Your data
Privacy policy
Last updated: 7 October 2026
1. Data controller
Hotel Brügges Loui
Karl-Heinz Jäger e.K.
Hochsauerlandstraße 16
34508 Willingen (Upland)
info@brueggesloui.de
05632 5019
2. Website visits and hosting
When you visit this website, the web server processes technical connection data. This includes your IP address, the date and time, requested pages, the referring website where applicable, and browser and operating system information. These data are used to provide the website and protect it from technical faults and abuse. The legal basis is our legitimate interest in secure and reliable operation under Article 6(1)(f) GDPR.
The hosting provider processes technical data as necessary to provide and secure the website. Technical log data are retained only as long as necessary for these purposes or to investigate specific security incidents.
3. Contact and accommodation enquiries
If you contact us using the form, by email or by phone, we process your contact details, travel dates and the content of your enquiry. The form requires your name, email address and arrival and departure dates. Your phone number and message are optional. These details are necessary to answer your enquiry and, where appropriate, prepare an offer.
The form sends your details to the hotel by email. Contract-related enquiries are processed under Article 6(1)(b) GDPR; other enquiries are processed on the basis of our legitimate interest in responding under Article 6(1)(f) GDPR. Messages are deleted when processing is complete and no further purposes or statutory retention obligations apply. Bookings are subject to applicable statutory retention periods.
4. Technically necessary cookies
A technically necessary session cookie is set on these pages to support secure use of the enquiry form. It protects against forged form submissions and allows a sending status to be displayed. It does not contain the contact details you enter. The server-side session may temporarily store the time of a submission to limit repeated enquiries. The session cookie normally expires when you close your browser. The legal bases are Section 25(2)(2) TDDDG and Article 6(1)(f) GDPR.
We store your cookie choices and their timestamp locally in your browser (Local Storage) for up to 180 days. You can change your choices or withdraw consent at any time using “Cookie settings” in the footer. Fonts use the system fonts on your device.
Google Analytics
Only with your explicit consent do we use Google Analytics 4 (measurement ID G-07XSZS5LQD) to analyse website usage statistically. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Without consent, the Google Analytics script is not loaded. Our integration disables advertising features and Google Signals.
Processing includes page views, interactions, cookie identifiers and information about your browser, device and approximate region. Your IP address is transmitted to Google when connecting. The _ga and _ga_* cookies recognise returning browsers; our integration limits their lifetime to at most 180 days. The legal bases are your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. Transfer to Google companies and servers in the USA is possible.
When you withdraw consent using “Cookie settings”, further collection on this website stops and accessible Analytics cookies are deleted. Withdrawal applies to future processing. Google provides further information about processing and transfers: Google privacy policy ↗.
5. External websites
Links to services such as Google Maps, Willingen, Skywalk and Kurviger open external websites. Data are transmitted to the respective provider only when you follow such a link. Their own privacy policies apply to processing on those websites. A map is not embedded in our website.
6. Your rights
Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction of processing and data portability (Articles 15–20 GDPR). You may object to processing based on legitimate interests on grounds relating to your particular situation (Article 21 GDPR). You may withdraw any consent at any time with effect for the future.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority for Hesse is the Hessian Commissioner for Data Protection and Freedom of Information. datenschutz.hessen.de ↗
7. Security and changes
The website uses HTTPS for encrypted transmission. We update this policy when the website’s functions or data processing change. Please use the contact details above for any privacy questions.
