Privacy Policy
We appreciate your interest in our hotel and our website. Protecting your personal data is very important to us. Below, we inform you in detail about how we process your data in accordance with the General Data Protection Regulation (GDPR).
1. Controller
Royal One Hotelbetriebs GmbH
Herrenrainweg 5
63067 Offenbach am Main, Germany
Managing Director: Emre Izci
Commercial Register: Offenbach am Main
HRB: DE452898891
VAT ID: DE452898891
Hotel Address:
East Five Hotel
Herrenrainweg 5
63067 Offenbach am Main
Contact:
Phone: +49 69 66 77 41 80
Fax: +49 69 66 77 41 80
Email: info@eastfivehotel.com
2. Collection and Processing of Personal Data
a) When visiting our website
When you visit our website www.eastfivehotel.com, your browser automatically sends information to our server. This information is temporarily stored in a so-called log file. The following data is collected:
- IP address of the requesting device
- Date and time of access
- Name and URL of the accessed file
- Website from which the access originated (referrer URL)
- Browser type and, if applicable, the operating system of your device as well as the name of your internet service provider
Purpose of processing:
- Ensuring a smooth connection to the website
- Guaranteeing comfortable use of the website
- Evaluating system security and stability
- Administrative purposes
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest)
b) When using our contact form
When you contact us via our contact form, we process your provided data (name, email address, message) to respond to your inquiry. Providing additional information is voluntary.
Legal basis: Art. 6 (1) (a) GDPR (consent)
c) When making a booking
When you book via our website or directly at reception, we process the following personal data:
- First name, last name
- Address
- Email address
- Phone number
- Payment details
- Stay details (dates, room category, special requests)
This data is required to process your booking, fulfill contractual obligations, and comply with legal reporting requirements (German Federal Registration Act).
Legal basis: Art. 6 (1) (b) GDPR (contract performance)
Booking system:
Bookings are managed through Mews Systems B.V., Nieuwezijds Voorburgwal 162, 1012 SJ Amsterdam, Netherlands.
A data processing agreement (Art. 28 GDPR) is in place with Mews.
d) Wi-Fi usage at the hotel
We provide free Wi-Fi for our guests. When using this service, connection data (IP address, access times, data volume) may be stored. These data are used exclusively to ensure the technical operation of the network.
e) Use of EV charging stations
When using our electric vehicle charging stations, vehicle and payment data may be processed to the extent necessary for billing purposes.
3. Data Disclosure
Your personal data will only be transferred to third parties if:
- You have given explicit consent (Art. 6 (1) (a) GDPR),
- The transfer is necessary to perform a contract (Art. 6 (1) (b) GDPR),
- A legal obligation exists (Art. 6 (1) (c) GDPR), or
- The transfer is required to safeguard legitimate interests (Art. 6 (1) (f) GDPR).
4. Cookies
Our website uses cookies. These are small text files stored on your device by your browser.
Necessary cookies:
Essential for the operation of the website.
Analytics and marketing cookies (e.g. Google Analytics):
Used to optimize our content and offerings. These are only activated after you provide consent via the cookie banner.
Legal basis: Art. 6 (1) (a) GDPR (consent).
5. Google Analytics 4 (with Consent Mode v2)
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
Google Analytics 4 uses cookies to analyze the use of this website. The information generated by these cookies is generally transmitted to a Google server in the USA and stored there.
Data processing and transfer:
Google processes this data on our behalf to evaluate website usage and compile reports on website activity. With Consent Mode v2, tracking functions are only activated after you have provided your consent. Without your consent, no personal data is stored.
IP anonymization:
Your IP address is anonymized by Google within the EU before being transferred to the USA.
Data transfer to third countries:
Transfers to the USA are based on Standard Contractual Clauses (Art. 46 GDPR).
Data retention:
Usage and event data are automatically deleted after 14 months.
Legal basis: Art. 6 (1) (a) GDPR (consent via cookie banner).
Further information:
6. Your Rights
You have the right to:
- Request access to your personal data (Art. 15 GDPR),
- Request correction of inaccurate or incomplete data (Art. 16 GDPR),
- Request deletion of your data (Art. 17 GDPR),
- Request restriction of processing (Art. 18 GDPR),
- Receive your data in a structured, commonly used, machine-readable format (Art. 20 GDPR),
- Withdraw your consent at any time (Art. 7 (3) GDPR),
- Lodge a complaint with a supervisory authority (Art. 77 GDPR).
7. Data Security
We implement appropriate technical and organizational measures to protect your data against manipulation, loss, unauthorized access, or misuse. Our security measures are continuously reviewed and updated to reflect current technology.
8. Updates to this Privacy Policy
This Privacy Policy is currently valid and was last updated in October 2025.
We reserve the right to modify this statement at any time with future effect to reflect legal or technical developments.