Privacy policy

Here you can find everything important about cookies, data, and more.

A short preface to all haters and warning lawyers: We do our best here and take data protection very, very seriously. We do not collect any personal data on our website, and we constantly update our privacy policy. Our partner Booking takes care of the payment processing and also the administration of personal data. Please, if anything bothers you... talk to us... before you send angry letters directly. Be cool ✌🏻

1) Introduction and contact details of the responsible person

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data are all data with which you can be personally identified.

1.2 The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Jan Krause, Best Stay In, Auf der Heide 18, 53567 Asbach, Germany, Tel.: +49 2683 9665464, Fax: +49 2683 9665465, E-Mail: [email protected]. The person responsible for processing personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.

2) Data collection when visiting our website

When using our website for purely informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

The visited website
Date and time of access
Amount of data sent in bytes
Source/reference from which you accessed the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

3) Hosting & Content-Delivery-Network

Cloudflare

We use a Content Delivery Network from the following provider: Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA

This service enables us to deliver large media files such as graphics, page content, or scripts more quickly through a network of regionally distributed servers. The processing is carried out to protect our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR. We have entered into a contract processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

For the transmission of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European data protection level.

4) Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., after closing your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

If personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the execution of the contract or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

We may work with advertising partners to help make our online offering more interesting for you. For this purpose, cookies from partner companies may also be stored on your hard drive when you visit our website (third-party cookies). If we cooperate with the aforementioned advertising partners, you will be individually and separately informed about the use of such cookies and the scope of the information collected in each case within the following paragraphs.

Please note that you can set your browser to inform you about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for specific cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:

Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/temporary-allow-cookies-and-website-data-in-microsoft-edge-597f04f2-c0ce-f08c-7c2b-541086362bd2
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: http://help.opera.com/Windows/10.20/de/cookies.html

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contacting us

When you contact us (e.g. via contact form or email), personal data is collected. The data collected when using a contact form can be seen on the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration.

The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after your request has been processed. This is the case when it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no legal retention obligations.

6) Online Marketing

6.1 Facebook Pixel for creating Custom Audiences with extended data matching (with cookie consent tool)
Within our online services, the so-called "Facebook Pixel" of the social network Facebook is used in the mode of extended data matching, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook").
Based on explicit consent, when a user clicks on an advertisement displayed on Facebook that we have placed, the URL of our linked page is added to the Facebook Pixel. This URL parameter is then written into the user's browser by a cookie, which our linked page sets itself. In addition, this cookie collects specific customer data, such as the email address, which we collect on our website linked to the Facebook ad during processes such as purchase completions, account registrations, or registrations (extended data matching). The cookie is then read by Facebook Pixel and allows the forwarding of data, including specific customer data, to Facebook.
With the help of the Facebook Pixel with extended data matching, Facebook can precisely determine the visitors of our online services as a target group for the display of ads (so-called "Facebook Ads"). Accordingly, we use the Facebook Pixel with extended data matching to display the Facebook Ads placed by us only to those Facebook users who have also shown an interest in our online services or who have certain characteristics (e.g., interests in certain topics or products determined by the websites visited), which we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook Pixel with extended data matching, we also want to ensure that our Facebook Ads correspond to the potential interest of users and do not appear annoying. In this way, we can further evaluate the effectiveness of Facebook advertising for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (so-called "Conversion"). Compared to the standard version of Facebook Pixel, the extended data matching function helps us better measure the effectiveness of our advertising campaigns by capturing more associated conversions.
All data transmitted to Facebook is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with the Facebook Data Usage Policy (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to serve ads on and off Facebook.
These processing operations are carried out exclusively with the granting of explicit consent in accordance with Art. 6 para. 1 lit. a GDPR.
Consent to the use of the Facebook Pixel may only be given by users who are older than 13 years of age. If you are younger, we ask you to ask your legal guardians for permission.
The information generated by Facebook is usually transferred to a Facebook server and stored there, and it may also be transferred to the servers of Meta Platforms Inc. in the USA. You can revoke your given consent at any time with effect for the future. To exercise your revocation, remove the checkmark next to the setting for the "Facebook Pixel" in the "Cookie Consent Tool" embedded on the website.

6.2 AWIN Performance Advertising Network

We participate in the affiliate program of the following provider: AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany.

In this context, we have placed links on our website that lead to offers on websites of the provider or third parties ("partner sites").

To measure the success of an affiliate link, evaluate orders generated via such a link, and the corresponding billing of commission payments, the provider uses cookies and/or comparable technologies, which are generally set on the partner sites and for which we are not responsible in terms of data protection. In this context, the provider regularly processes the IP address and, if applicable, further device information.

All of the above-described processing, in particular the reading or storing of information on the device you are using, only takes place if you have given your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your once given consent at any time with effect for the future by using the cookie consent management options on the partner sites.

6.3 Booking.com Partner Program

We participate in the affiliate program of the following provider: Booking.com B.V., Herengracht 597, 1017 CE Amsterdam, Netherlands.

In this context, we have placed links on our website that lead to offers on websites of the provider or third parties ("partner sites").

6.4 Check24 partner program

We participate in the affiliate program of the following provider: TARIF CHECK24 GmbH, Zollstraße 11b, 21465 Wentorf, Germany.

In this context, we have placed links on our website that lead to offers on websites of the provider or third parties ("partner sites").

To measure the success of an affiliate link, evaluate orders generated via such a link, and settle commission payments accordingly, the provider uses cookies and/or comparable technologies, which are generally set on the partner sites and for which we are not responsible in terms of data protection. In this context, the provider regularly processes the IP address and, if applicable, further device information.

All of the processing described above, in particular the reading or storing of information on the device you are using, only takes place if you have given your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by using the cookie consent management options on the partner sites.

6.5 CJ Affiliate Partner Network

We participate in the affiliate program of the following provider: CJ Affiliate (Conversant Europe Limited), 1st Floor, 40 Dukes Place, London, EC3A 7NH.

In this context, we have placed links on our website that lead to offers on websites of the provider or third parties ("partner sites").

To measure the success of an affiliate link, evaluate orders generated via such a link, and settle commission payments accordingly, the provider uses cookies and/or comparable technologies, which are generally set on the partner sites and for which we are not responsible in terms of data protection. In this process, the provider regularly processes the IP address and, if applicable, further device information.

In the case of data transmission to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

7) Web Analysis Services

7.1 Google Analytics 4
This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which allows the analysis of website usage.
When using Google Analytics 4, so-called "cookies" are used by default. Cookies are text files that are stored on your device and enable an analysis of your use of a website. The information collected by cookies about your use of the website (including the IP address transmitted by your device, shortened by the last digits, see below) is usually transmitted to a Google server and stored and processed there. In this process, information may also be transmitted to the servers of Google LLC, located in the USA, and further processed there.
When using Google Analytics 4, the IP address transmitted by your device when using the website is automatically collected and processed in an anonymized form, so that a direct personal reference of the collected information is excluded. This automatic anonymization is achieved by Google shortening the IP address transmitted by your device within member states of the European Union (EU) or other contracting states of the Agreement on the European Economic Area (EEA) by the last digits.
On our behalf, Google uses this and other information to evaluate your use of the website, to compile reports (reports) on your website activities or your usage behavior, and to provide us with other services related to your website usage and internet usage. The IP address transmitted by your device as part of Google Analytics 4 and shortened will not be merged with other Google data. The data collected during the use of Google Analytics 4 will be stored for 2 months and then deleted.
Google Analytics 4 also allows the creation of statistics with statements about age, gender, and interests of website users based on an evaluation of interest-based advertising and with the involvement of third-party information through a special function, the so-called "demographic characteristics". This makes it possible to determine and distinguish user groups of the website for the purpose of target group-optimized alignment of marketing measures. However, data collected via the "demographic characteristics" function cannot be assigned to a specific person and therefore not to you personally. This data collected through the "demographic characteristics" function will be stored for two months and then deleted.
All of the above-described processing, in particular the setting of Google Analytics cookies for storing and reading information on the device you use for accessing the website, only takes place if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. Without your consent, the use of Google Analytics 4 will not take place during your use of the website. You can revoke your once given consent at any time with effect for the future. To exercise your revocation, please deactivate this service via the "Cookie Consent Tool" provided on the website.
As an extension of Google Analytics 4, the Google Signals service can also be used on this website. With Google Signals, we can have Google create cross-device reports (so-called "Cross Device Tracking"). If you have activated "personalized ads" in your settings in your Google Account and linked your internet-enabled devices to your Google Account, Google can analyze user behavior across devices when you give your consent to the use of Google Analytics 4 in accordance with Art. 6 para. 1 lit. a GDPR and create database models based on this. The data takes into account the logins and device types of all website users who were logged into a Google Account and performed a conversion. The data shows, among other things, on which device you first clicked on an ad and on which device the related conversion took place. In the case of using Google Signals, we do not receive any personal data from Google, but only statistics created based on Google Signals. You have the option to deactivate the "personalized ads" function in your Google Account settings and thus stop the cross-device analysis in connection with Google Signals. To do this, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de
Further information on Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de
As an extension of Google Analytics, the "UserIDs" function can also be used on this website. By assigning individual UserIDs, we can have Google create cross-device reports (so-called "Cross Device Tracking"). This means that your usage behavior can also be analyzed across devices when you give your corresponding consent to the use of Google Analytics 4 in accordance with Art. 6 para. 1 lit. a GDPR, if you have set up a personal account on this website through your registration and are logged in with your related login data on various devices in your personal account. The data collected in this way shows, among other things, on which device you first clicked on an ad and on which device the related conversion took place.
We have concluded a so-called order processing contract with Google for our use of Google Analytics 4, which obliges Google to protect the data of our website users and not to pass it on to third parties.
To ensure compliance with the European data protection level also in the case of possible transmission of data from the EU or the EEA to the USA and possible further processing there, Google relies on the so-called standard contractual clauses of the European Commission, which we have contractually agreed with Google.
Further legal information on Google Analytics 4, including a copy of the mentioned standard contractual clauses, can be found at https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites

7.2 - Mouseflow (Mouseflow ApS)
This website uses Mouseflow, a web analysis tool from Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark, to randomly record individual visits (only with a pseudonymized IP address). This creates a log of mouse movements and clicks with the intention of randomly playing back individual website visits and deriving potential improvements for the website from them. The processed information is not passed on to third parties.
All of the above-described processing, in particular the setting of cookies for reading information on the device used, is only carried out if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, Mouseflow will not be used during your visit to the site.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website.
To permanently object to the collection of data and the creation of pseudonymized user profiles and the setting of cookies for the future, you can alternatively download and install an opt-out cookie from the following website: www.mouseflow.de/opt-out/
You can view further information and Mouseflow's privacy policy here: https://mouseflow.com/privacy/
- This website uses the "Google Tag Manager", a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google"). The Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analysis services, and calibrating, controlling, and linking them via a unified user interface.
The Google Tag Manager itself does not store any information on user devices or read it. The service also does not perform any independent data analysis.
However, when you visit the site, your IP address is transmitted to Google and may be stored there. A transfer to servers of Google LLC in the USA is also possible.
This processing is only carried out if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, the use of Google Tag Manager will not take place during your visit to the site.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website. We have concluded a contract for order processing with Google, in which Google is obliged to protect the data of our site visitors and not to pass it on to third parties.
For the transfer of data from the EU to the USA, Google relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
Further data protection information on the Google Tag Manager can be found here: https://support.google.com/tagmanager/answer/9323295?hl=de
In this privacy policy, you will find separate information in the relevant sections on data protection-related services and applications that have been combined in the Google Tag Manager. 8) Tools and Miscellaneous Cookie Consent Tool This website uses a so-called "Cookie Consent Tool" to obtain effective user consent for cookies that require consent and cookie-based applications. The "Cookie Consent Tool" is displayed to users when they access the site in the form of an interactive user interface, where they can grant consent for certain cookies and/or cookie-based applications by setting a checkmark. By using the tool, all cookies/services that require consent are only loaded if the respective user grants the corresponding consent by setting a checkmark. This ensures that such cookies are only set on the user's device if consent has been given. The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed. If, in individual cases, the storage, allocation, or logging of cookie settings does lead to the processing of personal data (such as the IP address), this is done in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in a legally compliant, user-specific, and user-friendly consent management for cookies and thus in a legally compliant design of our website. Another legal basis for the processing is also Art. 6 para. 1 lit. c GDPR. As data controllers, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent. We have concluded a contract for order processing with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.
For more information about the operator and the setting options of the cookie consent tool, please refer directly to the corresponding user interface on our website.

9) Rights of the data subject

9.1 The applicable data protection law grants you the following data subject rights (information and intervention rights) with regard to the processing of your personal data by the controller, with reference to the respective legal basis for the exercise requirements:

Right of access according to Art. 15 GDPR;
Right to rectification according to Art. 16 GDPR;
Right to erasure in accordance with Art. 17 GDPR;
Right to restriction of processing in accordance with Art. 18 GDPR;
Right to be informed in accordance with Art. 19 GDPR;
Right to data portability in accordance with Art. 20 GDPR;
Right to revoke granted consents in accordance with Art. 7 para. 3 GDPR;
Right to lodge a complaint in accordance with Art. 77 GDPR.

9.2 RIGHT TO OBJECT

If we process your personal data within the framework of a balancing of interests due to our predominantly legitimate interest, you have the right at any time to object to this processing with effect for the future for reasons arising from your particular situation. If you exercise your right to object, we will stop processing the data concerned. However, further processing is reserved if we can prove compelling reasons for the processing that outweigh your interests, fundamental rights and freedoms, or if the processing serves the assertion, exercise or defense of legal claims. If your personal data is processed by us for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. You can exercise the objection as described above. If you exercise your right to object, we will stop processing the data concerned for direct marketing purposes. 10) Duration of storage of personal data The duration of storage of personal data is determined by the respective legal basis, the processing purpose and - if relevant - additionally by the respective legal retention period (e.g. commercial and tax retention periods).

When processing personal data based on explicit consent in accordance with Art. 6 para. 1 lit. a GDPR, this data is stored until the data subject revokes their consent.

If there are legal retention periods for data that is processed within the framework of contractual or quasi-contractual obligations based on Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods have expired, provided that it is no longer necessary for the fulfillment or initiation of the contract and/or there is no legitimate interest on our part in continuing to store it.

When processing personal data based on Art. 6 para. 1 lit. f GDPR, this data is stored until the data subject exercises their right to object according to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing serves the purpose of asserting, exercising, or defending legal claims.

When processing personal data for the purpose of direct marketing based on Art. 6 para. 1 lit. f GDPR, this data is stored until the data subject exercises their right to object according to Art. 21 para. 2 GDPR.

Unless otherwise stated in the other information in this declaration about specific processing situations, stored personal data will be deleted if it is no longer necessary for the purposes for which it was collected or otherwise processed.