This is the privacy and cookie statement of the website www.harzecolodges.com (the "Website"). In this privacy and cookie statement we, Borntal GmbH ("Harz Eco Lodges"), located at Straße des 20. Juli 1, 37441 Bad Sachsa, Deutschland explain how we handle personal data and cookies, in accordance with applicable law.

This privacy and cookie statement applies to the processing by Harz Eco Lodges as data controller of all personal data of visitors to the Website.

This privacy and cookie statement is subject to change. We therefore advise you to consult this privacy and cookie statement regularly.

This privacy and cookie statement was last amended on February 10, 2025.

1 Data

Harz Eco Lodges processes your personal data because you use our services and/or because you provide them to us yourself. Below is an overview of the personal data we process:
- First and last name;
- Address data;
- Phone number;
- E-mail address;
- Location data;
- CV and cover letter;
- Data about your activities on our Website;
- Internet browser and device type.

2 Purposes of data processing.

We use the information we collect for the following purposes:
I. Handling your booking, as well as your payment;
II. Analyzing your behavior on the Website in order to improve the Website and tailor the offer of products and services to your preferences.

3 Provision of data to third parties.

Harz Eco Lodges does not sell your data to third parties and only provides them if necessary for the performance of our contract with you or to comply with a legal obligation. With companies that process your data on our behalf, we conclude a processing agreement to ensure the same level of security and confidentiality of your data. Harz Eco Lodges remains responsible for this processing.

4 Security

Harz Eco Lodges takes the protection of your data seriously and takes appropriate measures to counter abuse, loss, unauthorized access, unwanted disclosure and unauthorized modification. We require the employees of Harz Eco Lodges who have access to personal data to treat them confidentially and in accordance with privacy regulations. We have made clear agreements with any third parties involved in processing personal data regarding the handling and security of personal data. However, in view of the risks inherent in the use of the Internet and the constant development of new technologies, we cannot guarantee that data traffic between you and Harz Eco Lodges' servers will not be affected by third parties. Harz Eco Lodges assumes no liability for the possibility that personal data may become public due to or because of errors in electronic traffic or unauthorized or illegal actions by third parties. If you have the impression that your data is not properly secured or there are indications of misuse, please contact us at info@harzecolodges.com.

5 Retention period

The basic principle is that personal data will not be stored (in a form that allows for personal identification) longer than necessary for the purpose of processing. Naturally, we adhere to the legal requirements and follow the guidelines as published by the Personal Data Authority as much as possible. Specifically, if you have entered into an agreement with us, we will retain your contact information for a reasonable period of time after the agreement has ended. We do this in case you wish to use our services again in the near future and for the possibility to contact you about our services, unless you have explicitly indicated that you do not appreciate this.

6 Rights as data subject of data processing

When we process personal data about you as a data subject, you have the following rights against us as a data controller:
I. Right of inspection: the right to inspect your personal data.
II. Right to rectification: the right to correct and/or supplement your personal data.
III. Right to restriction of processing: the right to have less data processed, obviously to the extent not necessary for the performance of the agreement.
IV. Right to data erasure (oblivion): the right to have your personal data erased, within the limits of our legal obligations to retain certain personal data.
V. Right to oppose automated decision-making and profiling: however, we do not use automated decision-making and/or profiling, so this right does not apply in our case.
VI. Right to data portability: the right to transfer personal data.
VII. Right to object to data processing insofar as it is based by us on the pursuit of a legitimate interest.
VIII. Right to withdraw granted consent at any time in the case of processing based on consent.

You may at any time access your personal data and, if desired, supplement and correct it. Should you have any questions or requests regarding your privacy, you can always contact us by e-mail: info@harzecolodges.com. We will reply to your message within a reasonable period of time. Don't forget that we need to be able to identify you when processing your request, although you are allowed to make data such as a BSN number and/or passport photograph unrecognizable.

In addition to the above rights, as a data subject you also always have the right to lodge a complaint with the Personal Data Authority (www.autoriteitpersoonsgegevens.nl) at the moment you feel that we are processing your data unlawfully. We appreciate it if, before you take that step, you contact us first to see if we can resolve your complaint by mutual agreement.

7 Cookies

We use cookies on our Website. Cookies are small files that remember and store your preferences while browsing on your computer, tablet or other device you use to visit our Website. Among other things, we use cookies to recognize you when you visit the Website and to ensure that the Website works properly and easily for you. Similar technologies may also be used by us.

8 What cookies does Harz Eco Lodges use?

The Website uses the following cookies:
I. Functional cookies: these are cookies that are necessary to properly browse our Website. For example, these cookies are used to remember whether you are logged in.
II. Analytical cookies: we use these cookies to analyze and improve the functioning of our Website and services. This does not collect any personal information.
III. Third party cookies: through our Website, with your permission, third party cookies are placed as part of an affiliate or analytics service. We use these services to track browsing habits and to understand how visitors use the Website. These third parties may provide this information to other third parties if they are legally required to do so, or to the extent that others process the information on behalf of these third parties. We have no control over this.

9 Managing cookies

On most web browsers it is possible to regulate the use of cookies. You can reject and delete cookies. Please note that blocking or deleting cookies may affect the functioning of (parts of) the Website.