Privacy policy
1. Privacy at a glance
General information
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to identify you personally. Detailed information on data protection can be found in this privacy policy.
Data collection on our website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. Contact details can be found in the Legal notice of this website.
How do we collect your data?
Some data is collected when you provide it to us, for example by entering information in a contact form.
Other data is collected automatically by our IT systems when you visit the website. This mainly includes technical data such as your browser, operating system or the time the page was accessed.
What do we use your data for?
Some data is collected to ensure that the website functions correctly. Other data is used to process enquiries or complete an online booking.
What rights do you have regarding your data?
You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request correction, restriction or deletion of this data. You may contact us at the address given in the legal notice. You also have the right to lodge a complaint with the competent supervisory authority.
2. General and mandatory information
Privacy policy
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.
Please note that data transmission over the internet, for example by email, may have security vulnerabilities. Complete protection against access by third parties is not possible.
Information about the controller
The controller responsible for data processing on this website is:
Jolanta Waldner
Hotel Goldene Krone
Kronenplatz 3
38678 Clausthal-Zellerfeld
Phone: +49 (0) 5323 – 930 0
Email: info@goldenekrone-harz.de
Withdrawal of consent to data processing
Many data processing operations are only possible with your express consent. You may withdraw consent at any time by sending us an informal email. The lawfulness of processing carried out before withdrawal remains unaffected.
Right to object in specific cases and to direct marketing (Article 21 GDPR)
Where processing is based on Article 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data, including profiling based on those provisions. The relevant legal basis is stated in this privacy policy.
Where your personal data is processed for direct marketing, you have the right to object at any time to processing for such marketing purposes.
Right to lodge a complaint with the competent supervisory authority
In the event of a GDPR infringement, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, workplace or the place of the alleged infringement. In Lower Saxony, this is the State Commissioner for Data Protection of Lower Saxony (LfD).
Right to data portability
You have the right to receive data that we process automatically on the basis of consent or in performance of a contract in a commonly used, machine-readable format, or to have it transferred to a third party where technically feasible.
SSL or TLS encryption
This website uses SSL or TLS encryption for security and to protect the transmission of confidential content. An encrypted connection is indicated by “https://” and the lock symbol in your browser.
Access, restriction, deletion and correction
Under applicable law, you have the right at any time to receive information free of charge about your stored personal data, its origin, recipients and the purpose of processing, and where applicable to request correction, restriction or deletion.
3. Hosting
Hostinger
This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus (“Hostinger”).
When you visit our website, Hostinger records various log files, including IP addresses. Hostinger is used on the basis of Article 6(1)(f) GDPR. We have a legitimate interest in presenting our website as reliably as possible.
Further information is available in Hostinger’s privacy policy: https://www.hostinger.de/datenschutzrichtlinie.
4. Data collection on our website
Server log files
The website provider automatically collects and stores information in server log files, which your browser transmits automatically. This includes:
- Browser type and version
- Operating system used
- Referrer URL
- Hostname of the accessing device
- Time of the server request
- IP address
This data is not combined with other data sources.
This data is collected on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in the technically correct presentation and optimisation of the website, for which server log files must be collected.
Contact form
If you send us an enquiry using the contact form, the information you provide, including your contact details, will be stored so that we can process the enquiry and any follow-up questions. We do not share this data without your consent.
Data entered in the contact form is processed solely on the basis of your consent under Article 6(1)(a) GDPR. You may withdraw this consent at any time by sending us an informal email.
Data entered in the contact form remains with us until you request deletion, withdraw your consent to storage or the purpose for storage no longer applies. Mandatory legal provisions, particularly retention periods, remain unaffected.
Enquiries by email or telephone
If you contact us by email or telephone, your enquiry and the personal data arising from it, such as your name and the content of the enquiry, will be stored and processed to deal with your request. We do not share this data without your consent.
This data is processed on the basis of Article 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual measures. In all other cases, processing is based on your consent under Article 6(1)(a) GDPR and/or our legitimate interests under Article 6(1)(f) GDPR.
5. Plugins and embedded services
Google Fonts (loaded from Google servers)
This website uses web fonts provided by Google for consistent font display. When you open a page, your browser loads the required fonts, Cormorant Garamond and Lato, into its cache so that text is displayed correctly.
For this purpose, your browser must connect to Google’s servers. Google therefore becomes aware that our website was accessed via your IP address. Google Web Fonts are used in the interest of consistent and attractive presentation, which constitutes a legitimate interest under Article 6(1)(f) GDPR.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information: https://developers.google.com/fonts/faq and https://policies.google.com/privacy?hl=de.
Google Maps
This website uses the Google Maps service via an API. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
To use Google Maps, your IP address must be processed. This information is generally transferred to and stored on a Google server in the United States. The website operator has no control over this transfer.
Google Maps is used to present our online offering attractively and make the locations shown on our website easier to find. This constitutes a legitimate interest under Article 6(1)(f) GDPR.
Further information on how Google handles user data is available in Google’s privacy policy: https://policies.google.com/privacy?hl=de.
DIRS21 online booking tool (TourOnline AG)
Our website uses the DIRS21 online booking tool (“OBT”) provided by TourOnline AG, Borsigstraße 26, 73249 Wernau, Germany, to enable online bookings for accommodation and other travel services and to process enquiries (www.dirs21.de, hereinafter “TOAG”).
When you use the booking widget, the data you enter, such as travel dates, number of guests and contact details, as well as technical data, is transmitted to TOAG. TOAG processes this data as controller within the OBT.
Processing is based on Article 6(1)(b) GDPR for entering into or performing a contract and Article 6(1)(f) GDPR for the legitimate interest in an efficient booking process.
TOAG’s privacy information is available at www.dirs21.de/datenschutz.
6. Cookies
Our website uses cookies in some areas. Cookies do not harm your device and do not contain viruses. They help make our service more user-friendly, effective and secure. Cookies are small text files stored on your device by your browser.
Most cookies we use are session cookies and are deleted automatically when your visit ends. Other cookies remain on your device until you delete them.
You can configure your browser to inform you when cookies are set, allow cookies only in individual cases, reject them in certain cases or generally, and delete cookies automatically when the browser closes. Disabling cookies may limit the functionality of this website.
Cookies required for electronic communication or functions you request, such as the booking widget, are stored on the basis of Article 6(1)(f) GDPR.
Last updated: May 2026