We use cookies and other technologies on our website. Some are essential, while others help us improve this website and your experience. Personal data may be processed (such as IP addresses), for example for personalised advertising and content or to measure advertising and content performance. Our privacy policy provides further information on how your data is used. You can withdraw or adjust your choices at any time in the settings.
Read more in our privacy policy
Privacy Policy
1. Data protection at a glance
General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information on data protection can be found in our privacy policy below.
Data collection on this website
Who is responsible for data collection on this website?
Data on this website is processed by the website operator. You can find the operator’s contact details in the section “Information about the controller” in this privacy policy.
How do we collect your data?
Some data is collected when you provide it to us, for example by entering information in a contact form. Other data is collected automatically, or with your consent, by our IT systems when you visit the website. This is primarily technical data, such as your browser, operating system or the time you access a page. This data is collected automatically as soon as you enter this website.
What do we use your data for?
Some data is collected to ensure that the website functions properly. Other data may be used to analyse your usage behaviour.
What rights do you have regarding your data?
You have the right to receive information about the origin, recipients and purpose of your stored personal data at any time, free of charge. You also have the right to request that this data be corrected or deleted. If you have consented to data processing, you may withdraw that consent at any time with effect for the future. You also have the right, under certain circumstances, to request restriction of the processing of your personal data. You have a further right to lodge a complaint with the competent supervisory authority.
You may contact us at any time about these rights or other questions concerning data protection.
Analytics tools and third-party tools
Your browsing behaviour may be statistically evaluated when you visit this website. This is mainly done using analytics software. Detailed information about this software can be found in the following privacy policy.
2. Hosting and content delivery networks (CDN)
This website is hosted by an external service provider (host). Personal data collected on this website is stored on the host’s servers. This may include IP addresses, contact enquiries, metadata and communications data, contract data, contact details, names, website access information and other data generated through a website.
We use the host to fulfil contracts with our prospective and existing customers (Article 6(1)(b) GDPR) and in the interest of providing our online services securely, quickly and efficiently through a professional provider (Article 6(1)(f) GDPR).
Our host will process your data only to the extent necessary to fulfil its service obligations and will follow our instructions concerning that data.
We use the following host:
IONOS SE
Elgendorfer Straße 57
56410 Montabaur
Data processing agreement
We have entered into a data processing agreement with our host to ensure that data is processed in compliance with data protection requirements.
3. General information and mandatory disclosures
Data protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection provisions and this privacy policy. Various types of personal data are collected when you use this website. Personal data is data that can identify you personally. This privacy policy explains what data we collect and how we use it. It also explains how and for what purpose this happens. Please note that transmitting data over the internet, for example by email, can involve security vulnerabilities. Complete protection of data against access by third parties is not possible.
Information about the controller
The controller within the meaning of Article 4(7) GDPR is the person who, alone or jointly with others, determines the purposes and means of processing personal data.
The controller for our website is:
Hotel In Laisen
Shemsedin Balaj
In Laisen 36
72766 Reutlingen
+49 7121 7492250
+49 7121 7492249
+49 152 53023591
info@hotel-hil.de
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names, email addresses or similar information.
Storage period
Unless a more specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose of processing no longer applies. If you make a valid request for deletion or withdraw consent to data processing, your data will be deleted unless we have other legally permissible grounds for storing it, such as tax or commercial retention requirements. In that case, the data will be deleted when those grounds no longer apply.
General information about the legal bases for processing data on this website
If you have consented to data processing, we process your personal data on the basis of Article 6(1)(a) GDPR or Article 9(2)(a) GDPR where special categories of data under Article 9(1) GDPR are processed. If you expressly consent to the transfer of personal data to third countries, processing is also based on Article 49(1)(a) GDPR. If you consent to the storage of cookies or access to information on your device, for example through device fingerprinting, processing is additionally based on Section 25(1) TTDSG. Consent may be withdrawn at any time. If your data is required to perform a contract or take steps prior to entering into a contract, we process it under Article 6(1)(b) GDPR. We also process data where necessary to fulfil a legal obligation under Article 6(1)(c) GDPR. Processing may further be based on our legitimate interests under Article 6(1)(f) GDPR. The following sections of this privacy policy explain the legal bases applicable in each case.
Recipients of personal data
We work with various external parties in the course of our business. In some cases, this requires personal data to be transferred to them. We disclose personal data to external parties only where necessary to perform a contract, where required by law, for example disclosure to tax authorities, where we have a legitimate interest in disclosure under Article 6(1)(f) GDPR, or where another legal basis permits it. When using processors, we disclose our customers’ personal data only on the basis of a valid data processing agreement. Where processing is carried out jointly, a joint processing agreement is concluded.
Information about transfers of data to the USA and other third countries
Our website includes tools provided by companies based in the USA or other third countries that do not provide a secure level of data protection. When these tools are active, your personal data may be transferred to and processed in those countries. Please note that a level of data protection comparable to that in the EU cannot be guaranteed there. For example, US companies are obliged to disclose personal data to security authorities without you, as the data subject, being able to take legal action against this. It therefore cannot be ruled out that US authorities, such as intelligence services, may process, evaluate and permanently store your data on US servers for surveillance purposes. We have no influence over these processing activities.
Withdrawal of your consent to data processing
Many processing operations are possible only with your express consent. You may withdraw consent you have already given at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Right to object to data collection in particular circumstances and to direct marketing (Article 21 GDPR)
IF DATA IS PROCESSED ON THE BASIS OF ARTICLE 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA. THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS. THE APPLICABLE LEGAL BASIS IS SET OUT IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) GDPR).
WHERE YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THAT PURPOSE. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING (OBJECTION UNDER ARTICLE 21(2) GDPR).
Right to lodge a complaint with the competent supervisory authority
In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work or place of the alleged infringement. This right exists without prejudice to other administrative or judicial remedies.
Right to data portability
You have the right to receive data which we process automatically on the basis of your consent or in performance of a contract, either yourself or through a third party, in a commonly used, machine-readable format. If you request direct transfer to another controller, this will take place only where technically feasible.
Access, correction and deletion
Within the applicable statutory provisions, you have the right at any time to obtain, free of charge, information about your stored personal data, its origin and recipients, and the purpose of processing, and, where applicable, to have it corrected or deleted. You may contact us at any time about this or other questions concerning personal data.
Right to restriction of processing
You have the right to request restriction of the processing of your personal data. You may contact us at any time to exercise this right. The right applies in the following cases:
If you dispute the accuracy of your personal data held by us, we generally need time to verify it. You may request restriction of processing while this verification takes place.
If your personal data has been or is being processed unlawfully, you may request restriction instead of deletion. If we no longer need your personal data, but you need it to exercise, defend or establish legal claims, you may request restriction instead of deletion.
If you have objected under Article 21(1) GDPR, your interests must be balanced against ours. Until it is established whose interests prevail, you may request restriction of processing. Where processing is restricted, the data may, apart from storage, be processed only with your consent, to establish, exercise or defend legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.
SSL and TLS encryption
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as enquiries you send to us as the website operator. You can recognise an encrypted connection by the change from “http://” to “https://” in the browser’s address bar and by the padlock symbol in the browser.
When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.
Objection to unsolicited advertising emails
We hereby object to the use of contact details published as part of the legally required legal notice for sending unsolicited advertising or information materials. The website operators expressly reserve the right to take legal action in the event of unsolicited advertising, such as spam emails.
4. Data collection on this website
Cookies
Our website uses cookies. Cookies are small data packages which do not damage your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are deleted automatically after your visit. Persistent cookies remain on your device until you delete them or your browser deletes them automatically.
Cookies have various functions. Many are technically necessary because certain website functions, such as a shopping basket or displaying videos, would not work without them. Other cookies may be used to analyse user behaviour or for advertising.
Cookies required for electronic communication, to provide functions you request, such as a shopping basket, or to optimise the website, such as audience measurement cookies (necessary cookies), are stored on the basis of Article 6(1)(f) GDPR unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to provide technically reliable and optimised services. Where consent has been requested for storing cookies and comparable recognition technologies, processing takes place exclusively on the basis of that consent (Article 6(1)(a) GDPR and Section 25(1) TTDSG). Consent may be withdrawn at any time.
You can configure your browser to notify you when cookies are set, allow them only in individual cases, reject cookies in particular cases or generally, and automatically delete cookies when closing the browser. Disabling cookies may limit this website’s functionality.
The cookies and services used on this website are described in this privacy policy.
Server log files
The website provider automatically collects and stores information in server log files which your browser automatically transmits to us. This includes:
• Date and time of the log entry
• IP address
• HTTP user
• Date and time of the server request
• Request (HTTP request type, path, parameters and protocol)
• HTTP status code
• Volume of data transferred
• Referrer URL (the previously visited page)
• Operating system and its interface
• Browser type and version
This data is not combined with other data sources.
It is collected on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in the technically reliable presentation and optimisation of the website, which requires server log files.
Contact form
If you send us enquiries through the contact form, we store the information you provide, including your contact details, to process your enquiry and any follow-up questions. We will not disclose this data without your consent.
Processing is based on Article 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling enquiries addressed to us (Article 6(1)(f) GDPR), or on your consent (Article 6(1)(a) GDPR) where requested. Consent may be withdrawn at any time.
Data entered in the contact form remains with us until you request deletion, withdraw consent to storage, or the purpose of storage no longer applies, for example once your enquiry has been handled. Mandatory statutory provisions, particularly retention periods, remain unaffected.
Enquiries by email, telephone or fax
If you contact us by email, telephone or fax, we store and process your enquiry, including all resulting personal data such as your name and enquiry, to deal with your request. We will not disclose this data without your consent.
Processing is based on Article 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling enquiries addressed to us (Article 6(1)(f) GDPR), or on your consent (Article 6(1)(a) GDPR) where requested. Consent may be withdrawn at any time.
Data sent to us through contact enquiries remains with us until you request deletion, withdraw consent to storage, or the purpose of storage no longer applies, for example once your request has been handled. Mandatory statutory provisions, particularly statutory retention periods, remain unaffected.
5. Technical services
Locally hosted resources
Images, fonts, styles and core website scripts are hosted locally. Google Analytics and, if configured, Google Tag Manager load only after you consent to analytics. Without this consent, no analytics connection to Google is made. External booking pages and Google Maps open only through their respective links.
Google Analytics and Google Tag Manager
Only with your consent to the Analytics category do we load Google Analytics 4 and, if configured, Google Tag Manager. They measure page views, technical browser data, clicks on direct booking, telephone and email links, and successfully submitted contact enquiries. Form contents and contact details are not sent as analytics events. Google may set cookies and process data on its servers. This integration does not enable advertising personalisation or Google Signals. You can withdraw consent for future processing through “Cookie settings” in the footer; the page then reloads and our integration is disabled.
Google Maps and 360° view
By selecting “Load Google view”, you agree to load the 360° view from Google. Your IP address and technical browser data will be sent to Google, which may set cookies. You can close the view at any time. Your choice is not saved. The embedded view is not loaded without this click. Closing removes the embedded view and ends its use on this page; it does not delete data already sent or cookies set by Google. External directions links open Google Maps only when clicked.
Local contact form protection
The contact form uses a locally generated, single-use session token and an additional spam-check field. A technically necessary session cookie is set when submitting the form. The token is valid for 15 minutes. Requests are limited on the server using a hash of the IP address, with a five-minute counting window. This verification does not send data to Google or another captcha provider.
6. Our social media profiles
Data processing by social networks
We maintain publicly accessible profiles on social networks. The networks we use are listed below.
Social networks such as Facebook and X can generally analyse your behaviour extensively when you visit their websites or a website with integrated social media content, such as like buttons or advertising banners. Visiting our social media profiles triggers various processing operations relevant to data protection.
If you are logged into your social media account and visit our profile, the platform operator can associate that visit with your account. Your personal data may also be collected if you are not logged in or do not have an account with that platform, for example through cookies stored on your device or by recording your IP address.
Using this data, platform operators can create profiles containing your preferences and interests. This allows interest-based advertising to be displayed both within and outside the social media platform. If you have an account with the network, interest-based advertising may be displayed on all devices where you are or have been logged in.
Please also note that we cannot track every processing operation on social media platforms. Depending on the provider, further processing may take place. Details are available in the respective platforms’ terms of use and privacy policies.
Legal basis
Our social media profiles are intended to provide as comprehensive an online presence as possible. This constitutes a legitimate interest under Article 6(1)(f) GDPR. Analytics initiated by social networks may be based on other legal grounds, which the respective operators must specify, such as consent under Article 6(1)(a) GDPR.
Controller and exercising your rights
When you visit one of our social media profiles, such as Facebook, we and the platform operator are jointly responsible for the processing triggered by your visit. In principle, you can exercise your rights of access, correction, deletion, restriction, portability and complaint against either us or the respective platform operator.
Please note that, despite this joint responsibility, we do not have full influence over processing carried out by social media platforms. Our options depend largely on the respective provider’s company policies.
Storage period
Data we collect directly through our social media profiles will be deleted from our systems once you request deletion, withdraw consent to storage, or the purpose of storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory statutory provisions, particularly retention periods, remain unaffected.
We have no influence over how long social network operators store your data for their own purposes. Please contact them directly for details, for example through their privacy policies listed below.
Your rights
You have the right at any time to obtain information about the origin, recipients and purpose of your stored personal data, free of charge. You also have rights to object, to data portability and to lodge a complaint with the competent supervisory authority. You may further request correction, blocking, deletion and, under certain circumstances, restriction of the processing of your personal data.
7. Our own services
Handling applicant data
You may apply for a position with us, for example by email, post or an online application form. The following information explains the scope, purpose and use of the personal data collected during the application process. We assure you that your data is collected, processed and used in accordance with applicable data protection law and all other statutory provisions, and is treated as strictly confidential.
Scope and purpose of data collection
If you submit an application, we process the associated personal data, such as contact and communications details, application documents and interview notes, to the extent necessary to decide whether to establish an employment relationship. The legal bases are Section 26 of the new German Federal Data Protection Act (BDSG-neu) for initiating employment, Article 6(1)(b) GDPR for taking steps towards a contract, and, where you have given consent, Article 6(1)(a) GDPR. Consent may be withdrawn at any time. Within our company, your personal data is shared only with people involved in handling your application.
If your application is successful, the data you submit is stored in our processing systems for the purposes of the employment relationship on the basis of Section 26 BDSG-neu and Article 6(1)(b) GDPR.
Data retention period
If we cannot offer you a position, you decline an offer or you withdraw your application, we reserve the right to retain the data you have provided for up to 6 months after the application process ends through rejection or withdrawal, on the basis of our legitimate interests (Article 6(1)(f) GDPR). The data is then deleted and physical application documents are destroyed. Retention serves in particular as evidence in the event of a legal dispute. If it is apparent that the data will be needed after the 6-month period, for example because of an imminent or ongoing legal dispute, it will be deleted only when the purpose of extended retention no longer applies.
Data may also be retained longer if you have consented under Article 6(1)(a) GDPR or if statutory retention obligations prevent deletion.