Datenschutz

The entire website access/data transfer between your browser and our systems is encrypted. We use Secure Socket Layers (SSL) encryption technology. SSL technology protects and encrypts your data. It enables an extraordinarily high level of security for data transmissions.

We only collect, process and use personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR), the Telemedia Act (TMG), the Federal Data Protection Act (BDSG) and the Act against Unfair Competition (UWG).

Collection of data

The following categories show the processes and procedures in which data can be collected:

Contacting us

• Using the contact form on our website
• By email
• By telephone
• By post
• By Facebook
• Personal contact on site/at trade fairs

Subscriptions

• E-mail newsletter

Brokerage & consulting services

• Booking and quotation requests
• Information requests and additional services (e.g. rental of e-bikes)
• Transmission of information for payment processing
• Reservation orders

When you contact us, you may be asked to provide personal data (e.g. name, postal address, telephone number, e-mail address, date of birth, etc.) that will be used to process your reservation request. In some cases, payment-related information (credit card number, bank details, etc.) will also be requested if this is necessary to process your request.

In common practice, the data for reservations with multiple travel participants is only transmitted by one traveler. We assume that the traveler transmits the data of all travel participants to us with their consent and sends the data protection information to all affected fellow travelers.

We assure you that all personal and payment-related data will be treated with the utmost confidentiality.

We undertake to use the personal data collected, processed and stored when using the services offered only for our own purposes and for the purposes of processing contracts concluded with the relevant travel providers with our involvement.

By our own purposes we mean, on the one hand, support purposes (e.g. information on the course of a stay, reservation changes, information about the service used, etc.) and, on the other hand, information purposes (e.g. sending e-mail customer newsletters, discount campaigns for existing customers, etc.).

Your data will not be passed on to third parties. Excluded are the tour operators and partner companies related to your stay that are necessary to support our business processes. In these cases, however, the scope of the data transmitted is limited to the minimum required.

As a service-oriented tourism service provider, the high quality of our offers and the smooth and rapid processing of your requests are important to us. We are characterized by a very high level of customer satisfaction, which is also reflected in a high repeat and regular customer rate.

In order to meet the interests of a (regular) customer in the event of a renewed reservation request and to be able to offer fast, uncomplicated and recurring services, we store your personal data for an indefinite period of time, but at the latest until you object, revoke or request deletion. We adhere to the minimum data required by law.

We would like to point out that your reservation requests can only be processed correctly with the necessary personal data. If we do not have this data, we reserve the right to withdraw from our offer or the contract.

In accordance with the GDPR, we would like to inform you at this point about your rights regarding your personal data.

1. Right to information: You can request confirmation from us as to whether personal data concerning you is being processed by us. If such processing takes place, you can request various information from us, such as the purposes of the processing, the planned duration of storage, the existence of a right of appeal, etc.
2. Right to rectification: You have the right to have your data rectified and/or completed if the personal data concerning you that are processed are incorrect or incomplete. We must carry out the rectification immediately.
3. Right to restriction of processing: Under various circumstances, you can request that the processing of data concerning you be restricted. This includes, for example, if there are doubts about the accuracy, the processing is unlawful or we no longer need the data. We must inform you as soon as the restriction is lifted.
4. Right to erasure: On the basis of certain reasons, you can request that your data be erased. Reasons may be, for example, that the data is no longer necessary for the purposes for which it was collected, you have withdrawn your consent, you have lodged an objection, we have processed your data unlawfully, etc.
5. Right to data portability: You have the right to have us provide you with your data in a structured, common and machine-readable format and to transfer it to third parties at your request.
6. Right of objection: You have the right to object at any time to the processing of personal data concerning you based on Art. 6 (1) (e) or (f) GDPR for reasons arising from your particular situation; this also applies to profiling based on these provisions.
7. Right to lodge a complaint with a supervisory authority: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

Users who no longer wish to receive our newsletter can object to the use of their data for advertising purposes at any time via a link at the bottom of the newsletter. An informal email to This email address is being protected from spambots. You need JavaScript enabled to view it. with the relevant content is also sufficient.

To send the newsletter, we use the MailChimp software from the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.

The email addresses of our newsletter recipients, as well as their other data described in this notice, are stored on MailChimp's servers in the USA. MailChimp uses this information to send and evaluate the newsletter on our behalf. Furthermore, according to its own information, MailChimp can use this data to optimize or improve its own services, e.g. for the technical optimization of the sending and presentation of the newsletter. MailChimp does not use the data of our newsletter recipients to write to them or to pass it on to third parties.

We are convinced of the reliability and IT and data security of MailChimp. MailChimp is certified under the US-EU data protection agreement "Privacy Shield" and is therefore committed to complying with EU data protection regulations. We have also concluded a "Data Processing Agreement" with MailChimp. This is a contract in which MailChimp undertakes to protect the data of our users, to comply with the relevant data protection regulations and, in particular, not to pass on data to third parties.

We have taken the necessary technical and organizational measures to protect the personal data you provide from loss, destruction, manipulation and unauthorized access. All of our employees and all persons involved in data processing are obliged to maintain secrecy and to handle personal data confidentially.

Our website uses cookies to improve the user experience. Cookies are small text files that are placed and saved on your computer system via an Internet browser.

Numerous Internet sites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier for the cookie. It consists of a character string that allows Internet sites and servers to be assigned to the specific Internet browser in which the cookie was saved. By using cookies, we can provide you with more user-friendly services that would not be possible without the cookie setting.

The data subject can prevent the setting of cookies by our website using the settings offered on the website or by means of a corresponding setting in the Internet browser used, and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time using an Internet browser or other software programs. This is possible in all common Internet browsers. If the person concerned deactivates the setting of cookies in the Internet browser used, not all functions of our website may be fully usable.

We would like to point out that full use of all our offers is not possible without cookies. Cookies are required for a successful reservation via the HRS website. In particular, checking the booking data and assigning Mühlenthal reservations would otherwise not be possible.

Our websites use so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. If your browser does not support web fonts, a standard font from your computer will be used.

For more information about Google Web Fonts, see https://developers.google.com/fonts/faq and Google's privacy policy: https://www.google.com/policies/privacy/

Our websites use functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

Google Analytics uses so-called "cookies". These are text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

You can find more information about how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de

Browser Plugin

You can prevent cookies from being saved by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link:

 https://tools.google.com/dlpage/gaoptout?hl=de

Objection to data collection

You can prevent Google Analytics from collecting your data for individual websites by clicking on one of the following links. There you have the option of setting a so-called opt-out cookie, which prevents the collection of your data during future visits to the respective website.

Deactivate Google Analytics on www.muehlenthal.de.

IP anonymization

We use the "Activate IP anonymization" function on our websites. This means that your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our websites. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). reCAPTCHA is intended to check whether the data entered on our websites (e.g. in a contact form) is carried out by a person or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For analysis, reCAPTCHA evaluates various information (e.g. IP address, length of time the website visitor stays on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google. The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place.

For more information about Google reCAPTCHA and Google's privacy policy, please see the following link: https://www.google.com/intl/de/policies/privacy/.

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide the data has no consequences. This only applies if no other information is provided in the subsequent processing operations.

"Personal data" is all information that relates to an identified or identifiable natural person.

Person responsible

Contact us if you wish. The person responsible for data processing is: Michael Haas, Bachtalstraße 214, 66773 Schwalbach, Germany, 06834/95590, This email address is being protected from spambots. You need JavaScript enabled to view it.

Use of social media presences

We have online presences in the social networks and platforms listed below. These presences serve to communicate directly with customers, interested parties and users. Furthermore, the appearances serve the purpose of advertising our products and services.

When you visit our social media presences, your data can be automatically recorded and stored for the purposes of advertising and market research. Usage profiles are created from this data using pseudonyms. These can be used, for example, to show you interest-based advertising within and outside the platforms. For this purpose, cookies are regularly used that enable the recognition of an Internet browser and in which your interests and usage behavior are stored.

The processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR due to the legitimate interest in direct communication with users and the optimization of the design of our online presence. If you have given your consent to the operators of the respective social media platforms to process your data, e.g. by checking a checkbox, the processing is carried out on the basis of Art. 6 Para. 1 lit. a GDPR. You can revoke your consent to the operator of the respective platform at any time without affecting the legality of the processing carried out on the basis of the consent until the revocation.

The assertion of data subject rights and requests for information can most effectively be directed directly to the providers of the platforms, as only they have access to your data, can take immediate action and provide information. Of course, we will support you if necessary. Further information on the terms of use and data protection of the respective platform as well as a detailed description of further data processing and the respective options for objection can be found on the provider's website at: Instagram of Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland): http://instagram.com/legal/privacy/ Your data may be transferred to the USA. For the USA, there is an adequacy decision from the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself according to the TADPF and is therefore committed to complying with European data protection principles.

Rights of the data subject

If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: Right to information, to rectification, to erasure, to restriction of processing, to data portability. In addition, according to Art. 21 Para. 1 GDPR, you have the right to object to processing based on Art. 6 Para. 1 f GDPR and to processing for the purposes of direct advertising.

Right to complain to the supervisory authority

According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you believe that the processing of your personal data is not lawful.

You can lodge a complaint with the supervisory authority responsible for us, which you can reach using the following contact details:

Independent Data Protection Center Saarland Fritz-Dobisch-Str. 12

66111 Saarbrücken

Tel.: +49 681 947810

Fax: +49 681 9478129

E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.

Some of our websites may use social plugins (“plugins”) from the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). These plugins are marked with a Facebook logo or the addition “Facebook Social Plugin”. A complete overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=de_DE.

When you visit a web page on our website that contains such a plug-in, your browser establishes a direct connection to the Facebook servers. The content of the plug-in is transmitted directly from Facebook to your browser, which then integrates it into the website. By integrating the plug-in, Facebook receives the information that you have accessed the corresponding page on our website. If you are logged in to Facebook, Facebook can assign the visit to your Facebook account. When you interact with the plug-ins, for example by clicking the "Like" button or leaving a comment, the corresponding information is transmitted directly from your browser to Facebook and stored there. The purpose and scope of data collection and the further processing and use of the data by Facebook as well as your related rights and setting options to protect your privacy can be found in Facebook's privacy policy. To ensure that Facebook does not collect any data about you via our website, you must log out of Facebook before visiting our website.

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This only applies if no other information is provided in the subsequent processing operations.

"Personal data" is all information that relates to an identified or identifiable natural person.

Responsible party

Contact us if you wish. The person responsible for data processing is: Michael Haas, Bachtalstraße 214, 66773 Schwalbach, Germany, 06834/95590, This email address is being protected from spambots. You need JavaScript enabled to view it.

Use of social media presences

We have online presences in the social networks and platforms listed below. These presences serve to communicate directly with customers, interested parties and users. Furthermore, the appearances serve the purpose of advertising our products and services.

When you visit our social media presences, your data can be automatically recorded and stored for the purposes of advertising and market research. Usage profiles are created from this data using pseudonyms. These can be used, for example, to show you interest-based advertising within and outside the platforms. For this purpose, cookies are regularly used that enable the recognition of an Internet browser and in which your interests and usage behavior are stored.

The processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR due to the legitimate interest in direct communication with users and the optimization of the design of our online presence. If you have given your consent to the operators of the respective social media platforms to process your data, e.g. by checking a checkbox, the processing is carried out on the basis of Art. 6 Para. 1 lit. a GDPR. You can revoke your consent to the operator of the respective platform at any time without affecting the legality of the processing carried out on the basis of the consent until the revocation.

The assertion of data subject rights and requests for information can most effectively be directed directly to the platform providers, as only they have access to your data, can take immediate action and provide information. Of course, we will support you if required. Further information on the terms of use and data protection of the respective platform as well as a detailed description of further data processing and the respective objection options can be found on the providers' websites. Your data may be transferred to the USA. For the USA, there is an adequacy decision from the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself according to the TADPF and is therefore committed to complying with European data protection principles.

Rights of the data subject

If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: Right to information, right to rectification, right to erasure, right to restriction of processing, right to data portability. In addition, according to Art. 21 Para. 1 GDPR, you have the right to object to processing based on Art. 6 Para. 1 f GDPR, as well as to processing for the purpose of direct advertising.

Right to complain to the supervisory authority

According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you believe that the processing of your personal data is not lawful.

You can lodge a complaint with the supervisory authority responsible for us, among others, which you can reach using the following contact details:

Independent Data Protection Center Saarland Fritz-Dobisch-Str. 12

66111 Saarbrücken

Tel.: +49 681 947810

Fax: +49 681 9478129

Email: This email address is being protected from spambots. You need JavaScript enabled to view it.