Privacy Policy

Information on the processing of personal data in accordance with the GDPR. We place great importance on protecting your personal data. Data processing is carried out in accordance with applicable data protection regulations, in particular the GDPR.

1. Data Controller

BeMa Host GbR

Hohe-Kreuz-Str. 41

96049 Bamberg

Email: kontakt@bemagroup.de

2. Collection and Processing of Data

We process personal data only to the extent necessary to provide our services or if you actively provide it to us.

3. Purpose of Processing

Data processing is used to handle your inquiry, provide lodging, and for billing and documentation purposes.

4. Legal Basis

Processing is based on Article 6(1)(b) of the GDPR (contract/pre-contractual steps) or Article 6(1)(f) of the GDPR (legitimate interest).

5. Retention Period

Data is stored only for as long as necessary for the respective purpose or as required by statutory retention periods.

6. Your Rights

You have the right to access, rectification, erasure, restriction of processing, and data portability. Please direct any complaints to the competent supervisory authority.

7. Disclosure to Third Parties

Your data will only be disclosed to third parties if this is necessary for the performance of a contract or if we are legally obligated to do so.

8. Security

We implement technical and organizational security measures to protect your data from loss, manipulation, and unauthorized access.

9. Changes

We reserve the right to amend this Privacy Policy as necessary. The current version is available on our website.

10. Booking Form (Data Processing)

When you use the booking form, the data you enter (contact information and messages) will be processed for the purpose of initiating a contract and issuing an invoice. The data is transmitted via email to BeMa Host GbR; it is not stored on this website’s server. The legal basis is Article 6(1)(b) of the GDPR (contract/pre-contractual steps). The data is stored in compliance with statutory retention requirements (in particular the German Commercial Code (HGB) and the German Fiscal Code (AO)). A booking is not possible without providing this data.

11. Newsletter

The newsletter is sent based on your explicit consent (Article 6(1)(a) of the GDPR). Your data (e.g., email address, name) is processed exclusively for the purpose of sending the newsletter and documenting your subscription. To ensure that email addresses are not misused, we use the so-called double opt-in procedure. After you subscribe, you will receive a confirmation email asking you to confirm your subscription. The subscription is logged to comply with legal requirements (recording of the subscription and confirmation times as well as the IP address). You can opt out of receiving our newsletter at any time and revoke your consent. You’ll find an unsubscribe link at the bottom of every newsletter. After you unsubscribe, your data related to the newsletter will be deleted, provided there are no legal retention periods that prevent this.

12. AI Chat Assistant

Our website offers an AI-powered chat assistant that answers questions about our apartments, rates and your stay. Its use is voluntary – data is only processed once you open the chat and send a message.

We process the chat messages you enter, your language setting and your IP address; the latter only briefly, to prevent abuse and overload. We do not permanently store your chat history – it only exists for the duration of your browser session. Please do not enter any special categories of personal data (e.g. health data) or payment details in the chat.

To generate responses, your chat messages are transmitted to Anthropic PBC, 500 Howard Street, San Francisco, CA 94105, USA (operator of the “Claude” API). We have concluded a data processing agreement with Anthropic; transfers to the USA are based on the EU Commission’s Standard Contractual Clauses (Art. 46(2)(c) GDPR). According to Anthropic, content submitted via the API is not used to train its AI models and is deleted after 30 days at the latest.

The legal basis for this processing is Art. 6(1)(f) GDPR (legitimate interest in efficient and timely guest communication). If you use the hand-over option in the chat (“Straight to Benjamin & Matthias”), your name, email address, your message and the chat history so far are sent to us by email so that we can handle your request personally; the legal basis for this is Art. 6(1)(b) GDPR.

The assistant’s responses are generated automatically and may occasionally be inaccurate or incomplete. Only the information in the booking tool and our direct communications are binding.