Responsible within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is: Martina and Giuseppe Romano
Your data subject rights
You can exercise the following rights at any time using the contact details provided by our data protection officer: Information about your data stored by us and its processing (Art. 15 GDPR), correction of incorrect personal data (Art. 16 GDPR), deletion of your data stored by us (Art. 17 GDPR), restriction of data processing if we are not yet permitted to delete your data due to legal obligations (Art. 18 GDPR), objection to the processing of your data by us (Art. 21 GDPR) and data portability if you have consented to data processing or have concluded a contract with us (Art. 20 GDPR). If you have given us your consent, you can revoke it at any time with effect for the future. You can lodge a complaint with a supervisory authority at any time, e.g. the competent supervisory authority in the federal state in which you live or the authority responsible for us as the controller. A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Collection of general information when visiting our website
Type and purpose of processing:
When you access our website, i.e., if you do not register or otherwise transmit information, general information is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address, and similar data. It is processed in particular for the following purposes: ensuring a problem-free connection to the website, ensuring smooth use of our website, evaluating system security and stability, and for other administrative purposes. We do not use your data to draw conclusions about you personally. We may statistically evaluate this information in order to optimize our website and the technology behind it.
Legal basis:
The processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.
Recipient:
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.
Storage period:
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. For data used to provide the website, this is generally the case when the respective session ends.
Provision required or necessary:
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. Furthermore, individual services may be unavailable or restricted. For this reason, an objection is excluded.
Provision of paid services
Type and purpose of processing:
In order to provide paid services, we request additional data, such as payment details, in order to process your order.
Legal basis:
The processing of data necessary for the conclusion of the contract is based on Art. 6 (1) (b) GDPR. Recipients: Recipients of the data may be contract processors.
Storage period:
We store this data in our systems until the statutory retention periods have expired. These are generally six or ten years for reasons of proper accounting and tax requirements.
Provision required or necessary:
The provision of your personal data is voluntary. Without your personal data, we cannot grant you access to the content and services we offer.
Contact form
Type and purpose of processing:
The data you enter will be stored for the purpose of individual communication with you. For this purpose, you must provide a valid email address and your name. This will be used to assign the request and subsequently respond to it. Providing additional data is optional.
Legal basis:
The data entered into the contact form is processed on the basis of a legitimate interest (Art. 6 (1) (f) GDPR). By providing this contact form, we want to enable you to contact us easily. The information you provide will be stored for the purpose of processing your request and for possible follow-up questions. If you contact us to request a quote, the data entered into the contact form will be processed to carry out pre-contractual measures (Art. 6 (1) (b) GDPR).
Recipient:
Recipients of the data may be contract processors. Storage period: Data will be deleted no later than six months after the request has been processed. If a contractual relationship is established, we are subject to the statutory retention periods according to the German Commercial Code (HGB) and will delete your data after these periods have expired.
Provision required or necessary:
Providing your personal data is voluntary. However, we can only process your request if you provide us with your name, email address, and the reason for your request.
Use of Google Maps
Type and purpose of processing:
We use Google Maps on this website. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google"). This allows us to display interactive maps directly on the website and enables you to conveniently use the map function. Further information about data processing by Google can be found in the Google Privacy Policy. There you can also change your personal data protection settings in the Data Protection Center. Detailed instructions on managing your own data in connection with Google products can be found here.
Legal basis:
The legal basis for the integration of Google Maps and the associated data transfer to Google is your consent (Art. 6 (1) (a) GDPR).
Recipient:
When you visit the website, Google receives information that you have accessed the corresponding subpage of our website. This happens regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not want this to be assigned to your Google profile, you must log out of Google before activating the button. Google saves your data as user profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right you must contact Google.
Storage period:
We do not collect any personal data through the integration of Google Maps.
Third country transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Revocation of consent:
If you do not want Google to collect, process, or use data about you through our website, you can deactivate JavaScript in your browser settings. However, in this case, you will not be able to use our website at all, or only to a limited extent.
Provision required or necessary:
The provision of your personal data is voluntary and based solely on your consent. If you deny access, this may result in functional limitations on the website.
SSL encryption
To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) over HTTPS.
Processors used
The following organizations, companies, and individuals have been commissioned by the operator of this website to process data: To make a booking, you must provide your contact details. You only need to provide the fields marked with an asterisk (mandatory fields here), as well as the information relating to the booking (e.g., length of stay). We also save your booking date and time. Additional information (optional fields here) is not mandatory. The data you provide on our website, including any notes, is personal data and will be processed and used by us to ensure the processing of the booking and the provision of the requested service. We also use your data to provide you with information relevant to your booking or your stay. The personal data collected during the booking process will be forwarded to the following third parties: Smoobu GmbH – Smoobu.com is a software provider for holiday apartment landlords. Wönnichstr. 68/70, 10317 Berlin, Germany. Link to Smoobu's privacy policy: https://www.smoobu.com/datenschutz/
Changes to our privacy policy
We reserve the right to amend this privacy policy to ensure it always complies with current legal requirements or to implement changes to our services in the privacy policy, for example, when introducing new services. The new privacy policy will then apply to your next visit.
Questions for the Data Protection Officer
If you have any questions about data protection, please send us an email or contact the person responsible for data protection in our organization directly: This privacy policy was created with the help of activeMind AG, the experts for external data protection officers (version #2019-04-10).
