Legal notice/Privacy policy

1) Controller


Sebastian Ehlers
Vorwerkstraße 26
04668 Grimma
Phone: +49 177 1766097
E-mail: ferienwohnung-grimma@gmx.de


2) Overview


We appreciate your interest in our website. The protection of your personal data is important to us. In this privacy policy, we inform you about which personal data we process when you use our online services and for what purposes.


Personal data means any information relating to an identified or identifiable natural person (e.g., name, e-mail address, IP address). We use terms such as “processing” or “controller” in accordance with the definitions in Article 4 GDPR.


3) Which data do we process?


Depending on how you use our website, we process in particular:


  • Master data (e.g., name, address)
  • Contact details (e.g., e-mail address, telephone number)
  • Booking/contract data (e.g., travel period, number of guests, content of your message)
  • Usage/access data (e.g., pages accessed, access times)
  • Meta/communication data (e.g., IP address, device information, browser data)


4) Purposes of processing


We process personal data for the following purposes:


  • Provision of the website and its functions and content
  • Handling enquiries and communication
  • Handling booking enquiries and carrying out pre-contractual/contractual measures
  • Security measures (e.g., abuse and error analysis, defence against attacks)
  • Embedding external map content (Google Maps) to display our location (only with consent)


5) Legal bases


Unless otherwise stated in this privacy policy, the processing of personal data is based on the following legal bases:


  • Article 6(1)(b) GDPR (contract / pre-contractual measures, e.g., booking enquiry)
  • Article 6(1)(c) GDPR (legal obligation)
  • Article 6(1)(f) GDPR (legitimate interests, e.g., secure and stable operation of the website)
  • Article 6(1)(a) GDPR (consent, e.g., for external content such as Google Maps)


6) Hosting / website operation via Smoobu


Our website was created via Smoobu and is technically provided through their systems (website hosting and functions). To the extent that Smoobu processes personal data on our behalf, this is carried out within the framework of processing on behalf in accordance with Article 28 GDPR.


7) Server log files (access data)


When you access our website, the server automatically records information (so-called server log files), e.g., IP address, date and time of access, page/file accessed, browser type/version, and operating system. This data is processed to technically provide the website and to ensure security and stability. The legal basis is Article 6(1)(f) GDPR.


8) Contact


If you contact us by e-mail, phone, or via a contact form, we process your information to handle your enquiry and any follow-up questions. The legal basis is Article 6(1)(b) GDPR (pre-contractual measures) or Article 6(1)(f) GDPR (efficient communication).


9) Booking enquiries / booking process


If you submit a booking enquiry or initiate a booking, we process the data required for this purpose (e.g., name, contact details, travel period, number of guests, message content). The legal basis is Article 6(1)(b) GDPR.


10) Cookies and similar technologies


Our website may use technically necessary cookies or similar technologies to provide basic functions. We do not use analytics or marketing tracking. If external content (e.g., Google Maps) is embedded, such content will only be loaded after you have given your consent.


11) Google Maps (external embedding)


Google Maps is embedded on our website so that you can conveniently view our location on a map. The map is loaded exclusively as external content. In doing so, data (e.g., IP address and technical information about your browser/device) may be transmitted to Google. The embedding takes place only with your consent (Article 6(1)(a) GDPR). Without consent, the map will not be loaded.


Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google).


12) Recipients / disclosure of data


We only disclose personal data if this is necessary, e.g., to:


  • Service providers for hosting/website operation (e.g., Smoobu) within the framework of processing on behalf
  • Authorities/other bodies, where there is a legal obligation
  • Legal/tax advisors, insofar as required for processing


13) Data transfers to third countries


When using Google Maps, processing of data outside the EU/EEA cannot be ruled out. In these cases, transfers are carried out only under the conditions of Articles 44 et seq. GDPR.


14) Storage period / deletion


We store personal data only for as long as necessary for the purposes stated or as long as statutory retention obligations exist. Statutory retention obligations arise in particular from commercial and tax law (generally 6 or 10 years for certain documents).


15) Rights of data subjects


You have the following rights vis-à-vis us:


  • Right of access (Article 15 GDPR)
  • Right to rectification (Article 16 GDPR)
  • Right to erasure (Article 17 GDPR)
  • Right to restriction of processing (Article 18 GDPR)
  • Right to data portability (Article 20 GDPR)
  • Right to object to processing based on Article 6(1)(f) GDPR (Article 21 GDPR)
  • Right to withdraw consent with effect for the future (Article 7(3) GDPR)


16) Right to lodge a complaint with a supervisory authority


You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is, in particular, the data protection supervisory authority of the German federal state of Saxony (Saxon Data Protection and Transparency Commissioner).


17) Changes to this privacy policy


We will adapt this privacy policy if the legal situation, our website, or data processing changes.