Important Security Information

Dear Guests,
The protection of your personal data and your privacy is very important to us. We are writing to inform you of a security incident involving the reservation service provider HotelNetSolutions GmbH, which also provides services for our hotel. In connection with this incident, phishing messages have already been reported in which fraudulent third parties are using existing booking information to specifically deceive guests.

Since it has not yet been conclusively determined whether and to what extent your booking data has been affected, we are informing you as a precautionary measure about the facts of the matter, the potential risks, and the steps you can take to protect yourself. This letter serves as a notification in accordance with Article 34 of the General Data Protection Regulation (GDPR).

What happened?
According to the information available to date, a technical vulnerability in an interface to a connected hotel management system at our data processor, HotelNetSolutions GmbH (HNS), was exploited. This allowed unauthorized parties to access booking information to which they should not have had access. We would like to emphasize that the security incident was not caused by an error in our hotel’s own operational processes.

HNS has announced that the vulnerability was patched on September 19, 2026. The investigation into the security incident is ongoing. The exact timeframe and full extent of any potential unauthorized access have not yet been conclusively determined.

In connection with the incident, phishing messages have been reported that specifically target actual hotel reservations. Our hotel has also received reports of suspected cases. In these instances, guests were contacted via WhatsApp, among other channels, and asked to take further actions related to their reservations.

What data may be affected?

Based on the information available to HNS so far, the following information in particular may be affected:
> Guest’s name
> Hotel name
> Reservation number
> Check-in and check-out dates
> Contact information, particularly email address and phone number
> Total amount of the reservation.

The specific data that may have been affected in each individual case depends on the booking in question. At this time, we cannot definitively confirm whether your specific booking was affected by unauthorized access or, if so, which specific data may have been viewed.

Based on current information, HNS has not reported any indications that credit card or other payment data was compromised through the identified vulnerability. This does not rule out the possibility that perpetrators may attempt to obtain such data through phishing attacks.

What consequences could result from this?
If third parties have access to booking information, they can use it to send messages that appear genuine at first glance. Such messages may, for example, give the impression that a payment is still outstanding, that payment details need to be confirmed, or that an additional fee has been charged. They may also include accurate details such as your name, the hotel name, the travel dates, or the reservation number. Therefore, such details are not reliable proof that a message actually comes from our hotel or a legitimate service provider.

Possible consequences of a successful phishing attack could include:
the disclosure of additional personal information
unauthorized access to payment information
fraudulent payments or financial losses
further targeted fraud attempts using your booking information.

How can you protect yourself?
Please pay particular attention to the following recommendations:

1. Do not click on links in unexpected messages that ask you to confirm your reservation, enter payment details, or pay additional amounts.
2. Do not enter credit card, bank, or login information via such links. This applies even if the message contains correct details about your reservation.
3. Verify payment requests directly with our hotel. To do so, use our official contact information (Reservations, Tel: +49 (6852) 8098340; Email: reservierung@seezeitlodge.de)—not the phone number or link provided in the suspicious message.
4. Save any suspicious messages. They may be important for investigating the incident. Do not reply to the message or provide any further personal information to the sender.
5. If you have already entered payment information or initiated a payment, contact your bank or card issuer immediately. If necessary, have the affected card blocked and check your account activity.
6. If you have entered login credentials, change them immediately on the relevant official website. Also change the same or similar passwords for any other services where you use them. We would like to expressly point out that our company and our data processors do not ask guests via WhatsApp to enter or confirm credit card, payment, or other travel information for an existing reservation or a past stay.

What measures have been taken?
According to HotelNetSolutions GmbH, the identified vulnerability at HNS was patched on September 19, 2026. HNS has also implemented additional protective measures and is continuing to investigate the incident.

We take this matter seriously and are informing you so that you can recognize potential phishing attempts and take appropriate protective measures. Our investigation into the incident and assessment of whether booking data may have been compromised are ongoing.

Where can you find more information or report a suspected incident?
If you have received a suspicious message related to your booking or are unsure whether a payment request is legitimate, please contact us directly through our official channels:

Seezeitlodge Hotel & Spa
Am Bostalsee 1
66625 Gonnesweiler
Phone: +49 (6852) 8098340
Email: reservierung@no-spam.seezeitlodge.no-spam.de

HNS has published further information at: https://hotelnetsolutions.de/wichtiger-sicherheitshinweis-aktuelle-phishingvorfaelle/

We regret the uncertainty caused by this incident. With this notice, we would like to provide transparent information about the circumstances known to date and enable you to protect yourself against potential fraud attempts. Protecting your data and clarifying the facts of the matter are top priorities for us.

Your hosts
Kathrin & Christian Sersch and the entire Seezeitlodge team