Privacy policy
Note
This is a translation for your convenience; only the German version of this privacy policy is legally binding.
At a glance
This guest folder does not set any cookies, does not use any third-party analytics or advertising tools and does not load any third-party content when you open it. We measure audience reach with cookieless counting (see “Audience measurement without cookies”). Maps and tours from external providers are only loaded if you expressly request this with a click.
Controller
Posthotel Usseln GmbH
Ingrid Brüne-Frisch
Korbacher Str. 14
34508 Willingen (Upland)
Germany
Phone: +49 (0) 5632 94 95 0
E-mail: info@posthotel.de
Hosting and server log files
The guest folder is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA, and delivered via a data centre in Frankfurt am Main. When you access the site, Vercel processes technically necessary data (IP address, date and time, requested address, browser and operating system, referrer) in server log files in order to deliver the site and ensure security. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in secure and stable provision. A data processing agreement has been concluded with Vercel; transfers to the USA are covered by the EU-US Data Privacy Framework and standard contractual clauses. The log data is automatically deleted by Vercel after a short time.
No cookies
We do not use cookies. We measure audience reach with cookieless counting, see “Audience measurement without cookies”. So that the guest folder can also be read without an internet connection, your browser caches the pages on your device (service worker, cache storage). This data does not leave your device and can be deleted at any time via your browser settings. The legal basis is § 25 (2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act), because the storage is strictly necessary for the service you have requested.
Audience measurement without cookies
To understand how our website is used and where we can improve it, we count with our own lean method: page views, clicks on links and buttons (for example on the “Call” button, the reception phone number or links to excursion destinations, each with the button label), the use of forms (only that a form was started or submitted, never the content of your entries), how far you scroll down a page, how long a page was visibly open, which website, search engine or campaign you came from (only the name of the website, not the full address), the device type, browser and operating system, the browser language as well as technical loading times and errors of the page.
The small counting script is loaded from a server of our technical service provider Smith & Victory (statistik.smith-victory.de), and the measurements are sent there. For technical reasons your IP address is transmitted to this server, but it is not stored.
No cookie is set and nothing is stored on your device, neither in the browser storage nor in any other way. When the page is called up, only the approximate location at the level of country, region and city is derived from the IP address; only this place name is stored as a counter. To estimate the number of visitors, an encrypted identifier is formed from the IP address and browser identifier using a random key that is newly generated every day; your IP address cannot be calculated back from it. The random key is deleted after two days at the latest. The identifier only serves to combine repeated visits on the same day, is deleted after two days at the latest and is kept for a maximum of five minutes to show the currently active visitors. No user profiles are created, and your behaviour is not tracked across several days or websites. Only aggregated counts per day and month are stored, for example “page /wellness, 12 views on 5 October”.
In addition, we use Google Search Console. Through it, Google provides us with aggregated figures on the search terms for which this website was shown and clicked in Google Search and on which position it appeared. No content from Google is loaded on this website for this purpose and no data about you is transmitted to Google; it is exclusively data that Google collects anyway about its own search and only provides in aggregated form.
The measurement runs via our technical service provider Smith & Victory on Vercel servers in Frankfurt am Main, and the counts are stored with Upstash in Frankfurt am Main. Smith & Victory processes the data on our behalf on the basis of a data processing agreement. Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in improving this website and measuring its success. Daily figures are deleted after 13 months at the latest, monthly figures after five years at the latest and search data after 30 months at the latest.
Service providers used for audience measurement:
Smith & Victory: technical service provider for website and audience measurement, data processing under Art. 28 GDPR.
Vercel Inc. (USA, processing via Frankfurt am Main): delivery of the counting script and receipt of the measurements.
Upstash Inc. (database with server location Frankfurt am Main): storage of the aggregated audience figures and the aggregated search data from Google Search Console.
Weather display
The weather display for Willingen is retrieved by our server from Bright Sky (brightsky.dev, open data of the German Weather Service) and cached. Your browser does not connect to Bright Sky; no personal data is transmitted.
Maps and tours (only after a click)
On some pages you can display content from external providers: maps from OpenStreetMap (OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom) and tours from Outdooractive (Outdooractive AG, Missener Straße 18, 87509 Immenstadt, Germany). This content is only loaded when you click the respective button. Only then is your IP address transmitted to the provider, and the provider may set its own cookies. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. Your choice only applies to the current visit; we will ask again the next time you visit.
Links to other websites
The guest folder contains links to other websites, for example to newspapers, excursion destinations, Facebook or Instagram. Only when you follow a link do the privacy policies of the respective provider apply.
Contact by phone or e-mail
If you call us or send us an e-mail, we process your details in order to deal with your enquiry (Art. 6 (1) (b) and (f) GDPR). The guest folder itself does not contain a contact form.
Technical support
The guest folder is technically supported by Smith & Victory (smith-victory.de). Apart from the audience measurement described above, which Smith & Victory carries out on our behalf, Smith & Victory has no access to visitors’ personal data.
SSL/TLS encryption
For security reasons, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the padlock symbol in the address bar of your browser.
Your rights
You have the right at any time to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). You can withdraw any consent you have given at any time with effect for the future. To do so, please contact the controller named above.
You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Hessian Commissioner for Data Protection and Freedom of Information (Hessischer Beauftragter für Datenschutz und Informationsfreiheit), Postfach 3163, 65021 Wiesbaden, Germany, datenschutz.hessen.de.
Last updated
October 2026