1. Data Controller
Nicole Neckermann
Pariser Platz 5a
70173 Stuttgart
Deutschland
Email: n.neckermann@web.de
2. Collection of Personal Data
We only collect personal data when you provide it voluntarily or when collection is technically necessary. Below we explain what data we collect, why, and on what legal basis.
Contact and Booking Form
When you use our contact or booking form, we collect the following data: name, email address, phone number (optional), desired apartment, arrival and departure dates, number of guests, number of pets (optional), and your message. We use this data to process your inquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures).
Booking Management and Contract Fulfillment
If a booking is confirmed, we process your data for contract fulfillment pursuant to Art. 6(1)(b) GDPR. This includes: booking confirmation, sending check-in information, creating and sending invoices, and ongoing communication regarding your stay. For invoicing purposes, we additionally require your address (street, house number, postal code, city, country). This data is stored and processed in our property management portal (see Section 3).
Server Log Files
Each time you access this website, the server automatically records: browser type and version, operating system, referrer URL, IP address, time of request. This data is technically necessary to deliver the website and ensure security. Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Log files are deleted after 30 days.
3. Data Processors
We use the following data processors to provide our services:
Brevo (Sendinblue)
To send your contact and booking inquiries by email, we use Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France). Your name and email address are transmitted to Brevo for this purpose. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures). More information:Brevo Privacy Policy.
MeineFeWoSeite.de (Property Management Portal)
To manage bookings, guest data, and invoices, we use the property management portal MeineFeWoSeite.de, operated by Better Projects Faster GmbH. Your contact and booking data, as well as your address if applicable, are stored and processed in this portal. The portal uses OneSignal (OneSignal, Inc., San Mateo, CA, USA) to send emails such as booking confirmations, invoices, and check-in information. Legal basis: Art. 6(1)(b) GDPR (contract fulfillment). More information:OneSignal Privacy Policy.
4. Hosting
This website is hosted by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) on Cloudflare Pages. Personal data (in particular IP addresses) is transferred to the USA (third-country transfer pursuant to Art. 44 et seq. GDPR). Cloudflare is certified under the EU-US Data Privacy Framework. Additionally, EU Standard Contractual Clauses (SCCs) are in place as a supplementary safeguard. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and efficient delivery).Cloudflare Privacy Policy.
5. SSL/TLS Encryption
This website uses SSL/TLS encryption for secure data transmission. You can recognize an encrypted connection by the lock symbol in your browser's address bar and the "https://" prefix.
6. Cookies
This website does not use tracking cookies. No analytics or advertising tools are used. Only technically necessary cookies required for the operation of the website are used.
7. Retention Periods
We store your personal data only as long as necessary for the respective purpose or as required by statutory retention obligations:
- Contact inquiries without booking: Deleted after processing is complete, at the latest after 6 months.
- Booking and guest data: For the duration of the contractual relationship and beyond in accordance with statutory retention obligations.
- Invoices and tax-relevant documents: 10 years pursuant to §147 AO and §14b UStG.
- Email dispatch logs: 2 years (legitimate interest for evidence in billing disputes, Art. 6(1)(f) GDPR).
- Server log files: 30 days.
8. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Access (Art. 15 GDPR) — You can request information about your stored data.
- Rectification (Art. 16 GDPR) — You can request correction of inaccurate data.
- Erasure (Art. 17 GDPR) — You can request deletion of your data.
- Restriction (Art. 18 GDPR) — You can request restriction of processing.
- Data Portability (Art. 20 GDPR) — You can receive your data in a common format.
- Objection (Art. 21 GDPR) — You can object to the processing of your data.
- Withdrawal of Consent (Art. 7(3) GDPR) — Where processing is based on your consent, you may withdraw it at any time. The lawfulness of processing carried out before the withdrawal remains unaffected.
To exercise your rights, write ton.neckermann@web.de.
9. Right to Complain
You have the right to lodge a complaint with a supervisory authority. The authority responsible for us is:
Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach
Phone: 0981 180093-0
Website: www.lda.bayern.de
You may also contact the data protection authority in your country of residence.
10. Changes
We reserve the right to update this privacy policy to comply with current legal requirements.
Last updated: March 2026