Palais Maximilian München
Book
Palais Maximilian

Privacy

Data controller

The controller responsible for personal data collected through this website is [Company name], [Address], represented by [Legal representative]. Contact: [Telephone] · [Email]. Data protection officer, if appointed: [Name and contact details]. Processing is carried out in accordance with the GDPR (Regulation (EU) 2016/679) and the German Federal Data Protection Act (BDSG).

Data we process

  • Bookings: name, email address, telephone number, dates of stay, room chosen, number of guests, services requested and special requests (for example dietary needs or a pet travelling with the guest).
  • Contact and enquiry forms (events, experiences, tables, spa): the details entered in the form and the content of the message.
  • Newsletter: email address and date of subscription.
  • Technical data: IP address, date and time of access and pages requested, recorded by the server to keep the site working and secure.

The website does not collect payment details: payment is made at the hotel.

Purposes and lawful bases

  • Managing the booking and answering enquiries: performance of a contract or pre-contractual steps (Article 6(1)(b) GDPR).
  • Meeting legal obligations, in particular tax, accounting and guest-registration requirements: Article 6(1)(c) GDPR.
  • Sending the newsletter: consent (Article 6(1)(a) GDPR), which may be withdrawn at any time.
  • Keeping the website secure and working: legitimate interests (Article 6(1)(f) GDPR).

Booking details are needed to conclude the contract: without them a stay cannot be confirmed.

Recipients

Data is processed by authorised hotel staff and by providers acting on our instructions, in particular [Hosting provider] for hosting the website and [Email service provider] for sending messages. It is disclosed to tax advisers and public authorities only where the law requires, and is never sold. [If a provider is established outside the European Economic Area, state here the safeguards adopted.]

Retention

  • Booking data: for the duration of the relationship and then for the periods set by German tax and commercial law (generally six to ten years).
  • Enquiries sent through forms: until answered and, as a rule, for [twelve] months after the last contact, unless a contract follows.
  • Newsletter: until consent is withdrawn.
  • Server log files: [number] days.

Your rights

Under Articles 15 to 21 GDPR you have the right of access, rectification, erasure, restriction of processing, data portability and objection. Consent may be withdrawn at any time with effect for the future (Article 7(3) GDPR). To exercise these rights, write to [Email].

Right to complain

You may lodge a complaint with a supervisory authority (Article 77 GDPR). For private companies in Bavaria the competent authority is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) in Ansbach.

Cookies

This website uses technical cookies only: one remembers the language chosen, another maintains the session in the restricted area. They are necessary for the site to work and need no consent (section 25(2) TDDDG). We use no analytics or tracking tools and no advertising cookies.

Security and updates

Data is protected by appropriate technical and organisational measures, including encrypted connections. No automated decision-making or profiling takes place. This notice may be updated; the version published on this page applies. Last updated: [date].