Schwangau Homes - Privacy
Last updated: March 12, 2026
1. General Information
The protection of your personal data is a matter of particular importance to us. We process your personal data confidentially and in accordance with applicable data protection legislation – in particular the General Data Protection Regulation (GDPR) – as well as this Privacy Policy.
Use of our website is generally possible without providing personal data. Where personal data is collected (e.g. name and email address via the enquiry form), this is done on a voluntary basis or where required by law.
For security reasons and to protect the transmission of confidential content, our website uses SSL or TLS encryption.
Our website uses technically necessary cookies (e.g. for language settings and storing your cookie preferences) as well as – only with your explicit consent – optional analytics cookies (PostHog). On your first visit, you will be asked for your consent via a cookie banner. You can change your settings at any time via the cookie icon at the bottom left of the page.
2. Controller
MMJJ Beratung GmbH, Schwangau Homes
Frauenbergstrasse 18b, 87645 Schwangau, Germany
Email: booking@schwangau-homes.com | Tel: +49 (0)8362-924176
Managing Directors: Lukas Jentsch, Jürgen Jentsch
Commercial Register: Amtsgericht Kempten, HRB 6293 | VAT ID: DE 191607924
3. Hosting, Technical Service Providers and Domain
Our website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Privacy policy: https://vercel.com/legal/privacy-policy
The domain is managed by IONOS SE. Privacy policy: https://www.ionos.de/terms-gtc/datenschutzerklaerung/
Content Management and Image Delivery (Sanity): We use the content management system Sanity (Sanity AS, Norway) to manage and deliver content (texts, images). When page content and images are accessed, connections are established to Sanity servers (cdn.sanity.io), through which your IP address is technically transmitted. We do not store or share personal data with Sanity. Legal basis: Art. 6(1)(f) GDPR. Privacy information: https://www.sanity.io/legal/privacy
Data processing agreements pursuant to Art. 28 GDPR are in place with Vercel (hosting), resort-suite Software GmbH & Co. KG / v-Office (booking system), Stripe (payment processing), PostHog (analytics), Ebeling Raßloff Yuupless GbR (AI chatbot, guest contacts, consent management and marketing delivery) and IONOS SE (email delivery).
4. Enquiry Form
If you contact us via the enquiry form on our website, the following data is collected: first name, email address, phone number (optional), desired apartment, arrival and departure dates, number of adults, children and infants, and your message. This data is used to process your enquiry and is not passed on to third parties without your consent.
Your enquiry is additionally stored in the guest management system of our processor Ebeling Raßloff Yuupless GbR, so that we can match an enquiry to a later booking by the same person and answer follow-up questions. This storage takes place regardless of whether you consented to marketing messages; promotional use only takes place with your consent under section 5. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in orderly guest management).
To confirm your enquiry, an automatic email will be sent to the address you provided. Email delivery is handled by IONOS SE (smtp.ionos.de).
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures)
Retention period: Your data will be deleted once your enquiry has been fully processed, unless statutory retention obligations apply.
5. Offers and News by Email and WhatsApp
On our forms you may consent to receiving occasional offers and news from Schwangau Homes by email or WhatsApp. The checkbox is never pre-ticked, and both enquiries and bookings work without it. We use the platform of our processor Ebeling Raßloff Yuupless GbR, Forggenseestr. 89, 87672 Roßhaupten, to send these messages and to manage consents.
We store your name, email address, phone number where provided, your language, and the wording, version and time of your consent. The wording is stored so that it remains verifiable what you agreed to. Email delivery uses a double opt-in procedure: your subscription only takes effect once you click the confirmation link in the first email.
Emails are sent via IONOS SE (Germany). Messages sent via WhatsApp additionally involve WhatsApp Ireland Ltd. / Meta Platforms Ireland Ltd.; this may entail a transfer to the USA, covered by the EU Commission’s Standard Contractual Clauses. WhatsApp delivery is not yet enabled. Your consent already covers this channel so that it does not have to be obtained again later.
Retention period: Your data is stored for as long as the consent remains in place. After a withdrawal we retain the record of the consent and of its withdrawal for as long as required to meet our accountability obligation under Art. 5(2) GDPR.
Legal basis: Art. 6(1)(a) GDPR (consent). You may withdraw your consent at any time with effect for the future: via the unsubscribe link in every email, by sending “STOP” on WhatsApp, or informally to the address given in section 2. The lawfulness of processing carried out before the withdrawal remains unaffected.
6. Booking, Guest Management and Payment Processing
6.1 Booking Management via v-Office
We use the software v-Office (provided by resort-suite Software GmbH & Co. KG, Germany) to manage bookings, handle guest communication and operate our booking channels (channel manager).
The following personal data is processed as part of the booking process: salutation, first name, last name, email address, telephone number, address (street, house number, postcode, city, country), preferred language, booking details (travel period, property, number of adults, children, infants and, where applicable, pets), special requests and messages, and, where applicable, payment information.
Discount codes: If you open our website via a link containing a discount code (for example from a newsletter), we store that code in your browser's local storage (sessionStorage) for the duration of your visit, so that it is still available at the time of booking and the discount applies even if you browse other pages in between. Only the code itself is stored, no personal data. Storage ends when you close the browser tab and is technically necessary to show you the price you asked for. Legal basis: Section 25(2) no. 2 TDDDG and Art. 6(1)(b) GDPR (pre-contractual measures). No consent is required for this; the analysis of your traffic source for analytics purposes, by contrast, only takes place with your consent, see section 8.
Your email address is transmitted to v-Office in order to send booking confirmations, arrival information and other booking-related communications automatically.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract)
A data processing agreement pursuant to Art. 28 GDPR is in place with resort-suite Software GmbH & Co. KG.
Retention period: Data is retained for the duration of the contractual relationship and in accordance with statutory retention obligations (generally 10 years under German commercial law).
6.2 Bookings via Third-Party Platforms (Airbnb, Booking.com, etc.)
If you book via platforms such as Airbnb or Booking.com, your personal data is initially collected and processed by the respective platform. The platform's own privacy policy applies in this regard.
As part of the booking process, these platforms transmit the data required for the booking (name, contact details, booking information) to us and/or to v-Office for further processing.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract)
6.3 Payment Processing via Stripe
We use Stripe (Stripe Payments Europe, Ltd. and affiliated companies) for online payment processing. Payment data is processed directly by Stripe. We do not receive full card or bank account details, only transaction-related information (e.g. payment status, amount, currency, timestamp and reference).
Note: To prepare for payment processing, the Stripe JavaScript (js.stripe.com) is loaded on all pages of our website. For technical reasons, Stripe may collect connection data (e.g. IP address). Actual payment processing only takes place upon completion of a booking.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract); where Stripe processes data for fraud prevention: Art. 6(1)(f) GDPR (legitimate interest).
A data processing agreement pursuant to Art. 28 GDPR is in place with Stripe.
7. Statutory Registration Obligation and Data Transmission to Feratel / Municipality of Schwangau
Under the German Federal Registration Act (Bundesmeldegesetz, BMG) and applicable Bavarian regulations, we are required as an accommodation provider to collect registration data from our guests and transmit it to the competent registration authority.
For this purpose, we use the Feratel service, which enables digital registration and transmission of guest registration forms to the Municipality of Schwangau.
The following personal data is processed in fulfilling this legal obligation:
First and last name
Date of birth
Nationality
Home address
Travel document number (for guests from non-EU countries)
Arrival and departure dates
This data is processed solely for the purpose of fulfilling the statutory registration obligation and is transmitted to Feratel and the Municipality of Schwangau. No further use is made of this data.
Legal basis: Art. 6(1)(c) GDPR (compliance with a legal obligation) in conjunction with Section 29 BMG and applicable Bavarian legislation.
Retention period: Data is retained for the period prescribed by law and deleted thereafter.
Provider: Feratel Media Technologies AG, Austria. Privacy information: https://www.feratel.com/datenschutz
8. Analytics Tool PostHog
We use PostHog, a privacy-friendly open-source analytics tool, to analyse the use of our website. PostHog is only activated if you give your consent to analytics cookies via the cookie banner.
PostHog is configured so that no IP addresses are stored. localStorage (not a cookie) is used to store the analytics ID. The following data is collected: page views, click behaviour (autocapture), page exit events, errors and exceptions, web vitals metrics (e.g. loading times), scroll depth reached, and – where present in the address you opened – campaign parameters (utm_source, utm_medium, utm_campaign, utm_content, utm_term).
Session replay on the booking path: on the "Book" and "Availability" pages, PostHog records the course of your visit (page content, mouse and scroll movement, clicks) in order to identify drop-offs in the booking process and improve the flow. All input fields are masked – your entries are not transmitted. In addition, the areas displaying guest data (contact details, information about fellow travellers) are masked as text. No recording takes place on any other page of the website. Recording only occurs with your consent to analytics cookies and can be withdrawn at any time via the cookie icon. Legal basis: Art. 6(1)(a) GDPR (consent) in conjunction with Section 25(1) TDDDG.
Data is processed on EU servers (eu.i.posthog.com). Your browser’s analytics requests are technically routed via our own domain; the recipient and place of processing remain unchanged.
Legal basis: Art. 6(1)(a) GDPR (consent) in conjunction with Section 25(1) TDDDG.
Further information: https://posthog.com/privacy
9. AI Chatbot / Yuupless AI
This website features an AI-powered chatbot to answer questions and handle enquiries.
Data that may be processed includes: chat content (your messages and any voluntary information provided), technical metadata (e.g. timestamps, session or chat ID) and browser and device information. Technically necessary cookies and/or local storage entries may be used to operate the chat.
In accordance with Art. 50(1) of the EU AI Act, users are informed that they are interacting with an AI system.
Processing is carried out to handle your enquiry (Art. 6(1)(b) GDPR) and on the basis of legitimate interests in efficient communication and secure operation (Art. 6(1)(f) GDPR). Where optional analytics functions are enabled, this is only done with your consent (Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG).
Processor and Third Country Transfers: For technical provision, we use Ebeling Raßloff Yuupless GbR, Forggenseestr. 89, 87672 Roßhaupten as a data processor. External AI service providers may be used for automated response generation. Processing outside the EU/EEA cannot be excluded; appropriate safeguards pursuant to Art. 44 et seq. GDPR are applied (e.g. EU Standard Contractual Clauses).
Chat content is not used to train AI models.
Further information: https://www.yuupless.com/ki-chatbot-datenschutzerklaerung
10. Links to Social Networks
Our website contains links to social networks such as Instagram and Facebook. No data is transmitted to these providers when you visit our website. You will only be redirected to the external platform if you actively click on the respective icon.
11. External Media
Some images are sourced from Freepik (www.freepik.com) and Unsplash (www.unsplash.com), as well as from photographers Gerhard Bumann (Schwangau) and Nikos Pantis (Greece). These images are hosted locally on our servers or via our content management system (Sanity CDN); no direct data transmission to Freepik or Unsplash takes place when images are accessed.
12. International Data Transfers
The use of services such as Vercel (hosting), Stripe (payment processing), PostHog (analytics, EU servers) and, where applicable, Yuupless and external AI service providers may involve the transfer of personal data to third countries (e.g. the USA). Such transfers are based on the EU Commission's Standard Contractual Clauses pursuant to Art. 46 GDPR.
13. Your Rights as a Data Subject
You have the right at any time to:
Access your stored data (Art. 15 GDPR)
Rectification of inaccurate data (Art. 16 GDPR)
Erasure of your data (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Object to processing (Art. 21 GDPR)
Withdraw consent at any time (Art. 7(3) GDPR)
Lodge a complaint with a supervisory authority (Art. 77 GDPR)
To exercise your rights, please contact: booking@schwangau-homes.com
Competent supervisory authority in Bavaria: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany. https://www.lda.bayern.de
14. Guest Reviews
Guest reviews submitted to us may be published on our website with first name, place of residence and date. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in transparently presenting guest experiences). You have the right to object to publication at any time (booking@schwangau-homes.com).
15. Changes to this Privacy Policy
We reserve the right to update this Privacy Policy in the event of changes to our services or for legal reasons. The current version is always available on our website.
This Privacy Policy was last updated on 12 March 2026 and supersedes all previous versions.