Privacy Policy

  

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor necessary for the conclusion of a contract. You are not obligated to provide the data. Failure to provide this data will have no consequences. This only applies if no other information is provided during the subsequent processing operations. "Personal data" is all information relating to an identified or identifiable natural person.

 

Terms used

 

The Term GDPR (General Data Protection Rule) refers to German Civil Code DSGVO (Datenschutzgrundverordung)

 

Server Log Files

 

You can visit our websites without providing any personal information. Each time you access our website, usage data is transmitted to us or our web host/IT service provider via your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting provider. Processing is based on Art. 6 (1) (f) GDPR, based on our overriding legitimate interest in ensuring the smooth operation of our website and improving our services.

 

Contact

 

Controller

 

Please contact us upon request. The controller for data processing is: Oliver Jürgen Hesse, Fontaneallee 76, 15745 Wildau, Germany, +49 15222664671, fontane76@oliver-hesse.com

 

Customer's unsolicited contact via email

 

If you initiate business contact with us via email, we will only collect your personal data (name, email address, message text) to the extent you provide it. Data processing serves to process and respond to your contact request. If the contact is for the implementation of pre-contractual measures (e.g., advice in the event of booking interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) (b) GDPR. If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 (1) (f) GDPR due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object to this processing of personal data concerning you based on Art. 6 (1) (f) GDPR at any time for reasons arising from your particular situation.

  

We will only use your email address to process your inquiry. Your data will then be deleted in compliance with statutory retention periods unless you have consented to further processing and use.

 

Collection and processing when using the contact form

 

When you use the contact form, we collect your personal data (name, email address, message text) only to the extent you provide it. Data processing is for the purpose of establishing contact. If the contact is for the implementation of pre-contractual measures (e.g., consultation in the event of purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) (b) GDPR. If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 (1) (f) GDPR, out of our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object to this processing of personal data concerning you based on Art. 6 (1) (f) GDPR at any time for reasons arising from your particular situation.

  

We will only use your email address to process your inquiry. Your data will then be deleted in compliance with statutory retention periods unless you have consented to further processing and use.

 

Customer Account Bookings

 

Customer Account

  

When you open a customer account, we collect your personal data to the extent specified therein. The data processing serves the purpose of improving your booking experience and simplifying the booking processing. Processing is carried out on the basis of Art. 6 (1) (a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the legality of the processing carried out on the basis of your consent until the revocation. Your customer account will then be deleted.

 

Collection, Processing, and Sharing of Personal Data for Bookings

 

When you make a booking, we only collect and process your personal data to the extent necessary to fulfill and process your booking and to process your inquiries. Providing the data is required to conclude the contract. Failure to provide this data will result in no contract being concluded. Processing is carried out on the basis of Art. 6 (1) (b) GDPR and is necessary to fulfill a contract with you. Your data may be shared with payment service providers, booking processing service providers, and IT service providers, for example. In all cases, we strictly adhere to legal requirements. The scope of data transfer is limited to a minimum.

 

Reviews Advertising

 

Data collection when posting a comment or review

 

When you comment on/review a booking or post, we only collect your personal data (name, email address, comment text) to the extent you provide it. The processing serves the purpose of enabling commenting/reviewing and displaying comments/reviews. By submitting the comment/review, you consent to the processing of the submitted data. Processing is based on Art. 6 (1) (a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the legality of the processing carried out on the basis of your consent until the revocation. Your personal data will then be deleted. When your comment/review is published, only the name you provided will be published. In addition, your IP address will be saved when you submit the comment/review for the purpose of preventing misuse of the comment or review function and ensuring the security of our information technology systems. By submitting the comment/review, you consent to the processing of the submitted data. Processing is based on Art. 6 (1) (a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the legality of the processing carried out on the basis of your consent until the revocation. Your IP address will then be deleted.

  

Website logo for Google Customer Reviews

 

The website logo for Google Customer Reviews of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") may be integrated on our website. This integration serves the purpose of displaying the number and results of our reviews received via Google to date and to promote participation in this program. Google uses cookies to display the logo on our website and to show you personalized ads on Google. Among other things, your IP address may be processed and transmitted to Google. Your data may be transferred to the USA. For the USA, an adequacy decision of the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself according to the TADPF and is therefore committed to adhering to European data protection principles. The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) (s) 1 TDDDG in conjunction with Article 6 (1) (a) GDPR. Your personal data is processed with your consent in accordance with Article 6 (1) (a) GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent until the revocation. Further information on terms of use and data protection when using Google Customer Reviews can be found at https://www.google.com/shopping/customerreviews/static/tos/de/1_01_tos.html and at https://policies.google.com/privacy?hl=de

  

Google Customer Reviews Rating Tool

 

We use the Google Customer Reviews rating tool provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") on our website. After your booking, we would like to ask you to rate and comment on your experience with us. For this purpose, we will contact you by email using Google's survey opt-in module. The following information, among others, may be processed and transmitted to Google: booking details (e.g., booking ID, booking location, expected or actual date of stay) and your email address. Your data may be transferred to the USA. For the USA, the EU Commission has adopted an adequacy decision, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself according to the TADPF and is therefore committed to complying with European data protection principles. Processing is based on Art. 6 (1) (a) GDPR with your consent, provided you have expressly consented to the transfer of your data and to receiving the review request. You can revoke your consent at any time with future effect, without affecting the legality of the processing carried out on the basis of your consent until the revocation. Further information on terms of use and data protection when using Google Customer Reviews can be found at https://www.google.com/shopping/customerreviews/static/tos/de/1_01_tos.html and at https://policies.google.com/privacy?hl=de

 

Review reminder

 

After your booking, we would like to ask you to rate your stay with us. For this purpose, we use your personal data (name, email address, booking information) independently of the contract processing to send you a review reminder by email after a booking has been made, provided you have expressly consented to this. Processing is carried out on the basis of Art. 6 (1) (a) GDPR with your consent. You can revoke your consent at any time by using the corresponding link in the email or by notifying us, without affecting the legality of the processing carried out on the basis of your consent until the revocation.

 

Use of the email address for sending newsletters

 

We use your email address to send you information and offers via newsletter, provided you have expressly consented to this. Data processing is solely for the purpose of advertising. For this purpose, we process your email address and, if applicable, other data that you voluntarily provided when registering for our newsletter. Processing is carried out on the basis of Art. 6 (1) (a) GDPR with your consent. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent until the revocation. You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list. Despite being removed from the mailing list, we may continue to store your email address in a so-called blacklist to prevent you from receiving newsletter emails from us in the future. This storage is based on Art. 6 (1) (f) GDPR, based on our and your legitimate interest in preventing the further use of your email address to send you our newsletter. You have the right to object to this processing of personal data concerning you at any time for reasons arising from your particular situation.

 

Use of the email address for sending direct mail

 

We use your email address, which we received as part of the booking or service, to electronically send advertising for our own offers or services similar to those you have already purchased from us, unless you have objected to this use. Providing the email address is necessary for the conclusion of the contract. Failure to provide it will result in no contract being concluded. Processing is based on Art. 6 (1) (f) GDPR, based on our legitimate interest in direct advertising. You can object to this use of your email address at any time by notifying us. The contact details for exercising your objection can be found in the imprint. You can also use the link provided for this purpose in the advertising email. There are no costs other than the transmission costs according to the basic rates. Use of the mobile phone number for sending SMS advertising. We use your mobile phone number, regardless of the contract processing, exclusively for our own advertising purposes to send SMS advertising.

 

IT Service Provider Booking System

  

Disclosure of email address and real name to IT company to inform about booking status

 

We will disclose your email address and name to the IT company as part of the contract processing, provided you have expressly consented to this during the booking process. The purpose of this disclosure is to inform you about the booking status by email. Processing is based on Art. 6 (1) (a) GDPR with your consent. You can revoke your consent at any time by notifying us or the IT company, without affecting the legality of the processing carried out on the basis of your consent until the revocation.

 

Use of an external booking system

  

We use an electronic booking system to process the contract as part of order processing. For this purpose, your personal data collected during the booking process will be transmitted to Smoobu GmbH, Pappelallee 78/79, 10437 Berlin, Germany, Email: service@smoobu.com. Your personal data is processed for the purpose of fulfilling the contract concluded with you and is based on Art. 6 (1) (b) GDPR.

 

Payment service provider

 

Use of PayPal We use the PayPal payment service provided by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, Email: impressum@paypal.com; "Paypal") on our website.

 

The purpose of this data processing is to offer you payment via the PayPal payment service. To integrate this payment service, PayPal must collect, store, and analyze data (e.g., IP address, device type, operating system, browser type, and location of your device) when you visit the website. Cookies may also be used for this purpose. Cookies enable your browser to be recognized. Your personal data is processed on the basis of Art. 6 (1) (f) GDPR, based on our overriding legitimate interest in offering a customer-oriented range of payment methods. You have the right to object to this processing of personal data concerning you at any time for reasons arising from your particular situation. By selecting and using "Paypal," the data required for payment processing will be transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is based on Art. 6 (1) (b) GDPR. Further information on data processing when using the PayPal payment service can be found in the associated privacy policy at: https://www.paypal.com/myaccount/privacy/privacyhub

 

Use of Klarna Payment Options

 

We use the payment service of Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; "Klarna") on our website. By selecting and using payment via Klarna, the data required for payment processing will be transmitted to Klarna in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 (1) (b) GDPR. Cookies may be stored that enable the recognition of your browser. The resulting data processing is based on Art. 6 (1) (f) GDPR and is based on our overriding legitimate interest in offering a customer-oriented range of payment methods. You have the right to object to this processing of personal data concerning you at any time for reasons arising from your particular situation. “Pay Later” (invoice), “Pay Now” (payment by direct debit, credit card, instant bank transfer), “Financing” (installment purchase) For certain payment methods such as “Pay Later” (invoice), “Pay Now” (payment by direct debit, credit card, instant bank transfer), “Financing” (installment purchase), Klarna reserves the right to obtain a credit report based on mathematical-statistical procedures using credit agencies. For this purpose, Klarna transmits the personal data required for a credit check, such as first and last name, address, gender, email address, IP address, and data related to the order, to a credit agency for the purpose of identity and credit checks and uses the information received on the statistical probability of a payment default to make a balanced decision about the establishment, implementation, or termination of the contractual relationship. The credit report may contain probability values ​​(score values) calculated on the basis of scientifically recognized mathematical statistical procedures and which include, among other things, address data. Your legitimate interests will be taken into account in accordance with the statutory provisions. The data processing serves the purpose of credit checks for the initiation of a contract. The processing is carried out on the basis of Art. 6 (1) (f) GDPR out of our overriding legitimate interest in protection against payment default when Klarna makes advance payments. You have the right to object to this processing of personal data concerning you based on Art. 6 (1) (f) GDPR at any time by notifying Klarna, for reasons arising from your particular situation. The provision of the data is necessary for the conclusion of the contract using the payment method you have requested. Failure to provide the data means that the contract cannot be concluded using the payment method you have chosen. Further information, in particular which credit rating agencies Klarna shares your personal data with, can be found at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies. General information about Klarna can be found at: https://www.klarna.com/de/. Your personal data will be treated by Klarna in accordance with the applicable data protection regulations and in accordance with the information in Klarna's privacy policy at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.

 

Cookies

 

Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that enables the browser to be uniquely identified when the website is visited again. Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. However, we would like to point out that you may then not be able to use all of the functions of this website to their full extent. The following links provide information on how to manage (including deactivate) cookies in the most important browsers: Chrome: https://support.google.com/accounts/answer/61416?hl=de Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9- 2a946a29ae09 Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

 

Technically Necessary Cookies

 

Unless otherwise stated in the privacy policy below, we only use these technically necessary cookies for the purpose of making our website more user-friendly, more effective and secure. Cookies also enable our systems to recognize your browser even after changing pages and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these functions, it is necessary that the browser is recognized even after changing pages. The use of cookies or similar technologies is based on Section 25 (2) of the Telemedia Act (TDDDG). Your personal data is processed on the basis of Art. 6 (1) (f) GDPR, based on our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offering. You have the right to object to this processing of personal data concerning you at any time for reasons arising from your particular situation.

  

Plug-ins and Other

  

Use of Google reCAPTCHA

 

We may use the reCAPTCHA service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. The query serves the purpose of distinguishing between input by a human and automated, machine processing. For this purpose, your input is transmitted to Google and used there. In addition, the IP address and possibly other data required by Google for the reCAPTCHA service are transmitted to Google. This data is processed by Google within the European Union and may also be transmitted to Google LLC servers in the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself according to the TADPF and is therefore committed to complying with European data protection principles. The use of cookies or similar technologies is based on your consent on the basis of Section 25 (1) Sentence 1 TDDDG in conjunction with Article 6 (1) (a) GDPR. The processing of your personal data is based on your consent on the basis of Article 6 (1) (a) GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the time of revocation. Further information about Google reCAPTCHA and the associated privacy policy can be found at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy.

 

Use of MapBox

 

We use the MapBox embedding feature on our website from Mapbox, Inc., 740 15th Street NW, 5th Floor, 20005 Washington D.C., United States. This feature enables the visual display of geographical information and interactive maps. When you access pages that incorporate Mapbox maps, Mapbox also collects, processes, and uses data from website visitors. Your data may also be transferred to the USA. For the USA, the EU Commission has issued an adequacy decision, the Trans-Atlantic Data Privacy Framework (TADPF). Mapbox has certified itself according to the TADPF and is therefore committed to complying with European data protection principles. The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) Sentence 1 of the Telemedia Act (TDDDG) in conjunction with Article 6 (1) (a) of the GDPR. Your personal data is processed with your consent on the basis of Art. 6 (1) (a) GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent until the revocation. Further information on the collection and use of data by Mapbox can be found in Mapbox's privacy policy at https://www.mapbox.com/legal/privacy .

 

Use of YouTube

 

We use the function for embedding YouTube videos on our website from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube"). YouTube is an affiliated company of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). This function displays videos stored on YouTube in an iFrame on the website. The "Enhanced Privacy Mode" option is activated. This means that YouTube does not store any information about website visitors. Only when you watch a video is information about it transmitted to YouTube and stored there. Your data may be transferred to the USA. For the USA, the EU Commission has an adequacy decision, the Trans-Atlantic Data Privacy Framework (TADPF). YouTube has certified itself according to the TADPF and is therefore committed to complying with European data protection principles. The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) Sentence 1 of the Telemedia Act (TDDDG) in conjunction with Article 6 (1) (a) of the GDPR. Your personal data is processed with your consent in accordance with Article 6 (1) (a) of the GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent until the revocation. Further information on the collection and use of data by YouTube and Google, your rights in this regard, and options for protecting your privacy can be found in YouTube's privacy policy at https://www.youtube.com/t/privacy.

 

Use of Google Fonts

 

We use Google Fonts from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. The purpose of data processing is to ensure a consistent display of fonts on our website. To load the fonts, a connection to Google servers is established when the page is accessed. Cookies may be used for this purpose. Among other things, your IP address and information about the browser you use are processed and transmitted to Google. This data is not linked to your Google account. Your data may be transferred to the USA. For the USA, the EU Commission has adopted an adequacy decision, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself according to the TADPF and is therefore committed to adhering to European data protection principles. The use of cookies or similar technologies is based on your consent and is based on Section 25 (1) Sentence 1 of the Telemedia Act (TDDDG) in conjunction with Article 6 (1) (a) of the GDPR. Your personal data is processed with your consent on the basis of Art. 6 (1) (a) GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent until the revocation. Further information on data processing and data protection can be found at https://www.google.de/intl/de/policies/ and at https://developers.google.com/fonts/faq.

 

Rights of the data subject and storage period

 

Storage period

 

After the contract has been fully processed, the data will initially be stored for the duration of the warranty period, then subject to statutory retention periods, particularly those under tax and commercial law, and then deleted after the expiry of the retention period, unless you have consented to further processing and use. Rights of the data subject If the legal requirements are met, you have the following rights under Articles 15 to 20 GDPR: Right to information, rectification, erasure, restriction of processing, and data portability. Furthermore, according to Article 21 (1) GDPR, you have the right to object to processing based on Article 6 (1) (f) GDPR, as well as to processing for direct marketing purposes.

  

Right to lodge a complaint with the supervisory authority

  

According to Article 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is unlawful. You can lodge a complaint with the supervisory authority responsible for us, which you can reach using the following contact details: State Commissioner for Data Protection and the Right to Access Files, Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany, Tel.: +49 33203 3560, Fax: +49 33203 35649, Email: poststelle@lda.brandenburg.de

 

Right of Objection

 

If the personal data processing listed here is based on our legitimate interest pursuant to Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time with future effect for reasons arising from your particular situation. After you object, the processing of the data in question will be terminated unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims. If personal data is processed for direct marketing purposes, you can object to this processing at any time by notifying us. Once you object, we will stop processing the data in question for direct marketing purposes.

 

Last updated: September 1, 2025