Privacy policy

Controller

The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Andreas Brodel, Hotel Haus Mariand’l, Blumenweg 3, 40489 Düsseldorf

Phone: +49 (0)203 74 20 60, email: info@hausmariandl.de

Summary

You can use this website without registering. We do not use any analytics, tracking or advertising services. Third-party content is only loaded if you trigger it yourself (see “Map”).

The connection to this website and to the online booking is encrypted via TLS (HTTPS).

Hosting and server log files

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. We have concluded a data processing agreement with STRATO in accordance with Art. 28 GDPR.

Each time the website is accessed, the web server processes technically necessary data transmitted by your browser, in particular your IP address, the date and time, and the page requested. This is necessary to deliver the website and keep it secure. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and reliable operation of the website.

This data is deleted as soon as it is no longer required for these purposes.

Cookies and browser storage

This website itself does not set any cookies and does not store any information in your browser (such as in local storage or session storage).

Our booking system at citadel.hausmariandl.de sets a session cookie (“session”) when you open the “Book” page or the booking form. It contains a random identifier that the booking system uses to link the individual steps of your booking, and it is deleted when you close your browser. Anyone who has login details for the booking form can log in there with them; a further session cookie (“logged-in”) is then set, which remembers the login until you log out or close your browser. Both cookies are strictly necessary for the function you have requested (Section 25(2) no. 2 of the German TDDDG); no consent is required for them. According to our technical review, there are no other cookies or storage accesses.

Fonts

The fonts of this website and of the online booking are loaded from their own servers. No connection is made to third parties such as Google.

Online booking (citadel.hausmariandl.de)

You can book a room online on the “Book” page. Available rooms and prices are retrieved directly from our booking system at citadel.hausmariandl.de, and your booking is transmitted there in encrypted form. The booking system’s own booking form can also be accessed directly at this address.

When you make a booking, we process the data you enter in order to carry out your booking. This includes your title, first and last name, the company if applicable, address and country, email address, phone number, travel dates, number of guests, the room chosen and your comments. Mandatory fields are marked; without this information we cannot accept your booking. The legal basis is Art. 6(1)(b) GDPR (contract or pre-contractual measures).

Like any web server, the booking system processes technically necessary access data each time it is accessed, in particular your IP address, the date and time and the address requested, and stores them in log files. For technical reasons, these may also contain the details you submit when booking. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and trouble-free operation of the booking system. The log files are deleted as soon as they are no longer required for these purposes.

We store your booking data for as long as is necessary to carry out your stay. Beyond that, we only keep it where statutory retention obligations apply, in particular under commercial and tax law. Once these periods have expired, the data is deleted.

Map (OpenStreetMap)

On the home page and the “Location” page you can display a map from OpenStreetMap. It is only loaded when you click “Load map”. Only then does your browser connect to servers of the OpenStreetMap Foundation; in particular, your IP address and technical information about your browser are transmitted. According to our technical review, the map does not set any cookies or store any information in your browser.

The legal basis is your consent, which you give by clicking (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). We do not store this decision: the next time you visit the page, the map is not loaded automatically. You can withdraw your consent at any time with effect for the future by reloading the page.

The provider is the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. The European Commission has adopted an adequacy decision for the United Kingdom (Art. 45 GDPR). The map images are delivered via a global network of cache servers (content delivery network); your IP address and browser details may therefore also be processed on servers outside the EU and the United Kingdom. For more information, please see the OpenStreetMap Foundation’s privacy policy: https://osmfoundation.org/wiki/Privacy_Policy

The link “Plan a route on OpenStreetMap” opens the OpenStreetMap website in a new window. The OpenStreetMap Foundation is responsible for the processing there.

Contact by email or phone

If you contact us by email or phone, we process your details (such as your name, contact details and the content of your enquiry) in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a booking, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).

Our emails are processed by STRATO GmbH (see “Hosting”), with whom we have concluded a data processing agreement. We delete your enquiry once it has been fully dealt with, unless statutory retention obligations require otherwise.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). You can withdraw consent at any time with effect for the future (Art. 7(3) GDPR).

To do so, please use the contact details given above.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the data protection authority of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany).

Right to object (Art. 21 GDPR)

Where we process your data on the basis of Art. 6(1)(f) GDPR (legitimate interest), you can object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims. Please send your objection to the contact details given above.

Last updated

11 October 2026