Privacy
1. responsible body
2. information on data processing
2.1 Processing of data when visiting our website
2.1.1. processing of server log files
2.1.2 Cookies
2.2. processing of customer and contract data when visiting our website
2.3 Security of your data
2.3.1 Technical and organizational measures
2.3.2 SSL encryption
2.4. privacy policy for the use of Google Analytics
2.5. privacy policy for the use of Google My Business
3. general information and mandatory information on the processing of data
3. 1. protection of your personal data during data processing by the landlord of the vacation apartment
3.2. categories of data
3.3. recipients of the collected data
3.4. purpose and legal basis of processing
3.5. storage period
3.6. data protection rights and right of appeal
1. responsible body
For the processing of your personal data when visiting the website and the processing of data by the vacation apartment landlord Martina and Eberhard Eisele:
Ferienwohnungen M. + E. Eisele
Breitensteinstr. 65
72574 Bad Urach
E-Mail: info@ferienwohnung-eisele.de
Telefon: +49 (0) 7125 7 07 92
2. information on data processing
2.1.processing of data when visiting our website
2.1.1. processing of server log files
We automatically collect information about your usage behavior and your interaction with us and register data about your computer or mobile device. We collect, store and use data about each access to our website (so-called server log files).
Data categories
IP address
browser type and browser version
operating system used
the website from which an accessing system arrives at our website (so-called “referrer”)
host name of the accessing computer
date and time of access to the website
Recipients of the data collected from you
Internet service provider for the transport of website data
External contractors according to Art. 28 DSGVO
A transfer to a country outside the European Union or to a country without an adequate level of data protection or to an international organization does not regularly take place, but cannot be ruled out in individual cases. In these individual cases, the requirements of Chapter 5 of the GDPR are observed.
Purpose and legal basis for the processing of this data
The log data is used without assignment to your person or other profiling for statistical evaluations for the purpose of the operation, security and optimization of our website, but also for the anonymous recording of the number of visitors to our website.
We reserve the right to check the log data retrospectively if there is a justified suspicion of unlawful use based on concrete indications.
We store IP addresses in the log files for a limited period of time if this is necessary for security purposes. This storage takes place on the legal basis of Art. 6 para.1 lit. f ) DSGVO. Our legitimate interest lies in the improvement, stability, functionality and security of our website.
Storage period
The collected data is stored temporarily.
The data will be deleted again if no further storage for evidence purposes is required. Otherwise, the data is exempt from deletion in whole or in part until final clarification of an incident.
2.1.2 Cookies
Data categories:
The Internet pages sometimes use so-called cookies. Cookies are small text files or other storage technologies that are placed and stored on your terminal device by the Internet browser you use. Through the cookies, certain information from you, such as your browser or location data or your IP address, is processed to an individual extent. Cookies do not cause any damage to your computer and do not contain viruses.
You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or generally, as well as activate the automatic deletion of cookies when closing the browser. When deactivating cookies, the functionality of this website may be limited.
However, the steps and measures required for this depend on the specific Internet browser used. Therefore, if you have any questions, please use the help function of your Internet browser’s documentation or contact its manufacturer or support.
When you leave this website, for example by clicking on our external links, and reach external pages, so-called cookies may be set by the addressees of the target page clicked on. We are not legally responsible for these. Regarding the use of such cookies and the information stored on them, please compare the privacy statements of the linked providers.
In particular, the following data and information is stored in the cookies:
Log-in information
language settings
entered search terms
information about the number of visits to our website and the use of individual functions of our website
Purpose and legal basis for the processing of this data
Cookies serve to make our offer more user-friendly, effective and secure.
The legal basis for this processing is Art. 6 para.1 lit. b) DSGVO, insofar as these cookies contain data for contract initiation or contract processing.
If the processing does not serve the initiation or execution of a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6 para.1 lit. f ) DSGVO.
2.2 Processing of customer and contract data when visiting our website
Data categories:
If you contact us (e.g. by contact form, e-mail or online booking), we process your information to process the request, implementation of the booking and in the event that follow-up questions arise.
We point out that this data transmission on the Internet may have security gaps. A complete protection of the data against access by third parties is not possible.
Contact form or online booking:
Which data is collected in the case of a contact form or an online booking can be seen from the corresponding specifications of the contact form or the requested input.
Personal master data (title, form of address, gender, name, date of birth).
Your date of birth is required to ensure that you are of legal age as a contracting party. In addition, prices for children are calculated on the basis of age.
Address and contact data (address, telephone number, e-mail etc.)
Booking data (period of booking/renting the vacation apartment)
Contact data of accompanying guests (name, address, telephone number, e-mail etc.)
Contact data of guests, if you book for others ( e.g. via voucher).
However, we must point out in this context that it is your responsibility to ensure that the persons about whom you are providing personal information are aware of this process and have accepted how we will use their information (in accordance with this helpful privacy policy).
Contractual data (duration of the booking, terms of the contract)
Other data according to the Federal Registration Act and for the payment of the tourist tax (registration form)
Date of birth
Nationality
For foreign guests: serial number of the identity card
E-mail:
If you contact us by e-mail, we process your information to process the request, implementation of a booking / conclusion of a rental agreement and in the event that follow-up questions arise.
Which data, in addition to the aforementioned data, is collected depends on your request. The data categories correspond to the data categories mentioned in the contact form or online booking or the data categories mentioned in point 3.2.
We point out that data transmission by e-mail is insecure. It cannot be ruled out that data transmitted in this way may be read, copied, modified or deleted by unauthorized persons.
We recommend that you do not send confidential information by e-mail.
Recipients of the data collected from you
Public authorities (e.g. tax office, in the context of income tax returns, local authority / tourist office)
Financial institutions
Commissioned booking portals within the scope of order processing
We will only pass on your personal data to third parties if you have given your express consent to do so in accordance with Art. 6 (1) sentence 1 a) DSGVO, or if this is legally permissible and necessary in accordance with Art. 6 (1) sentence 1 b) DSGVO for the processing of contractual relationships with you or the implementation of pre-contractual measures.
in the event that there is a legal obligation for the disclosure pursuant to Art. 6 (1) sentence 1 lit. c) DSGVO
according to Art. 6 para. 1 sentence 1 lit. d) DSGVO the disclosure is necessary to protect vital interests of you or another natural person,
the disclosure is necessary to protect our legitimate interests or those of a third party in accordance with Art. 6 (1) sentence 1 lit. f) DSGVO, unless your interests or fundamental rights and freedoms or those of another data subject are overridden.
Transfer to a country outside the European Union
A transfer to a country outside the European Union or to a country without an adequate level of data protection or to an international organization does not regularly take place, but cannot be ruled out in individual cases (e.g. corresponding place of residence of the guest abroad). In these individual cases, the requirements of Chapter 5 of the GDPR are observed.
Purpose and legal basis for the processing of this data
This data is stored and used exclusively for the purpose of responding to your request or for contacting you, as well as for contractual or pre-contractual purposes (booking/conclusion of a rental agreement).
If the data processing is carried out on your request for the implementation of pre-contractual measures, or for the implementation of a contract, the legal basis for this data processing is Art. 6 para. 1 p. 1 lit. b) DSGVO.
We only process other personal data if you consent to this (Art. 6 para. 1 p. 1 lit. a) DSGVO) or we have a legitimate interest in processing your data (Art. 6 para. 1 p. 1 lit. f) DSGVO). A legitimate interest is, for example, to respond to your email.
If you start your vacation in one of our vacation apartments or rent them, you are required to fill out a registration form and provide the necessary information according to the Federal Registration Act.
The collection of this data is done to fulfill a legal obligation (Art. 6 para. 1 p. 1 lit. c) DSGVO.
Order processing
If we commission third parties (service providers/booking portals) with the processing of data on the basis of a so-called order processing agreement, this is done on the basis of Art. 28 DSGVO.
Booking data is stored by the service provider that provides the booking software for our website.
Storage period
We only process your personal data for as long as is necessary to fulfill the purposes pursued.
Insofar as the legislator stipulates an obligation to retain personal data (e.g. in tax law, registration law), we will only continue to store the data for these legal purposes, but will not process it in any other way and will delete it after the legal retention period has expired. We check at regular intervals whether your data can and must be deleted.
2.3 Security of your data
2.3.1 Technical and organizational measures
To protect your personal data from loss and misuse, we have taken technical and organizational security measures.
2.3.2 SSL encryption
This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the inquiries you send to us as site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL encryption is activated, the data you transmit to us cannot be read by third parties.
2.4 Privacy policy for the use of Google Analytics
General, data use
This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.
When using Google Analytics, the privacy policy of the Google service accessed also applies. The provider of this site has no influence on this data transmission.
In the event that personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/eu-us-framework. You can view a current certificate at the link hhtps://www.privacyshield.gov//list.
More information on the handling of user data can be found in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/.
We use Google Analytics only after your active consent
Cookies
Google Analytics uses so-called “cookies”. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.
Usage and user-related information, such as IP address, location, time, frequency of visits to our website, are transmitted to Google’s server in the USA and stored there. However, we use Google Analytics with the IP anonymization function.
IP anonymization
We have activated the IP anonymization function on this website (Google Analytics). This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
Purpose and legal basis
The Google Analytics service is used to analyze the usage behavior of our website.
On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
The legal basis is Art. 6 para.1 lit. f) DSGVO. Our legitimate interest lies in the analysis, optimization and economic operation of our website. Due to the anonymization of your data, we assume that your interests worthy of protection, fundamental rights and freedoms are not affected and that we therefore have a legitimate interest in using the analysis tool.
Order processing
We have concluded an order processing contract with Google and fully implement the requirements of the German data protection authorities when using Google Analytics.
Browser plugin and consent banner
If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your Internet browser. Details can be found above in our privacy policy under the item Cookies.
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=de.
We use Marketing Cookies only after your active consent
Demographic characteristics in Google Analytics
This website uses the “demographic characteristics” function of Google Analytics. This allows reports to be generated that contain statements about the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google as well as visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as shown in the item “Objection to data collection”.
More information on the handling of user data can be found in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/.
We use Marketing Cookies like this only after your active consent
2.5 Privacy policy for the use of Google My Business
General
We operate a so-called Google My Business entry. Should you find us in this way, we make use of the information service offered by Google and the services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”).
We would like to point out that you use the Google site and its functions on your own responsibility. This applies in particular to the use of social and interactive functions (e.g. commenting, sharing, rating, direct messaging). When you visit and interact with our Google My Business listing, Google also collects your IP address and other information that is present on your terminal device in the form of so-called cookies. This information is used to provide us, as the operator of the Google My Business entry, with statistical information about the use of Google services. The data collected about you in this context is processed by Google and may be transferred to countries outside the European Union.
In the event that personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/eu-us-framework. You can view a current certificate at the link hhtps://www.privacyshield.gov//list.
In what way Google uses the data from the visit for its own purposes, to what extent activities of individual users are assigned, how long Google stores this data and whether data is passed on to third parties, is not known to us. When accessing Google services, the IP address assigned to your terminal device is transmitted to Google. Google also stores information about the end devices of its users; this may enable Google to assign IP addresses to individual users or user accounts.
Google provides more detailed information in its privacy policy:
https://www.google.com/intl/de/policies/privacy/
Purpose and legal basis
Via the Google My Business entry, a bundling of various services (e.g. Google Maps, Google Analytics) can be achieved and users can be given direct access to them with the help of a dashboard.
The legal basis is Art. 6 para.1 lit.f) DSGVO. Our legitimate interest lies in the analysis, optimization and economic operation of our internet presence
3. General information and mandatory information on the processing of data
3. 1. Protection of your personal data during data processing by the landlord of the holiday apartment
As landlords of our holiday apartments, we take the protection of our guests’ personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.
3.2. Data categories
Personal master data (title, salutation, gender, name, date of birth)
Your date of birth is required to ensure that you as a contractual partner are of legal age and therefore legally competent. In addition, prices for children are calculated based on age
Address and contact details (address, telephone number, email, etc.)
Booking data (period of booking/rental of the holiday apartment)
Payment transaction data (bank details)
Contact details of accompanying guests (name, address, telephone number, email, etc.)
Guest contact details if you book for others (e.g. via voucher)
However, we must remind you that it is your responsibility to ensure that the people about whom you provide personal information are aware of this process and have accepted how we will use their information (in accordance with this helpful privacy policy).
Contract data (duration of booking, contract conditions)
Further data according to the Federal Registration Act and for paying the tourist tax (registration form)
birth date
nationality
For foreign guests: ID card serial number
3.3. Recipient of the collected data
Public bodies (e.g. tax office, in the sense of our income tax return, municipality / tourist office)
Financial institutions
Commissioned booking portals as part of order processing
We will only pass on your personal data to third parties if you have given your express consent to do so in accordance with Article 6 Paragraph 1 Sentence 1 Letter a) GDPR,
this is legally permissible and is necessary in accordance with Art. 6 Para. 1 Sentence 1 Letter b) GDPR for the processing of contractual relationships with you or the implementation of pre-contractual measures in the event that for the transfer according to Art. 6 Para. 1 Sentence 1 Letter c) GDPR there is a legal obligation,
According to Art. 6 Para. 1 Sentence 1 Letter d) GDPR, the transfer is necessary to protect the vital interests of you or another natural person,
The transfer in accordance with Article 6 Paragraph 1 Sentence 1 Letter f) GDPR is necessary to protect our legitimate interests or those of a third party, unless your interests or fundamental rights and freedoms or those of another data subject.
Transfer to a country outside the European Union
A transfer to a country outside the European Union or to a country without an adequate level of data protection or to an international organization does not usually take place, but cannot be ruled out in individual cases (e.g. the guest’s corresponding place of residence abroad). In these individual cases, the requirements of Chapter 5 of the GDPR are observed.
3.4. Purpose and legal basis of processing
If you contact us, we will process your information to process the request, make a booking/conclude a rental agreement and in the event that follow-up questions arise.
Which data is collected depends on your request.
This data will be stored and used exclusively for the purpose of answering your request or contacting you.
If data processing is carried out at your request to carry out pre-contractual measures or to carry out a contract (booking, rental agreement), the legal basis for this data processing is Art. 6 Paragraph 1 Sentence 1 Letter b) GDPR.
We only process further personal data if you consent to this (Art. 6 para. 1 sentence 1 lit. a) GDPR) or we have a legitimate interest in processing your data (Art. 6 para. 1 sentence 1 lit. f) GDPR). A legitimate interest lies, for example, B. to process and answer your request.
If you go on holiday in one of our holiday apartments or rent one, you are obliged to fill out a registration form and provide the necessary information in accordance with the Federal Registration Act.
This data is collected to fulfill a legal obligation (Art. 6 Para. 1 Sentence 1 Letter c) GDPR.
Order processing
If we commission third parties (service providers/booking portals) to process data on the basis of a so-called “order processing contract”, this is done on the basis of Art. 28 GDPR.
Booking data is stored by the service provider who provides the booking software for our website.
3.5. Storage period
We only process your personal data for as long as is necessary to fulfill the purposes pursued. To the extent that the law stipulates an obligation to retain personal data (e.g. in tax law, reporting law), we will only continue to store the data for these legal purposes, but will not process it in any other way and will delete it after the statutory retention period has expired.
3.6. Data protection rights and right to complain
If the requirements are met, you have the following rights:
right of providing information
According to Art. 15 GDPR, you have the right to request information from us as to whether we are processing data relating to you. In addition, according to this regulation, you have a right to information about this data and a right to be provided with a copy of this data.
Right to rectification
Art. 16 GDPR gives you the right to request the completion and/or correction of the data concerning you.
Right to deletion
In accordance with Article 17 GDPR, you have the right to demand that data concerning you be deleted immediately.
Right to restriction of processing
According to Art. 18 GDPR, you can request that we restrict the processing of your data.
Right to data portability
According to Art. 20 GDPR, you have the right to have the data you provide transmitted to yourself or a third party in a common and machine-readable format. If you request the data to be transferred directly to another responsible body, this can only be done if this is technically feasible.
Right of withdrawal
The data is processed primarily as part of the processing of data to fulfill a contract (booking/rental agreement) or pre-contractual measures on the basis of Art. 6 Para. 1 lit. b) GDPR.
In addition, data may be collected that may only be processed with your express consent (Article 6 Paragraph 1 Letter a) GDPR (e.g. guest reviews, etc.). You can revoke any consent you have already given at any time. All you need to do is send us an informal email. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.
Right to object
If data processing is carried out on the basis of Article 6 Paragraph 1 Letter e) or f) GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. This also applies to profiling based on these provisions.
The respective legal basis on which processing is based can be found in this data protection declaration.
If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims ( Objection according to Art. 21 Para. 1 GDPR).
The right of withdrawal also applies in particular to processing for direct advertising purposes.
Server log files
The collection of data to provide the website and the storage of the data in log files is absolutely necessary for the operation of the website. The user therefore has no right to object.
Right to lodge a complaint with the responsible supervisory authority
In the event of a data protection violation, you have the right to lodge a complaint with the responsible supervisory authority.
The responsible supervisory authority for data protection issues is the State Data Protection Commissioner for Data Protection and Freedom of Information Baden-Württemberg.
But complaints are also possible with other data protection supervisory authorities within the scope of the GDPR (Article 77 GDPR).
A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.