Data protection

Privacy Policy

1) Introduction and contact details of the responsible party

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data is any data that can be used to personally identify you.

1.2 The data controller for this website within the meaning of the General Data Protection Regulation (GDPR) is:

Tatjana Ganz
Bergstraße 7
83620 Feldkirchen-Westerham
Germany
Phone: +49 176 47760559
Email: kontakt@bergraum-chiemgau.de

The data controller is the natural or legal person who determines the purposes and means of the processing of personal data.

2) Data collection when visiting our website

2.1 When you browse our website for informational purposes, we only collect data that your browser transmits to our server ("server log files"). This includes:

  • Visited website
  • Date and time of access
  • Amount of data sent in bytes
  • Source/referrer
  • Browser used
  • Operating system used
  • IP address (possibly anonymized)

This processing is carried out in accordance with Article 6(1)(f) GDPR based on our legitimate interest in improving stability and functionality.

2.2 This website uses SSL/TLS encryption to protect personal data and confidential content. You can recognize this by the "https://" prefix and the padlock icon.

3) Hosting

Our website is hosted on servers located exclusively within the European Union. All collected data is processed on these servers. A data processing agreement has been concluded with the hosting provider.

4) Cookies

We use cookies to improve user experience and enable certain features. Cookies are small text files stored on your device.

Cookies may be:

  • Session cookies (deleted automatically)
  • Persistent cookies (stored longer)

The legal basis depends on the purpose:

  • Art. 6(1)(b) GDPR (contract)
  • Art. 6(1)(a) GDPR (consent)
  • Art. 6(1)(f) GDPR (legitimate interest)

You can control cookies in your browser settings.

5) Contact

If you contact us via email or contact form, your personal data will be processed solely for handling your request.

Legal basis:

  • Art. 6(1)(f) GDPR (legitimate interest)
  • Art. 6(1)(b) GDPR (contractual communication)

Your data will be deleted after your request has been fully processed.

6) Data processing for contract fulfillment

6.1 Payment processing via Stripe

Payments are processed via:

Stripe Payments Europe Ltd.
1 Grand Canal Street Lower
Dublin, Ireland

Payment data may include:

  • Name
  • Address
  • Payment details
  • Transaction data

Legal basis: Art. 6(1)(b) GDPR

6.2 Booking and contract management via Smoobu

We use the service provider:

Smoobu GmbH
Pappelallee 78/79
10437 Berlin
Germany

Smoobu processes booking and guest data to manage reservations and contracts.

Legal basis:

  • Art. 6(1)(b) GDPR (contract processing)
  • Art. 6(1)(f) GDPR (legitimate interest in business organization)

7) Rights of the data subject

You have the following rights under GDPR:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to withdraw consent (Art. 7 GDPR)
  • Right to lodge a complaint (Art. 77 GDPR)

8) Right to object

You may object to processing based on legitimate interest at any time.

If you object, we will stop processing unless compelling legal grounds exist.

9) Data storage duration

Personal data is stored only as long as necessary for the respective purpose or required by law.

Contractual and tax-related data may be stored according to statutory retention periods.