Privacy Policy

1. Controller

The controller responsible for data processing on this website is Ines Bonitzke, Brandenburger Str. 7, 38471 Rühen. Contact: phone +49 176 53141966, email czokines@web.de.

2. Hosting with Vercel

This website is hosted by Vercel Inc. (USA). When you visit the website, Vercel automatically collects so-called server log files transmitted by your browser. These include the IP address, date and time of the request, page requested, amount of data transferred, browser type and version, and the operating system used. This data is technically necessary to deliver the website and ensure system security, and is not combined with other data sources. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in stable and secure website operation). We have a data processing agreement with Vercel; data transfers to the USA take place on the basis of the standard contractual clauses provided by Vercel.

3. Contact, Booking, and Business Enquiries

When you contact us via the contact form, the availability check, or the business enquiry form, we process the data you enter (including name, email address, phone number, optionally company, requested period, number of guests, and your message) solely to process your enquiry and get in touch with you. The legal basis is Art. 6(1)(b) GDPR where your enquiry is aimed at concluding a contract (e.g. a booking), and otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to your enquiry). Your details are used exclusively for this purpose and deleted once your enquiry has been fully processed, unless statutory retention obligations require otherwise.

These emails are sent via the email service provider Resend (Resend, Inc., USA), which delivers the message on our behalf solely to our internal inbox. We have a data processing agreement with Resend. Your email address is used exclusively for delivery and any reply, and never for marketing purposes.

4. Google Maps

The contact section of this website includes a Google Maps map to help you find our location. When the page is loaded, a connection is made directly to Google's servers (Google Ireland Limited or Google LLC, USA), transmitting your IP address to Google. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a clear and easily accessible location display). Further information on data processing by Google can be found in Google's privacy policy at policies.google.com/privacy.

5. Cookies

We always set technically necessary cookies, for example to store your language setting or your cookie choice. The embedded Google Maps map (see Section 4) may technically set additional cookies from Google when loaded, over whose content and purpose we have no control.

In addition — only with your prior consent — we use the analytics service Microsoft Clarity to better understand how our website is used. This may involve processing anonymised usage statistics, click behaviour, heatmaps, and session recordings. Without your consent, Microsoft Clarity is not loaded and no data is transmitted to Microsoft. The legal basis in this case is your consent (Art. 6(1)(a) GDPR). You can grant or withdraw your consent at any time via the "Cookie settings" link in this website's footer. Further information about Microsoft Clarity can be found in Microsoft's privacy statement.

In addition — also only with your prior consent — we operate our own, data-sparing traffic measurement on our own infrastructure (Supabase) to evaluate simple metrics such as visitor numbers, viewed pages and inquiries in our internal management area. This stores a randomly generated session code that is not linked to a person, the page viewed, a broadly categorised traffic source (e.g. "Google", "direct access"), any campaign parameters contained in a clicked link (utm_source, utm_medium, utm_campaign), the device type (desktop/smartphone/tablet), and the country. The country is determined from a coarse location signal provided by our hosting provider — your full IP address is never stored. This service is also not loaded without your consent and falls under the same "Statistics/Analytics" consent category as Microsoft Clarity. The legal basis is your consent (Art. 6(1)(a) GDPR). This raw data is automatically deleted after 180 days.

6. Your Rights

You have the right at any time to request information about the personal data we hold about you, as well as to have it corrected, deleted, or its processing restricted, to data portability, and to object to processing. Simply contact us using the details given in Section 1. You also have the right to lodge a complaint with the competent data protection supervisory authority.

7. Currency of this Privacy Policy

This privacy policy is currently valid and reflects the services actually used on this website. Further development of the website or changes to legal requirements may make an update necessary.