Privacy Policy
Rhön Park Hotel

We welcome you to our website. We would like to inform you about the management of your personal data in accordance with Art. 13 General Data Protection Regulation (GDPR).

I. Controller

The controller responsible for the described data collection and processing is Rhön Park Hotel, Rother Kuppe 2, 97647 Hausen-Roth, phone number: +49 (0) 9779 91 – 0, email:

II. Storage of Your IP address

We store the IP address transmitted by your web browser for a period of 7 days strictly for the purpose of identifying, restricting and eliminating attacks on our website. After 7 days, we delete or anonymize your IP address. The legal basis for the processing of this personal data is provided for in Art. 6 para. 1 s. 1 lit. f) GDPR.

III. Usage Data

When you visit our website, the data collected from the use of the website is temporarily stored on our webserver for statistical purposes in order to improve the quality of our website. This data set contains:

  • the page from which the data is requested
  • the name of the data file,
  • the date and time of the query,
  • the amount of data transferred,
  • the access status (file transmitted, file not found),
  • a description of the type of browser used,
  • the IP address of the requesting computer shortened to such an extent that no reidentification of any persona data is possible.

The listed usage data is stored anonymously. Server Log Anonymization of the last two digits of the IP address. TYPO3 log: Storage of the full IP for authorized protection purposes, anonymization of the last two digits of the IP address after 90 days.

IV. Processor

We transmit your data within the framework of processing pursuant to Art. 28 GDPR to service providers who support us in the operation of our website and the associated processes. Our service providers are strictly bound by instructions and contractually bound to us. We use the following service providers:

  • Web-Agency: gronewald Werbung & Pr (with subprocessor Michael Sollmann)
  • Webhoster:
  • Newsletter: CleverReach
  • Tracking: Google Analytics
  • Booking: Bookassist

V. Cookies

We use cookies on our website. Cookies are small pieces of data that are stored and read in your end-device. A distinction is made between session cookies, which are deleted when you clode your browser, and permanent cookies, which are stored even after your visit has expired. Cookies may contain data that enables the recognition of the device being used. However, in some cases cookies only contain information on certain settings which are not personal data.

For the functionality of our website we use session cookies (PHPSESSID, resolution, CookieConsent). Processing is based on Art. 6 para. 1 s. 1 lit. f) GDPR. Our interest lies in optimising or enabling user guidance. You can object to the processing at any time. To do so, please click on the following You can set your browser so that it informs you about the placement of cookies. You can also delete cookies at any time via the corresponding browser setting and prevent the setting of new cookies. In this case it is possible that our website may then not be optimally displayed and some functions may no longer be technically available.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

We also use tracking tools on our website to track your user behaviour and then send you targeted advertising. Processing is based on your consent in accordance with Art. 6 para. 1 s. 1 lit. a) GDPR if you have previously given your consent to tracking on our cookie banner.

1) The following cookies are used on our website:

2. Google Analytics

In order to design our website according to your needs, we create pseudonymous user profiles with the help of Google Analytics. Google Analytics uses cookies which are stored on your terminal and can be read by us. In this way, we are able to recognize returning visitors and count them as such. Data processing is based on your consent in accordance with Art. 6 para. 1 s. 1 lit. a) GDPR.

The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. Since we have activated IP anonymisation on our websites, Google will first shorten your IP address within member states of the European Union. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA (an adequate level of data protection exists according to Art. 45 para. 1 GDPR through Google's participation in the Privacy Shield) and only shortened there. We have also concluded a contract with Google Inc. (USA) for commissioned data processing pursuant to Art. 28 GDPR. Accordingly, Google will only use all information strictly earmarked for the purpose of evaluating the use of our websites for us and compiling reports on website activity.

3. Vimeo

We embed Vimeo videos on our websites that are not stored on our servers. We obtain your consent so that accessing our website with embedded videos does not automatically result in third-party content being reloaded. Third-party content is only reloaded after clicking on the cookie banner. This gives the third-party provider the information that you have accessed our site as well as the usage data that is technically required in this context. We have no influence on the further data processing by the third party. The embedding takes place on the basis of your consent according to Art. 6 Para. 1 sentence 1 lit. a) GDPR, provided you have given your consent by clicking on the cookie banner.

4. Withdraw your consent to tracking

You can withdraw your consent to tracking at any time with effect for the future, without the legality of the previous processing being affected. Please send your withdraw to:

VI. Data security

We take technical and organizational measures to protect your data from unwanted access. Your details are encrypted from your computer to our server and vice versa using SSL or TLS. You can recognize this encryption by the fact that the lock symbol in the status bar of your browser changes from "http://" to "https://".

VII. Newsletter

On our website we offer you the possibility to order our newsletter. If you have given us separate permission to inform you by e-mail about our company's products and services, they will be processed accordingly on the basis of Art. 6 para. 1 s. 1 lit. a) GDPR. You can withdraw your consent at any time without this affecting the legality of the processing that has taken place to date. If your consent is withdrawn, we will discontinue the relevant data processing.

If you no longer wish to receive a newsletter in the future, you can unsubscribe at any time, e.g. by sending an e-mail to or using the unsubscribe link provided in every newsletter e-mail.

The Rhön Park newsletter is sent by CleverReach.

CleverReach GmbH & Co. KG | Mühlenstr. 43 | 26180 Rastede/Germany

VIII. Family Club Membership

You can also register as a Family Club member on our website to receive discounts and other benefits. By giving your consent, you will be admitted to the membership. We will then process your data on the basis of Art. 6 para. 1 s. 1 lit. a) GDPR. You can withdraw your consent at any time without this affecting the legality of the processing that has taken place to date. If your consent is withdrawn, we will discontinue the relevant data processing.

If you no longer wish to be a Family Club member, you can unsubscribe at any time, e.g. by sending an e-mail to or via the link to unsubscribe from the newsletter, which you will find in every newsletter e-mail.

IX. Data processing when using our guest WLAN

We provide visitors to our hotel with access to the Internet via a service provider [] in the form of WLAN access for free use.

For this purpose, we have provided the Rhön Park Hotel with WLAN access points, which enable WLAN-capable terminals (in particular tablets, smartphones) to access the Internet. The WLAN access points record the MAC address as well as the IP address of WLAN-enabled end devices of visitors obtained through  theInternet provider. To connect to the access point, the device must be within their range, the WLAN function must be switched on and you must have actively established a connection with the WLAN network. The MAC address (Media Access Control address) is the hardware address of a network adapter (e.g. the WLAN adapter in your smartphone) that serves as a unique identifier for the device in a computer network. We cannot assign this data directly to your person.

The collected data is traffic data within the meaning of the German Telecommunications Act (Telekommunikationsgesetz) which we transmit to the Internet provider. The data processing is necessary in order to establish a connection to the Internet via the telecommunications provider and is based legally on the user agreement concluded with you (Internet provider). Only when you actively connect to our guest WLAN and register via the login mask or agree to the terms of use of (Internet provider), do we pass on your MAC address to our service provider so that he can give you access to the Internet. Information on the processing of your personal data when using the guest WLAN by (Internet provider) can be found when you register or on the Internet provider's website (

The traffic data will be deleted by us in accordance with the legal requirements immediately (at the latest after 7 days), with the exception of data necessary for error and fault rectification.

You can prevent the collection of your MAC address, for example, by not establishing a connection to the WLAN network with your terminal device.

XI. Your Rights as a User

When processing your personal data, the GDPR grants you as a website user certain rights:

1. Right of access (Art. 15 GDPR)

You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that ist he case to obtain access to the personal data and the information specified in Art. 15 GDPR.

2. Right to rectification and erasure (Art. 16 and 17 GDPR)

You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and, if neccessary, the right to have incomplete personal data completed.

You have the right to obtain an erasure of the personal data concerning you without undue delay, if one oft he reasons listed in Art. 17 GDPR applies, e.g. if the data is no longer neccessary fort he intended purpose.

3. Right to restriction of processing (Art. 18 GDPR)

If one oft he conditions set forth in Art. 18 GDPR applies, you shall have the right to restrict the processing of your data to mere storage, e.g. if you revoke consent, to the processing, fort he duration of a possible examination.

4. Right to data portability (Art. 20 GDPR)

In certain situations, listed in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, common and machine-readable format or demand a transmission of data to another third party.

5. Right to object (Art. 21 GDPR)

If the data pursuant to Art. 6 para. 1 s. 1 lit. f) GDPR (data processing for the purpose of legitimation interests), you have the right to object the processing at any time for reasons arising out of your particular situation. We will then no longer process personal data, unless there are demonstrably compelling legitimate grounds for processing, which override the interests, rights and freedoms of person concerned, or the processing serves the purpose of assertubg, exercising or defending legal claims.

6. Right to lodge a complaint with a supervisory authority

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you consider the processing of the data concerning you infringes data protection regulations. The right to lodge a complaint may be invoked in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement.

XII. Contact Details of the Data Protection Officer

Our data protection officer will be happy to provide you with information or suggestions on the subject of data protection.

datenschutz süd GmbH
Wörthstraße 15
97072 Würzburg

Tel.: 0931 30 49 76 0