Berghotel Steiger
Schwarzweißer Hund unter dem Schild der Steigerstube
Transparency for your visit

Privacy policy

Information about how we handle your data and your rights.

Who is responsible for your data

The controller is Katrin Friedel, Berghotel Steiger, Oberer Krankenhausweg 2a, 08289 Schneeberg, Germany. You can contact us at info@berghotel-steiger.de or by telephone on 03772 / 39490.

Visiting our website and hosting

Our website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. When you visit, technical connection data is processed, including the requested page, access time, browser, operating system, referrer and IP address. This enables us to deliver and securely operate the website. The legal basis is our legitimate interest in a reliably available and protected website under Article 6(1)(f) GDPR. IONOS processes data on our behalf; a data processing agreement is in place.

IONOS specifies a maximum retention period of seven days for hosting log files. This provider retention period is distinct from the retention of other data, such as booking records.

Statistical analysis

We use IONOS WebAnalytics to analyse website use statistically and make technical improvements. The analysis uses automatically generated server logs. According to the provider, the IP address is anonymised after transmission; WebAnalytics does not use cookies. The information analysed includes pages accessed, referrer, browser, operating system, device type and access time. The legal basis for processing personal data is our legitimate interest in technically improving our website under Article 6(1)(f) GDPR. Further details are available in the IONOS information about WebAnalytics.

Protection against malware

We use Site Scan + Repair through IONOS to protect our website. The service detects and removes malware. IONOS lists SiteLock LLC, 8701 East Hartford Drive Suite 200, Scottsdale, AZ 85255, USA, as a further processor for this purpose. For relevant transfers to the USA, IONOS specifies standard contractual clauses. Details are available in the IONOS data processing agreement and its annexes. The legal basis is our legitimate interest in protecting the website and its users under Article 6(1)(f) GDPR.

Enquiries and emails

When you contact us, we process your contact details and the information about your enquiry. For a holiday enquiry, this may include travel dates, the number of guests and requested services. We use this information to reply, prepare an offer and handle your booking.

For pre-contractual enquiries and the performance of a contract, the legal basis is Article 6(1)(b) GDPR. We handle other enquiries based on our legitimate interest in responding to you under Article 6(1)(f) GDPR. Without the necessary contact and booking details, we may be unable to answer an enquiry or process a booking.

Our hotel mailbox uses IONOS Hosted Exchange. IONOS processes messages, contact details and connection data on our behalf. For Hosted Exchange, IONOS names Fasthosts Internet Limited, Discovery House, 154 Southgate Street, Gloucester GL1 2EX, United Kingdom, as a further processor. IONOS specifies an adequacy decision under Article 45 GDPR as the basis for the transfer.

We retain messages for as long as needed for the enquiry or performance of the contract. Statutory retention duties and the necessary protection of legal claims may justify longer retention. We then delete the data unless another lawful reason for retention applies. IONOS specifies a maximum of 28 days for email log files and technical deletion of email service data no later than seven days after we delete it or the contract ends. This does not mean that business messages are deleted after seven days.

Booking and external links

Our online booking link takes you to an external booking website. We use the contact, travel and booking details submitted for your stay to process and fulfil your booking under Article 6(1)(b) GDPR. Retention follows the purposes and statutory duties described above. For online bookings, we use the booking system provided by SoftTec GmbH, Hindelanger Straße 35, 87527 Sonthofen, Germany.

Links to Instagram, Facebook and other external services lead to the respective provider’s website. Its privacy information applies when you visit. A link to an external service does not constitute consent to its data processing.

Your rights

Subject to the legal conditions, you can request access, rectification, erasure, restriction of processing and data portability. Where processing is based on legitimate interests, you may object on grounds relating to your particular situation. You may withdraw consent at any time with effect for the future; this does not affect the lawfulness of earlier processing.

Please use the contact details above. You may also complain to a data protection supervisory authority, for example the Saxon Data Protection and Transparency Commissioner.

Ari digital guest guide

Ari optionally helps with general hotel questions. Searching verified hotel answers runs in your browser and works without the extra AI feature. Ari does not make bookings, check live room availability or access mailboxes, booking records or private conversations.

Only when you explicitly enable AI answers and submit a question does your browser send your question, selected language and consent-notice version to Cloudflare Workers AI. Relevant public hotel information is supplied for the answer. Cloudflare also processes your IP address and technical connection and operational data. Do not enter names, contact details, booking references, payment details or health information.

Katrin Friedel, Berghotel Steiger, is the controller. Optional AI processing relies on your consent under Article 6(1)(a) GDPR. Necessary security and abuse prevention rely on our legitimate interest in secure operation under Article 6(1)(f) GDPR. The recipient is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Content is processed under the applicable data processing agreement; technical operational data is additionally covered by the provider’s terms.

Processing is not restricted to Germany or the EU. Cloudflare describes US transfers under the EU-US Data Privacy Framework and standard contractual clauses for applicable other transfers. Links below explain the safeguards, provider information and subprocessors.

Our guest guide does not save chat history on a hotel server or itself use cookies or persistent browser storage. A limited history exists only in the open dialogue. Cloudflare states that ordinary stateless inference content is processed only as needed to process and deliver the response and is not used to train models. Security and legal exceptions may apply. Operational metadata may remain for longer under the purposes and criteria in Cloudflare’s privacy policy; no fixed general period for that metadata is specified there. Our abuse limiter uses a daily-changing key derived from the IP address. It is pseudonymous, not anonymous.

You may withdraw consent for future requests using “Hotel answers only”, “Clear conversation” or by closing the dialogue. Withdrawal does not affect earlier lawful processing or recall a request already transmitted. Local hotel answers and the website remain available. AI can make mistakes. Check binding details through the linked booking system or directly with the hotel. See our general privacy notice for your other rights and contact details.

Pfotenfragen?