Privacy policy

This is a translation of our German privacy policy (Datenschutzerklärung). In case of doubt, the German version applies.

1. Controller

Gross Hotelmanagement GmbH, Freimanner Bahnhofstraße 4, 80807 München, Germany
Phone: +49 89 36039395, email: info@grosshmgmbh.de

2. Principle

This website does not set cookies, does not use analytics or tracking services and does not embed external fonts, maps or videos. It contains no contact form. A small script from our own server controls the menu, animations, seasonal notices, the revenue calculator and the applicant quiz directly in your browser; it stores nothing and transmits nothing. No personal data is actively collected when you visit the website.

3. Server log files

When you access the website, the server processes technically necessary data (IP address, date and time, page requested, browser type) in order to deliver the page and ensure secure operation. The legal basis is Art. 6 (1) (f) GDPR. The data is not analysed for any other purpose; the web server of this site does not write an access log.

4. Hosting and encryption

The website is hosted on a server of IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, in a data centre in Germany. IONOS processes the data on our behalf in accordance with Art. 28 GDPR. The connection to the website is encrypted throughout using TLS (recognisable by “https://” and the padlock symbol in your browser).

5. Contact by email or phone

If you contact us by email (including via a button that only opens a prepared email in your own email program) or by phone, we process the information you provide in order to answer your enquiry. The legal basis is Art. 6 (1) (b) GDPR for contract-related enquiries, otherwise Art. 6 (1) (f) GDPR. We delete the data as soon as it is no longer required, unless statutory retention obligations apply.

For our email accounts we use Google Workspace of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and the email service of IONOS SE, each as a processor in accordance with Art. 28 GDPR. A transfer to the USA cannot be ruled out in the case of Google; it is based on the EU-US Data Privacy Framework (Art. 45 GDPR) and additionally on standard contractual clauses (Art. 46 GDPR).

6. Applications

We accept applications via our online form. We process your information exclusively for the application procedure (Art. 6 (1) (b) GDPR in conjunction with Art. 88 GDPR). If no employment relationship results, we delete your documents no later than six months after the end of the procedure, unless you have consented to longer storage.

The online form is provided by Jotform Inc., San Francisco, USA. Your entries are stored on servers in Frankfurt am Main, Germany. Jotform processes the data as our processor on the basis of a contract in accordance with Art. 28 GDPR. Because Jotform is a US company, access from the USA cannot be completely ruled out; such a transfer is based on the safeguards agreed by Jotform in accordance with Art. 46 GDPR. The form only opens on a Jotform page after you click.

7. Appointment booking

For online appointments we use the appointment booking of Google Calendar as part of our Google Workspace account. We process the data entered there (name, email address, preferred appointment, any message) in order to hold the appointment (Art. 6 (1) (b) GDPR). Google Ireland Limited is our processor; regarding a possible transfer to the USA, section 5 applies. We delete the appointment data as soon as it is no longer needed.

8. Links to third parties

Links to LinkedIn, epubli, Google Maps and our other websites open third-party pages. You only leave this website when you click; from then on, the respective provider is responsible for data processing.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw any consent you have given at any time with effect for the future. You also have the right to lodge a complaint with a supervisory authority; for us this is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany. An informal message to the contact details above is sufficient for all requests.

10. Automated decisions

There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR. Providing your data is not required by law; without your information, however, we cannot process an enquiry or application.

Last updated: 27.10.2026