Privacy Policy

Stand Sept 2026

The protection of your privacy is very important to us. We appreciate your confidence in using our services. For this reason we protect and keep safe the personal information you provide us.

In this document, we explain clearly how we use and process your personal information. If you have any questions about your personal data, you can always contact us at any time via datenschutz@michelbergerhotel.org.

Name and address of the controller

Responsible for the General Data Protection Regulation and any other data protection law within the Member States of the European Union is:

Monaco & Freunde GmbH & Co. KG
Tom Michelberger
Warschauer Straße 39/40
10243 Berlin
Telefon: +49 302977859-0

Data protection contact

If you have any questions about your personal data, you can contact us at any time: datenschutz@michelbergerhotel.org

Your rights under the GDPR

Right to information: You may request confirmation in accordance with Article 15 of the GDPR if your data will be processed. If this is the case, you have a right to information about the processed information.

Right to revoke consent: If the processing of your personal data takes place on the basis of your consent, you have the right to revoke this consent at any time in accordance with Article 7 of the GDPR.

Right to objection: If the processing of your personal data is necessary to safeguard the legitimate interests of our company, you can object to the processing at any time in accordance with Article 21 of the GDPR.

Right to cancellation: If you have revoked your consent, objected to the processing of your personal data (and there are no legitimate reasons for processing), your personal data is no longer necessary for the purposes of processing, there is a corresponding legal obligation or your personal data has been processed unlawfully, you have the right to demand the deletion of your personal data in accordance with Article 17 of the GDPR.

Right to rectification: If your personal data has been processed incorrectly, you have the right, under Article 16 of the GDPR, to demand the correction of this data without delay.

Right to restriction of processing: Under the conditions of Article 18 of the GDPR, you have the right to demand the restriction of the processing of your personal data.

Right to data portability: In accordance with Article 20 of the GDPR, you are entitled to receive a copy of personal data provided by you in a structured, common and machine-readable format.

Right to complain: According to Article 77 of the GDPR, you have the right of appeal to the competent supervisory authority.

Use of your data

Collection and processing of personal data

In order to process a booking, we must ask for your name, your email address, your residential address, and your credit card number together with the expiration date. If you send us your data in an e-mail or subscribe to the newsletter, it is stored by us. In addition, we use your e-mail address only for the purpose of direct advertising for similar offers, unless you have already objected to it previously. You may object to this email advertising at any time. For this you use the "Unsubscribe" button in the newsletter or send an e-mail to datenschutz@michelbergerhotel.org. Otherwise, your personal data will be processed and used exclusively in accordance with German data protection law, except as described in this privacy policy. This also applies to e-mail and telephone inquiries.

Use and disclosure of personal information

Monaco & Freunde GmbH & Co. KG uses your personal data exclusively for technical administration of the website and for communicating with you. Your personal data will only be passed on to third parties as described in this privacy policy. Employees of Monaco & Freunde GmbH & Co. KG are required to maintain strict confidentiality.

Duration of storage of personal data, or the criteria for determining the duration

Personal data which is processed by us as part of a general contact request by e-mail or contact form, is stored only as long as necessary for the respective correspondence.

Personal data requested for a room booking with us, is stored only as long as this is necessary for the contract and any subsequent contract-related correspondence, or in case of commercial and/or tax-relevant documents containing personal data, as long as the legal terms of Commercial and Tax regulation code requires as preservation of these documents.

Cookies and consent management

We use cookies for optimising our website and your online experience. Strictly necessary cookies are required for the operation of the website and are set without consent. Session cookies are deleted after the end of the session.

Analytics and marketing cookies are only loaded on the basis of your consent. On your first visit, we show you a cookie banner in which you can accept or reject individual categories. You can adjust or withdraw your consent at any time via "Cookie Consent" in the footer of any page.

Newsletter data

If you would like to receive our newsletter, we need an e-mail address from you and information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Further data is not collected. We use this data exclusively for the delivery of the requested information and do not pass it on to third parties.

We use Mailchimp, a service of Intuit Inc. (USA), to send our newsletter. Your e-mail address is transmitted to Mailchimp. The transfer of data to the USA is based on the EU-US Data Privacy Framework (European Commission adequacy decision, July 2023).

You can update or revoke your consent at any time. For this you use the "Unsubscribe" button in the newsletter or send an e-mail to datenschutz@michelbergerhotel.org.

More information about privacy at Mailchimp can be found at: https://mailchimp.com/legal/privacy/

Video surveillance

Our house is video-monitored. This is in place for documentation and prevention of criminal acts (such as theft, vandalism, sabotage). Monitored areas are the tunnel, entrance to our parking area and public areas of the hotel. The legal basis is a legitimate interest pursuant to Art. 6(1)(f) GDPR by Monaco & Freunde GmbH & Co. KG. The stored data is automatically overwritten after 72 hours.

Online photographs

Sometimes we take photographs during our own internal events. These photographs might be used on our social media channels. You can request the removal of an image at any time by writing to datenschutz@michelbergerhotel.org.

Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses so-called "cookies". These are text files that are stored on your computer and allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server and stored there. The transfer of data to the USA is based on the EU-US Data Privacy Framework (European Commission adequacy decision, July 2023).

We use Google Analytics exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR ("Analytics" category in the cookie banner). Google Analytics is not loaded without consent. You can withdraw your consent at any time via "Cookie Consent" in the footer.

We have entered into a data processing agreement with Google and fully implement the requirements of the German data protection authorities when using Google Analytics.

Demographics in Google Analytics

This website uses the "demographics" feature of Google Analytics. As a result, reports can be produced that contain statements on the age, gender and interests of the site visitors. This data comes from interest-based advertising from Google and third-party visitor data. This data cannot be assigned to a specific person. You can disable this feature at any time through the ad settings in your Google Account.

For more information on how Google Analytics handles user data, please see the Google Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=en

Meta Pixel and Meta Conversions API

We use technologies provided by Meta Platforms Ireland Ltd. to measure how effective our advertising on Facebook and Instagram is. The Meta pixel is only loaded once you have accepted the "Marketing" category in our cookie banner. Without that consent, no contact with Meta takes place at all.

In addition to the Meta pixel running in your browser, we send one event directly from our server to Meta after a booking is completed (the Conversions API). What is sent: an irreversible cryptographic hash of your email address, the cookie identifiers Meta itself set in your browser, your IP address, your browser identifier, the booking value, the booking reference and the URL of the booking page. Your email address itself is not sent. Your name, phone number, address and payment details are not sent.

The sole purpose is to match a booking to an advertisement you clicked earlier. We do not store this data for that purpose; it is transmitted once, immediately after the booking.

The legal basis is your consent under Art. 6(1)(a) GDPR, given through the "Marketing" category in our cookie banner. Without that consent neither the browser measurement nor the server-side transfer takes place.

You can withdraw your consent at any time with future effect by clicking "Cookie Consent" in the footer of any page. On withdrawal we delete the cookies set by Meta.

Google Ads conversion tracking

We use Google Ads to measure which of our advertisements lead to a booking. The booking value, the booking reference and a click identifier assigned by Google are transmitted to Google Ireland Ltd. This also happens only on the basis of your consent to the "Marketing" category and can be withdrawn at any time via "Cookie Consent" in the footer. On withdrawal we delete the cookies set by Google Ads.

Booking engine

If you reserve a room through our website, you will use the Aven Hospitality booking engine (3150 Sabre Drive, Southlake, Texas 76092, USA), operated on our behalf by Navarino Services Ltd. (Navarino House, Network Point, Range Road, Witney, Oxfordshire, OX29 0YN, United Kingdom). The transfer of data to the USA is based on the EU-US Data Privacy Framework. The transfer of data to the United Kingdom is based on the European Commission's adequacy decision for the United Kingdom.

Here is their privacy policy: https://www.navarinoservices.com/privacy-policy/

Property management system

All our rooms, event rooms and reservations are managed with Planet (We Are Planet AG, Zugerstrasse 76, 6340 Baar, Switzerland). The transfer of data to Switzerland is based on the European Commission's adequacy decision for Switzerland.

Here is their privacy policy: https://www.weareplanet.com/legal/privacy-policy

Email handling via Zendesk

Email requests are processed by Zendesk (Zendesk, Inc., 989 Market Street, San Francisco, CA 94103, USA). The transfer of data to the USA is based on the EU-US Data Privacy Framework.

Here you can reach their privacy policy: https://www.zendesk.com/company/customers-partners/eu-data-protection/

Restaurant reservations via OpenTable

If you use our website to make a reservation for the Michelberger Restaurant, you will use the booking engine of OpenTable (425 Market Street, Suite 1200, San Francisco, CA 94105). The transfer of data to the USA is based on the EU-US Data Privacy Framework.

Here you can reach their privacy policy: https://www.opentable.com/legal/privacy-policy

Job applications

The controller collects and processes personal data of applicants for the purpose of processing the application process. The processing can also be done electronically. This is particularly the case if an applicant submits corresponding application documents to the controller by electronic means, for example by e-mail or via a web form available on the website. If the controller concludes a contract of employment with an applicant, the data transmitted will be stored for the purposes of the employment relationship in accordance with the law. If no employment contract is concluded with the candidate by the controller, the application documents will be automatically deleted three months after rejection notification, unless deletion precludes other legitimate interests of the controller. Other legitimate interest in this sense, for example, can be proof in a procedure under the General Equal Treatment Act (AGG).

We use the applicant management tool Personio. The link to the privacy policy can be found in the respective job posts.

Protection of minors

Persons under the age of 16 may not submit any personal data without the consent of their legal guardians. Personal information may only be provided to persons under the age of 16 if it has the express consent of the legal guardian. This data is processed according to this privacy policy.

Update of this Privacy Policy

If necessary, we can make changes to this privacy policy. Information on when this privacy policy was last revised can be found at the top of this page under "Stand". Any changes will take effect with the publication of the revised Privacy Policy via the Online Services. By continuing to use the Services after these changes, you agree to the updated Privacy Policy.