Privacy

NaturKultur Hotel Stumpf

Information about the processing of your data

In the following, we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior.

Definitions

"Website" or "Internet presence" hereinafter means all pages of the responsible person on www.hotel-stumpf.de.

"Personal data" means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal data therefore includes, for example, a person's name, e-mail address and telephone number, but may also include data about preferences, hobbies and memberships.

"Processing" means operations or series of operations performed with or without the aid of automated procedures in relation to personal data, such as collection, recording, organization, filing, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment, combination, restriction, erasure or destruction.

"Pseudonymization" means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.

"Consent" hereinafter means any freely given, informed and unambiguous indication of intention in the form of a statement or other unambiguous affirmative act by which the data subject signifies his or her agreement to the processing of personal data relating to him or her.

"Google" hereinafter means Google, LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; reachable in the European Union at: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Scope

The data protection declaration applies to all pages of www.hotel-stumpf.de. It does not extend to any linked websites or Internet presences of other providers.

Responsible provider

Responsible for the processing of personal data within the scope of this privacy policy is:

NaturKulturHotel Stumpf
Zeilweg 16
74867 Neunkirchen

Phone: +49 (0) 6262 - 9229 - 0
Fax: +49 (0) 6262 - 9229 - 100
E-mail: info@hotel-stumpf.de
Internet: www.hotel-stumpf.de

Security

We have taken comprehensive technical and organizational precautions to protect your personal data from unauthorized access, misuse, loss and other external interference. To this end, we regularly review our security measures and adapt them to the state of the art.

Your rights

You have the following rights against us regarding the personal data concerning you:

- Right of access (Art. 15 GDPR),

- Right to rectification (Art. 16 GDPR) or deletion (Art. 17 GDPR),

- Right to restriction of processing (Art. 18 GDPR),

- Right to object to processing (Art. 21 GDPR),

- Right to withdraw your consent (Art. 7 (3) DSGVO),

- Right to receive the data in a structured, common, machine-readable format ("data portability") as well as the right to have the data transferred to another data controller if the conditions of Art. 20 (1) lit. a, b DSGVO are met (Art. 20 DSGVO)

You may exercise your rights by notifying the contact details listed in the "Responsible Provider" section or the data protection officer appointed by us.

You also have the right to complain to a data protection supervisory authority about the processing of your personal data carried out by us (Art. 77 DSGVO).

Use of the website, access data

In the case of mere informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 p. 1 lit. f DS-GVO):

- IP address

- Date and time of the request

- Time zone difference from Greenwich Mean Time (GMT)

- Content of the request (concrete page)

- Access status/HTTP status code

- Data volume transferred in each case

- Website from which the request comes

- Browser

- Operating system and its interface

- Language and version of the browser software.

In addition to the previously mentioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which the body that sets the cookie (here by us), certain information flows. Cookies cannot execute programs or transfer viruses to your computer. They serve to make the Internet offer as a whole more user-friendly and effective. The temporary processing of the IP address by the system is necessary to technically enable delivery of the website to your computer. Processing your IP address for the duration of the session is necessary for this. The legal basis for this processing is Art. 6 para. 1 p. 1 lit. f) DSGVO.

The access data is not used to identify individual users and is not merged with other data sources. The access data is deleted when it is no longer required to achieve the purpose of its processing. In the case of the collection of data for the provision of the website, this is the case when you end your visit to the website.

IP addresses are stored in log files to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context either. The data is generally deleted after seven days at the latest; processing beyond this is possible in individual cases. In this case, the IP address is deleted or alienated so that an assignment of the calling client is no longer possible.

The collection of data for the provision of the website and the processing of the data in log files is mandatory for the operation of the website. You can object to the processing. In the event of your justified objection, we will review the situation and either discontinue or adjust the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.

Cookies

In addition to the aforementioned access data, so-called cookies are stored in the Internet browser of the end device you are using when you use the website. These are small text files with a sequence of numbers that are stored locally in the cache of the browser used. Cookies do not become part of the PC system and cannot execute any programs. They are used to make our website user-friendly. The use of cookies may be technically necessary or for other purposes (e.g. analysis/ evaluation of website usage).

This website uses the following types of cookies, the scope and functionality of which are explained below:

Transient cookies

Transient cookies are automatically deleted when you close the browser. These include in particular the session cookies. These store a so-called session ID, with which various requests of your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.

Persistent cookies

Persistent cookies are automatically deleted after a specified duration, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.

You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all functions of this website.

Cookie Banner Notice

When you access the website, you will be informed by an info banner about the use of cookies for analysis purposes and referred to this privacy policy. In this context, there is also an indication of how the storage of cookies can be prevented in the browser settings.

Contacting our company

When contacting our company, e.g. by e-mail, via the contact form, room inquiry form on the website, via the room inquiry form, via the event inquiry form or via the table inquiry form, the personal data provided by you will be processed by us in order to respond to your inquiry.

Mandatory for the processing of inquiries via the contact form on the website are, among other things, the specification of a name or a pseudonym, a telephone number and a valid e-mail address. At the time of sending the message to us, the following data is also processed:

- IP address

- Registration date/time

The legal basis for the processing is Art. 6 (1) p. 1 lit. f) DSGVO or Art. 6 (1) p. 1 lit. b) DSGVO, if the contact is aimed at the conclusion of a contract.

The processing of personal data from the input mask serves us solely to process the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

In this context, the data will not be passed on to third parties. The data is processed exclusively for the processing of the conversation. We delete the data accruing in this context after the processing is no longer necessary or restrict the processing to compliance with the existing legally mandatory retention obligations.

You have the possibility to object to the processing of your personal data for contact requests at any time. This is the case if the processing is not necessary, in particular, for the fulfillment of a contract with you, which is shown by us in each case in the previous description of the functions. In such a case, the processing of the request may not be continued. In the event of your justified objection, we will review the situation and either discontinue or adjust the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.

Processing and disclosure of personal data for contractual purposes

We process your personal data if and insofar as this is necessary for the initiation, establishment, execution and/or termination of a legal transaction with our company. The legal basis for this results from Art. 6 para. 1 p. 1 lit. b) DSGVO.

After the purpose has been achieved (e.g. contract processing), the personal data will be blocked for further processing or deleted, unless we are entitled to further storage and processing required in the respective context on the basis of a consent granted by you (e.g. consent to the processing of the e-mail address for sending electronic advertising mail), a contractual agreement, a legal authorization (e.g. authorization to send direct advertising) or on the basis of legitimate interests (e.g. storage for the enforcement of claims).

The transfer of your personal data takes place insofar, if

- it is necessary for the establishment, execution or termination of legal transactions with our company (e.g. in the case of the transfer of data to a payment service provider/shipping company for the processing of a contract with your person), (Art. 6 para. 1 p. 1 lit. b) DSGVO), or

- a subcontractor or vicarious agent that we use exclusively in the course of providing the offers or services you have requested requires such data (such agents are, unless you are expressly notified otherwise, only authorized to process the data to the extent necessary to provide the offer or service); or

- there is an enforceable official order (Art. 6 (1) p. 1 lit. c) DSGVO) or

- there is an enforceable court order (Art. 6 (1) p. 1 lit. c) DSGVO) or

- we are obliged to do so by law (Art. 6 (1) p. 1 lit. c) DSGVO) or

- processing is necessary in order to protect the vital interests of the data subject or another natural person (Art. 6 (1) p. 1 lit. d) DSGVO) or

- we are authorized or even obliged to disclose data in order to pursue overriding legitimate interests (Art. 6 para. 1 p. 1 lit. f) DSGVO).

Any further transfer of your personal data to other persons, companies or bodies will not take place unless you have effectively consented to such a transfer. The legal basis of the processing is then Art. 6 para. 1 p. 1 lit. a) DSGVO.

Processing and disclosure of personal data in the online ordering system

If you would like to place an order or booking in our online store, it is necessary for the initiation and conclusion of the contract that you provide personal data such as your name, address and e-mail address. The mandatory data required for the order and contract processing are marked separately, other information is provided voluntarily. We process your data for order and booking processing. In particular, we will forward payment data to your chosen payment service provider or our house bank. We have integrated the booking system of DIRS21 (Borsigstraße 26, 73249 Wernau (Neckar)) on our website to provide you with an optimal booking process. The processing of their order and booking data takes place on the servers of DIRS21 in Germany. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. b) DSGVO. To prevent unauthorized third parties from accessing your personal data, the ordering process on the website is encrypted using SSL/TLS technology.

We delete the data accruing in this context after the storage is no longer required or restrict the processing if there are statutory retention obligations. Due to mandatory commercial and tax regulations, we are obliged to retain your address, payment and order data for a period of ten years. After two years after termination of the contract, we restrict processing and reduce processing to compliance with existing legal obligations.

Processing and disclosure of personal data in the voucher store

If you wish to place an order in our voucher store at https://www.sofort-gutschein.com/gutschein-shop/1036, it is necessary for the initiation and conclusion of the contract that you provide personal data such as your name, address and e-mail address. The mandatory information required for the order and contract processing are marked separately, other information is provided voluntarily. We process your data for order processing. In particular, we will forward payment data to your chosen payment service provider or our house bank. For the voucher store we use the ordering system of Sofort Gutschein (FIRMEDIA GmbH & Co. KG, zum Ritzhagen 5, 34508 Willingen, Germany), to enable an optimal booking process. The processing of their order data takes place on the servers of Sofort Gutschein in Germany. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. b) DSGVO. To prevent access to your personal data by unauthorized third parties, the ordering process on the website is encrypted with SSL/TLS technology.

Processing of personal data pursuant to Section 30 of the Federal Registration Act (BMG)

Accommodation establishments, such as hotels in particular, are required by Section 30 of the Federal Registration Act (BMG) to collect the following data from the guest on the day of arrival and to have the guest sign the registration form by hand:

- Date of arrival and expected departure,

- Surnames,

- First names,

- Date of birth,

- Nationalities,

- Address,

- Number of passengers and their nationality in the cases of § 29 paragraph 2 sentence 2 and 3,

- Serial number of the recognized and valid passport or passport replacement document for foreign persons,

- other data on the collection of tourism and spa fees.

We are obliged to collect, process and pass on this data within the framework of the BMG, the legal basis for the processing results from Art. 6 para. 1 s. 1 lit. c) DSGVO.

We delete this data or restrict processing as soon as it is permissible under the provisions of the BMG and if there is no consent on your part (Art. 6 para. 1 s. 1 lit. a) DSGVO) and no other legitimate interest on our part in continued processing.

Note on transfer to the USA and other third countries

Among other things, we use tools from companies based in the USA or other third countries that are not secure under data protection law. If these tools are active, your personal data may be transferred to these third countries and processed there. We would like to point out that no level of data protection comparable to that in the EU can be guaranteed in these countries. For example, US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. Therefore, it cannot be ruled out that U.S. authorities (e.g. intelligence agencies) may process, evaluate and permanently store your data located on U.S. servers for monitoring purposes. We have no influence on these processing activities.

Email marketing

Existing customer advertising

We reserve the right to process the e-mail address provided by you in the context of the inquiry/booking in accordance with the statutory provisions in order to send you, for example, the following content by e-mail during or following the processing of the contract, provided that you have not already objected to this processing of your e-mail address:

- other interesting offers from our portfolio,

- to events organized by our company,

- technical information,

- Sending our catalog,

- Questions about special requests,

- Overview of possible leisure activities,

- Information on how to get there by public transport.

Legal basis for the processing Art. 6 para. 1 p. 1 lit. f) DSGVO. We carry out the aforementioned processing for customer care and to increase our services. We delete your data when you terminate the newsletter subscription, but no later than two years after termination of the contract.

Furthermore, we process the evaluation of the order/booking on the basis of user interests. If the sending of electronic information is not required for the execution of the contract (e.g. e-mail with payment information), the legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. We carry out the aforementioned processing to optimize our service or the website.

We would like to point out that you can object to receiving direct advertising at any time without incurring any costs other than the transmission costs according to the prime rates. To do so, click on the unsubscribe link in the newsletter or send us your objection to the contact details listed in the section "Responsible party".

Newsletter

With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the consent form.

For the registration to our newsletter we use the so-called double-opt-in procedure. This means that after your registration we send you an e-mail to the specified e-mail address, in which we ask you to confirm that you wish to receive the newsletter. In addition, we store your IP addresses and the times of registration and confirmation. The purpose of this procedure is to prove your registration and, if necessary, to be able to clarify a possible misuse of your personal data.

The only mandatory data for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and will be used to address you personally. After your confirmation, we store your e-mail address for the purpose of sending the newsletter. The legal basis is Art. 6 para. 1 p. 1 lit. a DS-GVO.

You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in every newsletter e-mail, by e-mail to info@hotel-stumpf.de or by sending a message to the contact details given in the imprint.

We would like to point out that we evaluate your user behavior when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files that are stored on our website. For the evaluations, we link the data mentioned in § 3 and the web beacons with your e-mail address and an individual ID. With the data thus obtained, we create a user profile in order to tailor the newsletter to your individual interests. In doing so, we record when you read our newsletters, which links you click on in them and infer your personal interests from this. We link this data to actions you have taken on our website.

You can object to this tracking at any time by clicking on the separate link provided in each email or by informing us via another contact channel. The information is stored for as long as you are subscribed to the newsletter. After unsubscribing, we store the data purely statistically and anonymously. Moreover, such tracking is not possible if you have deactivated the display of images by default in your e-mail program. In this case, the newsletter will not be fully displayed to you and you may not be able to use all functions. If you display the images manually, the above-mentioned tracking will take place.

Email marketing service "MailChimp

We use the email marketing service "MailChimp" of the provider Rocket Science Group, LLC (675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA, Web: https://mailchimp.com/; hereinafter: "MailChimp").

If you have registered for the newsletter, the data provided during registration will be stored and processed on MailChimp's servers in the USA. MailChimp processes this information to send and evaluate the newsletter on our behalf. The MailChimp newsletters contain so-called "web beacons", which are pixel-sized files that are retrieved from the MailChimp server when the newsletter is opened. As part of the retrieval, technical information, such as the browser used, time of page retrieval and IP address, is collected. This information is processed for evaluation and technical improvement of the services. Furthermore, it is evaluated whether newsletters are opened, when they are opened and which links are clicked on by the reader. This information can theoretically be assigned to individual newsletter recipients. However, neither we nor MailChimp intend to monitor individual recipients; rather, the evaluation of the aforementioned information serves to identify the reading habits of recipients in order to better adapt and distribute our newsletter content accordingly. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. We have no knowledge of the storage period at MailChimp and no possibility to influence it.

You can object to the processing at any time with effect for the future by clicking on the unsubscribe link at the end of the newsletter. This simultaneously ends the processing for the receipt of the newsletter and for the statistical analyses. A separate objection of the dispatch via MailChimp or the statistical analysis is not possible.

Alternatively, you can object at http://www.aboutads.info/choices/ and http://www.youronlinechoices.com/ (for the European Union area).

Furthermore, MailChimp may, according to its own information, use the transmitted data to optimize and improve its own services, e.g. to technically optimize the dispatch and display of the newsletter. According to MailChimp, it does not process the data in order to send you its own advertising, nor is the data passed on to third parties.

It may happen that you, as a recipient of the newsletter, are redirected to the MailChimp website, for example, if you follow the link contained in the newsletter to retrieve the newsletter online in the event of display problems in the email program. In this context, we would like to point out that further analysis services and cookies may be used on the MailChimp website, which may process your personal data on behalf of MailChimp. We have no influence on this processing.

ADDITIVE+ NEWSLETTER

You have the option of subscribing to our newsletter via our website. For this we need your e-mail address and your declaration that you agree to receive the hotel newsletter via ADDITIVE GmbH, our provider in the area of Hotel e-mail marketing are in agreement.

In order to provide you with targeted information, we collect and process data with our newsletter system also voluntarily provided information on areas of interest, name, date of birth and region/country of origin.

As soon as you have registered for the newsletter, we will send you a confirmation e-mail with a link to confirm your registration.

You can cancel your subscription to the newsletter at any time via the unsubscribe link in the respective newsletter.

We use software from ADDITIVE OHG, 39011 Lana (BZ), Italy ("ADDITIVE") to process your subscription and to deliver the newsletter to your e-mail address. These services and systems are used to process and store your data, at least in part, outside the EU or EEA. The appropriate level of data protection results from the concluded order processing agreement.

Hosting

We use external hosting services that serve to provide the following services: Infrastructure and platform services, computing capacity, storage resources and database services, security as well as technical maintenance services. All data required for the operation and use of our website is processed.

We use external hosting services for the operation of this website. By using external hosting services, we aim to provide our website efficiently and securely. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO.

The collection of data for the provision and use of the website and the processing of data via external web hosts is absolutely necessary for the operation of the website. You can object to the processing. In the event of your justified objection, we will review the situation and either discontinue or adjust the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.

Integration of third party content

Third-party content such as videos, maps, RSS feeds or graphics from other websites are integrated on the website. This integration always requires that the providers of this content ("third-party providers") perceive the IP addresses of the users. This is because without the IP address they cannot send the content to the browser of the respective user. The IP address is thus required for the display of this content.

We strive to only use content from third-party providers who only process the IP address to deliver the content. However, we have no influence if the third-party providers process the IP addresses, e.g. for statistical purposes. Insofar as this is known to us, we will inform you about it below.

Some of the third-party providers may process data outside the European Union.

You can object by installing a JavaScript blocker such as the browser plugin 'NoScript' (www.noscript.net) or by disabling JavaScript in your browser.

However, this may result in functional restrictions on the website.

Google Web Fonts

We use so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.

For this purpose, the browser you use must connect to Google's servers. This enables Google to know that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 (1) p. 1 lit. f) DSGVO. We have no knowledge of the storage period at Google and no possibility to influence it.

You can object to the processing by changing the browser settings so that the browser does not support web fonts - but then a default font is used by your computer.

For more information about Google Web Fonts, please visit https://developers.google.com/fonts/faq and see Google's privacy policy: https://www.google.com/policies/privacy/.

Google Tag Manager

We use Google Tag Manager on our website. Google Tag Manager is a solution that allows marketers to manage website tags through one interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect any personal data. The tool takes care of triggering other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, it remains in place for all tracking tags implemented with Google Tag Manager.

YouTube videos

We use plug-ins of the video platform YouTube.de or YouTube.com on the website, a service that - represented by Google - is operated by YouTube LLC (headquarters at 901 Cherry Avenue, San Bruno, CA 94066, USA; "YouTube"). By means of the plug-ins, we can also integrate visual content ("videos") that we have published on Youtube.de or Youtube.com on this website.

The videos are all embedded in "enhanced privacy mode", which means that no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos, the data mentioned below will be transmitted. We have no influence on this data transmission.

By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned in the section "Access data" is transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment to your YouTube profile, you must log out before activating the button.

YouTube stores your data as usage profiles and processes them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the provision of needs-based advertising and to inform other users of the social network about your activities on our website.

The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. The processing serves to make our website more attractive and to offer you additional service. We have no knowledge of the storage period at YouTube and no possibility to influence it.

You have a right to object to the processing, and you must contact YouTube to exercise it. By changing the settings in your internet browser, you can disable or restrict the transfer of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all functions of the website.

For more information on the purpose and scope of processing by YouTube, please see the privacy policy at https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA.

Integration of Google Maps

This website also uses the "Google Maps" service from Google to display maps or map sections and thus enables you to conveniently use the map function on the website.

By visiting the website, Google receives the information that you have accessed the corresponding sub-page of our website. In addition, the data mentioned in the section "Access data" are transmitted to Google. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button.

Google stores your data as usage profiles and processes them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website.

For more information on the purpose and scope of processing by the plug-in provider, please refer to the provider's privacy policy. There you will also find further information on your rights in this regard and setting options for protecting your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA. Further information on the terms of use of Google Maps can be found at https://www.google.com/intl/de_de/help/terms_maps.html.

You have a right to object to the processing, and you must contact Google to exercise it. By changing the settings in your internet browser, you can disable or restrict the transfer of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all functions of the website.

Additive+ vouchers

You have the option of purchasing vouchers via our website using an online voucher system via our website. To process your purchase and to save and store your data, we use the voucher software from ADDITIVE in the area of Voucher Marketing Tourism we use the voucher software from ADDITIVE GmbH, 39011 Lana (BZ), Italy ("ADDITIVE"). Your data is processed and stored within the EU/EEA.

The data you provide is required to fulfill the contract or to carry out pre-contractual measures. We cannot conclude the contract with you without this data. Data will not be transferred to third parties, with the exception of the transfer of credit card data to the payment service providers for the purpose of debiting the purchase price and to our tax advisor to fulfill our tax obligations.

Data processing is carried out on the basis of the legal provisions of Art. 6 para. 1 lit a (consent) and/or lit b (necessary for contract fulfillment) of the GDPR.

ADDITIVE+ MARKETING AUTOMATION - Direct marketing

To increase customer loyalty and sell services and additional services, we use Hotel Marketing Automation Software from ADDITIVE GmbH, 39011 Lana (BZ), Italy ("ADDITIVE") in the area of Marketing and sales automation for hotels. Data that we collect and process in connection with your inquiry, booking, order, activation, registration or other transmission of a form on the website is analyzed and used to automatically provide you with offers for services and additional services via ADDITIVE+ MARKETING AUTOMATION. The appropriate level of data protection results from the concluded order processing agreement.

You can object to the use of your data for this purpose at any time via the unsubscribe link in the respective message.

Data processing is carried out on the basis of the legal provisions of Art. 6 para. 1 lit f (legitimate interest) of the GDPR.

Our concern within the meaning of the GDPR (legitimate interest) is to avoid disadvantages compared to our competitors, to improve our brand awareness and to maximize our economic success through the best possible sales use of the contacts gained.

ADDITIVE+ LANDINGPAGE - Online marketing and landing pages

In addition to our website, we also operate Online Hotel Marketing we also operate optimized sales landing pages. To process your inquiry, booking, order, activation, registration or other transmission of a form on such a landing page and to store and retain your data, we use common cloud services and CRM systems as well as software from ADDITIVE GmbH, 39011 Lana (BZ), Italy ("ADDITIVE"), our supervising hotel marketing agency. The appropriate level of data protection results from the order processing agreements concluded with the respective companies.

Our landing pages use functions of the web analysis service Google Analytics from Google Inc ("Google"). Google Analytics makes it possible to analyze the use of the website by its users. The information generated about your user behavior is transferred to the provider's server and stored there.

Your IP address is recorded but immediately anonymized (e.g. by deleting the last 8 bits). This means that only a rough localization is possible.

You can prevent the transmission of data relating to your use of the online offer to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link:

https://chrome.google.com/webstore/detail/google-analytics-opt-out/fllaojicojecljbmefodhfapmkghcbnh

ADDITIVE has insight into the data collected by Google Analytics. This data is not used for purposes other than analyzing the use of our websites and evaluating our marketing and sales measures.

Our websites and landing pages also use ADDITIVE functions for cross-channel recording of the use of our websites as well as marketing and sales measures such as landing pages, newsletters and social media presences. Information about your visits and submitted forms on our websites is also transmitted to ADDITIVE in order to evaluate and optimize our marketing and sales measures.

Data processing is carried out on the basis of the legal provisions of Art. 6 para. 1 lit f (legitimate interest) of the GDPR.

Our concern within the meaning of the GDPR (legitimate interest) is the improvement of our offer and our website by analyzing the use of our website as well as sales and marketing measures.

In addition, our landing pages and our website use remarketing functions of Google Inc ("Google") and Meta Platforms Inc ("Meta"). The fact that you have visited this website is transmitted to Meta and Google. These functions are used to present interest-based advertisements to visitors to the landing pages in Google's advertising network or on the social network Facebook and Instagram.

Data processing in connection with these remarketing functions is carried out on the basis of the legal provisions of Art. 6 para. 1 lit a (consent) of the GDPR.

You will be informed about the use of cookies for these remarketing functions by means of a banner when you visit our landing pages. By continuing to use the website or by clicking on the corresponding button, you consent to its use. You can revoke your consent at any time by calling up the page with the cookie information on the respective landing page and rejecting the use of cookies in the banner that appears.

Route planner from Outdooractive

This website uses the "Route Planner by Outdooractive" service (Outdooractive GmbH & Co. KG, Missener Straße 18, 87509 Immenstadt, Germany) to display bicycle, hiking, jogging and inline skating tours. By using the route planner on the website, Outdooractive receives the data mentioned in the section "Access data", whereby cookies may be used in accordance with the section "Cookies". Outdooractive tracks the selection of tours and the downloads of GPS tracks on the basis of this data. Outdooractive stores this data within the European Union and processes it for the purposes of advertising, market research and/or demand-oriented design of the website. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. The processing serves to make our website more attractive and to provide you with additional service. We have no knowledge of the storage period at Outdooractive and no possibility to influence it. For more information on the purpose and scope of processing by the provider, please refer to the provider's privacy policy. There you will also find further information about your rights in this regard and setting options for protecting your privacy: https://www.outdooractive.com/de/datenschutz.html.

You have a right to object to the processing, whereby you must contact Outdooractive to exercise this. You have the right to object on grounds relating to your particular situation, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims (Art. 21 (1) DSGVO). By changing the settings in your internet browser, you can disable or restrict the transfer of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all functions of the website.

Services for statistical, analytical and marketing purposes

We use third-party services for statistical, analysis and marketing purposes. In this way, it is possible for us to provide you with a user-friendly, optimized use of the website. The third-party providers use cookies to control their services (see the section "Cookies" above). Personal data is not processed, unless otherwise explained below.

Some of the third-party providers open the possibility to declare a direct objection to the use of the respective service, e.g. by setting an opt-out cookie.

If you activate a corresponding opt-out cookie, the external provider will no longer process any data about your usage behavior in the future. A merely selective objection to an individually made selection of external services is also possible. If you change the browser or the end device used or delete all cookies, you must set the opt-out cookie again.

Furthermore, you can also object directly to the use of cookies via the opt-out platform of the Bundesverband Digitale Wirtschaft e.V. (BVDW) at http://www.meine-cookies.org/cookies_verwalten/praeferenzmanager.html or via the deactivation page of the Network Advertising Initiative at http://www.networkadvertising.org/choices/. Further information on usage-based advertising and the opt-out options can also be viewed at the following link: http://www.youronlinechoices.com/de/.

In the following, we inform you about the services of external providers currently used on our website as well as about the purpose and scope of the respective processing in each individual case and about your existing objection options.

Google Analytics

In order to optimally tailor our website to your interests, we use Google Analytics, a web analytics service provided by Google. Google Analytics uses so-called "cookies" (see the section "Cookies" above), which are stored on your computer and allow an analysis of your use of the website. The information generated about your use of this website is transferred to a Google server in the USA and processed there.

In the event that IP anonymization is activated on this website, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing us with other services relating to website activity and internet usage.

The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.

This website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are processed in abbreviated form, which means that personal references can be ruled out. Insofar as the data collected about you has a personal reference, this is therefore immediately excluded and the personal data is deleted immediately.

We use Google Analytics to analyze and regularly improve the use of our website. The statistics allow us to improve our offer and make it more interesting for you as a user. The legal basis for the processing of Google Analytics is Art. 6 para. 1 p. 1 lit. f) DSGVO. The Google Analytics cookies are deleted after 14 months at the latest.

You have the right to object. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

You can find more information from the third-party provider Google at.

http://www.google.com/analytics/terms/de.html,

http://www.google.com/intl/de/analytics/learn/privacy.html,

http://www.google.de/intl/de/policies/privacy.

Social media

The content on our pages can be shared in social networks such as Facebook, Google or Youtube in a privacy-compliant manner. Direct contact between the networks and users is only established when the user actively clicks on one of these buttons.

There is no automatic transfer of user data to the operators of these platforms. If the user is logged in to one of the social networks, an information window appears when sharing links on Facebook, Twitter, YouTube & Co. in which the user can confirm the text before sending it.

Our users can share the content of this site in social networks in a privacy-compliant manner without complete surfing profiles being created by the operators of the networks.

Online evaluation

Description and scope of data processing Former guests can submit a rating at our hotel after check-out. For this purpose, we would like to send you an e-mail within 14 days after departure to ask you to submit a hotel evaluation. Each rating can be published anonymously upon request. If you did not feel comfortable in our hotel, we would like to take the opportunity to contact you.

If you submit an online rating on our website, the data will be stored in the rating tool of CA Customer Alliance GmbH, Ullsteinstr. 118, Turm B, D-12109 Berlin, Germany. CA Customer Alliance GmbH is committed to handling your transmitted data in a manner that complies with data protection regulations. It takes all organizational and technical measures to protect your data.

If a former guest takes advantage of this online evaluation option, data from the former guest is stored in the evaluation mask. These data are: E-mail address and voluntary information such as first name, last name, language and the rating information.

There will be no further disclosure of data to third parties in this context. The data will be used exclusively for the publication of the rating and for arbitration in case of bad ratings.

The legal basis for the processing of the data is, moreover, our legitimate interest in the processing of the data.

The purpose of the hotel rating is to communicate and summarize opinions of hotel guests via our website, so that interested parties can form their own opinion about our performance and services. In addition, the results serve our internal quality management.

The data will not be deleted.

There is always the possibility to have the publication of the rating deleted (right to be forgotten). To do this, use the e-mail address info@hotel-stumpf.de. Please let us know which rating it is about.

Purposes of the processing of personal data

We process the aforementioned data for the operation of our website and for the fulfillment of contractual obligations to our customers or the protection of our legitimate interests.

In the case of inquiries from you outside of an active customer relationship, we process the data for sales and advertising purposes. You can object to the use of your personal data for advertising purposes at any time.

Voluntary data

Insofar as you voluntarily provide data to us, e.g. in forms, and this data is not required for the fulfillment of our contractual obligations, we process this data on the legitimate assumption that the processing and use of this data is in your interest.

Recipient / passing on of data

Data that you provide to us will not be disclosed to third parties as a matter of principle. In particular, your data will not be disclosed to third parties for their advertising purposes.

However, we may use service providers for the operation of these web pages or for other products or services of ours. Here it may happen that a service provider obtains knowledge of personal data We select our service providers carefully - especially with regard to data protection and data security - and take all measures required by data protection law for permissible data processing. Data processing outside the European Union

Insofar as personal data is processed outside the European Union, you can see this in the previous explanations.

Data Protection Officer

We take the issue of data protection particularly seriously. We are not required by law to appoint a data protection officer and have not appointed one.

Your rights as a data subject

You have the right to obtain information about the personal data concerning you. You can contact us for information at any time. In the case of a request for information that is not made in writing, we ask for your understanding that we may require proof from you that you are the person you claim to be.

Furthermore, you have a right to rectification or deletion or to restriction of processing, insofar as you are entitled to this by law.

Finally, you have a right to object to processing within the scope of the law.

A right to data portability also exists within the framework of data protection law.

Data deletion

As a matter of principle, we delete personal data if there is no need for further storage. A requirement may exist, in particular, if the data is still needed to fulfill contractual services, to check and grant or defend against warranty and, if applicable, guarantee claims. In the case of statutory retention obligations, deletion will only be considered after expiry of the respective retention obligation.

Right of complaint to a supervisory authority

You have the right to complain about the processing of personal data by us to a data protection supervisory authority.

Amendment of this privacy notice

We will revise this data protection notice in the event of changes to this website or other occasions that make this necessary. You will always find the current version on this website.

Status: 12.02.2022

Customer testimonials

This is how guests experience NaturKultur Hotel Stumpf

Nice reception, nice staff, top wellness area, breakfast is something for everyone. Dinner delicious and nice service. Garden beautifully landscaped we will be happy to come back.

6/6 at HolidayCheck

A nice, quiet hotel. Price-performance ratio in order. Staff helpful and friendly. Breakfast and other meals optimal. Spa area and massages are recommended. All in all everything is great!

5/5 on Google

Friendly staff, good wellness area and great food, rich breakfast buffet and good room facilities. Ideal to hike and relax for a few days in SILENCE. Our dog was also welcome.

4/5 at Tripadvisor

A pearl in the middle of the deepest Odenwald! Beautiful very modern and clean rooms, small but nice spa area (appropriate for the size of the hotel) very clean and quiet! Great restaurant with very good food and surprisingly varied menu! Breakfast was also excellent, also here a nice selection and very good quality!

5/5 on Facebook

There was nothing to complain about.Breakfast top of everything what there.Dinner delicious and fast service.Wellness area super beautifully made.Very remote therefore rest was super.Rooms new and clean.Parking at the hotel.

5/5 on Tripadvisor

For 34 years now we have been coming here to hike and relax, initially with family as a retreat from the hectic Rhine-Main area and today as a fixed point in our annual planning.Conclusion:We love this "hideaway" in the small Odenwald with its fields, forests and the Neckar.

6/6 at HolidayCheck

Only to recommend. Ambience invites you to relax, the staff is super helpful and nice. Rooms are above average clean and tidy and the country house breakfast was without equal.Absolutely satisfied.Looking forward to our next visit.