Data protection

1. General Information
We are pleased that you are visiting our website and thank you for your interest in our hotel. The protection of your personal data is very important to us.
Personal data refers to any information that can be used to personally identify you, such as your name, address, email address, or user behavior.
The processing of your data is carried out in accordance with the General Data Protection Regulation (GDPR) and applicable national data protection laws.

2. Controller
The controller responsible for data processing on this website is:
Mellum GmbH
Fasanenweg 9
26434 Wangerland (Horumersiel)
Germany
Phone: +49 4426 99080
Email: zehm@hotel-mellum.de

3. Data Collection When Visiting the Website
When you access our website, information is automatically collected by the server (so-called server log files).
This includes, in particular:
- IP address
- Date and time of the request
- Accessed page
- Browser type and version
- Operating system
- Referrer URL
These data are not merged with other data sources.
The processing is based on Art. 6 (1) lit. f GDPR (legitimate interest in the technically error-free presentation and optimization of the website).

Cookie Settings / Right to Object

You can prevent the installation of cookies by deleting existing cookies and disabling the storage of cookies in your web browser settings. Please note that in this case, you may not be able to use all functions of our website to their full extent.

You can also prevent the collection of the aforementioned information by setting an opt-out cookie via one of the following websites:
- https://optout.networkadvertising.org/#!/
- http://www.aboutads.info/choices
- https://www.youronlinechoices.com/de/praferenzmanagement/
Please note that this setting will be deleted if you delete your cookies.

You can object to the collection and transmission of personal data or prevent the processing of such data by disabling the execution of JavaScript in your browser. You can also prevent the execution of JavaScript code altogether by installing a JavaScript blocker (e.g. https://noscript.net/
 or https://www.ghostery.com).
Please note that in this case, you may not be able to use all functions of our website to their full extent.

5. Online Booking System (Viato)
Our website includes an online booking function provided by Viato (booking engine / channel manager).
When you make a booking via our website, the data you enter will be processed, in particular:
- name

- contact details
- stay details
- if applicable, payment information
These data are processed for the purpose of handling your booking.
The legal basis is Art. 6 (1) lit. b GDPR (contract / booking).
As part of the booking process, your data may be shared with connected platforms, in particular:
- Booking.com
- Airbnb
- Google (e.g. Google Hotel Ads)
- CHECK24
These providers process personal data independently. Their respective privacy policies apply.
Processing is partly carried out by external service providers on the basis of data processing agreements in accordance with Art. 28 GDPR.
In this context, personal data may be transferred to third countries outside the EU (e.g. the USA). Such transfers are based on appropriate safeguards pursuant to Art. 46 GDPR, in particular EU Standard Contractual Clauses.

6. Contacting Us
If you contact us by email or via a contact form, your information will be stored for the purpose of processing your request and for possible follow-up questions.
Legal basis:
- Art. 6 (1) lit. b GDPR (pre-contractual measures)
- Art. 6 (1) lit. f GDPR (legitimate interest)
The data will be deleted as soon as it is no longer required for the purpose for which it was collected.

7. Data Retention
Personal data will only be stored for as long as necessary to fulfill the respective purposes.
In addition, statutory retention periods may apply, in particular under commercial and tax law.
Once the purpose no longer applies and retention periods have expired, the data will be deleted.

8. Recipients of Data
Within our company, only those departments have access to your personal data that require it to fulfill contractual and legal obligations.
We also use external service providers (e.g. IT providers, booking systems) who process personal data on our behalf. These providers have been carefully selected and are contractually bound in accordance with Art. 28 GDPR.
Your data will only be shared with third parties if this is permitted by law, necessary for contract fulfillment, or if you have given your consent.

9. Your Rights
You have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)

- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).
In addition, you have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data based on Art. 6 (1) lit. e or f GDPR (Art. 21 GDPR).
If your personal data is processed for direct marketing purposes, you have the right to object at any time to such processing.

10. Withdrawal of Consent
You may withdraw your consent at any time with effect for the future.

11. Data Security
This website uses SSL/TLS encryption for security reasons.

12. Updates and Validity
This privacy policy is valid as of: March 2026
We reserve the right to update it when necessary.