The controllers for the processing of personal data on this website are Sascha und Antje Pehl Grundstücksverwaltung GbR, Lüninghauser Str. 1b, 28865 Lilienthal (for the houses on Annelieseweg) and Heideweg GmbH, Lüninghauser Str. 1, 28865 Lilienthal (for the houses on Heideweg 13). Contact for both: verwaltung@pehlshaus.de, telephone +49 172 600 54 55.
For the operation of this website itself – that is, the server log files, the embedded booking system and this privacy policy – Heideweg GmbH is the controller. Once a booking is made, the company that owns the booked home becomes the controller. You may nevertheless exercise your rights against either company; an email to verwaltung@pehlshaus.de is always enough.
This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (processing on our behalf under Art. 28 GDPR). When you open a page, technically necessary data (IP address, date and time, page requested, browser type) are processed in server log files – the legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). The log files are evaluated solely to keep the site running securely, are not combined with other data, and are deleted automatically by our provider as soon as they are no longer needed for that purpose.
For availability, the calendar and bookings we embed the system of Smoobu GmbH, Wattstraße 11, 13355 Berlin, Germany. These components load as soon as you open a page that contains them – not only when you click something. Your IP address is transmitted to Smoobu in the process. Smoobu uses the network of Cloudflare, Inc., 101 Townsend St., San Francisco, USA, for delivery; your IP address is transmitted there as well. The legal basis is our legitimate interest in being able to show available dates immediately (Art. 6(1)(f) GDPR).
When you make a booking, we process the data requested in the booking form (name, address, email, telephone, travel dates and, where applicable, payment details) in order to perform the accommodation contract (Art. 6(1)(b) GDPR). Payment is made by invoice; no payment details such as card numbers are collected through this website. Should we offer further payment methods later, the data for those will be processed directly by the payment provider concerned, not by us.
The fonts used on this website are stored on our own server and loaded from there. No connection is made to Google or any other third party, and no data are transmitted to third parties.
If you contact us by email or telephone, we process the details you give us in order to deal with your enquiry (Art. 6(1)(b) and (f) GDPR).
Guests at Heideweg 13 can book their sauna slot through an appointment planner we provide via Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The link leads to a Google page; data are only transmitted there once you click it. Nothing from Google is loaded on our own website. The legal basis is the performance of the accommodation contract (Art. 6(1)(b) GDPR).
As an accommodation business we are required to collect registration data under the German Federal Registration Act (Art. 6(1)(c) GDPR). Booking and invoicing data are kept for the periods required by tax and commercial law (up to 10 years) and deleted afterwards.
You have the right to access, rectification, erasure, restriction of processing and data portability. Please write to verwaltung@pehlshaus.de. You may also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection of Lower Saxony.
You have the right to object at any time to the processing of your data where we base it on a legitimate interest (Art. 6(1)(f) GDPR). On this website that concerns the server log files and the embedded booking system. No particular form is required – an email to verwaltung@pehlshaus.de is enough. We will then stop processing your data unless we can demonstrate compelling legitimate grounds which override your interests, or the processing serves to establish, exercise or defend legal claims (Art. 21 GDPR).
This website sets no cookies of its own. The booking system stores one technically necessary session cookie so that your selection is kept between steps; no consent is required for this under § 25(2) TDDDG. We use no cookies for statistics or advertising and embed no analytics services.
This is a translation for your convenience. In case of doubt, the German version is the binding one.
