Privacy Policy

Protecting your personal data is important to us. Personal data is any information that can be used to identify you directly or indirectly.

This Privacy Policy informs you about what data we collect, process and use, and about your rights under the General Data Protection Regulation (GDPR).

When you visit our website, your browser automatically transmits information to our server, which is temporarily stored in so-called log files. This data includes:

• IP address (anonymised or partial)
• Date and time of access
• Name and URL of the file accessed
• Website from which access originated (referrer)
• Browser type and operating system
• Volume of data transferred

Purpose: To ensure the operation, security and functionality of the website.

Legal basis: Legitimate interests pursuant to Art. 6(1)(f) GDPR.

If you contact us via a contact form or by email, we process the data you enter (e.g. name, email address, subject, message) in order to handle your enquiry.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).

Our website may use cookies and similar technologies where these are technically necessary or where you have previously consented (e.g. session cookies, consent management tools).

You may withdraw your consent at any time. Further information can be found in our Cookie Policy.

We use Cloudflare Web Analytics (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA) to measure reach. Cloudflare Web Analytics works without cookies and does not store your IP address. Only aggregated metrics are collected (e.g. page views, referrer, browser type, country). Individual visitors cannot be re-identified. The data is used solely for statistical analysis and to improve our service.

Legal basis: Legitimate interest under Art. 6(1)(f) GDPR. Because no personal data is processed, consent is not required.

Retention period: Aggregated data is stored according to Cloudflare's documented retention; no attribution to a person is possible.

Data processing agreement: A data processing agreement under Art. 28 GDPR is in place with Cloudflare. Further information: cloudflare.com/web-analytics.

We host our website with an external provider. Personal data processed in connection with the operation of our website is also transmitted to our hosting provider.

This processing is carried out under a Data Processing Agreement pursuant to Art. 28 GDPR.

To send emails — both transactional emails (e.g. booking confirmations, notifications) and newsletter and marketing emails — we use Brevo (Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin) as a processor. A Data Processing Agreement pursuant to Art. 28 GDPR is in place with Brevo.

Within our company, only those persons who need access to your data in order to fulfil our contractual and legal obligations will receive it.

In addition, service providers (e.g. IT service providers, hosting providers) may act as processors. Data is not passed on to uninvolved third parties unless we are legally obliged to do so.

To send transactional as well as newsletter and marketing emails, we pass your email address to our email service provider Brevo (Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin), who acts as a processor in this respect on the basis of a data processing agreement pursuant to Art. 28 GDPR.

We retain personal data only for as long as is necessary for the purposes for which it is processed, or for as long as statutory retention obligations exist.

Log files are generally deleted automatically after a short period unless they are required for security purposes.

Newsletter and marketing emails: Data that we process on the basis of your consent for sending newsletter and marketing emails is retained until you withdraw your consent. After a withdrawal, we retain your email address as well as the timestamps of the consent and the withdrawal for a further three years as proof of the consent originally given (Art. 7(1) GDPR). The legal basis for this retention is our legitimate interest in defending against legal claims pursuant to Art. 6(1)(f) GDPR.

You can try our service free of charge and without obligation for 14 days. As part of the "Try for free" workflow, we process the data you provide in order to set up access to the host portal and a demo website for you.

Data collected:

• Host's email address (for login and communication)
• Name
• Technical data on the use of the trial access (e.g. IP address, timestamps)

Data you may optionally enter: In addition, during the trial you can enter further data into the host portal (e.g. address, property descriptions, photos). Entering this data is voluntary and not required to use the trial access. This data is processed solely to provide the trial features.

Purpose: Provision of free trial access to the host portal and demo website.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(a) GDPR (consent).

Automatic deletion or anonymisation: Shortly after the 14-day trial expires, the personal data collected during the trial — including apartment master data — is deleted or anonymised. Clean-up runs automatically shortly after a grace and clean-up period of 14 days following the end of the trial, and therefore not at the exact moment the trial ends. Personal content (e.g. name, email address, property data, photos) is irreversibly removed or anonymised. Anonymous, non-personal statistical data (e.g. trial start and end and the status of the trial access) may be retained for internal statistics and analysis; this data no longer allows any conclusions about your identity and is therefore considered deleted within the meaning of Art. 17 GDPR.

Note: If you take out a paid subscription, you create a new account and receive a new host portal and a new website. Trial data is not carried over.

Purpose: If you have consented, we send you newsletter and marketing emails with news about our product, tips on renting out holiday apartments, and offers. Recipients are prospects who have consented and subscribers to our newsletter.

Consent and double opt-in: For newsletter sign-ups via our website we use the double opt-in procedure: after you sign up, we send you a confirmation email, and only once you click the confirmation link it contains do we add you to the mailing list and send you marketing emails. Prospects who try our service for free instead give their consent via a checkbox when starting the free trial; this consent takes effect immediately. In either case, you can withdraw your consent at any time using the methods described below.

Legal basis: Your consent pursuant to Art. 6(1)(a) GDPR.

Email service provider: To send newsletter and marketing emails, we use Brevo (Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin) as a processor pursuant to Art. 28 GDPR.

Withdrawal: You can withdraw your consent at any time with effect for the future (Art. 7(3) GDPR) — either via the unsubscribe link at the end of every marketing email or by email to [email protected]. After withdrawal, you will not receive any further marketing emails. The lawfulness of processing carried out up to the withdrawal remains unaffected.