10% discount for direct bookers with the promotion code DIREKT10

Our Privacy notice

Privacy notice

We (aletto Service und Marketing GmbH and aletto Kudamm GmbH, Hardenbergstr. 21, 10623 Berlin, Tel: +49 (0)30 233 214 100, e-mail: datenschutz@remove-this.aletto.de) take the protection of your personal data very seriously. We treat your personal data confidentially, in accordance with this privacy notice and with the data protection regulations. Any personal data collected on this website www.aletto.de will only be used for the purpose for which they were provided (e.g. for booking purposes). We will not transfer such data to any third party without your consent, except upon official order.

Hereinafter, we would like to inform you, as the user of our website, of the handling of your data and provide you with an overview of the measures we take in order to protect personal data. You may revoke your consent at any time with future effect.

1. Scope of the privacy policy

Our privacy policy applies to the websites of aletto Service und Marketing GmbH www.aletto.de including any sub-pages (hereinafter together referred to as "Website") and to the aletto Kudamm GmbH.

2. Collection, use and storage of personal data

Based on our legitimate interests (cf. Article 6, para. 1, lit. f of the GDPR), we shall collect data on the hits on our website. Various data transmitted by your browser when you visit our website will be stored by the provider of the website in so-called logfiles (e.g. browser type and version, operating system, IP address, referrer URL, date and time of access to our website and name of the host of the accessing computer). We are not able to allocate such data to certain persons and we will not mix them with data obtained from other sources. They are only used for statistical analyses.

In addition, we only collect and use personal data the user transfers when he/she uses our website, e.g. when booking a room or sending a enquiry using the contact form. The users’ personal data will be collected, used and stored for the execution of a contract.

The data will be deleted as soon as they are no longer required for the purpose for which they were collected, unless we are required to keep such data until the expiry of the statutory limitation period, as evidence in civil-law claims or based on statutory retention periods.

In addition, we are required to store some data for accounting purposes. The bases therefor are statutory documentation requirements resulting from the Tax Code, the Commercial Code, the Act on the Prevention of Money Laundering and the Banking Act. The retention periods stipulated therein range from 2 to 10 years.

2.1 Collection of other data in the aletto hotel

On site, we will collect additional data from you. This includes registration forms in which we store our guests’ personal data, including without limitation the date of arrival and of the planned departure, forename and surname, date of birth, citizenship, address, in case of tourist parties the number of members and their citizenships as well as the passport number or the number of the provisional passports for foreigners. We will process such data for the fulfilment of the contract (Article 6, para. 1, lit. f of the GDPR), for the performance of a task carried out in the public interest (Article 6, para. 1, lit. e of the GDPR) and based on our legitimate interest (Article 6, para. 1, lit. f of the GDPR).

Based on section 29, paras. 2-4 and section 30, para. 2 of the Federal Registration Act, we are legally obliged to store such data for a certain period of time. Generally, registration forms will be retained for one year after the date of arrival and destroyed within three months after expiry of such period.

2.2 Minors

Without the consent of the parents or legal guardians, minors must not transfer any personal data to us. On our website, we do not knowingly process any personal data of minors.

2.3       Booking

Upon reservation / booking, you must state your full name, address, e-mail address and the dates of arrival and of departure. These data are required for the booking process (Article 6, para. 1, lit b of the GDPR). In addition, we might need additional information such as your telephone number, company name, tax number, banking information or credit card data.

2.4 Payment:

In order to make the booking process as comfortable as possible, we offer various payment methods. The first one is payment upon arrival. In this case, your payment data will be recorded at the hotel. You may also select to pay online. In order to enable you to make online payments, we afford you the opportunity to effect payments via a number of payment service providers.

Below, please find the payment service providers with which we cooperate:

PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A, 22-24 Boulevard Royal, L-2449 Luxembourg, Luxembourg

Privacy policy: www.paypal.com/de/webapps/mpp/ua/privacy-full

Klarna: Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden

Privacy policy: https://www.klarna.com/de/datenschutz/

Saferpay: SIX Payment Services (Europe) S.A,  10, rue Gabriel Lippmann, 5365 Munsbach, Luxembourg

Privacy policy: www.six-payment-services.com/de/services/legal/privacy-statement.html

Datatrans: Datatrans AG, Kreuzbühlstrasse 26, CH-8008 Zurich, Switzerland

Privacy policy: www.datatrans.ch/de/data-privacy

Giropay: GIROPAY GMBH, An der Welle 4, 60322 Frankfurt/Main, Germany

Privacy policy: www.giropay.de/rechtliches/datenschutz-agb/

If you make a payment, we will receive a notification that such payment was received. The above payment service providers will not transfer to us any information you gave them in connection with the processing of your payment.

The processing of data by the above-stipulated payment service providers is based on our legitimate interest in accordance with Article 6, para. 1, lit. b and lit. f of the GDPR to provide our guests with simple and secure payment methods offered by a payment service provider of their choice.

2.5 Contact

You may contact us via telephone, e-mail or via our contact form. If you contact us via our contact form on our website (www.aletto.de/en/contact/www.aletto.de/en/best-price-form/), we will store your contact data and your message in order to process your enquiry and any questions relating thereto. These data will be transmitted within our company and to “aletto Kudamm GmbH”. The legal basis is Article 6, para. 1, lit. b of the GDPR. The data collected in connection with our contact form will be automatically deleted after completion of your enquiry unless we must keep your enquiry in order to fulfil contractual or legal obligations (cf. “Collection, use and storage of personal data”).

2.6. Career

For all data you need in order to apply for a position with our company, please go to our “About us” page. You may file electronic applications. For the processing of your application, we will collect the following data: forename and surname, e-mail address, application documents (e.g. curriculum vitae, references). The purpose of the data collection is the selection of candidates for the initiation of an employment contract. Your personal data will be deleted immediately after completion of the application process and will not be stored for more than 6 months. Your data may be stored longer than that based on your express consent or in case a contract is concluded. The legal basis is Article 6, para. 1, lit. b and Article 88, para. 1 of the GDPR in conjunction with section 26, para. 1, clause 1 of the Federal Data Protection Act.

3. Transfer of personal data to third parties

User data will be treated confidentially and will generally not be transferred to third-party service providers unless this is necessary in order to fulfil a contract or to process enquiries. Third-party service providers are subject to the obligation to treat such data confidentially and securely and they must not use such data except to the extent necessary to fulfil their tasks.

Otherwise, personal data shall not be transferred except in accordance with the user’s express consent (Article 6, para. 1, lit. a of the GDPR) or to the extent required for the prosecution of criminal acts. The data shall not be transferred to public authorities or government institutions that are entitled to request information except to the extent we are subject to a legal obligation or to a judicial order to provide information (Article 6, para. 1, lit. c and lit. f of the GDPR). Your vital interests will be taken into consideration in accordance with data protection regulations. Based on statutory regulations, we may be obliged to disclose your data to third parties. We will comply with such request to the extent required based on legal obligations. You may revoke any consent you give to the transfer of your data at any time and without stating any reasons.

In addition, some of our data processing tasks are fulfilled by third-party service providers. Apart from the service providers already stated in this privacy notice, this includes without limitation IT service providers that maintain our systems and data centres hosting and storing our website and data bases. Such service providers may not use the data we transfer to them other than for the fulfilment of their obligations. We carefully select and employ our third-party service providers. Our service providers apply suitable technical and organisational measures to protect your data and are contractually bound to follow our instructions.

3.1 Cooperation with partner companies:

In order to offer you comprehensive services, we cooperate with various partner companies, including without limitation travel agencies, travel operators and tourist offices. Only personal data we are allowed to have will be processed, in each case based on commissioned data processing agreements or on your express written consent.

Currently, we cooperate with the following service provider (processor):

*ASSD GmbH (internet booking system)

Provider’s website: www.assd.com/en/contact-us/

4. E-mail newsletter

If you would like to subscribe to the aletto newsletter we offer on our website, all we need is your e-mail address. No additional data will be required. We will only transfer the collected data to Newsletter2Go GmbH, Köpenicker Str. 126, 10179 Berlin, Germany in order to send the newsletter. The basis for the processing of your data is your express consent (Article 6, para. 1, lit. a of the GDPR).

You may revoke your consent to the storage of your data, your e-mail address and to the use of such data for the dispatch of the newsletter at any time. Please use the link at the end of each aletto newsletter to unsubscribe.

5. Cookies

We use cookies for statistical analyses and in order to increase the user-friendliness and effectiveness of our website. The legal basis for this is our legitimate interest in accordance with Article 6, para. 1, lit. f of the GDPR. Cookies are small text files that are stored on your computer’s hard drive and that facilitate navigation. With cookies, you do not need to enter all required data again every time you visit our website. In addition, cookies help us to tailor our website to your needs, e.g. your local language or preferred fields of interest. Should you disagree to such use, you may de-activate cookies in your browser. Most browsers accept cookies automatically but you can change the settings so that cookies are rejected, either in the individual case or generally, so that a warning notification is displayed before a cookie is stored or that stored cookies are automatically deleted when you close your browser. You may manually delete the cookies already stored on your computer. However, we must point out that if you de-activate cookies, you might not be able to fully use all of this website’s functions.

Below, please find a list of browsers where you can learn more about configurations in relation to cookies:

Internet Explorer: http://windows.microsoft.com/en-US/windows-vista/Block-or-allow-cookies

Opera: http://help.opera.com/Windows/10.20/en/cookies.html

Safari: http://www.apple.com/legal/privacy/en-ww/cookies

Chrome: http://support.google.com/chrome/bin/answer.py?hl=en&hlrm=en&answer=95647

Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

6. Data processing in social media

We participate in the following social media: Facebook, Twitter, YouTube,  Instagram, Google+, Twitter

Please note that we cannot influence the data processing activities in the social networks. We cannot assume any liability for the conduct of the operators of the social networks stipulated above and their members.

If you communicate with us via one of the above-stated networks, we will process the information provided to us by the relevant social network (e.g. your name, profile page and the contents of the messages you sent us) in accordance with the purpose of your message.

We will delete your messages as soon as they are no longer required or the purpose of your message is fulfilled.

7. Social plugins

7.1 Facebook plugin (“like” button)

Our website uses plugins of the social network Facebook.com, operated by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. Facebook plugins are marked by the Facebook logo or the “like” button on our websites.

If you access a website containing such a plugin, a connection to Facebook's servers will be established and the plugin is shown on our website by transmission to your browser, and your IP address and the information on the pages you visited will be transferred to the Facebook server. If you are logged into your Facebook account, Facebook will allocate such information to your personal Facebook account. When you use plug-in functions (e.g. if you click on the "like” button or enter a comment), Facebook will allocate this information to your account, as well. We, as the provider of the website, are not informed of the contents of the transmitted data and their use by Facebook. For more information on the collection and use of the data by Facebook and your related rights and options for the protection of your privacy, please read Facebook’s privacy policy.

If you would like to prevent Facebook from allocating your visit to our website to your Facebook user account, please log out from your Facebook account before you use our website.

7.2  Google +1

Our website uses functions and plugins of „Google +1“, which is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Irland (“Google”). Google +1-plugins are marked by the Google logo or the  "+1" button on our website.

If you access a page on our website featuring a "+1" button, a direct connection to Google's servers in the USA will be established and the "+1" button is transmitted to your browser and displayed on our website, transmitting the information of which of our websites you visited to Google and we assume that your IP address is transmitted to Google, as well, irrespective of whether you are registered with or logged in to Google Plus or not.

Google does not use the "+1" button in order to track the websites you visit on the internet. Moreover, the display of a "+1" button does not mean that Google will permanently log your browser history and will otherwise analyse your visit on a website containing a "+1" button. However, Google will store some data about your visit for system maintenance and fault repair purposes for a short period of time, usually for 2 weeks. However, such data will not be structured by individual profiles, user names or URLs. We, as the website provider, do not have control of the content or scope of the data Google collects via this button.

If you are a member of Google Plus and logged in to your Google Plus account while using the "+1" button, the data collected on your visit of the website will be linked to your Google Plus account and made known to other users. If your Google Plus profile is a public profile, Google may display your "+1" pages together with your profile name and your photo in Google services, e.g. in search results or in your Google profile or otherwise on websites and advertisements on the internet.

If you want to prevent Google from directly allocating such information to your Google Plus profile, please log out from Google Plus before you visit our website.

For more information on the collection and use of the data by Google and your related rights and options for the protection of your privacy, please read Google’s privacy policy.

7.3 Twitter

Functions of the service “Twitter”, operated by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, are embedded in our website. They can be identified based on the Twitter logo or the Twitter button on our pages. Whenever you use Twitter, the sites you visited will be linked to your Twitter account and made known to other users, and data are transferred to Twitter. We, as the provider of the website, are not informed of the contents of the transmitted data and their use by Twitter. For more information please see Twitter’s privacy policy at: www.twitter.com/privacy.

8. Google Analytics

Our website uses Google Analytics, a web analysis service operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Irland (“Google”). Google Analytics uses so-called cookies. Cookies are text files which are stored on your computer and enable us to analyse how you use our website. The data on your visits on this website including your IP address generated by such cookie shall be transmitted to and stored on one of Google's servers in the USA. The processing of the data is based on our legitimate interests in accordance with Article 6, para. 1, lit. f of the GDPR.

However, due to the fact that the IP anonymization is activated on this website, Google shall shorten your IP address before transfer within the member states of the European Union or in other countries which are parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to one of Google’s servers in the USA and shortened thereafter. Google will use such transferred information on our behalf in order to analyse your use of the website, to prepare reports on the website activities to us as the website providers and to render other services to the website operator in connection with the use of the website and of the internet. Google will not link your IP address to other Google data.

You can prevent the storage of the cookies by changing the relevant settings of your browser. However, we must point out that in such case you might not be able to fully use all of this website’s functions.

Duration of data storage
The data sent by us and linked to cookies, user IDs (eg user ID) or advertising IDs will be automatically deleted after 14 months. The deletion of data whose retention period has been reached is done automatically once a month.

In addition, you can prevent Google from collecting your personal data in relation to your use of the website as generated by the cookie (incl. your IP address) as well as from processing of such data by downloading and installing the browser plug-in available at the following link: tools.google.com/dlpage/gaoptout.

For more information to Google Analytics, please go to: http://www.google.com/intl/de/policies/privacy/partners/.

9. Google AdWords

Conversion Tracking is used as part of the Google AdWords ("AdWords") advertising program of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Irland ("Google") in order to analyse campaign performance on this website. The information gathered using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for Conversion Tracking. Customers are told the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive information can be used to identify specific users. If you click on an ad displayed by Google, a cookie will be placed on your computer. The information gathered by the AdWords cookie is used to generate conversion statistics. The cookies used in the context of conversion tracking lose their validity after 30 days, contain no personal data and are therefore cannot be used for personal identification. If our website is accessed before the deadline expires, both we and Google can use the cookie to see that the user clicked on the ad and was redirected to this page. Each Google AdWords customer is given a different cookie. Thus, there is no way that cookies can be tracked through the websites of AdWords customers. If you do not wish to participate in the tracking process, you can also refuse to allow the necessary cookie to be set- for example, via a browser setting that generally disables the automatic setting of cookies.
You may permanently deactivate the use of cookies by Google by modifying the following link and the settings for managing cookies: http://www.google.com/policies/technologies/managing/


 10. Google Remarketing

On this website, we also use the Remarketing function ofGoogle Ireland Limited, Gordon House, Barrow Street, Dublin 4 Irland ("Google"). This function makes it possible to target visitors to the website with personalised, interest-based advertising. Interest-based advertising is seen to the visitor as soon as he searches for something on Google or on websites operated by search network partners. In order to analyse website use, Google uses cookies that form the basis for the creation of interest-based advertisements. The cookie records website visits as well as anonymised data on the use of the website. However, personal data is not saved. Subsequent visits to other sites in the Google Search Network will then display ads that are likely to reflect the product and information areas previously accessed by the site visitor. However, if you do not wish to use Google Remarketing, you can always disable it by making the appropriate settings in the  Link below.

11. Use of Triptease Services

We use third-party analytics services to help understand the way our website visitors use our website. In particular, we may provide a limited amount of your information (such as your room search, email address and name, should you provide these) to the Triptease Group ("Triptease") and utilize Triptease to collect data for analytics purposes when you visit our website to book a stay with us.  As our joint data controller, Triptease analyzes your use of our website and tracks our relationship by way of cookies and similar technologies so that we can improve our service to you. We may also use Triptease as a medium for communications through live chat or automated messages within our website. Additionally we may take payments through Triptease's live chat widget Front Desk. Triptease does not retain any payment information and uses the third-party service, PCI-Booking, for such payments. For more information on PCI-Booking use of data see their privacy policy <https://www.pcibooking.net/privacy-policy>. For more information on the privacy practices of Triptease please visit https://www.triptease.com/privacy-policy/ and for more information about Triptease's use of cookies please visit https://www.triptease.com/cookie-policy/


12. Google Fonts

We would like to inform you that we use fonts (Google Fonts) of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Irland, on our website. Privacy policy: https://www.google.com/policies/privacy/, Opt-out: https://adssettings.google.com/authenticated.

13. Google Maps

We use the services of Google Maps on this website, which enable us to show you interactive maps on the website and to provide you with the convenient use of the map function. The legal basis is article 6, para. 1, lit. f of the GDPR. Our legitimate interest is the optimisation of our website’s functionality.

Due to your visit on the website, Google will receive the information that you accessed the relevant page of our website. In addition, data will be transferred, irrespective of whether you have a user account with Google or not and are logged in or not. If you are logged in to your Google account, the data will be allocated directly to your account. If you wish to prevent the link between the data and your Google profile, you will have to log out from Google before you click on the button. Google stores your data as user profiles and uses them for marketing, market surveys and to tailor its website to your requirements. Such analysis is made – including without limitation and irrespective of whether you are logged in or not – to show you advertising tailored to your needs and in order to inform other users of the social network of your activities on our website. You have the right to object to the establishment of such user profiles. Please contact Google to exercise such right.

For more information on the purpose and scope of the data collection and processing by the plug-in provider, please read the privacy notice of the relevant provider, which also contains additional information on your rights and the settings you can make in order to protect your privacy. www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and is subject to the provisions of the EU-US Privacy Shield: www.privacyshield.gov/EU-US-Framework.

14. Links to third party websites

This website may contain links (interactive referrals) to third-party websites for which we do not assume any liability. We cannot influence the contents and design of such third-party websites to which the user is directed by clicking on the links. The provider of the website is exclusively responsible for content and design and for compliance with data protection regulations.

15. Rights of the user

You are entitled to demand free-of-charge information on your personal data (Article 15 of the GDPR), their origin, recipient and the purpose for which they are processed. In addition, you are entitled to demand that such data be corrected (Article 16 of the GDPR), made inaccessible (Article 18 of the GDPR) or deleted (Article 17 of the GDPR). In addition, you have the right to the portability of such data (Article 20 of the GDPR). Users of this Website may exercise their right to object and object to the processing of their personal data at any time. Should you be of the opinion that your data were unlawfully processed, you may lodge a complaint with the competent supervisory authority (Article 77 of the GDPR). The competent authority is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (Data Protection and Freedom of Information Commissioner, Berlin). Please contact us with any questions relating to personal data (aletto Service und Marketing GmbH and aletto Kudamm GmbH, Hardenbergstr. 21, 10623 Berlin, Tel: +49 (0)30 233 214 100, e-mail: info@aletto.de) or our data protection officer (cf. 13.)

16. Revocation of consent to the publication of photos

On our website, we only use photos with persons who gave their express consent to the use of their likenesses on our website. These persons may revoke such consent at any time and without stating any reasons by sending an e-mail to marketing@aletto.de. After receipt of such revocation, we shall delete the photos with these persons from our website and from our servers.

17. Protection of your data

In order to ensure the protection and security of your personal data, we apply up-to-date technical measures to protect us from risks, e.g. when transferring data to third parties and disclosure to third parties. These measures are kept up to date with the state of the technology. In order to protect your personal data on our website, we use Secure Sockets Layer (SSL) to encrypt the information you provide.  

18. Questions to date protection and data protection officer

Users may contact us at any time if their personal data are to be corrected, made inaccessible or deleted. In addition, we will inform the user of the personal data we stored in relation to him/her, their origin, recipients and the purpose for which they are stored.

For any questions related to data protection, please contact our data protection officer:

Data protection officer

microPLAN GmbH

Spatzenweg 2

48282 Emsdetten

Tel: 0049 (0)257 293 65-77


Revised: 25 October 2018