Data protection

Privacy Policy


The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:


Rene Rummel


Your rights as a data subject


You can exercise the following rights at any time using the contact details provided for our data protection officer:


  • Information about your data stored with us and its processing (Art. 15 GDPR),
  • Correction of inaccurate personal data (Art. 16 GDPR),
  • Deletion of your data stored with us (Art. 17 GDPR),
  • Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
  • Right to object to the processing of your data by us (Art. 21 GDPR) and
  • Data portability, provided you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR).


If you have given us your consent, you can revoke it at any time with effect for the future.


You can lodge a complaint with a supervisory authority at any time, e.g., with the competent supervisory authority of the federal state where you live or with the authority responsible for us as the data controller.


A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html.


Collection of general information when visiting our website


Type and purpose of processing:


When you access our website, i.e., if you do not register or otherwise submit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address, and similar data.


They are processed in particular for the following purposes:


  • Ensuring a smooth connection to the website,
  • Ensuring the smooth operation of our website,
  • Evaluation of system security and stability as well as
  • to optimize our website.


We do not use your data to draw conclusions about you personally. Information of this kind may be statistically evaluated by us in anonymized form to optimize our website and the underlying technology.


Legal basis and legitimate interest:


The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.


Recipient:


To make a booking, you must provide your contact details. You only need to fill in the fields marked with an asterisk (specify mandatory fields here), as well as the booking details (e.g., dates of stay). We also store your booking date and time. Any additional information (specify optional fields here) is not mandatory. The data you provide on our website, including any notes, is personal data and will be processed and used by us to ensure the processing of your booking and the provision of the requested service. We also use your data to provide you with information relevant to your booking or stay. The personal data collected during the booking process will be forwarded to the following third party: Smoobu GmbH – Smoobu.com is software for vacation rental owners, Pappelallee 78/79, 10437 Berlin, Germany. Link to Smoobu's privacy policy: https://www.smoobu.com/de/datenschutz/

Recipients of the data may include technical service providers who act as data processors for the operation and maintenance of our website.


Storage duration:


The data will be deleted as soon as it is no longer required for the purpose for which it was collected. For data used to provide the website, this is generally the case when the respective session ends.


Provision required or necessary:


Providing the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. Furthermore, individual services may be unavailable or restricted. For this reason, objection is not possible.


Registration on our website


Type and purpose of processing:


To register on our website, we require some personal data, which is transmitted to us via an input form.


The following additional data will be collected at the time of registration:


no


Your registration is required to access certain content and services on our website.


Legal basis:


The processing of the data entered during registration is based on the user's consent (Art. 6 para. 1 lit. a GDPR).


Recipient:


Recipients of the data may include technical service providers who act as data processors for the operation and maintenance of our website.


Third country transfer:


The collected data may be transferred to the following third countries:


no


The following data protection guarantees are in place:


Storage duration:


In this context, data will only be processed as long as the corresponding consent is in place.


Provision required or necessary:


Providing your personal data is voluntary and based solely on your consent. Without providing your personal data, we cannot grant you access to our content.


Contact form


Type and purpose of processing:


The data you enter will be stored for the purpose of individual communication with you. A valid email address and your name are required for this. This information is used to assign and subsequently answer your inquiry. Providing further information is optional.


Legal basis:


The processing of the data entered into the contact form is based on a legitimate interest (Art. 6 para. 1 lit. f GDPR).


By providing this contact form, we aim to make it easy for you to get in touch with us. The information you provide will be stored for the purpose of processing your request and for any follow-up questions.


If you contact us to request a quote, the data entered into the contact form will be processed for the purpose of carrying out pre-contractual measures (Art. 6 para. 1 lit. b GDPR).


Recipient:


Recipients of the data may include data processors.


Third country transfer:


The collected data may be transferred to the following third countries:


no


The following data protection guarantees are in place:


Storage duration:


Data will be deleted no later than 6 months after the request has been processed.


If a contractual relationship is established, we are subject to the statutory retention periods under the German Commercial Code (HGB) and will delete your data after these periods have expired.


Provision required or necessary:


Providing your personal data is voluntary. However, we can only process your request if you provide us with your name, email address, and the reason for your inquiry.


Using Google Maps


This website uses Google Maps. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google"). This allows us to display interactive maps directly on the website and enables you to conveniently use the map function. Further information about data processing by Google can be found in Google's privacy policy: https://policies.google.com/privacy. There, you can also change your personal privacy settings in the Privacy Center.


Detailed instructions on managing your data in connection with Google products can be found here: https://www.dataliberation.org


By visiting our website, Google receives information that you have accessed the corresponding subpage of our website. This occurs regardless of whether Google provides a user account that you are logged into, or whether no user account exists. If you are logged into Google, your data will be directly associated with your account.


If you do not wish to have your activity associated with your Google profile, you must log out of Google before activating the button. Google stores your data as user profiles and uses it for advertising, market research, and/or to tailor its websites to user needs. This analysis is carried out in particular (even for users who are not logged in) to provide targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and to exercise this right, you must contact Google.


Revocation of consent:


The provider currently offers no simple opt-out option or way to block data transfer. If you wish to prevent tracking of your activity on our website, please revoke your consent in the cookie consent tool for the relevant cookie category or for all cookies and data transfers that are not technically necessary. In this case, however, you may not be able to use our website at all or only to a limited extent.


SSL encryption


To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.




Information about your right to object pursuant to Article 21 GDPR


Case-specific right of objection


You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) of the GDPR (processing based on legitimate interests); this also applies to profiling based on those provisions as defined in Article 4(4) of the GDPR.


If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of establishing, exercising or defending legal claims.


Recipient of an objection


salzfurtkapelle@sysdatec.de



Changes to our privacy policy


We reserve the right to amend this privacy policy to ensure it always complies with current legal requirements or to reflect changes to our services, such as the introduction of new services. The new privacy policy will then apply to your next visit.


Questions for the Data Protection Officer


If you have any questions about data protection, please send us an email or contact the person responsible for data protection in our organization directly:


datenschutz@unternehmen.de


The privacy policy was created with the help of activeMind AG, the experts for external data protection officers (version #2020-09-30).