Privacy policy

This is a translation. The German version is legally binding.

This website works without cookies, without analytics or advertising services and without embedded third-party content. Fonts and scripts are hosted on our own server. Below you can find out which data is nevertheless processed and why.

1. Controller

WH Aparthotel
Owner: Manfred Griebel (sole proprietorship)
An der Stadthalle 13,5
97616 Bad Neustadt an der Saale
Germany

Phone: +49 9771 8583
E-mail: office@wh-aparthotel.de

VAT identification number pursuant to § 27a of the German VAT Act: DE195219853

2. Hosting

The website is delivered via the infrastructure of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you visit, Cloudflare processes technically necessary data: IP address, date and time, requested address, amount of data transferred, browser and operating system and the referring page, in order to deliver the site, keep it stable and fend off attacks.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a secure and fast website. A data processing agreement with Cloudflare is in place (Art. 28 GDPR). For transfers to the USA, Cloudflare relies on its certification under the EU-U.S. Data Privacy Framework (adequacy decision, Art. 45 GDPR). More: Cloudflare privacy policy.

3. No cookies, no tracking

We use no cookies and no analytics, reach or marketing tools. No fonts, maps or videos are loaded from third parties.

4. Storage in your browser

• Display settings: if you choose a setting in the accessibility menu (e.g. larger text, high contrast), it is remembered in local storage so it applies on your next visit. You can delete it at any time via “Reset” or your browser settings.
• Intro animation: a marker in session storage prevents the opening animation from replaying on every page. It is deleted when you close the window.

Both are required for the display you requested (§ 25(2) No. 2 TDDDG); no personal data is processed and nothing is transmitted to us.

5. Enquiries by e-mail, phone or enquiry form

The enquiry form does not send anything to a server: it opens your own e-mail program with a prepared message to office@wh-aparthotel.de. We only receive your details once you send it. The same applies to calls and e-mails. We use the data to answer your enquiry and prepare your stay (Art. 6(1)(b) GDPR; for general enquiries Art. 6(1)(f) GDPR) and delete it when no longer needed, unless statutory retention obligations apply.

6. Stay and invoicing

For booking, stay and invoicing we process the necessary details (Art. 6(1)(b) GDPR) and comply with statutory obligations such as tax and commercial retention periods and registration rules for accommodation providers (Art. 6(1)(c) GDPR). Check-in and reception are partly handled by our Hotel Residenz (Hotel Residenz, An der Stadthalle 5, 97616 Bad Neustadt).

7. Links to social networks

We link to Instagram and Facebook with simple links only. Only when you click a link do you reach the provider's page (Meta Platforms Ireland Ltd.), where its privacy policy applies.

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). Simply contact us using the details above. You may also lodge a complaint with a supervisory authority (Art. 77 GDPR); the authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach
Postfach 1349, 91504 Ansbach
Telefon 0981 180093-0 · poststelle@lda.bayern.de · www.lda.bayern.de

9. Encryption

The website is delivered exclusively via encrypted HTTPS (TLS).

Last updated: 5 November 2026