Legal
Privacy Policy
As of: May 2026
Thank you for your interest in our company. Data protection is of particularly high priority for the management of Noel Hospitality GmbH. Use of the websites of Noel Hospitality GmbH is generally possible without any indication of personal data. However, if a data subject wishes to use special services of our company via our website, processing of personal data may become necessary. If processing of personal data is required and there is no statutory basis for such processing, we generally obtain the consent of the data subject.
The processing of personal data is always carried out in accordance with the General Data Protection Regulation (GDPR) and in compliance with the German Federal Data Protection Act (BDSG).
Note: This English version is provided for convenience. The binding version is the German Datenschutzerklärung.
1. Controller
The controller within the meaning of the GDPR is:
Noel Hospitality GmbH
Kurfürstendamm 194
10707 Berlin
Germany
Represented by Managing Director Leon David Rodzynek
Phone: +49 (0)30 921 007 023
Email: info@noelhotel.com
2. Data Protection Officer
A data protection officer has not been appointed, as the legal requirements for this are currently not met. For data protection enquiries, please contact us using the contact details above.
3. General Information on Data Processing
3.1 Scope of processing
We generally process personal data of our users only insofar as this is necessary to provide a functional website and our content and services. Processing usually only takes place after the user's consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and processing is permitted by law.
3.2 Legal basis
Where we obtain consent for processing operations of personal data, Art. 6 (1) (a) GDPR serves as the legal basis. For processing necessary to perform a contract, Art. 6 (1) (b) GDPR applies. For compliance with legal obligations, Art. 6 (1) (c) GDPR. For protection of legitimate interests, Art. 6 (1) (f) GDPR.
3.3 Storage period and deletion
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if provided for by the European or national legislator.
4. Provision of the Website and Logfiles
Each time our website is accessed, our system automatically collects data and information from the computer system of the requesting computer. The following data is collected:
- User's IP address (truncated / anonymised)
- Date and time of access
- URL / page name accessed
- Referrer URL
- Browser used and browser version
- Operating system used
- Device type
- Volume of data transferred
The legal basis for the temporary storage of the data and the logfiles is Art. 6 (1) (f) GDPR. Logfile data is deleted no later than 30 days after collection.
5. Hosting
This website is hosted by an external service provider:
Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA
Use is for the purpose of contract performance with our potential and existing clients (Art. 6 (1) (b) GDPR) and in the interest of secure, fast and efficient provision of our online offering (Art. 6 (1) (f) GDPR).
A data processing agreement (DPA) pursuant to Art. 28 GDPR has been concluded with the host. Data transfers to the USA are based on the EU-US Data Privacy Framework and Standard Contractual Clauses (SCC) of the EU Commission.
6. Cookies and Consent Management
Our website uses exclusively technically necessary cookies required for the operation of the site (e.g. storage of language selection, consent status). These are permitted without consent under Art. 6 (1) (f) GDPR or § 25 (2) TDDDG.
Should additional cookies or similar technologies be used that are not strictly necessary, we will obtain your prior consent via a consent management tool. You can revoke your consent at any time via the "Cookie settings" link in the website footer.
Legal basis: § 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR.
7. Reach Analysis with Plausible Analytics
We use the cookieless and privacy-friendly web analytics service Plausible Analytics (Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia).
Plausible does not collect personal data and does not set cookies. Only anonymised, aggregated usage statistics are generated. IP addresses are processed only temporarily to generate an anonymous user hash and are not stored.
Legal basis is Art. 6 (1) (f) GDPR. Data is processed exclusively on servers within the European Union. Further information: https://plausible.io/data-policy
8. Contacting Us
8.1 Contact form
A contact form is provided on our website. When using it, the following data is stored:
- First and last name
- Email address
- Subject of the enquiry
- Message text
- Date and time of the enquiry
For sending form messages we use Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). A data processing agreement pursuant to Art. 28 GDPR exists with Resend. Data transfer to the USA is safeguarded by Standard Contractual Clauses.
8.2 Contact via email
Alternatively, contact is possible via the email address provided. The personal data transmitted with the email will be stored.
8.3 Legal basis
The legal basis is, in case of consent, Art. 6 (1) (a) GDPR; for contract-related enquiries additionally Art. 6 (1) (b) GDPR; otherwise Art. 6 (1) (f) GDPR.
8.4 Storage period
The data will be deleted as soon as the conversation has been conclusively clarified. Statutory retention periods (e.g. commercial or tax law, regularly 6 or 10 years) remain unaffected.
9. Job Applications
We offer the option to apply by email. We process your associated personal data insofar as this is necessary to decide on the establishment of an employment relationship.
Legal basis: § 26 BDSG (initiation of an employment relationship), Art. 6 (1) (b) GDPR and, where applicable, Art. 6 (1) (a) GDPR for consent.
Retention period: in case of non-employment, up to 6 months after termination of the application process based on legitimate interests (Art. 6 (1) (f) GDPR). With consent to inclusion in the talent pool: up to 2 years based on explicit consent (Art. 6 (1) (a) GDPR), revocable at any time.
10. Fonts
This website uses locally hosted web fonts. There is no connection to third-party servers (e.g. Google Fonts). No personal data is transferred to third parties as a result.
11. External Links
We link to the websites of our sister companies (e.g. triererhof.de, berlinsleepclub.com, hamburgsleepclub.com) and possibly to other external sites. The respective provider is solely responsible for content and data protection on the linked sites.
12. SSL/TLS Encryption
For security reasons, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the "https://" in the address bar and the lock symbol in your browser.
13. Rights of the Data Subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and have the following rights vis-à-vis the controller:
13.1 Right of access (Art. 15 GDPR)
You can request confirmation as to whether personal data concerning you is being processed.
13.2 Right to rectification (Art. 16 GDPR)
You have a right to rectification and/or completion of inaccurate or incomplete data.
13.3 Right to restriction of processing (Art. 18 GDPR)
Under certain conditions, you can request the restriction of processing.
13.4 Right to erasure (Art. 17 GDPR)
You can request that personal data concerning you be deleted without delay, provided the conditions are met.
13.5 Right to data portability (Art. 20 GDPR)
You have the right to receive personal data concerning you in a structured, commonly used and machine-readable format.
13.6 Right to object (Art. 21 GDPR)
You have the right to object at any time to the processing of personal data concerning you which is based on Art. 6 (1) (e) or (f) GDPR.
13.7 Right to withdraw consent (Art. 7 (3) GDPR)
You have the right to withdraw your data protection consent at any time. The lawfulness of processing carried out before withdrawal remains unaffected.
13.8 Right to lodge a complaint with the supervisory authority (Art. 77 GDPR)
Competent supervisory authority:
Berlin Commissioner for Data Protection and Freedom of Information
Friedrichstraße 219
10969 Berlin, Germany
Phone: +49 (0)30 13889-0
Email: mailbox@datenschutz-berlin.de
Web: www.datenschutz-berlin.de
14. Currency and Amendment of this Privacy Policy
This privacy policy is currently valid and as of May 2026. As our website and offerings evolve, or due to changed legal requirements, it may become necessary to amend this privacy policy. The current version can be accessed and printed at any time at www.noelhospitality.de/datenschutz.
