This English version is provided as a translation for information. The German privacy policy is authoritative.
Last updated: 29 August 2026
1. Controller
Albert & Agatha Winkler GbR
Sebcity Hotel Ellwangen
Sebastiansgraben 29
73479 Ellwangen
Germany
Phone: +49 (0)7961 98680-70
Email: info@sebcity-hotel.de
2. Provision and hosting of the website
This static website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. STRATO processes the connection data required to deliver and secure the website on our behalf. This may include, in particular, the IP address, requested file, date and time, amount of data transferred, referrer, browser and operating system.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, stable and functional operation of the website. We have concluded a data processing agreement with STRATO pursuant to Article 28 GDPR. According to STRATO, IP addresses are stored for no more than seven days for the detection and prevention of attacks. Access logs made available to customers contain anonymised host or IP information and are available for the previous six weeks. Further information is available in STRATO’s privacy policy.
3. Contact by phone or email
If you contact us by phone or email, we process the contact details and message content you provide in order to respond to your enquiry and deal with any necessary follow-up questions. If the enquiry concerns a booking or steps taken before a booking, the legal basis is Article 6(1)(b) GDPR. In other cases, processing is based on our legitimate interest in appropriate communication pursuant to Article 6(1)(f) GDPR.
Recipients may include the hosting and email service providers we use as processors. We delete the data once the enquiry has been conclusively dealt with and no contractual or statutory retention obligations remain.
4. Language setting in your browser
When you change the language, your browser stores the selected language locally under the key sebcity-language. This information is used only on your device, is not used for analytics or advertising and is not transmitted to us. You can delete it at any time through your browser’s website data settings. Storage is necessary to provide the language function you requested (Section 25(2)(2) TDDDG).
5. External availability calendar and online booking
The availability calendar and booking module are provided by TourOnline AG, Borsigstraße 26, 73249 Wernau, Germany. The availability calendar loads directly when you visit the home page. The booking module loads when you visit the booking page or select a direct-booking button. In each case, a connection to TourOnline AG is established.
When the content is loaded, the IP address, time, requested page, referrer, browser and device information may in particular be transmitted to TourOnline AG. According to the provider’s privacy information, cookies or similar technologies and other technical service providers may also be used. Depending on the service involved, data may also be processed outside the European Union or European Economic Area.
The integration and the related transmission of technically necessary connection data are based on Article 6(1)(f) GDPR. Our legitimate interest is to display current availability and offer direct online booking. Where information strictly necessary for the booking process is stored on or read from your device, Section 25(2)(2) TDDDG applies. Article 6(1)(a) GDPR and Section 25(1) TDDDG apply to any additional technologies that require consent. You can alternatively book by phone or email.
If you enter information in the booking module and make a reservation, TourOnline AG and we process the necessary booking, contact and, where applicable, payment data in order to take steps prior to entering into a contract and to perform the accommodation contract pursuant to Article 6(1)(b) GDPR. Statutory retention is based on Article 6(1)(c) GDPR. TourOnline AG describes the scope, recipients, retention periods and services it uses in its privacy information for the online booking tool.
6. External links
Links to OpenStreetMap, Google, Booking.com and the State Garden Show are not embedded. A connection to these providers is established only when you open the respective link. From that point onward, the destination provider processes data under its own privacy policy.
7. No first-party audience measurement or advertising
We do not use our own analytics, marketing or social-media tracking services on this website. External web fonts, a contact form and a newsletter are not integrated. However, the external availability calendar and booking module load directly as described in section 5.
8. Recipients and transfers to third countries
We disclose personal data only where this is necessary to process your enquiry or booking, where a service provider processes data on our behalf, or where a legal obligation applies. Recipients may include STRATO, TourOnline AG when the booking functions load, and payment and communication service providers in connection with a booking.
The static website operated by us does not intentionally transfer data to a third country. According to TourOnline AG’s information, further providers may be involved when the booking functions load. Information about possible third-country transfers and the safeguards used is available in the linked privacy information of the booking provider.
9. Retention period
We retain personal data only for as long as necessary for the respective purpose. Data is then deleted or anonymised unless statutory retention obligations or the establishment, exercise or defence of legal claims require longer storage. The retention periods of TourOnline AG also apply to data in the external booking module.
10. Your rights
Subject to the statutory requirements, you have the right of access under Article 15 GDPR, rectification under Article 16 GDPR, erasure under Article 17 GDPR, restriction of processing under Article 18 GDPR and data portability under Article 20 GDPR. Under Article 21 GDPR, you may object, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. You may withdraw consent at any time with future effect pursuant to Article 7(3) GDPR.
To exercise your rights, simply contact us using the details in section 1.
11. Right to lodge a complaint
Under Article 77 GDPR, you may lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Heilbronner Straße 35
70191 Stuttgart
Germany
Email: poststelle@lfdi.bwl.de
Website: www.baden-wuerttemberg.datenschutz.de
12. Requirement to provide data and automated decisions
You do not need to actively provide us with data merely to browse the website for information. Contact details are voluntary but required in order to deal with your enquiry. Information marked as mandatory for a booking is needed to enter into the contract; the booking cannot be completed without it. We do not make decisions based solely on automated processing, including profiling, within the meaning of Article 22 GDPR.
13. Security and updates
The website is transmitted in encrypted form via HTTPS. We use appropriate technical and organisational measures and update this privacy policy if the services used, the processing of data or the legal requirements change.