Important Information on Data Protection and the Security of Your Guest Data

Security notice regarding an incident at our technical service provider Straiv

As of: 26 October 2026

Dear Guests,

The protection of your personal data and your trust in our hotel are of great importance to us.

We would therefore like to inform you transparently about a security incident at our external service provider Straiv GmbH, whose software we use to provide and automate digital guest services.

What happened?

Straiv GmbH has informed us of a security vulnerability in its system. According to the information available so far, the vulnerability was discovered on 21 October 2026. It is suspected that unauthorised third parties may have accessed personal data between 17 and 21 October 2026.

The service provider has investigated the vulnerability and initiated measures to fix it.

Whether, and to what extent, our guests’ data was actually affected by unauthorised access is still under investigation.

Which data may be affected?

Based on the information available so far, the following data in particular may be affected:

• First and last name
• Email address
• Phone number
• Information about the booked hotel
• Booking-related information, such as payment amounts

According to the service provider’s information to date, credit card data and special categories of personal data within the meaning of Art. 9 GDPR are not affected.

What are the risks?

There is a possibility that unauthorised third parties may use this information for fraudulent contact attempts.

In particular, you may receive emails, text messages or WhatsApp messages that appear to come from our hotel or a booking service provider.

These messages may, for example, ask you to confirm a reservation, update your payment details or make a supposedly outstanding payment.

Because such messages may contain genuine booking information, they can appear particularly convincing.

What do we recommend?

Please observe the following security advice:

• Be especially cautious with unexpected payment requests by email, text message or WhatsApp.
• Do not open suspicious links, attachments or QR codes.
• Do not enter credit card details, passwords or other sensitive data via unknown links.
• Verify questionable messages directly using the official contact details of our hotel.
• If you have already entered payment information on a suspicious website, please contact your bank or credit card provider immediately.

What measures have we taken?

We are in contact with our service provider Straiv to clarify the facts and any possible impact on our guests’ data.

As part of our responsibilities under data protection law, we are reviewing the incident and any further measures that may be required under Articles 32 to 34 of the General Data Protection Regulation (GDPR).

Our aim is to identify and limit potential risks to our guests at an early stage and to ensure the secure use of our digital services.

Who can you contact?

If you have received suspicious messages or have any questions about this security incident, please contact us directly or our data protection officer.

Contact: datenschutz@prodsgvo.de

Our commitment to you

We take the protection of your personal data very seriously and regret any inconvenience this incident may cause.

We will closely monitor further developments and update this information as soon as significant new findings become available.

Thank you for your trust.