Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

2. General information on data processing

As a matter of principle, we only process our users' personal data to the extent necessary to provide a functional website as well as our content and services. Processing generally takes place only with the user's consent, or in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.

3. Hosting

This website is hosted by an external service provider (processor):

The personal data collected on this website is stored on the host's servers. The host is used for the purpose of fulfilling the contract with our potential and existing customers and in the interest of a secure, fast and efficient provision of our online offering. The legal basis is Art. 6(1)(f) GDPR (legitimate interest). A data processing agreement (DPA) pursuant to Art. 28 GDPR is in place with the host.

4. Provision of the website and server log files

Each time this website is accessed, the system automatically collects data and information from the accessing device. The following data is collected:

• anonymised or shortened IP address of the requesting device
• date and time of access
• name and URL of the file accessed
• browser type and operating system used
• referrer URL (the previously visited page)

This data is stored in our system's log files. This data is not stored together with other personal data of the user. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the technical provision, stability and security of the website. The log files are deleted after a short period, unless they are required as evidence in the event of a security-relevant incident.

5. Contact

On our website we offer you the opportunity to contact us by email as well as via a contact form. The entries in the contact form are transmitted to our server in encrypted form and forwarded to us from there by email. They are not stored in a database. When you contact us, we process the data you provide (such as name, email address, phone number, name and location of your property, your request and your message) in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR, insofar as the enquiry serves the initiation or performance of a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering your enquiry). Your data will be deleted as soon as it is no longer required for the purpose for which it was collected and no statutory retention obligations prevent this.

6. Fonts (locally hosted)

To display fonts consistently, this website uses font files that are embedded locally on the server. No connection is made to third-party servers, in particular not to Google. No personal data is transmitted to external providers in this process.

7. Cookies and tracking

This website does not use any cookies for analysis, tracking or advertising purposes and does not integrate any third-party analysis or tracking services.

8. SSL / TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL / TLS encryption. You can recognise an encrypted connection by the fact that the address bar of the browser changes from "http://" to "https://" and by the lock symbol in your browser bar.

9. Your rights as a data subject

With regard to the personal data concerning you, you have the following rights:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to object to processing (Art. 21 GDPR)
• right to withdraw consent given (Art. 7(3) GDPR)

To exercise your rights, an informal message to mail@hotelassessor.com is sufficient.

10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence, your place of work or the place of the alleged infringement, if you believe that the processing of the personal data concerning you infringes the GDPR. For Appental GmbH, the competent authority is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.

11. Validity and changes to this privacy policy

This privacy policy is currently valid. Due to the further development of our website or as a result of changed legal or official requirements, it may become necessary to amend this privacy policy.

As of: September 2026

← Back to home