DATA PROTECTION GDPR

Privacy Policy

This privacy policy informs you about the type, scope, and purpose of the processing of personal data (hereinafter referred to as “data”) within our online offering and the associated websites, functions, and content, as well as external online presences, such as our social media profiles (hereinafter collectively referred to as the “Online Offering”). With regard to the terms used, such as “processing” or “controller,” we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).

Controller

Wilhelm Kammann

Körnerstr. 4

61440 Oberursel

06171-51182 w.kama(at)t-online.de

Link to Legal Notice (Impressum)

Types of Data Processed

Inventory data (e.g., names, addresses)
Contact data (e.g., email addresses, telephone numbers)
Content data (e.g., text entries, photographs, videos)
Usage data (e.g., websites visited, interest in content, access times)
Meta/communication data (e.g., device information, IP addresses)

Purpose of Processing

Provision of the Online Offering, its functions and content
Responding to contact requests and communication with users
Security measures
Reach measurement/marketing

Definitions

“Personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”). A person is considered identifiable if they can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g., cookie), or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.

“Processing” means any operation or set of operations performed on personal data, whether or not by automated means. The term is broad and covers virtually any handling of data.

“Controller” means the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

Relevant Legal Bases

In accordance with Article 13 GDPR, we inform you of the legal bases of our data processing. Unless otherwise stated in this privacy policy, the following applies:

Consent: Art. 6(1)(a) and Art. 7 GDPR
Performance of a contract and responding to inquiries: Art. 6(1)(b) GDPR
Legal obligation: Art. 6(1)(c) GDPR
Legitimate interests: Art. 6(1)(f) GDPR
Vital interests: Art. 6(1)(d) GDPR

Security Measures

We ask you to regularly review the contents of our privacy policy. We will adapt the privacy policy as soon as changes in our data processing make this necessary. We will notify you if such changes require your cooperation (e.g., consent) or other individual notification.

Cooperation with Processors and Third Parties

If we disclose data to other persons or companies (processors or third parties), transmit data to them, or otherwise grant access to the data, this is done only on the basis of a legal permission (e.g., if transmission to third parties such as payment service providers is required for contract fulfillment under Art. 6(1)(b) GDPR), if you have given consent, if a legal obligation requires it, or based on our legitimate interests (e.g., use of agents, web hosting services, etc.).

If we commission third parties with the processing of data on the basis of a processing contract, this is done pursuant to Art. 28 GDPR.

Transfers to Third Countries

If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)) or this occurs through the use of third-party services or disclosure/transfer of data to third parties, this only takes place if it is required to fulfill our contractual obligations, based on your consent, due to a legal obligation, or based on our legitimate interests. Subject to legal or contractual permissions, data is processed in a third country only if the conditions of Art. 44 et seq. GDPR are met—e.g., based on special safeguards such as an officially recognized level of data protection or standard contractual clauses.

Rights of Data Subjects

You have the right to:

Request confirmation as to whether data concerning you is being processed and obtain access to this data (Art. 15 GDPR)
Request rectification of incorrect or incomplete data (Art. 16 GDPR)
Request deletion of data or restriction of processing (Art. 17 & 18 GDPR)
Receive data you have provided and transmit it to another controller (Art. 20 GDPR)
Lodge a complaint with the supervisory authority (Art. 77 GDPR)

Right of Withdrawal

You have the right to withdraw consent granted under Art. 7(3) GDPR with effect for the future.

Right to Object

You may object at any time to the future processing of data concerning you in accordance with Art. 21 GDPR, in particular to processing for direct marketing purposes.

Cookies and Objection to Direct Marketing

“Cookies” are small files stored on users’ devices. They may store various types of information. Their primary purpose is to store information about a user or device during or after a visit to an online offering.

We may use temporary (“session”) and permanent (“persistent”) cookies and will inform you of this within this privacy policy.

If users do not wish cookies to be stored on their device, they can disable this option in their browser settings. Stored cookies can also be deleted in the browser settings. Disabling cookies may limit the functionality of the Online Offering.

A general objection to cookies used for online marketing purposes (especially tracking) can be made via:

US website: http://www.aboutads.info/choices/
EU website: http://www.youronlinechoices.com/

Deletion of Data

Data we process will be deleted or restricted in processing according to Art. 17 and 18 GDPR. Unless otherwise stated, data is deleted when it is no longer required for its intended purpose and no legal retention obligations apply. If data is not deleted because it is required for other legally permissible purposes, it will be restricted—i.e., blocked and not processed for other purposes.

Legal retention periods apply in Germany and Austria as specified in statutory regulations.

Business-Related Processing

We additionally process:

Contract data (e.g., subject matter, duration, customer category)
Payment data (e.g., bank details, payment history)

for the purpose of fulfilling contractual services, customer service, marketing, advertising, and market research.

Hosting

We use hosting services to provide infrastructure and platform services, computing capacity, storage space, database services, security services, and technical maintenance necessary for operating the Online Offering.

In doing so, we or our hosting provider process the above-mentioned categories of data based on our legitimate interest in the efficient and secure provision of the Online Offering pursuant to Art. 6(1)(f) GDPR in conjunction with Art. 28 GDPR.

Collection of Access Data and Log Files

We or our hosting provider collect data on each access to the server (server log files) based on our legitimate interests under Art. 6(1)(f) GDPR. This includes the name of the accessed website, file, date and time, data volume, successful access message, browser type and version, operating system, referrer URL, IP address, and requesting provider.

Log files are stored for security reasons (e.g., to investigate misuse or fraud) for a maximum of 7 days and then deleted unless further storage is required as evidence.

Contacting Us

When contacting us (e.g., via contact form, email, telephone, or social media), user information is processed to handle and respond to the request pursuant to Art. 6(1)(b) GDPR. The information may be stored in a CRM system or similar inquiry organization.

Requests are deleted when no longer necessary. Necessity is reviewed every two years. Legal retention obligations apply.

Created with Datenschutz-Generator.de by RA Dr. Thomas Schwenke

Use of Webplanner Calendar

To display availability of our holiday properties, we use the software Webplanner provided by Webplanner, Drubbel 3, 48143 Münster, Germany.
Privacy notice of the provider: https://www.webplanner.de/datenschutz

Use of Webplanner Booking Tool

To display availability, booking requests, and bookings of our holiday properties, we use the Webplanner software. All personal data provided by you on our website is processed to handle booking requests or bookings and to provide you with relevant booking information. The data collected for booking purposes is transmitted to the following third party:

Webplanner.de – Holiday Home Management
Drubbel 3
48143 Münster
Privacy notice: https://www.webplanner.de/datenschutz

We have concluded a data processing agreement with the provider in accordance with GDPR.