Privacy policy
This is a translation for convenience. The German Datenschutzerklärung is the legally binding version.
1. At a glance
This website presents our holiday apartments. It has no booking system, no contact form and no customer accounts. We use no tracking or advertising cookies and embed no social media plugins, no video services and no fonts from third-party servers. A Google Maps map is only loaded if you explicitly allow it (section 6). Personal data is only processed during your visit to the extent technically necessary to deliver the pages.
2. Controller
Controller within the meaning of the General Data Protection Regulation (GDPR):
Igor Danshov
Obertorstraße 6
97737 Gemünden am Main, Germany
Phone: Please enable JavaScript
Email: Please enable JavaScript
No data protection officer has been appointed, as there is no legal obligation to do so.
3. Hosting and server log data
This website is delivered via Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit the site, Cloudflare processes technically necessary data:
- IP address of the requesting device
- date and time of the request
- requested address (URL) and amount of data transferred
- referrer, meaning the previously visited page, if your browser sends it
- browser type, operating system and language setting
The purpose is to deliver the site and to keep it secure and stable, for example by fending off attacks. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the website securely and quickly.
A data processing agreement under Art. 28 GDPR is in place with Cloudflare. Cloudflare is certified under the EU-U.S. Data Privacy Framework, so transfers to the USA are covered by the European Commission’s adequacy decision (Art. 45 GDPR). Cloudflare only stores log data for as long as required for these purposes. More information: Cloudflare privacy policy.
4. Cookies and browser storage
On your first visit a notice appears in which you decide which categories of cookies and similar storage this site may use. You can change or withdraw your choice at any time via the “Cookie settings” link at the bottom of every page.
The following storage is in use:
| Name | Provider | Purpose | Type and duration |
|---|---|---|---|
| ap_consent | this website | stores your choice in the cookie notice | localStorage, 12 months |
| NID, AEC and others | set by Google Maps, only after your consent or your click on “Load map” | cookies, up to 6 months (according to Google) | |
| __cf_bm | Cloudflare | distinguishes humans from automated traffic, only when this protection is active | cookie, 30 minutes |
The legal basis for “ap_consent” and “__cf_bm” is § 25(2) no. 2 TDDDG, as they are strictly necessary, together with Art. 6(1)(c) and (f) GDPR (proof of your consent decision, security).
Google Maps is included in the “External media” category (section 6). The Preferences, Statistics and Marketing categories are provided in the notice but are not in use at present. Should we use services there in future, this will only happen with your consent under § 25(1) TDDDG and Art. 6(1)(a) GDPR, and this policy will be updated beforehand.
5. Fonts
The fonts Cormorant Garamond and Jost are stored on our own web space. No connection to Google or other font providers is made when the page loads.
6. Google Maps
On the home page you can display a Google Maps map. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The map is only loaded once you click “Load map” or allow the “External media” category in the cookie notice. Until then no connection to Google is made.
Once the map has loaded, Google receives among other things your IP address, the page visited and information about your browser and device. Google may set cookies and process the data on servers in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework; transfers to the USA are covered by the European Commission’s adequacy decision (Art. 45 GDPR).
The legal basis is your consent under § 25(1) TDDDG and Art. 6(1)(a) GDPR. You can withdraw it at any time via “Cookie settings” at the bottom of the page. We are not responsible for Google’s processing; details are in Google’s privacy policy.
The “Plan your route” link is a plain link and only opens Google Maps when you click it. The same applies to the links to the Gala restaurant website.
7. Contact by phone, email or enquiry form
If you call or write to us, we process your details (such as name, phone number, email address, travel dates and your request) to answer your enquiry. For bookings the legal basis is Art. 6(1)(b) GDPR, otherwise Art. 6(1)(f) GDPR. We delete the data once the enquiry has been dealt with, unless statutory retention obligations apply.
The enquiry form on the home page does not transmit any data to us or to third parties and stores nothing. It only assembles your entries into an email in your browser and opens your email program. We only receive your enquiry once you send that email yourself; the paragraph above then applies. The email is sent via your own email provider.
8. Booking via Booking.com
The “Booking.com” buttons are plain links. Booking.com’s website only opens when you click them, and its privacy policy then applies. The provider is Booking.com B.V., Oosterdokskade 163, 1011 DL Amsterdam, Netherlands.
If you book via Booking.com, Booking.com passes on the data we need to carry out your stay, such as name, contact details, travel dates and number of guests. The legal basis is Art. 6(1)(b) GDPR. We keep invoices and booking records for as long as commercial and tax law requires (Art. 6(1)(c) GDPR).
9. Encryption
The site is only delivered over an encrypted connection (HTTPS), recognisable by the padlock icon and “https://” in the address bar.
10. Your rights
You have the right at any time to
- access the data stored about you (Art. 15 GDPR)
- rectification of incorrect data (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
- withdraw consent with effect for the future (Art. 7(3) GDPR)
An informal call or email to the contact details above is sufficient.
You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.
11. No automated decisions
We do not make decisions based solely on automated processing and do not create profiles.
As of October 2026