taste
Reserve

Legal

Privacy Policy

The protection of your personal data is important to us. Below we inform you, in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), about which data is processed when you visit this website and for what purpose.

1. Controller

The controller responsible for data processing on this website is:

Hotel Andante OHG

Peter-Thumb-Straße 2

77977 Rust · Germany

Phone: +49 7822 44693-0

E-mail: hotel@andante-rust.de

2. General information on data processing & legal bases

As a matter of principle, we only process our users' personal data to the extent necessary to provide a functional website as well as our content and services. Processing generally only takes place with the user's consent. An exception applies in cases where prior consent cannot be obtained for practical reasons and the processing of the data is permitted by law.

The legal basis for processing is Art. 6 (1) GDPR: lit. a (consent), lit. b (performance of a contract or pre-contractual measures), lit. c (legal obligation) and lit. f (legitimate interest, e.g. in a secure and functional website).

3. Hosting & server log files

This website is hosted by an external service provider (processor). The personal data collected on this website is stored on the host's servers. A data processing agreement pursuant to Art. 28 GDPR exists with the host.

Each time our website is accessed, the provider automatically collects information in so-called server log files that your browser transmits. These are in particular: browser type and version, the operating system used, referrer URL, the host name of the accessing computer, the time of the server request and the IP address. This data is not merged with other data sources. The legal basis is Art. 6 (1) lit. f GDPR; our legitimate interest lies in the secure and stable operation of the website.

4. Cookies & consent

Our website uses cookies. Cookies are small text files stored on your device. Necessary cookies (e.g. for language selection and security tokens) are technically required for the operation of the website; the legal basis is Art. 6 (1) lit. f GDPR or § 25 (2) TTDSG.

For all non-necessary cookies (statistics and marketing), we obtain your consent via our own cookie banner (§ 25 (1) TTDSG, Art. 6 (1) lit. a GDPR). We use Google Consent Mode v2: all consent categories (ad_storage, ad_user_data, ad_personalization, analytics_storage) are set to "denied" by default and are only updated to "granted" after your active consent.

Your consent is voluntary and can be withdrawn at any time with effect for the future, or adjusted via the settings in the cookie banner. Rejecting non-necessary cookies is just as easy as accepting them.

5. Google Ads & conversion tracking

On this website we use Google Ads, a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). For this purpose, the global site tag (gtag.js) with the conversion ID AW-1070556622 is integrated. We use it to measure conversions, in particular when visitors start a reservation via a reservation button ("Reservation started").

Processing takes place exclusively on the basis of your consent (Art. 6 (1) lit. a GDPR). Without marketing consent, Consent Mode v2 ensures that no corresponding cookies are set and no personal marketing data is transmitted to Google. If consent is given, data may be transferred to Google – including to the USA.

You can withdraw your consent at any time via our cookie banner. Further information on data processing by Google can be found in Google's privacy policy: https://policies.google.com/privacy.

6. OpenTable reservation widget

For table reservations we use the OpenTable service (OpenTable Inc. or OpenTable GmbH). A reservation widget or a link to OpenTable is loaded on our reservation page. When you make a reservation, the data you enter (e.g. name, contact details, date, number of guests) is transmitted to OpenTable and processed there. The legal basis is Art. 6 (1) lit. b GDPR (performance of pre-contractual measures or the reservation agreement).

OpenTable is jointly responsible under data protection law for processing the data collected via the widget. Further information can be found in OpenTable's privacy policy: https://www.opentable.de/legal/privacy-policy.

7. Google Maps

On our contact page we embed map material from the Google Maps service (Google Ireland Limited) via an iframe to show you our location and make it easier to find us. When the map is loaded, Google may record your IP address and transfer data – including to the USA. The legal basis is our legitimate interest in an appealing presentation of our location (Art. 6 (1) lit. f GDPR) or your consent (Art. 6 (1) lit. a GDPR).

Further information on the handling of user data can be found in Google's privacy policy: https://policies.google.com/privacy.

8. Your rights as a data subject

With regard to the personal data concerning you, you have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to withdraw consent given, with effect for the future (Art. 7 (3) GDPR)

In addition, you have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data (Art. 77 GDPR). The competent authority is, among others, the supervisory authority of the federal state in which the controller is based (Baden-Württemberg).

9. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the browser's address bar changes from "http://" to "https://" and by the padlock symbol in your browser bar. When encryption is activated, the data you transmit to us cannot be read by third parties.