Privacy Policy

Compliance with Legal Information Obligations according to the European General Data Protection Regulation (GDPR)

This statement applies to all our guests. We hereby inform you about the type, scope, and purpose of the collection and use of your personal data. The controller responsible for data processing is: Müller Valentin, Moarhof, who can be contacted as follows: Tel. [0039 0473679221] + Email: info@moar-hof.info

In accordance with Art. 13 of the European GDPR, we process the following data:

• - Your basic data (first name, last name, address, telephone, email, date and place of birth, language, etc.)
• - Your data from travel documents and IDs
• - Your payment data, debit/credit card and bank card information
• - The duration of your requested stay and any personal preferences related to the stay that you share with us

The data is stored and processed by us to provide our services and, if necessary and legally required, forwarded to third-party recipients (e.g., public authorities, tourist associations). Your data will not be transferred to third countries.

If you refuse to provide basic data, travel document data, or banking details, we cannot fulfill our contractual obligations and accommodate you at our establishment. We do not use profiling or automated decision-making.

The legal bases for these data processing procedures are:

• - The fulfillment of our pre-contractual and contractual obligations to you
• - Consents obtained from you
• - Legal, contractual, or other legal obligations on our part (e.g., documentation rights and obligations under accounting, tax, and customs law, contract law, reporting requirements, or legal disputes)
• - Our legitimate interests (e.g., improving customer service, including direct marketing, or asserting our own legal interests)
• - The duration of storage is based on the duration of our business relationship, your consents, and legal retention obligations applicable to us

You may request information at any time, free of charge, regarding your personal data stored by us. As a data subject, you also have the right to revoke, access, delete, correct, restrict, or transfer your personal data, provided no legal obligation to retain such data exists on our part. Upon exercising your right of revocation, all your data will be permanently deleted unless higher-level legal provisions are violated.

For more information on your rights as a data subject, please contact us at info@moar-hof.info. We are happy to assist you. For complaints, the supervisory authority is the “Garante per la protezione dei dati personali”: Piazza di Monte Citorio n. 121, 00186 Rome, Fax: (+39) 06.69677.3785, Tel: (+39) 06.696771, Email: garante@gpdp.it.

SSL Encryption
For security reasons and to protect the transmission of confidential content—such as inquiries you send to us as the site operator—this site uses SSL encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser bar. If SSL encryption is activated, the data you transmit to us cannot be read by third parties.

Web Server Log
For the smooth functioning of websites and possible troubleshooting, web servers generally maintain logs where IP addresses are stored. Like many companies, we operate our website via the servers of a professional hosting provider. Although IP addresses are not considered personal data by themselves, they could theoretically be associated with individuals using tracking tools. In addition to the IP address, the timestamp, browser type, and accessed page are also stored. These logs are deleted after one month.

RapidMail
To subscribe to the newsletter offered on our website, you can sign up via our form. We use the so-called double opt-in process for this. This means a confirmation email will first be sent to your provided email address, asking for confirmation. Your subscription becomes active only once you click the activation link in the confirmation email.

We use the data you provide exclusively for sending the newsletter, which may contain information or offers.
We use RapidMail to send our newsletter. Therefore, your data will be transmitted to Rapidmail GmbH. Rapidmail GmbH is not allowed to use your data for any purposes other than sending the newsletter. It is also prohibited from selling or sharing your data with third parties. Rapidmail is a certified German newsletter software provider carefully selected in accordance with the requirements of the GDPR and BDSG.

You can revoke your consent to the storage and use of your data for newsletter distribution at any time, for example via the unsubscribe link in the newsletter.

Review Portals
We also use third-party content on our website to make our online presence as informative and user-friendly as possible for you. This includes various review platforms such as links to Online Travel Agencies (OTAs) like https://www.tripadvisor.de/ and https://www.holidaycheck.de/. Please refer to the privacy policies of these respective providers.

HolidayCheck Group AG
When using this online review feature, personal data such as name, address, contact details (phone and email) may be collected. The controller responsible for data processing is HolidayCheck Group AG, Neumarkter Str. 61, 80796 Munich. Providing a review is voluntary, and your data will only be collected, processed, and used for the purpose of review handling. These third-party providers will technically receive your IP address. We have no influence over how this data is used by the providers. Please refer to HolidayCheck’s privacy policy here: https://www.holidaycheck.de/datenschutz

TripAdvisor
We use a social media plugin from TripAdvisor Inc., 400 1st Avenue, Needham, MA 02494, USA, on our website. TripAdvisor collects user reviews on tourism offerings and is an online company. These reviews are combined with booking recommendations.
We use the TripAdvisor widget to neutrally display customer opinions. This constitutes a legitimate interest pursuant to Art. 6(1)(f) GDPR.
TripAdvisor places a cookie on your device when you visit a page with this widget.
TripAdvisor’s privacy policy can be found here: https://tripadvisor.mediaroom.com/CHDE-privacy-policy

European Travel Insurance
Europäische Reiseversicherung AG (ERV) provides information on the processing of personal data on its own website. More information can be found at: https://www.reiseversicherung.de/de/datenschutz.html
The controller is ERV (Europäische Reiseversicherung AG), headquartered at Rosenheimer Straße 116, 81669 Munich, Germany.

You may generally use our website anonymously. We do not store personal or personally identifiable data (such as IP addresses) from users. During your visit, anonymized data (such as date, time, viewed pages, navigation, browser details) is collected via an external service provider. This anonymization takes place before the data is stored. If you do not want social networks to collect data about your visit to our site, please log out of these networks before using our website.

Facebook Pixel
Please note that this website has implemented Facebook’s remarketing tag. When visiting this website, a direct connection to the Facebook server is established. Facebook receives the information that you have visited our website and associates it with your Facebook account.
Further information on data collection and processing by Facebook can be found at: https://www.facebook.com/about/privacy/
Alternatively, you can deactivate the remarketing function "Custom Audiences" directly in your Facebook settings: https://www.facebook.com/settings/

Facebook
This website integrates components of the company Facebook. Facebook is a social network.
A social network is an internet-based social meeting place that typically enables users to communicate and interact online. It allows the exchange of opinions and experiences or the provision of personal or business-related information.
Facebook enables users to create private profiles, upload photos, and connect via friend requests.
The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If the data subject resides outside the USA or Canada, the controller is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Each time one of our web pages containing a Facebook component (Facebook plugin) is accessed, the component prompts your browser to download the corresponding Facebook content. An overview of all Facebook plugins can be found here: https://developers.facebook.com/docs/plugins/?locale=de_DE

If you are logged in to Facebook while visiting our site, Facebook can associate your visit with your personal account. Interactions such as clicking the “Like” button or commenting will be linked to your Facebook account.
If you do not wish Facebook to associate this data with your account, you must log out before visiting our website.

More details on Facebook’s data handling practices are available at: https://de-de.facebook.com/about/privacy/

Instagram
This website integrates components of the Instagram service. Instagram is a platform that allows users to share photos and videos, and distribute them across other social networks.
The operating company of Instagram is Instagram LLC, 1 Hacker Way, Building 14, First Floor, Menlo Park, CA, USA.

When you access a page that includes an Instagram component (Insta button), your browser is prompted to download content from Instagram. This lets Instagram know which specific page you are visiting.
If you are logged into Instagram at the same time, Instagram can track your behavior and associate it with your personal profile.
Any interaction—like clicking an Instagram button—will be linked to your account and stored by Instagram.
If you wish to prevent this, log out of your Instagram account before visiting our site.

Further information and Instagram’s privacy policy can be found here:
https://help.instagram.com/155833707900388
https://www.instagram.com/about/legal/privacy/

Google+
Our website may include functions and content from the Google+ platform, offered by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). These may include content such as images, videos, or texts and buttons that users can use to share website content within Google+.
If users are members of the Google+ platform, Google may assign the retrieval of this content to their profiles.

Google is certified under the EU-U.S. Privacy Shield Framework, providing a guarantee of compliance with European data protection laws: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

More information on Google’s data usage and your privacy options can be found at:
https://policies.google.com/technologies/ads
https://adssettings.google.com/authenticated

Pinterest
We use buttons and widgets from the social media network Pinterest, provided by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA.
When visiting pages using these features, data (such as IP address, browser info, date and time, cookies) is transmitted to Pinterest, stored, and evaluated.
Pinterest’s privacy policy outlining what data is collected and how it’s used is available at:
https://policy.pinterest.com/de/privacy-policy

YouTube
This website uses the video embedding service of YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Usually, your IP address is sent to YouTube when a page with an embedded video is loaded, and cookies are stored on your device.

However, we embed YouTube videos using the extended data protection mode. In this case, YouTube still contacts Google, but, according to Google’s privacy policy, no personal data is evaluated unless the video is actively played.
If you click on a video, your IP address is transmitted to YouTube, and it becomes known that you watched the video. If you are logged into your YouTube account, this information will be linked to your personal profile.

We have no knowledge of or control over the potential collection and processing of your data by YouTube.
Further information can be found here:
http://www.google.de/intl/de/policies/privacy/

Twitter
Our website includes functions of the Twitter service. These functions are provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.
By using Twitter and the "Re-Tweet" function, the websites you visit are linked to your Twitter account and made known to other users. In the process, data is also transmitted to Twitter.
We point out that, as the provider of the site, we have no knowledge of the content of the transmitted data or its use by Twitter.
Further information can be found in Twitter’s privacy policy: http://twitter.com/privacy
You can change your data privacy settings in your Twitter account settings: http://twitter.com/account/settings

ISSUU
Our site integrates functions from the ISSUU service. These functions are provided by Issuu, Inc., 131 Lytton Ave, Palo Alto, CA 94301, USA.
With ISSUU, you can connect, collaborate, share, and remix documents with other users in the ISSUU community online.
We note that, as the website provider, we have no knowledge of the content of the transmitted data or how it is used by ISSUU.
More information is available in ISSUU’s privacy policy: https://issuu.com/legal/privacy

WhatsApp
This website uses a WhatsApp sharing button, which only becomes active after being clicked. It is provided by WhatsApp Inc., 1601 Willow Road, Menlo Park, California 94025 USA (“WhatsApp”). This allows you to conveniently share website content with your WhatsApp contacts.
The button is simply a link to WhatsApp and does not store any personal data or transmit any data until clicked.
There is no cooperation with WhatsApp, and no data is shared with third parties.
WhatsApp only receives information once you click the button. You can find WhatsApp’s privacy policy here: www.whatsapp.com/legal/

Vimeo
We use components from the video platform Vimeo. Vimeo is a service of Vimeo LLC, 555 West 18th Street, New York, NY 10011, USA.
Each time a page with a Vimeo component is loaded, your browser downloads a corresponding Vimeo module.
If you are logged into Vimeo while visiting our site, Vimeo can track your browsing behavior and link it to your personal Vimeo account.
For example, clicking "Play" on a video transmits data to Vimeo and associates it with your account.
To prevent this, log out of your Vimeo account before visiting our site.
Vimeo’s privacy policy is available here: https://vimeo.com/privacy

Booking Software
Our website uses third-party applications to process your non-binding inquiries and bookings. Personal data is collected, processed, and used only as permitted by data protection regulations or based on your explicit consent.
Your data will be deleted immediately after the respective use ends, unless legal retention periods apply. Further personal data will only be collected, processed, and used if you voluntarily provide it—for example, through registration, surveys, or contract fulfillment.
Once a contract ends, your personal data will be deleted, except for data that must be retained by law. Such data will be blocked.

Google Fonts
This site uses web fonts provided by Google for consistent and visually appealing typography. When you access the site, your browser loads the required fonts into its cache. To do so, your browser must connect to Google's servers, informing Google that your IP address accessed our website.
Using Google Web Fonts is in our legitimate interest under Art. 6(1)(f) GDPR.
More information can be found at:
https://developers.google.com/fonts/faq
https://www.google.com/policies/privacy/

TypeKit Fonts
We use Adobe Typekit Fonts on our website. These fonts are provided by Adobe via servers in the USA.
When visiting our website, your browser connects directly to Adobe’s servers, and your IP address may be transmitted and stored by Adobe.
Adobe participates in the EU-US Privacy Shield program.
More info about Adobe: Adobe Systems Inc., 45 Park Avenue, San Jose, CA 95110, USA
Adobe’s privacy information for Typekit: https://www.adobe.com/de/privacy/policies/typekit.html

MyFonts Web Fonts
This site uses web fonts from MyFonts Inc., 600 Unicorn Park Drive, Woburn, MA 01801, USA. To display fonts properly, your browser must connect to MyFonts servers, revealing your IP address.
This is done in our legitimate interest under Art. 6(1)(f) GDPR.
MyFonts’ privacy policy: https://www.myfonts.com/info/terms-and-conditions

MATOMO (formerly PIWIK)
We use Matomo (formerly Piwik) for website analytics (web tracking). This tool helps us understand visitor behavior (e.g., heatmaps, clicks, scrolling) to improve our site’s structure and usability.
A major advantage of Matomo is that it is self-hosted, so all data remains under our control and is not transmitted to external servers.
You may request information about your personal data at any time by email (see imprint).

Google Analytics
This website uses Google Analytics, a web analysis service by Google Inc. (“Google”). Google Analytics uses “cookies” (text files stored on your device) to analyze your usage of the site.
The information generated (including your IP address) is transmitted to a Google server in the USA and stored there.
Google uses this data to analyze usage, create reports for the website operator, and provide additional related services.
Data may be shared with third parties if legally required or processed on Google's behalf.
Your IP address will not be associated with other Google data.

You may prevent cookie storage via your browser settings, but this may limit site functionality.
To prevent Google from collecting and processing this data, use this browser plugin: https://tools.google.com/dlpage/gaoptout?hl=de
Further information:
https://www.google.com/analytics/terms/de.html
https://support.google.com/analytics/answer/6004245?hl=de

We use IP masking in Google Analytics to ensure anonymized data collection.
Google Analytics is also used to evaluate AdWords and DoubleClick cookie data.
If you wish to opt out, visit: https://adssettings.google.com/?hl=de