Privacy

1. Data controller

The controller responsible for processing personal data is:

Phone: +49 30 56 58 91 25
Email: info[at]ferienhaus-am-schlosspark.de

You can also use these contact details for questions about data protection or to exercise your rights.

2. Purposes and legal bases

We process personal data to provide this website, respond to enquiries, prepare and manage stays, and publish approved guest reviews. Personal data includes, for example, your name, contact details or IP address.

Depending on the purpose, processing is based on your consent (Article 6(1)(a) GDPR), performance of a contract or steps prior to entering a contract (point (b)), compliance with legal obligations (point (c)), or legitimate interests (point (f)). Our legitimate interests are explained in the relevant sections.

3. Hosting and technical access data

This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. When you visit, the hosting provider processes technical data, particularly your IP address, date and time, requested page or file, transfer status, browser and operating system information and, where applicable, the previously visited page (referrer).

Processing enables delivery of the website, ensures that it functions properly, and helps detect and prevent attacks. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website.

Technical logs are retained only for as long as necessary for operation, fault analysis and investigation of security-related events. In the event of a specific incident, relevant data may be retained until the investigation is complete or to safeguard legal claims.

Further information is provided in IONOS’s privacy policy .

4. Contact, stay enquiries and bookings

If you contact us using the contact or enquiry form, by email or by phone, we process the information you provide. This includes your name, email address, phone number and company where supplied, and the content of your message. Stay enquiries also include travel dates, number of guests, children’s ages needed for pricing, selected extras and any pet details. We process an address and other optional information insofar as you provide it.

We use this data to handle your enquiry, prepare an offer, ask follow-up questions and, where applicable, manage and invoice your booking. The legal basis for contract-related enquiries is Article 6(1)(b) GDPR. Other enquiries are handled on the basis of our legitimate interest in communicating with prospective guests and guests under Article 6(1)(f) GDPR. Where separate consent is required, Article 6(1)(a) GDPR applies.

Information marked as required is needed to process the relevant enquiry. Without it, the form cannot be fully processed. Other information is optional. Acknowledging this privacy policy does not constitute consent to advertising.

Access is granted to the people handling the matter and to necessary hosting, IT and email service providers. Disclosure to property management, cleaning services, payment or tax service providers, for example, takes place only where required for the particular service or by law. Use for other purposes requires an appropriate legal basis.

We delete enquiry data once processing is complete and no further retention grounds exist. Contract and billing records are retained for the applicable statutory periods. If claims remain unresolved, necessary documents may be retained until they are clarified or relevant limitation periods expire.

5. Guestbook and reviews

When you submit a review, we process your display name, email address, review text and optional star rating. After checking and approval, we publish the display name, text, star rating where provided and publication date. Your email address is not published.

Publication of a review submitted through our review form is based on your consent under Article 6(1)(a) GDPR. Internal checks help prevent spam, unlawful content and publication of other people’s personal data. These checks are based on our legitimate interest in a reliable guestbook under Article 6(1)(f) GDPR.

You may withdraw consent at any time with effect for the future. The relevant publication will then be removed unless another legal basis permits its continued processing. Otherwise, published reviews remain online for as long as needed for the guestbook. Unpublished submissions and associated contact details are deleted once checks and necessary follow-up questions are complete, unless needed for a specific legal matter.

Reviews imported from other booking platforms identify their source. You may contact us about the origin or removal of a review. Please do not include private contact details or other people’s names in public reviews.

6. Cookies and browser storage

For the calendar and price calculator functions you request, details such as travel dates, guest numbers and selected extras may be temporarily stored in your browser’s session storage. This allows your selections to be transferred to the enquiry page. This storage belongs to the respective browser session and can be deleted using browser functions.

Section 25 of Germany’s Telecommunications Digital Services Data Protection Act (TDDDG) applies to storing information on, or accessing information from, your device. Where strictly necessary for a function you expressly request, no separate consent is needed (section 25(2), number 2 TDDDG). Other accesses requiring consent need your prior approval. Subsequent processing of personal data is additionally subject to the GDPR, particularly Article 6(1)(b) when preparing a booking.

This website does not use Google Analytics to analyse your browsing behaviour. Declining optional external content does not affect your ability to contact us by phone or email.

7. Google Maps and route planning

You can activate Google Maps or open a directions link to find your way. The provider is Google Ireland Limited, Dublin, Ireland; data may also be processed by affiliated companies such as Google LLC in the USA. The embedded map loads only after you expressly activate it. Until then, a locally hosted map preview is displayed.

When the map loads, Google receives your IP address and technical browser information in particular. Google may use cookies or similar technologies. If you are signed in to Google, it may associate this use with your account. A location is only transmitted if you authorise it in the relevant functions or enter it yourself.

The interactive map is integrated on the basis of your consent under Article 6(1)(a) GDPR and, where required, section 25(1) TDDDG. You do not need to load the map to use the rest of the website. You can withdraw consent for future use; after closing or reloading the page, you can choose not to activate it again. This does not automatically delete data already transmitted to Google.

When planning a route, a starting point you enter is passed to Google only when you open the directions link. Further use takes place on Google’s services. Transfers to countries outside the EU or EEA must meet the requirements of Articles 44 et seq. GDPR. Information about Google’s processing, retention periods, transfer mechanisms and settings is available in Google’s privacy policy.

8. Calendar, price calculation and weather

Availability and price calculation

The calendar shows available and booked periods. The public display uses booking periods, not other guests’ names or contact details. The calendar source is retrieved by our server; your browser receives availability data prepared for display. This retrieval does not send your form entries to the calendar source provider.

The price calculation uses your selected travel dates, guest numbers, children’s ages where relevant, and extras. It helps prepare your enquiry and does not automatically make a booking. The legal basis is Article 6(1)(b) GDPR. For temporary browser storage, see section 6.

Weather display

The weather display uses data from the Norwegian Meteorological Institute, MET Norway. Our server retrieves it using fixed coordinates for Berlin. Your browser does not connect directly to MET Norway for this purpose; your IP address and personal location are not passed to MET Norway when weather data is retrieved. Loading the display from our server involves the technical processing described in section 3.

9. External links and social networks

Links to Facebook, Instagram and other external websites are ordinary links. Social media icons are displayed locally; displaying these links alone does not establish a connection to social networks. Your browser connects to the relevant provider only when you follow a link. That provider’s privacy policy then applies. An existing user account may allow your visit to be associated with you.

10. Video surveillance of outdoor areas

We use an outdoor video surveillance system to protect our holiday home, grounds and property against burglary, theft, vandalism and other damage.

Cameras are located exclusively outside on the building and cover security-related areas around the holiday home, particularly access areas in front of and behind the house and the garage area. Owing to the layout of the property, parts of the garden may also fall within the cameras’ field of view.

There is no video surveillance inside the holiday home.

Video recordings are processed on the basis of Article 6(1)(f) GDPR. Our legitimate interest is protecting the holiday home and its grounds against burglary, theft, vandalism and other unauthorised acts and, where necessary, preserving evidence in the event of damage.

Recordings are generally deleted automatically within 72 hours at the latest, unless a specific incident requires longer retention as evidence. Following a security-related incident, relevant recordings may be retained for the time needed to investigate and, where applicable, establish or defend legal claims.

Recordings are generally not disclosed. In the event of a specific security-related incident, relevant recordings may be transmitted in particular to the police, prosecuting authorities, insurers or bodies engaged to pursue legal claims.

Signs on site provide notice of the video surveillance.

11. Recipients, security and retention

We disclose personal data only where necessary for the stated purpose, required by law, authorised by your consent or permitted by another legal basis. Service providers processing data on our behalf must be engaged in accordance with Article 28 GDPR. Authorities and other bodies may receive data where a legal obligation exists or where necessary to establish, exercise or defend legal claims.

We protect data through appropriate technical and organisational measures. Data is transmitted to our website using HTTPS encryption. Complete end-to-end encryption cannot be assumed for ordinary email communication.

Retention periods depend on the purposes described in the relevant sections, statutory retention duties and any need to safeguard legal claims. When these grounds no longer apply, data is deleted or anonymised.

12. Your rights

Subject to the statutory conditions, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20).

Objection and withdrawal of consent

Where processing is based on Article 6(1)(f) GDPR, you may object under Article 21 GDPR on grounds relating to your particular situation. You may object to processing for direct marketing at any time without giving reasons. Consent may be withdrawn at any time with effect for the future. The lawfulness of processing before withdrawal remains unaffected.

Right to complain

You may complain to a data protection supervisory authority, particularly in the Member State of your habitual residence, place of work or the alleged infringement. The authority particularly responsible for us is:

No solely automated decision with legal or similarly significant effects, including profiling, is made in the enquiry and booking process described. We decide on booking enquiries personally.