Privacy policy

In short: we only process the data we need to run this website and to answer your enquiry. We do not use any tracking or advertising services, and we never pass your data on to third parties. The details are below.

1. Controller

The controller responsible for processing personal data on this website is Haus Astenalm GbR, Neuastenberger Straße 8, 59955 Winterberg, Germany, e-mail: info@hausastenalm.de, phone: +49 1520 6289 451.

2. Hosting and server log files

This website is hosted by a hosting provider in Germany. When you visit our pages, the server automatically processes so-called log files: the IP address of your device, the date and time of access, and the page requested.

This data is technically necessary to provide the website securely and reliably and to detect attacks. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). Log files are kept for a short period only and are then deleted automatically; they are not combined with any other data.

3. Enquiry and booking form

When you send us an enquiry via our form, we process the details you enter there: name, e-mail address, phone number (if provided), your message and your intended travel dates.

We use this data exclusively to answer your enquiry and to handle a possible stay (legal basis: Art. 6(1)(b) GDPR – contract or pre-contractual steps). The enquiry is stored in our internal booking system and is not passed on to third parties.

We keep the data for as long as is necessary to handle your enquiry and your stay. Statutory retention obligations, for example under tax and commercial law, remain unaffected.

4. E-mail

We use Microsoft 365 for our e-mail. E-mails you send us are processed and stored there. A data processing agreement under Art. 28 GDPR is in place with Microsoft.

5. Cookies

This website does not use any tracking, analytics or advertising services. Only one technically necessary session cookie is set, which protects our forms (legal basis: Art. 6(1)(f) GDPR). It contains no personal data and is deleted when you close your browser. If you dismiss the cookie notice, your browser remembers this locally (localStorage) – no personal data is processed or sent to us in the process.

6. Your rights

Under the GDPR you have the right at any time to:

• access the data we hold about you (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure of your data (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing based on legitimate interests (Art. 21 GDPR).

Simply send an informal message to info@hausastenalm.de. You also have the right to lodge a complaint with a data protection supervisory authority – for us, that is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (North Rhine-Westphalia, Germany).

7. No automated decision-making

No automated decision-making or profiling takes place on this website.

Last updated: August 2026