Privacy Policy
1. Controller
Hotel Rödelheimer Hof GmbH
Eschborner Landstraße 146
60489 Frankfurt am Main
Germany
Telephone: +49 69 153 947 100
E-Mail: hotel@roedelheimer-hof.de
2. General information
We process personal data only where this is necessary for the secure operation of this website, communication with you, pre-contractual steps or the performance of a contract, or where you have consented to the processing. In particular, the General Data Protection Regulation (GDPR) and the applicable German data protection and telecommunications rules apply.
3. Hosting and server log files
When you access the website, the hosting provider processes technically necessary connection data. This may include the IP address, date and time of the request, requested URL, referrer URL, browser type and version, and operating system. Processing is carried out to provide the website securely and reliably and to prevent misuse. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the secure and reliable operation of the website.
4. Cookies and consent management with CookieYes
We use CookieYes, provided by CookieYes Limited, 3 Warren Yard, Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom, to manage consent choices. CookieYes stores the choices you make and enables us to load non-essential services only after consent has been given. The processing may include the consent status, time of the decision and technical information. Processing is used to meet our legal documentation obligations and to manage your privacy preferences.
Technically necessary storage is carried out under the statutory exemptions for functions that are strictly required. Where consent is required, further processing is based on Article 6(1)(a) GDPR. Consent can be withdrawn or changed at any time for the future through the cookie settings.
CookieYes is established in the United Kingdom and may use sub-processors in other countries. Where personal data is transferred to countries without an adequacy decision, CookieYes’s data processing agreement provides appropriate safeguards, in particular the EU Standard Contractual Clauses. Further information is available in the CookieYes Privacy Policy and Data Processing Agreement.
5. Website security with Wordfence
We use Wordfence, provided by Defiant, Inc., to protect the WordPress installation. Wordfence may process security-related technical data such as IP addresses, requested URLs, HTTP headers, access times and information relating to suspicious requests. This is used to detect and prevent attacks, malware and unauthorised access. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the security of this website and the protection of our guests and systems.
Defiant, Inc. is established in the United States. For transfers of personal data from the European Economic Area, Defiant provides Standard Contractual Clauses. Further information is available in the Wordfence GDPR information.
6. Multilingual website with WPML
We use WPML to provide the German and English versions of the website. WPML may store technically required first-party cookies in order to provide the selected language or language assignment for certain functions. These cookies are not used for advertising or user profiling. The legal basis is Article 6(1)(f) GDPR; where access to the device is strictly necessary for the requested language function, it is carried out under the statutory exemption for technically necessary functions.
7. meteoblue weather widget
We embed a weather widget provided by meteoblue AG, Basel, Switzerland. The widget is loaded as external content from meteoblue. When it is loaded, your IP address, browser information and other technically necessary connection data may be transmitted to meteoblue. The widget is intended to load only after the relevant consent has been provided through our consent management system. The legal basis is your consent under Article 6(1)(a) GDPR; where information on your device is accessed, the consent required by the applicable telecommunications rules also applies. You can withdraw your consent at any time through the cookie settings.
Further information on data processing by meteoblue is available in the meteoblue Privacy Policy.
8. Online booking via Zimmersoftware
Our booking buttons lead to the external Zimmersoftware booking system. Only when you follow such a link do you leave this website, and the privacy information of that provider applies. Certain booking links may pass preselected arrival and departure dates, for example for trade fair periods. The actual entry and processing of your booking and, where applicable, payment data takes place within the external booking system.
9. KAYAK and other external links
The KAYAK Travel Awards image is served locally from our server. A connection to KAYAK is only established when you click the corresponding link. The same applies to other external links, for example transport or partner websites. The respective provider is responsible for processing data on the linked websites.
10. Contact by telephone or email
If you contact us by telephone or email, we process the information you provide in order to handle your enquiry. Where your enquiry relates to a booking or contract, processing is based on Article 6(1)(b) GDPR. In other cases, it is based on our legitimate interest in appropriate communication under Article 6(1)(f) GDPR. This website does not use a contact form.
11. SSL/TLS encryption
This website uses SSL/TLS encryption. This protects data transmitted between your browser and our server against interception by third parties.
12. Your rights
Subject to the statutory requirements, you have in particular the right of access, rectification, erasure, restriction of processing, data portability and objection. Consent can be withdrawn at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.
13. Data protection supervisory authority
For businesses established in Hesse, the Hessian Commissioner for Data Protection and Freedom of Information is generally the competent supervisory authority. Information and contact details are available at datenschutz.hessen.de.
14. Updates to this Privacy Policy
We update this Privacy Policy when the website, the services used or legal requirements change.
Last updated: September 2026
