privacy policy

data protection declaration

Privacy policy in accordance with Art. 13 GDPR
We are pleased that you are interested in our website. The protection of your personal data is important to us. We would like to inform you about the collection, processing, and use of your data on our website, particularly in connection with bookings and the use of integrated services.
1. person in charge
Andeleum GmbH
18Arts Hotel
Friesenstraße 33
50670 Cologne
Germany
 
Tel.: +49 (0)221 292572-0
E-mail: info(at)18arts.de
 
Data Protection Officer:
Mr Heinz Schwind
E-mail: datenschutz(at)18arts.de
2. rights of data subjects
Under the GDPR, you have the following rights in particular:
  • Information about your stored data (Art. 15 GDPR)
  • Rectification of inaccurate data (Article 16 GDPR)
  • Deletion, provided that no legal obligations preclude it (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Article 20 GDPR)
  • Objection to specific processing (Art. 21 GDPR)
  • Complaint to the competent supervisory authority (Art. 77 GDPR)
3. Access data and server log files
When you visit our website, access data is automatically recorded:
  • Browser type/version
  • Operating system used
  • Referrer URL
  • IP address (abbreviated)
  • Time of access

These data are for technical security and website optimisation.
Legal basisArticle 6(1)(f) GDPR
4. cookies and consent management
We use cookies to make our website user-friendly. You can
our cookie banner determine which data may be processed.
  • Session cookies for technical session control
  • Analysis/Marketing Cookies only with your consent

Our consent management is carried out via the plugin „Complianz | GDPR/CCPA Cookie
Consent.
Legal basis:
Article 6(1)(a) or (f) of the GDPR
5. Contact
When you contact us (e.g. by email or via a form from Elementor or MetForm),
We process your details to handle your request.
 
Legal basis:
Article 6(1)(b) of the GDPR
6. booking via gauvendi
Wir nutzen die Buchungslösung der
GauVendi GmbH
Fire station street 10
Frankfurt.
 
The following data will be processed:
  • Length of stay, room choice, number of guests
  • Additional services, booking country, cancellation dates
  • Potentially IP address for geo-based additional services

Legal basis:
Article 6(1)(b) and (f) GDPR
Additionally, with your consent, an analysis by Google Analytics can be carried out.
We have concluded a data processing agreement with GauVendi in accordance with Art. 28 GDPR.
 
Data is only transferred to third countries on the basis of standard contractual clauses pursuant to Article 46(2)(c) of the GDPR.
 
Further information:
www.gauvendi.com/data-protection
7. analyse-tool (Google Analytics)
We use Google Analytics with IP anonymisation to understand user behaviour
to be evaluated. Data processing only occurs with consent.
 
Legal basis:
Article 6(1)(a) GDPR
 
You can withdraw your consent at any time via our cookie banner.
8. third-party plugins & services
We use various extensions (add-ons) within our
WordPress/Elementor installation. This may process personal data:
  • Font Awesome (Locally integrated): Display of icons
  • TranslatePress – MultilingualDisplay of multilingual content
  • Social Feed Gallery Display of Instagram posts
  • Widgets for Google ReviewsDisplaying Google Reviews
  • WP Mail SMTPSending form emails
  • UpdraftPlus, WP-Optimize, DuplicatorTechnical maintenance and security – no personal data processing
  • Yoast SEOeditorial SEO management
  • Wordfence SecurityIP and access protection – may process IP addresses for attack detection
 
Rlegal basis depending on the function:
Article 6(1)(f) or (a) of the GDPR
9. Google Maps, Vimeo, social media
  • Google Maps Presentation of travel and location (Art. 6(1)(f) GDPR)
  • VimeoDisplaying videos, including the processing of IP and user data (Art. 6 Para. 1 lit. f GDPR)
  • Facebook, Instagram, TwitterPresence, plug-ins, and links under joint responsibility according to Art. 26 GDPR. Further information: see the providers' privacy policy.
10. Applications
Online applications are processed for the purpose of carrying out the application procedure.
If employment is commenced, the data will be transferred to the personnel file.
 
Legal basis:
§ 26 Federal Data Protection Act, Art. 6(1)(b) and (f) General Data Protection Regulation
11. Order Management & Third Country Transfers
We have, with all service providers processing personal data on our behalf,
we concluded a contract processing agreement. A transfer to third countries takes place
only in compliance with the GDPR regulations.
 
 
As of July 2025
EN