Privacy Policy
I. Information about the processing of your data pursuant to Art. 13 GDPR
1. Controller
The controller for this website is:
Schlebusch und Stroppel GbR
Wolbecker Straße 1
48155 Münster
Email: info@sleep-station.de
2. Data processed for the provision of the website and the creation of log files
a. What data is processed and for what purpose?
Each time you access content on the website, data is temporarily stored that may allow identification. The following data is collected:
- Date and time of access
- IP address
- Hostname of the accessing device
- Website from which the website was accessed
- Websites accessed via the website
- Pages visited on our website
- Notification of whether the retrieval was successful
- Amount of data transferred
- Information about the browser type and version used
- Operating system
The temporary storage of data is necessary for the course of a website visit in order to enable the delivery of the website. Further storage in log files takes place to ensure the functionality of the website and the security of the information technology systems. Our legitimate interest in data processing also lies in these purposes.
b. On what legal basis is this data processed?
The data is processed on the basis of Art. 6(1)(f) GDPR.
c. Are there any recipients of personal data other than the controller?
The website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (email: info@hetzner.com). The host receives the above-mentioned data as a processor.
d. How long is the data stored?
The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. In the case of the provision of the website, this is the case when the respective session has ended. The log files are kept directly and exclusively accessible to administrators for up to 7 days. After that, they are only available indirectly through the reconstruction of backup tapes and are permanently deleted after four weeks.
3. Contact form
Our website offers a contact form through which you can send us booking enquiries and other requests. The form is provided via the service WPForms. When you use the form, the data you enter (e.g. name, email address, arrival and departure date, number of guests, message) is transmitted to us and stored in order to respond to your enquiry. The legal basis for this is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). The data is deleted once the enquiry has been fully processed and there is no further retention obligation.
4. Online bookings via MyAllocator / Book Now
For online accommodation bookings, we use the Book Now booking system provided by MyAllocator (Cloudbeds). When making a booking through this system, personal data (e.g. name, email address, arrival and departure date, number of guests, payment information) is collected and processed. The processing takes place for the performance of the booking contract pursuant to Art. 6(1)(b) GDPR. The data is deleted in accordance with the statutory retention periods (generally 10 years after invoicing pursuant to § 147 AO). Further information on data protection at MyAllocator can be found in the Cloudbeds privacy policy at https://www.cloudbeds.com/privacy-policy/.
5. Data subject rights
a. Right of access: You may request information pursuant to Art. 15 GDPR about your personal data that we process.
b. Right to object: You have a right to object on special grounds (see Section II).
c. Right to rectification: If the information concerning you is not (or no longer) accurate, you may request rectification pursuant to Art. 16 GDPR. If your data is incomplete, you may request completion.
d. Right to erasure: You may request the erasure of your personal data pursuant to Art. 17 GDPR.
e. Right to restriction of processing: You have the right to request restriction of processing of your personal data pursuant to Art. 18 GDPR.
f. Right to lodge a complaint: If you believe that the processing of your personal data infringes data protection law, you have the right pursuant to Art. 77(1) GDPR to lodge a complaint with a supervisory authority of your choice. This includes the supervisory authority responsible for the controller: State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, https://www.ldi.nrw.de/kontakt/ihre-beschwerde.
g. Right to data portability: If the conditions of Art. 20(1) GDPR are met, you have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party. The collection of data for the provision of the website and the storage of log files are essential for the operation of the website. They are therefore not based on consent under Art. 6(1)(a) GDPR or on a contract under Art. 6(1)(b) GDPR, but are justified under Art. 6(1)(f) GDPR. The conditions of Art. 20(1) GDPR are therefore not met in this respect.
II. Right to object pursuant to Art. 21(1) GDPR
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data carried out on the basis of Art. 6(1)(f) GDPR. The controller will then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defence of legal claims. The collection of data for the provision of the website and the storage of log files are essential for the operation of the website.
III. Cookies
Our website uses technically necessary cookies that are required for the operation of the website. These cookies do not store personal data and are deleted at the end of the session. The legal basis is Art. 6(1)(f) GDPR.
Consent management with Real Cookie Banner
On our website we use Real Cookie Banner. This is a consent management tool that allows us to obtain and manage consent from website visitors for data processing. Further details can be found at https://devowl.io/rcb/data-processing/. The legal basis for data processing is Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR. We are legally obliged to make the setting of certain cookies dependent on your consent and to document this. Real Cookie Banner stores the following data: your consent(s) or the revocation of consent, an anonymous UUID (Universally Unique Identifier) for unique identification, the selected privacy settings, and the date and time of the page visit or consent. This data is stored for the duration of the legally required retention period. The processing is carried out on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR, namely the interest in the lawfulness of data processing.
IV. Changes to this privacy policy
We reserve the right to amend this privacy policy to ensure that it always complies with current legal requirements or to implement changes to our services, e.g. when introducing new services. The new privacy policy will then apply to your next visit.
Last updated: March 2026 · Source: Template by the State Commissioner for Data Protection and Freedom of Information NRW (www.ldi.nrw.de), adapted for Sleep Station Hostel Münster