Privacy Policy

1. Name and Contact Details of the Controller

Controller:
Interdependence GmbH
Goethestr. 3
71686 Remseck
Deutschland / Germany

Phone: +49 (0) 711 400 990 30
E-mail: service@hotelshop.one

2. Collection and Storage of Personal Data as well as Nature and Purpose of Their Use

a) When visiting the website:
When you access our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until its automated deletion:

• name of the retrieved file
• date and time of retrieval
• amount of data transferred
• notification of whether the retrieval was successful
• description of the type of web browser used
• operating system used
• the previously visited page
• provider
• your IP address

The data mentioned is processed by us for the following purposes:

• ensuring a smooth connection setup of the website,
• ensuring convenient use of our website,
• evaluation of system security and stability, as well as
• for further administrative purposes.

The legal basis for the data processing is Art. 6 (1) lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.

In addition, we use cookies as well as analysis and marketing services when you visit our website. More detailed explanations can be found in sections 4 – 9 of this privacy policy.

b) When using our forms
We offer you the opportunity to contact us via forms provided on the website. For this purpose, a contact form, a returns form, a price inquiry form and a product inquiry form are available to you.

When filling out the forms, it is necessary to provide your first and last name, a valid e-mail address and your specific request, so that we know who the request comes from and can answer it. Further information can be provided voluntarily.

The data processing for the purpose of contacting us takes place in accordance with Art. 6 (1) lit. b GDPR on the basis of your specific request. The personal data collected by us for the use of the contact form will be automatically deleted after your request has been dealt with, unless another legal basis (e.g. a specific order) justifies further processing. You can revoke your given consent at any time with effect for the future. In the event of a revocation, your data will be deleted immediately.

c) When using the customer account
For every customer who registers accordingly, we set up password-protected direct access to their inventory data stored with us (customer account). Here you can view data about your completed, open and recently shipped orders and manage your data and the newsletter. You undertake to treat the personal access data confidentially and not to make it accessible to unauthorized third parties. We cannot accept any liability for misused passwords, unless we are responsible for the misuse. If you do not log out, you will remain automatically logged in. This function allows you to use part of our services without having to log in again each time.

This data processing is carried out for the performance of the contract in accordance with Art. 6 (1) lit. b GDPR.

The personal data collected by us in the context of the customer account will be deleted when you delete your customer account or in the event of a revocation, unless another legal basis justifies further processing.

d) When using our online shop
We collect, store and process your data for the entire handling of your purchase, including any subsequent warranties, for our services, technical administration and our own marketing purposes. Your personal data will only be passed on or otherwise transmitted to third parties if this is necessary for the purpose of contract processing or billing, or if you have given your prior consent. As part of order processing, for example, the service providers we use (such as carriers, logistics providers) receive the data necessary for order and contract processing. The data passed on in this way may only be used by our service providers to fulfil their tasks.

For your order, we need your correct name, address and payment data. We need your e-mail address so that we can confirm receipt of your order and communicate with you. We also use it for your identification (customer login). Furthermore, you will receive your order and shipping confirmation via your e-mail address.

This data processing is carried out for the performance of the contract in accordance with Art. 6 (1) lit. b GDPR.

The personal data collected by us in the context of the online shop will be deleted when corresponding deletion or objection claims are asserted, or when the data is no longer required for the purpose for which it was stored, unless another legal basis justifies further processing.

If you are redirected to the website of a payment service provider (e.g. PayPal) as part of the sales process, the payment service provider processes this data under its own responsibility on the basis of the privacy policy published there.

e) Product recommendations by e-mail
As our customer, you will regularly receive product recommendations for similar goods from us by e-mail. You will receive these product recommendations from us regardless of whether you have subscribed to a newsletter. In this way, we want to provide you with information about products from our range that might interest you based on your recent purchases with us. In doing so, we strictly comply with the legal requirements.

This data processing is based on our legitimate interest pursuant to Art. 6 (1) lit. f GDPR in informing our customers about relevant offers.

If you no longer wish to receive product recommendations or any promotional messages from us at all, you can object at any time. A notification in text form to the contact details specified under section 1 (e.g. e-mail, fax, letter) is sufficient for this. Of course, you will also find an unsubscribe link in every e-mail.

f) When using the electronic withdrawal function (“Withdraw from contract”)
We provide an electronic withdrawal function (“Withdraw from contract”) in our online shop, via which you can withdraw from a contract concluded with us.

If you use this function, we process the data you enter in the withdrawal form: your first and last name, your e-mail address, information identifying the contract (in particular the order number) and any voluntary information you enter in a free-text field. The purpose of the processing is the receipt, allocation, examination and handling of your declaration of withdrawal as well as the transmission of the legally required confirmation of receipt to you.

The provision of your name, the order number and your e-mail address is necessary in order to clearly allocate your withdrawal and to send you the confirmation of receipt.

This data processing is carried out for the handling of the contractual relationship in accordance with Art. 6 (1) lit. b GDPR. Insofar as we are legally obliged to send a confirmation of receipt, the processing is additionally based on Art. 6 (1) lit. c GDPR. Consent is not required for this.

The personal data collected by us in the context of the withdrawal function will be deleted as soon as it is no longer required for processing your withdrawal and handling the contract, unless statutory retention obligations (see section 10) prevent deletion.

3. Transfer of Data

Your personal data will not be transferred to third parties for purposes other than those listed below.

We only pass on your personal data to third parties if:

• you have given your express consent in accordance with Art. 6 (1) lit. a GDPR,
• the transfer is necessary in accordance with Art. 6 (1) lit. f GDPR and there is no reason to assume that you have an overriding legitimate interest in your data not being passed on,
• in the event that a legal obligation exists for the transfer pursuant to Art. 6 (1) lit. c GDPR,
• this is legally permissible and necessary in accordance with Art. 6 (1) lit. b GDPR for the processing of contractual relationships with you, as well as
• this is necessary for order processing. This means that if the shipping method “pick-up on site” is selected, the respective hotel receives the data necessary for order processing.

4. Cookies and Consent Management

We use cookies and comparable technologies on our website. Cookies are small text files that are stored on your device. You can see which cookies are used in detail at any time in our cookie preferences, which you can access via the “Cookie settings” button in the footer of our website.

Technically required cookies (categories “Technically required” and “Shop search”) are necessary for the operation of the website, for example for the shopping cart, the login to your customer account, the storage of your cookie selection and the functionality of the product search. The legal basis is § 25 (2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act) in conjunction with Art. 6 (1) lit. f GDPR; our legitimate interest lies in the technically flawless provision of our online shop.

Cookies requiring consent are only used if you have activated the respective category in our cookie banner. This applies to the categories “Statistics”, “Marketing”, “Comfort functions”, “Shopware Analytics”, “StoreLocator”, “Affiliate Marketing” and “Klaviyo Cookies”. The legal basis is your consent pursuant to Art. 6 (1) lit. a GDPR in conjunction with § 25 (1) TDDDG. Details on the underlying services can be found in the following sections of this privacy policy.

You can revoke your consent at any time with effect for the future or change your selection by opening the cookie settings again via the footer and saving your selection. The lawfulness of the processing carried out until the revocation remains unaffected.

The storage period of the individual cookies can be found in the details in the cookie settings (arrow behind the respective category). Irrespective of this, you can delete or block cookies at any time via your browser settings; in this case, not all functions of our website may be available.

5. Use of Google Analytics

If you have given us your consent via our cookie banner, we use Google Analytics 4, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google Analytics uses cookies and similar technologies that enable an analysis of your use of our website. In particular, information about pages visited, time spent, device and browser used as well as your approximate location is processed. In Google Analytics 4, IP addresses are not logged or stored, but only used for a rough geographical classification and then discarded.

The collected data may be transferred to servers of Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework; the transfer of data to the USA is therefore based on the adequacy decision of the EU Commission (Art. 45 GDPR).

The legal basis for the use of Google Analytics is exclusively your consent pursuant to Art. 6 (1) lit. a GDPR in conjunction with § 25 (1) TDDDG. You can revoke your consent at any time with effect for the future by adjusting your selection via the “Cookie settings” button in the footer of our website.

The data stored at user and event level is automatically deleted after 14 months. Further information on data processing by Google can be found at https://policies.google.com/privacy.

6. Use of Hotjar

If you have given us your consent via our cookie banner, we use Hotjar, an analysis service of Hotjar Ltd., Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta (part of the Contentsquare group).

Hotjar helps us to better understand the use of our website. In particular, the following information is processed: anonymized IP address, device type and screen size, browser and operating system, approximate location (country only), pages visited as well as interactions such as clicks, scrolling and mouse movements. The processing takes place on servers within the European Union.

The legal basis is exclusively your consent pursuant to Art. 6 (1) lit. a GDPR in conjunction with § 25 (1) TDDDG. You can revoke your consent at any time with effect for the future by adjusting your selection via the “Cookie settings” button in the footer of our website.

Further information can be found in Hotjar’s privacy policy: https://www.hotjar.com/legal/policies/privacy/

7. Use of Tawk.to

For our live chat, we use the service tawk.to of tawk.to Inc., 187 East Warm Springs Rd, SB298, Las Vegas, NV 89119, USA. The chat is only loaded once you have given your consent via our cookie banner or actively start the chat.

When you use the chat, your chat history, information you voluntarily provide, your IP address at the time of the chat and your country of origin are processed in order to answer your inquiry and to ensure the quality of our customer service.

Data may be transferred to the USA in the process. tawk.to is certified under the EU-U.S. Data Privacy Framework; the transfer is therefore based on the adequacy decision of the EU Commission (Art. 45 GDPR).

The legal basis for the use is your consent pursuant to Art. 6 (1) lit. a GDPR in conjunction with § 25 (1) TDDDG. You can revoke your consent at any time with effect for the future by adjusting your selection via the “Cookie settings” button in the footer. Alternatively, you can reach us at any time by e-mail at service@hotelshop.one or via our contact form.

Further information can be found in tawk.to’s privacy policy: https://www.tawk.to/privacy-policy/

8. Search Technology doofinder

Search technology “doofinder, powering results”. To make your visit to our website attractive and to present you with faster and better search results, we use the search technology “DooFinder” (hereinafter DF). This serves to protect our legitimate interest, which prevails in the context of a balancing of interests, in an optimized presentation of our offer pursuant to Art. 6 (1) lit. f GDPR. The operator of the technology is DooFinder S.L., Madrid 28037, Rufino González 23 bis, 1º 1, Spain. In order to use the DF search function, the browser you use must connect to the DF servers. As a result, DF becomes aware that our website was accessed via your IP address.

9. Shopware Analytics

Purpose of the processing: Together with our shop software service provider, we evaluate, as joint controllers, certain information about our customer base (e.g. the customer group, pages visited, click paths, date and time of the visit, information about the device used (resolution, resolution density, operating system), referrer URL, information about the browser used, locale, search queries and the time zone). This information is processed by an external service provider and made available to us in near real time so that we can monitor the use of our website and improve our offers.

Legal basis: Your consent pursuant to Art. 6 (1) lit. a GDPR in conjunction with § 25 (1) TDDDG, which you give via the category “Shopware Analytics” in our cookie banner. You can revoke your consent at any time with effect for the future by adjusting your selection via the “Cookie settings” button in the footer of our website.

Data categories: Derivations from master and contact data (the customer group, no individual customer data), usage data, connection data. Recipients of the data: shopware AG, Ebbinghoff 10, 48624 Schöppingen, Germany (as joint controller), IT service providers. The essence of the joint controllership: The joint controllership exists between us and shopware AG; the data is collected in our shop and then transferred to servers of shopware AG or its service providers. With the exception of obtaining your consent for the use of cookies or comparable technologies and the fulfilment of these information obligations, all obligations, in particular the implementation of data subject rights, are the responsibility of shopware AG, which you can reach at legal@shopware.com. You can also assert your data subject rights with us; we will then forward your request to shopware AG accordingly. shopware AG can derive behaviour patterns in our shop from the collected data, but cannot attribute this data to you as a person. Intended third-country transfer: None.

10. Deletion of Data

The data stored by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations.

If the users’ data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to user data that must be retained for commercial or tax law reasons.

In accordance with legal requirements, retention takes place for 6 years pursuant to § 257 (1) HGB (German Commercial Code; e.g. commercial letters, accounting documents) and for 10 years pursuant to § 147 (1) AO (German Fiscal Code; e.g. commercial and business letters).

11. Data Subject Rights

You have the following data subject rights:

a) Right of access
You have the right to request confirmation from us as to whether personal data concerning you is being processed.

b) Rectification/erasure/restriction of processing
Furthermore, you have the right to demand that

• inaccurate personal data concerning you be rectified without delay (right to rectification);
• personal data concerning you be erased without delay (right to erasure) and
• the processing be restricted (right to restriction of processing).

c. Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and to transmit this data to another controller.

d. Right of revocation
You have the right to revoke your consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the revocation.

e. Right to object
If the processing of personal data concerning you is necessary for the performance of a task carried out in the public interest (Art. 6 (1) lit. e GDPR) or to protect our legitimate interests (Art. 6 (1) lit. f GDPR), you have a right to object.

f. Right to lodge a complaint
If you are of the opinion that the processing of personal data concerning you violates the GDPR, you have the right, without prejudice to any other legal remedies, to lodge a complaint with a supervisory authority.

12. Voucher Offers of Sovendus GmbH

For the selection of a voucher offer that is currently of interest to you, the hash value of your e-mail address and your IP address are transmitted by us in pseudonymized and encrypted form to Sovendus GmbH, Hermann-Veit-Str. 6, 76135 Karlsruhe, Germany (Sovendus) (Art. 6 (1) f GDPR). The pseudonymized hash value of the e-mail address is used to take into account any objection to advertising from Sovendus (Art. 21 (3), Art. 6 (1) c GDPR). The IP address is used by Sovendus exclusively for data security purposes and is usually anonymized after seven days (Art. 6 (1) f GDPR). In addition, we transmit the order number, order value with currency, session ID, coupon code and time stamp in pseudonymized form to Sovendus for billing purposes (Art. 6 (1) f GDPR). If you are interested in a voucher offer from Sovendus, there is no advertising objection for your e-mail address and you click on the voucher banner displayed only in this case, we will transmit your title, name, postcode, country and your e-mail address in encrypted form to Sovendus for the preparation of the voucher (Art. 6 (1) b, f GDPR). Further information on the processing of your data by Sovendus can be found in the online privacy policy at www.sovendus.de/datenschutz.

13. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy in the event of any change in the legal situation, the service or the data processing. However, this only applies with regard to statements on data processing. If user consent is required or if components of the privacy policy contain provisions of the contractual relationship with the users, the changes will only be made with the consent of the users.

Users can regularly inform themselves about any changes in this privacy policy. Version of this privacy policy: July 2026.