Privacy Policy
1. Data Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws, as well as other data protection regulations, is:
B&B HOTELS Germany GmbH
Altkönigstraße 10
65239 Hochheim am Main
Germany
Phone: +49 (0) 6146 9090-0
Email: kontakt@hotelbb.com
2. Data Protection Officer
The Data Protection Officer at B&B Hotels Germany GmbH can be contacted by email at datenschutz@hotelbb.com, by phone at +49 (0) 6146 9090-0, or by mail at the address provided, with the note “Data Protection Officer.”
3. General Information on Data Processing
This Privacy Policy applies to our career portal at https://join-hotel-bb.com and the associated employer branding website. On these websites, we provide information about career opportunities within our hotel chain—both in the head office/administration and in hotel management—and offer the opportunity to apply for advertised positions.
We collect, process, and use personal data only to the extent necessary to provide a functional website and our content and services, or if you have consented to such processing.
4. Provision of the Website and Creation of Log Files
4.1 Description and Scope of Data Processing
Every time our career page is accessed, our system automatically collects data and information from the user’s computer. The following data is collected:
- IP address of the requesting computer (truncated or anonymized, if necessary)
- Date and time of access (server request)
- Name and URL of the file accessed / page visited
- Website from which the access is made (referrer URL)
- Browser type and version used
- Operating system of the accessing computer
- Hostname of the connecting computer
- Name of the Internet service provider
As a rule, we are unable to identify specific individuals, nor is that our intention.
4.2 Legal Basis
The legal basis for the temporary storage of data and log files is Article 6(1)(f) of the GDPR. Our legitimate interest lies in ensuring the smooth operation of the website and improving our services.
4.3 Retention Period
The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. For server log files, this occurs no later than 21 days after collection.
5. Application Process
5.1 Description and Scope of Data Processing
On our career portal, you can apply for open positions—both for roles at our headquarters or in administration, as well as for hotel manager positions or roles in hotel management.
As part of the application process, we process the following personal data in particular:
- First name, Last name
- Contact information (email address, phone number, mailing address)
- Information about the desired position and location
- Application materials (cover letter, resume, transcripts, certificates)
- Desired salary and earliest possible start date (if applicable)
- First name and last name of a person providing a recommendation
- Additional information that you voluntarily provide as part of your application
5.2 Legal Basis
Your application data is processed on the basis of Article 6(1)(b) of the GDPR (pre-contractual measures taken at the request of the data subject) in conjunction with Section 26(1) of the BDSG (data processing for the purposes of the employment relationship).
Note: If the applicability of Section 26 of the Federal Data Protection Act (BDSG) is restricted due to the ECJ ruling (Case C-34/21), the processing is based directly on Article 6(1)(b) of the GDPR.
5.3 Recipients of the data
Only those involved in the hiring decision will have access to your application information:
- Human Resources Department / HR Team
- Department heads and managers in the respective division (head office or hotel operations)
- Executive Assistant (if applicable)
- external staffing agencies, if necessary
- if applicable, a hotel for work shadowing
All individuals and service providers involved are bound by a duty of confidentiality.
5.4 Retention Period
If an employment relationship is not established, your application data will be deleted no later than 90 days after the conclusion of the application process, provided that no other legitimate interests prevent such deletion. One such legitimate interest is, for example, the burden of proof in proceedings under the General Equal Treatment Act (AGG).
If you give us your consent to be added to our talent pool, we will store your data for a period of 90 days so that we can notify you of future job openings that match your profile. You may withdraw this consent at any time.
6. Talent Pool
You have the option to consent to having your application information added to our talent pool. If you do so, we will use your information to proactively notify you of suitable job openings.
The legal basis is your consent pursuant to Article 6(1)(a) of the GDPR. You may withdraw this consent at any time with future effect, for example by sending an email to datenschutz@hotelbb.com.
7. Cookies
Our careers page uses cookies. These are small text files that are stored on your device. Cookies cannot run programs or transmit viruses to your computer system.
Most of the cookies we use are so-called “session cookies.” They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser the next time you visit.
You can configure your browser to notify you when cookies are set and to allow cookies only on a case-by-case basis, to block cookies in specific cases or generally, and to enable the automatic deletion of cookies when you close your browser. Disabling cookies may limit the functionality of this website.
7.1 Technically necessary cookies
Some cookies are technically necessary for the website to function properly (e.g., session cookies, language settings). The legal basis is Article 6(1)(f) of the GDPR.
7.2 Analytics and Marketing Cookies
In addition, we use cookies for analytical and/or marketing purposes. For details, please refer to our cookie banner or our cookie policy. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG.
8. Web Analytics and Marketing Tools
8.1 Google Analytics
Where applicable, we use Google Analytics to analyze user behavior on our careers page. The legal basis for this is your consent pursuant to Article 6(1)(a) of the GDPR, which you may withdraw at any time via the cookie banner.
- IP anonymization: We have enabled the IP anonymization feature on this website. This means that Google will truncate your IP address within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before transmitting it to the United States.
- Demographic characteristics: If enabled, reports can be generated that provide information about the age, gender, and interests of website visitors. This data cannot be linked to any specific individual.
- Data Processing: We have entered into a data processing agreement with Google.
Retention Period: Data stored by Google at the user and event levels is anonymized or deleted after 14 months. - Objection: You can prevent Google Analytics from collecting data by installing the browser add-on at https://tools.google.com/dlpage/gaoptout?hl=de or by withdrawing your consent via the cookie banner.
8.2 Google Tag Manager
Where applicable, we use Google Tag Manager. The tool itself does not store any personal data, but it triggers other tags that may collect data. If you have disabled tracking at the domain or cookie level, this setting will apply to all tracking tags implemented using Google Tag Manager.
8.3 Google reCAPTCHA
Where forms on our careers page are protected by reCAPTCHA, we integrate the bot detection feature provided by Google. Privacy Policy: https://policies.google.com/privacy. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in protection against misuse and spam).
8.4 Google Maps
Our website uses Google Maps, a mapping service provided by Google, via an API (Application Programming Interface).
To ensure data protection on our website, Google Maps is disabled when you first visit our website. A direct connection to Google’s servers is only established once you manually activate Google Maps (consent pursuant to Art. 6(1)(a) GDPR). This prevents your data from being transmitted to Google the moment you first visit our website.
Once Google Maps is activated, Google will store your IP address. This information is then typically transmitted to a Google server in the United States and stored there. Once Google Maps is activated, the provider of this website has no control over this data transfer.
For more information on how user data is handled, please see Google’s Privacy Policy: https://www.google.de/intl/de/policies/privacy/.
8.5 YouTube Plugin
Our website uses YouTube plugins to embed and display video content. The video portal is provided by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (“YouTube”).
When you visit a page with an embedded YouTube plugin, a connection is established with YouTube’s servers. This allows YouTube to see which of our pages you have visited.
YouTube can link your browsing activity directly to your personal profile if you are logged into your YouTube account. You can prevent this by logging out first.
For information about the purpose and scope of data collection, as well as the further processing and use of data by YouTube, and your rights and privacy settings in this regard, please refer to YouTube’s Privacy Policy at: https://www.google.de/intl/de/policies/privacy.
8.6 Hotjar
This website uses Hotjar, an analytics software provided by Hotjar Ltd. (“Hotjar”) (http://www.hotjar.com, Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta, Europe). Hotjar allows us to measure and analyze user behavior (clicks, mouse movements, scroll depths, etc.) on our website. The information generated by the “tracking code” and “cookie” regarding your visit to our website is transmitted to Hotjar’s servers in Ireland and stored there. The tracking code collects the following information: Device-specific data
The following information may be recorded by your device and browser:
- Your device’s IP address (collected and stored in an anonymized format)
- Your email address, including your first and last name, if you have provided this information to us via our website
- Screen size of your device
- Device type and browser information
- Geographic location (country only)
- The preferred language for displaying our website
- User interactions
- Mouse events (movement, position, and clicks)
- Keyboard input
- Log data
The following data is automatically generated by our servers when Hotjar is used
- Related domain
- Pages visited
- Geographic location (country only)
- The preferred language for displaying our website
- Date and time the website was accessed
Hotjar will use this information to analyze your use of our website, generate usage reports, and provide other services related to website usage and web analytics. Hotjar also uses third-party services, such as Google Analytics and Optimizely, to provide these services. These third-party providers may store information that your browser sends during your visit to the website, such as cookies or IP requests. For more information on how Google Analytics and Optimizely store and use data, please refer to their respective privacy policies.
By continuing to use this website, you consent to the processing of your data by Hotjar and its third-party providers as described above, in accordance with their respective privacy policies.
The cookies used by Hotjar have different “lifespans”; some remain active for up to 365 days, while others are only valid for the duration of the current visit.
You can prevent Hotjar from collecting data by clicking the following link and following the instructions provided there: Hotjar Opt-out
8.7 Newsletter
If you have given your express consent, we will send our newsletter to your email address on a regular basis. To receive our newsletter, you must provide us with your email address and then verify it. No additional data is collected, and any other information is provided on a voluntary basis. The data is used exclusively for the purpose of sending the newsletter.
The data provided when you subscribe to the newsletter is processed exclusively on the basis of your consent pursuant to Article 6(1)(a) of the GDPR. You may withdraw your consent at any time. To withdraw your consent, simply send an informal email or unsubscribe via the “Unsubscribe” link in the newsletter. The lawfulness of data processing operations that have already taken place remains unaffected by the withdrawal.
Any data provided when setting up the subscription will be deleted upon cancellation. If this data has been transmitted to us for other purposes or through other channels, we will continue to retain it.
8.8 Facebook Pixel, Custom Audiences, and Facebook Conversion
Within our online platform, the so-called “Meta Pixel” of the social network Facebook, operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
Meta is certified under the EU-U.S. Data Privacy Framework, thereby ensuring an adequate level of data protection in accordance with European Union requirements.
With the help of the Facebook Pixel, Facebook is able to identify visitors to our website as a target audience for displaying ads (so-called “Facebook Ads”). Accordingly, we use the Facebook Pixel to display the Facebook Ads we place only to those Facebook users who have shown an interest in our online offering or who exhibit certain characteristics (e.g., interests in specific topics or products, determined based on the websites visited), which we transmit to Facebook (so-called “Custom Audiences”). With the help of the Facebook Pixel, we also aim to ensure that our Facebook Ads align with users’ potential interests and do not come across as intrusive. With the help of the Facebook Pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called “conversion”).
Facebook processes this data in accordance with its Data Use Policy. For general information on the display of Facebook ads, please refer to Facebook’s Data Use Policy: https://www.facebook.com/policy.php. For specific information and details about the Facebook Pixel and how it works, please visit Facebook’s Help Center: https://www.facebook.com/business/help/651294705016616.
You can object to the collection of data by the Facebook Pixel and the use of your data to display Facebook ads. To control the types of ads shown to you on Facebook, you can visit the page set up by Facebook and follow the instructions there regarding usage-based advertising settings: https://www.facebook.com/settings?tab=ads. These settings apply across all platforms, meaning they are applied to all devices, such as desktop computers or mobile devices.
You can also opt out of cookies used for audience measurement and advertising purposes via the Network Advertising Initiative’s opt-out page (http://optout.networkadvertising.org/) and the U.S. website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).
8.9 Contact Form
If you contact us by email or through a contact form, the information you provide—including your contact details—will be stored so that we can process your inquiry or respond to any follow-up questions. This information will not be shared with third parties without your consent.
The processing of the data entered in the contact form is based solely on your consent (Art. 6(1)(a) GDPR). You may withdraw your consent at any time. To do so, simply send us an informal email. The lawfulness of the data processing operations carried out prior to the withdrawal remains unaffected by the withdrawal.
Data submitted via the contact form will be retained by us until you request its deletion, revoke your consent to its storage, or there is no longer any need to store the data. Mandatory legal provisions—in particular retention periods—remain unaffected.
8.10 Additional Tools
If we use additional tools (e.g., Google Ads / conversion tracking, remarketing, Facebook Pixel, Hotjar, Google Maps), we will provide separate information about them in the cookie banner and include the details here. The legal basis in each case is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG.
9. Social media links
Our Careers page contains links to our social media profiles (e.g., LinkedIn, Instagram, Kununu). These are simple links—we do not use social media plugins that transmit data to the respective networks as soon as the page is loaded.
You will only be redirected to the external platform once you actively click on such a link. The privacy policy of the respective provider will then apply.
10. SSL or TLS encryption
For security reasons and to protect the transmission of confidential information—such as inquiries you send to us as the website operator—our website uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address bar of your browser changes from “http://” to “https://” and by the lock icon in your browser’s address bar.
11. Your Rights as a Data Subject
You have the right at any time to access, correct, delete, or restrict the processing of your stored data, as well as the right to object to the processing, the right to data portability, and the right to file a complaint in accordance with the provisions of data protection law.
| Law | Description |
| Right of Access (Art. 15) | You may request information regarding whether and to what extent we process your data. |
| Rectification (Art. 16) | You may request the correction of inaccurate data or the completion of incomplete data. |
| Erasure (Art. 17) | You may request the deletion of your data, provided that there are no legal obligations to retain it. |
| Restriction (Art. 18) | You may request the restriction of processing, e.g., if you dispute the accuracy of the data. |
| Data Portability (Art. 20) | You may request that we provide you with your data in a structured, commonly used, machine-readable format. |
| Objection (Art. 21) | See separate information under Section 17.1 |
| Withdrawal (Art. 7, para. 3) | You may revoke any consent you have given at any time with future effect. |
| Complaint (Art. 77) | You have the right to file a complaint with a data protection supervisory authority. |
If necessary, we may request additional information to verify your identity.
11.1 Information Regarding Your Right to Object Under Article 21 of the GDPR
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out on the basis of Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.
12. Right to file a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR.
The regulatory authority responsible for us is:
The Hessian Data Protection Commissioner
Gustav-Stresemann-Ring 1
65189 Wiesbaden
https://datenschutz.hessen.de
13. Validity and Changes to This Privacy Policy
This Privacy Policy is current as of May 2026. We reserve the right to update this Privacy Policy to ensure it remains in compliance with current legal requirements or to reflect changes to our services. The most recent version of the Privacy Policy will apply to your next visit.