Privacy policy
This translation is provided for your convenience; the German version is legally binding.
This page explains which personal data we process when you visit gastlich-wohnen.de, send us an enquiry or book an apartment – and what rights you have.
Who is responsible for data processing?
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Tobias TkoczGastlich WohnenIn den Mittelweiden 6A56070 KoblenzEmail: info@gastlich-wohnen.deIf you have any questions about data protection, simply write to the email address above.
What data is collected when you visit the website?
Whenever you open a page, your browser automatically sends technical data to our hosting provider: IP address, date and time, the address requested, the previously visited page (referrer), and your browser and operating system. This data is needed to deliver the page and to protect the systems against attacks. We do not combine it with other data.
The website is hosted by Netlify, Inc. (San Francisco, USA), which processes the data on our behalf (Art. 28 GDPR). Netlify is certified under the EU-U.S. Data Privacy Framework, so transfers to the USA are covered by an adequacy decision of the European Commission (Art. 45 GDPR). Server log data is kept only as long as necessary for operation and security.
The legal basis is our legitimate interest in a secure and stable website (Art. 6(1)(f) GDPR). Connections to our website are encrypted via HTTPS.
How do we measure visitor numbers?
We count page views with Plausible Analytics by Plausible Insights OÜ (Tartu, Estonia). Plausible sets no cookies, stores nothing on your device and creates no user profiles. Your IP address is not stored: Plausible only derives a daily changing identifier from the IP address and browser details to count visits, and discards it after 24 hours. We only see aggregated figures such as page views, referring sites, countries and device types. The data is processed on servers in the EU.
The legal basis is our legitimate interest in improving our website based on anonymous statistics (Art. 6(1)(f) GDPR). As nothing is stored on or read from your device, no consent is required under Section 25 TDDDG.
What happens to the details in the enquiry form?
When you contact us via the enquiry form, we process your name, email address, arrival and departure dates, number of guests and your message, as well as – automatically – the apartment and the language of the page you are writing from. We use this information solely to answer your enquiry and prepare a booking (Art. 6(1)(b) GDPR). We cannot reply without the fields marked as required; everything else is optional.
The form is submitted via Netlify Forms: Netlify stores the enquiry in our account and sends it to us by email. To protect against spam, Netlify checks incoming submissions automatically, among other things with the Akismet service of Automattic Inc. (USA). Enquiries that do not lead to a booking are deleted once they have been dealt with. If an enquiry leads to a booking, the retention periods in the next section apply.
What happens with the booking calendar and when you book?
The calendar and bookings run on the booking system of Smoobu GmbH (Berlin), which processes booking data on our behalf (Art. 28 GDPR). The calendar only loads when you scroll to the booking section or click “Check availability”. Your browser then connects to Smoobu’s servers and transmits technical data such as your IP address. Smoobu sets a session cookie that is technically necessary for the booking calendar (Section 25(2) no. 2 TDDDG). To resize the calendar, Smoobu loads a script from the cdnjs service of Cloudflare, Inc. (USA), which is certified under the EU-U.S. Data Privacy Framework.
When you book, we process the information requested in the booking form – such as name, address, email address, phone number, travel dates and number of guests – to perform the rental contract (Art. 6(1)(b) GDPR). If you pay online, the payment service provider offered for this processes your payment data.
Guests without German citizenship are required by law to complete a registration form on arrival (Sections 29 and 30 of the German Federal Registration Act, BMG). We keep it for one year and destroy it no later than three months after that (Art. 6(1)(c) GDPR). We keep booking and invoice records for as long as commercial and tax law requires – usually six to ten years.
How are emails processed?
When you email us, we process your address and the content in order to reply – for questions about a stay under Art. 6(1)(b) GDPR, otherwise under Art. 6(1)(f) GDPR. Emails to our address are received by INWX GmbH (Berlin) as our email provider and forwarded to a mailbox of Google Ireland Limited (Dublin), from which we reply. We delete emails once they have been dealt with and no retention obligation applies.
Do we use cookies or external content?
Our website itself sets no cookies and stores nothing in your browser. The fonts are hosted on our own server; there is no connection to Google Fonts or other font services. The map on the Koblenz page is an image on our server – OpenStreetMap is only contacted when you click the link to it. External content is loaded only by the booking calendar (see above).
What are your rights?
You have the right to
- access the data we hold about you (Art. 15 GDPR),
- rectification of inaccurate data (Art. 16 GDPR),
- erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- object to processing based on our legitimate interest (Art. 21 GDPR).
An email to the address above is all it takes. You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the one responsible for us: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz, Hintere Bleiche 34, 55116 Mainz, Germany.
No automated decision-making, including profiling, takes place.