Privacy
Privacy policy
This website works without tracking and without cookies. Whatever is nevertheless processed is set out here in full.
We process as little data as possible. This website does not embed any analytics, advertising or social media services, does not load fonts from third-party servers and does not set tracking cookies. The only external service is a map, which is loaded only after an explicit click.
1. Controller
The controllers within the meaning of the DSGVO (GDPR) are Sandra and Jürgen von Klitzing; for contact details see the legal notice.
2. Accessing the website (server log files)
Each time a page is accessed, our hosting provider logs technically necessary data: IP address, date and time, the address accessed, the volume of data transferred, browser type and operating system.
| Purpose | Delivery of the page, operational security, defence against attacks |
|---|---|
| Legal basis | Art. 6 Abs. 1 lit. f DSGVO, legitimate interest in trouble-free operation |
| Storage period | The logs are deleted automatically by our hosting provider after a short time. These data are not combined with other data sources. |
| Recipients | STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, as processor pursuant to Art. 28 DSGVO |
3. Enquiry form
Via the form on the Direct enquiry page we collect your name and e-mail address and, on a voluntary basis, your telephone number, travel dates, the number of guests and your message.
| Purpose | Handling your enquiry and initiating a rental agreement |
|---|---|
| Legal basis | Art. 6 Abs. 1 lit. b DSGVO, pre-contractual measures |
| Transmission | The details are sent by e-mail to our mailbox at STRATO. They are not passed on to third parties. |
| Storage period | In addition to the e-mail, every enquiry is saved on the web space so that it is not lost if mail delivery fails. This backup cannot be accessed from outside and is deleted automatically after 90 days. If a booking is concluded, the statutory retention periods apply to the contract documents. |
Providing your name and e-mail address is necessary in order to answer your enquiry. Without these details we cannot reach you.
Spam protection
The form contains a field that is invisible to humans as well as a signed timestamp. Both serve solely to detect automated submissions. No additional personal data are collected in the process and no third-party services are embedded.
Provisional entry in the availability calendar
If your enquiry contains specific dates, these are temporarily marked in the calendar as requested, so that several interested parties do not enquire about the same period in parallel. Only the two dates and a non-reversible check value derived from your e-mail address are stored for this purpose. The entry is deleted automatically after 24 hours. Your name never appears publicly at any point.
4. Google Maps
On the Location & surroundings page you can load a Google Maps map. The map is not loaded automatically; it is loaded only when you explicitly click on it. Only then is a connection to Google established.
| Purpose | Display of the location |
|---|---|
| Legal basis | Art. 6 Abs. 1 lit. a DSGVO, your consent |
| Recipients | Google Ireland Limited and Google LLC, United States |
| Transfer to a third country | The transfer to the USA is based on the adequacy decision of the EU Commission regarding the EU-US Data Privacy Framework, which Google has joined. |
| Data transmitted | In particular your IP address and information about your device |
You can withdraw your consent at any time via the item in the page footer. The map is then blocked again.
5. Occupancy data
The availability calendar on the enquiry page shows which days the villa is free. The data comes from the calendar exports of the booking portals on which the villa is listed, in particular Booking.com.
Your browser never connects to those portals. Our server retrieves the calendars in the background and renders the result itself. No data about you is transmitted to Booking.com or any other portal, and no consent is therefore required.
All that is displayed is whether a day is free or taken. Names or any other details about other guests are neither processed nor shown.
6. Local storage in the browser
We do not set any cookies. In your browser's local storage we record only that you have seen the privacy notice, and whether you have consented to the map being loaded. This information does not leave your device. Further details in the cookie policy.
7. Your rights
You have the right of access (Art. 15), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing based on a legitimate interest (Art. 21 DSGVO). You may withdraw any consent given at any time with effect for the future.
To do so, contact us informally using the contact details given in the legal notice.
Right to lodge a complaint
You may lodge a complaint with a data protection supervisory authority at any time. As our seat is in Hesse, the authority responsible for this website is:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 31 63, 65021 Wiesbaden
datenschutz.hessen.de
Insofar as processing concerns the operation of the holiday rental property in Spain, the Agencia Española de Protección de Datos (AEPD) may also be responsible. You may also contact the supervisory authority of your habitual residence.
8. No automated decision-making
There is neither automated decision-making nor profiling within the meaning of Art. 22 DSGVO.
9. Security of transmission
This website is delivered exclusively in encrypted form via HTTPS. You can recognise this by the padlock symbol in your browser's address bar.
Version of this privacy policy: August 2026.