Skip to content

Privacy Policy

1. Data protection, person responsible and data protection officer
In the following we inform you about the collection of personal data when using our website.
Personal data are all data that can be related to you personally, such as B. Name, address, email
addresses, telephone number, user behavior.
The person responsible for processing your personal data through this website is
Hostel Berlin Betriebsgesllschaft mbH
Privacy Policy Officer: Mario Mandac
Potsdamer Strasse 180
10783 Berlin
Germany
You can reach our data protection officer at the email mario.mandac@hotelite-goup.com or our
postal address with the addition “z.Hd. des Datenschutzbeauftragen Mario Mandac”.

2. Note on data transfer to the USA
Our website includes tools and plugins from companies based in the USA. If these are active,
your personal data can be passed on to the US servers of the respective companies. We would
like to point out that the USA is not a safe third country within the meaning of EU data
protection law. US companies are obliged to surrender personal data to security authorities
without you as the person concerned being able to take legal action against this. It cannot
therefore be ruled out that US authorities (e.g. secret services) process, evaluate and
permanently store your data on US servers for monitoring purposes. We have no influence on
this processing.

3. Personal data
(a) If you only use the website for information purposes, i.e. if you do not register or otherwise
provide us with information, we only collect the personal data that your browser transmits to
our server. If you would like to view our website, we collect the following data, which is
technically necessary for us to display our website to you and to ensure stability and security
(legal basis is Article 6 Paragraph 1 Sentence 1 lit.f GDPR):
– IP-Address
– Date and time of the request
– Time zone difference to Greenwich Mean Time (GMT)
– Content of the request (specific page)
– Access status / HTTP status code
– Amount of data transferred in each case
– Website from which the request came
– Browser
– Operating system and its interface
– Language and version of the browser software

For security reasons (e.g. to investigate acts of abuse or fraud), log file information is stored for a
maximum of 7 days and then deleted. Data, the further storage of which is necessary for
evidence purposes, are excluded from deletion until the respective incident has been finally
clarified. The legal basis is Article 6 Paragraph 1, Letter f GDPR.
(b) In addition, personal data will only be collected by us and only to the extent that you have
provided this data to us, e.g. B. Submit in the context of a contact or an application. We treat this
data confidentially and only use it for the original reason and purpose of transmission, regularly
processing and handling your request. In principle, the data will not be transmitted to third
parties unless this is required or permitted by law, you have given us your consent or an official
order has been issued. If your request is directed to one of our group companies, we will of
course forward your request to them. If you contact us by email, your email will be saved in our
mail system. We can save your request and the related data in our CRM system. The e-mails
themselves are not stored in encrypted form. Our contact form is encrypted for transport via SSL
/ TLS, which you can recognize by the “https” in front of the URL. Our mail server also masters
the common transport encryption protocols. The legal basis for this is Article 6 Paragraph 1
Letter b GDPR.

4. Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google
Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior of website visitors. The
website operator receives various usage data, such as page views, length of stay, operating
systems used and the origin of the user. This data may be summarized by Google in a profile that
is assigned to the respective user or their device. Google Analytics uses technologies that enable
the user to be recognized for the purpose of analyzing user behavior (e.g. cookies or device
fingerprinting). The information collected by Google about the use of this website is usually
transmitted to a Google server in the USA and stored there.
This analysis tool is used on the basis of Article 6 Paragraph 1 lit.f GDPR. The website operator
has a legitimate interest in analyzing user behavior in order to optimize both its website and its
advertising. If a corresponding consent has been requested (e.g. consent to the storage of
cookies), processing takes place exclusively on the basis of Article 6 Paragraph 1 lit. the consent
can be revoked at any time.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission.
Details can be found here:
https://privacy.google.com/businesses/controllerterms/mccs/.

IP anonymization
We have activated the IP anonymization function on this website. As a result, your IP address will
be shortened by Google within member states of the European Union or in other contracting
states of the Agreement on the European Economic Area before it is transmitted to the USA. The
full IP address will only be sent to a Google server in the USA and shortened there in exceptional
cases. On behalf of the operator of this website, Google will use this information to evaluate
your use of the website, to compile reports on website activity and to provide the website
operator with other services relating to website activity and internet usage. The IP address
transmitted by your browser as part of Google Analytics will not be merged with other Google

Browser Plugin
You can prevent Google from collecting and processing your data by downloading and installing
the browser plug-in available under the following link:
https://tools.google.com/dlpage/gaoptout?hl=en.
You can find more information on how Google Analytics handles user data in Google’s privacy
policy:
https://support.google.com/analytics/answer/6004245?hl=en.

Order processing
We have concluded an order processing contract with Google and fully implement the strict
requirements of the German data protection authorities when using Google Analytics.

Demographic characteristics in Google Analytics
This website uses the “demographic characteristics” function of Google Analytics in order to be
able to show website visitors appropriate advertisements within the Google advertising network.
This allows reports to be created that contain information on the age, gender and interests of
the site visitors. This data comes from interest-based advertising from Google as well as from
visitor data from third-party providers. These data cannot be assigned to a specific person. You
can deactivate this function at any time via the ad settings in your Google account or generally
prohibit the collection of your data by Google Analytics as described in the point “Objection to
data collection”.

5. Hosting with NetEffect
We host our website at NetEffect. The provider is Neteffect, Ludwig-Richter-Straße 20, 52329
Wuppertal, Germany. When you visit our website, your personal data will be processed on the
Neteffect servers. The data transfer is based on the EU standard contractual clauses. Details can
be found here: https://net-effect.de/

6. Social Media
The legal basis for this processing of your personal data is our legitimate interest in
communicating with our interested parties and customers as well as the analysis and further
development of services and products as well as the improvement of business processes (Article
6 Paragraph 1 lit.f GDPR). Direct customer contact also takes place via our social media support,
whereby the processing is based on our contractual relationship or the pre-contractual measures
with interested parties (Article 6 Paragraph 1 lit.b GDPR).

Further information on the social media platforms:

Facebook and Instagram: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour,
Dublin 2, Irland
We are jointly responsible with Facebook for the processing of Insights data on the Facebook fan
page. The corresponding agreement according to Article 26 GDPR can be found here:
https://www.facebook.com/legal/terms/page_controller_addendum. For more information on
Page Insights, see
https://www.facebook.com/legal/terms/information_about_page_insights_data.
The general use of Facebook is at your own risk. You can find Facebook’s data protection
information directly on our Facebook fan page.
You can edit and object to your requests for personalized advertising by Facebook at any time in
your Facebook settings.

YouTube: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
You can find further information on data protection and the personal data collected during the
integration with Google / YouTube in the following data protection
declaration: https://www.google.com/policies/privacy/
An opt-out is also possible: https://adssettings.google.com/authenticated

LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland.
We also maintain a company profile on the LinkedIn network platform.
If you are a member there, LinkedIn can assign the access to the content and functions on our
profile to your user profile there. For more information, please refer to the data protection
information of LinkedIn Ireland at:
https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy

Xing: New Work SE, Dammtorstraße 30, 20354 Hamburg, Deutschland.
We also maintain a company profile on the network platform on Xing.
If you are a member there, Xing can assign the access to the content and functions on our profile
to your user profile there. For more information, please refer to the data protection information
of New Work SE at:
https://privacy.xing.com/en/datenschutzerklaerung.

7. Video content
Youtube and Vimeo
We embed videos on our website. The content of these videos is saved directly on the platforms
and integrated on our site. If you call up such a video, the IP address, technical information such
as browser, operating system and basic device information as well as the website you have
visited will be communicated. In addition, we have embedded the YouTube videos in a data
protection-friendly manner in the “extended data protection mode”.
Personal data is only transmitted when you call up a video. Only then will a server connection to
Youtube and Vimeo be established and a corresponding cookie will be set, which is used to save
your settings. By calling up the videos you leave our area and enter the external platforms of
Youtube and Vimeo, which are beyond our sphere of influence.
Before you call up a video, you will be informed about it again. If you have an account with the
provider of the video service, they can identify you if necessary. You can avoid this by logging out
of your account before playing a video.
The legal basis for activating these videos is your consent in accordance with Article 6 (1) (a)
GDPR, which is related to your consent to the use of cookies.

Provider of the YouTube platform
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. Google Ireland Limited,
Gordon House, Barrow Street, Dublin 4, Ireland. Further information on data protection at
Google / YouTube can be found here: https://www.google.com/policies/privacy/. A general
advertising opt-out is possible here:
https://adssettings.google.com/authenticated.

Vimeo platform provider
Vimeo, LLC, 555 West 18th Street, New York, NY 10011, USA. Vimeo, LLC, 555 West 18th Street,
New York, NY 10011, USA. Further information on data protection at Vimeo can be found
here: https://livestream.com/legal/cookie-preferences

8. Your rights
Right to information: According to Article 15 GDPR, you have the right to information at any
time as to whether we are processing your personal data. If this is the case, this results in further
information obligations on our part.
(2) Right to correction: You also have the right to correct the data in accordance with Article 16
GDPR, to delete the data in accordance with Article 17 GDPR and to restrict the processing of the
data in accordance with Article 18 GDPR, if there are no other legal requirements to the
contrary.
(3) Right to erasure: You can of course revoke the consent you have given in accordance with
Article 6 (1) (a) or Article 9 (2) (a) GDPR to process the data at any time without giving reasons.
This does not affect the legality of the processing until the revocation.
(4) Right to restriction of processing: In the following cases you can contact us regarding a
restriction of processing in accordance with Article 18 GDPR:
– You have denied the accuracy of the data and we should not use it in the meantime until
the final check
– The processing is unlawful, but you do not want deletion, but prefer a restriction of the
processing
– We no longer need the data and would delete it, but you still need it to assert, exercise or
defend legal claims
– You have lodged an objection to the data processing, but this is still being checked.
In the event of a restriction, we ensure that the personal data cannot be further processed or
changed by us. If the processing restriction has been restricted according to the above
conditions, you will be informed by the person responsible before the restriction is lifted.
(5) Right to data portability: You have the right to receive the personal data relating to you that
you have provided to us in a structured, common and machine-readable format and, if
necessary, to transmit it to third parties. The right to data portability does not apply to the
processing of personal data that is necessary for the performance of a task that is in the public
interest or is carried out in the exercise of official authority that has been transferred to the
person responsible in accordance with Article 20 GDPR.
(6) Right of objection: In addition, you have the right to object to the processing of the data in
accordance with Article 21 GDPR, in particular when processing on the basis of Article 6
Paragraph 1 lit. When exercising such an objection, we ask you to explain the reasons why we
should not process your personal data as we have done. In the event of your justified objection,
we will examine the situation and either stop or adjust the data processing or show you our
compelling reasons worthy of protection on the basis of which we will continue processing.
(7) Right to lodge a complaint: You also have the right to lodge a complaint with the supervisory
authority responsible for you, which you can find here
(https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html)



Status: May 2024