Thank you for your interest in our company.
“Company” or “We” stands for the following company

Stadthotel Erding
Giuseppe De Matteis
Address: Lange Zeile 14
85435 Erding

Mr. Giuseppe De Matteis
Phone 08122/ 2284634
Fax 08122/ 93355

Data protection has always been and still is very important to us. Therefore you should first contact the above person in case you have any questions.

Responsible for data protection

Ms. Lorena De Matteis, Lange Zeile 14, 85435 Erding, E-mail: Ms. De Matteis will gladly answer all your questions regarding our data privacy statement.


For an ideal presentation of our website the applied internet program saves so-called cookies in your internet browser (Art. 6 para. 1 f of the GDPR). Cookies are text files which your internet browser receives and saves on your computer.

There are two types of cookies:

  • cookies which are necessary for the operation of the website, otherwise the functionality of the website can be limited, or parts of the site might not work (necessary session cookies) and cookies which serve to analyse usage patterns on the website in order to determine visitor numbers and improve the site. Analysis data are collected anonymised.
  • There is no connection made between individual data records of a certain visitor to the website (analysis cookies), cookies linked to social networks like Facebook, Twitter, Instagram or Google+. At the latest when the “like”-button is hit, a connection to the chosen social medium is established and the interaction in your account is stored in the social network as long as you are logged in with your account (social media cookies)
  • and cookies used by third-party providers in order to post online advertising, which you might be interested in (third-party providers’ cookies). On this website we only use necessary session and analysis cookies (Art. 6 para. 1 f of the GDPR) which are being stored in your system. We only provide links to social media websites. You can object to such recording by setting your internet browser to not accepting cookies or deleting those cookies upon ending the internet connection to our sites. If you set your browser to not accepting cookies you might have limited access to our sites due to technical reasons, because our applied internet program which presents our website uses those cookies for intermediate storage of your chosen options. Cookies may contain a cookie ID which allows clear allocation of your internet browser. This means your internet browser can be distinguished from other internet browsers which accessed our website. That way you can be recognised on your next visit and the user experience can be optimised. That way you might not need to enter your user data again, can continue an order and your shopping trolley will still store the goods from your last visit. At any time cookies once set can be deleted or set on limited access by a deletion function offered by all popular internet browsers.  

Visiting the website

Principally, visiting our website is possible without disclosing any personal data. Technically however, visiting our website is not possible if you do not disclose your IP address so that our internet server can send the requested information. Our website is encrypted for your and our safety and uses the “https” protocol. In order to check the identity and the validity of the key used herefore, our internet server refers your internet browser to the issuer of the certificate which was used to encrypt our website and which then – on its own – connects to the United Kingdom. The certificate used on our website was issued by Comodo CA Ltd,  3rd Floor, 26 Office Village, Exchange Quay, Trafford Road, Salford, Manchester, M5 3EQ, United Kingdom. The data protection guideline of Comodo CA Ltd. can be checked here:  

Collecting personal data

We would like to make clear that the personal data which we collect from you are exclusively collected, processed and stored in accordance with the General Data Protection Regulation GDPR and the regulations of the German Federal Data Protection Act (BDSG). Regarding the data collected by us you have special rights which we would like to explain. Even if you can principally use our website without giving any personal data, it might happen that you voluntarily give us your personal data to contact us or to use special services of our website (Art. 6 para. 1 a GDPR).

Furthermore, there are legal stipulations which obligate us to collect, process and store personal data (Art. 6 para 1 c GDPR). In as far as there is no legal basis for the collection of personal data we will always ask for your prior consent (Sec. 6 para 1 a GDPR).  


  • Under Art. 15 GDPR you have the right to require us to provide you with information about your personal data being processed by us. In particular, you have the right to ask for information about the purposes of the processing, the category of the personal data, the categories of recipients to whom your data was or is disclosed, the planned duration of storage, the existence of a right for rectification, deletion, restriction of the processing or opposition, the existence of a right of appeal, the origin of their data, insofar as it was not gathered from us, and about the existence of an automated decision-making including profiling and possibly significant information about the details;
  • under Art. 16 GDPR to require the immediate rectification of inaccurate personal data or the completion of your personal data stored by us;
  • under Art. 17 GDPR to require the erasure of your personal data stored by us, as long as the processing is not needed to exercise the right of free expression of opinion and information for the fulfilment of a legal obligation, for reasons of public interest or for settling accounts, the exercise or defence of legal claims;
  • under Art. 18 GDPR to require a restriction in the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is illegal, you are opposed to its erasure and we no longer require the data, however, you require it to establish, exercise or defend legal claims or, under Art. 21 GDPR, you have raised an objection against the processing;
  • under Art. 20 GDPR to require that your personal data which you have supplied to us be kept in a structured, accessible and machine-readable form or to require it to be sent to another responsible party;
  • under Art. 7 para. 3 GDPR to withdraw at any time the consent you have given us. As a result, in the future we will no longer be allowed to carry out the data processing to which this consent relates.

Right of appeal

Insofar as your personal data is processed based on justified interests under Art. 6 para. 1 p. 1 f GDPR, you have the right under Art. 21 GDPR to lodge an appeal against the processing of your personal data insofar as grounds exist which arise from your special situation or the appeal is directed against direct marketing. In the latter case you have a general right of appeal which will be implemented by us without further specification of a particular situation. (Art. 21 GDPR). In order to exercise your rights please refer to the person responsible for data protection mentioned in the introduction.  

Supervisory authority

Furthermore you have the right to lodge a complaint with the competent supervisory authority for data protection if you think the processing of your personal data is unlawful. The address of the competent supervisory authority for data protection is: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) Address:  Promenade 27, 91522 Ansbach  

Which data may be collected

If you write us an email, the email address will be stored. Furthermore, we collect your name, your address and further contact data such as a phone number if you communicate this in your email and ask us to contact you on a different way of communication. We would like to point out that for entering into contact with you we just need your email address.

If you contact us via a contact form offered by us, we will collect the data given by you.  If you subscribe to a newsletter offered by us, we will collect your email address and send you the newsletter – after verifying your email address by sending you one email to the email address given by you – at regular or irregular intervals. You can unsubscribe to our newsletter at any time by clicking on the link given in each newsletter.  

Legal basis of data collection

The legal basis for processing your data is Art. 6 para. 1 a GDPR based on a consent given to us for processing, Art. 6 para. 1 b GDPR based on the contractual relationship between you and us, Art. 6 para. 1c GDPR based on our legal obligation , Art. 6 para 1 f GDPR preserving our justified interest which do not infringe your fundamental rights, in connection with Art. 24 German Federal Data Protection Act. If you have any questions hereto please do not hesitate to contact us.

Utilisation of the data

The data collected by us will be stored and processed for internal processing in our company for our own purposes in order to be able to offer you our services.

Passing on data

The data stored by us will not be passed on to third parties for other than the purposes stated below.

We solely pass on data to third parties if you have given your explicit consent

  • under Art. 6 para. 1 a GDPR, passing on of data is necessary for enforcing, exercising or defending legal claims
  • under Art. 6 para. 1 f GDPR, and there is no reason for assuming that you have a prevailing legitimate interest in the non-passing on of your data,
  • in case a legal obligation exists for passing on data under Art. 6. para. 1 c GDPR and this is legally permissible and under art. 6 para. 1 b GDPR that this is necessary for implementing a contractual relationship with you, as well
  • as for protecting vital interests of you or another natural person under Art. 6 para 1 d GDPR.

Data collection on our website

Each access of our website is stored in a log file. In the log file the following data are stored among others:

  • name of the accessed file,
  • date and time of access,
  • amount of data transmitted,
  • information if the access was successful.

Furthermore, the following data are transferred to us by your internet browser:

  • IP address, so that we can transmit the data you are asking for,
  • type of browser and operating system, so that we can send system specific information to your browser to ensure consistent representation of our website.
  • The website from which you accessed our website (referrer)
  • to initiate an encrypted connection between us and your internet browser (SSL).
  • Further data and information which are to secure the security of the internet systems involved 

These data are not used to draw conclusions about you. They are collected and stored anonymously to optimise our website, to ensure our systems are working in the long run and – in case we are obliged to do so – to be able to give the necessary information for criminal prosecution to the authorities in case of an attack on our systems.  

Deletion of data

In accordance with the legal regulations, your data, including the text of a [sollte es nicht heißen: des??] contract, will be blocked or deleted after ending the contractual relationship with you and after a possible period of guarantee has expired. This is always the case after 24 months. Furthermore, your data will be blocked or deleted, if the purpose for storing them is no longer pursued or a legally required storing deadline lapses or you require us to delete and there are no legally binding regulations to the contrary.

Automated decisions and profiling

We neither take automated decision based on the data collected from you nor do we conduct profiling from these data.

Method of analysis

This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site.

Information generated by the cookie about your use of the site such as

  • browser type/browser version,
  • operating system used,
  • referrer URL (the page visited before),
  • host name of the accessing computer (IP address),
  • time of the server enquiry,

will be generally transmitted to and stored by Google on servers in the United States. The IP-address, that your Browser conveys within the scope of Google Analytics, will not be associated with any other data held by Google. Furthermore, we have extended Google Analytics by the code “anonymizeIP” on this site. This guarantees your IP address is masked so that all data are collected anonymously. Only in exceptional cases the whole IP address will be first transferred to a Google server in the USA and truncated there. The use is based on Art. 6 para 1 p. 1 f GDPR. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing them other services relating to website activity and internet usage. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

You can also prevent the collection of the data (including IP address) created by the cookie related to your use of the website by Google as well as its processing by Google by downloading and installing the plugin for your web browser under Alternatively to the browser add-on, particularly with browsers on mobile terminal equipment, you can prevent collection by Google Analytics by clicking on this link. An opt-out cookie will be placed which prevents future collection of your data when visiting this site. The opt-out cookie is only valid for this browser and only for our website and will be installed on your computer. If you delete the cookies on this browser you will have to renew your opt-out selection. [Note: For tips for incorporating the opt-out cookie please go to:].

Furthermore, we use Google Analytics for evaluating data from double click cookies and AdWords for analytical reasons. If you do not want this please deactivate it with the Ads Preferences Manager ( You will find further information regarding data protection in connection with Google Analytics in Google Analytics Help (

Google Maps

For direction maps we use Google Maps (API) of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Maps is a web service for representing interactive maps to display geographical information visually. If you consented to the use of cookies, information on using our website (such as IP address of the user) will be transmitted to Google servers in the USA upon loading sites in which the map of Google Maps is embedded and stored there. The use is based on Art. 6 para 1 p. 1 f GDPR. Google might transmit this information to third parties in as far as this is legally required or third parties process these data as assigned by Google. Google will not link the IP address of the user with other data of Google. Despite this it would be technically feasible that Google uses the user data collected by using Google Maps for identifying the users, creates users’ profiles or processes and uses them for other purposes upon which we have no influence whatsoever. You find Google’s terms of use under The additional terms of use for Google Maps are listed under Detailed information on data protection in connection with using Google Maps can be found on Google’s internet presentation (“Google Privacy Policy“: If you do not agree to the future transmission of your data to Google within the framework of using Google Maps, you have the possibility to deactivate Google Maps entirely by switching off the application JavaScript in your browser. Google Maps and consequently also the representation of maps on our website cannot be used then. Use of jQuery. On this page we use Ajax and jQuery technologies for optimising the download speed. Concerning this matter, program libraries of Google servers (operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States) are accessed. The CDN (Content delivery network) of Google is used. Should you have used jQuery on another page of Google CDN your browser will use the copy in the cache. If this does not apply, a download is required with data of your browser arrive at Google Inc. (“Google”). Your data will be transmitted to the USA. Learn more about this on website of the provider.  

Plugins of social media

We do not use plugins of social media such as Facebook, Google+, Twitter, Instagram or others. Data protection declaration for using the booking system DIRS21. We would like to strengthen your trust in the booking system DIRS21 of the operator “TourOnline AG, Borsigstraße 26, 73249 Wernau,, phone: +49 (0) 7153 9250 0“ for booking hotels, hosts and package deals and for making the process of booking and the data collected while booking more transparent. For this reason you learn here which information is collected from you and how this information is processed. Anonymous search for free rooms, hotels or package deals with DIRS21. For availability queries in hotels and other hosts, you do not have to provide any personal data.

Bookings via booking system DIRS21

If you want to book a room or a package, your personal data are required for booking, particularly name, address, phone number and email address. For each booking these data are stored in the system under a booking number which is communicated to the booked host via fax. The booked host can review these data in a secure customer area only accessible by him. Export or automatic processing is not possible. We would like to expressly point out that your email will not be used for marketing or mass mailing purposes. Anonymised data will be processed for statistical purposes. We can use third-party service providers to process your personal data in this task for the above mentioned purposes. For example, we can pass on some information about you to third parties so that they can contact you directly via email (e.g. to get an evaluation of your stay).

Cookies via booking system DIRS21

The booking system DIRS21 does not use any “cookies”.

Right to information regarding booking system DIRS21

As a user of the booking system DIRS21 embedded in this website you will be informed by the operator “TourOnline AG” which information about you was collected by the system. This service is free of charge, if required please refer to by email or to the DIRS21 customer hotline on 0049 7153 925050. Deleting your personal data from the booking system DIRS21 If you so desire, the operator “TourOnline AG” will delete the personal data collected in the booking system DIRS21 as soon as the date of arrival advised in the booking has been reached. This service is free of charge, if required please refer to by email or to the DIRS21 customer hotline on 0049 7153 925050. You will receive a confirmation of the deletion of your data. For further details please refer to the data protection declaration of TourOnline AG

Plugins for representation of media content and pictures

We do not use plugins for representations of media content such as YouTube, Vimeo, Getty Pictures or others.

Google Web Fonts

In order to consistently represent the fonts on our site on each terminal equipment we use so-called web fonts which are provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). As soon as you load our site your browser connects to Google servers, which are operated world-wide, loads the required web fonts in your cache in order to represent texts and fonts properly. By doing this, Google requires that our website had been called up via your IP address. Cookies, particularly tracking cookies, are not created here. We have a justified commercial interest in having our website represented consistently on all terminal equipment, therefore the use of web fonts under Art. 6 para. 1 f GDPR is permitted. You can block the use of web fonts by blocking the access of Google API or Google server in your browser. In this case, instead of Google web fonts standard fonts will be used by your computer. The use of our website will be restricted by this measure. You will find further information about Google web fonts at and in Google’s data protection declaration at:

Legal notices

All contents of our website were collected with care and to our best knowledge. We cannot assume, however, any responsibility for the accuracy, completeness and timeliness of the contents. According to general legislation pursuant to Art. 7 para. 1 TMG [German Telemedia Act] we are responsible for all our own contents provided on these pages. Furthermore, we provide links for access to third-party information. We are not responsible for third-party information (Art. 8 TMG [German Telemedia Act]) because we have not initiated the transmission, not selected the user of the transmitted information and not selected or changed the transmitted information.

Transmitting the information and facilitating access to them requires no automatic temporary intermediate storage of this information based on the type of references. When placing the reference for the first time, third-party information was checked to see whether the person responsible for third-party information might be civilly or criminally liable . As soon as we find out or are informed by third parties, that a link placed by us refers to third-party information which trigger a civil or criminal responsibility of the person responsible for it, the link will be deleted. If you follow such a link, you leave our website and visit a new site upon which we have no influence. In particular, when visiting a new website the data protection regulations of the website you loaded will apply. These can differ from the ones used on this site. Please check out the data protection regulations on the new site carefully.