Privacy Policy (Datenschutzerklärung)

HomePrivacy Policy (Datenschutzerklärung)

Privacy Policy (Datenschutzerklärung)

Niko Hotel GmbH
Große Packhofstraße 21
30159 Hannover
Germany

Phone: +49 511 533195100
Email: info@nikohotel-hildesheim.de

1. Introduction

We, Niko Hotel GmbH, take the protection of your personal data very seriously. We process your data exclusively in accordance with the General Data Protection Regulation (GDPR/DSGVO), the German Federal Data Protection Act (BDSG), and all other applicable legal provisions. The following notice provides an overview of how we collect, use, store, and protect your personal data when you visit our website, make a booking, contact us, or use our services.

2. Data Controller

The party responsible for data processing (“Controller”) pursuant to Article 4(7) GDPR is:

Niko Hotel GmbH
Große Packhofstraße 21
30159 Hannover
Germany

Phone: +49 511 1699590
Email: info@nikohotel-hildesheim.de

3. Collection and Processing of Personal Data

We process personal data only when necessary to provide our services, fulfill contractual obligations, respond to inquiries, comply with legal requirements, or improve our website and service offerings.

We collect personal data in the following situations:

3.1. Website Access (Server Log Files)

When accessing our website, your browser automatically transmits:

  • IP address
  • Date and time of request
  • Accessed page or file
  • Referrer URL
  • Browser type and version
  • Operating system

This data is processed for website security, technical operation, error diagnostics, and to defend against unlawful access attempts.
Legal basis: Art. 6(1)(f) GDPR (legitimate interests).

4. Contact Form

When you contact us via our online contact form, we collect:

  • Name
  • Email address
  • Phone number (if provided)
  • Your message

This data is used exclusively to process your request.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps) and Art. 6(1)(f) GDPR.

We retain inquiries only as long as necessary to process them or as required by statutory retention obligations.

5. Online Booking System

When you book a room via our website, we collect:

  • Name
  • Address
  • Arrival and departure dates
  • Number of guests
  • Payment data (depending on payment method)
  • Email address
  • Phone number

This data is required to process your booking and fulfill the accommodation contract.
Legal basis: Art. 6(1)(b) GDPR (contract).

Your booking information is stored according to German commercial and tax retention laws (HGB/AO), typically 10 years.

6. Payment Processing (Stripe)

We use Stripe for secure online payments. When paying via Stripe, the following data may be transmitted to Stripe:

  • Payment card details
  • Billing address
  • Email address
  • Transaction information
  • IP address

Stripe acts as an independent controller for part of the processing.
Legal basis: Art. 6(1)(b) GDPR (contract) and Art. 6(1)(f) GDPR (secure payment handling).

Stripe Privacy Policy: https://stripe.com/privacyPayment data is encrypted and never stored on our servers.

7. Newsletter Subscription

If you subscribe to our newsletter, we store:

  • Email address
  • IP address at time of registration
  • Date and time of subscription

We use a double opt-in process in accordance with German law.
Legal basis: Art. 6(1)(a) GDPR (consent).

You may unsubscribe at any time via the link included in every newsletter.

8. Google Maps Integration

Our website uses Google Maps for displaying location and navigation information.

When accessing the map, Google receives:

  • IP address
  • Browser and device information
  • Pages viewed

Google processes this data as an independent controller.
Legal basis: Art. 6(1)(a) GDPR (consent via cookie banner).

Google Privacy Policy:
https://policies.google.com/privacyGoogle servers may be located in the USA; if so, GDPR-standard contractual clauses apply.

9. Cookies and Tracking Technologies

We use essential cookies for website functionality and (optional) analytics cookies only with user consent.

Types of Cookies:

  • Essential cookies (required for website operation)
  • Functional cookies (improve user experience)
  • Analytics cookies (Google Analytics, if used – only with consent)
  • Marketing cookies (only if explicitly enabled)

Legal basis:

  • Essential cookies → Art. 6(1)(f) GDPR
  • Analytics/marketing cookies → Art. 6(1)(a) GDPR (consent)

A cookie banner is used to manage your cookie preferences in compliance with German law.

10. Hosting

Our website is hosted by a GDPR-compliant hosting provider located within the EU/EEA. In the course of hosting, the provider may process:

  • Server logs
  • IP addresses
  • Technical data for security and performance

Legal basis: Art. 6(1)(f) GDPR (legitimate interests).

A Data Processing Agreement (DPA / AV-Vertrag) is in place.

11. Data Sharing

Personal data is shared only when necessary to provide our services or to meet legal obligations:

  • Payment service providers (Stripe)
  • Booking system providers
  • Hosting providers
  • Newsletter service providers
  • Tax authorities (in case of audit)

We do not sell or trade personal data.

12. Data Retention

We store personal data only as long as required for the stated purpose or by law:

  • Booking and invoice data → 10 years (HGB/AO)
  • Contact form inquiries → until resolved
  • Cookies → according to cookie settings
  • Newsletter data → until unsubscribed

After expiry of retention periods, data is deleted securely.

13. Your Rights (Data Subject Rights under GDPR)

You have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent at any time (Art. 7 GDPR)

To exercise these rights, contact:
Email: info@nikohotel-hildesheim.de

You also have the right to lodge a complaint with the German supervisory authority:
Landesbeauftragte für den Datenschutz Niedersachsen (LfD Niedersachsen).

14. Data Security

We use technical and organizational measures to protect your data against:

  • Loss
  • Misuse
  • Unauthorized access
  • Destruction
  • Manipulation

This includes encryption (SSL), access control, secure hosting, and regular security audits.

15. Image Sources and Copyright Notices

Some photographs used on this website originate from Unsplash and Pixabay and are used in accordance with the respective content licences. The copyrights and other applicable rights remain with the respective photographers or rights holders.

Photo credits:

The images are used under the applicable Unsplash Licence and Pixabay Content Licence. Both platforms permit commercial use without mandatory attribution; nevertheless, we provide these credits in recognition of the photographers.

Unless otherwise indicated, all other images and visual content on this website are owned by or licensed to Niko Hotel GmbH. Reproduction, distribution, modification, or other use by third parties is not permitted without prior authorisation from the relevant rights holder.

16. External Links

Our website may contain links to third-party pages. We are not responsible for the content or data processing on external websites.

17. Updates to This Privacy Policy

We may update this Privacy Policy to ensure ongoing compliance with legal requirements. The latest version is always available on our website.

Last updated: Dec. 2025