Schwangau Homes - Privacy

1. General information
Protecting your personal data is very important to us. We treat your personal data confidentially and in accordance with applicable data protection laws and this privacy policy.

You can generally use our website without providing personal data. If personal data is collected on our pages, for example your name and email address in the contact form or when subscribing to the newsletter, this is done on a voluntary basis.

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption.

Our website uses only technically necessary cookies to ensure functionality. No consent is required for these cookies.

2. Controller
MMJJ Beratung GmbH, Schwangau Homes
Frauenbergstrasse 18b
87645 Schwangau
Email: booking@schwangau-homes.com
Phone: +49 (0)8362-924176

Managing directors: Lukas Jentsch, Jürgen Jentsch
Register court: Amtsgericht Kempten
Commercial register: HRB 6293
VAT ID: DE 191607924

3. Hosting and domain
Our website is hosted by:
Vercel Inc.
340 S Lemon Ave #4133
Walnut, CA 91789
USA
Privacy information: https://vercel.com/legal/privacy-policy

The domain is operated via IONOS SE.
IONOS privacy information: https://www.ionos.de/terms-gtc/datenschutzerklaerung/

We have data processing agreements in accordance with Article 28 GDPR with Vercel (hosting), Klaviyo and Mailchimp (newsletter), and Stripe (payment processing).

4. Contact form
If you contact us via the contact form, we store the information you provide, including your contact details, to process your request and to handle follow up questions. We do not share this data without your consent.

Legal basis: Article 6(1)(b) GDPR (steps prior to entering into a contract)
Retention period: After your request has been fully processed, your data will be deleted unless statutory retention obligations apply.

5. Newsletter
You can subscribe to our newsletter via our website. For this we use:
Klaviyo (Klaviyo Inc., USA)
Mailchimp (Intuit Inc., USA)

The data you enter, for example your email address, is stored on the servers of the respective provider. Newsletters are sent only with your explicit consent (Article 6(1)(a) GDPR). Registration uses a double opt in procedure, meaning you must confirm your subscription via email. You can unsubscribe at any time.

Note: Both providers transfer data to the USA. Standard contractual clauses of the EU Commission are in place for data transfers.

Retention period: Your data is stored as long as the newsletter subscription is active.

6. Booking and payment processing (Stripe)
If you book accommodation via our website and pay online, we process the data required for this purpose. This includes in particular your name, contact details, booking details (travel dates, accommodation, number of guests) and, where necessary, billing details.

For payment processing we use Stripe (Stripe Payments Europe, Ltd. and Stripe affiliated companies). The required payment data is processed directly by Stripe to complete the payment. As a rule, we do not receive full card or bank account details, but only transaction related information (for example payment status, amount, currency, time and reference).

The purposes of processing are contract performance, billing, handling enquiries and, where applicable, refunds.

The legal basis is Article 6(1)(b) GDPR (performance of a contract). To the extent that Stripe or we process data for fraud prevention, security and abuse prevention, this is based on Article 6(1)(f) GDPR (legitimate interest in secure payment processing).

A data processing agreement in accordance with Article 28 GDPR is in place with Stripe.

7. Analytics tool PostHog
We use PostHog to analyse how our website is used. PostHog is configured to collect anonymised usage statistics. It is configured so that no cookies are set, no IP addresses are stored and no conclusions can be drawn about individual persons. It is not possible to link the data to a specific person.

More information: https://posthog.com/privacy
Legal basis: Article 6(1)(f) GDPR (legitimate interest in optimisation and analytics)

8. Links to social networks
Our website contains links to social networks such as Instagram, Facebook or Pinterest. When you visit our website, no data is transmitted to these providers. Data is transmitted only when you actively click the respective icon and are redirected.

9. Use of external media (images)
Some of the images used come from:
Freepik (www.freepik.com)
Unsplash (www.unsplash.com)

Photographers: Gerhard Bumann (Schwangau), Nikos Pantis (Greece)

These images are subject to the respective licence terms. No personal data is transmitted to these services through our website.

10. International data transfers
When using services such as Vercel, Mailchimp, Klaviyo or Stripe, personal data may be transferred to third countries, for example the USA. Such transfers are based on the EU Commission standard contractual clauses under Article 46 GDPR to ensure an adequate level of data protection.

11. Your rights
You have the right at any time to:
Access (Article 15 GDPR)
Rectification (Article 16 GDPR)
Erasure (Article 17 GDPR)
Restriction of processing (Article 18 GDPR)
Data portability (Article 20 GDPR)
Object to processing (Article 21 GDPR)
Withdraw consent (Article 7(3) GDPR)
Lodge a complaint with a supervisory authority (Article 77 GDPR)

Competent supervisory authority in Bavaria:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
https://www.lda.bayern.de

12. Updates to this privacy policy
We reserve the right to update this privacy policy if our services change or for legal reasons. Please check this page regularly for the latest version