Privacy policy
This website is deliberately data-minimal: no cookies, no tracking, no analytics tools. Below we explain how personal data is processed when you visit this website.
1. Controller
The controller for data processing on this website is LIBERTY STG GmbH, Karlstraße 5-7, 50679 Cologne, Germany. Managing director: Sylvia Christine Fees. Phone: +49 221 811428. Email: info@libertyhotelcologne.de.
2. Data protection officer
We have not appointed a data protection officer, as there is no legal obligation to do so. For any privacy questions, please use the contact details above.
3. Basis for processing
We process personal data only where necessary and on the basis of the General Data Protection Regulation (GDPR). The relevant legal bases are, in particular: your consent (Art. 6(1)(a) GDPR), the initiation or performance of a contract (b), compliance with legal obligations (c), and our legitimate interests in a secure and functioning website (f).
4. Accessing the website and server log files
When you access this website, our hosting provider automatically stores information transmitted by your browser in what are known as server log files. The purpose is the technical delivery, stability and security of the site and the prevention of attacks; the legal basis is our legitimate interest (Art. 6(1)(f) GDPR). Log files are deleted after a short period unless they are exceptionally required to investigate a specific security incident. The following are processed:
- IP address of the accessing device
- date and time of access
- name and URL of the file requested
- amount of data transferred and notification of successful retrieval
- the previously visited page (referrer URL)
- browser and operating system used
5. Hosting
This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. The servers are located in Germany. IONOS processes the data arising in the server log files exclusively on our behalf and on our instructions, based on a data processing agreement pursuant to Art. 28 GDPR.
6. SSL/TLS encryption
For security reasons, this website uses TLS encryption. You can recognise an encrypted connection by the “https://” prefix and the padlock symbol in your browser's address bar.
7. Cookies and local storage
This website sets no cookies. For your chosen appearance (light or dark mode) we store a single setting named “liberty-theme” in your browser's local storage. This setting remains solely on your device, contains no personal reference and is not transmitted to us or to third parties. It is technically necessary to provide the function you requested (Section 25(2) no. 2 TDDDG) and therefore does not require consent. You can clear local storage at any time in your browser settings.
8. Fonts
All fonts used on this website are stored locally on our server (“self-hosted”). No connection to third-party servers – such as Google Fonts or Adobe Fonts – is made when the page loads, and no data is transmitted to font service providers.
9. Google Maps (map, loaded only on click)
On our contact page you can display a map from the Google Maps service. For users in the European Economic Area, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
The map does not load automatically. Only when you actively click “Load map” is a connection to Google established. Data – in particular your IP address and information about your browser and device – is then transmitted to Google and may be forwarded to Google servers in the USA. We have no influence over this processing.
The legal basis is your consent, given by clicking “Load map” (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Consent is voluntary, applies only to that page view and can be withdrawn at any time with effect for the future by leaving or reloading the page without loading the map.
For transfers to the USA, Google LLC is certified under the EU-US Data Privacy Framework; standard contractual clauses apply in addition. The purpose of the integration is to make our location easier to find and to present directions attractively. Further information: Google's privacy policy at https://policies.google.com/privacy.
10. Directions link
The contact page also contains a “Get directions” link that opens Google Maps in a new tab. No data is transmitted to Google until you click this link; Google's privacy information then applies.
11. Contacting us and enquiries
You can contact us by phone or email. The input forms on this website (availability enquiry, contact form) do not send your entries to a server; instead they open your email program with a prepared message to info@libertyhotelcologne.de. Data is only transmitted to us once you send that email yourself. The purpose is to handle your enquiry and to carry out pre-contractual steps; the legal basis is Art. 6(1)(b) GDPR and our legitimate interest in responding to enquiries (f). We store your details until your enquiry has been fully dealt with; statutory retention obligations (in particular under commercial and tax law) remain unaffected.
Please note that data transmission over the internet – email communication in particular – can have security gaps and is usually unencrypted; complete protection of your data against access by third parties is not possible. Please do not send particularly sensitive information by this route.
The following details you provide may be processed:
- first and last name
- email address
- desired travel dates, number of rooms, room type, breakfast preference
- the content of your message
12. Online booking (in preparation)
An online booking flow is not currently active; booking enquiries are handled by email or phone for the time being. As soon as the planned online booking via the provider Mews is introduced, we will update this privacy policy with the applicable details – including the data processing by Mews and the booking and, where applicable, payment data processed and their retention period.
13. Recipients of the data
Within our company, only those departments that need your data to handle your request have access to it. The hosting provider IONOS is engaged as a processor. Data is transmitted to Google only after your active consent (see “Google Maps”). Beyond that, we do not pass your data on to third parties; we do not sell data.
14. Transfers to third countries
Personal data is transferred to countries outside the EU/EEA only if you load the Google Maps map by clicking or use the directions link (possible transfer to the USA, safeguarded by the EU-US Data Privacy Framework and standard contractual clauses). Otherwise your data is processed exclusively in Germany.
15. No automated decision-making
There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
16. Your rights
Under the GDPR you have the following rights; an informal message to the contact details above is sufficient to exercise them:
- access to the data processed about you (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- objection to processing based on legitimate interests (Art. 21 GDPR)
- withdrawal of a given consent with effect for the future (Art. 7(3) GDPR)
17. Right to object
Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time on grounds relating to your particular situation. We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.
18. Right to lodge a complaint
Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2-4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.
19. Status and changes
This privacy policy is dated September 2026. We will update it if the data processing changes or if legal requirements make this necessary.
