Last updated: 28 March 2026
This Privacy Policy explains how Finest Family Hotels (“FFH”, “we”, “us”, “our”) processes personal data when you visit finestfamilyhotels.com, subscribe to our newsletter, contact us, submit a hotel or partnership enquiry, or interact with our content, links, and services.
FFH is an editorial travel website operated from Germany and aimed primarily at adults planning family travel. The website is in English, but the applicable data-protection framework is determined by the relevant EU and German rules, including Regulation (EU) 2016/679 (“GDPR”) and the German Telecommunications and Digital Services Data Protection Act (“TDDDG”).
1. Controller
Controller for the processing of personal data on this website is:
AE Holding GmbH
Gerhard-Hoehme-Allee 1
41466 Neuss
Germany
Represented for this website by: Alexander Eissing
General contact: hello@finestfamilyhotels.com
Privacy contact: privacy@finestfamilyhotels.com
2. Core Principles
We process personal data lawfully, fairly, and transparently. We collect only the data we need for clearly defined purposes, keep it only as long as necessary, limit access internally, and apply technical and organisational measures appropriate to the risks of the processing.
3. Personal Data We Process
Depending on how you use the website, we may process:
- Identification and contact data (name, email, company, hotel name, enquiry details)
- Communication data (messages through contact forms or email)
- Technical and device data (IP address, browser type, device info, timestamps, server logs)
- Consent and preference data (cookie choices, newsletter consent)
- Newsletter data (subscription status, confirmation timestamps, unsubscribes)
- Commercial-interaction data (affiliate or partner link clicks)
4. Website Hosting and Server Logs
When you visit the website, our hosting provider processes technical data necessary to deliver the site and defend it against abuse. This includes your IP address, browser and device information, date and time of access, requested resource, referrer, and response status.
Legal basis: Article 6(1)(f) GDPR — legitimate interests in secure and reliable website operation.
5. Contact Forms and Direct Communication
When you contact us through our enquiry routes (Readers, Hotels & PR, Partnerships), we process the information you provide to respond to your request, assess submissions, and maintain correspondence.
Legal basis: Article 6(1)(b) GDPR (pre-contractual or contractual communication) and/or Article 6(1)(f) GDPR (general correspondence).
6. Newsletter and Email Updates
If you subscribe to our newsletter, we process your email address, name, signup source, consent record, and subscription history. We use double opt-in where required.
Legal basis: Article 6(1)(a) GDPR — consent. You may unsubscribe at any time.
7. Cookies and Similar Technologies
We may use cookies and similar technologies. Strictly necessary technologies may be used without consent. Non-essential technologies (analytics, marketing, affiliate tracking) are only activated after valid consent.
You can review or change your choice at any time:
8. Affiliate Links and Third-Party Sites
Our pages may contain outbound links to hotels, booking platforms, or travel-gear merchants. If you click such a link, the destination site may process personal data under its own responsibility. We may receive aggregated information about referral activity for internal reporting.
9. International Data Transfers
Personal data may be processed inside and outside the EEA. Where transferred to a third country, we rely on available lawful mechanisms under Articles 44 et seq. GDPR (adequacy decisions, Standard Contractual Clauses, or other valid safeguards).
10. Storage Periods
- Server and security logs: up to 30 days
- General contact enquiries: up to 24 months after correspondence ends
- Newsletter data: until unsubscribed
- Consent records: up to 3 years for accountability
- Legal and tax records: according to applicable statutory obligations
11. Your Rights
Under GDPR, you have the right to: access, rectification, erasure, restriction of processing, objection, data portability, and to withdraw consent. To exercise these rights, contact privacy@finestfamilyhotels.com.
12. Right to Complain
You may lodge a complaint with a supervisory authority. The competent authority for controllers in North Rhine-Westphalia is:
State Commissioner for Data Protection and Freedom of Information NRW
Kavalleriestrasse 2–4
40213 Düsseldorf, Germany
Email: poststelle@ldi.nrw.de
13. Security Measures
We implement technical and organisational measures proportionate to the risk, including HTTPS-only transmission, access controls, and regular software maintenance. Security is an ongoing commitment.
14. Changes to This Privacy Policy
We may update this Privacy Policy to reflect legal, technical, or operational changes. The version published on the website at the time of your use applies to that visit.
15. Contact
General enquiries: hello@finestfamilyhotels.com
Privacy enquiries: privacy@finestfamilyhotels.com