Privacy policy

⚠️ This content is being prepared and will be legally reviewed before go-live.

Controller

Name and address of the controller.

Hosting

This website is hosted on Cloudflare Pages (EU).

Maps (Google Maps)

Maps load only after your explicit consent. Without consent, no data is sent to Google.

Analytics (Plausible)

If enabled: cookie-free, anonymous statistics, only after consent.

Booking & availability (Smoobu)

Our booking calendar shows availability and prices from our channel manager Smoobu (Smoobu GmbH, Berlin). NO Smoobu iframe or script is loaded in your browser — the lookup runs via our own server. When you submit a booking, we transmit the necessary data (name, email, billing address, travel dates, number of guests, optional message) server-side via API to Smoobu to create the reservation and to issue the booking confirmation and invoice. The legal basis is Art. 6(1)(b) GDPR (pre-contractual steps and performance of a contract). We do not store this data ourselves.

Inquiry form (Cloudflare Email Service)

When you contact us via the inquiry form, we process your details (name, email address, message, and any requested travel dates and number of guests) to answer your inquiry. The legal basis is Art. 6(1)(b) and (f) GDPR. To send the inquiry email to us, we use the email service of our hosting provider, Cloudflare, as a processor; a data processing agreement already exists as part of our hosting arrangement. We delete this data once it is no longer required for processing.

Spam/bot protection (Cloudflare Turnstile)

To protect the booking and inquiry forms from automated abuse we use Cloudflare Turnstile (Cloudflare, Inc.). Turnstile sets no advertising/tracking cookies; to distinguish humans from bots, technical data (including your IP address and browser characteristics) is transmitted to Cloudflare. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in preventing abuse/spam).

Video surveillance of the outdoor area

The outdoor area (parking) is video-monitored; interiors are never monitored. The legal basis is Art. 6(1)(f) GDPR (protection of property and guests). On-site signage indicates the surveillance.