We are pleased about your interest in our hotel. Protecting your personal data is an important concern for us. In the following, we inform you in accordance with Art. 13 DSGVO about the processing of your data when you visit this website.
Cityhotel Bosse GmbH & Co. KG
Herforder Str. 40, 32545 Bad Oeynhausen
Telephone: +49 (0) 57 31 17 54 0
E-mail: info@cityhotel-bosse.de
This website is hosted with Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) via the "Cloudflare Pages" service. When the pages are accessed, Cloudflare processes technically necessary data (including IP address, date and time of access, the file requested, volume of data transferred, browser type) in order to ensure the delivery of the website as well as its security and stability. The legal basis is our legitimate interest in a secure and efficient provision of the service (Art. 6 para. 1 lit. f DSGVO). A data processing agreement is in place with Cloudflare; the transfer to the USA is safeguarded by standard contractual clauses.
Each time the site is accessed, information is automatically stored in server log files (IP address, referrer URL, browser/operating system used, time of access). This data is not merged with other data sources. The processing is carried out on the basis of Art. 6 para. 1 lit. f DSGVO to ensure the operation and security of the website.
If you contact us via the contact form or by e-mail, we process the data you provide (form of address, surname, e-mail address, message) in order to handle your enquiry. For the reliable delivery of the form message to our mailbox, we use the service Resend (Resend, Inc., USA). In doing so, the data entered in the form is transferred to Resend and delivered to us by e-mail. The legal basis is Art. 6 para. 1 lit. b DSGVO (pre-contractual measures) or Art. 6 para. 1 lit. f DSGVO (efficient handling of enquiries). The data is deleted as soon as it is no longer required to achieve the purpose and no statutory retention periods preclude deletion.
To protect our contact form against automated access (spam), we use Cloudflare Turnstile. Turnstile checks whether the input is made by a human and processes technical information about your device as well as your IP address for this purpose. The legal basis is our legitimate interest in preventing misuse (Art. 6 para. 1 lit. f DSGVO).
This website uses fonts stored locally on our server ("Merriweather" and "Source Sans 3"). When the pages are accessed, no connection to third-party servers (e.g. Google Fonts) is established; no data is transferred to third parties.
We use technically necessary cookies or storage entries to save your privacy settings. Optional services (see sections 8–10) are only loaded after you have given your consent via our cookie notice. You can revoke your consent at any time with effect for the future by deleting the stored settings in your browser. The legal basis is Art. 6 para. 1 lit. a DSGVO in conjunction with § 25 TDDDG.
After your consent, we embed the chat service Userlike (Userlike UG, Köln), through which you can contact our reservations team directly. In doing so, the data you enter in the chat as well as technical connection data are processed. The legal basis is your consent (Art. 6 para. 1 lit. a DSGVO).
After your consent, a review widget of Customer Alliance GmbH (Berlin) is embedded, which displays guest reviews. In this process, technical connection data (including IP address) may be transferred to the provider. The legal basis is your consent (Art. 6 para. 1 lit. a DSGVO).
Provided that you have given your consent, we use the Meta-Pixel of Meta Platforms Ireland Ltd. This allows the reach and effectiveness of our advertisements to be measured. In doing so, usage data (including IP address, device and browser information) is transferred to Meta, possibly also to the USA. The legal basis is your consent (Art. 6 para. 1 lit. a DSGVO). Further information can be found in Meta's privacy policy.
To display our location and to make it easier to plan your journey, we embed map material from the Google Maps service (provider: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland). When the map is loaded, your IP address is transferred to Google and, where applicable, transferred to servers of Google LLC in the USA; the transfer is safeguarded by standard contractual clauses. The legal basis is our legitimate interest in a clear description of how to reach us (Art. 6 para. 1 lit. f DSGVO) or, where requested, your consent (Art. 6 para. 1 lit. a DSGVO). Further information on the handling of user data can be found in Google's privacy policy: https://policies.google.com/privacy.
On individual pages (e.g. “Bike Hotel”) we additionally display an interactive map showing the cycle routes and our location. This map is based on the open-source library Leaflet (loaded via the CDN service unpkg) and on map tiles from the provider CARTO (CARTO Inc., USA); the underlying map data is provided by the OpenStreetMap Foundation. When the map is loaded, your IP address is transferred to these providers' servers – where applicable also outside the EU. The legal basis is our legitimate interest in a clear presentation of the cycle paths and our location (Art. 6 para. 1 lit. f DSGVO). Further information can be found at https://carto.com/privacy/ and https://osmfoundation.org/wiki/Privacy_Policy.
In the "A place to feel at home" section, we embed videos from YouTube (Google Ireland Ltd.). In doing so, we use the extended data protection mode ("youtube-nocookie"): merely accessing the page does not yet establish a connection to YouTube. Only when you actively start a video by clicking on it is the content loaded and your IP address as well as technical information transferred to YouTube/Google – possibly to the USA. The legal basis is your consent declared through the click (Art. 6 para. 1 lit. a DSGVO). Further information: https://policies.google.com/privacy.
You have the right to access (Art. 15 DSGVO), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) as well as objection to processing (Art. 21 DSGVO). To exercise your rights, an informal message to the contact details given above is sufficient. Furthermore, you have the right to lodge a complaint with a data protection supervisory authority.
We adapt this privacy policy as soon as changes to our services or to legal requirements make this necessary. The version currently published on this page shall apply.