1. Controller
The controller for the data processing on this website is:
Hotel NordRaum GmbH
Europaallee 1-3, 28309 Bremen
Phone: +49 421 458570
Email: info@hotel-nordraum.de
2. Your rights as a data subject
You have the right at any time to:
- information about the data we store about you (Art. 15 GDPR),
- rectification of inaccurate data (Art. 16 GDPR),
- erasure of your data (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- object to the processing (Art. 21 GDPR).
You can withdraw any consent you have given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority – the authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of the Free Hanseatic City of Bremen.
3. Access data and hosting
Each time this website is accessed, your browser automatically transmits information to the server of our website, where it is stored in so-called server log files. This includes: the page accessed, date and time, volume of data transferred, referrer URL, browser type and operating system as well as the IP address of the requesting device.
Processing takes place on the basis of our legitimate interest in the technically error-free presentation and the security of our website (Art. 6 (1) (f) GDPR). For security reasons, the log files are stored for a limited time and then deleted.
The website, including its editorially maintained content and images, is operated on a server of Hostinger International Ltd. in a data centre in Frankfurt am Main; the data does not leave the European Union. Operation takes place exclusively on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR. Beyond this operation, the e-mail service named in the Contact section, and Profitroom S.A. named in the Room Booking section, we do not pass your data on to third parties.
4. SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” in the address bar of your browser.
5. Contacting us
If you contact us by e-mail, telephone or via the contact form, your details will be stored by us for the purpose of processing your enquiry and for any follow-up questions. The details entered via the contact form are transmitted to us by e-mail; these form details are not stored in a database of this website. For sending, we use the Resend service of Plus Five Five, Inc. (San Francisco, USA), which acts for us as a processor under Art. 28 GDPR. Sending takes place via servers in the European Union (Ireland); access from the USA cannot, however, be ruled out. The company is certified under the EU-U.S. Data Privacy Framework, for which an adequacy decision of the European Commission exists (Art. 45 GDPR); Standard Contractual Clauses have additionally been agreed. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures or performance of a contract) as well as Art. 6 (1) (f) GDPR (legitimate interest in responding). Before sending, you confirm with a checkbox that you have taken note of this statement; the confirmation serves your information and is not stored anywhere. We delete the data as soon as it is no longer required for the purpose for which it was collected.
6. Map display (OpenStreetMap)
On the contact page you can display a map from the OpenStreetMap service (OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom). The map does NOT load automatically: at first you only see a placeholder with the “Load map” button. Only when you click it is the map retrieved, and in the process your IP address is transmitted to OpenStreetMap. The legal basis is your consent, which you give with the click (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG – German Telecommunications Digital Services Data Protection Act); you can withdraw it by reloading the page. An adequacy decision of the European Commission is in place for the United Kingdom. If you do not click the button, no data is transmitted to OpenStreetMap. The directions are additionally described in text. Further information can be found in the privacy policy of OpenStreetMap: wiki.osmfoundation.org/wiki/Privacy_Policy.
7. Room booking
For online bookings, we use the booking software of Profitroom S.A., based in Poland. The buttons “Check availability” and “Book now” take you to their booking process. The reservation data entered there is transmitted to Profitroom and processed under a data processing agreement pursuant to Art. 28 GDPR; the legal basis is Art. 6 para. 1 lit. b GDPR (performance of a contract).
When clicked, we ask you how the booking process should open. If you decline, it opens in its own browser window; in that case, no script from Profitroom is loaded into this website.
If you agree, the process opens as a window over this page. For this, a script from open.upperbooking.com is loaded, which starts further services from Profitroom: a reminder for unfinished bookings (cart.profitroom.com), reach measurement (trl.upperbooking.com) and an analysis of the booking process (flow-control.profitroom.net). These services store data on your device and recognise you again on a later visit. They are not required for the booking itself; the legal basis is solely your consent (Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG).
Your decision is stored in your browser for six months. You can revoke it at any time in the footer area of this page; the revocation takes effect for the future. As long as you do not click one of the booking buttons, no data will be transmitted to Profitroom.
8. Cookies and local storage
This website does not set cookies for guests and does not load any third-party content when visited. There are no analytics, reach-measurement or marketing tools and no integration of social networks. If you click a booking button, we store your choice of how the booking process should open in your browser's local storage (localStorage), so that we do not have to ask again with every click. This is necessary for the service you requested (§ 25 (2) No. 2 TDDDG). If you consent to booking via this page, the Profitroom services named in section 7 will place their own cookies and similar data on your device. This website also sets cookies only when someone logs into the internal editorial area; these contain a login token without any personal profile, are valid for twelve hours, and are of no relevance to visitors of the website. There is therefore no consent banner when opening the page; you are only asked at the first click on a booking button.
Last updated: September 2026.