Haus am Königsberg holiday apartments Enquire now

Privacy policy

This is a translation for your convenience. Only the German version is legally binding.

1. Controller

The controller responsible for data processing on this website is:

Margret Schmitz
Ferienwohnungen Haus am Königsberg
Am Königsberg 17
56859 Bullay
Germany
Phone: +49 6542 2908
Email: info@haus-am-koenigsberg.de

We have not appointed a data protection officer; as a small business we are not required to do so.

2. In brief

  • This website only sets cookies with your consent (visitor statistics with Matomo) – apart from one cookie that stores your choice in the cookie banner.
  • We do not embed any third-party services when you load a page: fonts, images and the map are hosted on our own server. Videos and 360° tours are only loaded if you explicitly ask for them with a click.
  • We only use data you send us through a form to answer your enquiry and to arrange your stay.

3. Hosting and server logs

This website runs on a server operated by netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany. We have a data processing agreement with netcup under Art. 28 GDPR.

With every visit, the server automatically stores information transmitted by your browser: IP address, date and time, the page requested, the amount of data transferred, the status code, the previously visited page (referrer), and your browser and operating system. We need this data to deliver the website securely and without errors and to detect attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure operation of the website. The logs are deleted after 14 days.

The connection to this website is encrypted using TLS (shown by “https://” in the address bar).

4. Domain management

Our domain haus-am-koenigsberg.de is managed by Schlund Technologies GmbH, Regensburg. It operates the name servers that tell your browser the address of our server when you visit the website. This technically requires processing the IP addresses of the requesting name servers, usually those of your internet provider. The legal basis is Art. 6(1)(f) GDPR.

5. Email

Our email mailboxes and the sending of emails from this website's forms are handled by Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4–6, 32339 Espelkamp. Mittwald processes these emails on our behalf on servers in Germany (data processing agreement under Art. 28 GDPR). If you write to us by email, we process your details to answer your message (Art. 6(1)(b) GDPR, or Art. 6(1)(f) GDPR for general enquiries).

6. Backups

To back up our data we store copies of the web server at Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, in data centres in Germany. We have a data processing agreement with Hetzner. These backups are used solely for recovery in an emergency (Art. 6(1)(f) GDPR) and are overwritten after 30 days.

7. Enquiry, contact and voucher forms

The forms on this website let you send a booking enquiry, write us a message, or order a voucher. In doing so we process the details you enter:

  • Booking enquiry: apartment, arrival, departure, number of adults and children, name, email address, and optionally phone number, voucher or discount code, and message,
  • Contact form: name, email address, subject and message,
  • Voucher order: name, email address, postal address and voucher value.

The form also transmits the language of the website so we can reply to you in your language. For a booking enquiry, the website checks our availability calendar to see whether the apartment is free for the period you want.

Your details are sent to us by email; you receive a confirmation at the address you provided. We use the data to answer your enquiry, to conclude a rental agreement where applicable, and to arrange your stay. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures and contract), or Art. 6(1)(f) GDPR for general messages.

If no booking results from an enquiry, we delete it after six months. We keep data relating to bookings and vouchers for as long as commercial and tax law require (up to ten years, § 147 of the German Fiscal Code (AO), § 257 of the German Commercial Code (HGB)).

8. Bookings and availability management

We manage bookings and the availability of our apartments using the booking software Vayoro (vayoro.de), which runs on servers of Mittwald CM Service GmbH & Co. KG in Germany. When you book with us, we store your name, contact details, travel period and number of guests there, to process your booking, avoid double bookings, and keep availability in sync with booking portals (Art. 6(1)(b) GDPR). Only the booked periods are sent to the booking portals, never any data about you as a person. The website itself only retrieves availability and prices from Vayoro.

As an accommodation provider we are legally required to keep a guest registration record (§§ 29, 30 of the German Federal Registration Act); it is destroyed one year after your departure (Art. 6(1)(c) GDPR).

9. Newsletter

If you give explicit consent when making an enquiry or booking, we occasionally send you news and offers by email. We use the service Brevo (Sendinblue GmbH, Berlin) to send these emails. Brevo stores your email address and name on servers in the EU and processes them on our behalf (Art. 28 GDPR).

Sign-up uses the double opt-in procedure: you receive an email in which you confirm your sign-up. We store the time and IP address of that confirmation as evidence. Brevo records whether a newsletter was opened and which links were clicked, so we can improve our newsletters.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time – via the unsubscribe link in every newsletter or by email to us. After you unsubscribe we delete your address; to prove past consent we keep it on a suppression list for no more than three years (Art. 6(1)(f) GDPR).

10. Visitor statistics with Matomo (only with your consent)

If you agree in the cookie banner, we use the software Matomo to create visitor statistics, so we can understand how our website is used and improve it. Matomo runs at stat.haus-am-koenigsberg.de on a server of Mittwald CM Service GmbH & Co. KG in Germany (data processing agreement under Art. 28 GDPR); the data is not passed on to third parties. Your IP address is shortened by two bytes before it is stored, so we cannot identify you from it. We store the pages visited, date and time, the previously visited page, your browser, operating system, screen resolution and approximate region.

Matomo sets the following cookies for this: _pk_id (random identifier to recognise you, 13 months), _pk_ses (links the pages viewed during one visit, 30 minutes), and _pk_ref (the website that referred you to us, 6 months). If your browser sends a “Do Not Track” signal, Matomo does not record your visit even with consent.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG, the German Telecommunications-Digital-Services-Data-Protection Act). Without your consent, Matomo is not loaded. You can withdraw your consent at any time via the cookie icon at the bottom left of every page; the Matomo cookies are then deleted. The raw data is deleted after six months.

11. Cookies and consent

Without your consent, this website sets only a single cookie: klaro stores your choice in the cookie banner (for example, “declined”), so we do not ask again on every page you visit. It contains no personal data and is deleted after one year. The legal basis is § 25(2) no. 2 TDDDG (strictly necessary) and Art. 6(1)(c) GDPR (proof of consent). The software for the banner runs on our server and does not transmit data to third parties.

Any further cookies – currently only those from Matomo (section 10) – are only set after your consent.

12. Videos and 360° tours (two-click solution)

On some pages you can watch a video or a 360° tour. This content is only loaded once you click “Load content”; before that, no data is transmitted to the provider. By clicking, you consent to your browser connecting to the respective provider, which in particular transmits your IP address (Art. 6(1)(a) GDPR, § 25(1) TDDDG). This consent only applies to that one view.

  • 360° tours: provided by PiccoMedia, Föhren, at 360.piccomedia.de.
  • Video: YouTube, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We embed YouTube in its privacy-enhanced mode (youtube-nocookie.com). Google may also transfer data to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework. More information: policies.google.com/privacy

13. Map, route planning and social networks

The map on the “Getting here” page is an image hosted on our own server (map data © OpenStreetMap contributors); loading the page does not connect to any mapping service. Only when you click “Plan your route” or “Open larger map” do you reach Google Maps or OpenStreetMap; their own privacy policies then apply.

We only link to Facebook with a plain link. No Facebook functions are embedded; data is only transmitted once you click the link.

14. Fonts

All fonts are hosted on our own server. No connection is made to Google Fonts or any other font provider.

15. Your rights

You have the right to:

  • access to the data we hold about you (Art. 15 GDPR),
  • rectification of inaccurate data (Art. 16 GDPR),
  • erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR),
  • withdraw consent with effect for the future (Art. 7(3) GDPR).

Right to object (Art. 21 GDPR): Where we process your data on the basis of a legitimate interest (Art. 6(1)(f) GDPR), you can object at any time for reasons arising from your particular situation.

An informal message to the contact details above is enough. You can also complain to a data protection supervisory authority. The authority responsible for us is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz, Hintere Bleiche 34, 55116 Mainz, www.datenschutz.rlp.de.

16. Obligation to provide data

For a booking enquiry we need the details marked as required fields; without them we cannot process your enquiry. We do not carry out automated decision-making or profiling.

17. Changes

We update this privacy policy whenever our website or the legal situation changes. Last updated: September 2026.