Privacy policy

This translation is provided to help you understand the text. Only the German version is legally binding.

1. Controller

Berggasthof Hochsteinbaude, proprietor Anne Mertsch, Dorfstraße 146, 02829 Königshain · Telephone 035826 60116 · Email hochsteinbaude [at] gmail [punkt] com

2. General information

This website works without cookies, without tracking and without advertising networks. Fonts and images are stored on our own server; when you visit the site, no data is transferred to Google Fonts or other font providers.

3. Hosting and server log files

The website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. Each time a page is accessed, the server automatically stores information transmitted by your browser: IP address, date and time, page accessed, referrer URL, browser type and operating system. This is technically necessary in order to deliver the website and to ensure its security (Art. 6(1)(f) GDPR). The server log files are stored only for as long as is necessary for the provision, stability and security of the website, and are then deleted or anonymised. They are stored beyond that only in so far as statutory retention obligations exist or this is necessary for the assertion of or defence against legal claims. A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider.

4. Contacting us

If you contact us by telephone or email, we process the details you provide in order to deal with your enquiry or booking (Art. 6(1)(b) GDPR). We delete the data as soon as it is no longer required for that purpose and no statutory retention obligations exist.

5. Google Maps (only after a click)

On the page “Hiking & getting here” you can load a map from Google Maps. Only when you click on “Load map” does your browser establish a connection to Google; in the process, your IP address and the page accessed, among other things, are transferred to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and may be transmitted to the USA. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you give by clicking and which you can withdraw at any time with effect for the future by reloading the page. Google is certified under the EU-US Data Privacy Framework. Further information: policies.google.com/privacy.

6. Opening hours calendar

On the page “Opening hours” we show our calendar of dates. We maintain the dates in a Google Calendar; however, they are not retrieved by your browser but by our own server, which fetches them every five minutes and caches them. In doing so, your browser connects exclusively to hochsteinbaude.de. Your IP address and your browser data are not transferred to Google, no cookies are set and no consent is required. The legal basis for displaying the calendar is our legitimate interest in providing reliable information about the opening hours (Art. 6(1)(f) GDPR).

7. 360° panorama and video

The 360° panorama and the animation of the Kuckuckstein are stored on our own server. The panorama is loaded only after a click, the video only when you play it. In both cases no data is transferred to third parties.

8. Links to other services

We link to komoot (walking routes), Google Maps (route planning), Google (reviews), Facebook and to our own sites gipfelbuch.hochsteinbaude.de and kirmes.hochsteinbaude.de. These are simple links: data is transferred only when you click on a link. The privacy notices of the respective provider apply to the services linked to.

9. Your rights

You have the right of access (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object (Art. 21). You can withdraw any consent you have given at any time. You can also lodge a complaint with a supervisory authority, for example the Saxon Commissioner for Data Protection and Transparency (Sächsische Datenschutz- und Transparenzbeauftragte), Devrientstraße 5, 01067 Dresden.

10. Counting page views

We count how often our pages are viewed – with a small program of our own on our server, without any third-party service. When a page is opened, your browser reports three things to our server: which page was opened (which also tells us the language), the hostname of the website you came from (for example “facebook.com”, not the exact address; we group search engines together as “search”), and whether the window is as wide as a phone, a tablet or a computer. We use this to increase counters for each calendar day. Only these daily totals are stored – no IP address, no browser identification, no time of day, no identifier and no individual page view. We do not recognise anyone and cannot trace any visit. Nothing is stored in your browser for this purpose – no cookie and no other entry – and nothing stored there is read; § 25 TDDDG is therefore not affected, and no consent is required. As with every request, the server receives your IP address and your browser’s identification in the process (see section 3). The counter does not use the IP address; it looks at the browser identification only in order to leave out search robots, and does not store it. If your browser sends “Do Not Track” or “Global Privacy Control”, we do not count your page view. We delete the daily totals after 25 months. The legal basis is our legitimate interest in learning which pages and which language versions are read (Art. 6(1)(f) GDPR).

Last updated: September 2026