Privacy Policy

Who is responsible

The controller is LLC «RUDOLFO» (ТзОВ «РУДОЛЬФО»), EDRPOU 38425207, 4 Virmenska Street, Lviv 79008, Ukraine (see our Legal Notice).
For any question about your data, write to info@rudolfo.ua or call +380 (32) 23-68-000.

At a glance

• On the pages of this website, including the booking pages, nothing is sent to analytics or advertising services before you choose in the cookie banner, and your choice applies to all these pages. On the booking pages the Cloudbeds booking engine loads technically necessary parts, including from LaunchDarkly, and a program file from Google, without sending measurement data; see “Other pages of rudolfo.ua”.
• We use cookies for statistics and marketing only with your consent. You can change your choice at any time under “Cookie settings” at the bottom of every page.
• Bookings are handled in our booking system, Cloudbeds.
• On our new pages, fonts, scripts and images load from our own server; the map is our own, with no embedded third-party service.
• After your stay we ask for your opinion by email; what we store is explained under “Guest survey after your stay”.

When you visit the website

When you open a page, the server of our hosting provider records technical data: IP address, date and time, the page requested, the page you came from, and your browser and device type. This is needed to deliver the pages and to protect the server against misuse (legitimate interest, Art. 6(1)(f) GDPR). Our website and email are hosted by Hosting Ukraine (Ukraine). The hosting provider keeps these server logs for at most about four months (the current and the three previous calendar months).

Our new pages load fonts, scripts and images only from our own server; we do not use Google Fonts or embedded third-party services. The location map on our pages is drawn by us from OpenStreetMap data and loads nothing from elsewhere. Google Maps opens only if you click the link.

Cookies and consent

On your first visit, a banner asks whether we may use cookies for statistics and for marketing. Both stay off until you choose. “Accept all” allows both categories, “Necessary only” allows neither; under “Settings” you can choose each category separately.

Before you choose, and if you decline, we load no Google tag on these pages. The booking pages are an exception: there the Cloudbeds booking engine loads a program file from Google, but sends no measurement data (see “Other pages of rudolfo.ua”). Google Consent Mode is preset to “denied” for all four signals (analytics_storage, ad_storage, ad_user_data, ad_personalization), and ads data redaction is switched on. Before you choose and if you decline, Consent Mode works in its basic mode: as long as you have not agreed to statistics or marketing, these pages send nothing to Google.

If you agree

If you agree to statistics, marketing or both, we load Google Tag Manager (Google Ireland Limited, Ireland; Google LLC, USA). What it loads next depends on your choice:

• Statistics: Google Analytics 4. It counts page views, how far you scroll, and clicks on our phone number, email address, messenger, map and social media links and on links to other websites. For this it sets the cookies _ga and _ga_314JRTE9GS. Google receives, among other things, the page you visit, the date and time, details of your browser and device and your approximate location; Google uses your IP address for this only briefly and does not store it in Google Analytics.
• Marketing: Google Ads. A cookie (_gcl_au) and an entry in your browser’s storage (_gcl_ls) help us measure whether our ads lead to calls or bookings. Selected actions, for example a click on our phone number, are reported to Google Ads as a conversion. Google signals are switched on: if you are signed in to your Google account, Google can link the data to it, build audiences for advertising and show you our ads on other websites.
• Both: everything above.

Links to our booking system get a technical addition (_gl) so that your visit is still counted when you book. If you agree to only one of the two categories, the Google services also send reports for the other category, but without cookies and without an identifier that recognises you from page to page: with “Statistics” only, Google Ads learns, without personalisation, of page views and clicks on our phone number; with “Marketing” only, Google Analytics counts page views and clicks without cookies.

Your choice is stored

We store your choice in the cookie __Host-rudolfo_consent, for this website only (not shared with other domains). It holds a version number, the time of your choice and two values (statistics yes/no, marketing yes/no) and is kept for 180 days; after that we ask again. This cookie is necessary to respect your choice.

Changing your mind

You can change or withdraw your consent at any time, as easily as you gave it: click “Cookie settings” at the bottom of any page. If you withdraw consent, we delete the analytics and advertising cookies on this website (names beginning with _ga, _gid, _hj, _gcl_, _gac_, _fbp, _fbc, maa_, sbjs_), and if the tools were already running, the page reloads.

Cookies on these pages

• __Host-rudolfo_consent: your cookie choice, 180 days, necessary.
• _ga and _ga_314JRTE9GS (Google Analytics, statistics): distinguish visitors and visits; up to 2 years. Your browser may shorten this (Chrome, for example, to 400 days).
• _gcl_au (Google Ads, marketing): 90 days; plus the entry _gcl_ls in your browser’s storage, until it is deleted or you withdraw your consent.
• Google may also set cookies on its own domains (for example google.com, doubleclick.net); Google’s own information applies to these.

When you write to us or call us

You can reach us by email, by telephone, and via WhatsApp, Viber or Telegram on our mobile number. We use what you send us to answer you and keep it for as long as it is relevant to your enquiry or stay.

Messages you send to our number on WhatsApp, Viber or Telegram may first be read and answered by an AI assistant acting on behalf of the hotel; our team sees the conversation and takes over when needed. For this we use technical service providers as processors (hosting, AI provider), and data may also be transferred to countries outside Ukraine and the EU, for example the USA. We keep the messages for as long as they are needed to handle your enquiry and your stay, and then delete them. The messengers themselves are covered by the privacy policies of their providers (Meta for WhatsApp, Rakuten Viber for Viber, Telegram for Telegram).

The messenger links on our pages load nothing when a page opens. Only when you click one does the app or website of that service open, and your messages are then processed by that service under its own rules: WhatsApp (Meta Platforms), Viber (Rakuten Viber), Telegram. The links to Instagram, Facebook, Google and Tripadvisor work the same way: nothing is loaded until you click.

When you book

Bookings are handled by our booking system, Cloudbeds (Digital Arbitrage, Inc., USA). To make a reservation we need your name, contact details, stay dates and payment details. You enter card details directly in the Cloudbeds booking system; our own pages do not store them. Cloudbeds keeps card data tokenised in an external token vault, not in its own database. At the hotel, only authorised staff can see full card details, with a separate card password. Access to the card details is blocked 14 days after your departure, or 30 days after a cancellation or no-show. We use card details only as our Terms and Conditions describe: to secure the cancellation terms (late cancellation, no-show) (section 3) and, after your stay, for damage or missing items (section 14). We need these data to perform the booking contract (Art. 6(1)(b) GDPR); some of them we must keep by law, for example for guest registration, accounting and tax (Art. 6(1)(c) GDPR).

Our booking pages show the Cloudbeds booking engine. Its own Google Analytics measurement is switched off on our pages, and your choice on this website applies there too; see “Other pages of rudolfo.ua”.

Other pages of rudolfo.ua

The events pages are part of this website. They load fonts, styles and images only from our own server, contain no scripts, set no cookies and send nothing to analytics or advertising services. The photo gallery no longer exists; its old address leads to the home page.

On the booking pages (booking) your choice on this website applies. There the Cloudbeds booking engine loads its program files from Cloudbeds servers and requests technical settings for the booking engine from the LaunchDarkly service (LaunchDarkly, Inc., USA); this transmits your IP address and information about your browser. This is technically necessary for the booking (Art. 6(1)(b) GDPR). Cloudbeds’ own Google Analytics measurement is switched off on our pages; the booking engine still loads a program file from Google for it, but sends no measurement data and sets no cookies.

Guest survey after your stay

After you check out, we send you a short email asking how your stay was. Taking part is voluntary. Your answers help us improve the hotel and respond quickly if something went wrong.

What we store

• your booking number and the survey language;
• your ratings and answers, including your comments;
• from our booking system: room type and room number, booking source (for example our website or a booking portal), country, stay dates, number of nights and guests;
• when you sent your answers, and whether you opened the Google or Tripadvisor review links on the thank-you page;
• if you asked us to contact you: how, and our note on how we followed up.

We do not store your name, email address or phone number with your answers, unless you write them into a comment yourself. Nor do we store your IP address with your answers. The survey page sets no cookies and loads no analytics or third-party services. To protect the form against abuse, we count requests per IP address within a 10-minute window, and only as an encrypted check value; these counters are then deleted automatically. As on all our pages, our hosting provider also logs access to the server (see “When you visit the website”).

If you give a low rating or ask to be contacted, your answers are emailed to the hotel manager, with a copy to our service provider Alpen Agency. The hotel manager can find your contact details in our booking system by the booking number.

To see what share of guests reply, we keep each departure on a list for 90 days: booking number, check-out date, number of nights, booking source, country, room type, booking status, the kind of email address (your own or a relay address of a booking portal) and the language group of the invitation.

Legal basis

• Survey: our legitimate interest in knowing how satisfied our guests are and in putting problems right (Art. 6(1)(f) GDPR); in Ukraine, Law No. 2297-VI.
• Offers: the same email contains a button linking to our offers for your next visit and links to our social media pages. This is advertising. We send it to guests who have stayed with us, without separate consent, based on our legitimate interest in direct marketing (Art. 6(1)(f) and Recital 47 GDPR). You can object at any time, free of charge and without giving reasons (Art. 21(2) GDPR). We will then stop sending you surveys and offers.

Who receives the data

• Cloudbeds (Digital Arbitrage, Inc., USA): our booking system. Cloudbeds sends the survey email through the email service Brevo (Sendinblue SAS, France, EU). Brevo routes every link in the email through its own tracking address and records for each guest whether the email was delivered and opened and which links were clicked, and therefore the number you clicked as your first answer. Opening is detected through a small invisible image; you can avoid this by turning off image loading in your email program. These records appear in Cloudbeds’ campaign reports and are kept in line with Cloudbeds’ retention periods. We use them only for overall figures, not to assess individual guests.
• Alpen Agency (Austria, EU): our service provider. On our behalf, it receives and evaluates the answers on a server it operates. Server location: Hetzner Online GmbH, Nuremberg, Germany (EU).
• Hosting Ukraine (Ukraine): hosts our website and email. The survey page runs here, and alerts and monthly reports are sent through our mail server.
• Google Ireland Limited (Ireland): provider of our service provider’s mailbox, which receives copies of the alerts and the monthly reports; in this context data may be transferred to Google LLC (USA, EU-US Data Privacy Framework).

How long we keep it

• answers: 13 months after check-out, then deleted; only anonymous monthly totals remain;
• list of departures: 90 days;
• alerts and monthly reports: until dealt with, at most 13 months.

Unsubscribing and your rights

Every email contains an unsubscribe link. You can also reply “Unsubscribe” or write to info@rudolfo.ua. You will then receive no more surveys or offers from us; booking confirmations are not affected. Your other rights are described under “Your rights”.

Who receives data

• Hosting Ukraine (Ukraine): hosting of the website and email.
• Cloudbeds (Digital Arbitrage, Inc., USA): booking system.
• LaunchDarkly (LaunchDarkly, Inc., USA): technical settings of the Cloudbeds booking engine on the booking pages.
• The payment provider: card payments.
• Google Ireland Limited (Ireland) and Google LLC (USA): for statistics and advertising only with your consent (see “Cookies and consent”); on the booking pages the Cloudbeds booking engine also loads a program file from Google without consent, which transmits your IP address to Google.
• Our AI reception assistant and the services it uses: see “When you write to us or call us”.
• For the guest survey: Brevo (Sendinblue SAS, France, EU), Alpen Agency (Austria, EU) and Google as the provider of its mailbox, see “Guest survey after your stay”.

Some recipients are based in the United States. Google LLC, Meta Platforms, Inc. and WhatsApp LLC are certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision (list checked on 11 October 2026). Our booking system Cloudbeds (Digital Arbitrage, Inc., USA) processes booking data on our behalf; in doing so, data may also be transferred to the USA. The Cloudbeds booking engine also contacts LaunchDarkly, Inc. (USA); this transfers your IP address and information about your browser to the USA. If you write to us on Telegram or Viber, these services process your messages under their own privacy policies: Telegram processes the data of users in Europe in data centres in the Netherlands; Viber is provided by Viber Media S.à r.l. (Luxembourg) and relies on binding corporate rules within its group and on standard contractual clauses.

Legal basis

We process personal data under the Law of Ukraine «On Personal Data Protection» (No. 2297-VI). Where the EU General Data Protection Regulation (GDPR) applies, the legal bases are:

• consent (Art. 6(1)(a)): cookies and tools for statistics and marketing;
• contract (Art. 6(1)(b)): bookings and enquiries about a stay;
• legal obligation (Art. 6(1)(c)): guest registration, accounting and tax records;
• legitimate interest (Art. 6(1)(f)): server logs and protection against misuse; the guest survey and the offers in its email (see “Guest survey after your stay”).

You do not need to provide personal data to read the website. For a booking we need the data listed above; without them we cannot accept the booking. We do not make automated decisions about you; if you agree to marketing, Google may use data to select the advertising it shows you.

How long we keep data

• Booking and billing records: as long as accounting and tax law requires.
• Correspondence: as long as it is relevant to your enquiry or stay.
• Your cookie choice: 180 days.
• Google Analytics data: Google deletes event data automatically after 14 months; for the cookies, see “Cookies on these pages”.
• Server logs: at most about four months at the hosting provider (the current and the three previous calendar months).
• Messages answered by our AI assistant: see “When you write to us or call us”.
• Guest survey: see “Guest survey after your stay”.

Your rights

You may ask us at any time which data we hold about you, have it corrected or deleted, restrict its processing, receive your data in a usable format, or object to processing, including direct marketing. You can withdraw a consent at any time, with effect for the future. Write to info@rudolfo.ua; we answer within 30 days.

You also have the right to lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights (Уповноважений Верховної Ради України з прав людини) or, if you are in the European Economic Area, with your national data protection authority.

Changes

If we change our tools or how we process data, we update this page and the date at the top.