Schwangau Homes - Privacy
Last updated: March 12, 2026
1. General Information
The protection of your personal data is a matter of particular importance to us. We process your personal data confidentially and in accordance with applicable data protection legislation – in particular the General Data Protection Regulation (GDPR) – as well as this Privacy Policy.
Use of our website is generally possible without providing personal data. Where personal data is collected (e.g. name and email address via the enquiry form), this is done on a voluntary basis or where required by law.
For security reasons and to protect the transmission of confidential content, our website uses SSL or TLS encryption.
Our website uses technically necessary cookies (e.g. for language settings and storing your cookie preferences) as well as – only with your explicit consent – optional analytics cookies (PostHog). On your first visit, you will be asked for your consent via a cookie banner. You can change your settings at any time via the cookie icon at the bottom left of the page.
2. Controller
MMJJ Beratung GmbH, Schwangau Homes
Frauenbergstrasse 18b, 87645 Schwangau, Germany
Email: booking@schwangau-homes.com | Tel: +49 (0)8362-924176
Managing Directors: Lukas Jentsch, Jürgen Jentsch
Commercial Register: Amtsgericht Kempten, HRB 6293 | VAT ID: DE 191607924
3. Hosting, Technical Service Providers and Domain
Our website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Privacy policy: https://vercel.com/legal/privacy-policy
The domain is managed by IONOS SE. Privacy policy: https://www.ionos.de/terms-gtc/datenschutzerklaerung/
Content Management and Image Delivery (Sanity): We use the content management system Sanity (Sanity AS, Norway) to manage and deliver content (texts, images). When page content and images are accessed, connections are established to Sanity servers (cdn.sanity.io), through which your IP address is technically transmitted. We do not store or share personal data with Sanity. Legal basis: Art. 6(1)(f) GDPR. Privacy information: https://www.sanity.io/legal/privacy
Data processing agreements pursuant to Art. 28 GDPR are in place with Vercel (hosting), resort-suite Software GmbH & Co. KG / v-Office (booking system), Stripe (payment processing), PostHog (analytics), Ebeling Raßloff Yuupless GbR (AI chatbot) and IONOS SE (email delivery).
4. Enquiry Form
If you contact us via the enquiry form on our website, the following data is collected: first name, email address, desired apartment, arrival and departure dates, number of adults, children and infants, and your message. This data is used solely to process your enquiry and is not shared without your consent.
To confirm your enquiry, an automatic email will be sent to the address you provided. Email delivery is handled by IONOS SE (smtp.ionos.de).
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures)
Retention period: Your data will be deleted once your enquiry has been fully processed, unless statutory retention obligations apply.
5. Newsletter
You may subscribe to our newsletter via our website. We use Klaviyo (Klaviyo Inc., USA) and Mailchimp (Intuit Inc., USA) for this purpose.
The data entered (e.g. email address) is stored on the servers of the respective provider. Newsletters are sent only with your explicit consent (Art. 6(1)(a) GDPR). Registration is via a double opt-in process. You may unsubscribe at any time.
Note: Both providers transfer data to the USA based on the EU Commission's Standard Contractual Clauses.
Retention period: Your data is stored for as long as the newsletter subscription is active.
Note: The newsletter service is not currently active on the website. This section will be updated upon activation.
6. Booking, Guest Management and Payment Processing
6.1 Booking Management via v-Office
We use the software v-Office (provided by resort-suite Software GmbH & Co. KG, Germany) to manage bookings, handle guest communication and operate our booking channels (channel manager).
The following personal data is processed as part of the booking process: salutation, first name, last name, email address, telephone number, address (street, house number, postcode, city, country), preferred language, booking details (travel period, property, number of adults, children, infants and, where applicable, pets), special requests and messages, and, where applicable, payment information.
Your email address is transmitted to v-Office in order to send booking confirmations, arrival information and other booking-related communications automatically.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract)
A data processing agreement pursuant to Art. 28 GDPR is in place with resort-suite Software GmbH & Co. KG.
Retention period: Data is retained for the duration of the contractual relationship and in accordance with statutory retention obligations (generally 10 years under German commercial law).
6.2 Bookings via Third-Party Platforms (Airbnb, Booking.com, etc.)
If you book via platforms such as Airbnb or Booking.com, your personal data is initially collected and processed by the respective platform. The platform's own privacy policy applies in this regard.
As part of the booking process, these platforms transmit the data required for the booking (name, contact details, booking information) to us and/or to v-Office for further processing.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract)
6.3 Payment Processing via Stripe
We use Stripe (Stripe Payments Europe, Ltd. and affiliated companies) for online payment processing. Payment data is processed directly by Stripe. We do not receive full card or bank account details, only transaction-related information (e.g. payment status, amount, currency, timestamp and reference).
Note: To prepare for payment processing, the Stripe JavaScript (js.stripe.com) is loaded on all pages of our website. For technical reasons, Stripe may collect connection data (e.g. IP address). Actual payment processing only takes place upon completion of a booking.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract); where Stripe processes data for fraud prevention: Art. 6(1)(f) GDPR (legitimate interest).
A data processing agreement pursuant to Art. 28 GDPR is in place with Stripe.
7. Statutory Registration Obligation and Data Transmission to Feratel / Municipality of Schwangau
Under the German Federal Registration Act (Bundesmeldegesetz, BMG) and applicable Bavarian regulations, we are required as an accommodation provider to collect registration data from our guests and transmit it to the competent registration authority.
For this purpose, we use the Feratel service, which enables digital registration and transmission of guest registration forms to the Municipality of Schwangau.
The following personal data is processed in fulfilling this legal obligation:
First and last name
Date of birth
Nationality
Home address
Travel document number (for guests from non-EU countries)
Arrival and departure dates
This data is processed solely for the purpose of fulfilling the statutory registration obligation and is transmitted to Feratel and the Municipality of Schwangau. No further use is made of this data.
Legal basis: Art. 6(1)(c) GDPR (compliance with a legal obligation) in conjunction with Section 29 BMG and applicable Bavarian legislation.
Retention period: Data is retained for the period prescribed by law and deleted thereafter.
Provider: Feratel Media Technologies AG, Austria. Privacy information: https://www.feratel.com/datenschutz
8. Analytics Tool PostHog
We use PostHog, a privacy-friendly open-source analytics tool, to analyse the use of our website. PostHog is only activated if you give your consent to analytics cookies via the cookie banner.
PostHog is configured so that no IP addresses are stored and no session recording is performed. localStorage (not a cookie) is used to store the analytics ID. The following data is collected: page views, click behaviour (autocapture), page exit events, errors and exceptions, and web vitals metrics (e.g. loading times).
Data is processed on EU servers (eu.i.posthog.com).
Legal basis: Art. 6(1)(a) GDPR (consent) in conjunction with Section 25(1) TDDDG.
Further information: https://posthog.com/privacy
9. AI Chatbot / Yuupless AI
This website features an AI-powered chatbot to answer questions and handle enquiries.
Data that may be processed includes: chat content (your messages and any voluntary information provided), technical metadata (e.g. timestamps, session or chat ID) and browser and device information. Technically necessary cookies and/or local storage entries may be used to operate the chat.
In accordance with Art. 50(1) of the EU AI Act, users are informed that they are interacting with an AI system.
Processing is carried out to handle your enquiry (Art. 6(1)(b) GDPR) and on the basis of legitimate interests in efficient communication and secure operation (Art. 6(1)(f) GDPR). Where optional analytics functions are enabled, this is only done with your consent (Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG).
Processor and Third Country Transfers: For technical provision, we use Ebeling Raßloff Yuupless GbR, Forggenseestr. 89, 87672 Roßhaupten as a data processor. External AI service providers may be used for automated response generation. Processing outside the EU/EEA cannot be excluded; appropriate safeguards pursuant to Art. 44 et seq. GDPR are applied (e.g. EU Standard Contractual Clauses).
Chat content is not used to train AI models.
Further information: https://www.yuupless.com/ki-chatbot-datenschutzerklaerung
10. Links to Social Networks
Our website contains links to social networks such as Instagram and Facebook. No data is transmitted to these providers when you visit our website. You will only be redirected to the external platform if you actively click on the respective icon.
11. External Media
Some images are sourced from Freepik (www.freepik.com) and Unsplash (www.unsplash.com), as well as from photographers Gerhard Bumann (Schwangau) and Nikos Pantis (Greece). These images are hosted locally on our servers or via our content management system (Sanity CDN); no direct data transmission to Freepik or Unsplash takes place when images are accessed.
12. International Data Transfers
The use of services such as Vercel (hosting), Stripe (payment processing), PostHog (analytics, EU servers) and, where applicable, Yuupless and external AI service providers may involve the transfer of personal data to third countries (e.g. the USA). Such transfers are based on the EU Commission's Standard Contractual Clauses pursuant to Art. 46 GDPR.
13. Your Rights as a Data Subject
You have the right at any time to:
Access your stored data (Art. 15 GDPR)
Rectification of inaccurate data (Art. 16 GDPR)
Erasure of your data (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Object to processing (Art. 21 GDPR)
Withdraw consent at any time (Art. 7(3) GDPR)
Lodge a complaint with a supervisory authority (Art. 77 GDPR)
To exercise your rights, please contact: booking@schwangau-homes.com
Competent supervisory authority in Bavaria: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany. https://www.lda.bayern.de
14. Changes to this Privacy Policy
We reserve the right to update this Privacy Policy in the event of changes to our services or for legal reasons. The current version is always available on our website.
This Privacy Policy was last updated on 12 March 2026 and supersedes all previous versions.