Privacy policy

Privacy

Privacy policy

1. Privacy at a glance

When you visit this website, personal data may be processed. Personal data is information that can identify you, such as contact details, technical access data or information submitted in an enquiry.

Some data is collected when you provide it to us, for example through the contact form, by email or by phone. Other technical data may be processed automatically when you access the website so that it can be provided securely and reliably.

We use your data to provide the website, process enquiries, prevent misuse and communicate with you about a possible rental. Statistical analysis with Google Analytics and performance measurement with Google Ads take place only after you have explicitly consented to the respective service.

2. Controller

The controller responsible for data processing is Familie Kotzor-Teichmann, Holiday Apartment Kotzor, Panoramaweg 14/1, 73635 Rudersberg, phone: +49 171 7682293, Email: fewo.kotzor@gmail.com.

The controller is the person who determines the purposes and means of processing personal data.

3. Hosting via Cloudflare and server log files

This website is provided using Cloudflare services. When you access it, technically necessary server log data may be processed, including your IP address, time of access, browser and system information, requested URL, amount of data transferred and referrer. Processing is based on Article 6(1)(f) GDPR for the secure, fast and stable operation of the website.

Where Cloudflare processes personal data on our behalf, this is based on a data processing agreement. Further information is available in Cloudflare’s privacy policy.

4. General information and mandatory disclosures

We treat personal data confidentially and in accordance with applicable data protection law. Data transmission over the internet may nevertheless have security vulnerabilities; complete protection against access by third parties is technically impossible.

Unless a more specific retention period is stated in this policy, we store personal data only for as long as the relevant purpose exists or statutory retention periods require.

Depending on the processing activity, we rely on Article 6(1)(a) GDPR for consent, Article 6(1)(b) GDPR for pre-contractual or contractual enquiries, Article 6(1)(c) GDPR for legal obligations and Article 6(1)(f) GDPR for legitimate interests such as secure website operation and protection against misuse.

You may withdraw consent at any time with effect for the future. The lawfulness of processing before withdrawal remains unaffected.

Subject to statutory requirements, you have rights of access, rectification, erasure, restriction of processing, data portability and objection. You also have the right to lodge a complaint with a data protection supervisory authority.

Where data is processed on the basis of Article 6(1)(e) or (f) GDPR, you may object for reasons arising from your particular situation. We do not conduct direct marketing through this website.

5. Cookies and cookie manager

This website uses a necessary preference cookie to save your cookie and service choices. This cookie is required for the cookie manager to work and prevents you from being asked again on every page view.

Google Analytics, Google Ads and Google Maps are completely blocked before you consent. If you allow Analytics, the cookies ‘_ga’ and ‘_ga_*’ may be set to distinguish visits. If you allow Google Ads, cookies beginning with ‘_gcl_’ may be set to measure visits from ads.

You can change your selection or withdraw consent at any time using the ‘Cookie settings’ link in the footer. If you decline, only necessary functions are used.

6. Contact form, email and phone

When you contact us through the contact form, we process your email address, phone number and message as required information; providing your name is optional. The purpose is to process your enquiry and prepare a possible rental agreement.

When you contact us by email or phone, we process the information you provide to handle your request. We do not share this data without your consent unless there is a legal obligation or another lawful basis.

Processing is based on Article 6(1)(b) GDPR where your enquiry relates to a rental or pre-contractual steps. In other cases, it is based on our legitimate interest in responding to enquiries under Article 6(1)(f) GDPR.

7. Email delivery via Mailjet

We use Mailjet as an email service provider to deliver contact form enquiries. The contact details and message entered in the form are transmitted to Mailjet so that the enquiry can be delivered to us.

Processing takes place to handle your enquiry on the basis of Article 6(1)(b) GDPR or our legitimate interest in reliable enquiry delivery under Article 6(1)(f) GDPR. Where required, Mailjet is engaged under a data processing agreement.

8. Security and spam protection

The contact form uses technically necessary safeguards such as origin checks and an invisible honeypot field. These measures help reduce automated or abusive submissions without using an external CAPTCHA service.

9. Locally hosted fonts

Fonts are loaded locally from this server. No connection to Google Fonts is made when a page is opened.

10. Google Maps

Google Maps is not loaded automatically. A connection to Google is established only after you allow Google Maps in the cookie settings and actively load the map.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Loading the map may transmit your IP address, browser data and technical access data to Google, including servers outside the European Union.

Use is based exclusively on your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw this consent at any time through the cookie settings.

Further information is available in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

11. Google Analytics

If you consent in the cookie settings, we use Google Analytics 4 to produce statistical analyses of website use. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics may process pages viewed, approximate geographic region, technical browser and device information, visit source and interactions such as scrolling, external link clicks and successfully submitted contact enquiries. We do not send the contents of form fields to Google Analytics.

The Analytics script is loaded only after you consent. Processing and storage of Analytics cookies are based on your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. Google Signals and personalised advertising are disabled in our implementation. Transfers to Google companies or servers outside the European Union cannot be ruled out.

You may withdraw your consent at any time through the cookie settings with effect for the future. Accessible Google Analytics cookies for this website will then be deleted. Further information is available at How Google uses information from sites and apps and in the Google privacy policy.

12. Google Ads and conversion measurement

If you consent in the cookie settings, we use the Google tag with ID AW-18406680378 to measure visits from Google ads and the performance of our advertising. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

This may involve processing pages viewed, referrers, technical browser and device information and ad click identifiers. Google Ads may set cookies beginning with ‘_gcl_’ for this purpose. The contents of contact form fields are not sent to Google Ads. Personalised advertising is disabled in our implementation.

The Google Ads tag is loaded only after you consent. Processing and cookie storage are based on your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. Transfers to Google companies or servers outside the European Union cannot be ruled out.

You may withdraw your consent at any time through the cookie settings with effect for the future. Accessible Google Ads cookies for this website will then be deleted. Further information is available at How Google uses information from sites and apps and in the Google privacy policy.

13. Google reviews

The home page may display current reviews supplied by Google Maps through the Google Places API. Our server retrieves these reviews; website visitors do not transmit data directly to Google as part of this process.

Processing is based on our legitimate interest under Article 6(1)(f) GDPR in presenting the public profile of our business accurately and transparently. The content comes from Google Maps and links to the relevant Google sources.

14. Objection to promotional email

We object to the use of contact details published in the legal notice for sending unsolicited advertising. We reserve the right to take legal action in the event of unsolicited promotional information.