The protection and security of your personal data is very important to us. Therefore, we ask you to carefully read the following statement concerning the handling (collection, processing and use) of your personal data.

The privacy policy comes into effect when you access our website, make a reservation and register to receive our newsletter. By making a reservation or registering for the newsletter, you agree to our General Terms and Conditions and to the provisions outlined there. ACHAT processes your personal data, which is collected when you visit our websites, in accordance with the statutory provisions, in particular in accordance with the EU Basic Data Protection Regulation (DSGVO).

We use your personal data for the following purposes: To provide the services you request, such as reservations or participation in promotional contests. To fulfil our obligations from any contracts concluded between you and ourselves, such as room reservations. To enable you to participate in interactive offers, and to inform you about changes to our services, both options are available to you, if you wish.

Children and young people under the age of 18 should only send us personal data with the prior consent of their legal guardians.

Responsible is ACHAT Hotel- und Immobilienbetriebsgesellschaft mbH, Haarlachweg 5, 68163 Mannheim, Telefon +49 (0) 621 4807 0, Telefax +49 (0) 621 4807 99, E-Mail:

Managing Director: Philipp Freiherr v. Bodman

You can reach our data protection officer at the following address


1. Collection, processing and use of personal data

1.1 When visiting the website

When browsing our website information is automatically sent to our website server by the browser used on your end device. This information is temporarily stored in a so-called log file. The following information is recorded without your involvement and stored until it is automatically deleted:

  • IP address of the requesting computer,
  • date and time of access,
  • name and URL of the retrieved file,
  • website from which access is made (referrer URL),
  • browser used and, if applicable, the operating system of your computer and the name of your access provider.

The given data are processed by us for the following purposes:

  • Ensuring a smooth connection of the website,
  • Ensuring convenient use of our website,
  • Evaluation of the system security and stability and
  • for other administrative purposes.

The legal basis for data processing is Art. 6 para. 1 S. 1 lit. f German Data Protection Act (GDPA). Our legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the collected data for the purpose of drawing conclusions regarding your person.

We also use cookies and analysis services when you visit our website. More detailed explanations can be found under items 3 and 4 of this Privacy Policy.


1.2. During the booking procedure

In order to provide you with an online booking procedure, it is necessary to involve service providers. If an online booking is made, this is done on the pages of our service providers. These are:

TourOnline AG
Borsigstraße 26
D-73249 Wernau

Hotelpartner Germany GmbH
Steinstrasse 27
D-20095 Hamburg

The service providers act for us as order processors within the meaning of Art. 28 DSGVO and are obliged to protect your data by corresponding agreements. The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. b DSGVO. The following data from you is required to carry out a booking:

  • Name,
  • address,
  • billing address,
  • e-mail address,
  • other contact information such as telephone numbers,
  • data on the means of payment - in particular the credit card number and the duration of validity of the credit card.

The credit card data is stored solely for the purpose of securing the booking made, making a down payment or carrying out a cancellation. Your data will only be passed on to the credit card company for billing purposes.

1.3 When registering for the newsletter

To keep you informed about news, current events and special offers from the world of ACHAT Hotels, you have the opportunity to subscribe to our newsletter. The newsletter comes out about every two months.

If you have expressly consented in accordance with Art. 6 para. 1 sentence 1 lit. a DSGVO, we will use your e-Mail address to regularly send you our newsletter or press releases. To subscribe to the newsletter or press releases, you must provide ACHAT with your e-Mail address. However, apart from entering your e-Mail address, it is also possible for you to receive the newsletter or press releases under a pseudonym. Besides the e-Mail address, no further information about you will be stored, unless you voluntarily provide us with this information to subscribe to special newsletters or press services or to improve our offers. Only a small group of specially authorized persons has access to the server. This data will not be passed on to third parties!

1.4 When using our contact offers

For questions of any kind, feel free to contact us using the forms provided on the website. It is necessary to provide a valid e-Mail address so that we know who the inquiry is from and are able to answer it. Further information can be provided voluntarily.

Data processing for the purposes of making contact to us is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a German Data Protection Act (DSGVO) on the basis of your voluntarily given consent.

1.5 Deletion

Should you be contacted or receive information from our company in any other way, the legal basis for the data processing carried out is Art. 6 Para. 1 S. 1 lit. f German Data Protection Act. (GDPR). If you so wish, we will delete your data at any time, unless we are legally obliged to retain it. A request sent to is sufficient for this purpose. It is possible to unsubscribe from the newsletter or other information services provided by our company at any time, for example, via the link at the end of each newsletter or press release. Alternatively, you can also send your unsubscribe request to by e-Mail. The personal data we collect for the use of the contact forms will be automatically deleted after handling your request.

2. Forwarding to third parties

Your personal data will not be transferred to third parties for purposes other than those listed below.

We only pass on your personal data to third parties if:

  • you have given your express consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR,
  • for the case that there is a legal obligation to pass on information in accordance with Art. 6 Para. 1 S. 1 lit. c GDPR and
  • this is legally permissible and is required in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR for the processing of contractual relationships with you.

The ACHAT web pages contain links to third-party websites. If you click on such links, you will leave the ACHAT website. These sites or their privacy policies, which may deviate from the ACHAT privacy policy, are not under ACHAT's control. We are not responsible for information or content on third-party websites. Personal data that you pass on to third parties is not covered by the ACHAT Privacy Policy. Therefore, we recommend that you carefully read the privacy policy of each company before you provide personal information to them.

3. Use of cookies

In order to extend the range of our Internet offer and to make the use of our website more comfortable for you, we use so-called "cookies" on some of our pages. With the help of these "cookies", data can be stored on your computer when you visit our website. These cookies are automatically deleted after a defined time. The data processed by cookies is required for the above-mentioned purposes in order to safeguard our legitimate interests and those of third parties in accordance with Art. 6 para. 1 sentence 1 lit. f of the German Data Protection Act. If you wish to do without the advantages of these cookies, you can consult the help function of your browser to find out how to set your browser to prevent it from accepting new cookies or how to delete existing cookies. There you will also find out how to block your browser for all new cookies or which settings you have to make in order to be notified of new cookies.

4. Use of Google Analytics

This website uses Google Analytics, a web analysis service of Google Inc. (,  Anschrift: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter „Google“). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there. You can also prevent the storage of cookies by adjusting your browser software accordingly; however, we would like to point out that in this case you may not be able to fully use all functions of this website. You can also prevent the data generated by the cookie and related to your use of the website (including your IP address) from being sent to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: Users can still prevent the collection by Google Analytics by clicking on the following link. An opt-out cookie is set to prevent future collection of your information when you visit this site: Disable Google Analytics.

IP anonymization is active on this website. For this reason, your IP address will be abbreviated by Google within member states of the European Union or in other states that are party to the Agreement on the European Economic Area. Only in very exceptional cases is the full IP address transferred to a Google server in the USA and abbreviated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide further services to the website operator in connection with website and internet use. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google. Our legitimate interest in data processing also lies in these purposes. The legal basis for the use of Google Analytics is § 15 para. 3 TMG or Art. 6 para. 1 lit. f GDPR. The data sent by us and linked to cookies, user IDs or advertising IDs are automatically deleted after 14 months. The deletion of data for which the retention period has been reached is automatically performed once a month.

Further information on the use of data for advertising purposes by Google, setting and objection possibilities can be found on the websites of Google:, ("Data use by Google in your use of websites or apps of our partners"), ("Use of data for advertising purposes"), ("Manage information that Google uses to serve ads to you"), and ("Determine which ads Google shows you"). Further information on data protection in connection with Google Analytics can be found in the Google Analytics help (

5. Use of the visitor action pixel of Facebook

This website uses the visitor action pixel of
Facebook Inc.
1601 S. California Ave,
Palo Alto, CA 94304, USA

This makes it possible to track the behavior of users after they have been redirected to the provider's website by clicking on a Facebook ad. This process is used to evaluate the effectiveness of Facebook Ads for statistical and market research purposes and can help optimize future advertising efforts. For us, the data collected is anonymous, so we cannot draw conclusions about the users' identity. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Usage Policy ( You may enable Facebook and its partners to serve ads on and off Facebook. A cookie may also be stored on your computer for these purposes.

6. Privacy Policy due to the use of a YouTube plugin

This website contains at least one plugin from YouTube, belonging to Google Inc. based in San Bruno/California, USA.

If you are on YouTube 
As soon as the page of this homepage equipped with a YouTube video is accessed, and you start the playback, a connection to the servers of YouTube is established. This informs the YouTube server which specific page of this website has been visited. If you are logged in, your surfing behavior will be assigned to your personal profile.

You can disable this option, if you log out of Youtube beforehand. Further information on the collection and use of your data by YouTube can be found in the notes on data protection at

For more information on data protection at "YouTube", please refer to the provider's privacy policy at:

7. Security

ACHAT uses technical and organizational security measures to protect the data we have under our control against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons. Our security measures are continuously improved to reflect technological developments.

8. Rights of persons affected

You have the right:

  • to request information about your personal data processed by us in accordance with Art. 15 of the German Data Protection Act. In particular, you may request information as to the purposes of the processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the envisaged storage period, the existence of a right of rectification, cancellation, restriction of processing or opposition, the existence of a right of appeal, the origin of your data, if not collected from us, as well as the existence of automated decision making including profiling and, if applicable, meaningful information on the details thereof;
  • in accordance with Art. 16 GDPR to immediately demand the correction of incorrect or incomplete personal data stored by us;
  • according to Art. 17 GDPR to demand the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
  • according to Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, if the processing is unlawful but you refuse to delete it and we no longer require the data, but you require it for the assertion, exercise or defence of legal claims or if you are in breach of Art. 21 GDPR to receive your personal data that you have provided us with in a structured, common and machine-readable format or to request the transfer to another responsible party;
  • according to Art. 7 Para. 3 GDPR to revoke your consent to us at any time. As a consequence, we are no longer allowed to continue data processing that was based on this consent for the future, and
  • to complain to a supervisory authority in accordance with Art. 77 of the German Data Protection Act. Generally, you can contact the supervisory authority at your usual place of residence or work or at our company headquarters for this purpose.

If your personal data are processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 letter f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, if there are reasons for doing so, arising from your particular situation or if the objection is directed against direct marketing. In the latter case you have a general right of objection, which will be implemented by us without specifying a special situation. If you wish to make use of your right of revocation or objection, it is sufficient to send an e-mail to

9. Actuality and modification of the privacy policy

This privacy policy is currently valid and is valid as of May 2018. ACHAT reserves the right to amend this Privacy Policy at any time in accordance with the applicable Data Protection Regulations. In the event of a change, we will put the revised version of the declaration on the Internet, so that you will always find the currently valid version here.

Newsletter? Keep it coming!

It's really cool. It can be cancelled at any time and is in color.