Privacy

The short version

This site sets no cookies, embeds no advertising or analytics services and does not recognise you. Fonts, images and scripts are served from our own server. Even while you are only reading, nothing that could identify you leaves this site.

We do count how often certain buttons are pressed and which sections are read, without recording who it was. The details are below, under “What we count”.

It is different only where you identify yourself: in the guest centre and in the in-house shop you tell us your booking. What happens then is described under “Guest centre”, “Your invoice” and “In-house shop”.

Controller

Graf zu Solms-Wildenfels Vermögensverwaltungsgesellschaft mbH, Burgstraße 20, 30826 Schloss Ricklingen, Germany, info@schlossresidenz.de, telephone +49 5031 176900.

Server log

Our web space is operated by ALL-INKL.COM, Neue Medien Münnich, Hauptstrasse 68, 02742 Friedersdorf, Germany. When a page is requested, the server logs the IP address, the time, the file requested, the volume transferred and the browser identification. This is technically necessary to deliver the site and to detect attacks. The legal basis is Art. 6(1)(f) GDPR, namely our legitimate interest in secure operation. Logs are deleted after seven days at the latest.

Booking system

Our booking system is provided by Smoobu GmbH, Wattstrasse 10, 13355 Berlin, Germany. It is loaded only when you click “See availability and rates”; no connection is made before that. From that click, Smoobu processes your IP address and whatever you enter there. The legal basis is Art. 6(1)(b) GDPR, because without this processing no booking can be made. A data processing agreement under Art. 28 GDPR is in place with Smoobu.

After you book, the booking system sends you, on our behalf, the confirmation, your room code on the day of arrival and, at departure, the way to your invoice. For this we use the e-mail address from your booking.

Guest centre

In the guest centre at schlossresidenz.de/kundencenter guests find their booking, the details for arrival, booked extras and the way to the digital guest guide and to the invoice. You open it with your booking number and your surname. There is no account, no password and no cookie, and nothing is stored on your device.

With these two details our server looks up your booking in our booking system at Smoobu and shows it to you: your name, the apartment, the dates, the number of guests, the booking channel and booked extras. Your postal address, your e-mail address and your telephone number never appear there. Each page is created when it is requested; our web server keeps nothing of your booking permanently. The only thing stored there is a directory that maps checksums of the portals’ booking numbers to our own booking numbers, so that a number from Booking.com or Expedia leads to the right booking. It contains no names and is renewed continuously.

Whether you are a regular guest is worked out when the page is requested, from your earlier stays with us that are held in the booking system under your full name. What is shown is the number of stays and nights; this count is not stored. If you choose an extra as a regular guest, we enter it with the time on your booking and notify our house by e-mail. That message states the apartment, the dates and the booking number, not your name.

So that nobody can try out other people’s booking numbers, our server counts failed attempts. For this it records a checksum of the IP address and the time of the failed attempts. Only the last ten minutes are taken into account; the entries are deleted regularly, as a rule within one day.

The legal basis is Art. 6(1)(b) GDPR, because this is how we handle your stay. For the protection against guessing it is Art. 6(1)(f) GDPR, namely our legitimate interest in keeping your booking away from other eyes. The calendar file with your stay is created only when you click for it and is not stored by us.

Your invoice

You receive your invoice through the guest centre. From there we forward you to your personal invoice form at our service provider bnbills (bnbills UG (haftungsbeschränkt), Coburger Strasse 7, 96472 Rödental, Germany). There you enter your billing address, for example that of your company, request your invoice and view it.

The invoice itself is written in our accounting software Lexware Office (Haufe-Lexware GmbH & Co. KG, Munzinger Strasse 9, 79111 Freiburg, Germany). For this, both providers receive the details of your booking that belong on an invoice: name, address, e-mail address, dates, services and amounts. The legal basis is Art. 6(1)(b) and (c) GDPR, because we owe you an invoice and must keep it. We keep invoices for as long as commercial and tax law require.

In-house shop

In the in-house shop at schlossresidenz.de/hausladen house guests buy drinks, wine or a breakfast for visitors. With a code from your apartment you reach the digital guest guide of your current booking without entering anything; otherwise you choose your apartment and enter your surname. Our server checks in the booking system which booking is currently running in that apartment and forwards you. It stores nothing about you in the process; it counts failed attempts as in the guest centre.

The guest guide and the purchase run at Smoobu. Payment is made there by card or Klarna through the payment service Stripe (Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland). We neither see nor store your payment details. The legal basis is Art. 6(1)(b) GDPR.

Live rates

The “from” rate on this site is fetched by our own server from our booking system and stored as a file. Your browser loads that file from us, not from Smoobu. No additional data about you is created.

What we count

When you open the booking area, move on to the booking system or tap our telephone number or email address, the page sends our own server a keyword: which event, which page, which language, and whether you are on a phone or at a desk. When you move on to the booking system, the chosen unit and the chosen dates are added.

When you leave a page, it also reports once which sections and pictures were on screen and roughly for how long, how far you scrolled, which picture you tapped, which page of this website you came from and where within this website you went next. If you came from elsewhere, it only says “from outside”. This shows us which parts of the site are read and where visitors stop.

What is not stored: your IP address, your browser identification, your screen size and the outside page you came from. Above all, no identifier is issued that would let two of these entries be recognised as the same person. The counts show how often something happens and which parts of the site are read, not who does it. Several pages of one visit cannot be joined into one visit.

Nothing is stored on your device for this and nothing is read from it. The legal basis is Art. 6(1)(f) GDPR, namely our legitimate interest in knowing which parts of this site are used. The counts are held on our server outside the web directory and are deleted after 90 days.

If you arrive from an advertisement

If you click one of our advertisements on Google or Bing, the advertising service appends a click identifier to this site’s address. We pass it on to the booking system and record it when you move on to the booking system. It tells us nothing about you; it only tells us which advertisement someone clicked.

If such a click leads to a booking, we report that identifier back to the advertising service together with the fact that a booking was made. Your name, your address and the rest of the booking data are not included. We need this to see which advertisement is worth its money, and to stop paying for the others.

If you arrive without an advertisement there is no such identifier, and none is created. The legal basis is Art. 6(1)(f) GDPR, namely our legitimate interest in advertising economically. These entries are also deleted after 90 days.

Storage in your browser

When you choose dates, your browser remembers arrival, departure and the number of guests so that you do not have to enter them again on the next page. This happens in your browser session storage and ends as soon as you close the tab.

The storage itself is not transmitted to us, and no identifier is set that could recognise you. When you search for free units, the page sends the dates and the number of guests to our server, which checks availability in our booking system. When you move on to booking, unit, dates and number of guests are part of the address with which the booking system opens.

Weather

The colour mood of this site follows the time of day and the weather in Schloss Ricklingen. Our server fetches the weather once an hour from the German Weather Service via the Bright Sky service. Your browser queries nothing there, it only loads a finished colour file from us.

Enquiries by e-mail and telephone

If you write or call, we process what you tell us in order to answer. The legal basis is Art. 6(1)(b) GDPR for booking enquiries and Art. 6(1)(f) otherwise. We delete the enquiry once it is settled and no retention period applies.

Our mailboxes are hosted by Microsoft (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland).

Your rights

You may request access to your data (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and you may object to processing based on legitimate interests (Art. 21). A message to info@schlossresidenz.de is enough.

You may also lodge a complaint with a supervisory authority; for us that is the State Commissioner for Data Protection of Lower Saxony, Prinzenstrasse 5, 30159 Hanover, Germany.

Status

This statement applies from 10 November 2026 and describes the site as it is. If the site changes, this statement changes with it.