Privacy policy

This website is deliberately data-minimal. It sets no cookies of its own and uses no tracking or analytics tools; external services are used in only two places: the embedded Google Maps map (section 9) and – only when you click – the online booking via Mews (section 12). Below we explain how personal data is processed when you visit this website.

1. Controller

The controller for data processing on this website is LIBERTY STG GmbH, Karlstraße 5-7, 50679 Cologne, Germany. Managing director: Sylvia Christine Fees. Phone: +49 221 811428. Email: info@libertyhotelcologne.de.

2. Data protection officer

We have not appointed a data protection officer, as there is no legal obligation to do so. For any privacy questions, please use the contact details above.

3. Basis for processing

We process personal data only where necessary and on the basis of the General Data Protection Regulation (GDPR). The relevant legal bases are, in particular: your consent (Art. 6(1)(a) GDPR), the initiation or performance of a contract (b), compliance with legal obligations (c), and our legitimate interests in a secure and functioning website (f).

4. Accessing the website and server log files

When you access this website, our hosting provider automatically stores information transmitted by your browser in what are known as server log files. The purpose is the technical delivery, stability and security of the site and the prevention of attacks; the legal basis is our legitimate interest (Art. 6(1)(f) GDPR). Log files are deleted after a short period unless they are exceptionally required to investigate a specific security incident. The following are processed:

• IP address of the accessing device
• date and time of access
• name and URL of the file requested
• amount of data transferred and notification of successful retrieval
• the previously visited page (referrer URL)
• browser and operating system used

5. Hosting

This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. The servers are located in Germany. IONOS processes the data arising in the server log files exclusively on our behalf and on our instructions, based on a data processing agreement pursuant to Art. 28 GDPR.

6. SSL/TLS encryption

For security reasons, this website uses TLS encryption. You can recognise an encrypted connection by the “https://” prefix and the padlock symbol in your browser's address bar.

7. Cookies and local storage

This website sets no cookies of its own. For your chosen appearance (light or dark mode) we store a single setting named “liberty-theme” in your browser's local storage. This setting remains solely on your device, contains no personal reference and is not transmitted to us or to third parties. It is technically necessary to provide the function you requested (Section 25(2) no. 2 TDDDG) and therefore does not require consent. You can clear local storage at any time in your browser settings. The embedded Google Maps map may additionally set cookies from Google (see section 9); the Mews online booking may store technically necessary information in your browser (see section 12).

8. Fonts

All fonts used on this website are stored locally on our server (“self-hosted”). No connection to third-party servers – such as Google Fonts or Adobe Fonts – is made when the page loads, and no data is transmitted to font service providers.

9. Google Maps

A map from the Google Maps service is embedded on our home page and on the “Location” and “Contact” pages. For users in the European Economic Area, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

The map loads when one of these pages is opened – deferred, once it scrolls into view. A connection to Google is then established and data – in particular your IP address and information about your browser and device – is transmitted to Google; it may be forwarded to Google servers in the USA. We have no influence over this processing.

The legal basis is our legitimate interest in an easily found, attractive presentation of how to reach us (Art. 6(1)(f) GDPR). You can prevent the map from loading via appropriate browser settings or add-ons that block the loading of external content.

For transfers to the USA, Google LLC is certified under the EU-US Data Privacy Framework; standard contractual clauses apply in addition. Further information: Google's privacy policy at https://policies.google.com/privacy.

10. Directions link

Next to the map you will also find a “Get directions” link that opens Google Maps in a new tab. No data is transmitted to Google until you click this link; Google's privacy information then applies.

11. Contacting us and enquiries

You can contact us by phone or email. The contact form on this website does not send your entries to a server; instead it opens your email program with a prepared message to info@libertyhotelcologne.de. Availability checks and bookings run through the Mews booking flow (see section 12). Data is only transmitted to us once you send that email yourself. The purpose is to handle your enquiry and to carry out pre-contractual steps; the legal basis is Art. 6(1)(b) GDPR and our legitimate interest in responding to enquiries (f). We store your details until your enquiry has been fully dealt with; statutory retention obligations (in particular under commercial and tax law) remain unaffected.

Please note that data transmission over the internet – email communication in particular – can have security gaps and is usually unencrypted; complete protection of your data against access by third parties is not possible. Please do not send particularly sensitive information by this route.

The following details you provide may be processed:

• first and last name
• email address
• desired travel dates, number of rooms, room type, breakfast preference
• the content of your message

12. Online booking via Mews

You can enquire about and book rooms online through the booking flow of our booking system Mews (provider: Mews, mews.com). It opens as a window over our page as soon as you click a button such as “Book a room” – including in the booking bar on the home page. If you have already chosen travel dates and the number of guests there, they are passed to the booking flow when it opens. Before that, no connection to Mews is made.

When it opens, the booking flow is loaded from Mews servers. As with any web page request, technical data such as your IP address and information about your browser and device is transmitted to Mews. If you make a booking, Mews processes the data you enter – in particular name, contact details, travel dates, number of guests, room choice, requests and, where applicable, payment data – on our behalf in order to process your booking. Where payment data is requested, it is processed through the payment service integrated in the booking flow; the booking flow shows you the details at the relevant step. We have switched off the tracking and marketing functions of the booking flow.

We are responsible for the processing of your booking data. Mews processes the data as our processor (Art. 28 GDPR) and only on our instructions. The legal basis is Art. 6(1)(b) GDPR (initiation and performance of the accommodation contract); where we are legally required to retain data, Art. 6(1)(c) GDPR. Where information is stored on or retrieved from your device in this process, this serves solely to provide the booking service you expressly requested (Section 25(2) no. 2 TDDDG).

We keep your booking data until the contract has been completed and beyond that only where statutory retention obligations apply (in particular commercial and tax-law periods). Further information from Mews: https://www.mews.com/en/privacy-policy.

If you prefer not to book online, you can reach us at any time by email or phone (see section 11).

13. Recipients of the data

Within our company, only those departments that need your data to handle your request have access to it. The hosting provider IONOS and – for online booking – Mews are engaged as processors (see “Online booking via Mews”); a payment service provider may also be involved via their booking flow. When pages with the embedded map are opened, data is transmitted to Google (see “Google Maps”). Beyond that, we do not pass your data on to third parties; we do not sell data.

14. Transfers to third countries

Personal data is transferred to countries outside the EU/EEA in connection with the embedded Google Maps map and when you click the directions link (possible transfer to the USA, safeguarded by the EU-US Data Privacy Framework and standard contractual clauses). When you use online booking, whether data reaches countries outside the EU/EEA depends on the infrastructure of Mews and its service providers; Mews provides information on this and on the safeguards applied (see section 12). The data we ourselves and our hosting provider process is processed exclusively in Germany.

15. No automated decision-making

There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

16. Your rights

Under the GDPR you have the following rights; an informal message to the contact details above is sufficient to exercise them:

• access to the data processed about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing based on legitimate interests (Art. 21 GDPR)
• withdrawal of a given consent with effect for the future (Art. 7(3) GDPR)

17. Right to object

Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time on grounds relating to your particular situation. We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.

18. Right to lodge a complaint

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2-4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.

19. Status and changes

This privacy policy is dated October 2026. We will update it if the data processing changes or if legal requirements make this necessary.