Privacy

Data controller

The data controller within the meaning of data protection legislation, in particular the Church Act on Data Protection of the Evangelical Church in Germany (DSG-EKD) and the European General Data Protection Regulation (GDPR), is:

Implus Dresden gGmbH
Holzhofgasse 8
01099 Dresden

Telefon: 0351 810 2611
info@implus-dresden.de

Data protection officer

We have appointed an external data protection officer to deal with any enquiries you may have regarding data protection:

Contact: datenschutz@implus-dresden.de

This privacy notice applies to the processing of data via the online platforms of Implus Dresden gGmbH: https://www.cafe-blanc.de and https://www.hotel-am-schwanenhaus.de

Protection of your data

We take appropriate security measures to safeguard the security of your personal data and to protect you against unauthorised or unlawful processing. For security reasons and to protect the transmission of confidential information, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address bar in your browser changes from ‘http://’ to ‘https://’ and by the padlock icon in your browser’s address bar.

When you visit our website

Every time you visit our website, we automatically collect data and information from your device’s system and store it in what are known as server log files. This data consists of information relating to an identified or identifiable natural person (in this case: website visitors). The data is automatically transmitted by your browser whenever you visit our website.

• IP address

The following details are recorded:

• Date and time of access
  Time zone difference from Greenwich Mean Time (GMT)
• Browser type/version, browser language
• Operating system used and its user interface
• Amount of data transferred, website from which the request originates
• Access status/HTTP status code

We process the data mentioned for the following purposes: The system needs to store the IP address temporarily in order to enable the website to be delivered to the user’s computer. To this end, the user’s IP address must be stored for the duration of the session. The data is stored in log files to ensure the website functions properly. Furthermore, we use the data to optimise the website and to ensure the security of our IT systems. The data is not analysed for marketing purposes in this context.

The recipient of the data is our server host, which acts on our behalf under a data processing agreement.

We use ALL-INKL.COM, Hauptstraße 68, D-02742 Friedersdorf, to host this website.

The legal basis for data processing is § 6 No. 4 DSG-EKD (Article 6 sec. 1 f) GDPR). Our legitimate interest arises from the purposes of data collection listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your identity. The data will be deleted in accordance with the applicable legal provisions or as soon as the purpose for which it was collected has been fulfilled. The maximum retention period for log files is 30 days. You can find ALL-INKL.COM’s privacy policy here: https://all-inkl.com/datenschutzinformationen

Contact form

If you have any enquiries, we offer you the option of contacting us via a form provided on our website. In this context, we process the following data: subject, name, email address. Depending on the nature of your enquiry, we may require more information than the mandatory details listed above. Should you also provide any further personal data in the message field or the optional fields (telephone number, address, order number, branch number), this data will be collected and processed with the same care as your name and email address. This data will be stored and used solely for the purpose of responding to your enquiry or for contacting you and the associated technical administration. If the purpose of contacting you is to conclude a contract, the legal basis for the processing is § 6 No. 5 DSG-EKD (Article 6 sec. 1 b) GDPR). The legal basis for the processing of the data is our legitimate interest in responding to your enquiry in accordance with § 6 No. 4 DSG-EKD (Article 6 sec.1 f) GDPR). Insofar as health data within the meaning of § 4 No. 2 e) DSG-EKD (Article 9 sec. 1 GDPR) is required for this purpose, the legal basis is your consent in accordance with § 13 No. 2 1) DSG-EKD (Article 9 sec. 2 a) GDPR).

Your data will be deleted once your enquiry has been fully processed; this is the case when it is clear from the circumstances that the matter in question has been fully resolved, provided that there are no statutory retention obligations to the contrary.

Ordering vouchers

If you would like to purchase a voucher, we offer you the option of contacting us via a form provided on our website. In this context, we process the following data: name, email address, telephone number. Depending on the nature of your enquiry, we may require more information than the mandatory details listed above. Should you also provide any further personal data in the message field or the optional fields (person placing the order or delivery and billing address), this will be collected and processed with the same care as your name and email address. This data is stored and used solely for the purpose of responding to your enquiry or for issuing vouchers, sending invoices and the associated technical administration. If the purpose of contacting you is to conclude a contract, the legal basis for the processing is § 6 No. 5 DSG-EKD (Article 6 sec. 1 b) GDPR). The legal basis for the processing of the data is our legitimate interest in responding to your enquiry in accordance with § 6 No. 4 DSG-EKD (Article 6 sec.1 f) GDPR). Insofar as health data within the meaning of § 4 No. 2 e) DSG-EKD (Article 9 sec. 1 GDPR) is required for this purpose, the legal basis is your consent in accordance with § 13 No. 2 1) DSG-EKD (Article 9 sec. 2 a) GDPR). Your data will be deleted once your enquiry has been fully processed; this is the case when it is clear from the circumstances that the matter in question has been conclusively resolved and provided that there are no statutory retention obligations to the contrary.

Newsletter

On our website, you can subscribe to a free newsletter. When you sign up for the newsletter, the following data from the input form is transmitted to us:

• User’s email address
• Name (optional)

In addition, the following data is collected during registration:

• IP address of the requesting computer
• Date and time of registration

Your consent to the processing of your data will be sought as part of the registration process, and you will be directed to the privacy policy.

We use the so-called double opt-in procedure to record consent to receive our newsletter and to prevent misuse of your data. This procedure ensures that the recipient actually wishes to receive our newsletter. After signing up, you will receive an email asking you to confirm your subscription to the newsletter. We will only send you our newsletter once you have confirmed your subscription.

Subscriptions to the newsletter are logged so that we can provide evidence of the subscription process in accordance with legal requirements. This includes storing the time of subscription and confirmation, as well as the IP address and any changes to your stored data.

The user’s email address is collected for the purpose of sending the newsletter. Other personal data collected as part of the registration process is used to prevent misuse of the services or of the email address provided.

The legal basis for processing data following a user’s subscription to the newsletter is, where the user has given their consent, § 6 No.2 DSG-EKD (Article 6 sec.1 a) GDPR).

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. The user’s email address, as well as the date and time of registration, will therefore be stored for as long as the newsletter subscription remains active.

The user concerned may cancel their subscription to the newsletter at any time. A link for this purpose is included in every newsletter. This also allows the user to withdraw their consent to the storage of the personal data collected during the registration process.

Operator and contact details

TourOnline AG
Borsigstraße 26
73249 Wernau
E-Mail: info@dirs21.de

Phone: +49 (0) 7153 9250 0
Fax: +49 (0) 7153 9250 40

Hotel reservations are made through the booking platform provider “DIRS21,” which is operated by TourOnline AG.

The necessary data of our contract customers, as well as any additional data described in this notice, is stored on the servers of “DIRS21,” which is operated by TourOnline AG.

"DIRS21" uses this information to book your hotel stay on our behalf. However, "DIRS21" does not use the data from our contractual partners to contact them directly or to share it with third parties.

We rely on the reliability and the IT and data security of “DIRS21,” and are obligated to comply with EU data protection regulations. Furthermore, we have entered into a “Data Processing Agreement” with “DIRS21.”. This is an agreement in which “DIRS21” undertakes to protect our users’ data, to process it on our behalf in accordance with its privacy policy, and, in particular, not to disclose it to third parties. You can find the information and provisions regarding data protection in TOAG’s Privacy Policy for “DIRS21,” which you can view at any time at https://www.dirs21.de/disclaimer/.

When you use the booking form, we collect the following personal data, among other things, through the “DIRS21” booking platform described above:

• First and Last Name
• Company
• Billing Address
• Email Address
• Phone Number
• Check-in Date, Check-out Date
• Other Requests and Information

The legal basis for processing the data is the conclusion of an accommodation contract with the user. The legal basis for transferring the data is § 6 No. 5 DSG-EKD (Article 6 sec. 1 b) GDPR) (processing necessary for the performance of a contract). We store this data in order to be able to substantiate any potential legal claims. For documentation purposes, the personal data listed above, as well as additional data such as IP address, date, time, and information about the communication received, are stored in our hotel software.

Cookies

We use so-called cookies on some parts of our website. Cookies do not harm your computer and do not contain viruses. Cookies help make our website more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called “session cookies.” They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser the next time you visit.

Cookies that are necessary for carrying out the electronic communication process or for providing certain functions you have requested are stored in accordance with § 6 No. 4 DSG-EKD (Article 6 sec. 1 f) GDPR). The website operator has a legitimate interest in storing cookies to ensure the technically flawless and optimized provision of its services. To the extent that other cookies are stored, they are addressed separately in this Privacy Policy.

You can configure cookie settings at any time. For example, you can restrict or completely block cookies in your browser settings. You can also set your browser to automatically delete cookies when you close the browser window. To learn how to delete cookies and change cookie settings in the most common browsers, see the following links, among others:

• Internet Explorer: https://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
• Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
• Chrome: https://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
• Safari: https://support.apple.com/kb/ph21411?locale=de_DE
• Opera: https://help.opera.com/Windows/10.20/de/cookies.html

Cookie consent with ProcessWire

This website uses the cookie consent technology from the open-source project ProcessWire to obtain your consent to store certain cookies on your device and to document this consent in compliance with data protection regulations. This technology is provided by the open-source project ProcessWire: https://processwire.com/

In addition, ProcessWire stores a cookie in your browser to associate the consents you have granted—or their revocation—with your account. The data collected in this manner is stored until you request that we delete it, delete the ProcessWire cookie yourself, or the purpose for storing the data no longer applies. Mandatory legal retention requirements remain unaffected. ProcessWire is used to obtain the legally required consents for the use of cookies.

The legal basis for this is § 6 No. 6 DSG-EKD (Article 6 sec. 1 c) GDPR).

Customer Alliance

This page includes a Customer Alliance widget for displaying reviews.

The provider is the

CA Customer Alliance GmbH
Ullsteinstr. 130 | Turm B
12109 Berlin.

If you wish to submit a review, your IP address, browser information (name, version), website, operating system, screen resolution, and language settings (for either your browser or operating system) will be stored so that you can use the features of the Customer Alliance widget. When you enter and submit a review, this data is typically transmitted to a Customer Alliance server and stored there. The provider of this site has no control over this data transfer.

The Customer Alliance widget is used to display reviews of our hotel posted on Customer Alliance and to offer users the option of submitting a review on Customer Alliance. This constitutes a legitimate interest within the meaning of § 6 No. 4 DSG-EKD (Article 6 sec. 1 f) GDPR).

For more information on how Customer Alliance handles user data, please see the Privacy Policy at https://www.customer-alliance.com/de/datenschutzbestimmungen.

Google Maps

We use Google Maps on our website to display our location. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google.” If you access the Google Maps component embedded on our website and consent to its use, Google will store a cookie on your device via your web browser. To display our location and provide directions, your user settings and data will be processed. We cannot rule out the possibility that Google uses servers in the United States for this purpose.

The legal basis is § 6 Nr. 4 DSG-EKD (Article 6 sec. 1 f) GDPR). Our legitimate interest lies in optimizing the functionality of our website. Through the connection to Google established in this way, Google can determine from which website your request was sent and to which IP address the directions should be transmitted. If you do not consent to this processing, you can prevent cookies from being installed by adjusting the settings in your web browser. For more details, see the “Cookies” section above. In addition, the use of Google Maps and the information obtained through Google Maps is governed by Google's Terms of Service https://policies.google.com/terms?gl=DE&hl=de and the Google Maps Terms of Service https://www.google.com/intl/de_de/help/terms_maps.html. Google also provides further information at https://adssedings.google.com/authenticated and https://policies.google.com/privacy.

GreenSign

This page incorporates a GreenSign widget for displaying and certifying environmentally friendly and sustainable hotel standards. The provider is GreenSign Institut GmbH, Katharinenstraße 12, 10711 Berlin.

To use the features of the GreenSign widget, it is necessary to store your IP address, browser information (name, version), website, operating system, screen resolution, and language settings of your browser or operating system. When you interact with the widget, this data is typically transmitted to a GreenSign server and stored there. The provider of this site has no control over this data transmission.

We use the GreenSign widget to transparently present our hotel’s environmental and sustainability standards and to provide potential guests with information about our efforts in these areas. This constitutes a legitimate interest within the meaning of § 6 Nr. 4 DSG-EKD (Article 6 sec. 1 f) GDPR).

For more information on how GreenSign handles user data, please see GreenSign's Privacy Policy at https://www.greensign.de/datenschutz/.

Teburio / Reservation system

We use Teburio's reservation system to store and process your data when you make a reservation request. The provider is Teburio UG (limited liability), Lars Ewers, Technologiepark 8, 33100 Paderborn

With the help of Teburio, we are able to better organize bookings.

Data processing is based on your reservation § 6No. 2 DSG-EKD (Article 6 sec.1 a) GDPR).

Here you will find Teburio's Nutzungsbedingungen and Datenschutzerklärung.

Data transfer outside the EU

Your data is generally processed within the EU. In exceptional cases where data is transferred to a third country, this occurs only to the extent strictly necessary to provide you with the relevant services and in compliance with the requirements of the GDPR, including the implementation of appropriate safeguards in accordance with § 10 DSG-EKD (Article 44 et seq. GDPR).

Right to information

Under § 19 DSG-EKD (Article 15 GDPR), you have the right to request confirmation from us as to whether we are processing personal data concerning you. If this is the case, you have the right to access this personal data and to receive further information as specified in § 19 DSG-EKD (Article 15 GDPR).

Right to rectification

Pursuant to § 20 DSG-EKD (Article 16 GDPR), you have the right to request that we promptly correct any inaccurate personal data concerning you. Taking into account the purposes of the processing, you also have the right to request that incomplete personal data be completed—including by means of a supplementary statement.

Right to erasure

You have the right to request the erasure of your data if the conditions set forth in § 21 DSG-EKD (Article 17 GDPR) are met. Accordingly, you may, for example, request the erasure of your data if it is no longer necessary for the purposes for which it was collected. In addition, you may request erasure if we process your data based on your consent and you withdraw that consent.

Right to restriction of processing

You have the right to request that the processing of your data be restricted if the conditions set forth in § 22 DSG-EKD (Article 18 GDPR) are met. This is the case, for example, if you dispute the accuracy of your data. You may then request that processing be restricted for the duration of the verification of the data’s accuracy.

Right to data portability

Pursuant to § 24 DSG-EKD (Article 20 GDPR), you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request that it be transferred to another controller, to the extent that this is technically feasible.

Right to object

If the processing of data is based on your consent, you are entitled under § 25 No.1 DSG-EKD (Article 7 sec. 3 GDPR) to withdraw your consent to the use of your personal data at any time. Please note that the withdrawal of consent takes effect only going forward. Data processing that took place prior to the withdrawal is not affected. Please also note that we may be required to retain certain data for a specific period of time in order to comply with legal requirements.

Right to file a complaint

If you believe that the processing of your personal data violates the DSG-EKD (GDPR), you have—without prejudice to any other administrative or judicial remedy—the right to lodge a complaint with a supervisory authority pursuant to § 46 DSG-EKD (Article 77 GDPR), in particular in the Member State of your residence, your place of work, or the location of the alleged violation.

The competent supervisory authority is:

The EKD's Data Protection Officer
Lange Laube 20, 30159 Hannover

Phone: +49 (0)511 768128-0
Fax: +49 (0)511 768128-20

E-mail: info@datenschutz.ekd.de
Website: https://datenschutz.ekd.de

As of: September 2026