Data privacy

This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, which are text files placed on your computer to help the website analyse how visitors use the site. The information generated by the cookie about your use of the website (including your IP address) are generally transmitted to and stored by Google on servers in the United States. In the case of activating IP anonymization, Google will abbreviate your IP address for Member States of the European Union as well as for other parties to the Agreement on the European Economic Area beforehand. Only in exceptional cases is the full IP address sent to and abbreviated by Google servers in the USA. Google will use this information on behalf of the website operator for the purpose of evaluating your use of the website, compiling reports on website activity for website providers and providing other services relating to website activity and Internet usage to the website provider. Google will not associate the IP address sent by Google Analytics with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do so, you may not be able to use the full functionality of this website. Furthermore you can prevent Google’s collection and use of data (incl. your IP address) by downloading and installing the browser plug-in available under the following link (



The Internet pages partly use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are so-called quot "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies enable us to recognize your browser on your next visit. You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you disable cookies, the functionality of this website may be limited.


The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request

These data cannot be assigned to specific persons. This data will not be merged with other data sources. We reserve the right to subsequently check this data if we become aware of concrete indications of illegal use.

contact form

If you send us enquiries via the contact form, your details from the enquiry form including the contact data you provided there will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass on this data without your consent. SSL ENCRYPTION

For security reasons and to protect the transmission of confidential content, this site uses
for example, the requests you send to us as the site operator, an SSL encryption. A
encrypted connection can be recognized by the fact that the address line of the browser changes from "http://"; to
"https://"; and the lock symbol in your browser line. If the SSL encryption is activated, the data that you transmit to us cannot be read by
read by third parties.

SSL Encryption

For security reasons and to protect the transmission of confidential content, this site uses
for example, the requests you send to us as the site operator, an SSL encryption. A
encrypted connection can be recognized by the fact that the address line of the browser changes from "http://" to
"https://" and the lock symbol in your browser line. If the SSL encryption is activated, the data that you transmit to us cannot be read by
read by third parties.

Online booking tool

Use of the online booking tool of OBS OnlineBuchungService GmbH

Our online presence uses the online booking tool (hereinafter referred to as "OBT") of the company OBS OnlineBuchungService GmbH, Im Gewerbepark D 33, 93059 Regensburg (www. online-buchung-service. de, hereinafter referred to as "OBS") to enable the online booking of accommodation services and other travel services, as well as to process enquiries. Within the OBT, the OBS processes the data as the controller. The information and regulations regarding data protection can be found in the OBT's data protection declaration, which can be accessed at any time from the OBT or can be viewed at online-buchung-service. de/datenschutzerklaerung-buchung/

Comment function (guest book)

For the comment function on this page, in addition to your comment, information on the time of the creation of the comment, your e-mail address and, if you are not anonymous, the user name you have chosen are stored.

Privacy policy google maps

This website uses the product Google Maps by Google Inc. By using this website you agree to the collection, processing and use of automatically collected data by Google Inc. The terms of use of Google Maps can be found under "Terms of use of Google Maps".

Privacy policy for the use of google analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses so-called "cookies". These are text files which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. You can find more information on how Google Analytics handles user data in the Google privacy policy: support. google. com/analytics/answer/6004245?hl=de

Browser plugin

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You may also request the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: tools. google. com/dlpage/gaoptout

Opposition to data collection

You can prevent Google Analytics from collecting your data by clicking on the following link An opt-out cookie is set to prevent the collection of your information on future visits to this site: Disable Google Analytics

Contract data processing

We have concluded a contract with Google for commissioned data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Privacy policy for the use of google+

Our pages use functions of Google+. The provider is Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Collection and dissemination of information: You can use the Google+ button to publish information worldwide. The Google+ button provides you and other users with personalized content from Google and our partners. Google stores both the information that you gave for a +1 content and information about the page you viewed when you clicked on +1. Your +1 can be displayed as clues along with your profile name and photo in Google services, such as search results or your Google Profile, or elsewhere on websites and ads on the Internet. Google records information about your +1 activity to improve Google services for you and others. In order to use the Google+ button, you need a public Google profile that is visible worldwide and must contain at least the name chosen for the profile. This name is used in all Google services. In some cases, this name may also replace another name you've used when sharing content through your Google Account. The identity of your Google Profile may be revealed to users who know your email address or have other identifying information about you. Use of the information collected: In addition to the purposes explained above, the information you provide will be used in accordance with the applicable Google Privacy Policy. Google may publish aggregated statistics about the +1 activity of users or the number of times a user has been passes these on to users and partners, such as publishers, advertisers or associated websites.

Privacy policy for the use of Facebook plugins (like-button)

Our pages integrate plugins from the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA. You can recognize the Facebook plugins by the Facebook logo or the "Like-Button" ("Like") on our page. An overview of the Facebook plugins can be found here: developers. facebook. com/docs/plugins/; When you visit our pages, the plugin establishes a direct connection between your browser and the Facebook server. Facebook thereby receives the information that you have visited our site with your IP address. If you click the Facebook "Like-Button"; while you are logged in to your Facebook account, you can link the contents of our pages on your Facebook profile. This enables Facebook to assign visits to our pages to your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Facebook. You can find further information on this in the privacy policy of facebook at de-de. facebook. com/policy. php

If you do not want Facebook to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account

Information, deletion, blocking

You have the right to receive information free of charge at any time about your stored personal data, its origin and recipients and the purpose of data processing, as well as the right to correct, block or delete this data. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time at the address given in the imprint.

Source reference: https://www. e-recht24. de/muster-datenschutzerklaerung. html

Note on the protection of your personal data - Duty to inform according to Art. 13 DS-GVO

The entry into force of the European Data Protection Regulation (DS-GVO) gives us the opportunity to inform you about our handling of your data and your rights. For this purpose we have compiled the following information for you:

- Person responsible for data processing

Hotel Bad Stebener Hof e. K.
Badstr. 10, 95138 Bad Steben
tel. . : 09288-9579260, mail: BadStebenerHof@lueberg. com

- Purposes and legal bases of data processing

We process your personal data in compliance with the EU Data Protection Basic Regulation (DS-GVO), the Federal Data Protection Act (BDSG-neu), as well as other relevant laws in connection with Art. SIX DS-GVO. Your data will be processed for different purposes and, depending on the business relationship, may include various data

Guest data: the data will only be stored to the extent that this is done on your request and in accordance with Art. 6 Abs. 1 p. 1 lit. b DS-GVO for the above-mentioned purposes for the appropriate processing of the booking or of residence and necessary for the mutual fulfilment of obligations arising from the residence

Interested parties: the data storage is based on the Art. 6 Abs. 1 p. 1lit. a DS-GVO and serves to contact the interested party. The data is information that has been transmitted for this purpose, e. g. B. E-mail - Contact

Applicants: in the course of the application process, data that you have provided for this purpose will be transmitted by you and processed by us for further use. This process takes place regardless of the form of application (written, electronic, online upload, etc. ) and is based on the Art. 6 Abs. 1 p. 1 lit. a DS-GVO

External service providers: the data storage is based on an assignment between the contractor and the client. The data is only that which is necessary to fulfil the order, in accordance with Art. 6 Abs. 1 p. 1 lit. b DS-GVO

Likewise, the processing of personal data may serve to fulfil legal obligations, e. g. B. Commercial and tax law retention obligations, Art. 6 Paragraph 1 lit. c DS-GVO

- Receiver or Categories of recipients of the personal data

Receiver or Categories of recipients of personal data may vary and be of varying degrees depending on the business relationship. Internal recipients: Departments of the company involved in processing activities related to the fulfilment of the obligations arising from the contractual relationship and other tasks. In order to safeguard the legitimate interests of the company, the departments receive the relevant data

External service providers: Based on a contractual relationship, the application process or an existing interest in the company, selected data is passed on to external service providers. These service providers are contractual partners who have been obliged to maintain confidentiality and the security of your data. Such service providers are, for example, IT service providers, legal and tax advice, craft enterprises, banks, credit agencies, etc. You can find out which service providers are involved in each individual case by means of your right to information

Other authorities: due to legal obligations, individual data must be passed on to authorities, e. g. B. Tax office, IHK/HWK, courts, etc. - Duration of data storage

The storage of data and the associated deletion periods depend on the business relationship and the type of data. A large amount of personal data is subject to legal storage obligations as well as other legal guidelines and can only be deleted after the end of the periods. Other data cannot be deleted, but can only be deactivated by blocking it, e. g. B. DATEV DMS. In general, data on guests, business partners and service providers is stored in accordance with the archiving obligation, e. g. B. in accordance with commercial and tax law, kept and only deleted after expiry of the corresponding period (§ 257 HGB, § 147 i. V. m. §§ 140. 141 AO). Personal data on applications will be stored for 6 months (§ 61 Abs. 1 ArbGG i. V. m. § 15 AGG). You can object to the storage of your data at any time and apply for early deletion, provided that no legal regulation contradicts this request. - Rights of data subjects

In the course of the European Data Protection Basic Regulation, the following data subject rights apply, §32 ff. BDSG-fresh:

- Right to information

You can request information about your personal data stored at the above address. The right to information also includes details of to whom the data was passed on and for what purpose (§34 BDSG-neu)

- Right of rectification, blocking and erasure

In addition, under certain circumstances, you can request the correction or deletion of your data. If, however, storage obligations exist, according to commercial or tax law regulations, the blocking of the data takes the place of deletion (§35 BDSG-neu)

- Right of revocation and objection

You have the right to object to the processing of your personal data for direct marketing purposes

- Right of appeal

According to Art. 77 DS-GVO, you have the opportunity to lodge a complaint with a data protection supervisory authority. The data protection supervisory authority responsible for our hotel is
Bavarian State Office for Data Protection Supervision
PO box 606
91511 Ansbach

- Transfer of data to a third country

Personal data will not be transferred to service providers outside the European Economic Area (EEA). - Automated decision making

Automated decision making (including profiling) is not used.