1. Data Protection at a Glance
General Information
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified. Detailed information on the subject of data protection can be found in our privacy policy listed below this text.
Data Collection on this Website
- Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. You can find their contact details in the section “Note on the Responsible Party” in this privacy policy. - How do we collect your data?
On the one hand, your data is collected when you communicate it to us. This can be, for example, data that you enter into a contact form or during a booking. Other data is collected automatically or after your consent by our IT systems when you visit the website. This is primarily technical data (e.g., internet browser, operating system, or time of the page view). - What do we use your data for?
Part of the data is collected to ensure the error-free provision of the website. Other data can be used to analyze your user behavior. When you make bookings, your data is used for contract processing. - What rights do you have regarding your data?
You have the right to receive information about the origin, recipient, and purpose of your stored personal data free of charge at any time. You also have a right to demand the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. You also have the right to lodge a complaint with the competent supervisory authority.
2. General Notes and Required Information
Data Protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
Note on the Responsible Party
The responsible party for data processing on this website is:
Ferienwohnung Butt GmbH
Peter-Martens-Weg 72 B
27472 Cuxhaven
Germany
Represented by: Holger Otto Butt
Phone: +49 (0) 157 84242686
E-mail: info@de-winterchalet.com
The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).
Storage Duration
Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for processing the data no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, the deletion takes place after these reasons no longer apply.
General Notes on the Legal Basis for Data Processing on this Website
If you have consented to data processing, we process your personal data on the basis of Art. 6 (1) (a) GDPR. In the event of explicit consent to the transfer of personal data to third countries, processing is also carried out on the basis of Art. 49 (1) (a) GDPR. Subject to consent, we process your data for the performance of a contract or the implementation of pre-contractual measures on the basis of Art. 6 (1) (b) GDPR (e.g., for accommodation bookings). Furthermore, we process your data if this is necessary to fulfill a legal obligation on the basis of Art. 6 (1) (c) GDPR. Data processing may also be carried out on the basis of our legitimate interest pursuant to Art. 6 (1) (f) GDPR.
Revocation of Your Consent to Data Processing
Many data processing operations are only possible with your explicit consent. You can revoke consent already given at any time. The legality of the data processing carried out up to the revocation remains unaffected by the revocation.
Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work, or the place of the alleged violation.
Right to Data Portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format.
Information, Correction, and Deletion
Within the framework of the applicable statutory provisions, you have the right to free information about your stored personal data, its origin and recipient, and the purpose of the data processing at any time, and, if applicable, a right to correction or deletion of this data.
3. Data Collection on this Website
Hosting
We host the content of our website with an external service provider (hoster). The personal data collected on this website is stored on the hoster’s servers. This can primarily be IP addresses, contact requests, meta and communication data, website access, and other data generated via a website. The hoster is used for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 (1) (b) GDPR) and in the interest of a secure, fast, and efficient provision of our online offer by a professional provider (Art. 6 (1) (f) GDPR).
Server Log Files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
This data is not merged with other data sources. This data is collected on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of their website – for this purpose, the server log files must be recorded.
Contact Form and Email Inquiries
If you send us inquiries via the contact form or email, your details from the inquiry form or your email, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We do not pass on this data without your consent.
The processing of this data is based on Art. 6 (1) (b) GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) if this was requested.
Data Processing for Bookings and Conclusion of Contract
We collect, process, and use personal data if it is necessary for the establishment, content design, or modification of the legal relationship (master data). This is done on the basis of Art. 6 (1) (b) GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures. The collected customer data will be deleted upon completion of the order or termination of the business relationship and expiry of the statutory retention periods.
Cookie Consent Manager
Our website uses a cookie consent technology to obtain your consent to store certain cookies on your terminal device or to use certain technologies, and to document this in a data protection-compliant manner. The provider of this technology is [Insert Provider Name, e.g., Borlabs GmbH / Cybot A/S (Cookiebot) / devowl.io GmbH (Real Cookie Banner)], [Insert Provider Address].
When you enter our website, a corresponding cookie is stored in your browser, in which the consents you have given or the revocation of these consents are documented. This data is not passed on to the provider of the consent technology.
The data is collected in order to obtain the legally required consents for the use of cookies and technologies and to secure them legally. The legal basis for this is Art. 6 (1) (c) GDPR (fulfillment of a legal obligation to obtain valid consent). In addition, the use is based on our legitimate interest in user-friendly and legally secure consent management pursuant to Art. 6 (1) (f) GDPR.
Further information on data processing by the provider of the consent tool can be found in their privacy policy: [Insert Web Address to the Cookie Provider’s Privacy Policy].
4. Payment Service Providers (Payment Processing)
We integrate payment service providers on our website to enable you to pay for your bookings securely, quickly, and smoothly. The processing of data by payment service providers is carried out on the basis of Art. 6 (1) (b) GDPR (performance of a contract). In addition, we have a legitimate interest in providing effective and secure payment methods pursuant to Art. 6 (1) (f) GDPR.
Stripe
If you choose a payment method from the payment service provider Stripe, the payment processing will be handled by the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (hereinafter “Stripe”).
Your data communicated during the ordering process (such as name, address, account number, bank code, credit card number, invoice amount, currency, and transaction number) will be forwarded to Stripe. Your data will be passed on exclusively for the purpose of payment processing with Stripe and only to the extent necessary for this purpose.
Under certain circumstances, data may also be transferred to the parent company, Stripe Inc., in the USA. Stripe has committed to complying with the EU-US Data Privacy Framework. Details on Stripe’s data processing can be found in Stripe’s privacy policy at: stripe.com.
PayPal
If you choose to pay using the payment service provider PayPal, the payment data you enter will be transmitted to PayPal. The European operating company of PayPal is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”).
The transmission of your data to PayPal takes place for the purpose of payment processing and fraud prevention. PayPal may pass on your personal data to credit reference agencies to carry out identity and credit checks.
PayPal’s applicable data protection regulations can be accessed at: paypal.com.