Privacy policy for the Parkhotel Goldlinde

As of November 22, 2025

1. Responsible person

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is:

Tian Dao Jian Kang GmbH,
represented by the Managing Director: Ms. Jine Chen,
Münchhausenplatz 4,
37619 Bodenwerder
, Germany

Telephone: +49 5533 9797762
Email: info@parkhotel-goldlinde.de
Website: https://parkhotel-goldlinde.de

2. Data Protection Officer

A data protection officer is not required under the legal provisions and therefore has not been appointed.

3. General information on data collection and processing

3.1 Scope of processing personal dataWe collect and use our users’ personal data only to the extent necessary for providing a functional website and our content and services (in particular, hotel bookings and service offerings). The collection and use of our users’ personal data is generally only carried out with the consent of the data subject. An exception applies in cases where obtaining prior consent is not possible for practical reasons and the processing of the data is permitted by law.3.2 Legal basis for the processing of personal dataWhere we obtain consent from the data subject for processing personal data, Article 6(1)(a) GDPR serves as the legal basis. When processing personal data necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations necessary for taking steps prior to entering into a contract. Where processing personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis (e.g., reporting obligations for accommodation providers). In the event that processing personal data is necessary to protect the vital interests of the data subject or of another natural person, Article 6(1)(d) GDPR serves as the legal basis. If processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, and the interests or fundamental rights and freedoms of the data subject do not override those interests, then Article 6(1)(f) GDPR serves as the legal basis for the processing.3.3 Data deletion and storage periodThe personal data of the data subject will be erased or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this is provided for by European or national legislation in EU regulations, laws, or other provisions to which the controller is subject. Data will also be blocked or erased when a storage period prescribed by the aforementioned regulations expires, unless further storage of the data is necessary for the conclusion or performance of a contract. Specifically for the hotel:

Booking data: These will be stored for 10 years in accordance with the legal retention requirements of the German Commercial Code (HGB) and the German Fiscal Code (AO).
Contact details from inquiries: These will be deleted as soon as the inquiry has been fully processed, unless a booking follows or a legal retention obligation applies.
Server log files: These are deleted or anonymized after a maximum of 7 days.

4. Provisioning the website and creating log files

4.1 Description and scope of data processingEach time our website is accessed, our system automatically collects data and information from the computer system of the accessing device. The following data is collected:

Information about the browser type and version used
The user’s operating system
The user’s IP address
Date and time of access
Websites from which the user’s system accessed our website
Websites accessed by the user’s system via our website

The data is also stored in our system’s log files. This data is not stored together with other personal data of the user.4.2 Legal basis for data processingThe legal basis for the temporary storage of the data and log files is Art. 6 para. 1 lit. f GDPR.4.3 Purpose of data processingThe temporary storage of the IP address by the system is necessary to enable the delivery of the website to the user’s computer. For this purpose, the user’s IP address must be stored for the duration of the session. Storage in log files is carried out to ensure the functionality of the website. In addition, the data helps us to optimize the website and to ensure the security of our IT systems. The data is not used for marketing purposes in this context.4.4 Storage durationThe data is deleted as soon as it is no longer needed for the purpose for which it was collected. In the case of data collected for the provision of the website, this is the case when the respective session ends. Log files are deleted after a maximum of 7 days.

5. Contact via contact form and email

5.1 Gebuchte Zimmer stehen Gästen on the day of arrivalab 14:00 Uhr zur Verfügung. Ein5.1 Description and scope of data processingOur website includes a contact form that can be used to contact us electronically. If a user chooses to use this form, the data entered will be transmitted to us and stored. This data typically includes:

name
E-mail address
Regarding
News

The following data is also stored at the time the message is sent:

The user’s IP address
Date and time of dispatch

Alternatively, you can contact us via the provided email address. In this case, the personal data you transmit with your email will be stored.5.2 Legal basis for data processingThe legal basis for processing data is Article 6(1)(a) GDPR if the user has given their consent. Data transmitted during contact is regularly processed on the basis of Article 6(1)(b) GDPR (performance of a contract or pre-contractual measures).5.3 Storage durationThe data will be deleted as soon as it is no longer required for the purpose for which it was collected. For personal data from the contact form and data transmitted by email, this is the case when the respective conversation with the user has ended. The conversation is considered ended when it is clear from the circumstances that the matter in question has been resolved.Anspruch auf früheren Zugang besteht nicht. 5.2 Am Abreisetag müssen die Zimmer Rooms must be vacated by 11:00 AM at the latest . 5.3 In case of late departure, the hotel may charge the following fees:Bei Abreise vor 18:00 Uhr: 50 % des Zimmerpreises Bei Abreise nach 18:00 Uhr: 100 % des ZimmerpreisesDer Gast behält sich das Recht vor, nachzuweisen, dass kein oder nur ein wesentlich geringerer Schaden entstanden ist.

6. Booking requests and processes

6.1 Description and scope of data processingOn our website, you have the option to book rooms and services directly or to submit a booking request. When you make a booking or booking request, we collect the following data in order to contractually agree upon and carry out your stay:

Title, First Name, Last Name
Address (street, house number, postal code, city, country)
E-mail address
Telephone number for queries)
Payment data (e.g. credit card details) – this is usually forwarded directly to our payment service provider and is not stored by us.
Booking details (arrival date, departure date, number of adults/children, room preferences, special requests)
Company details for business trips, if applicable.

According to § 30 of the Federal Registration Act (BMG), we are obliged to collect and report the data of all guests (in particular name, date of birth, address, nationality, identification data).6.2 Legal basis for data processingThe legal basis for data processing to carry out the booking is Article 6(1)(b) GDPR (performance of a contract). The collection of registration data according to the Federal Registration Act (BMG) is based on Article 6(1)(c) GDPR (compliance with a legal obligation).6.3 Storage durationBooking data is stored after the contractual relationship has been fully processed, in accordance with tax and commercial law retention periods (generally 10 years), and then deleted. Registration data required by the Federal Registration Act (BMG) is deleted after the statutory retention period of generally 3 years has expired.

7. Cookies (technically necessary cookies)

7.1 Description and scope of data processingOur website uses cookies. Cookies are text files that are stored in or by the web browser on the user’s computer system. When a user visits a website, a cookie can be stored on the user’s operating system. This cookie contains a characteristic string that enables the browser to be uniquely identified when the website is visited again. We use so-called technically necessary cookies to make our website more user-friendly. Some elements of our website require that the requesting browser can be identified even after a page change. The following data, in particular, can be stored in cookies:

Language settings
Login information
Entries in booking forms

7.2 Legal basis for data processingThe legal basis for the processing of personal data using technically necessary cookies is Article 6(1)(f) GDPR.7.3 Purpose of data processingThe purpose of using technically necessary cookies is to simplify website use for users. Some functions of our website cannot be offered without the use of cookies. For these functions, it is necessary that the browser is recognized even after a page change.7.4 Duration of storage, right to object and erasureCookies are stored on the user’s computer and transmitted from there to our site. Therefore, as a user, you have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically.7.1 Description and scope of data processingOur website uses cookies. Cookies are text files that are stored in or by the web browser on the user’s computer system. When a user visits a website, a cookie can be stored on the user’s operating system. This cookie contains a characteristic string that enables the browser to be uniquely identified when the website is visited again. We use so-called technically necessary cookies to make our website more user-friendly. Some elements of our website require that the requesting browser can be identified even after a page change. The following data, in particular, can be stored in cookies:

Language settings
Login information
Entries in booking forms

8. Cookie consent tool (consent management)

Our website uses a cookie consent tool (e.g. CookieYes, Complianz or a similar system) to manage your consent to the setting of non-essential cookies and the use of certain tools in compliance with data protection regulations.

When you first visit our website, you will be informed about the use of cookies and similar technologies and can select which categories you wish to consent to (e.g., statistics, marketing, external media).
Non-essential cookies and tools will only be activated after you have given your explicit consent.

Your selection will be stored in a technically necessary cookie to prove your consent (Art. 7 para. 1 GDPR) and to take your settings into account on subsequent visits.

The legal basis for the use of the cookie consent tool is Art. 6 para. 1 lit. c GDPR in conjunction with Art. 5 para. 2 GDPR (accountability) as well as our legitimate interest in legally compliant and user-friendly consent management pursuant to Art. 6 para. 1 lit. f GDPR.

9. Use of non-essential cookies and tracking technologies

Cookies that are not technically necessary (e.g., for statistics, marketing, or external media) are only set with your explicit consent (Art. 6 para. 1 lit. a GDPR). You can withdraw this consent at any time with effect for the future by adjusting your settings in the cookie consent tool.9.1 Statistics cookies (e.g. Google Analytics)To the extent that web analytics services such as Google Analytics are used on our website, these serve to analyze the behavior of website visitors and to improve our website. In particular, the following data may be processed:

IP address (usually shortened/anonymized)
Pages visited and time spent on the site
Source of origin (referrer URL)
technical information (browser, operating system, device type)

The use of such statistical tools is based solely on your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw this consent at any time via the cookie consent tool.9.2 Marketing cookies (e.g. Facebook Pixel, Google Ads)Marketing cookies are used to show you interest-based advertising and to measure the effectiveness of advertising campaigns. Pseudonymous user profiles may be created for this purpose. Processing only takes place if you have given your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw your consent at any time via the cookie consent tool.9.3 External media (e.g. YouTube, map services)When third-party content such as YouTube videos or similar services are embedded, cookies and other technologies may be used to deliver and analyze the content. These services are only loaded after you have consented to the processing (Art. 6 para. 1 lit. a GDPR). If you reject external media in the cookie settings, certain content may not be displayed.

10. Analytics tools and advertising

Note: This section is only relevant if the mentioned tools are actually used.

10.1 Google Analytics

This website may use features of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics allows website operators to analyze the behavior of website visitors. The website operator receives various usage data, such as page views, time spent on the site, operating systems used, and the user’s origin. This data can be aggregated by Google into a profile that is assigned to the respective user or their device.

The use of Google Analytics is based solely on your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw your consent at any time via the cookie consent tool.

10.2 Google Ads

If we use Google Ads or similar advertising services, this serves to promote our offerings. Conversion tracking allows us to see whether you perform certain actions on our website after clicking on an ad.

Here too, use is only possible with your consent (Art. 6 para. 1 lit. a GDPR), which you can revoke at any time.

11. Plugins and Tools

11.1 Google Web Fonts

This website may use web fonts provided by Google for consistent font display. When you visit a page, your browser loads the necessary web fonts into its browser cache to display text and fonts correctly.

For this purpose, the browser you are using must connect to Google’s servers. This allows Google to know that our website was accessed via your IP address.

The use of Google Web Fonts, insofar as they are loaded externally, is based on our legitimate interest in a uniform and appealing presentation of our online services (Art. 6 para. 1 lit. f GDPR). Insofar as consent is obtained via the cookie consent tool, the legal basis is Art. 6 para. 1 lit. a GDPR.

11.2 Google Maps

This page uses the Google Maps service via an API. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transmitted to and stored on a Google server in the USA. The provider of this website has no influence on this data transfer.

The use of Google Maps is in our legitimate interest in presenting our online services in an appealing manner and ensuring the easy location of the places we indicate on the website. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR. Where consent is obtained, processing is based on Article 6(1)(a) GDPR.

12. Data transfer to third parties

Your personal data will only be shared with third parties if this is legally permissible or if you have given your consent. In particular, we share data with the following categories of recipients:

Authorities: In accordance with Section 30 of the Federal Registration Act (BMG) to fulfill our reporting obligation (e.g., police, registration authorities).
Payment service providers: For processing payments (e.g., banks, credit card companies, external payment providers such as Stripe or PayPal).
External service providers (data processors): For the maintenance of our IT systems, hosting providers, and email delivery service providers. These operate on the basis of Article 28 GDPR and are contractually obligated to confidentiality and data security.
Legal advisors and auditors: To safeguard our legal and tax obligations.

13. Your rights

18.1 Änderungen oder Ergänzungen dieses Vertrags bedürfen der Schriftform.

18.2 Sollten eine oder mehrere Bestimmungen dieser Allgemeinen Geschäftsbedingungen ungültig sein oder werden, bleibt die Gültigkeit der übrigen Bestimmungen davon unberührt.

18.3 Es gilt deutsches Recht unter Ausschluss des UN-Kaufrechts.

18.4 Gerichtsstand für Geschäftsreisende ist der Ort des Hotels.