Privacy policy

Last updated: 2026-11-06

1. Controller

Helios NRG GmbH, Ostheimer Allee 6, 64832 Babenhausen, Germany
Managing director: Frank Wetterauer
Email: [email protected]

2. Hosting and server log files

When you visit the site, the web server automatically records technical data: IP address, date and time of the request, pages requested, browser type and version, operating system and referrer URL. These logs are processed to deliver the site securely and stably and to detect and defend against attacks.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, functional website). Log files are deleted after 30 days.

3. "Report a hotel" form and email

If you use the Report a hotel form or write to us, we process the data you provide (name, email address, the details of your stay and your message) to read your report and to reply to you. Your entries are sent over an encrypted connection to a small program on our own web server, which forwards them to us by email; the content of your message is not stored in the server logs. We do not publish your report or your name without asking you.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in answering reports and enquiries). We delete the data once your report has been dealt with, unless statutory retention obligations apply.

4. Newsletter

If you tick the newsletter box on the form, we also keep your name and email address to send you our newsletter about new and interesting hotel finds, and for nothing else.
Legal basis: your consent, Art. 6(1)(a) GDPR. You can withdraw it at any time with effect for the future, by the unsubscribe link in each newsletter or by writing to us.

5. Cookies and similar technologies

This website uses only technically necessary technologies. The only item stored in your browser (local storage, no cookies) is your answer to the notice banner, so that the banner is not shown again. It is needed to provide the service you requested and does not require consent under § 25(2) TDDDG. You can reopen the banner at any time via "Cookie settings" in the footer; clearing your browser data removes the entry. We do not use analytics, advertising or tracking cookies.

6. Booking links and affiliate links

When you follow a link to a hotel or booking site you leave this site, and the destination sets its own cookies under its own privacy policy. Affiliate links carry a code identifying us as the referrer so that the platform can attribute a booking. No data is transmitted to those sites unless you click a link.

7. Recipients and international transfers

We share personal data only with service providers acting on our instructions (such as hosting and email) or where we are legally required to. To protect the site and deliver it quickly, it is served through Cloudflare, Inc. (USA) as a content delivery and security service, which processes technical connection data such as your IP address. Cloudflare is certified under the EU-US Data Privacy Framework; further safeguards are the EU standard contractual clauses.

8. Your rights

You have the right to access your data (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), to object to processing based on legitimate interests (Art. 21), and to withdraw any consent at any time with effect for the future (Art. 7(3)). To exercise these rights, contact us at the address above.

9. Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany, www.datenschutz.hessen.de

10. Security and changes

This site uses TLS/SSL encryption. We may update this policy to reflect legal or technical changes; the current version is always available on this page.