Skip to content

Privacy Policy (Datenschutz)

Information on the processing of your personal data according to Art. 13, 14 GDPR

Please note: This English translation is provided for informational convenience. The legally authoritative data privacy policy is the German version.

1. Controller

The controller responsible for processing personal data on this website is:

Sleep Inn Motel Paderborn
Uwe Scholle
Marienloher Straße 50
33104 Paderborn
E-Mail: info@sleepinnmotel.de

For questions about data protection or to exercise your rights, simply write to the e-mail address above.

2. Legal bases and storage period

We process personal data on the basis of Art. 6(1) GDPR: with your consent (point a), to perform a contract or handle pre-contractual enquiries (point b), to comply with legal obligations (point c) or on the basis of our legitimate interests (point f). Storing and accessing information on your device is additionally governed by Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG).

We delete data as soon as the purpose of processing no longer applies and no statutory retention obligations prevent deletion. The specific storage periods are stated for each processing activity.

3. Hosting and server log files

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. IONOS processes the data on our behalf; the data processing agreement under Art. 28 GDPR is part of our contract with IONOS.

Each time the website is accessed, IONOS automatically stores access data: the page or file requested, the previously visited page (referrer), browser and browser version, operating system, device type, time of access and the IP address in shortened (anonymised) form. The purpose is the secure and stable operation of the website; the legal basis is our legitimate interest (Art. 6(1)(f) GDPR). The data is deleted after eight weeks.

The connection to our website is encrypted using TLS.

4. Consent, cookies and your choice

On your first visit, a notice asks which services you allow. Without your consent, we do not load any statistics or marketing services or external content, and no cookies from these services are set.

We store your choice together with the date and a version number in your browser’s local storage (localStorage, entry “sleepinn_cookie_consent”). The entry stays on your device and is not transmitted to us. This is technically necessary to respect your decision (Section 25(2) no. 2 TDDDG; Art. 6(1)(c) in conjunction with Art. 7(1) GDPR). We ask again after twelve months or when the services we use change.

You can change or withdraw your consent at any time with effect for the future in the cookie settings linked at the bottom of every page.

5. Contact by e-mail, phone and WhatsApp

If you contact us by e-mail, phone or WhatsApp, we process the information you provide (e.g. name, contact details, content of your enquiry) in order to answer it. The legal basis is Art. 6(1)(b) GDPR if your enquiry concerns a booking or contract, otherwise our legitimate interest in responding (Art. 6(1)(f) GDPR). We delete the data once your enquiry has been dealt with, unless statutory retention obligations apply.

WhatsApp: The WhatsApp buttons open the WhatsApp app or website. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Message content is end-to-end encrypted; however, WhatsApp processes your phone number and connection data (e.g. time, device, IP address) and may transfer them to WhatsApp LLC or Meta Platforms, Inc. in the USA. These companies are certified under the EU-US Data Privacy Framework. Using WhatsApp is optional – you can also reach us by e-mail or phone. WhatsApp privacy policy: https://www.whatsapp.com/legal/privacy-policy-eea

6. Online booking via Mews

For room bookings we use the hotel and booking system of Mews Systems B.V., Wibautstraat 137D, 1097 DN Amsterdam, the Netherlands. The booking buttons open the Mews booking page; your selected travel dates and number of guests are passed in the address. You only enter your personal details on the booking page. Mews processes this data on our behalf (Art. 28 GDPR).

This includes in particular your name, address, e-mail address, phone number, travel dates, room choice and payment details. The purpose is to perform the accommodation contract, including payment and invoicing (Art. 6(1)(b) GDPR), and to comply with legal obligations such as the registration requirement under the German Federal Registration Act (Bundesmeldegesetz) and tax retention obligations (Art. 6(1)(c) GDPR).

We store booking data for as long as necessary to perform the contract and beyond that for the statutory retention periods (registration forms one year from departure; invoices and accounting records up to ten years under commercial and tax law).

If you have consented to “Statistics & marketing”, an identifier is also passed on when you switch to the booking page so that a booking can be attributed to your visit (see section 8).

7. Self check-in terminal

At the self check-in terminal in the motel, the registration data required under the Federal Registration Act is recorded digitally (Art. 6(1)(c) GDPR in conjunction with Sections 29 and 30 BMG) and deleted after the statutory retention period (one year from departure).

Payments at the terminal are processed in encrypted form by certified payment service providers. Complete card data is not stored on the terminal.

8. Statistics and marketing (only with your consent)

We integrate the following services via Google Tag Manager. They are only loaded once you have consented to “Statistics & marketing” in the notice or in the cookie settings. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw it at any time; we then delete these services’ cookies on our domain.

8.1 Google Tag Manager

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Tag Manager loads the services listed below and processes your IP address in doing so; it does not create user profiles itself.

8.2 Google Analytics 4

The provider is also Google Ireland Limited. Google Analytics evaluates how visitors use our website: pages viewed, time spent, where the visit came from, device and browser, approximate location and completed bookings (booking number, amount, currency). Your IP address is transmitted in the process; according to Google, Google Analytics 4 does not store IP addresses. Cookies: _ga and _ga_<ID>, lifetime up to two years. The analytics data is deleted after 14 months.

So that bookings on the Mews booking page can be attributed to a visit, we use cross-domain measurement between sleepinnmotel.de and mews.com.

8.3 Google Ads

The provider is Google Ireland Limited. Conversion tracking lets us measure whether a click on one of our ads leads to a booking. With remarketing, Google may show you our ads on other websites. Data processed includes click identifiers, page views, booking data (booking number, amount, currency), IP address and device information. Cookies: _gcl_… (90 days) and Google advertising cookies on Google’s own domains (e.g. IDE, 13 months in the EEA).

8.4 Microsoft Advertising

The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Universal Event Tracking (UET) lets us measure whether ads in Bing search and the Microsoft advertising network lead to bookings; Microsoft may also show you our ads (remarketing). Data processed includes page views, click identifiers, booking data (booking number, amount, currency), IP address and device information. Cookies: e.g. _uetsid, _uetvid, _uetmsclkid and MUID (Microsoft domain), lifetime up to 13 months.

8.5 Transfers to the USA

Google and Microsoft may transfer data to their parent companies Google LLC and Microsoft Corporation in the USA. Both companies are certified under the EU-US Data Privacy Framework; transfers are based on the European Commission’s adequacy decision of 10 July 2023 (Art. 45 GDPR). Privacy policies: https://policies.google.com/privacy and https://privacy.microsoft.com/en-gb/privacystatement

9. Guest reviews (starwall.io)

In the guest reviews section on the home page we show reviews via a widget from the StarWall service. The provider is VALKIRE LTD, 58 Peregrine Road, Ilford, IG6 3SZ, United Kingdom. The widget is only loaded once you click “Show reviews” or have consented to “External content” in the cookie settings. Your IP address and technical data about your browser are then transmitted to starwall.io.

The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). The European Commission has issued an adequacy decision for the United Kingdom (Art. 45 GDPR). Provider’s privacy policy: https://starwall.io/privacy/

10. Links to Google Maps

We link to our location on Google Maps. No map is embedded on our website. Google Maps only opens when you click the link; Google’s privacy policy then applies.

11. Fonts

The fonts on this website are hosted locally. No connection to third-party servers (e.g. Google Fonts) is established to load them.

12. Video surveillance

To protect our guests, staff, the motel building and vehicles parked in the car park, the publicly accessible outdoor areas (car park, entrance area) are under video surveillance.

The legal basis is our legitimate interest in exercising our domiciliary rights and protecting against vandalism and theft (Art. 6(1)(f) GDPR).

Recordings are overwritten automatically after seven days unless they are needed to investigate specific incidents.

13. Your rights

You have the right to access the data stored about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent you have given at any time with effect for the future (Art. 7(3) GDPR).

RIGHT TO OBJECT: WHERE WE PROCESS YOUR DATA ON THE BASIS OF ART. 6(1)(F) GDPR, YOU MAY OBJECT TO THIS PROCESSING AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION (ART. 21 GDPR).

You may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

Providing your data is required for a booking; without it we cannot conclude a contract. No automated decision-making within the meaning of Art. 22 GDPR takes place.

14. Status of this privacy policy

Status: October 2026. We update this privacy policy when our website, the services we use or the legal situation change.