Privacy Policy Goldener Ochsen Goeppingen-Hohenstaufen

Privacy Policy

This privacy policy explains which personal data we process, the purposes for which this is done and the rights you have under the General Data Protection Regulation (GDPR).

This English page is provided as a translation and information aid. The German privacy policy is the sole legally binding version.

Version of this privacy policy: 17 July 2026

Responsible body

Room enquiries and reservations can only be made by telephone. Arrival times and check-in are also arranged by telephone. Telephone enquiries and reservations can only be handled in German.

Web hosting and server log files

This website is hosted by Strato GmbH, Otto-Ostrowski-Strasse 7, 10249 Berlin, Germany. When the website is accessed, technically necessary connection and log data may be processed, in particular the IP address, date and time of access, requested file or URL, referrer URL, browser and operating system information, transferred data volume and HTTP status code.

The processing serves the technical provision, stability and security of the website, in particular error analysis and the detection and prevention of misuse and attacks. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of our online service.

Our website is provided exclusively via HTTPS. The transmission between your browser and our web server is protected by TLS encryption against unauthorised reading or alteration while in transit.

According to the current information provided by Strato, the IP addresses of website visitors are stored for a maximum of seven days for the detection and prevention of attacks. Other log data is processed in accordance with the technical provision of the service and the applicable requirements of the hosting provider. Where Strato processes personal data on our behalf, a data processing agreement pursuant to Article 28 GDPR is in place.

Further information: Strato privacy information.

Cookies, tracking and external links

We do not use cookies or tracking, analytics or marketing technologies on this website.

External map services, timetable information, social networks and other third-party services are not embedded in our website as interactive content, iFrames or external scripts. They are provided only as links.

Only when you actively click such an external link do you leave our website and establish a connection to the respective provider. In particular, your IP address, technical connection data and the web address accessed may then be transmitted to that external provider. The privacy policy of the respective provider applies to the subsequent processing.

Contact and e-mail communication

If you contact us by telephone, e-mail or post, we process the information you provide insofar as this is necessary to deal with your request. This may include, in particular, your name, contact details, the content of your enquiry and, where the matter relates to a stay or contract, corresponding booking or transaction data.

Room enquiries and reservations can only be made by telephone. Telephone enquiries and reservations can only be handled in German. The e-mail address is intended for general matters. We use services provided by Strato GmbH to send and receive e-mails. In particular, e-mail addresses, message content and technical communication data are processed in this context.

Where your enquiry serves to initiate or perform a contract, Article 6(1)(b) GDPR is the legal basis. General enquiries are processed on the basis of Article 6(1)(f) GDPR; our legitimate interest lies in the appropriate and efficient handling of enquiries.

Please note that ordinary e-mail communication is generally not end-to-end encrypted. Particularly confidential information should therefore not be sent unprotected by e-mail. In such cases, you may first contact us by telephone or use the postal service.

Enquiries and reservations are handled personally by us. We do not use chatbots, generative AI systems or automated response systems for this purpose. We do not use WhatsApp or social-media messenger services as official contact channels for the business.

Purely general enquiries without a booking or contractual connection are stored only for as long as is necessary to deal with the matter and for reasonable follow-up. The data is then deleted unless statutory retention obligations or other legally permissible reasons require continued storage.

Data backup with Strato HiDrive

We use Strato HiDrive, provided by Strato GmbH, for the storage and backup of business documents and for technical backups. Depending on the relevant process, invoices, receipts, business correspondence, booking documents and technical backups may be stored there.

The processing serves secure storage, recoverability and compliance with operational and statutory obligations. Depending on the content, the legal bases are Article 6(1)(b), Article 6(1)(c) and Article 6(1)(f) GDPR. Our legitimate interest lies in secure IT organisation and data backup.

The storage duration depends on the purpose of the respective data and the applicable statutory retention periods. Where Strato acts as a processor, the data processing agreement pursuant to Article 28 GDPR applies.

Booking and contract data

In connection with room enquiries, reservations and stays, we process the data required to initiate and perform the accommodation contract. This may include, in particular, your name, contact details, stay dates, agreed services, payment and invoice data and necessary correspondence.

The legal basis is Article 6(1)(b) GDPR. Where statutory retention or documentation obligations apply, processing is additionally based on Article 6(1)(c) GDPR. Without the information required for the reservation or performance of the contract, a stay may not be arranged or provided.

Storage duration and statutory retention

We store personal data only for as long as is necessary for the respective purpose or for as long as statutory retention obligations apply. Once the purpose no longer applies and the relevant periods have expired, the data is deleted unless another legal basis permits further storage.

Tax and accounting documents

Depending on the type of document, statutory retention periods of in particular 6, 8 or 10 years apply to tax and accounting documents. The specific period depends on the legal classification of the document concerned.

Commercial and business correspondence

Received commercial and business letters and copies of sent commercial and business letters are generally retained for the period prescribed by law. Where a document is also subject to another retention obligation, a different, longer period may apply.

Special registration forms for accommodation establishments

Where the statutory requirements apply, we process data from special registration forms in accordance with Sections 29 and 30 of the German Federal Registration Act (Bundesmeldegesetz – BMG). Under the current law, this special registration obligation applies to accommodated foreign nationals.

The legal basis is Article 6(1)(c) GDPR in conjunction with the relevant provisions of the BMG. In accordance with Section 30 BMG, special registration forms are retained for one year and destroyed within three months after the end of the retention period.

Recipients of personal data

Personal data is received only by bodies that require it for the respective purposes. These may include Strato as the hosting, e-mail and cloud service provider, our tax adviser in connection with tax and accounting tasks, and authorities or other public bodies where there is a statutory obligation to disclose the data.

Where necessary for bookkeeping, annual financial statements, tax returns or tax advice, we provide our tax adviser with the documents and personal data required for these purposes. The tax adviser generally processes the transmitted data under their own data-protection responsibility within the scope of their statutory and professional duties.

We do not pass personal data on for advertising or market-research purposes.

We do not carry out automated decision-making, including profiling, within the meaning of Article 22 GDPR.

Your rights

Subject to the statutory requirements, you have in particular the rights of access (Article 15 GDPR), rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR), data portability (Article 20 GDPR) and objection (Article 21 GDPR).

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future (Article 7(3) GDPR). To exercise your rights, you may contact the responsible body named above.

In addition, under Article 77 GDPR you have the right to lodge a complaint with a data-protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.

Right to object under Article 21 GDPR

Where we process personal data on the basis of Article 6(1)(f) GDPR, you have the right to object to that processing at any time on grounds relating to your particular situation.

Following an objection, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defence of legal claims.

You may send your objection to the responsible body named above.

Data-protection supervisory authority

For Baden-Württemberg, you may in particular contact the following supervisory authority: