Privacy policy

Controller

The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:

Michael Mogler
Gasthof zur alten Brücke
Schramberger Str. 13, 77761 Schiltach

Hosting and server log files

This website is operated on a server run by Hetzner Online GmbH (Germany). We additionally use Cloudflare (Cloudflare, Inc., USA) as a content delivery network (CDN) and reverse proxy, through which all traffic between your browser and our server is routed, to protect the website from attacks and deliver it faster. Insofar as data is transferred to the USA in this context, we rely on the European Commission's Standard Contractual Clauses as an appropriate safeguard.

When you access the website, the providers named above automatically collect technical access data (so-called server log files) that your browser automatically transmits. This includes IP address, date and time of the request, the page accessed, browser and operating system used, and the previously visited page. This data serves solely to technically provide and secure the website (Art. 6(1)(f) GDPR, legitimate interest in operational security) and is not combined with other data sources.

Contact form

If you send us a message via the contact form, we process the data you provide (name, email address, message text) in order to process and respond to your enquiry (Art. 6(1)(b) GDPR).

Your details are transmitted to our server over a secured connection and forwarded to our inn by email (SMTP). The data is not stored in a database; it remains only in our email mailbox until your enquiry has been fully handled.

Spam protection with hCaptcha

To protect the contact form and the feature that reveals our contact details from automated abuse (spam, bots), we use the hCaptcha service provided by Intuition Machines, Inc. This processes technical data such as your IP address as well as interaction and browser data to verify human use (Art. 6(1)(f) GDPR, legitimate interest in preventing abuse). Further information can be found in hCaptcha's privacy policy at hcaptcha.com/privacy.

Directions map (Google Maps)

On our contact page, we offer a directions map based on Google Maps. It is only loaded after you actively click the “Load map” button. Only with this click is a connection established to Google Ireland Limited or Google LLC servers, and your IP address transmitted to Google (Art. 6(1)(a) GDPR, consent given through the active click). Without this click, no data is transmitted to Google. Information on how Google handles user data can be found in Google's privacy policy at policies.google.com/privacy.

Local storage of your language preference

We store your selected language exclusively locally in your browser (local storage, key “altebruecke-language”) so your choice is retained on a future visit. This information is not transmitted to our servers and serves solely the technically necessary functionality of the website (Art. 6(1)(f) GDPR). No cookies are used for analytics or marketing purposes.

Cookie settings and analytics (Umami)

On your first visit, our cookie banner lets you decide whether, in addition to technically necessary storage, you also consent to anonymous analytics with Umami. We store your choice locally in your browser so we don't have to ask again on every visit.

If you consent, Umami (self-hosted, cookie-free) collects anonymised usage data such as pages viewed, approximate origin and device type to help us improve the website (Art. 6(1)(a) GDPR, consent). Your IP address is not stored. You can withdraw your consent at any time via the "Cookie settings" link in the website footer.

Planned: online payments with Stripe

We plan to offer online payments (e.g. for room bookings) in the future via the payment provider Stripe Payments Europe, Ltd. Once this feature is active, Stripe will process the data required for payment processing (including name, payment and transaction data) on the basis of Art. 6(1)(b) GDPR. We will update this privacy policy with all necessary details before the payment feature launches. Further information: stripe.com/privacy.

Your rights

As a data subject, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, an informal message to the contact address given above is sufficient.

Changes to this privacy policy

We will update this privacy policy whenever our website or the underlying processing changes, for example when the Stripe payment feature is introduced. The version currently published on this page always applies.