business boarding
city boardingPrivacy Policy
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and other applicable data protection legislation is:
Business Boarding Lippstadt
Proprietor: Reiner Kiehl
Graf-Adolf-Str. 9
59555 Lippstadt
Germany
Phone: +49 (0)2941 794 56
Email:
2. General Information on Data Processing
The protection of your personal data is important to us. Personal data means any information relating to an identified or identifiable natural person.
We process personal data in connection with the operation of this website exclusively in accordance with the applicable data protection legislation, in particular the General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG).
3. Legal Bases for Data Processing
Where you have given us your consent to process personal data, the processing is carried out on the basis of Art. 6(1)(a) GDPR.
Where processing is necessary for the performance of a contract or in order to take steps at your request prior to entering into a contract, processing is carried out on the basis of Art. 6(1)(b) GDPR.
Where processing is necessary for compliance with a legal obligation, processing is carried out on the basis of Art. 6(1)(c) GDPR.
Where processing is necessary for the purposes of our legitimate interests or those of a third party and your interests, fundamental rights and freedoms do not override those interests, processing is carried out on the basis of Art. 6(1)(f) GDPR.
Where consent is required for the storage of information on your terminal device or for access to information already stored on your terminal device, this is carried out on the basis of Section 25(1) TDDDG.
Where storage or access is strictly necessary in order to provide a digital service expressly requested by you, this is carried out on the basis of Section 25(2) TDDDG.
4. Hosting by IONOS
This website is hosted by:
IONOS SE
Elgendorfer Str. 57
56410 Montabaur
Germany
When you visit our website, IONOS processes technical data required to provide and securely operate the website. This may include, in particular, IP addresses, access times, pages and files accessed, referrer URLs, browser information, operating system information and HTTP status codes.
This processing is carried out in order to provide our website securely, reliably and without technical errors and to detect and prevent attacks and abusive access.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and technically reliable provision of our online services.
Where IONOS processes personal data on our behalf, such processing is carried out on the basis of a data processing agreement in accordance with Art. 28 GDPR.
5. Server Log Files
When you access our website, information is automatically collected by the web server and stored in server log files. In particular, the following data may be processed:
- IP address of the accessing device
- Date and time of access
- Page or file accessed
- Referrer URL
- Browser type and browser version
- Operating system used
- HTTP status code
- Amount of data transferred
Processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in ensuring the security, stability and functionality of our website.
Server log files are stored only for as long as necessary for the purposes stated above, unless statutory retention requirements or specific security incidents require a longer storage period.
6. SSL/TLS Encryption
For security reasons and to protect the transmission of confidential information, this website uses SSL/TLS encryption. You can identify an encrypted connection, in particular, by the fact that the address line of your browser begins with “https://”.
7. Content Management System and YOOtheme Pro
This website is operated using the Joomla content management system and the YOOtheme Pro website framework.
These systems provide the technical functions of the website. In this context, technically necessary information may be stored on or accessed from your terminal device where this is required for the operation, display and security of the website.
Where the storage of information or access to information on your terminal device is strictly necessary to provide the website, this is carried out on the basis of Section 25(2) TDDDG. Any associated processing of personal data is carried out, in particular, on the basis of Art. 6(1)(f) GDPR.
8. Consent Management
We use the consent management system integrated into YOOtheme Pro to obtain and manage your consent for certain services, cookies and comparable technologies.
When you first visit our website, you can select which services requiring consent you wish to allow. Services requiring your consent are generally activated only after you have given the relevant consent.
Your selection is stored so that your decision can be taken into account when you subsequently access our website. This storage is necessary in order to document and manage your consent decision.
Processing is carried out in order to comply with our legal obligations regarding consent management on the basis of Art. 6(1)(c) GDPR. Where information is stored on or accessed from your terminal device for this purpose, this is carried out on the basis of Section 25(2) TDDDG insofar as this is necessary to manage your consent decision.
You may change or withdraw your consent at any time with effect for the future. To do so, please use the Cookie Settings.
9. Cookies and Comparable Technologies
Our website may use cookies and comparable technologies. Cookies are small data records stored on your terminal device.
Technically necessary cookies and comparable technologies may be used without prior consent where they are strictly necessary to provide functions expressly requested by you.
Where cookies or comparable technologies are not technically necessary, they are used only after you have given your explicit consent.
In this case, storage or access is carried out on the basis of Section 25(1) TDDDG. The associated processing of personal data is carried out on the basis of Art. 6(1)(a) GDPR.
You may change your settings or withdraw previously given consent at any time via the Cookie Settings.
10. OpenStreetMap
We use map material from OpenStreetMap on this website to display locations and provide geographical orientation.
OpenStreetMap is a collaborative project providing freely available geographical data. Map data is provided via services forming part of the OpenStreetMap infrastructure.
The map is integrated using the YOOtheme Pro map element and is protected by our website's consent management system. Until you consent to the use of OpenStreetMap, external map content will not be loaded. A corresponding placeholder may be displayed instead.
Only after you have given your consent will a connection be established to the servers used to provide the map material. In particular, your IP address may be transmitted. Technical information such as your browser type, operating system, time of access and the page accessed may also be processed.
The use of OpenStreetMap is based on your consent pursuant to Art. 6(1)(a) GDPR. Where information is stored on or accessed from your terminal device in connection with the map display, this is based on your consent pursuant to Section 25(1) TDDDG.
You may withdraw your consent at any time with effect for the future via the Cookie Settings.
11. Locally Hosted Fonts
The fonts used on this website are hosted locally on our web server. Therefore, no connection to servers of external font providers such as Google Fonts is established for the purpose of providing the fonts when you access our website.
12. Contact by Email or Telephone
If you contact us by email or telephone, we process the personal data you provide, including your contact details, in order to handle your enquiry and any related follow-up questions.
Where your enquiry relates to a booking or an existing contract or is made in order to take steps prior to entering into a contract, processing is carried out on the basis of Art. 6(1)(b) GDPR.
In other cases, processing is carried out on the basis of our legitimate interest in appropriately handling your enquiry pursuant to Art. 6(1)(f) GDPR.
The data will be deleted once the purpose of the processing no longer applies and provided that no statutory retention obligations or other legal grounds require further storage.
13. Online Bookings via Little Hotelier
For online bookings, we use the Little Hotelier booking and hotel management system. Little Hotelier is a product of the SiteMinder group of companies.
The provider is:
SiteMinder Limited
Level 7, Suite 7.01
155 Clarence Street
Sydney NSW 2000
Australia
When you make an online booking via our website, you are connected to the Little Hotelier booking system. The personal data required to process your booking is processed via Little Hotelier.
This may include, in particular:
- First and last name
- Postal address
- Email address
- Telephone number
- Arrival and departure dates
- Selected accommodation or room category
- Number of guests
- Booking and reservation details
- Billing information
- Payment or payment processing information
- Other information provided by you during the booking process
The processing of this data is necessary in order to process your booking request, complete the reservation and perform the accommodation contract concluded with you.
The legal basis for this processing is Art. 6(1)(b) GDPR. Where processing is required in order to comply with statutory obligations, in particular tax, commercial or registration requirements, processing is additionally carried out on the basis of Art. 6(1)(c) GDPR.
As part of providing the booking system, SiteMinder processes personal guest data on our behalf. Where SiteMinder acts as a processor, processing is carried out on the basis of a data processing agreement in accordance with Art. 28 GDPR.
As SiteMinder is an international group of companies headquartered in Australia and may use additional service providers or subprocessors, personal data may also be processed outside the European Union or the European Economic Area.
Where personal data is transferred to countries for which the European Commission has not recognised an adequate level of data protection, such transfers will only take place in accordance with the requirements of Art. 44 et seq. GDPR and using appropriate safeguards where required.
Further information about the processing of personal data by SiteMinder and Little Hotelier can be found in SiteMinder's privacy information.
14. Booking and Accommodation Data
If you enquire about or book accommodation with us, we process the personal data required to handle your enquiry, process your booking and perform the accommodation contract.
This may include, in particular, your name, contact details, postal address, arrival and departure dates, details of the accommodation requested, number of guests, billing and payment information and other information required for the booking.
Processing is carried out in order to take steps prior to entering into a contract and to perform the accommodation contract on the basis of Art. 6(1)(b) GDPR.
Where we are legally required to retain certain personal data under tax, commercial, accounting or registration legislation, processing is carried out on the basis of Art. 6(1)(c) GDPR.
After the contractual relationship has ended, the data will be deleted once it is no longer required for the purposes stated above and provided that no statutory retention obligations or other legal grounds require further storage.
15. Payment Processing
In connection with a booking, personal data may be processed for the purpose of carrying out and processing payments. This may include, in particular, your name, billing information, payment amount, booking number and payment information required for the respective payment method.
Processing is carried out for the performance of the accommodation contract pursuant to Art. 6(1)(b) GDPR.
Where payment services are provided directly via Little Hotelier or payment service providers used by Little Hotelier or SiteMinder, the data required to process the payment may be transmitted to these providers.
The data required for payment processing will only be processed to the extent necessary to carry out the respective payment and comply with statutory retention obligations.
16. Recipients of Personal Data
We use external service providers as part of our business operations. These include, in particular, our hosting provider IONOS and SiteMinder/Little Hotelier for processing and managing online bookings.
Personal data will only be transferred to third parties where this is necessary to process a booking or perform a contract, where we are subject to a legal obligation, where you have consented to the transfer or where another legal basis permits the transfer.
Where service providers process personal data on our behalf, this is carried out on the basis of a data processing agreement pursuant to Art. 28 GDPR where such an agreement is legally required.
17. External Links
Our website may contain links to external websites and services. In the case of an ordinary external link, a connection to the respective provider is generally established only when you click on the link.
The respective operator is generally responsible for any subsequent processing of data on the external website. Please refer to the privacy information provided by the respective provider.
18. Storage Period
Unless a more specific storage period is stated in this Privacy Policy, we store personal data only for as long as is necessary to fulfil the respective purpose of processing.
If you withdraw your consent or submit a legitimate request for deletion, the relevant data will be deleted unless statutory retention obligations or other legally permissible grounds prevent deletion.
19. Your Rights
Subject to the applicable statutory requirements, you have, in particular, the following rights:
- Right of access pursuant to Art. 15 GDPR
- Right to rectification pursuant to Art. 16 GDPR
- Right to erasure pursuant to Art. 17 GDPR
- Right to restriction of processing pursuant to Art. 18 GDPR
- Right to data portability pursuant to Art. 20 GDPR
- Right to object pursuant to Art. 21 GDPR
- Right to withdraw consent pursuant to Art. 7(3) GDPR
20. Right to Object
Where we process personal data on the basis of Art. 6(1)(e) or (f) GDPR, you have the right, pursuant to Art. 21 GDPR, to object to such processing at any time on grounds relating to your particular situation.
We will then no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing is necessary for the establishment, exercise or defence of legal claims.
Where personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes.
21. Withdrawal of Consent
You may withdraw consent you have previously given at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.
22. Right to Lodge a Complaint with a Supervisory Authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.
The supervisory authority responsible for us is:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
(Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen – LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf
Germany
23. Automated Decision-Making
We do not use decision-making based solely on automated processing, including profiling, within the meaning of Art. 22 GDPR.
24. Updates to this Privacy Policy
We reserve the right to amend this Privacy Policy if the legal situation, our website or the services we use change.
Last updated: September 2026