Privacy Policy Controller The responsible party within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is: Heike Sulzer Tucherstr. 39a 77815 Bühl Germany Your Data Subject Rights Using the contact details provided below, you may exercise the following rights at any time: Right of access to your data stored by us and information about its processing (Art. 15 GDPR) Right to rectification of inaccurate personal data (Art. 16 GDPR) Right to erasure of your data stored by us (Art. 17 GDPR) Right to restriction of data processing if we are not yet permitted to delete your data due to legal obligations (Art. 18 GDPR) Right to object to the processing of your data by us (Art. 21 GDPR) Right to data portability, provided that you have consented to data processing or have concluded a contract with us (Art. 20 GDPR) If you have given us consent, you may withdraw it at any time with effect for the future. You may also lodge a complaint with a supervisory authority, for example with the data protection authority of your place of residence or with the authority responsible for us as the controller. A list of supervisory authorities (for the non-public sector) with contact details is available at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html Collection of General Information When Visiting Our Website Type and purpose of processing: When you access our website—i.e., when you do not register or otherwise transmit information—information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address, and similar data. This information is processed for the following purposes: Ensuring a smooth connection to the website Ensuring the proper use of our website Evaluation of system security and stability Other administrative purposes We do not use your data to draw conclusions about your person. Information of this kind is statistically evaluated to optimize our website and the technology behind it. Legal basis: Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. Recipients: Recipients of the data may include technical service providers acting as processors for the operation and maintenance of our website. Storage period: The data is deleted as soon as it is no longer required for the purpose of collection. For data used to provide the website, this is generally the case when the session ends. Provision required or mandatory: The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the functionality of the website cannot be guaranteed. For this reason, objection is excluded. Registration on Our Website Type and purpose of processing: When registering to use our personalized services, we collect some personal data such as name, address, and contact details (e.g., phone number and email). Registered users can access content and services offered only to registered users and may amend or delete their registration data at any time. Legal basis: Processing is based on the user’s consent (Art. 6(1)(a) GDPR). If registration serves to fulfill a contract or pre-contractual measures, the additional legal basis is Art. 6(1)(b) GDPR. Recipients: Recipients may include technical service providers acting as processors for the operation and maintenance of our website. Storage period: Data is processed only as long as consent exists. Thereafter, data is deleted unless statutory retention obligations apply. Provision required or mandatory: Providing your personal data is voluntary but required to access our personalized services. Provision of Paid Services Type and purpose of processing: To provide paid services, additional data (e.g., payment details) are collected to complete your booking. Legal basis: Processing necessary for the performance of a contract is based on Art. 6(1)(b) GDPR. Recipients: Recipients may include processors. Storage period: Data is stored according to statutory retention periods, generally 6 or 10 years for accounting and tax purposes. Comment Function Type and purpose of processing: When users leave comments on our website, we store the comment, the time of creation, and the chosen username. This is for our protection in case of illegal content. Legal basis: Processing is based on legitimate interest (Art. 6(1)(f) GDPR) to enable interaction. Recipients: Recipients may include processors. Storage period: Data is deleted when no longer required for its purpose. Contact Form Type and purpose of processing: Data entered via the contact form is stored to allow individual communication with you. Providing a valid email address and your name is required to process your request. Legal basis: Processing is based on legitimate interest (Art. 6(1)(f) GDPR) and, for pre-contractual inquiries, on Art. 6(1)(b) GDPR. Recipients: Recipients may include processors. Storage period: Data is deleted 6 months after handling your request unless statutory retention obligations apply. Use of Google Maps Type and purpose of processing: We use Google Maps, a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This allows the display of interactive maps on our website. For more information, see Google’s Privacy Policy: https://policies.google.com/privacy. Legal basis: Art. 6(1)(a) GDPR (consent). Data transfer to third countries: Google processes data in the USA under the EU-US Privacy Framework. Embedded YouTube Videos We embed YouTube videos operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. Visiting a YouTube-embedded page connects you to YouTube servers and informs them which pages you visit. Legal basis: Art. 6(1)(a) GDPR (consent). More on privacy: https://policies.google.com/privacy Google AdWords and Conversion Tracking We use Google AdWords Conversion Tracking to measure the success of our ads. Legal basis: Art. 6(1)(a) GDPR (consent). Cookies expire after 30 days and do not personally identify users. Google Remarketing This website uses Google Remarketing to show interest-based ads within the Google Network. Legal basis: Art. 6(1)(a) GDPR (consent). You can disable remarketing at: https://support.google.com/adwordspolicy/answer/143465 Data Processors The following organizations are contracted for data processing: Smoobu GmbH – Software for vacation rental hosts Wönnichstr. 68/70, 10317 Berlin, Germany Privacy Policy: https://www.smoobu.com/datenschutz/ Changes to Our Privacy Policy We reserve the right to amend this privacy policy to reflect current legal requirements or service changes. The new privacy policy applies upon your next visit. Questions About Data Protection If you have any questions regarding data protection, please contact us: 📧 ferienwohnung-schwarzwaldschick@web.de
