Privacy policy

Hotel Bayerischer Hof Miesbach Betriebsgesellschaft mbH, Oskar-von-Miller-Str. 2–4, 83714 Miesbach, phone +49 (0) 8025 288-0, email info@bayerischerhof-online.de.

Data protection officer: Trinity networks Mühl GbR, Ms Claudia Riezler, Eversbuschstr. 100, 80999 München, Germany, phone 089 45244290, email datenschutz@trinitynetworks.de.

For your stay (registration form, invoice, guest data in hotel operations), our privacy notice for guests applies, which you receive at reception.

Our website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA, and operated on our behalf by milbo GmbH, Frühlingstraße 21, 85567 Grafing bei München. Both are our processors. When you visit the site, the host processes technically necessary data sent by your browser (IP address, date and time, page visited, browser type, referrer) in order to deliver the site securely. These logs are stored only briefly. The legal basis is our legitimate interest in a secure, functioning website (Art. 6(1)(f) GDPR). Vercel is certified under the EU-US Data Privacy Framework; the transfer to the USA is based on the European Commission's adequacy decision (Art. 45 GDPR).

We only set strictly necessary cookies when you trigger them: the cookie "sprache" if you choose a language in the footer (it stores your language choice for one year), a session cookie if you sign in to your customer account (see "Customer account"), and the cookie "einwilligung", which records your choice in the cookie notice for 180 days. These cookies are necessary for the function you requested (Section 25(2) No. 2 TDDDG) and are not analysed. We serve fonts from our own server; no data is transmitted to font providers. So that the opening animation appears only once, your browser remembers this for the duration of the session (session storage); this information is not transmitted to us.

Everything beyond that — statistics and the measurement of our advertising (see “Google Analytics and Google Ads”) — only runs with your consent. On your first visit we ask you with a notice at the bottom of the page; declining is just as easy there as accepting. Until you consent, no analytics or advertising cookie is set and no connection to Google is established. You can change your choice at any time under “Cookie settings” in the footer of every page; a withdrawal takes effect for the future.

With your consent, we use services of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) on our website:

• Google Analytics 4: audience and usage analysis.
• Google Ads: measurement of our advertising, in particular whether an advertisement is followed by an enquiry or a booking.

Both are loaded via Google Tag Manager. It is loaded only once you choose “Accept” in the cookie notice — before that, no request goes to Google. Technically we use Google's consent mode (Consent Mode v2): until you consent, all consent types (ad_storage, ad_user_data, ad_personalization, analytics_storage) are set to “denied”.

In the process, cookies are set or read, including _ga and _ga_* (up to 2 years) and _gcl_au (90 days); Google Ads may also set the cookie "IDE" on Google's own domain doubleclick.net (13 months). Usage data such as pages visited, time, IP address, device and browser information, and the fact that you submitted our enquiry form (with the subject area you chose, without your entries) may be transmitted to Google. A transfer to Google LLC in the USA is possible. Google LLC is certified under the EU-US Data Privacy Framework.

The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw it at any time with effect for the future: via “Cookie settings” in the footer of every page and then “Decline”. We then withdraw the permission towards Google and delete the cookies _ga, _ga_* and _gcl_* on our website. Cookies on Google's own domains (e.g. IDE) cannot be deleted by us; you can do this in your browser settings. You can read more about data processing by Google at https://policies.google.com/privacy.

If you contact us by email or phone, we process your details in order to answer your enquiry (Art. 6(1)(b) GDPR for enquiries about bookings and events, otherwise point (f)). We delete them when they are no longer needed and no statutory retention obligations apply.

If you use our contact form, we transmit your details by email to our inbox; sending is handled on our behalf by Plus Five Five, Inc. (Resend), USA (EU Standard Contractual Clauses, EU-US Data Privacy Framework).

You can create a customer account voluntarily. We then process your email address and your name and, if you wish, your phone number, language and preferences. The legal basis is Art. 6(1)(b) GDPR (contract of use for the account). To sign in, we send you a one-time sign-in link by email; we do not store a password. After you sign in, we set a strictly necessary session cookie (Section 25(2) No. 2 TDDDG). The account data is stored on our behalf by Neon, Inc. (USA) in a data centre in Frankfurt am Main; processing in the USA is possible, on the basis of the EU-US Data Privacy Framework or the EU Standard Contractual Clauses; the sign-in emails are sent on our behalf by Plus Five Five, Inc. (Resend), USA, on the basis of the EU Standard Contractual Clauses and the EU-US Data Privacy Framework. You can download your data and delete your account in the account at any time. We delete accounts that have not been signed in to for 24 months after a prior reminder.

On our “Book a room” page (/buchen) you can book rooms, suites and Leo Apartments directly with us. The booking form is provided by Hotelnetsolutions GmbH (onepagebooking, cbooking), Genthiner Str. 8, 10785 Berlin, Germany.

Loaded only when you click. The booking form is only loaded when you click “Book a room” or “Book an apartment”. Before that, no data is transmitted to Hotelnetsolutions GmbH. Alternatively, you can open the form directly with the provider via “Open in a separate window”.

A. Processing of your booking data

When you book, we process the data you enter in the form in order to carry out your booking:

• Name
• Contact details
• Arrival and departure
• Number of guests
• Special requests
• Where applicable, billing address and payment details

Hotelnetsolutions GmbH processes this data on our behalf.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual steps and performance of the contract). We store the data for as long as necessary to handle your stay and beyond that in accordance with the statutory retention periods (in particular under commercial and tax law).

B. Analytics and advertising cookies in the booking form

Once loaded, the booking form uses services of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland):

• Google Analytics 4: audience and usage analysis.
• Google Ads: measurement of advertising and conversions.

In the process, cookies are set or read, including _ga and _ga_* (up to 2 years by Google's default) and _gcl_au (90 days). Usage data such as pages visited, time, IP address and device and browser information may be transmitted to Google. A transfer to Google LLC in the USA is possible. Google LLC is certified under the EU-US Data Privacy Framework.

These cookies are not necessary for the booking. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you give by clicking “Book a room” or “Book an apartment” after the notice. You can withdraw your consent at any time with effect for the future: do not load the form again, and delete the cookies of the domain onepagebooking.com in your browser. Or book by phone on +49 8025 288-0 or by email to info@bayerischerhof-online.de.

Handover to the booking engine. If you have consented to measurement (see “Google Analytics and Google Ads”), an advertising and analytics identifier for your visit may be passed to the booking engine of Hotelnetsolutions GmbH (onepagebooking.com) when the booking form opens. The sole purpose is to attribute a completed booking to our advertisement (cross-domain measurement). Without your consent, this does not happen. Which identifiers are passed on: [to be confirmed by the hotel].

C. Payment

You enter payment details, such as credit card details, exclusively in the booking form of Hotelnetsolutions GmbH or with its payment service provider. We do not receive your full card details. The legal basis is Art. 6(1)(b) GDPR. A window from your bank may be displayed for your bank's security check (3-D Secure).

D. Further information

You can read more about data processing by Hotelnetsolutions GmbH in its privacy policy at https://hotelnetsolutions.de/datenschutz/. You can read more about Google at https://policies.google.com/privacy.

On our “Voucher” page (/gutschein) you can buy value and experience vouchers. The voucher shop is provided by GUBSE AG (SIHOT). It is embedded directly in our page. The shop sets only a technically necessary session cookie (JSESSIONID) so that your shopping basket is kept, and no analytics or advertising cookies. The legal basis for this cookie is Section 25(2) No. 2 TDDDG. No consent is required for it.

When you order a voucher, we process the data you enter in the shop:

• Name
• Contact details
• Billing address
• Where applicable, name of the recipient and greeting text
• Order and payment information

We process this data to handle your order and to redeem the voucher later. The legal basis is Art. 6(1)(b) GDPR. GUBSE AG processes the data on our behalf. GUBSE Aktiengesellschaft has its registered office in Germany (Bahnhofstraße 26–28, 66578 Schiffweiler).

Payment. Payment is handled by the payment service Saferpay of Worldline Schweiz AG (Hardturmstrasse 201, 8005 Zürich, Switzerland). You enter payment details such as credit card details exclusively there. We do not receive your full card details. The legal basis is Art. 6(1)(b) GDPR. For Switzerland there is an adequacy decision of the European Commission (Art. 45 GDPR). A window from your bank may be displayed for your bank's security check (3-D Secure). You can read more in Worldline's privacy notice: https://worldline.com/en-ch/compliancy/privacy

Our site contains simple links, e.g. to Facebook, Instagram, OpenTable, Booking.com and regional tourism sites. These services are not embedded; data is only transmitted when you click a link. The privacy policy of the respective provider then applies.

You have the right of access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests (Art. 15–21 GDPR), as well as the right to withdraw consent given with effect for the future. To exercise these rights, contact us (details above) or our data protection officer. You can also lodge a complaint with a data protection supervisory authority; the authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach.

October 2026. We update this policy when our website changes.