Privacy Policy

Personal data (hereinafter mostly referred to as "data") is processed by us only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered.

According to Art. 4(1) of Regulation (EU) 2016/679, i.e., the General Data Protection Regulation (hereinafter "GDPR"), "processing" means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

This privacy policy informs you in particular about the type, scope, purpose, duration, and legal basis of the processing of personal data, insofar as we decide alone or jointly with others on the purposes and means of processing. Furthermore, we inform you about third-party components used for optimization and improving user experience, insofar as these third parties process data under their own responsibility.

Our privacy policy is structured as follows:
I. Information about us as controllers
II. Rights of users and data subjects
III. Information on data processing

I. Information about us as controllers

The responsible provider of this website in terms of data protection is:

Matthias Förtsch
Kandelstr. 3
78136 Schonach im Schwarzwald

Phone: +49 15679 585212
Email: info@waldrast-apartments.de

II. Rights of users and data subjects

With regard to the data processing described below, users and data subjects have the right:

• to obtain confirmation as to whether data concerning them is being processed, to receive information about the data processed, additional information on data processing, and copies of the data (cf. also Art. 15 GDPR);
• to request correction or completion of incorrect or incomplete data (cf. Art. 16 GDPR);
• to request immediate deletion of data concerning them (cf. Art. 17 GDPR) or, alternatively, if further processing is necessary according to Art. 17(3) GDPR, to request restriction of processing pursuant to Art. 18 GDPR;
• to receive the data concerning them and provided by them and to transfer this data to other providers/controllers (cf. Art. 20 GDPR);
• to lodge a complaint with the supervisory authority if they believe that their data is being processed by the provider in violation of data protection regulations (cf. Art. 77 GDPR).

The provider is also obliged to inform all recipients to whom data has been disclosed of any correction, deletion, or restriction of processing of data under Articles 16, 17(1), and 18 GDPR. This obligation does not apply if such notification is impossible or entails disproportionate effort. Nevertheless, the user has the right to be informed of these recipients.

Users and data subjects also have the right to object to the future processing of their personal data by the provider, pursuant to Art. 21 GDPR, if the data is processed based on Art. 6(1)(f) GDPR. An objection is especially valid for processing for the purpose of direct marketing.

III. Information on data processing

Data processed when using our website will be deleted or blocked as soon as the purpose of storage no longer applies, unless legal retention obligations exist or unless otherwise specified for individual processing operations.

Cookie Manager

To obtain consent for the use of technically non-essential cookies on the website, the provider uses a cookie manager. When the website is accessed, a cookie containing your settings is stored on your device, so that consent does not need to be requested on subsequent visits.

The cookie is required to obtain lawful user consent. Users can prevent or stop the installation of cookies via their browser settings.

Cookies

a) Session cookies

We use cookies on our website. Cookies are small text files or other storage technologies placed on your device by your browser. They process certain information about you, such as browser or location data or your IP address, to make the website more user-friendly, effective, and secure.

The legal basis for cookies necessary for contract processing is Art. 6(1)(b) GDPR. For other cookies, the legal basis is Art. 6(1)(f) GDPR.

Session cookies are deleted when the browser is closed.

b) Third-party cookies

Cookies from partner companies may also be used for advertising, analytics, or website functionality. Details are provided below.

c) Deactivation / removal

You can prevent or limit cookie installation through your browser settings and delete cookies already stored. For Flash cookies, configuration of your Flash Player is required.

Preventing or limiting cookies may cause some functions of the website to be unavailable.

Contact requests / contact form

If you contact us via a form or email, the information you provide is used to process your request. The legal basis is Art. 6(1)(b) GDPR. Data will be deleted after your request has been processed, unless legal retention obligations exist.

User contributions, comments and reviews

If you publish a comment or review, we process and publish your contribution, the date and time of submission, and any pseudonym used. Legal basis: Art. 6(1)(a) GDPR. Consent can be withdrawn at any time.

We also process your IP and email for the purpose of protecting our legal rights if your contribution infringes on the rights of others (Art. 6(1)(f) GDPR).

Server data

For technical reasons, data is transmitted by your browser to us or our hosting provider. These "server log files" include browser type and version, operating system, referring website, visited pages, date, time, and IP address.

Data is temporarily stored and processed separately. Legal basis: Art. 6(1)(f) GDPR. Data is deleted after seven days unless required for evidence.

Links to third-party profiles

The website contains links to social networks. Legal basis: Art. 6(1)(f) GDPR. Plugins are integrated via clickable graphics; the user is redirected to the network only upon clicking.

Google Analytics

We use Google Analytics to analyze website usage. Data is anonymized and transmitted to Google servers in the USA. Legal basis: Art. 6(1)(f) GDPR.

Google Fonts

Google Fonts are used for displaying fonts. A connection to Google servers in the USA is made when accessing the website. Legal basis: Art. 6(1)(f) GDPR.

Google reCAPTCHA

We use Google reCAPTCHA to protect the site from automated access. Legal basis: Art. 6(1)(f) GDPR.

Google Maps

Google Maps is used to display our location and create directions. Data may be processed by Google in the USA. Legal basis: Art. 6(1)(a) and (f) GDPR.

Google Custom Search (CSE)

We use Google Custom Search Engine for website search. Legal basis: Art. 6(1)(f) GDPR.

OpenStreetMap

We use OpenStreetMap for route directions. Legal basis: Art. 6(1)(a) and (f) GDPR.

Smoobu & Stripe

For booking, we use Smoobu and Stripe for payment. Necessary data is processed for contract initiation and execution (Art. 6(1)(b) GDPR).

Privacy policies: Smoobu, Stripe

PayPal

If you choose PayPal for payment, your data is transmitted to PayPal. Legal basis: Art. 6(1)(b) GDPR. More info: PayPal