Privacy Policy

Privacy Policy

Protecting your personal data is important to us. Below we transparently inform you, pursuant to Art. 13 of the General Data Protection Regulation (GDPR), about which data is processed when you use our website, for which purposes, and which rights you have.

1) Data controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Julian Winnekens Millinger Str. 41a
47495 Rheinberg
Germany

The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of the processing of personal data.

2) Data collection when you visit our website

When you use our website purely for information purposes, i.e. without registering or otherwise transmitting information to us, we only collect data that your browser sends to our server (so-called “server log files”). When you access our website, we collect the following data that is technically required for us to display the website to you:

  • The website you visited
  • Date and time of access
  • Amount of data sent in bytes
  • Source/referrer from which you reached the page
  • Browser used
  • Operating system used
  • IP address used (where applicable, anonymised)

Processing is carried out pursuant to Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are specific indications of unlawful use.

3) SSL / TLS encryption

For security reasons and to protect the transmission of personal data and other confidential content, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the “https://” string and the padlock symbol in your browser's address bar.

4) Hosting (bunny.net)

This website is stored and delivered via the following provider:

BunnyWay d.o.o.
Dunajska cesta 165
1000 Ljubljana
Slovenia

We use bunny.net's S3-compatible storage (region Frankfurt, Germany) and, where enabled, its Content Delivery Network (CDN) to store and provide the files of our website via a network of regionally distributed servers. When pages and files are accessed, technical access data (e.g. IP address, user agent) is processed to deliver the content and to ensure the security, stability and performance of the website. The processing is carried out pursuant to Art. 6(1)(f) GDPR based on our legitimate interest in a reliable and performant presentation of our offering. We have concluded a data processing agreement with the provider pursuant to Art. 28 GDPR.

5) Contact

When you contact us by email, personal data is processed solely for the purpose of handling and responding to your enquiry and only to the extent necessary. The contact form on this website is a client-side form: submitting it opens your own email program with a pre-addressed email to us (mailto:), so no form data is transmitted to or stored on our servers. The legal basis for this processing is our legitimate interest in responding to your enquiry pursuant to Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6(1)(b) GDPR. Your data will be deleted once it can be inferred from the circumstances that the matter has been conclusively clarified and provided that no statutory retention obligations prevent this.

6) Maps and navigation (OpenStreetMap)

The interactive location maps on our apartment pages are rendered locally in your browser via the map service OpenStreetMap (tile.openstreetmap.org). When you open a page with an embedded map, your IP address is transmitted to OpenStreetMap's servers. OpenStreetMap is operated by the OpenStreetMap Foundation; the data processing is carried out pursuant to Art. 6(1)(f) GDPR based on our legitimate interest in displaying our offering in a user-friendly way. For more information, please see OpenStreetMap's privacy policy: wiki.openstreetmap.org/wiki/Privacy_Policy.

We also provide links to external navigation services (Google Maps, Apple Maps or OpenStreetMap) for directions. These links only become active upon your explicit use; only when you open the respective service will your data be processed by the respective provider in accordance with its own privacy policy. We have no influence over this processing.

7) Web fonts (self-hosted)

For a consistent presentation, this site uses the fonts Noto Sans and Noto Serif. These are hosted on our own server (static/fonts/) and delivered directly by us. When a page is opened, no connection to an external font provider (such as Google Fonts) is established and no font data is transmitted to third parties.

8) Booking and availability forms (Smoobu)

On our apartment pages we embed forms from the following provider to display availability and for booking enquiries:

Smoobu GmbH
Kopenhagener Str. 60–68
13407 Berlin
Germany

When the embedded forms are opened, your browser establishes a connection to Smoobu's servers; technical data, including your IP address, is transmitted to Smoobu. The booking data you enter is processed by Smoobu to handle your booking enquiry. Processing is carried out pursuant to Art. 6(1)(b) and (f) GDPR. For more information, please see Smoobu's privacy policy: www.smoobu.com/privacy.

9) Your rights

The applicable data protection law grants you the following rights vis-à-vis the controller concerning the processing of your personal data:

  • Right of access pursuant to Art. 15 GDPR
  • Right to rectification pursuant to Art. 16 GDPR
  • Right to erasure pursuant to Art. 17 GDPR
  • Right to restriction of processing pursuant to Art. 18 GDPR
  • Right to be informed pursuant to Art. 19 GDPR
  • Right to data portability pursuant to Art. 20 GDPR
  • Right to withdraw consent pursuant to Art. 7(3) GDPR
  • Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR

To exercise your rights, please contact us using the details provided under Item 1.

10) Right to object

Where we process personal data on the basis of our overriding legitimate interest (Art. 6(1)(f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation. If you exercise your right to object, we will stop processing the data concerned unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or where the processing serves the establishment, exercise or defence of legal claims.

11) Duration of storage of personal data

The duration of the storage of personal data is determined by the respective legal basis, the processing purpose and – where applicable – additionally by the respective statutory retention period (e.g. commercial and tax retention obligations). Unless stated otherwise in the other information within this policy, stored personal data is deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

12) Currency of this privacy policy

We may update this privacy policy from time to time to reflect current legal or technical developments. The current version is always available on this page.

13) Cookies and local storage

This website sets no cookies and stores no data in your browser or on your device. We do not use tracking, analytics or marketing tools. The only connections to third parties are the embedded services described in sections 6 and 8 (OpenStreetMap map tiles and the Smoobu availability and booking widgets), which operate under their own privacy policies and over which we have no control.

Last updated: September 2026