Data protection declaration
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
Controller: Boardinghouse Humboldt41 GmbH
Humboldtstraße 41
90443 Nürnberg, Germany
E-mail: info@humboldt41.de
A data protection officer is not required under Art. 37 GDPR in conjunction with § 38 BDSG.
The use of our website is generally possible without providing personal data. Insofar as personal data (e.g. name, address or e-mail addresses) are collected on our pages, this is always done, as far as possible, on a voluntary basis. This data will not be passed on to third parties without your express consent.
We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.
Legal Basis for Processing:
The processing of your data is based on Art. 6 para. 1 lit. a (consent), b (contract performance), c (legal obligation), and f (legitimate interest) GDPR.
Your Rights:
You have the right to obtain information free of charge at any time about your stored personal data, its origin, recipient, and the purpose of the data processing. You also have the right to request rectification, blocking, or deletion of this data. For this and further questions on the topic of personal data, you can contact us at the address provided in the legal notice.
Cookies
Some of the websites use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and stored by your browser.
Most of the cookies we use are so-called session cookies. They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser the next time you visit us.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies in certain cases or generally, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
These data cannot be assigned to specific persons. This data will not be merged with other data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use.
Contact form
If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We will not share this information without your consent.
Newsletter data
If you wish to subscribe to the newsletter offered on the website, we require from you an e-mail address as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data will be collected. We use this data exclusively for sending the requested information and do not pass it on to third parties.
You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time, for example via the unsubscribe link in the newsletter.
Data protection declaration for the use of Google Analytics
This website uses features of the web analysis service Google Analytics. Provider is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94 043, USA.
Google Analytics uses so-called “cookies.” These are text files that are stored on your computer and allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
More information on the handling of user data in Google Analytics can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de
Browser Plugin
You may refuse the storage of cookies by selecting the appropriate settings on your browser; however, please note that if you do so, you may not be able to use all functions of this website to their full extent. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de
Objection to data collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this site:: Google Analytics deaktivieren
Data Processing Agreement
We have entered into a data processing agreement with Google and fully comply with the strict requirements of the German data protection authorities when using Google Analytics.
IP Anonymization
We use the “activation of IP anonymization” feature on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.
Use of Google Web Fonts
This site uses web fonts provided by Google for the uniform display of fonts. When you access a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. If your browser does not support web fonts, a standard font from your computer will be used.
More information about Google Web Fonts: https://developers.google.com/fonts/faq and Google’s privacy policy: https://www.google.com/policies/privacy
Use of Google Maps
This site uses the Google Maps API to display maps. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To use the features of Google Maps, it is necessary to store your IP address. This information is generally transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.
More information on the handling of user data is available in Google’s privacy policy: https://www.google.de/intl/en/policies/privacy
Use of YouTube
Our website uses plugins from the YouTube site operated by Google. The operator is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. The YouTube server is informed of which of our pages you have visited.
If you are logged into your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.
Further information on the handling of user data can be found in YouTube’s privacy policy: https://www.google.de/intl/en/policies/privacy
Facebook Remarketing/Retargeting (Custom Audiences)
Our website uses Facebook’s visitor action pixel, operated by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. When you visit our site, a direct connection between your browser and the Facebook server is established via the pixel. Facebook thereby receives the information that you have visited our site with your IP address. This allows Facebook to associate the visit to our pages with your user account. We can use the information obtained to display Facebook Ads or use them for tracking features (“Custom Audiences”).
Please note that as the provider of this site, we have no knowledge of the content of the transmitted data or how it is used by Facebook. More information is available in Facebook’s privacy policy: https://www.facebook.com/about/privacy/. If you do not want your data to be collected via Custom Audience, you can deactivate it here.
SSL Encryption
This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the inquiries you send to us as the site operator. You can recognize an encrypted connection by the address line of the browser changing from “http://” to “https://” and by the lock icon in your browser line.
When SSL encryption is activated, the data you transmit to us cannot be read by third parties.
Data Transmission for Contracts and Digital Services
We only transmit personal data to third parties when this is necessary in the context of contract processing. This includes transmission to:
Cloudbeds Inc. (PMS and Booking System)
Cloudbeds, Inc., 505 Lomas Santa Fe Drive, Solana Beach, CA 92075, USA
Processing is based on Art. 6 para. 1 lit. b and f GDPR as well as the EU Standard Contractual Clauses.
Stripe (Payment Processing)
Stripe Payments Europe Ltd., The One Building, 1 Grand Canal Street Lower, Dublin, Ireland
Legal Basis: Art. 6 para. 1 lit. b GDPR
Whistle by Cloudbeds (Guest Communication, Registration Form, ID Upload)
Data: name, address, date of birth, nationality, ID number, communication data, optional ID photo
Legal Basis: Art. 6 para. 1 lit. a GDPR (consent for photo upload), Art. 6 para. 1 lit. b GDPR (contract), Art. 6 para. 1 lit. c GDPR (legal obligation under §29 BMG)
Digital Registration Forms:
Data is processed to comply with the legal obligation under §29 of the Federal Registration Act (BMG). Data is stored for one year as required by law and then deleted.
Encrypted Payment Transactions
Payment transactions using common payment methods (Visa/MasterCard, direct debit) are only made via an encrypted SSL connection. You can recognize an encrypted connection by the address line of your browser changing from “http://” to “https://” and by the lock symbol in your browser line.
When SSL encryption is activated, the payment data you transmit to us cannot be read by third parties.
Objection to Promotional Emails
We hereby object to the use of contact data published within the scope of the legal notice obligation to send unsolicited advertising and information materials. The operators of the site expressly reserve the right to take legal action in the event of unsolicited promotional information, such as spam emails.
Hosting / Data Processing Agreement
Our website is hosted by an external service provider. A data processing agreement in accordance with Art. 28 GDPR is in place.
Last updated: July 2025