Privacy policy

1. Controller

The controller for data processing in connection with this website and with bookings of the accommodation is:

GG Breuer & Fischenich (Grundstücksgemeinschaft)
represented by Ralph Breuer and Nicole Fischenich
Rennbahnstr. 24, 50737 Köln, Deutschland
Email: hallo [at] relax.casa
Mobile / WhatsApp: +49 176 288 40 299

A data protection officer has not been appointed, as the requirements of Art. 37 GDPR / § 38 BDSG are not met.

2. General information, legal bases and your rights

We process personal data only where necessary to provide a functioning website and to initiate, carry out and handle a booking. The main legal bases are:

• Art. 6(1)(b) GDPR – contract or pre-contractual steps (booking, booking-related communication)
• Art. 6(1)(c) GDPR – legal obligation (e.g. registration and retention duties)
• Art. 6(1)(f) GDPR – legitimate interest in secure, stable operation of the website
• Art. 6(1)(a) GDPR – consent, where we obtain it

You have the right at any time to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). You may withdraw any consent given at any time with effect for the future. An informal message to the contact details above is sufficient.

3. Accessing the website (hosting & server log files)

When this website is accessed, the hosting provider automatically collects information and stores it in server log files. This may include: shortened or full IP address, date and time of access, name and URL of the file retrieved, volume of data transferred, notification of successful retrieval, browser type and version, operating system, and the previously visited page (referrer). The purpose is to deliver the page, ensure system security and stability, and defend against attacks. The legal basis is Art. 6(1)(f) GDPR.

This website is hosted by HOSTINGER, UAB, Švitrigailos str. 34, LT-03230 Vilnius, Lithuania (company code 302710386), hereinafter “Hostinger”. The website runs on servers located within the European Union. A data processing agreement pursuant to Art. 28 GDPR (Data Processing Addendum, available at hostinger.com/legal) is in place with Hostinger, ensuring that data collected via the website is processed lawfully and in line with data protection requirements.

The hosting provider stores server log files only for as long as necessary for the purposes stated above (delivering the page, security and stability, defending against attacks) and then deletes them.

4. Cookies, tracking and embedded services

• This website sets no cookies and does not use local/session storage for analytics or marketing.
• There is no web analytics and no tracking (no Google Analytics or similar).
• The fonts are served locally from our own server; there is no connection to Google Fonts or other font providers.
• No external maps, videos or social media plug-ins are embedded. Links to Google Maps only open an external page in a new tab after an active click.
• To display the availability calendar, an embedded frame (iframe) from an external provider is used – see the "Availability calendar" paragraph below for details.
• To display guest reviews, a further JavaScript widget from the same provider is embedded – see the "Guest reviews" paragraph below.

A cookie banner is therefore not required at present. Should services requiring consent be added in future, consent (§ 25 TDDDG, Art. 6(1)(a) GDPR) will be obtained in advance and this policy updated accordingly.

Availability calendar: To show you whether your preferred dates are available, we embed the calendar of the provider Stellar Tourism Innovations GmbH ("Xentra"), Torstrasse 105–107, 10119 Berlin, Germany, on the homepage as an embedded frame (iframe) from app.myxentra.com. When it loads, technically necessary data (including your IP address and browser details) is transmitted to Xentra and its service provider Supabase. The calendar sets no cookies. It does, however, store technically necessary caches (interface translations) in your browser's local storage for Xentra's domain; these contain no personal data and serve neither analytics nor advertising. Only the occupancy data held by Xentra is displayed. The booking itself is still made via Airbnb (see item 6). The legal basis is Art. 6(1)(f) GDPR (interest in providing a clear overview of availability).

Guest reviews: We show reviews from previous guests (e.g. from Airbnb) via a widget from the same provider, Xentra (see above). It is embedded as a script: when it loads, technically necessary data (including your IP address) is transmitted to the servers of the service provider Supabase. The widget sets no cookies, uses no local storage and loads no further content; it displays the first name, review text, star rating and date of each review. A link in the widget leads to the provider's website on request. The legal basis is Art. 6(1)(f) GDPR (interest in a transparent presentation of guest experiences).

5. Contacting us by email or WhatsApp

If you contact us by email or WhatsApp, we process the details you provide (e.g. name, contact details, message content, and for WhatsApp your phone number) to handle your enquiry and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR (for booking-related enquiries) or Art. 6(1)(f) GDPR (other enquiries).

When using WhatsApp, data is also processed by WhatsApp Ireland Ltd. / Meta Platforms, which may involve a transfer to the USA. The WhatsApp privacy policy applies to that processing. If you do not want this, please use email.

6. Booking via a third-party portal (e.g. Airbnb)

Bookings are currently made via an external booking portal. The respective portal operator is the controller for the data processing during the booking process, under its own privacy policy. We receive from the portal the data required to carry out the stay (e.g. name, travel dates, contact details where applicable) and process this on the basis of Art. 6(1)(b) GDPR.

7. Registration requirement (accommodation)

Under the German Federal Registration Act, we are required to keep a registration form for accommodated persons and to retain the data it contains (including name, address, arrival and departure dates, number of fellow travellers, nationality for foreign guests). The legal basis is Art. 6(1)(c) GDPR in conjunction with §§ 29 ff. BMG. The retention period is one year, after which the forms are destroyed in a data-protection-compliant manner.

8. Recipients and processors

Personal data is only passed on where necessary to perform the contract or where there is a legal obligation. Recipients may include: the hosting provider (as a processor), the booking portal, a payment service provider where applicable, and authorities within the scope of legal obligations. Contracts pursuant to Art. 28 GDPR are in place with processors.

9. Retention period

We store personal data only for as long as necessary for the respective purpose or as required by statutory retention periods (in particular commercial and tax retention periods of 6 or 10 years for booking- and payment-related documents). The data is then deleted.

10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority. For the controller based in Cologne, this is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Kavalleriestr. 2–4, 40213 Düsseldorf (www.ldi.nrw.de).

11. No automated decision-making; obligation to provide data

Automated decision-making including profiling pursuant to Art. 22 GDPR does not take place. Providing booking-relevant data is necessary to conclude the rental contract; without this information the contract cannot be performed.

12. Changes to this policy

We will adapt this privacy policy as soon as the data processing or the legal situation changes (e.g. when a booking system, analytics or a map is added). The version published on this page at the time applies.