Privacy Policy
Data Controller
The data controller for this website is:
Detlef Steinmetz
Rental and Leasing
Bühlhofweg 24
79856 Hinterzarten
Telephone: (+49 173) 3612763
Email:
A data protection officer is not required by law for our business and has therefore not been appointed.
General
This privacy policy is intended to inform users of this website about the nature, scope and purpose of the collection and use of personal data by the website operator. As the website operator, we take data protection very seriously and treat your personal data confidentially and strictly in accordance with legal requirements. We recommend that you read our privacy policy at regular intervals, as it may change due to the ongoing development of our website or services, or as a result of legal or regulatory requirements.
In this privacy policy, we use terms (e.g. ‘personal data’ or ‘processing’) that are defined in Article 4 of the General Data Protection Regulation (GDPR).
Access data (server log files)
On the basis of our legitimate interest (Article 6(1)(f) of the GDPR), we collect data regarding access to our website and store this in the server’s log files. The following data is logged: page requested, referrer URL, date and time of the server request, status of the server request, amount of data transferred, IP address and user agent (browser & operating system).
These log files are stored for a maximum of 7 days and then deleted. The data is stored solely for security reasons, for example to investigate cases of misuse; it is not merged with other data sources. If data must be retained for evidential purposes, it is exempt from deletion until the incident has been fully resolved. The same settings and rules also apply to the data servers “daten.verwaltungsportal”, “fotos.verwaltungsportal.de”, “vorschau.verwaltungsportal.de” and “layout.verwaltungsportal.de”, which form part of our website provider’s backend system.
The legal basis for this data processing is our legitimate interest in ensuring the security of our website in accordance with Article 6(1)(f) of the GDPR.
Cookies
This website uses cookies to enhance the user-friendliness, functionality and security of the website. Cookies are small files that are stored on your device. Your browser accesses these files. This makes it possible to distinguish your browser from others. Thus, through the use of cookies, the website can offer functions that would not be possible without them. This applies in particular to simple menu navigation and other individual website settings. The cookies for these functions generally have a maximum lifespan of 24 hours and are not used to identify visitors.
You can view the specific names, purposes and storage durations of the cookies we use at any time in the cookie banner under ‘Settings’. There, you can also give your consent to non-technically necessary cookies, select them individually, accept, reject or withdraw your consent.
Modern browsers also offer the option to block cookies and thus disable them generally for one or all websites. If you use this browser function, we cannot guarantee that all features of this website will be available without restrictions.
Collection and processing of personal data
In principle, it is possible to use our website without providing personal data. However, should the user wish to use a function that requires the provision of personal data, the website operator will only process the personal data on a lawful basis or with the consent of the data subject. Personal data is defined as any information that can be attributed to an identified or identifiable natural person – for example, your name, email address or telephone number.
Contact form
We provide a contact form on our website. We process personal data such as your name, email address, telephone number and the details provided in the form. This data is processed for the purpose of handling your enquiry and, where applicable, to initiate or execute a tenancy agreement for our holiday apartments.
The legal basis for processing the data provided in the contact form is
– for enquiries aimed at concluding or executing a tenancy agreement, Article 6(1)(b) of the GDPR (performance of a contract or pre-contractual measures),
– for other enquiries, our legitimate interest in processing your enquiry pursuant to Article 6(1)(f) of the GDPR.
Handling of contact details
If you contact us via the contact options provided, your details will be processed for the purpose of handling and responding to your enquiry. This data will not be passed on to third parties without your consent.
We store the personal data you provide via the contact form or by email for as long as is necessary to process your enquiry and for as long as statutory retention obligations apply. Otherwise, the data is regularly deleted or its processing restricted.
Use of a 2-click solution for iframe embeddings
A 2-click solution for so-called iframe integrations is enabled on our website. This function ensures that when you visit a page on our website that contains such integrations of third-party websites, no connection is yet established with the servers of the provider of the respective website. However, by clicking on the window, you can view the content and thereby confirm the differing data protection conditions of the integrated websites. For information on the purpose and scope of data collection, as well as the further processing and use of the data by the third-party websites, and your rights and settings options regarding the protection of your privacy, please refer to the privacy policy of the relevant website or provider.
Google reCAPTCHA
To protect against form abuse, Google reCAPTCHA may be used on this website, whereby the optional parameter “remoteip” is not set in the API query. 3 When using the CAPTCHA, your browser downloads the data required for Google reCAPTCHA to function from Google. In doing so, your browser establishes a connection to Google’s servers, meaning that Google becomes aware of the request and your IP address via our website.
The operator of this site has no influence over this data transfer.
Google reCAPTCHA is used to prevent the misuse of forms, whilst minimising any impact on the website’s user-friendliness. Thanks to its largely automated recognition and wide range of functions, this CAPTCHA is one of the most user-friendly on the market and is therefore a legitimate interest within the meaning of Article 6(1)(f) of the GDPR.
In this context, personal data may be transferred to the USA. There is currently no adequacy decision by the European Commission for the USA. The data transfer is carried out on the basis of Article 46(2)(c) of the GDPR (standard contractual clauses) and our legitimate interest pursuant to Article 6(1)(f) of the GDPR.
When Google reCAPTCHA is accessed, the separate data protection provisions of Google apply. Further information on this can be found in Google’s privacy policy.
Google Maps
This website may use Google Maps to display location maps. When a location map from Google Maps is accessed, data is transferred to Google’s servers and stored there. The operator of this site has no influence over this data transfer.
The use of Google Maps is in the interest of presenting our online services in an appealing manner and ensuring that the locations specified on our website are easy to find. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR.
The use of Google Maps may also result in the transfer of personal data to the USA. There is currently no adequacy decision by the European Commission for the USA. The data transfer takes place on the basis of Article 46(2)(c) of the GDPR (standard contractual clauses) and our legitimate interest pursuant to Article 6(1)(f) of the GDPR.
When accessing Google Maps, the separate data protection provisions of Google apply. Further information on this can be found in Google’s privacy policy.
Google Web Fonts
To ensure consistent font display, this website may use so-called Google Web Fonts. When these fonts are used, your browser downloads the required fonts from our website system and temporarily stores them in the browser cache to ensure the fonts are displayed correctly. In doing so, your browser does not establish a connection to Google’s servers, meaning Google has no knowledge of the request or your IP address.
Users’ rights
As a user, you have the right to request, free of charge, information about which personal data has been stored about you (Art. 15 GDPR). You also have the right to have inaccurate data rectified (Art. 16 GDPR) and to restrict the processing (Art. 18 GDPR) or erasure of your personal data (Art. 17 GDPR). Where applicable, you may also exercise your right to data portability (Art. 20 GDPR), provided this is technically feasible and does not infringe upon the rights and freedoms of others. If you believe that your data has been processed unlawfully, you may lodge a complaint with the competent supervisory authority (Art. 77 GDPR).
Deletion of data
As a user, you have the right to have your data erased, provided this does not conflict with a legal obligation to retain data. Data stored by us will be erased if it is no longer necessary for its intended purpose or if there are no statutory retention periods. If erasure is not possible because the data is required for legitimate legal purposes, data processing will be restricted. In this case, the data will be blocked and will no longer be processed for other purposes.
Right to object
Users of this website may exercise their right to object and object to the processing of their personal data at any time, provided that the processing is based on Article 6(1)(e) or (f) of the GDPR (Article 21 of the GDPR).
If you wish to request the rectification, blocking, erasure or access to the personal data stored about you, or if you have any questions regarding the collection, processing or use of your personal data, or wish to withdraw any consent you have given, please contact us using the contact details provided above.