Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Ferienwohnungen Martina & Stefan Rückbrod GbR
Im Bohnacker 5
79410 Badenweiler

Email: ferienwohnungen@rueckbrod.de
Phone: +49 176 47603528 / +49 174 9490903

2. General Notes & Mandatory Information

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this Privacy Policy.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as booking inquiries you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser's address line changes from 'http://' to 'https://' and by the lock icon in your browser line.

3. Data Collection on This Website

Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser transmits to us automatically. These are:

• Browser type and version
• Operating system used
• Referrer URL (the previously visited page)
• Hostname of the accessing computer
• Time of the server request
• IP address

This data will not be merged with other data sources. This data is collected on the basis of Art. 6 Abs. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of their website – the server log files must be recorded for this purpose.

4. Cookies & Consent

Our website uses cookies. These are small text files that your browser stores on your device. Some cookies are technically necessary to provide the website's functions (such as the checkout process or language selection).

Other cookies are used for analysis and tracking purposes (e.g., Google Analytics). These are only stored on your device after your explicit, active consent via our cookie consent banner (Art. 6 Abs. 1 lit. a GDPR). You can withdraw your consent there at any time for the future.

To fulfill our legal obligation to provide proof of consent (Art. 7 para. 1 GDPR), we log your decision in our own system database. When you click on the banner, a random, anonymous identifier (UUID) is generated and stored together with the selected status and a timestamp. No personal data (such as your IP address) is recorded during this process. The ID is stored in the 'my_consent' cookie in your browser for a duration of 365 days for recognition purposes. The legal basis for this logging is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR to be able to prove the legal compliance of our website.

5. Google Analytics 4 (GA4)

This website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited ('Google'), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. We use Google Analytics 4 with automatic IP anonymization. Your IP address will be shortened by Google within member states of the European Union before transmission.

The storage of Google Analytics cookies and the use of this analysis tool are based exclusively on your consent (Art. 6 Abs. 1 lit. a GDPR).

6. Google Maps

This website uses the Google Maps map service via a so-called iframe. The provider is Google Ireland Limited ('Google'), Gordon House, Barrow Street, Dublin 4, Ireland.

To ensure data protection on our website, Google Maps is deactivated by default. A connection to Google's servers is only established if you actively consent to the activation of the map (either via our cookie consent banner or by clicking directly on the map placeholder). Your IP address and technical connection data will be transmitted to Google and usually stored on servers in the USA. We have no influence on this data transmission.

The use of Google Maps is in the interest of making our online offers appealing and making the holiday apartments indicated on the website easy to find. Processing is based exclusively on your explicit consent pursuant to Art. 6 Abs. 1 lit. a GDPR. You can withdraw your consent at any time via the cookie settings in the footer for the future.

7. Transfer of Data to Service Providers

In order to ensure smooth booking processing and management of your stay, we work together with selected service providers. Any transfer or technical processing of your data occurs strictly within the legally permitted framework:

• In-house Booking and Calendar Management: The data you enter in the checkout form (name, email address, phone number, address, and travel dates) is stored directly in our secure, in-house relational PostgreSQL database. This data is used exclusively for processing your booking, calendar synchronization, and the automated generation of booking documents and service-related notifications. Processing is carried out on the basis of Art. 6 (1) (b) GDPR for the fulfillment of pre-contractual measures and the accommodation contract. Transmission of this form data to external booking platforms does not take place.
• Email Delivery (Resend): For the automated delivery of booking confirmations, payment information, and service-related emails, we use the service Resend (Resend Inc., 2261 Market St #5066, San Francisco, CA 94114, USA). The processing and storage of email addresses and names takes place primarily on servers located within the European Union utilized by Resend (Region: Europe/Ireland). Processing is based on Art. 6 (1) (b) GDPR for contract fulfillment. For any administrative access or remaining data transfers to the USA, the transfer is legally secure under data protection regulations, as Resend is certified under the EU-US Data Privacy Framework and we have concluded a data processing contract (Data Processing Addendum) including the EU Standard Contractual Clauses with the provider.
• Tourist Tax & Statutory Registration Form: To fulfill our fiscal and local municipal obligations (issuance of the official guest registration form and billing of the tourist tax), we forward the legally required guest data to the Municipality of Badenweiler. The legal basis for this is Art. 6 (1) (c) GDPR in conjunction with the corresponding local tax bylaws and registration laws of Baden-Württemberg.
• Web Hosting & Server Infrastructure (Strato): Data transmitted via our forms as well as technical connection data (e.g., IP address, date and time of access) technically pass through the servers of our hosting service provider Strato (Strato AG, Otto-Ostrowski-Straße 43, 10249 Berlin). Processing is based on Art. 6 (1) (b) GDPR for contract fulfillment and on Art. 6 (1) (f) GDPR to guarantee IT security and stable server operation (operation of Caddy Proxy & Docker). Here, too, a data processing contract ensures strict data protection compliance.

8. Data Collection when Using the Guest Wi-Fi

To use the guest Wi-Fi access provided by us on site, prior registration and acceptance of the terms of use via our internal activation page are required.

During this process, we collect and store the following data in a separate database table (<code/>wlan_logs<code/>):

• First and last name of the guest
• Date and exact time of activation (timestamp)

Purpose and Legal Basis: The collection is carried out exclusively for the purpose of ensuring IT and network security and protecting the website operator against liability claims in the event of any legal violations (e.g., illegal filesharing) committed via the connection provided. The legal basis for this is our legitimate interest pursuant to Art. 6 Abs. 1 lit. f GDPR.

Storage Period: The log data will be automatically and permanently deleted from our system after the expiration of the statutory limitation periods for civil law claims, unless statutory retention obligations prevent this.

9. Your Statutory Rights: Access, Erasure, Restriction

Within the framework of the applicable legal provisions, you have the right at any time to free access to your stored personal data, its origin and recipient, and the purpose of data processing (Art. 15 GDPR).

You also have a right to rectification (Art. 16 GDPR), blocking, or erasure of this data (Art. 17 GDPR) as well as the right to restrict processing. To do this, simply contact us using the contact details provided in the Legal Notice.

10. Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of violations of the GDPR, data subjects have a right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged violation.

The right to lodge a complaint is without prejudice to any other administrative or judicial remedies. The supervisory authority responsible for us is the <em/>Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg<em/> (Lautenschlagerstraße 20, 70173 Stuttgart).