Privacy policy

This is an English translation provided for convenience. Only the German version is legally binding.

In brief: this website sets no cookies, uses no tracking and embeds no third-party content. Fonts and images are served exclusively from our own web server.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Alpstuben Buching e.K.
Owner: Robert Kerner
Romantische Straße 16
87642 Halblech-Buching
Germany

Phone: +49 (0) 8368 / 91 480 90
Email: alpstuben.buching@hotmail.de

2. Your rights

With regard to your personal data, you have the following rights:

• right of access (Art. 15 GDPR),
• right to rectification (Art. 16 GDPR),
• right to erasure (Art. 17 GDPR),
• right to restriction of processing (Art. 18 GDPR),
• right to data portability (Art. 20 GDPR),
• right to withdraw consent at any time with effect for the future (Art. 7 (3) GDPR).

Right to object (Art. 21 GDPR): Where we process data on the basis of our legitimate interests (Art. 6 (1) (f) GDPR), you may object to this processing at any time on grounds relating to your particular situation.

To exercise your rights, simply send an informal message to the contact details above.

Right to lodge a complaint: You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

3. Hosting and server log files

When you visit our website, your browser automatically transmits information to the server of our hosting provider. The following data is recorded in server log files:

• IP address of the requesting device,
• date and time of access,
• page or file requested and amount of data transferred,
• status message (e.g. successful, not found),
• website from which access was made (referrer URL),
• browser and operating system used.

This processing is necessary to deliver the website and to ensure its stability and security, for example to fend off attacks. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the secure and error-free operation of the website. Log files are stored only for as long as necessary for these purposes and are then deleted. They are not combined with other data sources or analysed for marketing purposes.

Our website is operated by an external service provider (host). We have concluded a data processing agreement with this provider pursuant to Art. 28 GDPR, which ensures that data is processed only in accordance with our instructions.

4. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.

5. No cookies, no tracking, no third parties

We do not set cookies and do not use any analytics or tracking tools. No information is stored on or read from your device. Fonts are loaded locally from our server; no connection is made to servers of Google or other providers. Consent under Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) is therefore not required.

6. Contacting us and table reservations

If you contact us by email, phone or fax – for example to reserve a table, to enquire about celebrations and events, or to give feedback on your visit – we process the data you provide (e.g. name, contact details, date, time and number of guests for the reservation, and the content of your message) in order to handle your request.

The legal basis is Art. 6 (1) (b) GDPR where your request relates to the performance of a contract or to pre-contractual measures (e.g. a reservation), and otherwise Art. 6 (1) (f) GDPR; our legitimate interest lies in responding to your enquiry. We delete the data as soon as it is no longer required for this purpose, unless statutory retention obligations (e.g. under commercial or tax law) apply.

Please note that emails may be transmitted unencrypted. We therefore ask you to share confidential information by phone.

7. Links to other websites and social networks

Our website contains simple links to external services, e.g. to our Facebook page (Meta Platforms Ireland Ltd.), to Google Maps for route planning (Google Ireland Ltd.) and to the websites of local attractions and our hotel. These are plain links only – no plugins, maps or other content from these providers are embedded in our pages. Data is transmitted to these providers only once you click a link and visit their website. The respective provider is solely responsible for the processing there; please refer to their privacy information.

8. Facebook page

We operate a page on the social network Facebook. When you visit this page, Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland, processes personal data. We are jointly responsible with Meta for processing in connection with page statistics (“Insights”) (Art. 26 GDPR); Meta has provided an agreement for this purpose and assumes primary responsibility, in particular for fulfilling data subject rights. Further information can be found in Meta’s privacy policy at facebook.com/privacy/policy. The legal basis for our presence is Art. 6 (1) (f) GDPR; our legitimate interest lies in informing and communicating with our guests.

9. Obligation to provide data and automated decisions

You are not obliged to provide us with personal data. Without your contact details, however, we cannot accept a reservation or answer enquiries. No automated decision-making, including profiling (Art. 22 GDPR), takes place.

10. Status of this privacy policy

Last updated: October 2026. We will update this privacy policy whenever the website or the legal requirements change.