Privacy Policy

1. Controller

Responsible for data processing under the General Data Protection Regulation (GDPR):
Opera Hotel Cologne GmbH
Perlenpfuhl 6‑10, 50667 Cologne, Germany
Phone: +49 221 420 75 800
Email: info@operahotel.de
VAT ID: DE 314406573

2. Data Protection Officer

If applicable:
Name of the Data Protection Officer
Contact: info@operahotel.de

3. Collection and Use of Personal Data

We process your personal data when you book our hotel, use our website, stay in our premises, or contact us. This includes:

  • Booking information (e.g., name, address, email, phone number, payment information)

  • Technical data when using the website (e.g., IP address, browser type, visit duration, access times)

  • Data necessary for fulfilling the contract (e.g., check-in/out details, room preferences)

Purpose of processing:

  • Fulfilling the hotel contract with you

  • Providing hotel services (accommodation, breakfast, additional services)

  • Optimizing our website and technical infrastructure

  • Marketing purposes (only with your consent)

4. Legal Basis for Processing

  • Performance of a contract: Art. 6(1)(b) GDPR

  • Consent: Art. 6(1)(a) GDPR (e.g., newsletter subscription)

  • Legitimate interest: Art. 6(1)(f) GDPR (e.g., IT security, website analytics)

5. Sharing Data with Third Parties

We only share your data if:

  • necessary for contract fulfillment (e.g., booking platforms, payment service providers)

  • required by law

  • you have given consent

When using third-party services (e.g., analytics tools, service providers), we ensure GDPR compliance.

6. Cookies and Tracking

Our website uses cookies and similar technologies:

  • Essential cookies for proper website functionality

  • Statistical cookies for anonymized user behavior analysis

  • Marketing cookies only after your consent

You can disable or delete cookies in your browser; some website functions may then be limited.

7. Your Rights

You have the right to:

  • Access your personal data

  • Rectify incorrect data

  • Request deletion of data, unless legal retention obligations exist

  • Restrict processing

  • Data portability

  • Object to processing based on legitimate interests

  • Withdraw consent (e.g., for newsletters)

Please contact us using the details above to exercise your rights.

8. Data Retention

We retain your personal data only as long as necessary for the purposes described or as required by law (e.g., commercial or tax retention periods).

9. Use of Third-Party Services and Plugins

We may use third-party services such as Google Analytics, social media plugins, or booking systems. Their use and data handling, including opt-out options, are provided separately.

10. Changes to This Privacy Policy

We reserve the right to update this privacy policy to comply with current legal requirements or reflect changes to our services. The latest version is always available on our website.