Privacy Policy

Last updated: 25 September 2026

This policy explains how personal data is processed when you visit thoeles-vilsen.de or contact us. Online booking takes place on an external Mews website.

Controller

Wilhelm Thöle, Thöles*** Hotel in Vilsen, Am Dobben 13, 27305 Bruchhausen-Vilsen, Germany. Phone: +49 4252 9110980. Email: info@thoeles-vilsen.de.

Website access and server logs

When you access this website, our hosting provider STRATO processes technical connection data. This may include your IP address, the date and time of access, the requested file, the response status, browser details and the referring page. This processing is needed to deliver the website, maintain its security and identify errors or misuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is operating a secure and functional website. STRATO receives these data as our hosting provider. The data are kept only for as long as needed for these purposes or to meet legal obligations. The exact retention period for server logs depends on the settings and retention rules of the hosting contract.

Contact by email or phone

If you email or call us, we process your contact details and the content of your message to answer your enquiry and, where applicable, prepare or perform a booking. For enquiries concerning a contract, the legal basis is Article 6(1)(b) GDPR; for other enquiries it is Article 6(1)(f) GDPR. Our legitimate interest is handling your enquiry. We delete the data once they are no longer needed for this purpose, unless a statutory retention duty or the establishment, exercise or defence of legal claims requires further storage. Providing data is voluntary; without the necessary contact details, we may be unable to reply. This website does not have a contact form.

Online booking through Mews

Our booking links lead to app.mews.com. Only when you open one of these links do you leave this website and your browser connect to Mews. The booking website processes the data needed to search for a room, make a reservation and, where applicable, pay. Cookies and other services on that website are described in its own privacy information. We process the booking and guest data sent to us to perform your reservation under Article 6(1)(b) GDPR; storage required by law is based on Article 6(1)(c) GDPR. Mews provides the technical booking system. Mews explains its own processing at https://www.mews.com/en/legal/privacy-policy. Details of recipients and retention periods for booking data depend on the booking system and the hotel's statutory duties.

Facebook link

This website contains a link to our Facebook page. No Facebook content is embedded here. A connection to Facebook is established only if you open the link. Facebook explains its processing of data on its own website.

Cookies and browser storage

The publicly accessible pages do not themselves set analytics or advertising cookies or embed such services. Fonts, images and videos are served from our own webspace. You can dismiss a notice about the other language version. Using the “Aa” button you can also choose larger text, higher contrast or turn off animations. These choices are saved in your browser's local storage, not on our server. You can delete them through your browser settings; the display settings can also be removed with “Reset” in the same button. This storage is used only to remember your choices on future visits. The legal basis for any related processing of personal data is Article 6(1)(f) GDPR; our legitimate interest is providing a user-friendly display. Access to local storage is necessary for the remembering functions you choose (section 25(2)(2) TDDDG).

A password-protected area at /aktuelles-bearbeiten/ allows hotel staff to update the website. A technically necessary session cookie is set only when this area is accessed. It enables login and protects the editing function from unauthorised access. The cookie expires when the browser is closed; server-side session data are deleted after the session or the configured period. Failed login attempts are logged temporarily to prevent attacks. The legal basis for processing personal data is Article 6(1)(f) GDPR; our legitimate interest is website security. Section 25(2)(2) TDDDG applies to the necessary session cookie.

Recipients and transfers outside the EU or EEA

STRATO receives the technical data needed to operate this website. If you choose to visit the booking website or Facebook, their privacy information applies. Simply viewing a page on this website does not transmit data to Mews or Facebook. Their respective privacy notices explain whether and to what extent they transfer data outside the EU or EEA.

Your rights

Subject to the conditions of the GDPR, you may request access to your personal data, rectification, erasure, restriction of processing and data portability. Where we process data under Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation (Article 21 GDPR). You may withdraw any consent with future effect at any time. Please contact us at the email address above.

You may also lodge a complaint with a data protection supervisory authority, in particular the State Commissioner for Data Protection of Lower Saxony (Die Landesbeauftragte für den Datenschutz Niedersachsen). This does not affect any other legal remedies.