Privacy

1. Who is responsible?

The party responsible for processing your data on this site is:

Löffelmann GbR

Partners: Franziska Löffelmann and Stephan Löffelmann

Eichwaldweg 25, 75323 Bad Wildbad, Germany

Phone: 015174337433

Email: willkommen@ab-ins-gruene.net

We have not appointed a data protection officer.

2. What we want to know in principle, and what we do not

This site is for getting to know and booking a holiday apartment. We do not use our own cookies, we do not use visitor counting and we do not use advertising tracking. We deliver fonts, images and videos from our own server. Third-party providers are only integrated where this is necessary for the calendar, the booking, the payment or certain additional offers. Where that is the case, it is stated below.

3. When you visit the site (server logs)

When you open the site, your browser sends technical data to our host: IP address, date and time, the page requested, browser and operating system. The host stores them in server logs so that the site runs securely and reliably.

• Purpose: delivering the site, security, troubleshooting.
• Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).
• Storage period: the logs are stored only for as long as necessary for this purpose.
• Host: ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. A data processing agreement exists with the host.

4. Calendar and booking tool (Smoobu)

The availability calendar and the booking tool are provided by Smoobu (smoobu.com). They are loaded as embedded windows (iframes) from Smoobu’s servers.

• What happens: when loading, your browser transmits data to Smoobu, at least your IP address and technical information. Smoobu may set cookies in the process (e.g. from its service provider Cloudflare).
• When it happens: the calendar loads as soon as you reach the “Book” section. The booking tool only loads when you click “Book now” and the booking window opens.
• Legal basis: Art. 6(1)(f) GDPR (legitimate interest in showing you free dates and enabling the booking), and for the booking tool additionally Art. 6(1)(b) GDPR.
• If you book: you enter data in the booking tool (name, address, email, phone, country, travel dates, number of guests, message, arrival time). We process it to carry out the booking (Art. 6(1)(b) GDPR). Smoobu processes the data on our behalf.

5. Payment (Stripe and PayPal)

Payment at booking is handled by Stripe and PayPal. In the booking tool you decide which payment method to use (credit card, PayPal or Sofort).

• Stripe: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin, Ireland.
• PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
• What is transmitted: payment data and details of the booking. We ourselves do not see complete card or account data.
• Legal basis: Art. 6(1)(b) GDPR (performance of the contract). For processing the payment, Stripe and PayPal are controllers in their own right and inform you in their own privacy notices.
• Transfers to third countries: transfers outside the EU may occur. According to their own statements, the providers secure this through recognised mechanisms.

6. After the booking: reporting obligation, invoice, retention

• Guest registration: reporting obligations apply to overnight stays (registration form or tourist tax accounting with the town of Bad Wildbad). For this we pass the necessary guest details (e.g. name, address, arrival and departure day) to the competent body. Legal basis: Art. 6(1)(c) GDPR.
• Accounting: under tax and commercial law we must keep invoices and booking records for ten years (Art. 6(1)(c) GDPR).
• Otherwise: we delete booking data as soon as we no longer need it and no retention obligation exists.

7. When you write to us or call us

If you contact us by email, phone or WhatsApp, we process your details (e.g. name, contact details, message) to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual enquiry) or (f) (legitimate interest in answering). We delete the data once the enquiry is dealt with and no retention obligation exists.

Contact form: if you use the form on the “Contact” page, we transmit your name, email address and message to our own web server, which creates an email to us from it. We do not store the entries on the website and do not pass them on to third parties. They then sit in our email inbox, which, like the website, is hosted by ALL-INKL (Neue Medien Münnich). Connection data arises there for technical reasons when it is accessed (see the section on hosting). Legal basis and deletion as above.

WhatsApp: the WhatsApp symbol in the footer is only a link. Only when you click it are you forwarded to WhatsApp. WhatsApp’s (Meta’s) privacy terms then apply. We use WhatsApp with a business account.

8. Embedded content and links

This explains what happens when you use content or links that do not come only from our server.

8.1 Videos and images

We deliver images and videos (e.g. the drone flight) from our own server. No data is transmitted to third parties in the process.

8.2 360-degree tour and postcard generator

The tour and the postcard generator run on our own domain and are delivered by our host. The tour starts as soon as you open the “Virtual tour” page; the postcard generator starts as soon as you open the “Digital postcard” page. No data is transmitted to any third party in the process; the information in section 3 applies.

8.3 Social networks

In the footer we link to our presences on Instagram, Facebook, LinkedIn and WhatsApp. These are plain links, not plug-ins. Data is only transmitted when you click a link. The privacy policy of the respective network then applies.

8.4 Map (Google Maps)

On the “The apartment” page, under “Getting here and map”, we show you our location on a Google Maps map. The map is loaded as soon as you open this section.

Your browser then connects to Google servers (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google receives at least your IP address, information about your browser and device and the information that you are visiting this page; Google may also set cookies and transfer data to the USA. What Google does with it is stated in Google’s privacy policy.

The legal basis is our legitimate interest in showing you the way to our apartment easily (Art. 6(1)(f) GDPR). If you do not want this, do not open the section and use the address in your own map app instead.

The “Plan route” button is a simple link. Only when you click it does Google Maps open in a new tab, and Google’s privacy policy applies.

9. Weather display

We do not read the weather on the home page from a third party in your browser. An automated process fetches the data from Open-Meteo and stores it on our site, and your browser reads it from there. No data from you is transmitted to Open-Meteo in the process.

10. Your rights

You have the right to:

– information about the data we hold about you (Art. 15 GDPR),

– rectification of incorrect data (Art. 16),

– erasure (Art. 17) and restriction of processing (Art. 18),

– data portability (Art. 20),

– objection to processing based on legitimate interest (Art. 21),

– withdrawal of consent with effect for the future (Art. 7(3)).

Complaint to the supervisory authority

Write to us at willkommen@ab-ins-gruene.net for any concern. You can also lodge a complaint with a supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg), Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

11. Security

The site is delivered encrypted (HTTPS).

12. Changes

We will adapt this statement if our site or the legal situation changes. The version published here at any time applies.