Legal
Privacy policy
This statement describes which personal data are processed when you visit this website, on what legal basis, and what rights you have.
Controller for the data processing
Details are still missing
These mandatory details under section 5 of the German Digital Services Act have not been entered yet. They are maintained in the editorial area and will appear here once available. Deliberately, no placeholder stands in their place.
- Name
- Street and number
- Postcode and town
- Country
Principle
This website is static. The delivered pages query no database while running and load no fonts, maps, videos or scripts from third-party servers. Without an action on your part, no data leave your device apart from those technically required to deliver the page.
Server logs
When a page is requested, your browser transmits information that the web server records: the address requested, the time, the amount of data transferred, the status code, the browser identifier and the IP address. This processing is necessary to operate and secure the server; the legal basis is Article 6(1)(f) GDPR.
The logs are not combined with other data and are deleted after a short period.
Contact form
If you use the contact form, the details you enter — name, email address, optionally telephone number and dates, and your message — are stored in this website's database and then forwarded to us by email. In addition, the time of submission and the IP address are stored so that misuse can be traced.
The legal basis is Article 6(1)(b) GDPR where the enquiry is directed at a contract, and otherwise Article 6(1)(f) GDPR. The details are deleted as soon as the enquiry has been dealt with and no retention obligation applies.
The form contains a field invisible to you that only automated programs fill in. A hit is logged, so that a false positive becomes apparent and no genuine enquiry is discarded silently.
Spam protection
To protect the form against automated misuse, Cloudflare Turnstile is used, a service of Cloudflare, Inc. Your IP address is transmitted to Cloudflare and a check is run in your browser. According to the provider, the service works without cookies.
The legal basis is Article 6(1)(f) GDPR; the legitimate interest lies in fending off automated requests. If the service is not set up, the form accepts enquiries without this check.
Usage measurement
This website loads no measurement tool unless you have consented. If a measurement tool is set up, a prompt appears on your first visit; without consent nothing is loaded and nothing is stored on your device. The legal basis is then your consent under section 25(1) TDDDG and Article 6(1)(a) GDPR.
Your decision is stored locally in your browser so that the prompt does not appear on every visit. You can change it at any time; the control for this is in the footer.
Link to the booking platform
The booking takes place on an external platform. Only when you click the link is a connection to its servers established; from that point the privacy policy of that provider applies. No content from the platform is embedded on this website, and there are no buttons that transmit data without a click.
Your rights
You have the right of access (Article 15 GDPR), to rectification (Article 16), to erasure (Article 17), to restriction of processing (Article 18), to data portability (Article 20) and to object to processing based on legitimate interests (Article 21). You may withdraw consent you have given at any time.
You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is that of the controller's federal state; as soon as the controller's address has been entered, the competent authority will be named here.
Competent supervisory authority
The competent authority follows from the registered address of the controller. As long as that has not been entered, no authority is named here.
Last updated: