Data Privacy

I. General Information

The protection of your personal data is of particular importance to us. Personal data (hereinafter referred to as “data”) means any information relating to an identified or identifiable natural person.

We process personal data exclusively in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the German Telecommunications and Digital Services Data Protection Act (TTDSG).

This Privacy Policy informs you about the type, scope, purpose, duration, and legal basis of the processing of personal data, as well as your rights as a data subject.

II. Data Controller

The data controller within the meaning of the GDPR is:

gambino hotel WERKSVIERTEL GmbH
Bayerstr. 7
80335 Munich
Germany

Phone: +49 89 998 280 611
Email: director-werksviertel@gambinohotels.com

A Data Protection Officer is not required by law and has therefore not been appointed.

III. Rights of Data Subjects

You have the right at any time to:

  • obtain confirmation as to whether personal data concerning you is being processed (Art. 15 GDPR)

  • request access to your personal data (Art. 15 GDPR)

  • request rectification of inaccurate or incomplete data (Art. 16 GDPR)

  • request erasure of your personal data (Art. 17 GDPR)

  • request restriction of processing (Art. 18 GDPR)

  • receive your data in a structured, commonly used format and request data portability (Art. 20 GDPR)

  • withdraw your consent at any time with effect for the future (Art. 7(3) GDPR)

  • object to the processing of your data (Art. 21 GDPR)

  • lodge a complaint with a supervisory authority (Art. 77 GDPR)

Competent supervisory authority:

Bavarian State Office for Data Protection Supervision (BayLDA)
https://www.lda.bayern.de

IV. Hosting and Server Log Files

Our website is hosted by an external hosting service provider. In the course of hosting, personal data is processed, in particular:

  • IP address

  • Date and time of access

  • Browser type and version

  • Operating system

  • Referrer URL

These data are technically necessary to ensure the secure and stable operation of the website.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

A data processing agreement pursuant to Art. 28 GDPR has been concluded with the hosting provider.

Server log data is deleted after 7 days, unless longer retention is required for security-related reasons.

V. Cookies and Consent Management

Our website uses cookies and comparable technologies.

1. Technically Necessary Cookies

These cookies are required to provide essential website functions.

Legal basis:
§ 25(2) TTDSG
Art. 6(1)(f) GDPR

2. Consent-Based Cookies

Analytics and marketing cookies are only used with your explicit consent.

Legal basis:
§ 25(1) TTDSG
Art. 6(1)(a) GDPR

You may withdraw or adjust your consent at any time via the cookie consent tool on our website.

VI. Google Analytics

This website uses Google Analytics (GA4), a web analytics service provided by:

Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland

Google Analytics uses cookies to analyze user behavior. IP anonymization is enabled.

Google Analytics is used only after you have given your consent.

Legal basis:
Art. 6(1)(a) GDPR
§ 25(1) TTDSG

Data transfers to third countries (e.g., the United States) cannot be excluded. Such transfers are based on the EU Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR.

VII. Bookings and Contract Processing

When you make a reservation or booking, we process the following data:

  • Name

  • Address

  • Email address

  • Arrival and departure dates

  • Payment details (e.g., credit card data)

The processing is necessary for the performance of pre-contractual measures and the fulfillment of the accommodation contract.

Legal basis: Art. 6(1)(b) GDPR

Personal data is stored in accordance with statutory retention obligations and deleted thereafter.

VIII. Contact Requests

If you contact us by email or via a contact form, your data will be processed to handle your request.

Legal basis:
Art. 6(1)(b) GDPR (contract-related inquiries)
Art. 6(1)(f) GDPR (legitimate interest)

IX. Social Media Icons and External Links

Our website contains icons linking directly to our social media profiles (e.g., Instagram, Facebook, LinkedIn).

No data is transmitted to these platforms when you visit our website. Data is only transferred once you actively click on a social media icon. From that point onward, the privacy policies of the respective platform apply.

X. Social Media Presence and Promotions

We operate social media profiles and may conduct marketing campaigns and promotional activities, such as special offers or contests.

Where social media platforms provide statistical evaluation tools (“Insights”), we act as joint controllers with the platform operators within the meaning of Art. 26 GDPR.

Participation in promotions is voluntary. The scope, purpose, and duration of data processing are communicated transparently in the context of the respective campaign.

Legal basis:
Art. 6(1)(a) GDPR (consent)
Art. 6(1)(f) GDPR (public relations and marketing)

XI. YouTube

Our website may embed videos from YouTube.

Provider:
YouTube LLC, 901 Cherry Ave., San Bruno, CA, USA
(a subsidiary of Google LLC)

Videos are embedded using YouTube’s enhanced privacy mode. Data is only transmitted to YouTube once a video is activated.

Legal basis:
Art. 6(1)(a) GDPR
§ 25(1) TTDSG

XII. Vimeo

Our website may embed videos from Vimeo.

Provider:
Vimeo Inc., 555 West 18th Street, New York, NY, USA

When a video is played, personal data may be transmitted to Vimeo.

Legal basis:
Art. 6(1)(a) GDPR
§ 25(1) TTDSG

XIII. Data Retention

Personal data is stored only for as long as necessary to fulfill the respective purpose or as required by statutory retention obligations.

XIV. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or manipulation.

XV. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy to reflect changes in legal requirements or technical developments.