The controller responsible for data processing on this website is:

Phone: +49 7131 91550
Email: info@roessle-frankenbach.de

We take the protection of your personal data seriously and process it exclusively on the basis of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG). Personal data is any data that can be used to identify you personally. Below you will find out what data we collect, what we use it for and what rights you have.

This website is hosted by GoDaddy; the server is located in a data centre in Strasbourg (France, EU). When you visit the website, the host processes the technically necessary data (see section 4) on our behalf. We have concluded a data processing agreement with the host in accordance with Art. 28 GDPR. The legal basis is our legitimate interest in providing the website securely and reliably (Art. 6(1)(f) GDPR).

Each time the website is accessed, the server automatically stores information transmitted by your browser: IP address, date and time of access, page visited, referrer URL, browser type and version, and operating system. This data is required to deliver the website and to defend against attacks (Art. 6(1)(f) GDPR). It is not combined with other data sources and is deleted after 30 days at the latest, unless it is needed to investigate a security incident.

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” and the padlock symbol in your browser’s address bar. This means data you send us via the website cannot be read by third parties.

We use technically necessary cookies that are required to operate the website, e.g. to store your language setting or your cookie choices (§ 25(2) TDDDG, Art. 6(1)(f) GDPR).

We only load third-party content (e.g. Google Maps) if you have given your consent via our cookie banner (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). Your choice is stored in a cookie. You can withdraw or change your consent at any time with effect for the future via the cookie settings.

If you contact us via one of our forms (room enquiry, company enquiry), by email or by phone, we process the information you provide – e.g. name, company, email address, phone number, travel dates, number of guests and your message – in order to handle your enquiry and prepare an offer.

The legal basis is the performance of pre-contractual measures or of a contract (Art. 6(1)(b) GDPR) and otherwise our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR). Mandatory fields are marked as such.

Form enquiries are sent to us by email. To ensure these emails are delivered reliably, we use an email delivery service acting on our behalf. We store your enquiries until the purpose no longer applies; if a booking is made, the retention periods in section 8 apply.

For your stay, we process the data required to perform the accommodation contract (Art. 6(1)(b) GDPR), e.g. name, address, contact details, dates of stay and billing details.

As an accommodation provider, we are legally required to keep a registration form for each guest (§§ 29, 30 German Federal Registration Act, BMG). We keep registration forms for one year from the day of departure and then destroy them. We keep invoices and accounting records for up to ten years in accordance with commercial and tax law (Art. 6(1)(c) GDPR).

On some pages we embed maps from Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When the map loads, your IP address is transmitted to Google; this may also involve a transfer to the USA. Google is certified under the EU-US Data Privacy Framework.

The map is only loaded if you have given your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). More information: Google’s privacy policy.

This website uses the fonts “Playfair Display” and “Lora”. They are loaded from Google’s servers (Google Fonts, provider: Google Ireland Limited). In the process, your IP address is transmitted to Google. The legal basis is our legitimate interest in a consistent presentation of the website (Art. 6(1)(f) GDPR).

Our website contains links to third-party websites, e.g. to destinations in the region. You only leave our website when you click such a link; the respective operator is responsible for data processing on the linked pages.

We only store personal data for as long as is necessary for the respective purpose or as required by statutory retention periods. The data is then deleted.

October 2026. The German version of this privacy policy is legally binding.