Privacy Policy

1. Data Controller

See Legal Notice

2. General information on data processing

We process users’ personal data only insofar as this is necessary to provide a functional website and our content and services. Processing is carried out on the basis of the GDPR and the German Federal Data Protection Act (BDSG).

Legal bases

  • Art. 6(1)(f) GDPR (legitimate interests) for technically necessary processing (e.g. server log files, operation/optimisation of the website, defence against attacks).
  • Art. 6(1)(b) GDPR (contract / pre-contractual measures) if you contact us for booking/enquiries.
  • Art. 6(1)(a) GDPR (consent) if we use services requiring consent in the future (e.g. embedded YouTube players, analytics tools). In that case we will inform you in advance via the consent banner.

Storage period

Unless explicitly stated otherwise in this policy, we delete or anonymise data as soon as the purpose for processing no longer applies and there are no statutory retention obligations.

Recipients / processors

We use service providers (e.g. hosting) as processors in accordance with Art. 28 GDPR. They process data exclusively in accordance with our instructions.

3. Hosting and server log files

Our website is hosted by IONOS (IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany). Each time you access the website, the provider automatically records access data (so-called server log files):

  • IP address of the requesting device,
  • date and time of access,
  • time zone difference to Greenwich Mean Time (GMT),
  • access status/HTTP status code,
  • amount of data transferred in each case,
  • website from which the request originates (referrer),
  • browser type including version, operating system and its interface,
  • language and version of the browser software.

Purpose: Delivery of the website, ensuring stability and security, detection of misuse/attacks.
Legal basis: Art. 6(1)(f) GDPR.
Storage period: Log files are generally stored by the provider for a maximum of 8 weeks and then deleted/anonymised. Further information can be found in the provider’s privacy policy.

4. Content management system (WordPress)

We use WordPress to manage the website content. In doing so, technically necessary cookies/mechanisms are used to enable operation of the site (e.g. session handling in the backend).
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and efficient provision of our website).

At present, we use no statistics plugins (e.g. Jetpack, Matomo, Google Analytics) and no marketing/tracking cookies. Should this change, we will update this policy and, if necessary, obtain your consent via a consent banner.

5. Media, fonts and third-party content

  • Images/photos: Media embedded on the website is delivered directly from our server.
  • YouTube: On our pages we currently only link to YouTube content (standard links, no embedded players). By merely following such a link, data processing by YouTube/Google only takes place after you click.
    Note: If videos are embedded in the future, we will use the youtube‑nocookie variant and embed them only after consent via a consent banner. In that case, we will update this section accordingly.
  • Web fonts: We use either system fonts or locally hosted web fonts. No connection to Google Fonts via their servers.

6. Contact

You can contact us by email. In doing so, we process the data you provide (e.g. name, email address, message) in order to handle your request.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual/contractual communication) or Art. 6(1)(f) GDPR (general enquiries).
Storage period: We delete enquiries as soon as they have been dealt with and there are no statutory retention obligations.

7. Social media profiles (links only)

Our website contains links to our presences on external platforms (e.g. YouTube). When you visit our website, no data is transmitted to these providers. Only when you click a link do the privacy policies of the respective platform apply.

8. Your rights

You have the following rights with regard to your personal data:

  • Right of access (Art. 15 GDPR),
  • Right to rectification (Art. 16 GDPR),
  • Right to erasure (Art. 17 GDPR),
  • Right to restriction of processing (Art. 18 GDPR),
  • Right to data portability (Art. 20 GDPR),
  • Right to object to processing based on Art. 6(1)(e) or (f) GDPR (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data (Art. 77 GDPR), e.g. with the authority responsible for your place of residence or our registered office.

9. Security / TLS encryption

This website uses TLS encryption (https). You can recognise an encrypted connection by “https://” and the padlock symbol in your browser’s address bar.

10. Changes to this policy

We will update this privacy policy whenever changes to our website or the services we use make this necessary. You can always find the current version under the Privacy Policy on our website.