Privacy policy

01Controller

Guido Schmitz
Neustraße 17
53547 Dattenberg
Germany
Email:
Telephone: 0155 60854341

02Visiting this website

When you access this website, technically necessary connection data are processed. These may include your IP address, the date and time of access, the page requested, browser type, operating system and referrer URL. Processing is necessary to provide the website securely and reliably. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and uninterrupted operation of the website. Technical log data are retained only for as long as required for operation, security and the prevention of misuse.

03Hosting

This website is provided through OpenAI Sites. Cloudflare infrastructure is used for the technical delivery and protection of the website. In this context, data such as the IP address, time of access, page requested and technical information about the browser and device may be processed. Processing is carried out to provide the website securely, reliably and efficiently on the basis of Article 6(1)(f) GDPR. Where required, appropriate data-protection agreements are in place with the service providers used.

04Contact

If you contact us by email, telephone or WhatsApp, we process the information you provide in order to respond to your enquiry. Our email mailbox is provided by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. If you contact us via WhatsApp, data are processed by WhatsApp Ireland Limited. Use of WhatsApp is voluntary; you may contact us by email or telephone instead. The legal basis is Article 6(1)(b) GDPR where the communication concerns pre-contractual steps or a contract, and otherwise Article 6(1)(f) GDPR. Enquiries that do not result in a booking are deleted once they have been fully dealt with, unless legal grounds require further retention.

05Booking and stay data

When you make an enquiry or booking, we process in particular your first and last name, address, email address, telephone number, arrival and departure dates, number of guests and the information required for booking and payment. The data are used to handle the enquiry, prepare and perform the accommodation contract, communicate before, during and after the stay, and issue the relevant accounting documents. The legal basis is Article 6(1)(b) GDPR. Where statutory record-keeping or retention duties apply, processing is additionally based on Article 6(1)(c) GDPR.

Essential booking details are recorded in a booking confirmation and in an internal occupancy calendar. Information required to enter into the contract must be provided. Without it, we may be unable to process or perform a booking. Where required by law, we also process the data necessary to comply with registration obligations.

06Payment

Payment is currently accepted only by bank transfer. Bank details are provided by email with the non-binding reservation and payment information. The financial institutions involved process the payment and account data required for the transfer. We record receipt of payment and retain the information required for accounting and evidence purposes. The legal bases are Article 6(1)(b) and (c) GDPR.

07Recipients of personal data

Personal data are disclosed only where necessary to provide the website, communicate with you, perform the contract or comply with legal duties. Recipients or categories of recipients may include the hosting and email providers used, the financial institutions involved and competent public authorities. Booking documents are managed solely by us. No other disclosure takes place unless required by law or you have expressly consented.

08Cookies, analytics and external content

The public website currently uses no analytics or marketing services, embedded maps, videos or social-media content, and no cookies that are not technically necessary. If this changes, this privacy policy will be updated before the relevant service is used and consent will be obtained where required.

09Video surveillance of the outdoor area

Video surveillance is limited exclusively to the private courtyard. Public pavements and neighbouring properties are not recorded. Surveillance is used to exercise our property rights and protect people and property. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the prevention and investigation of unauthorised access, vandalism and other security incidents. The interior of the apartment is not monitored. Only the controller has access to the recordings. Recordings are deleted manually after seven days unless they are required for longer in order to investigate a specific incident. A notice at the property informs visitors of the video surveillance.

10Retention periods

Personal data are retained only for as long as necessary for the relevant purpose. Data relating to an enquiry that does not result in a booking are deleted once the enquiry has been fully dealt with, unless legitimate grounds require further retention. Booking confirmations, payment records and other tax- or legally relevant documents are retained for the applicable statutory periods and then deleted. The period stated in Section 9 applies to video recordings.

11Your rights

Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction of processing, data portability and objection. You may also withdraw consent at any time with effect for the future.

12Right to lodge a complaint

You have the right to lodge a complaint with a data-protection supervisory authority. In particular, you may contact the authority in the German federal state in which the controller resides or has his place of business.

13Data security

We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access and misuse. Data transmitted through this website are encrypted using an SSL or TLS connection.