Data Controller
Hermann-Georg Gödde
Myer’s Hotel Berlin
Metzer Straße 26
10405 Berlin, Germany
Phone: +49-(0)30-44 01 40
Fax: +49-(0)30-44 01 41 04
Email: info@myershotel.de
Responsible for content pursuant to § 18 Section 2 MStV: A. Falckenberg
is the Controller within the meaning of the EU General Data Protection Regulation (GDPR) and other national data protection laws.
Types of Data Processed
- Inventory data (e.g., names, addresses).
- Contact details (e.g., email address, phone numbers).
- Content data (e.g., text entries in booking masks, emails).
- Usage data (e.g., visited websites, interest in content, access times).
- Meta/communication data (e.g., device information, IP addresses).
Purpose of Processing
- Provision of the online offering, its features, and contents.
- Processing of room bookings and handling inquiries.
- Responding to contact requests and communicating with users.
- Security measures and protection against abuse.
- Audience measurement and targeted marketing (consent-based).
Terminology Used
“Personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
“Processing” means any operation or set of operations performed on personal data, whether or not by automated means.
“Controller” means the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
Relevant Legal Bases
In accordance with Art. 13 GDPR, we inform you of the legal bases of our data processing operations:
- Consent: Art. 6 Section 1 lit. a GDPR as well as § 25 Section 1 TDDDG (for storing/retrieving information on terminal equipment).
- Contract performance & pre-contractual inquiries: Art. 6 Section 1 lit. b GDPR (e.g., for room bookings).
- Legal obligation: Art. 6 Section 1 lit. c GDPR (e.g., to comply with tax or registration requirements).
- Legitimate interest: Art. 6 Section 1 lit. f GDPR (e.g., to ensure IT security and technical operation of the website).
Security Measures
In accordance with statutory provisions, we take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk. This includes, in particular, the encrypted transmission of data between your browser and our server (SSL/TLS encryption).
Cooperation with Processors and Third Parties
If, within the scope of our processing, we disclose data to other persons and companies (data processors or third parties), transmit data to them, or otherwise grant them access to the data, this is done exclusively on the basis of a statutory permission, consent, a legal obligation, or on the basis of our legitimate interests. If we commission third parties to process data, this is done on the basis of a Data Processing Agreement pursuant to Art. 28 GDPR.
Transfers to Third Countries
If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs within the framework of using third-party services or disclosing/transmitting data to third parties, this only takes place if the special requirements of Art. 44 et seq. GDPR are met. This means that processing takes place, for example, on the basis of an adequacy decision (such as the EU-U.S. Data Privacy Framework) or official EU standard contractual clauses.
Rights of the Data Subject
You have the right to:
- request information about your personal data processed by us pursuant to Art. 15 GDPR;
- request the immediate correction of inaccurate data or the completion of your data stored with us pursuant to Art. 16 GDPR;
- request the erasure of your stored data pursuant to Art. 17 GDPR, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, or for the establishment, exercise, or defense of legal claims;
- request the restriction of the processing of your data pursuant to Art. 18 GDPR;
- receive your personal data provided to us in a structured, commonly used, and machine-readable format or request transmission to another controller pursuant to Art. 20 GDPR;
- lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR.
Right of Withdrawal
You have the right to withdraw consents granted pursuant to Art. 7 Section 3 GDPR at any time with effect for the future.
Right to Object
You can object to the future processing of data concerning you in accordance with Art. 21 GDPR at any time. The objection can in particular be made against processing for direct marketing purposes.
Cookies and Information Storage
We do not use optional tracking cookies on our website without your explicit consent. Technically necessary functions for the sole provision of the online offering are used on the basis of our legitimate interest pursuant to Art. 6 Section 1 lit. f GDPR and § 25 Section 2 TDDDG. If storage technologies (such as cookies or local storage) are used for marketing or analytics purposes, this occurs exclusively after your prior consent via our Consent Management System.
Deletion of Data
The data processed by us will be erased or restricted in its processing in accordance with Art. 17 and 18 GDPR. Unless explicitly stated in this privacy policy, stored data will be deleted as soon as it is no longer required for its intended purpose and no statutory retention obligations prevent deletion.
Statutory retention requirements in Germany arise, in particular, from § 257 Section 1 HGB (6 years for commercial books, business letters, etc.) and § 147 Section 1 AO (10 years for books, records, accounting documents, etc.).
External Booking Engine
There is no dedicated booking form directly integrated into our website. For online room reservations, we link to the system of an external service provider (booking engine). As soon as you open the booking link, you leave our website or are redirected to the external platform of the booking system.
The collection and processing of personal data (e.g., name, address, payment details, period of stay) for processing the booking takes place directly through this service provider on their own pages. Data processing during the booking process takes place for the purpose of contract fulfillment or execution of pre-contractual measures pursuant to Art. 6 Section 1 lit. b GDPR.
Hosting
The hosting services used by us serve to provide server capacities, storage space, and technical maintenance services for operating this website. In doing so, our hosting provider processes server log files on the basis of our legitimate interests in a secure and efficient provision of the website (Art. 6 Section 1 lit. f GDPR in conjunction with Art. 28 GDPR).
Collection of Access Data and Log Files
Our hosting provider collects data on every access to the server (server log files) based on our legitimate interests (Art. 6 Section 1 lit. f GDPR). Access data includes: name of the accessed website, file, date and time of retrieval, amount of data transferred, notification of successful retrieval, browser type and version, user operating system, referrer URL, IP address, and requesting provider.
For security reasons (e.g., to investigate acts of abuse or fraud), log file information is stored for a maximum of 7 days and then deleted, unless further storage is required for evidentiary purposes.
Administration, Financial Accounting, and Office Organization
We process data as part of administrative tasks, organization of our operations, and compliance with legal obligations (e.g., archiving). Here, we process data necessary to maintain our business operations. The legal bases are Art. 6 Section 1 lit. c GDPR and Art. 6 Section 1 lit. f GDPR. Data is disclosed to tax authorities, tax advisors, and payment service providers where legally required or necessary for operational management.
Data Protection Notice in Job Application Procedures
We process applicant data exclusively for the purpose and within the scope of the job application procedure pursuant to Art. 6 Section 1 lit. b GDPR as well as § 26 BDSG. Applications can be submitted to us via email or by post. Please note that emails are transmitted unencrypted by default. In the event of a rejection, applicant data will be deleted after 6 months at the latest to satisfy evidentiary obligations under the General Equal Treatment Act (AGG).
Use of InZone (Consent-Based Advertising & Tracking)
We use technologies provided by InZone as part of our online marketing activities. InZone enables the delivery of advertising content and—subject to your explicit consent—the collection of anonymized usage and interaction data (e.g., ad impressions, clicks).
Purpose of Processing
Processing takes place for the following purposes:
- Delivery of advertising campaigns
- Reach measurement and performance evaluation of ad content
- Optimization of our marketing activities
Processed Data
Within the scope of using InZone, the following data may be processed—exclusively upon granted consent:
- IP address (truncated or pseudonymized)
- Device and browser information (User Agent)
- Visited pages and interactions with ad media (e.g., impressions, clicks)
- Rough location information (e.g., country)
Any processing of personal data for advertising or analytical purposes takes place only upon prior explicit user consent.
Legal Basis
Processing is based on Art. 6 Section 1 lit. a GDPR (Consent) as well as § 25 Section 1 TDDDG.
Without consent, no analytical or location data will be collected.
Consent Management and Opt-out
InZone is technically integrated to ensure user preferences are strictly respected at all times:
- Tracking (analytics and location-based evaluations) is disabled by default until consent is granted via our Consent Management Platform (CMP).
- Users can revoke or modify their consent at any time via the website’s cookie settings.
- If consent is denied or withdrawn, advertising content will still be displayed, but without tracking or analysis of user behavior.
Transfer to Third Parties
Transfer of collected data to third parties takes place solely within the scope of technically providing the advertising service and exclusively on the basis of a Data Processing Agreement pursuant to Art. 28 GDPR.
Storage Duration
The processed data will only be stored for as long as necessary for the specified purposes or until consent is withdrawn.
Contacting Us
When contacting us (e.g., via email or phone), user details are processed to handle the inquiry and its resolution pursuant to Art. 6 Section 1 lit. b) GDPR. We delete inquiries once they are no longer required and no statutory archiving obligations apply.
Social Media Online Presence
We maintain online presences within social networks (e.g., Meta/Facebook, Instagram) to communicate with active users there and inform them about our services. When accessing these networks, the terms and conditions and data processing guidelines of the respective operators apply. Processing only occurs when you interact directly with us on these platforms (e.g., sending messages or commenting on posts).