Privacy Policy.

Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Hosting

This website is hosted by Vercel. The provider is Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. The processing is based on the Data Processing Addendum provided by Vercel, which becomes binding upon conclusion of the terms of service and incorporates the EU standard contractual clauses under European Commission Decision 2021/914. According to its own information, Vercel processes data primarily in the USA and does not offer an exclusively European processing region; the transfer to a third country is therefore based on these standard contractual clauses. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in providing this website securely and reliably).

Server log files

When you access this website, our hosting provider automatically collects information transmitted by your browser: IP address, date and time of the request, the page accessed, the browser used and the referrer URL. This data is used for the technical provision and protection of the website and is not combined with other data sources. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in secure and stable operation). Retention period: the log files are deleted automatically by our hosting provider as soon as they are no longer required for the technical operation and protection of the website. No storage beyond that takes place.

Contact form

This website contains a contact form. When you submit it, the data you enter (hotel name, contact person, email, phone, location, type of enquiry, message) is processed by a server function at our hosting provider Vercel and transmitted to our mailbox through the email service Resend in order to handle your enquiry. The provider of Resend is Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA. Here too, a data processing agreement applies, which becomes binding upon acceptance of the terms of use and incorporates the EU standard contractual clauses; Resend is additionally certified under the EU-U.S. Data Privacy Framework. The processing takes place in the USA. Your details are not passed on beyond these two service providers. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR (legitimate interest in handling your enquiry). Retention period: we store your enquiry for as long as this is necessary to handle it and delete it afterwards. If your enquiry leads to a contractual or business relationship, the statutory retention periods under commercial and tax law apply; until they expire, processing is restricted to storage.

Cookies & tracking

This website does not use any third-party analytics, marketing or tracking tools. No data is transmitted to advertising networks, statistics services or social networks.

Exactly one item is stored on your device: your choice from the consent dialog. It is held in your browser's local storage under the name "crito-consent", does not leave your device and contains no identifier that could be used to recognise you. Its sole purpose is to avoid asking for your choice again on every page view. The legal basis is § 25 para. 2 no. 2 TDDDG, because storing it is strictly necessary for exactly the purpose you requested. It expires after twelve months, after which we ask again.

The statistics and marketing categories are offered in the dialog so that your decision is settled from the outset. No service is currently assigned to them, so nothing is loaded whichever way you decide. If one is added later, your stored choice takes effect without any further action: services in a category you rejected are not loaded at all.

You can withdraw or change your consent at any time with effect for the future, through the "Cookie settings" item at the bottom of every page. Withdrawal is as easy as giving consent and puts you at no disadvantage when using this website.

Your rights

Within the framework of the applicable statutory provisions, you have the right at any time to free information about your stored personal data, as well as a right to rectification, erasure, restriction of processing, data portability and objection to processing. You also have the right to lodge a complaint with a data protection supervisory authority.

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)
• Complaint to a supervisory authority (Art. 77 GDPR)

For enquiries about your rights, please contact info@crito.io.

Changes to this policy

We adapt this privacy policy as soon as changes to our data processing make this necessary. The current version published on this page applies in each case.