As of: June 19, 2025
1. Responsible body
Manz GmbH & Co. KG
Hauptstr. 48
55767 Schwollen
Germany
Email address: info@schwollbachhof.de
Imprint: schwollbachhof.de/impressum
2. General information on data processing
We take the protection of your personal data very seriously. Personal data will be treated confidentially and in accordance with statutory data protection regulations and this privacy policy.
3. Your rights
You have the right to information, rectification, erasure, restriction of processing, data portability, as well as the right to object and withdraw your consent. To exercise this right, please contact us at the address above.
4. Data collection on our website
a) Server log files
When you visit our website, information is automatically collected by the provider (e.g., browser type, operating system, time of server request, IP address). This data is used exclusively for technical monitoring and security of the website.
5. Cookies and consent management
We use the “Real Cookie Banner” plugin to obtain your consent to the storage of certain cookies on your device or to the use of certain technologies and to document this consent in compliance with data protection regulations. The following data is processed: browser type, operating system, referrer URL, host name, time, and IP address. The legal basis is Art. 6 (1) (c) GDPR. Details on how “Real Cookie Banner” works can be found at https://devowl.io/rcb/data-processing/ . You can revoke your consent at any time.
6. Contact form
If you send us inquiries via the contact form, your information from the form, including the contact details you provide, will be stored to process your inquiry and in case of follow-up questions. This processing is based on your consent (Art. 6 (1) (a) GDPR). You can revoke this consent at any time.
7. Newsletter
We send newsletters, emails, and other electronic notifications (hereinafter “newsletters”) only with the recipient’s consent or legal permission. If the newsletter content is specifically described when registering for the newsletter, this information is decisive for the user’s consent. Otherwise, our newsletters contain information about our services and us.
To subscribe to our newsletter, it is generally sufficient to provide your email address. However, we may ask you to provide a name for the purpose of addressing you personally in the newsletter, or other information if this is necessary for the purposes of the newsletter.
Double opt-in process: Registration for our newsletter is generally carried out using a so-called double opt-in process. This means that after registration, you will receive an email asking you to confirm your registration. This confirmation is necessary to ensure that no one can register using someone else’s email address. Newsletter registrations are logged to provide evidence of the registration process in accordance with legal requirements. This includes storing the time of registration and confirmation, as well as the IP address. Changes to your data stored by the shipping service provider are also logged.
Deletion and restriction of processing: We may store unsubscribed email addresses for up to three years based on our legitimate interests before deleting them in order to be able to prove previously given consent. The processing of this data is limited to the purpose of a possible defense against claims. An individual deletion request is possible at any time, provided that the previous consent is confirmed at the same time. In the case of obligations to permanently observe objections, we reserve the right to store the email address on a block list (so-called “block list”) for this purpose alone.
The registration process is logged based on our legitimate interests for the purpose of demonstrating its proper execution. If we commission a service provider to send emails, this is done based on our legitimate interests in an efficient and secure delivery system.
Contents:
Information about the progress of our project, services, promotions and offers.
- Types of data processed: Inventory data (e.g. names, addresses); contact data (e.g. email, telephone numbers); meta/communication data (e.g. device information, IP addresses); usage data (e.g. websites visited, interest in content, access times).
- Data subjects: communication partners.
- Purposes of processing: direct marketing (e.g. by email or post).
- Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR).
- Opt-out: You can unsubscribe from our newsletter at any time, i.e., revoke your consent or object to further receipt. You will find a link to unsubscribe from the newsletter either at the end of each newsletter or by using one of the contact options listed above, preferably email.
Further information on processing procedures, methods and services:
- Measuring opening and click rates: The newsletters contain a so-called “web beacon”, i.e., a pixel-sized file that is retrieved from our server when the newsletter is opened or, if we use a shipping service provider, from their server. As part of this retrieval, technical information such as information about the browser and your system, as well as your IP address and the time of retrieval, is initially collected. This information is used to technically improve our newsletter based on the technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined using the IP address) or the access times. This analysis also includes determining whether the newsletters are opened and when they are opened. Legal basis: Consent (Art. 6 (1) (a) GDPR).
8. Applicant data
As part of your application, we process the personal data you submit (e.g., CV, references, contact details) exclusively for the purpose of conducting the application process. Only those responsible for the application process will have access to your data. After the application process has been completed, your data will be deleted after six months at the latest, unless there is a legal retention obligation or you have expressly consented to longer storage. The legal basis is Art. 6 (1) (b) GDPR in conjunction with Art. 88 GDPR in conjunction with Section 26 of the German Federal Data Protection Act (BDSG).
9. Use of Google Fonts
Our website uses Google Fonts to ensure consistent font display. When you visit our pages, your browser downloads the required fonts directly from Google servers. Personal data (in particular your IP address) may be transferred to Google in the USA. The legal basis is either your consent (Art. 6 (1) (a) GDPR) or our legitimate interest (Art. 6 (1) (f) GDPR). Further information can be found in Google’s privacy policy.
10. Integration of Google Maps
Our website uses Google Maps to display maps. When you access the maps, personal data (including your IP address) is transferred to Google. We attempt to anonymize the IP address. The legal basis is your consent (Art. 6 (1) (a) GDPR).
11. Hotel booking system Little Hotelier (SiteMinder)
For online bookings, we use the “Little Hotelier” system from SiteMinder Limited. When using the booking system, personal data (e.g., name, contact details, booking details) is transmitted to SiteMinder and processed there. The legal basis is Art. 6 (1) (b) GDPR (performance of contract). Further information on data processing by SiteMinder can be found in their privacy policy.
12. Web analysis with Matomo
We use Matomo for web analytics. The data is stored exclusively on our own server and is not shared with third parties. The IP address is shortened so that no conclusions can be drawn about you personally. The legal basis is our legitimate interest (Art. 6 (1) (f) GDPR).
13. Social Media Plugins
Instagram & Facebook
Our website includes plug-ins from the social networks Instagram and Facebook. When you visit our pages, the plug-in establishes a direct connection between your browser and the respective server. Personal data (e.g., IP address) may be transmitted to the providers. Their use is based on your consent (Art. 6 (1) (a) GDPR).
14. Security plugin Wordfence
To protect our website, we use the Wordfence security plugin. Wordfence sets cookies and stores IP addresses to detect and prevent attacks. The data is processed on servers in the USA. The legal basis is our legitimate interest (Art. 6 (1) (f) GDPR).
15. Data sharing and third country transfer
Your personal data will only be transferred to third parties or to third countries if this is necessary to fulfill the contract, if you have consented, or if there is a legal obligation. When using services such as Google, Facebook, Instagram, or SiteMinder, data may be transferred to the USA. The EU Commission may not have adequacy decisions for these providers. We would like to point out that a lower level of data protection may exist in these countries.
16. Storage period
Personal data will only be stored for as long as necessary for the stated purposes or as long as statutory retention periods apply.
17. Revocation and objection
You can revoke your consent at any time. This will not affect the legality of the data processing carried out up to the time of revocation.
18. Changes to this Privacy Policy
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy.