this website, various personal data is collected. Personal data is data that can be used to personally identify you. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) may have security gaps. It is not possible to completely protect data from access by third parties.
Should offers from other providers be accessible from our website (e.g. via links), our privacy policy does not apply to them, as we have no influence on the collection and use of data by the other provider. In this case, please note the privacy policy of the provider concerned.
Note on the responsible body
The responsible body for data processing on this website is:
My Hotel and Gastro GmbH
Am Badersee 1-5
82491 Grainau
Telephone: 08821/821-0
email: info@dasbadersee.de
The responsible body is the natural or legal person who, alone or together with others, decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).
Withdrawal of your consent to data processing
Many data processing processes are only possible with your express consent. You can revoke any consent you have already given at any time for the future. All you need to do is send us an informal message by e-mail. #
Right to lodge a complaint with the competent supervisory authority
In the event of breaches of data protection law, the person concerned has the right to lodge a complaint with the competent supervisory authority. Responsible supervisory authority for data protection issues:
Bavarian State Office for Data Protection Supervision
Promenade 18
91522 Ansbach
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to yourself or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another person responsible, this will only be done insofar as it is technically feasible.
SSL encryption
This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the browser's address line changing from http://to https://and by the lock icon in your browser line.
If SSL encryption is activated, the data that you submit to us cannot be read by third parties.
Information, blocking, deletion
Within the framework of the applicable legal provisions, you have the right to receive information free of charge about your stored personal data, its origin and recipients and the purpose of data processing and, if applicable, a right to correct, block or delete this data. You can contact us at any time at the address given in the legal notice for this and for further questions on the subject of personal data.
2. Data protection officer
Statutory data protection officer
We have appointed a data protection officer for our company.
My Volksbank Raiffeisenbank eG
data protection officer
Tegernseestrasse 20
83022 Rosenheim
Telephone: 08031/185-22752
email: datenschutz-hotelambadersee@vbrb.de
3rd cookies
Our website sometimes uses so-called cookies. Cookies do not cause any damage to your computer and do not contain any viruses. Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called session cookies. They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser the next time you visit.
You can set your browser so that you are informed when cookies are set and only allow cookies in individual cases, exclude the acceptance of cookies for specific cases or in general, and activate the automatic deletion of cookies when you close the browser. If cookies are deactivated, the functionality of this website may be limited.
Cookies that are required to carry out the electronic communication process or to provide certain functions you have requested are stored on the basis of Article 6 (1) (f) GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e.g. cookies to analyze your surfing behavior) are stored, this is always done on the basis of your consent, which can be controlled via the consent banner, in accordance with Art. 6 para. 1 lit. a GDPR. You can change or withdraw this consent at any time in the future via the consent banner.
4. Server log files
Our website collects a range of general data and information each time it is accessed by a data subject or an automated system. This anonymous visitor data is logged and stored in the log files of our servers in the form of a data set. This data set is composed as follows:
- user agent (browser type and browser version, operating system used)
- date and time of the server request
- HTTP status code
- Transferred file size
- Requested document
This stored data is evaluated exclusively for statistical purposes. We do not draw any conclusions about natural persons from this data. This information is only required to:
- to correctly deliver and optimize the content of our website for you,
- to ensure the long-term functionality of our IT systems and the technology of our website
- and to provide law enforcement agencies with the information necessary to prosecute in the event of a cyber attack.
Furthermore, this information is not shared with third parties.
We analyse this anonymously collected data and information statistically on the one hand and also with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimal level of protection for the personal data we process. The anonymous data in the server log files is stored separately from all personal data provided by you on the website and deleted after 7 days.
5. User data entries
5.1. Contacting
The website offers you various contact forms for the purpose of contacting us and communicating directly with us. If you send us inquiries in this way, we will store your details from the enquiry form, including the contact details you provided there, for the purpose of processing the enquiry and in case of follow-up questions.
The basis for this processing of your personal data is Article 6 (1) (f) GDPR, where our legitimate interest is the careful processing of your request. We delete your related data when the purpose for which you have provided us with your data has been fulfilled or completed and we are not entitled or obliged to continue to store it for legal reasons. You can object to the processing of this data at any time. To do so, send an appropriate message to datenschutz-hotelambadersee@vbrb.de. In addition, we would like to point out that the rights of data subjects set out in this statement (see chapter 7.) also apply in full to this functionality.
5.2. Booking tool
The website offers you the option of booking a hotel. For this purpose, we use the SmartiBe tool from our service provider SmartHotel, 2811 EP Reeuwijk, the Netherlands. The basis for this processing of your personal data is Article 6 (1) (b) GDPR, the fulfilment of contractual agreements or the implementation of pre-contractual measures. We delete your related data when the purpose for which you have provided us with your data has been fulfilled or completed and we are not entitled or obliged to continue to store it for legal reasons. You can object to the processing of this data at any time. To do so, send an appropriate message to datenschutz-hotelambadersee@vbrb.de.
In addition, we would like to point out that the rights of data subjects set out in this statement (see chapter 7.) also apply in full to this functionality.
5.3. Newsletters
If you would like to receive the newsletter offered on the website, we need an email address from you. Further data is not collected or is only collected on a voluntary basis. We use this data exclusively to send the requested information and do not pass it on to third parties.
The data entered will be processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw your consent to the storage of the data, the e-mail address and their use to send the newsletter at any time, for example via the unsubscribe link or by sending an e-mail to datenschutz-hotelambadersee@vbrb.de. The legality of the data processing operations that have already taken place remains unaffected by the revocation.
The data you have provided to us for the purpose of subscription will be stored by us until you unsubscribe/unsubscribe from the newsletter and delete it after you unsubscribe. Data that we have stored for other purposes remains unaffected by this.
This website uses CleverReach to send newsletters. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach is a service that can be used to organize and analyze newsletter delivery. The data you enter to subscribe to the newsletter (e.g. email address) is stored on CleverReach's servers in Germany and Ireland.
Data processing is based on your consent (Article 6 (1) (a) GDPR). You can withdraw this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the revocation.
The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from both our servers and CleverReach servers after you unsubscribe from the newsletter. Data that we have stored for other purposes (e.g. e-mail addresses for the member area) remains unaffected by this.
For more information, see CleverReach's privacy policy at: https://www.cleverreach.com/de/datenschutz/.
Conclusion of a contract for order data processing
We have concluded a contract with CleverReach for order data processing and fully implement the strict requirements of the German data protection authorities when using CleverReach.
In addition, we would like to point out that the rights of data subjects set out in this statement (see chapter 7.) also apply in full to this functionality.
5.4. Career page: Data protection in applications and in the application process
We collect and process personal data from applicants for the purpose of processing the application process. The basis for this processing of your personal data is Art. 6 para. 1 lit. b GDPR in conjunction with Section 26 BDSG (employee data protection in conjunction with the implementation of pre-contractual measures). Processing is carried out via the application form on our career page at: https://www.dasbadersee.de.
We use the documents submitted by the applicant for this purpose. The input mask and the required attachments determine which personal data is actually collected. We delete your related data when the purpose for which you have provided us with your data has been fulfilled or completed and we are not entitled or obliged to continue to store it for legal reasons.
Within ABG GmbH, those offices have access to the data that they need to review the application. These include, for example, the personnel managers and the relevant managers.
If we conclude an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with legal requirements. In the event that no employment contract is concluded with the applicant, the application documents will be deleted six months after notification of the rejection decision, provided that deletion does not conflict with any other legitimate interests on our part. We would like to point out that the rights of data subjects set out in this statement (see chapter 7.) also apply in full to this functionality. If you have any questions in this regard, please contact our company data protection officer.
6. Analysis tools and advertising
6.1. Google Analytics
This website uses features of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called cookies. These are text files that are stored on your computer and allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
Google Analytics cookies are stored on the basis of the consent given by you via the Consent Banner in accordance with Article 6 (1) (a) GDPR for the purpose of anonymized analysis of usage behavior.
IP anonymization
We have activated the IP anonymization feature on this website. In the case of the above consent, your IP address will be abbreviated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area before transmission to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and abbreviated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and Internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.
Browser plugin
You can prevent cookies from being saved by setting your browser software accordingly or by not giving your consent or by withdrawing your consent at any time; however, we would like to point out that in this case you may not be able to use all functions of this website in full.
More information about how Google Analytics handles user data can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.
Order data processing
We have concluded a contract with Google for order data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Demographics in Google Analytics
This website uses the demographic features of Google Analytics. As a result, reports can be created that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and from visitor data from third parties. This data cannot be attributed to a specific person. You can deactivate this function at any time via the ad settings in your Google Account or generally prohibit the collection of your data by Google Analytics as described in the section Objection to data collection.
6.2. Google Ads
Provided that you have given the appropriate consent in the Consent Banner, the following procedure takes place:
Google Ads conversion tracking
We use the online advertising program Google Ads, including DoubleClick.ad and Google Syndication, which allows advertisers to place ads both in Google's search engine results and on the Google advertising network. As part of this, we use Google Ads Conversion Tracking. Google Ads Conversion Tracking uses cookies. These cookies expire after 30 days and are not used for personal identification.
As soon as you see or click on our ad on the Google search or advertising network, a cookie is saved on your computer. If you visit certain pages of our website as long as the cookie is valid, both we and Google can recognize that you clicked on our ad and were redirected to our site.
The information collected using the conversion cookie is used to generate conversion statistics for us as a Google Ads customer. We learn the total number of users who clicked on our ad and were redirected to a page with a conversion tracking tag.
The personal information generated by conversion cookies is stored. Each time you visit our website, personal data, including the IP address of the Internet connection used by the data subject, is therefore transmitted to Google in the United States of America. This data is stored by Google in the United States of America.
Users who do not want to participate in tracking can also deactivate the Google Conversion Tracking cookie via their Internet browser under user settings. In this case, you will not be included in the conversion tracking statistics. You can also find more information in Google's privacy policy, which can be accessed via this link: https://www.google.de/intl/de/policies/privacy/.
Google Remarketing
This website also uses Google Dynamic Remarketing as part of Google Ads. Using this technology, users who have already visited our websites or YouTube channel and thus shown interest are addressed again through targeted advertising on the pages of the Google Partner Network. Advertising is displayed through the use of cookies. With the help of the text files, user behavior when visiting the website can be analyzed and then used for advertising in accordance with your interests.
We would like to point out that Google has its own privacy policies, which are independent of ours. We have no responsibility or liability for these policies and procedures.
For more information, please see Google's privacy policy: https://www.google.de/intl/de/policies/privacy/.
Third party provider information:
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001
Terms of use: https://policies.google.com/terms?hl=de
Overview of data protection and privacy policy: https://policies.google.com/privacy/update?hl=de.
7. Rights of data subjects
The EU General Data Protection Regulation grants data subjects comprehensive rights regarding the processing of their data. These rights to which you are entitled are described and explained below.
7.1. Right to confirmation
Provided that you have given the appropriate consent in the Consent Banner, the following procedure takes place:
7.2. Right to information
Every person affected by the processing of personal data has the right to receive free information from the controller about the personal data stored about him and a copy of this information at any time. This right to information includes the following content:
- the purposes of processing;
- the categories of personal data that are processed;
- the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
- if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
- the existence of a right to correct or delete personal data concerning them or to restrict processing by the person responsible or a right to object to this processing;
- the existence of a right to lodge a complaint with a supervisory authority;
- if the personal data is not collected from the data subject, all available information about the origin of the data;
- the existence of automated decision-making, including profiling, in accordance with Article 22 (1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
In addition, you have the right to information as to whether your personal data has been transferred to a third country or to an international organization. If this is the case, you also have the right to obtain information about the appropriate guarantees in connection with the transfer. If you would like to exercise this right to information, you can contact our company data protection officer at any time.
7.3. Right to rectification
Every person affected by the processing of personal data has the right to request the correction of incorrect personal data concerning him or her without delay. You also have the right to request the completion of incomplete personal data, including by means of a supplementary statement, taking into account the purposes of processing.
If you would like to exercise this right of correction, you can contact our company data protection officer at any time.
7.4. Right to delete (“right to be forgotten”)
Any person affected by the processing of personal data has the right to request from the controller that the personal data concerning him or her be deleted immediately, provided that one of the following reasons applies and unless processing is necessary for other reasons:
- the personal data is no longer necessary for the purposes for which they were collected or otherwise processed.
- the data subject withdraws the consent on which the processing was based in accordance with Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR and there is no other legal basis for processing.
- the data subject objects to processing in accordance with Article 21 (1) of the GDPR and there are no overriding legitimate reasons for the processing, or the data subject objects to the processing in accordance with Article 21 (2) of the GDPR.
- the personal data was processed unlawfully.
- the deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the person responsible is subject.
- the personal data was collected in relation to information society services offered in accordance with Article 8 (1) GDPR.
If one of the above reasons applies and you would like to have your personal data stored by us deleted, you can contact our company data protection officer at any time. We will then delete your data immediately, unless there are other legal reasons to the contrary.
If the personal data has been made public by us and our company, as the controller, is obliged to delete your personal data in accordance with Article 17 (1) GDPR, we will take appropriate measures, including technical measures, taking into account the available technology and implementation costs, to inform other data controllers who process the published personal data that you have deleted the published personal data from these other data controllers have requested any links to this personal data or copies or replications of this personal data, insofar as processing is not necessary. Our company data protection officer will take the necessary measures in individual cases.
7.5. Right to restrict processing
Any person affected by the processing of personal data has the right to request the controller to restrict processing if one of the following conditions is met:
- the accuracy of the personal data is disputed by you as the data subject. For the period necessary for us to verify the accuracy of your personal data, we will restrict the processing of existing personal data.
- the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted.
- we no longer need your personal data for processing purposes, but you need them to assert, exercise or defend legal claims.
- You have filed an objection to processing in accordance with Article 21 (1) GDPR and it is not yet clear whether our company's legitimate reasons for processing the data outweigh your legitimate reasons.
If one of the above conditions is met and you request that the processing of personal data stored by us be restricted, you can contact our company data protection officer at any time. The latter will then immediately restrict the processing of the data concerned.
7.6. Right to data portability
You also have the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to have this data transferred to another person responsible at your request, provided that the processing is based on consent in accordance with Article 6 (1) letter a GDPR or Article 9 (2) letter a GDPR or on a contract in accordance with Article 6 (1) (b) GDPR and the processing is carried out using automated procedures. However, this is not possible in cases where processing is necessary to perform a task that is in the public interest or is carried out in the exercise of official authority that has been delegated to us.
You also have the right to have the personal data transmitted directly from us to another person responsible, insofar as this is technically feasible and provided that this does not affect the rights and freedoms of other persons.
To assert the right to data portability, you can contact our company data protection officer at any time.
7.7. Right to object
Any person affected by the processing of personal data has the right, for reasons arising from their particular situation, to object at any time to the processing of personal data concerning them carried out on the basis of Article 6 (1) (e) or (f) GDPR. This also applies to profiling based on these provisions.
In the event of your objection, we will no longer process your personal data unless we can prove compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
In addition, you have the right, for reasons arising from your particular situation, to object to processing of personal data concerning you by us for scientific or historical research purposes or for statistical purposes in accordance with Article 89 (1) of the GDPR, unless such processing is necessary to perform a task in the public interest.
To exercise the right to object, you can contact our company data protection officer directly.
7.8. Right to withdraw consent under data protection law
Any person affected by the processing of personal data has the right to withdraw consent to the processing of personal data at any time.
If you would like to exercise your right to withdraw consent, you can contact our company data protection officer at any time.
7.9. Automated decisions on a case-by-case basis, including profiling
Automated decisions in individual cases, including profiling, are not used on our website.
8. Plug-ins & Tools
8.1. Google Maps
This site uses the Google Maps map service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
The use of the service is only possible with explicit consent. When called, you will be asked to give your consent. A data connection to Google is only established after consent has been given. The legal basis for processing your personal data is Article 6 (1) (a) GDPR. The consent given to process the data can be withdrawn at any time via our consent banner under the cookie settings. The legality of the data processing operations that have already taken place remains unaffected by the revocation.
To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.
More information on how to handle user data can be found in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/.
8.2. Google reCAPTCHA
We use Google reCAPTCHA (hereafter reCAPTCHA) on our websites. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google).
reCAPTCHA is intended to check whether data is entered on our websites (e.g. in a contact form) by a person or by an automated program. To this end, reCAPTCHA analyses the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For analysis, reCAPTCHA evaluates various information (e.g. IP address, time the website visitor spent on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
The reCAPTCHA analyses run completely in the background. Website visitors are not notified that an analysis is taking place.
Data processing is carried out on the basis of Article 6 (1) (f) GDPR. The website operator has a legitimate interest in protecting its web offers from abusive automated spying and from SPAM.
For more information about Google reCAPTCHA and Google's privacy policy, please see the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.
8.3. Matterport
This website uses the service of Matterport, Inc., 352 E. Java Dr., Sunnyvale, CA 94089, USA (https://matterport.com/de).
It is necessary to use the service for technical reasons to display the 3D animated videos on the website. The service is used as part of the balancing of interests in accordance with Art. 6 para. 1 lit. f GDPR and serves the purpose of an appealing presentation.
Further information on data protection issues faced by the service provider is available at https://matterport.com/de/privacy-policy.
8.4. Social media links
Our website contains links to social networks such as Linkedin, Instagram, YouTube, etc. When accessing parts of our website that contain such links, no personal data is transmitted to the operators of these social networks. Only when you click on the link and thereby visit the relevant social network does the operator of the visited network receive personal data relating to you.
For more information about the data processing that takes place when you visit a social network and who is responsible for this within the meaning of Art. 4 No. 7 GDPR, please visit the website of the respective social network.
9. Updating this privacy statement
It may be necessary to update this privacy statement from time to time. We will then inform you here. This statement is dated 14.09.2021, last updated on 24.06.2025.