Privacy Policy

Privacy information for ferienhaus-eiderente.de pursuant to the GDPR.

1. Controller

Waltraud Müller Talblick 8 51674 Wiehl Germany Phone: +49 1567 8618232 Email: info@ferienhaus-eiderente.de

2. General information on data processing

We collect and use personal data only insofar as this is necessary to provide this website and our services. Processing takes place on the basis of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

We point out that data transmission over the internet (e.g. when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible.

3. Hosting

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. When you visit our website, your data is processed on IONOS’s servers. This may in particular include the data mentioned in section 4.

Legal basis: Art. 6 (1) (f) GDPR — our legitimate interest in reliably providing the website.

For more details, please see the IONOS privacy policy: https://www.ionos.de/terms-gtc/datenschutzerklaerung/

4. Server log files

The provider of the pages automatically collects and stores information in server log files, which your browser transmits with every page view:

  • IP address of the requesting computer
  • date and time of access
  • name and URL of the file retrieved
  • referrer URL (previously visited page)
  • browser type and version as well as operating system

This data is not merged with other data sources. It is stored for 7 days and serves to ensure smooth operation as well as to detect and ward off attacks.

Legal basis: Art. 6 (1) (f) GDPR — our legitimate interest in secure and stable operation.

4a. Web analytics (Umami)

For statistical analysis of website usage we use Umami — a self-hosted analytics tool (servers in Germany, subdomain stats.ferienhaus-eiderente.de). Umami is cookie-free and collects no personal data: only anonymised, aggregated metrics are recorded (e.g. pages viewed, referrer, approximate region at country level, device type). No merging with other data sources and no identification of individual visitors takes place. No data is shared with third parties.

Legal basis: Art. 6 (1) (f) GDPR — legitimate interest in privacy-friendly, anonymous reach measurement. As no cookies are set and no personal data is processed, no consent is required.

5. SSL / TLS encryption

For security reasons, this site uses SSL / TLS encryption. You can recognise an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the padlock symbol in the browser bar.

6. Cookies

This website sets no cookies.

7. Enquiries by email or telephone

If you contact us by email or telephone, your enquiry including all the personal data arising from it (name, enquiry, telephone number, email address) is stored and processed by us for the purpose of handling it.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected and no statutory retention obligations preclude deletion.

Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures or performance of a contract) as well as Art. 6 (1) (f) GDPR (legitimate interest in answering your enquiry).

8. Disclosure to third parties

Your personal data is transferred to third parties only if:

  • you have expressly consented (Art. 6 (1) (a) GDPR),
  • the disclosure is necessary for the performance of a contract (Art. 6 (1) (b) GDPR), e.g. to local service providers (house service),
  • there is a legal obligation (Art. 6 (1) (c) GDPR).

Service providers who process data on our behalf are contractually obliged to maintain confidentiality.

9. Contact form

If you send us an enquiry via the contact form, we process the data you provide (name, email address, telephone number if applicable, desired travel period, number of guests, optional linen-package details and your message) solely to handle your enquiry and for any follow-up questions.

Legal basis: Art. 6 (1) (b) GDPR (initiation of a contractual relationship) or (f) (legitimate interest in answering enquiries).

Processing & dispatch: The enquiry is transmitted by email to our mailbox kontakt@ferienhaus-eiderente.de via a service we operate ourselves. For sending the email we use an email service provider as a processor (currently our hosting/mail provider; in future a specialised dispatch service). A data processing agreement (Art. 28 GDPR) is in place with this provider.

Storage period: The form service does not store your data permanently; the enquiry remains in our email mailbox until it is no longer required for processing or statutory retention periods expire.

No trackers: The form sets no cookies and embeds no external scripts, fonts or tracking services. Transmission takes place solely to our own subdomain api.ferienhaus-eiderente.de.

You can object to the processing at any time and request the deletion of your data (see the section on your rights).

9a. Online booking

When you submit a reservation via our booking page, we process the data you provide (name, address, email address, phone number, travel period, number of guests, optional linen package, price and payment data, and the time of your consent) to handle your reservation and the rental contract.

Legal basis: Art. 6(1)(b) GDPR (initiation and performance of a contract).

Processing: The booking data is stored by our own booking application (buchung.ferienhaus-eiderente.de) on a server in Germany operated by us. Unconfirmed reservations expire automatically after 48 hours.

Retention: We store booking and billing data for the duration of statutory retention obligations under German tax and commercial law (up to 10 years, Sections 147 AO, 257 HGB) and delete it automatically afterwards.

9b. Occupancy calendar (Google Calendar)

To manage the occupancy of the house, we transfer the booking period, the booking number and the guest’s surname as a calendar entry to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The calendar is private; the entry contains no further personal data.

Legal basis: Art. 6(1)(b) and (f) GDPR (performance of the contract; legitimate interest in reliable occupancy planning). The transfer to the USA is based on the EU-US Data Privacy Framework, under which Google LLC is certified.

9c. Booking emails

As part of the booking we send transactional emails (receipt confirmation, booking confirmation with contract, payment reminders, cancellation confirmation if applicable) via our email provider.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

10. Your rights

You have the following rights vis-à-vis the controller:

  • Access to your stored data (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure of your data (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing (Art. 21 GDPR)

In addition, you have the right to lodge a complaint about the processing of your data with a data protection supervisory authority (Art. 77 GDPR). The supervisory authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen Postfach 20 04 44, 40102 Düsseldorf https://www.ldi.nrw.de

Insofar as the processing of your data is based on consent, you can withdraw it at any time with effect for the future. The lawfulness of the processing carried out up to the withdrawal remains unaffected.

Last updated: June 2026