One page booking from HotelNetSolutions

Online bookings
Our website uses the booking technology One Page Booking, provided by HotelNetSolutions GmbH, Genthiner Straße 8, 10785 Berlin (“HNS”). We have concluded an order processing agreement with HNS.
If you make an online booking via our website, we need your e-mail address, your telephone number, your travel dates, the product booked and your full address with first and last name for processing.
The dates of your stay, the product selected and the number of people traveling are required to calculate the valid travel price. If you are traveling with children, please make a booking request by telephone on +49 8386 - 9110 or by e-mail to wellness@bergkristall.de. Further information in the form is provided on a voluntary basis.
The processing of your data for the online booking is based on Art. 6 para. 1 lit. b GDPR and serves the fulfillment of a contract.
The data you transmit to us will remain with us until the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.
Conclusion of a contract for order processing
In order to ensure data protection-compliant processing, we have concluded an order processing contract with HNS.

What's App

Messenger & communication functions
What are messenger & communication functions?
We offer the instant messaging service What'sApp on our website. The service provider is the American company What'sApp Inc, a subsidiary of Meta Platforms Inc. WhatsApp Ireland Limeted, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, is responsible for the European region.
With the above-mentioned messenger tool, your data will also be processed and stored to the extent necessary to answer your request and our subsequent actions. If content is end-to-end encrypted, this will be indicated in the individual data protection texts or in the privacy policy of the respective provider. End-to-end encryption means that the content of a message itself is not visible to the provider. However, information about your device, location settings and other technical data can still be processed and stored.

Why do we use messenger & communication functions?
Communication options with you are very important to us. After all, we want to talk to you and answer all possible questions about our service in the best possible way. Well-functioning communication is an important part of our service. With the practical messenger & communication functions, you can choose the ones you prefer at any time. In exceptional cases, however, we may not be able to answer certain questions via chat or messenger. This is the case, for example, when it comes to internal contractual matters. In this case, we recommend other means of communication such as e-mail or telephone. As a rule, we assume that we remain responsible under data protection law, even if we use the services of a social media platform. However, the European Court of Justice has ruled that in certain cases the operator of the social media platform may be jointly responsible with us within the meaning of Art. 26 GDPR. If this is the case, we will point this out separately and work on the basis of an agreement to this effect. The essence of the agreement is set out below for the platform concerned.
Please note that when using our built-in elements, your data may also be processed outside the European Union, as many providers, such as Facebook Messenger or WhatsApp, are American companies. As a result, you may no longer be able to claim or enforce your rights in relation to your personal data as easily.

What data is processed?
Exactly which data is stored and processed depends on the respective provider of the messenger & communication functions. Basically, it is data such as name, address, telephone number, email address and content data such as all information that you enter in a contact form. In most cases, information about your device and IP address is also stored. Data collected via a messenger & communication function is also stored on the provider's servers. If you want to know exactly what data is stored and processed by the respective providers and how you can object to data processing, you should carefully read the respective company's privacy policy.

How secure is data transfer with WhatsApp?
WhatsApp also processes your data in the USA, among other places. We would like to point out that, in the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA. This may entail various risks for the legality and security of data processing.
WhatsApp uses so-called standard contractual clauses (= Art. 46. para. 2 and 3 GDPR) as the basis for data processing with recipients based in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or data transfer there. Standard Contractual Clauses (SCCs) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to and stored in third countries (such as the USA). Through these clauses, WhatsApp undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de
Information on data transmission at WhatsApp, which corresponds to the standard contractual clauses, can be found at https://www.whatsapp.com/legal/business-data-transfer-addendum-20210927

Right of object
You also have the right and the option to withdraw your consent to the use of cookies or third-party providers at any time. This works either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection by cookies by managing, deactivating or deleting cookies in your browser. For more information, please refer to the section on consent.
As cookies may be used for messenger & communication functions, we also recommend that you read our general privacy policy on cookies. To find out exactly what data of yours is stored and processed, you should read What's App's privacy policy.

Legal basis
If you have consented to your data being processed and stored by integrated messenger & communication functions, this consent is the legal basis for data processing (Art. 6 para. 1 lit. a GDPR). We process your request and manage your data in the context of contractual or pre-contractual relationships in order to fulfill our pre-contractual and contractual obligations or to answer inquiries. The basis for this is Art. 6 para. 1 sentence 1 lit. b. GDPR. In principle, your data will also be stored and processed on the basis of our legitimate interest (Art. 6 para. 1 lit. f GDPR) in fast and good communication with you or other customers and business partners if you have given your consent.

Travel assistant (click advisor)

A travel assistant (hereinafter referred to as “click advisor”) is used on our website to provide our visitors with interactive advice. The click advisor software is operated by five digital GmbH. The company is based in Germany (https://www.five-digital.de/impressum). The data entered when using click advisors is transmitted via SSL encryption and stored in a database to enable any contact to be made or the desired information to be sent. Hotel Bergkristall GmbH & Co. KG is responsible for this data within the meaning of Art. 24 GDPR. five digital GmbH is merely the developer and operator of the software and, in this context, a processor in accordance with Art. 28 GDPR. The basis for the processing by five digital GmbH is an order processing contract between Hotel Bergkristall GmbH & Co. KG and five digital GmbH. In addition, five digital GmbH processes further data, some of which may also be personal data, in order to provide its services, in particular for the operation of the click consultants. Further information can be found at https://www.five-digital.de/datenschutz/. In order to ensure data protection-compliant processing, we have concluded an order processing contract with HNS.

Deletion of data
We generally delete personal data when there is no need for further storage. A requirement may exist in particular if the data is still needed to fulfill contractual services, to check and grant or defend against warranty and guarantee claims. In the case of statutory retention obligations, deletion will only be considered after the respective retention obligation has expired.

Bluedrop (hotel marketing agency as part of our recruiting activities)

As part of our recruiting activities, we work together with the hotel marketing agency Bluedrop GmbH. This agency supports us in the implementation of targeted recruiting campaigns, in particular on social networks and digital platforms.

Personal data, such as name, contact details or professional qualifications, may be processed in the process. This data is used exclusively for the purpose of processing applications and filling vacancies. Bluedrop GmbH acts as a processor in accordance with Art. 28 GDPR and is contractually obliged to process the data exclusively in accordance with our instructions and to comply with data protection requirements.

The processing by Bluedrop GmbH includes in particular:

  • the placement of targeted advertisements in social networks,
  • the management and analysis of applicant data,
  • forwarding relevant data to us for processing the application process

The data will not be passed on to unauthorized third parties. All personal data will be treated in accordance with the applicable data protection regulations and deleted after completion of the application process or at the express request of the person concerned, provided that there are no statutory retention obligations.

Delection of data
Applicants' personal data will be deleted no later than 180 days after completion of the application process, provided there are no statutory retention obligations. This period enables us to access the data if necessary if an application process has to be resumed at short notice.
If you have any questions about the processing of your data as part of our recruiting activities, you can contact us at any time at r konstantin@bluedrop.at.

Privacy preferences

We use, in addition to technically necessary cookies, cookies from partners on this website whose purpose is to analyze website access and provide personalized advertising. An overview of the partners and their services can be found in the "Overview of non-essential cookies." Information on the use of your personal data by our partners can be found in the privacy policy.

By clicking on "Accept everything," you agree to the setting of all selected cookies on your device, as well as the subsequent reading and processing of personal data (e.g., your IP address) by us and our partners. If you do not agree with this, please click on "Only essential cookies." You can make an individual selection under "Overview of non-essential cookies." You can access and change your selection in the footer of this website or in the privacy policy at any time.

Overview of non-essential cookies

Overview of non-essential cookiesBack

Privacy policyLegal Notice