Legal Notice

Information pursuant to Section 5 of the Digital Services Act (DDG)

Provider and landlord of the holiday accommodation offered:

Claus SchusterHeinrich-von-Kleist-Straße 10248161 MünsterDeutschland

Contact

Telephone: +49 2533 4093368Email: schleicher-schuster@gmx.de

Responsible for the content

Claus SchusterHeinrich-von-Kleist-Straße 10248161 Münster

Consumer dispute resolution

We are neither willing nor obliged to participate in dispute resolution proceedings before a consumer arbitration board.

Privacy Policy

1. Privacy at a glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data means any data that can be used to identify you personally. For detailed information on data protection, please see the privacy policy below.

Data collection on this website

Who is responsible for collecting data on this website?

The website operator is responsible for data processing on this website. You can find the contact details in the section “Information on the controller” in this privacy policy.

How do we collect your data?

Some of your data is collected because you provide it to us. This may include, for example, data you enter in a contact or booking form or provide to us by email or telephone.

Other data is collected automatically or with your consent when you visit the website by our IT systems or the service providers we engage. This mainly includes technical data such as your internet browser, operating system, IP address or the time you accessed the page.

How Do We Use Your Data?

Some data is collected to ensure the website is provided securely and without errors.

Other data is processed to respond to inquiries, manage bookings, and provide our contractual services to our guests.

If you have given your consent, we also use Google Analytics to understand how our website is used and improve our services accordingly.

What rights do you have regarding your data?

You have the right at any time to obtain, free of charge, information about the origin, recipients and purpose of your stored personal data. You also have the right to request that this data be corrected or deleted.

If you have given your consent to data processing, you may withdraw it at any time with effect for the future.

You may also, under certain conditions, have the right to request restriction of the processing of your personal data, the right to data portability and the right to lodge a complaint with a competent data protection supervisory authority.

You can contact us at any time with this request or with any other questions about data protection.

2. Hosting and website provision

Third-party hosting

This website is provided using the website builder of Smoobu GmbH.

Personal data collected on this website may be stored and processed on Smoobu’s servers and by technical service providers and sub-processors engaged by Smoobu.

This may include, in particular, IP addresses, website access data, metadata and communication data, enquiries, contact details, booking and contract data, as well as other data generated through use of this website.

The website is hosted and provided to carry out pre-contractual measures and perform contracts with prospective and existing guests, pursuant to Art. 6(1)(b) GDPR, and on the basis of our legitimate interest in providing our online services securely, quickly and reliably, pursuant to Art. 6(1)(f) GDPR.

Where technologies requiring consent are used in connection with the provision of the website, they are used solely on the basis of your consent in accordance with Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG.

We use the following services to provide and manage our website:

Smoobu GmbHPappelallee 78/7910437 BerlinDeutschland

For its website builder, Smoobu uses Duda, Inc., among others, as a technical subprocessor. Duda supports the provision of the website builder and may process website content, visitor data and contact form data in this context.

Smoobu also uses external providers for hosting and cloud infrastructure.

Personal data may also be processed outside the European Union or the European Economic Area. Where required, transfers are made on the basis of appropriate data protection safeguards, in particular an adequacy decision, certification under the EU-US Data Privacy Framework, or the European Commission’s Standard Contractual Clauses.

Data Processing Agreement

Where Smoobu processes personal data on our behalf, this is done under a data processing agreement pursuant to Art. 28 GDPR.

Smoobu engages additional sub-processors to provide certain services. For the website builder, these include Duda, Inc.

3. General information and mandatory disclosures

Data Protection

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with applicable data protection laws and this Privacy Policy.

When you use this website, various types of personal data are processed. This privacy policy explains what data we process, for what purposes, and on what legal basis.

Please note that data transmission over the internet, for example when communicating by email, may be subject to security vulnerabilities. It is not technically possible to ensure complete protection of data from access by third parties.

Information about the data controller

The controller responsible for processing data on this website is:

Claus SchusterHeinrich-von-Kleist Straße 10248161 Münster

Phone: +49 171 8183688Email: Schleicher-schuster@gmx.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

Retention period

Unless a specific retention period is stated in this privacy policy, we store your personal data only for as long as necessary for the relevant purpose.

If you submit a valid request to have your data erased or withdraw your consent to data processing, your data will be deleted unless there are legal grounds for retaining it.

Statutory retention periods, in particular retention obligations under tax or commercial law, remain unaffected.

General Information on the Legal Bases for Data Processing

If you have consented to the processing of your personal data, it will be processed on the basis of Art. 6(1)(a) GDPR.

Where processing is necessary to perform a contract or take steps prior to entering into a contract, it is carried out on the basis of Art. 6(1)(b) GDPR.

Where processing is necessary to comply with a legal obligation, it is carried out on the basis of Art. 6(1)(c) GDPR.

In addition, processing may be carried out on the basis of our legitimate interests in accordance with Art. 6(1)(f) GDPR.

Where consent is required to store information on your device or access information already stored there, this is additionally based on Section 25(1) TDDDG.

Recipients of Personal Data

As part of our business, we work with external service providers. Personal data is only shared where necessary to perform a contract, where we have a legal obligation or legitimate interest, where you have given your consent, or where another legal basis permits the disclosure.

Where service providers act as processors on our behalf, processing is carried out on the basis of a contract in accordance with Art. 28 GDPR.

Transfer of Data to Third Countries

When using certain services, personal data may be transferred to countries outside the European Union or the European Economic Area.

Where the European Commission has issued an adequacy decision for the relevant third country, or the company concerned is certified under the EU-US Data Privacy Framework, the data transfer may be based on this.

In other cases, data is transferred where necessary, in particular on the basis of standard contractual clauses approved by the European Commission or another safeguard provided for by law.

Withdrawal of your consent to data processing

You may withdraw your consent at any time, with effect for the future.

The lawfulness of data processing carried out before withdrawal remains unaffected.

Right to object to data collection in specific cases and to direct marketing

IF DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA.

IF YOU OBJECT, THE PERSONAL DATA CONCERNED WILL NO LONGER BE PROCESSED UNLESS COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING CAN BE DEMONSTRATED WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING IS FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING.

Right to lodge a complaint with a supervisory authority

In the event of violations of the GDPR, you have the right to lodge a complaint with a data protection supervisory authority.

This applies in particular to the supervisory authority in your usual place of residence, your place of work or the place where the alleged infringement occurred.

Right to Data Portability

You have the right to receive data that we process automatically based on your consent or to fulfil a contract in a commonly used, machine-readable format, or, where technically feasible, to have it transferred to another controller.

Access, Rectification and Erasure

Within the scope of applicable law, you have the right at any time to access your stored personal data and, where applicable, to request its correction or deletion.

Right to Restriction of Processing

You have the right to request restriction of the processing of your personal data if the legal requirements are met.

This applies in particular if:

you dispute the accuracy of the personal data we have stored about you and we need time to verify it,
processing is unlawful and you request restriction instead of erasure,
we no longer need the personal data for our purposes, but you need it to establish, exercise, or defend legal claims or
you have objected to processing pursuant to Art. 21(1) GDPR and it has not yet been determined whose interests prevail.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption.

You can tell that a connection is encrypted, among other things, because the website address starts with “https://” and your browser indicates that the connection is encrypted.

Objection to marketing emails

We object to the use of our contact details, published to meet statutory information requirements, for sending advertising or information materials that have not been expressly requested.

4. Data Collection on This Website

Cookies and Similar Technologies

Our website uses cookies and similar technologies. Cookies are small data files stored on your device that enable certain website functions.

Some cookies or similar technologies are technically necessary to ensure the website is provided properly, securely and reliably.

If storing information on your device or accessing information already stored is strictly necessary to provide a digital service you have expressly requested, prior consent is not required under § 25(2) TDDDG.

Where personal data is processed in this context, this is done in particular on the basis of our legitimate interest in providing a secure and functional website in accordance with Art. 6(1)(f) GDPR.

Cookies or similar technologies that are not technically necessary, particularly those used for analytics, are only used with your prior consent.

In this case, information is stored on your device or information stored there is accessed on the basis of Section 25(1) TDDDG. Where personal data is processed in this context, processing is based on your consent pursuant to Art. 6(1)(a) GDPR.

Consent may be changed or withdrawn at any time with effect for the future via the cookie or privacy settings on our website.

Contact Form

If you send us an enquiry using a contact form provided on this website, we process the information you enter, including your contact details, to handle your enquiry and any follow-up questions.

If your enquiry relates to a booking or a possible contract, the data is processed on the basis of Art. 6(1)(b) GDPR.

In all other cases, processing is based on our legitimate interest in efficiently handling enquiries sent to us, in accordance with Art. 6(1)(f) GDPR, or, where consent has been requested, on the basis of Art. 6(1)(a) GDPR.

The data will be deleted as soon as the purpose for which it was stored no longer applies and there are no statutory retention obligations or other legal grounds for further storage.

Enquiries by Email or Phone

If you contact us by email or phone, we process your inquiry, including any personal data it contains, to handle your request.

If your enquiry is made in connection with entering into or performing a contract, your data will be processed on the basis of Art. 6(1)(b) GDPR.

In all other cases, processing is based on our legitimate interest in handling your enquiry appropriately, in accordance with Art. 6(1)(f) GDPR.

Bookings through our website

You can enquire about or book our holiday accommodation directly through our website.

When you make a booking, we process the data required to fulfil the contract. This may include, in particular:

First and last name,
Address,
Email address,
Telephone number,
Travel dates,
Number of people travelling and, where applicable, details of fellow travellers,
Details of the accommodation booked,
Booking and payment information,
Messages and notes about the booking.

Processing is carried out to take steps prior to entering into a contract and to fulfil the accommodation or rental agreement, on the basis of Art. 6(1)(b) GDPR.

We use the booking system provided by Smoobu GmbH to process bookings. Smoobu processes the data required for this purpose as part of the services we use.

Where statutory retention obligations apply, the relevant booking and contract data will be stored for the prescribed period.

5. Analytics and Map Services

Google Analytics

This website uses Google Analytics, a web analytics service provided by:

Google Ireland LimitedGordon HouseBarrow StreetDublin 4Ireland

Google Analytics enables us to analyse the use of our website statistically. This may include processing information about page views, length of visits, devices and browsers used, approximate geographic location, technical identifiers and interactions with our website.

Google Analytics uses cookies and similar technologies for this purpose.

Google Analytics is used only with your prior consent.

The legal basis for storing or accessing information on your device is Section 25(1) TDDDG. Personal data is processed on the basis of your consent in accordance with Art. 6(1)(a) GDPR.

You may withdraw or change your consent at any time with effect for the future via the cookie or privacy settings on our website.

Google Analytics uses technical identifiers, in particular cookies, to distinguish between users and usage activity and analyse them statistically.

When using Google Analytics, data may also be transferred to servers operated by Google or its affiliated companies outside the European Union or the European Economic Area.

Google LLC is certified under the EU-US Data Privacy Framework. Where a data transfer cannot be based on an adequacy decision, Google states that it uses appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.

The retention period for user-related data is determined by our settings in Google Analytics and is up to 14 months, depending on the type of data and configuration. This does not affect statutory obligations or processing carried out by Google for its own purposes.

Mapbox

Our website uses a map or location feature from Mapbox to show the locations of our holiday accommodation.

When a corresponding map is loaded, technical data such as your IP address, device and browser information, and information about access to the map may be transmitted to Mapbox.

The map feature is used to display the locations of our accommodation clearly and in a user-friendly way.

Where this does not involve storing information on your device or accessing information already stored there, we base processing on our legitimate interest in presenting our online services in a user-friendly way, in accordance with Art. 6(1)(f) GDPR.

Where Mapbox uses cookies or comparable technologies requiring consent, these are used only with your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

Data may be processed in the USA. According to Mapbox, such data transfers are based, among other things, on the EU-US Data Privacy Framework or standard contractual clauses.

6. Booking, contract and payment details

Processing of Customer and Contract Data

We collect and process our guests’ personal data insofar as this is necessary to initiate, establish, perform or amend a contractual relationship.

The legal basis for this is Art. 6(1)(b) GDPR.

The data will be deleted once the contract has been completed or the business relationship has ended, unless statutory retention obligations or other legal reasons require further storage.

Payment processing

We offer various payment methods for processing payments.

Depending on the payment method you select, personal data may be transmitted to the relevant payment service provider or participating financial institution.

This may include, in particular:

Name and address,
Email address,
Booking or invoice number,
Invoice amount and currency,
Payment status,
Bank account or payment information,
technical transaction data.

Processing is carried out to perform the contract concluded with you on the basis of Art. 6(1)(b) GDPR.

Any processing carried out independently by payment service providers is also subject to their respective privacy policies.

Stripe

We use Stripe Connect to process various online payment methods.

Through Stripe, we can offer payments by credit and debit card, as well as by SEPA Direct Debit and iDEAL, where enabled by us and available to you.

Companies in the Stripe group are involved in processing payments, particularly European Stripe entities based in Ireland.

When you pay via Stripe, the data required to process the payment is transmitted to Stripe. This may include, in particular, your name, address, email address, payment amount, payment details, bank account details, card details and technical transaction data.

Stripe processes payment data in particular to process and secure payments, prevent fraud, and meet legal obligations.

The legal basis for transferring the data required to process payments is Art. 6(1)(b) GDPR.

Data may be processed outside the European Economic Area as part of the Stripe group of companies and by service providers engaged by Stripe. Where necessary, Stripe uses appropriate safeguards in accordance with data protection regulations.

PayPal

We also accept PayPal.

The provider for users in the European Economic Area is, in particular:

PayPal (Europe) S.à r.l. et Cie, S.C.A.22–24 Boulevard RoyalL-2449 Luxemburg

If you choose PayPal as your payment method, the data required to process the payment will be transmitted to PayPal.

This may include, in particular, your name, email address, payment amount, booking and invoice details, payment status, and other information required to process the payment.

PayPal processes this data under its own responsibility for data protection, in accordance with PayPal’s applicable privacy policy.

The data is transferred to perform the contract pursuant to Art. 6(1)(b) GDPR.

Personal data may also be processed outside the European Union or the European Economic Area within the PayPal group of companies or by service providers engaged by PayPal.

Bank transfer

If you choose bank transfer as your payment method, we process the data transmitted in connection with the payment.

This may include the account holder’s name, bank details, payment amount, payment reference, and booking information.

The banks involved in processing the payment also receive the information they require.

Processing is carried out to perform the contract in accordance with Art. 6(1)(b) GDPR.