Privacy policy

This is a convenience translation. Only the German version is legally binding.

Protecting your personal data is important to us. We process your data exclusively on the basis of the statutory provisions (GDPR, BDSG, TDDDG). Below we explain which data is processed when you visit this website.

1. Controller

Zur Rennbahn GmbH
Stover Strand 4
21423 Drage, Germany
Phone: +49 (0)4176 9131-0
Email: team@hotel-zur-rennbahn.de

2. Hosting and server log files

This website is operated on a server of Host Europe GmbH, Hansestraße 111, 51149 Cologne, Germany. When you visit the site, information transmitted by your browser is recorded automatically (server log files): IP address, date and time of access, page requested, referrer URL, browser type and version, and operating system. This data is technically necessary to deliver the website and to ensure its security and stability. The legal basis is Art. 6 (1) (f) GDPR. The log files are deleted automatically after a short time unless they are needed to investigate a security incident.

3. Cloudflare

To protect the website and deliver it faster, we use the content delivery network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Data traffic between your browser and our server is routed via Cloudflare; in particular your IP address and technical connection data are processed. The legal basis is our legitimate interest in providing the website securely and efficiently (Art. 6 (1) (f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework. Further information can be found in Cloudflare's privacy policy.

4. Cookies and fonts

This website itself does not set any cookies. Fonts are loaded from our own server; there is no connection to Google Fonts. Maps are not embedded – the link “Plan your route with Google Maps” only takes you to Google after you click it.

5. Anonymous visitor statistics (Matomo)

To understand how our website is used and to improve it, we use the open-source software Matomo. Matomo runs on our own server at Host Europe GmbH (analytics.hotel-zur-rennbahn.de); the data is not passed on to third parties and is not combined with other data. We do not create user profiles.

Data processed: your IP address, which is immediately shortened by two bytes and stored only in that form (e.g. 192.168.xxx.xxx); the approximate country and region derived from it; browser, operating system and device type from the user agent; language setting; pages visited, time and duration of the visit; the page you came from (without parameters); and clicks on phone numbers, email addresses, “Plan your route”, buttons, external links, opened FAQ questions and use of the booking form or opening of the booking mask. We also record how far a page was read (in steps of 25%), whether the booking form came into view, jumps to sections via anchors, printing a page, copying contact details and technical browser error messages. Content that you enter into the booking form or copy is not recorded by the statistics.

No cookies: the statistics do not set cookies and do not store any information on your device. Features such as screen resolution, installed plugins or extended device information (“client hints”) are not queried.

Storage period: raw data is deleted automatically after 180 days; after that only aggregated, anonymous reports remain (e.g. number of page views per month).

Legal basis: Art. 6 (1) (f) GDPR. Our legitimate interest lies in designing and improving our website according to demand.

Objection: you can object to the statistics at any time. If your browser sends a “Do Not Track” or “Global Privacy Control” signal, statistics are not collected. Without JavaScript no statistics are collected either. With the following switch you can turn off statistics for this browser; your choice is noted in your browser's storage (localStorage).

6. Contact by email or phone

If you contact us by email or phone, we process your details (e.g. name, contact details, content of your enquiry) to handle your request. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract, otherwise Art. 6 (1) (f) GDPR. The data is deleted as soon as it is no longer required and no statutory retention obligations apply.

7. Online room booking (DIRS21)

On the home page, the “Hotel rooms” page and the “Book a room” page, as well as via individual booking buttons, we embed the DIRS21 booking system. The booking form is only loaded when you interact with the page (e.g. scroll, tap, move the mouse or choose “Load booking form”). Only then is a connection to the DIRS21 servers established; your IP address and technical browser data, among other things, are transmitted. The data you enter during the booking process (e.g. name, address, contact details, travel dates, payment information) is processed to carry out your booking. The legal basis is Art. 6 (1) (b) GDPR. DIRS21 may use technically necessary cookies or local storage for the booking process (§ 25 (2) TDDDG). Booking data is deleted after the contract has been fulfilled and the statutory retention periods have expired.

8. Links to social networks

We only refer to Instagram and Facebook with simple links. No plugins are embedded; data is only transmitted when you click such a link and visit the respective platform.

9. Your rights

You have the right at any time to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and to object to processing (Art. 21 GDPR). Simply contact us using the details above.

You also have the right to lodge a complaint with a data protection supervisory authority, e.g. the State Commissioner for Data Protection of Lower Saxony.

10. SSL/TLS encryption

For security reasons this website uses SSL/TLS encryption. You can recognise an encrypted connection by the padlock symbol in your browser's address bar.

Last updated: November 2026