Data protection

Privacy Policy and Cookie Policy

BB Gastgeber GmbH, located at Fischerstraße 19, 87435 Kempten (hereinafter referred to as BergBuddies), is committed to protecting the online privacy of its users. This document has been prepared in accordance with Art. 13 of EU Regulation 2016/679 (hereinafter referred to as the “Regulation”) to inform you about our privacy policy, how your personal data is processed when using our website, and, where required, to allow you to provide explicit and informed consent (valid only for persons aged at least 16 years). The information and data you provide or that we collect when you use our website services (hereinafter “Services”) are processed in accordance with the Regulation and applicable confidentiality obligations.

In accordance with the Regulation, data processing by BergBuddies is based on the principles of lawfulness, fairness, transparency, purpose limitation, storage limitation, data minimization, accuracy, integrity, and confidentiality.

INDEX

  1. Data Controller
  2. Personal Data Subject to Processing
    1. Navigation Data
    2. Special Categories of Personal Data
    3. Data Voluntarily Provided by the Data Subject
    4. Cookies
  3. Purpose of Processing
  4. Legal Basis and Mandatory or Optional Nature of Processing
  5. Recipients of Personal Data
  6. Transfer of Personal Data
  7. Retention of Personal Data
  8. Rights of Data Subjects
  9. Amendments

1. Data Controller

The Data Controller is BB Gastgeber GmbH as specified above. For information regarding the processing of personal data, including a list of processors, please contact: info@bergbuddies.de

2. Personal Data Subject to Processing

While browsing the website, the Controller may process personal data such as name, identification number, online identifier, postal address, email address, phone number, or elements relating to your physical, physiological, psychological, economic, cultural or social identity (“personal data”).

a) Navigation Data

IT systems and software procedures used to operate this website collect certain personal data whose transmission is implicit in Internet communication protocols (IP addresses, domain names, URI addresses, request time, response codes, etc.). These data are used exclusively to obtain anonymous statistical information and to ensure correct operation of the site, and are deleted immediately after processing unless required to investigate cybercrime.

b) Special Categories of Personal Data

If you submit applications (e.g. via email), you may transmit special categories of personal data under Art. 9 GDPR (e.g. racial origin, political opinions, religious beliefs, health data, etc.). Please avoid submitting such data unless strictly necessary. If provided, explicit consent is required.

The Controller may also review publicly accessible professional social media profiles (e.g. LinkedIn) for recruitment purposes.

c) Data Voluntarily Provided

When using forms (contact, inquiry, reservation), you may provide third-party data. In such cases, you act as the data controller and guarantee legal compliance under Art. 6 GDPR.

We use software from THE HOTELS NETWORK (Barcelona, Spain) to analyze anonymized user behavior in order to improve user experience. The analysis is anonymized and does not allow personal identification.

d) Cookies

Cookies are small text files stored on your device to save website information temporarily. Types include essential cookies, analytics cookies, functionality cookies, and profiling cookies (for targeted advertising).

Non-essential cookies require active user consent. We use a Consent Management Platform (CMP) allowing users to manage, adjust, or withdraw consent at any time.

3. Purpose of Processing

  1. Provision of requested services
  2. Responding to inquiries and reservations
  3. Processing job applications
  4. Compliance with legal, tax, and accounting obligations
  5. Marketing communications (with explicit consent)
  6. Guest booking management and personalized services

4. Legal Basis

Processing for services is based on Art. 6(1)(b) GDPR (contract performance). Legal obligations are based on Art. 6(1)(c). Marketing is based on consent (Art. 6(1)(a)) or legitimate interest (Art. 6(1)(f)).

5. Recipients

Data may be shared with service providers (accounting, IT, hosting), legal authorities, and authorized staff bound by confidentiality.

6. Data Transfers

Some data may be transferred outside the EEA under adequacy decisions or EU-approved contractual clauses.

7. Data Retention

Data are retained only as long as necessary for service provision, legal obligations, or until consent withdrawal. Applicants’ data are retained for an appropriate period unless extended with consent.

8. Rights of Data Subjects

You have the right to access, rectify, erase, restrict processing, object, and request data portability (Arts. 15–20 GDPR). Requests: info@bergbuddies.de

You may lodge a complaint with the competent supervisory authority under Art. 77 GDPR.

9. Amendments

This Privacy Policy is effective as of 31 May 2022. The Controller reserves the right to amend or update it at any time.