{"id":788,"date":"2026-01-14T16:26:07","date_gmt":"2026-01-14T16:26:07","guid":{"rendered":"https:\/\/gambinohotels.com\/?page_id=788"},"modified":"2026-02-09T20:31:23","modified_gmt":"2026-02-09T20:31:23","slug":"data-privacy","status":"publish","type":"page","link":"https:\/\/gambinohotels.com\/en\/data-privacy\/","title":{"rendered":"Data Privacy"},"content":{"rendered":"<h3 data-start=\"579\" data-end=\"604\">I. General Information<\/h3>\n<p data-start=\"606\" data-end=\"807\">The protection of your personal data is of particular importance to us. Personal data (hereinafter referred to as \u201cdata\u201d) means any information relating to an identified or identifiable natural person.<\/p>\n<p data-start=\"809\" data-end=\"1089\">We process personal data exclusively in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the German Telecommunications and Digital Services Data Protection Act (TTDSG).<\/p>\n<p data-start=\"1091\" data-end=\"1258\">This Privacy Policy informs you about the type, scope, purpose, duration, and legal basis of the processing of personal data, as well as your rights as a data subject.<\/p>\n<hr data-start=\"1260\" data-end=\"1263\" \/>\n<h3 data-start=\"1265\" data-end=\"1287\">II. Data Controller<\/h3>\n<p data-start=\"1289\" data-end=\"1343\">The data controller within the meaning of the GDPR is:<\/p>\n<p data-start=\"1345\" data-end=\"1421\"><strong data-start=\"1345\" data-end=\"1380\">gambino hotel WERKSVIERTEL GmbH<\/strong><br data-start=\"1380\" data-end=\"1383\" \/>Bayerstr. 7<br data-start=\"1394\" data-end=\"1397\" \/>80335 Munich<br data-start=\"1409\" data-end=\"1412\" \/>Germany<\/p>\n<p data-start=\"1423\" data-end=\"1499\">Phone: +49 89 998 280 611<br data-start=\"1448\" data-end=\"1451\" \/>Email: <a class=\"decorated-link cursor-pointer\" rel=\"noopener\" data-start=\"1458\" data-end=\"1497\">director-werksviertel@gambinohotels.com<\/a><\/p>\n<p data-start=\"1501\" data-end=\"1587\">A Data Protection Officer is not required by law and has therefore not been appointed.<\/p>\n<hr data-start=\"1589\" data-end=\"1592\" \/>\n<h3 data-start=\"1594\" data-end=\"1625\">III. Rights of Data Subjects<\/h3>\n<p data-start=\"1627\" data-end=\"1661\">You have the right at any time to:<\/p>\n<ul data-start=\"1663\" data-end=\"2294\">\n<li data-start=\"1663\" data-end=\"1761\">\n<p data-start=\"1665\" data-end=\"1761\">obtain confirmation as to whether personal data concerning you is being processed (Art. 15 GDPR)<\/p>\n<\/li>\n<li data-start=\"1762\" data-end=\"1815\">\n<p data-start=\"1764\" data-end=\"1815\">request access to your personal data (Art. 15 GDPR)<\/p>\n<\/li>\n<li data-start=\"1816\" data-end=\"1887\">\n<p data-start=\"1818\" data-end=\"1887\">request rectification of inaccurate or incomplete data (Art. 16 GDPR)<\/p>\n<\/li>\n<li data-start=\"1888\" data-end=\"1942\">\n<p data-start=\"1890\" data-end=\"1942\">request erasure of your personal data (Art. 17 GDPR)<\/p>\n<\/li>\n<li data-start=\"1943\" data-end=\"1993\">\n<p data-start=\"1945\" data-end=\"1993\">request restriction of processing (Art. 18 GDPR)<\/p>\n<\/li>\n<li data-start=\"1994\" data-end=\"2095\">\n<p data-start=\"1996\" data-end=\"2095\">receive your data in a structured, commonly used format and request data portability (Art. 20 GDPR)<\/p>\n<\/li>\n<li data-start=\"2096\" data-end=\"2175\">\n<p data-start=\"2098\" data-end=\"2175\">withdraw your consent at any time with effect for the future (Art. 7(3) GDPR)<\/p>\n<\/li>\n<li data-start=\"2176\" data-end=\"2230\">\n<p data-start=\"2178\" data-end=\"2230\">object to the processing of your data (Art. 21 GDPR)<\/p>\n<\/li>\n<li data-start=\"2231\" data-end=\"2294\">\n<p data-start=\"2233\" data-end=\"2294\">lodge a complaint with a supervisory authority (Art. 77 GDPR)<\/p>\n<\/li>\n<\/ul>\n<p data-start=\"2296\" data-end=\"2328\">Competent supervisory authority:<\/p>\n<p data-start=\"2330\" data-end=\"2424\"><strong data-start=\"2330\" data-end=\"2396\">Bavarian State Office for Data Protection Supervision (BayLDA)<\/strong><br data-start=\"2396\" data-end=\"2399\" \/><a class=\"decorated-link\" href=\"https:\/\/www.lda.bayern.de\" target=\"_new\" rel=\"noopener\" data-start=\"2399\" data-end=\"2424\">https:\/\/www.lda.bayern.de<\/a><\/p>\n<hr data-start=\"2426\" data-end=\"2429\" \/>\n<h3 data-start=\"2431\" data-end=\"2466\">IV. Hosting and Server Log Files<\/h3>\n<p data-start=\"2468\" data-end=\"2599\">Our website is hosted by an external hosting service provider. In the course of hosting, personal data is processed, in particular:<\/p>\n<ul data-start=\"2601\" data-end=\"2710\">\n<li data-start=\"2601\" data-end=\"2615\">\n<p data-start=\"2603\" data-end=\"2615\">IP address<\/p>\n<\/li>\n<li data-start=\"2616\" data-end=\"2643\">\n<p data-start=\"2618\" data-end=\"2643\">Date and time of access<\/p>\n<\/li>\n<li data-start=\"2644\" data-end=\"2672\">\n<p data-start=\"2646\" data-end=\"2672\">Browser type and version<\/p>\n<\/li>\n<li data-start=\"2673\" data-end=\"2693\">\n<p data-start=\"2675\" data-end=\"2693\">Operating system<\/p>\n<\/li>\n<li data-start=\"2694\" data-end=\"2710\">\n<p data-start=\"2696\" data-end=\"2710\">Referrer URL<\/p>\n<\/li>\n<\/ul>\n<p data-start=\"2712\" data-end=\"2806\">These data are technically necessary to ensure the secure and stable operation of the website.<\/p>\n<p data-start=\"2808\" data-end=\"2864\"><strong data-start=\"2808\" data-end=\"2824\">Legal basis:<\/strong> Art. 6(1)(f) GDPR (legitimate interest)<\/p>\n<p data-start=\"2866\" data-end=\"2964\">A data processing agreement pursuant to Art. 28 GDPR has been concluded with the hosting provider.<\/p>\n<p data-start=\"2966\" data-end=\"3076\">Server log data is deleted after <strong data-start=\"2999\" data-end=\"3009\">7 days<\/strong>, unless longer retention is required for security-related reasons.<\/p>\n<hr data-start=\"3078\" data-end=\"3081\" \/>\n<h3 data-start=\"3083\" data-end=\"3119\">V. Cookies and Consent Management<\/h3>\n<p data-start=\"3121\" data-end=\"3174\">Our website uses cookies and comparable technologies.<\/p>\n<h3 data-start=\"3176\" data-end=\"3214\">1. Technically Necessary Cookies<\/h3>\n<p data-start=\"3215\" data-end=\"3281\">These cookies are required to provide essential website functions.<\/p>\n<p data-start=\"3283\" data-end=\"3335\"><strong data-start=\"3283\" data-end=\"3299\">Legal basis:<\/strong><br data-start=\"3299\" data-end=\"3302\" \/>\u00a7 25(2) TTDSG<br data-start=\"3315\" data-end=\"3318\" \/>Art. 6(1)(f) GDPR<\/p>\n<h3 data-start=\"3337\" data-end=\"3367\">2. Consent-Based Cookies<\/h3>\n<p data-start=\"3368\" data-end=\"3441\">Analytics and marketing cookies are only used with your explicit consent.<\/p>\n<p data-start=\"3443\" data-end=\"3495\"><strong data-start=\"3443\" data-end=\"3459\">Legal basis:<\/strong><br data-start=\"3459\" data-end=\"3462\" \/>\u00a7 25(1) TTDSG<br data-start=\"3475\" data-end=\"3478\" \/>Art. 6(1)(a) GDPR<\/p>\n<p data-start=\"3497\" data-end=\"3592\">You may withdraw or adjust your consent at any time via the cookie consent tool on our website.<\/p>\n<hr data-start=\"3594\" data-end=\"3597\" \/>\n<h3 data-start=\"3599\" data-end=\"3622\">VI. Google Analytics<\/h3>\n<p data-start=\"3624\" data-end=\"3706\">This website uses <strong data-start=\"3642\" data-end=\"3668\">Google Analytics (GA4)<\/strong>, a web analytics service provided by:<\/p>\n<p data-start=\"3708\" data-end=\"3785\"><strong data-start=\"3708\" data-end=\"3734\">Google Ireland Limited<\/strong><br data-start=\"3734\" data-end=\"3737\" \/>Gordon House, Barrow Street<br data-start=\"3764\" data-end=\"3767\" \/>Dublin 4<br data-start=\"3775\" data-end=\"3778\" \/>Ireland<\/p>\n<p data-start=\"3787\" data-end=\"3871\">Google Analytics uses cookies to analyze user behavior. IP anonymization is enabled.<\/p>\n<p data-start=\"3873\" data-end=\"3941\">Google Analytics is used <strong data-start=\"3898\" data-end=\"3940\">only after you have given your consent<\/strong>.<\/p>\n<p data-start=\"3943\" data-end=\"3995\"><strong data-start=\"3943\" data-end=\"3959\">Legal basis:<\/strong><br data-start=\"3959\" data-end=\"3962\" \/>Art. 6(1)(a) GDPR<br data-start=\"3979\" data-end=\"3982\" \/>\u00a7 25(1) TTDSG<\/p>\n<p data-start=\"3997\" data-end=\"4177\">Data transfers to third countries (e.g., the United States) cannot be excluded. Such transfers are based on the <strong data-start=\"4109\" data-end=\"4151\">EU Standard Contractual Clauses (SCCs)<\/strong> pursuant to Art. 46 GDPR.<\/p>\n<hr data-start=\"4179\" data-end=\"4182\" \/>\n<h3 data-start=\"4184\" data-end=\"4224\">VII. Bookings and Contract Processing<\/h3>\n<p data-start=\"4226\" data-end=\"4296\">When you make a reservation or booking, we process the following data:<\/p>\n<ul data-start=\"4298\" data-end=\"4413\">\n<li data-start=\"4298\" data-end=\"4306\">\n<p data-start=\"4300\" data-end=\"4306\">Name<\/p>\n<\/li>\n<li data-start=\"4307\" data-end=\"4318\">\n<p data-start=\"4309\" data-end=\"4318\">Address<\/p>\n<\/li>\n<li data-start=\"4319\" data-end=\"4336\">\n<p data-start=\"4321\" data-end=\"4336\">Email address<\/p>\n<\/li>\n<li data-start=\"4337\" data-end=\"4368\">\n<p data-start=\"4339\" data-end=\"4368\">Arrival and departure dates<\/p>\n<\/li>\n<li data-start=\"4369\" data-end=\"4413\">\n<p data-start=\"4371\" data-end=\"4413\">Payment details (e.g., credit card data)<\/p>\n<\/li>\n<\/ul>\n<p data-start=\"4415\" data-end=\"4541\">The processing is necessary for the performance of pre-contractual measures and the fulfillment of the accommodation contract.<\/p>\n<p data-start=\"4543\" data-end=\"4577\"><strong data-start=\"4543\" data-end=\"4559\">Legal basis:<\/strong> Art. 6(1)(b) GDPR<\/p>\n<p data-start=\"4579\" data-end=\"4677\">Personal data is stored in accordance with statutory retention obligations and deleted thereafter.<\/p>\n<hr data-start=\"4679\" data-end=\"4682\" \/>\n<h3 data-start=\"4684\" data-end=\"4709\">VIII. Contact Requests<\/h3>\n<p data-start=\"4711\" data-end=\"4812\">If you contact us by email or via a contact form, your data will be processed to handle your request.<\/p>\n<p data-start=\"4814\" data-end=\"4921\"><strong data-start=\"4814\" data-end=\"4830\">Legal basis:<\/strong><br data-start=\"4830\" data-end=\"4833\" \/>Art. 6(1)(b) GDPR (contract-related inquiries)<br data-start=\"4879\" data-end=\"4882\" \/>Art. 6(1)(f) GDPR (legitimate interest)<\/p>\n<hr data-start=\"4923\" data-end=\"4926\" \/>\n<h3 data-start=\"4928\" data-end=\"4972\">IX. Social Media Icons and External Links<\/h3>\n<p data-start=\"4974\" data-end=\"5089\">Our website contains <strong data-start=\"4995\" data-end=\"5050\">icons linking directly to our social media profiles<\/strong> (e.g., Instagram, Facebook, LinkedIn).<\/p>\n<p data-start=\"5091\" data-end=\"5312\">No data is transmitted to these platforms when you visit our website. Data is only transferred once you actively click on a social media icon. From that point onward, the privacy policies of the respective platform apply.<\/p>\n<hr data-start=\"5314\" data-end=\"5317\" \/>\n<h3 data-start=\"5319\" data-end=\"5361\">X. Social Media Presence and Promotions<\/h3>\n<p data-start=\"5363\" data-end=\"5499\">We operate social media profiles and may conduct <strong data-start=\"5412\" data-end=\"5462\">marketing campaigns and promotional activities<\/strong>, such as special offers or contests.<\/p>\n<p data-start=\"5501\" data-end=\"5672\">Where social media platforms provide statistical evaluation tools (\u201cInsights\u201d), we act as joint controllers with the platform operators within the meaning of Art. 26 GDPR.<\/p>\n<p data-start=\"5674\" data-end=\"5841\">Participation in promotions is voluntary. The scope, purpose, and duration of data processing are communicated transparently in the context of the respective campaign.<\/p>\n<p data-start=\"5843\" data-end=\"5942\"><strong data-start=\"5843\" data-end=\"5859\">Legal basis:<\/strong><br data-start=\"5859\" data-end=\"5862\" \/>Art. 6(1)(a) GDPR (consent)<br data-start=\"5889\" data-end=\"5892\" \/>Art. 6(1)(f) GDPR (public relations and marketing)<\/p>\n<hr data-start=\"5944\" data-end=\"5947\" \/>\n<h3 data-start=\"5949\" data-end=\"5963\">XI. YouTube<\/h3>\n<p data-start=\"5965\" data-end=\"6011\">Our website may embed videos from <strong data-start=\"5999\" data-end=\"6010\">YouTube<\/strong>.<\/p>\n<p data-start=\"6013\" data-end=\"6108\">Provider:<br data-start=\"6022\" data-end=\"6025\" \/><strong data-start=\"6025\" data-end=\"6040\">YouTube LLC<\/strong>, 901 Cherry Ave., San Bruno, CA, USA<br data-start=\"6077\" data-end=\"6080\" \/>(a subsidiary of Google LLC)<\/p>\n<p data-start=\"6110\" data-end=\"6235\">Videos are embedded using YouTube\u2019s <strong data-start=\"6146\" data-end=\"6171\">enhanced privacy mode<\/strong>. Data is only transmitted to YouTube once a video is activated.<\/p>\n<p data-start=\"6237\" data-end=\"6289\"><strong data-start=\"6237\" data-end=\"6253\">Legal basis:<\/strong><br data-start=\"6253\" data-end=\"6256\" \/>Art. 6(1)(a) GDPR<br data-start=\"6273\" data-end=\"6276\" \/>\u00a7 25(1) TTDSG<\/p>\n<hr data-start=\"6291\" data-end=\"6294\" \/>\n<h3 data-start=\"6296\" data-end=\"6309\">XII. Vimeo<\/h3>\n<p data-start=\"6311\" data-end=\"6355\">Our website may embed videos from <strong data-start=\"6345\" data-end=\"6354\">Vimeo<\/strong>.<\/p>\n<p data-start=\"6357\" data-end=\"6424\">Provider:<br data-start=\"6366\" data-end=\"6369\" \/><strong data-start=\"6369\" data-end=\"6383\">Vimeo Inc.<\/strong>, 555 West 18th Street, New York, NY, USA<\/p>\n<p data-start=\"6426\" data-end=\"6492\">When a video is played, personal data may be transmitted to Vimeo.<\/p>\n<p data-start=\"6494\" data-end=\"6546\"><strong data-start=\"6494\" data-end=\"6510\">Legal basis:<\/strong><br data-start=\"6510\" data-end=\"6513\" \/>Art. 6(1)(a) GDPR<br data-start=\"6530\" data-end=\"6533\" \/>\u00a7 25(1) TTDSG<\/p>\n<hr data-start=\"6548\" data-end=\"6551\" \/>\n<h3 data-start=\"6553\" data-end=\"6576\">XIII. Data Retention<\/h3>\n<p data-start=\"6578\" data-end=\"6716\">Personal data is stored only for as long as necessary to fulfill the respective purpose or as required by statutory retention obligations.<\/p>\n<hr data-start=\"6718\" data-end=\"6721\" \/>\n<h3 data-start=\"6723\" data-end=\"6744\">XIV. Data Security<\/h3>\n<p data-start=\"6746\" data-end=\"6881\">We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or manipulation.<\/p>\n<hr data-start=\"6883\" data-end=\"6886\" \/>\n<h3 data-start=\"6888\" data-end=\"6925\">XV. Changes to This Privacy Policy<\/h3>\n<p data-start=\"6927\" data-end=\"7045\">We reserve the right to update this Privacy Policy to reflect changes in legal requirements or technical developments.<\/p>\n<hr data-start=\"6883\" data-end=\"6886\" \/>\n<h3 data-start=\"6888\" data-end=\"6925\">XVI. Social Media Competitions<\/h3>\n<p data-start=\"6927\" data-end=\"7045\">&#8220;The personal data collected as part of the competition (e.g., Instagram username, contact via direct message if applicable) will be used exclusively for the purpose of conducting the competition and will then be deleted.&#8221;<\/p>\n<p>Additionally, we could consider together including Instagram and competitions in general in the privacy policy on our website. This way, we could simply refer to the website in the future.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I. General Information The protection of your personal data is of particular importance to us. Personal data (hereinafter referred to as \u201cdata\u201d) means any information relating to an identified or identifiable natural person. We process personal data exclusively in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR), the German [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"legal.php","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"class_list":["post-788","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/gambinohotels.com\/en\/wp-json\/wp\/v2\/pages\/788","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/gambinohotels.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/gambinohotels.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/gambinohotels.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/gambinohotels.com\/en\/wp-json\/wp\/v2\/comments?post=788"}],"version-history":[{"count":2,"href":"https:\/\/gambinohotels.com\/en\/wp-json\/wp\/v2\/pages\/788\/revisions"}],"predecessor-version":[{"id":842,"href":"https:\/\/gambinohotels.com\/en\/wp-json\/wp\/v2\/pages\/788\/revisions\/842"}],"wp:attachment":[{"href":"https:\/\/gambinohotels.com\/en\/wp-json\/wp\/v2\/media?parent=788"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}