Privacy policy

This translation is provided for your convenience. Only the German version is legally binding.

1. Controller

The controller responsible for data processing on this website is:

MGB GmbH
Max and Thomas Metzmacher
Krautgartenweg 1
60439 Frankfurt am Main
Germany

Phone: +49 69 573974
Email: info@lahmer-esel.de
Website: www.lahmer-esel.de

2. Collection and storage of personal data when you visit the website

When you visit our website www.lahmer-esel.de, the browser on your device automatically sends information to our website’s server. This information is stored temporarily in what are known as server log files.

The following data in particular is recorded:

• the IP address of the requesting computer
• the date and time of access
• the name and URL of the file retrieved
• the website from which access is made (referrer URL)
• the browser used and, where applicable, your computer’s operating system
• the name of your access provider

We process this data for the following purposes:

• to ensure a smooth connection to the website
• to make our website convenient to use
• to evaluate system security and stability
• for other administrative purposes

The legal basis for this processing is Art. 6(1)⁠(f) GDPR. Our legitimate interest follows from the purposes of data collection listed above.

3. Hosting

Our website is hosted by IONOS SE. The provider processes personal data as part of its services. This is based on Art. 6(1)⁠(f) GDPR (legitimate interest in providing our website securely and efficiently).

4. Contacting us

If you contact us by email, the personal data you send us (e.g. your name, email address and the content of your message) is stored and processed in order to handle your enquiry. The processing is based on Art. 6(1)⁠(b) GDPR (handling your enquiry) or Art. 6(1)⁠(f) GDPR. Your data is deleted as soon as it is no longer needed to handle your enquiry and no statutory retention obligations apply.

4a. Spam protection in the reservation form (Cloudflare Turnstile)

To protect our reservation form from automated requests (bots), we use the Turnstile service provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When the form is loaded, Turnstile checks whether the request comes from a human. In doing so, Cloudflare processes your IP address, characteristics of your connection and browser (TLS characteristics, user agent) and the address of the page on which the form is embedded; cookies may be used in the process. To confirm the result, our server sends the verification token together with your IP address to Cloudflare. The form cannot be submitted unless the check is passed.

The legal basis is our legitimate interest in protecting the form from misuse and spam (Art. 6(1)⁠(f) GDPR). Where information is stored on or read from your device in this context, this is strictly necessary to send the request you have asked for (Section 25(2) No. 2 TDDDG).

Cloudflare processes the data on our behalf to detect bots; according to its own information, Cloudflare is itself responsible for improving its bot detection. For transfers to the USA, Cloudflare relies on its certification under the EU-U.S. Data Privacy Framework. Further information: https://www.cloudflare.com/turnstile-privacy-policy/ and https://www.cloudflare.com/privacypolicy/.

If you would rather not use the form, you can reach us by phone (see section 1).

5. Disclosure of data

As a rule, we do not pass your personal data on to third parties unless:

• you have given your express consent
• the processing is necessary for the performance of a contract
• there is a legal obligation to do so
• the disclosure is necessary to protect legitimate interests

6. Your rights as a data subject

Within the framework of the applicable legal provisions, you have the right at any time to:

• information about the personal data we hold about you
• rectification of inaccurate data
• erasure of your data
• restriction of processing
• data portability
• withdrawal of any consent you have given

You also have the right to lodge a complaint with a data protection supervisory authority.

7. Data security

During your visit to our website, we use the widely used SSL/TLS method to encrypt data transmission. You can recognise an encrypted connection by “https://” in your browser’s address bar.

8. Cookie banner

To manage the cookies and similar technologies we use (tracking pixels, web beacons, etc.) and the related consents, we use the consent tool “Real Cookie Banner”. Details of how “Real Cookie Banner” works can be found at https://devowl.io/de/rcb/datenverarbeitung/

The legal bases for processing personal data in this context are Art. 6(1)⁠(c) GDPR and Art. 6(1)⁠(f) GDPR. Our legitimate interest is managing the cookies and similar technologies we use and the related consents.

Providing the personal data is neither required by contract nor necessary to conclude a contract. You are not obliged to provide the personal data. If you do not provide it, we cannot manage your consents.

9. Currency and changes to this privacy policy

This privacy policy is currently valid and was last updated in November 2026. As our website develops, or if legal requirements change, it may become necessary to amend this privacy policy.