Privacy policy

1. Controller

The controller for data processing on this website is:

Pension Holmer Moorhof
Anett Sarkander
Hofstraße 9 b
24628 Hartenholm
Telephone: 0176 41002291
Email: holmermoorhof@web.de

2. Your rights

You have the right at any time

• to obtain information about the data stored about you (Art. 15 DSGVO),
• to request the rectification of inaccurate data (Art. 16 DSGVO),
• to request the erasure of your data (Art. 17 DSGVO),
• to request the restriction of processing (Art. 18 DSGVO),
• to receive your data in a transferable format (Art. 20 DSGVO),
• to object to the processing (Art. 21 DSGVO), and
• to withdraw consent you have given (Art. 7 Abs. 3 DSGVO).

Simply contact us informally using the contact details given above. Irrespective of this, you have a right to lodge a complaint with a supervisory authority (Art. 77 DSGVO). The authority responsible for us is:

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD) — Independent Centre for Privacy Protection Schleswig-Holstein
Holstenstraße 98, 24103 Kiel

3. Visiting this website (server log files)

When you access our website, your browser automatically transmits technical information to the server of our hosting provider. This is stored in what are known as log files:

• IP address of the requesting device
• date and time of access
• name and URL of the file retrieved
• volume of data transferred and a message indicating whether the retrieval was successful
• browser type and version used, and the operating system
• the page visited previously (referrer), where transmitted

Purpose: ensuring trouble-free operation, safeguarding system security and investigating attacks.
Legal basis: Art. 6 Abs. 1 lit. f DSGVO. Our legitimate interest lies in the secure and functional operation of this website.
Storage period: the log files are deleted automatically after a short time, at the latest after 30 days. This data is not merged with other data sources.

4. Hosting

This website is hosted by an external service provider in Germany. The provider processes the log file data described above on our behalf. We have a contract with the provider on processing on behalf of a controller pursuant to Art. 28 DSGVO, which ensures that the data is processed exclusively in accordance with our instructions and in compliance with the GDPR.

5. Cookies and local storage

We use no cookies for advertising, analytics or tracking purposes. No profiling and no automated decision-making, including profiling within the meaning of Art. 22 DSGVO, takes place.

Only the following two storage processes are technically necessary:

• Accessibility settings: if you change the font size or contrast using the “View & read aloud” button, your choice is stored in your browser's local storage so that it is retained on your next visit. This information does not leave your device and is not transmitted to us. You can remove it at any time using the “Reset all settings” button or by clearing your browser storage.
• Administration session cookie: a session cookie is set only when logging in to the non-public administration area, in order to keep you logged in. It is deleted when you log out or close your browser and does not affect ordinary visitors to the website.

Legal basis: both processes are strictly necessary for the service you have expressly requested (§ 25 Abs. 2 Nr. 2 TDDDG) and therefore do not require consent.

6. Read-aloud function

The read-aloud function uses the speech output already present in your browser or operating system. The text read out does not leave your device; no data is transmitted to us or to third parties. Depending on the device and manufacturer, the operating system's speech output may carry out processing steps of its own — over which we have no influence.

7. Contacting us by telephone and email

If you call us or write us an email, we process the data you provide (name, telephone number, email address, content of your enquiry) in order to deal with your request.

Legal basis: Art. 6 Abs. 1 lit. b DSGVO, where your enquiry serves the initiation or performance of an accommodation contract; otherwise Art. 6 Abs. 1 lit. f DSGVO.
Storage period: we delete the data as soon as it is no longer required for the purpose of the processing. Statutory retention periods remain unaffected.

8. Contacting us via WhatsApp

If you contact us via WhatsApp, you leave our website. The service is provided by WhatsApp Ireland Limited, Merrion Road, Ballsbridge, Dublin 4, Ireland, a company of the Meta group. This involves the processing of, among other things, your mobile number, your profile name and the content and metadata of your messages. We have no influence over the nature and extent of this processing.

According to the provider, personal data may in this context also be transferred to countries outside the European Union — in particular to the USA. A level of data protection equivalent to the European standard cannot be guaranteed there in every case.

The legal basis for processing the messages that reach us via WhatsApp is Art. 6 Abs. 1 lit. b DSGVO or Art. 6 Abs. 1 lit. f DSGVO. The use of WhatsApp is voluntary.

If you would prefer to avoid this: please feel free to use the telephone, email or post instead. These options are available to you as equally valid alternatives. Further information can be found at whatsapp.com/legal/privacy-policy-eea.

9. Booking via Booking.com

Our website links to our profile on the booking portal Booking.com. This too is purely a link — no Booking.com content is embedded in our pages and no data is transferred there when you visit our website.

If you click the link, you are taken to the website of Booking.com B.V., Oosterdokskade 163, 1011 DL Amsterdam, Netherlands. From that point on, Booking.com's privacy policy applies exclusively. If you book there, we receive from Booking.com the data required to carry out your stay. We process this data on the basis of Art. 6 Abs. 1 lit. b DSGVO.

10. Guest data and registration obligations

In order to carry out your stay, we process the data required for this purpose (name, address, contact details, arrival and departure dates, number of people and, where applicable, details of accompanying pets) on the basis of Art. 6 Abs. 1 lit. b DSGVO.

As an accommodation business, we are also legally obliged to keep special registration forms (§§ 29 ff. Bundesmeldegesetz). To that extent, the processing is carried out on the basis of Art. 6 Abs. 1 lit. c DSGVO. Registration forms must by law be kept for one year and destroyed thereafter. Commercial and tax retention periods of up to ten years apply to invoices and booking records.

11. No external content

All components of this website — fonts, images and design files — are delivered from our own server. No external fonts (such as Google Fonts), no embedded maps and no videos or social media elements are loaded from third-party servers. Your IP address is therefore not transmitted to any third-party provider when you visit our website.

For directions we merely link to an external map service. Here too, data is only transferred once you actively click the link.

12. Encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that your browser's address bar begins with https:// and a padlock symbol is displayed.

13. Changes to this privacy policy

We adapt this privacy policy as soon as changes to our website or to the legal situation make this necessary. The version available at the time of your visit applies.

Last updated: August 2026