Privacy policy
Privacy Policy
1. General Information and Mandatory Disclosures
Privacy at a Glance
The operator of this website takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the applicable data protection regulations and this privacy policy.
When you use this website, various personal data are collected. Personal data are data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.
2. Data Controller
The party responsible for data processing on this website is:
Isabell & Oliver Löschner
Pfannenstielstraße 17
90556 Cadolzburg
Germany
Phone: +49 151 56 15 47 11
E-Mail: hallo@bergzeit-suite.de
The data controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).
3. Revocation of Your Consent to Data Processing
Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. An informal notification by e-mail to us is sufficient. The lawfulness of the data processing carried out before the revocation remains unaffected by the revocation.
4. Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)
Where data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims (objection pursuant to Art. 21(1) GDPR).
5. Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged infringement.
The supervisory authority responsible for Bavaria is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
Phone: +49 (0) 981 180093-0
E-Mail: poststelle@lda.bayern.de
Website: https://www.lda.bayern.de
The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.
6. Right to Data Portability
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a standard, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done to the extent technically feasible.
7. Access, Rectification, Erasure and Restriction of Processing
Within the scope of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, if applicable, a right to rectification or erasure of this data as well as the right to restriction of processing. You can contact us at any time at the address given in the legal notice for this and other questions on the subject of personal data.
8. SSL / TLS Encryption
This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as booking requests or enquiries that you send to us as the site operator. You can recognise an encrypted connection in your browser's address line when it changes from "http://" to "https://" and the lock icon is displayed in your browser bar. If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.
9. Data Collection on This Website
9.1 Hosting by Smoobu
This website is hosted on the servers of Smoobu GmbH. The provider is:
Smoobu GmbH
Wönnichstr. 68/70
10317 Berlin
Germany
Website: https://www.smoobu.com
Privacy Policy: https://www.smoobu.com/en/privacy-policy/
Smoobu's servers are located in Germany and/or the European Union. When you visit this website, Smoobu's server automatically collects so-called server log files. These contain:
- Browser type and browser version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address (anonymised)
This data is not merged with other data sources. The collection of this data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website – for this purpose, the server log files must be recorded.
Data Processing Agreement
A data processing agreement (DPA) pursuant to Art. 28 GDPR has been concluded with Smoobu GmbH, which forms part of Smoobu's general terms and conditions. Smoobu processes the data exclusively on our instructions and is obliged not to pass the data on to third parties.
9.2 Cookies
This website uses cookies that are technically necessary for the operation of the website. Cookies are small text files that your web browser stores on your device. Technically necessary cookies are stored on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimised provision of its services.
You can set your browser to inform you about the placement of cookies and to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or in general, and to activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.
No analytics cookies, marketing cookies or third-party cookies (e.g. Google Analytics, Google Fonts, Facebook Pixel) are used.
10. Booking Tool (Smoobu)
Purpose and Scope of Data Collection
Our website uses the booking tool of Smoobu GmbH to enable you to make a direct online booking of our holiday accommodation. To submit a booking request, the following data is required:
Required fields:
- First and last name
- E-mail address
- Travel period (arrival and departure date)
- Number of guests
Optional details (if included in the booking form):
- Phone number
- Address
- Messages / special requests
The date and time of the booking are also stored.
Legal Basis
The processing of this data is based on Art. 6(1)(b) GDPR, as the processing is necessary for the performance of pre-contractual measures and for the fulfilment of a contract.
Disclosure to Third Parties
The personal data you provide during the booking process will be forwarded to Smoobu GmbH as a data processor and stored there for booking processing purposes. A data processing agreement pursuant to Art. 28 GDPR exists with Smoobu GmbH.
Data will only be passed on to other third parties if this is necessary for the performance of the contract (e.g. to payment service providers, if online payment is offered).
Retention Period
Your data will be stored for as long as necessary for the processing of the booking transaction and the associated statutory retention obligations. Tax retention obligations may require storage of up to 10 years (§ 147 German Fiscal Code).
11. Contact Form and Contact by E-Mail
If you send us enquiries via the contact form or by e-mail, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We do not pass on this data without your consent.
The processing of this data is based on Art. 6(1)(b) GDPR if your enquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested.
The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage, or the purpose for storing the data no longer applies (e.g. after your enquiry has been fully processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.
12. Your Rights as a Data Subject
You have the following rights with respect to the data controller:
- Right of access (Art. 15 GDPR): You have the right to obtain information about the personal data we process about you.
- Right to rectification (Art. 16 GDPR): You may request the rectification of inaccurate data or the completion of incomplete data.
- Right to erasure (Art. 17 GDPR): Under certain conditions, you may request the erasure of your personal data.
- Right to restriction of processing (Art. 18 GDPR): Under certain conditions, you may request the restriction of processing.
- Right to data portability (Art. 20 GDPR): You have the right to receive your data in a structured, commonly used and machine-readable format.
- Right to object (Art. 21 GDPR): You may object at any time to the processing of your data which is based on Art. 6(1)(e) or (f) GDPR.
- Right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
To exercise your rights, please contact the data controller named above.
13. No Use of Third-Party Services
We would like to expressly point out that this website does not use any of the following services:
- Google Analytics or other web analytics services
- Google Fonts (external fonts)
- Google Maps
- Google Tag Manager
- Facebook Pixel or other social media tracking tools
- Embedded YouTube videos
- Any other external tracking or analytics services
All resources used on the website are provided exclusively via the Smoobu server.
14. Currency and Amendments to This Privacy Policy
This privacy policy is currently valid and was last updated: May 2026
As our website and offerings develop, or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The current version of the privacy policy can be accessed and printed on this website at any time.