Your bookings
€
- € Hotel’s Currency
- Top Currencies
- € Euro
- US$ U.S. dollar
- £ Pound sterling
- Other Currencies
- CZK Czech koruna
- DKK Danish krone
- HUF Hungarian forint
- PLN Polish zloty
- SEK Swedish krona
- CHF Swiss franc
- NOK Norwegian krone
- RUB Russian ruble
- ZAR South African rand
- Nafl Neth. Ant. Guilder
- JPY Japanese yen
- MXN $ Mexican peso
- DH Moroccan dirham
- CAD Canadian Dollar
- BND Brunei dollar
- CNY Chinese yuan
- PHP Philippine peso
- Rooms
- Details
- Contact
- Extra services
- Confirmation
19-04-2024 / 20-04-2024
Change dates
Official booking engine of Château St. Gerlach by Hoteliers.com -
Privacy statement
Privacy statement You are on or redirected from a website of Hoteliers.com BV, a supplier of booking software and websites that processes bookings on behalf of hotels and hotel chains. Hoteliers.com BV, located at Buiksloterdijk 240, 1025 WE, Amsterdam, the Netherlands, is responsible for the processing of personal data as shown in this privacy statement. Personal data that we process Hoteliers.com processes your personal data because you are using our services and/or you are providing us with your personal data. Below you will find an overview of the personal data we process:
- First and last name
- Gender
- Address data
- Phone number
- E-mail address
- IP address
- Location data
- Information about your activities on our website
- Internet browser and device type
- Other personal data that you actively provide by, for example, creating a profile on this website, in correspondence and by telephone
- Handling (the payment) your booking
- To send our newsletter, if you choose to subscribe
- To call you or send you an e-mail, if necessary to carry out our services
- Inform you about changes to our services and products
- Allow you to create an account
- To provide services to you
- The accommodation: The hotel or accommodation for which you have made a booking.
- Subprocessors: Hoteliers.com or the accommodation can use companies that process bookings and payments for the accommodation. This includes companies such as; a Channel Manager, this is a system that processes bookings of different booking sites for the accommodation; payment systems that process your payment information; Global Distribution Systems, for reservations through companies and travel agents; and other subprocessors.
- Hiring the right people: Make sure that you check the references of applicants, so that you can trust them with personal details of your guests.
- Confidentiality statement: Ensure that employees sign an agreement so that they are safe with personal details of your guests.
- Train all employees: Ensure that all employees are trained in the security of personal data and in the security measures that your organization has taken to prevent unauthorized access. Password protection is also an important part of this training.
- Clean desk policy: Make sure there are no papers in the office. Remind employees to keep files with personal data in a locked cabinet. This applies to offices, but especially to public areas such as the reception from the hotel.
- Portable devices: Never leave portable devices, such as smartphones, tablets or laptops, unattended. Always lock your computer when you walk away from your desk. Never leave a portable device in your car (thieves now even have one trackers who can see if a portable device remains in the boot of a car).
- Printed documents: Do not throw documents with personal data into the trash can, just use a paper shredder. Prevent as much as possible that you take paper documents outside the office.
- Secure the office: Make sure you have the best possible security. Make sure there is access control, so that unwanted visitors cannot come to the office. This applies to offices, but especially to public areas such as the reception, spa or restaurant of the hotel.
- Report Data breach: This is a security incident where personal data was possibly lost or unintentionally accessible to third parties. Hoteliers.com has made agreements with partners that the reporting of a possible Data breach is mandatory.
- Access control: Make sure that only people who really need access have access. Does this person really need all administrator rights? Think of Privacy by Design and give users that way minimal access.
- Do not share accounts: Never share accounts with your colleagues, because it will then be impossible to show via which account any information has been leaked. Most systems are on users manage, the manager ask for a create account for each new employee.
- Strong passwords: Because users have to remember a lot of passwords, they come up with passwords such as "Welcome123 @" or "JanDeBoer1983!". These passwords can be cracked within a few minutes.
- Use a password manager: Use a password management system to make your life easy. It also allows you to securely share passwords with colleagues (if there is no way to create individual user accounts).
- Virus scanner: Make sure your virus scanner is set to automatically download updates every day.
- USB sticks: Do not use USB sticks, as this is a common reason for data leaks or virus infections. Instead, use solutions for sharing documents, such as Dropbox or WeTransfer.
- Secure access to your computer and smartphone: A four-digit code is insufficient and can be hacked within a few hours. Change your password in at least six digits. Also make sure that you activate tracking apps such as Find My iPhone.
- Two-factor authentication: Many systems offer two-factor authentication. When you log in with your password, a code is sent to your smartphone to make sure you are genuine.
- E-mail: Activate two-factor authentication if possible. Do not open messages that you do not expect. Do not open attachments that you do not expect. Ask your system administrator if your e-mail is being sent encrypted.
- TLS, formerly SSL: We send your data via a secure internet connection. You can see this at the address bar 'https' and the padlock in the address bar.
- DKIM, DMARC, and SPF: These are three internet standards that we use to prevent our domain name from being misused to send e-mails containing viruses, spam or which are intended to obtain personal (login) data.