Privacy policy

1. Controller

The controller responsible for processing personal data on this website is:

2. General information about data processing

We process personal data only insofar as this is necessary to operate this website, handle inquiries or facilitate accommodation inquiries.

As a rule, you can use the website without providing personal data. Personal data is processed in particular when you submit an accommodation inquiry through the inquiry form or contact us by email.

We do not use data collected through this website for advertising, analytics or profiling.

3. Hosting

This website is hosted by:

When you access our website, technically necessary data is processed to deliver the website and ensure the security and stability of its technical operation. This may include in particular:

• the IP address of the accessing device,
• the date and time of access,
• the page or file accessed,
• the volume of data transferred,
• browser type and browser version,
• operating system,
• referrer URL, if transmitted by the browser,
• information about failed or erroneous access attempts.

This processing is based on Article 6(1)(f) GDPR. Our legitimate interest is to provide our website securely, reliably and without technical errors.

Alfahosting processes data on our behalf as part of the hosting service. Alfahosting’s servers are located in Germany.

Server and security logs are processed only for as long as necessary for technical operation, error analysis and protection against abusive or security-relevant access. The specific retention period depends on the hosting provider’s technical settings and operational deletion schedules.

4. Accommodation inquiries through the inquiry form

You can use our website to submit a non-binding accommodation inquiry.

The following information is processed:

• arrival date,
• departure date,
• number of adults,
• number of children,
• salutation,
• first name,
• last name,
• email address,
• voluntary information in the “Notes” field.

The fields marked as required are necessary so that the inquiry can be handled meaningfully and an offer can be made to you. Information in the “Notes” field is voluntary.

Purpose of processing

The website serves to put interested persons in contact with the landlords and intermediary agencies represented on this website.

When you click “Send a non-binding inquiry now”, your inquiry is transmitted simultaneously to the providers listed below. Based on your information, they can check whether they can offer suitable accommodation for the requested period and then contact you directly by email with a non-binding offer.

The transmission is therefore part of the accommodation inquiry that you expressly initiated.

Legal basis

Your information is processed and forwarded on the basis of Article 6(1)(b) GDPR in order to take pre-contractual steps at your request.

The data is disclosed solely to handle the accommodation inquiry you submitted. It is not disclosed for general advertising purposes, and contact details are not sold.

5. Recipients of accommodation inquiries

Your inquiry is transmitted simultaneously to the following landlords and intermediary agencies:

• Iris und Andreas Forster GbR
  Waterloostraße 19
  38106 Braunschweig
  Germany
  Email: info [at] ferienwohnung-am-wurmberg [dot] de
  Privacy information: https://www.ferienwohnung-am-wurmberg.de/agb.html
• STANMA Braunlage GbR
  Hauptstraße 15a
  21258 Heidenau
  Email: braunlage [at] stanma-feelhome [dot] de
  Privacy information: https://stanma-feelhome.de/datenschutzerklaerung/

The above list is generated automatically from the providers currently participating in the inquiry-forwarding service.

The listed providers receive only the data that you entered in the inquiry form.

After receiving the inquiry, each provider processes the data under its own responsibility under data-protection law, particularly to answer your inquiry, prepare an offer and, where applicable, take steps towards or enter into an accommodation contract with you.

Each provider is responsible for any use of your data beyond these purposes.

6. Storage of data submitted through the inquiry form

The personal data entered in the inquiry form is not stored in this website’s database.

After submission, the data is processed technically and sent by email through our hosting provider’s mail server to the providers named in section 5.

We do not permanently store the form content on the website.

Temporary buffering and technical log data may arise on the mail servers involved in transmitting the email. These are used solely to perform and secure message transmission.

After receiving the inquiry, each provider decides under its own responsibility how the transmitted data is processed further and how long it needs to be retained.

7. Contact by email

If you contact us by email outside the inquiry form, we process the information you provide to handle your message.

If your message concerns steps towards or the performance of a contract, processing is based on Article 6(1)(b) GDPR.

Other inquiries are processed on the basis of Article 6(1)(f) GDPR. Our legitimate interest is to handle communications addressed to us.

The data is deleted once it is no longer required to handle the inquiry and no statutory retention obligations or other legitimate reasons require further storage.

8. Registration and owner area

Owners of holiday apartments at Residenz an der Bode can register for this website’s protected owner area.

Data processed

During registration and use of the owner area, we process in particular:

• first and last name,
• postal address,
• email address,
• telephone number,
• login credentials or the technically generated password hash,
• association with one or more holiday apartments,
• email addresses stored for receiving accommodation inquiries,
• details of any appointed letting or booking agency,
• the setting that determines whether accommodation inquiries are forwarded to the owner, the agency or both recipients.

Passwords are not stored in plain text.

Purpose of processing

The data is processed to provide the protected owner area and to verify the registered person’s entitlement as the owner of a holiday apartment.

The postal address and telephone number are used in particular to check the plausibility of the owner’s details and, if necessary, to contact the owner personally to verify their entitlement.

The data is also processed to

• associate the owner account with the relevant holiday apartment,
• manage the recipients chosen by the owner for accommodation inquiries, and
• forward incoming accommodation inquiries to the owner and/or the letting or booking agency chosen by the owner in accordance with the owner’s settings.

The data stored for these purposes is not used for general advertising.

Legal basis

Where processing is necessary to provide the owner area and the inquiry-forwarding service requested by the owner, it is based on Article 6(1)(b) GDPR.

The address, telephone number and any other data used to verify entitlement are processed on the basis of Article 6(1)(f) GDPR.

Our legitimate interest is to protect the owner area against unauthorized use, ensure that forwarding settings can be changed only by authorized persons, and prevent accommodation inquiries from being forwarded incorrectly or abusively.

Details of letting and booking agencies

Owners can enter an appointed letting or booking agency in the owner area and specify whether accommodation inquiries should be forwarded to that agency.

The agency’s name or company name, address, email address and, where applicable, a link to its own privacy policy may be stored for this purpose.

The owner may enter only agencies and contact details whose provision and use are permitted for this purpose. In particular, the owner is responsible for ensuring that they are entitled to provide the agency contact details for forwarding accommodation inquiries.

Where the agency details contain personal data, especially for sole traders or personal contact details of individual contacts, we inform the data subject about the processing in accordance with legal requirements.

The agency details are processed solely to carry out the forwarding of accommodation inquiries requested by the owner and to inform interested persons transparently about the providers to whom their inquiry is sent.

Where personal agency data is processed, processing is based on Article 6(1)(f) GDPR. Our legitimate interest and that of the relevant owner are the proper conduct of holiday-apartment letting and the forwarding of accommodation inquiries to the agency appointed by the owner.

Publication as a recipient of accommodation inquiries

An owner or agency selected as a recipient is listed in the “Recipients of accommodation inquiries” section of our privacy policy only after every prerequisite for forwarding has been satisfied.

Publication provides interested persons with transparent information, before they submit an inquiry, about who may receive their personal data.

As a rule, only the details required to identify the recipient clearly are published, in particular the name or company name and location and, where available, a link to the recipient’s own privacy policy.

Contact details that are not required for public display, especially telephone numbers, are not published.

Storage period

Owner-account data is generally stored for as long as the owner account exists.

When the owner account is deleted, the personal data stored for it is deleted unless statutory retention obligations or other legal grounds require further storage.

Data for a stored letting or booking agency is generally stored for as long as the agency assignment exists. It is deleted when the owner removes the assignment or the owner account is deleted, unless statutory retention obligations or other legal grounds require further storage.

The owner is responsible for keeping their stored contact details, holiday-apartment associations and details of any appointed agency up to date.

9. Cookies and similar technologies

We do not use cookies or similar technologies for analytics, marketing, advertising or tracking.

Where technically necessary cookies or comparable storage mechanisms are used, they serve exclusively to provide functions expressly requested by the user securely, for example to protect forms against abusive inquiries.

Such strictly necessary functions do not require consent under section 25(2) TDDDG.

10. Encrypted transmission

This website is provided through an encrypted HTTPS connection.

This protects data transmitted between your browser and our web server against unauthorized interception during transmission.

11. No analytics or tracking services

This website does not use analytics, tracking or advertising services.

In particular, we do not use services such as Google Analytics, Google Ads, Meta Pixel or comparable technologies.

The website also does not embed external Google Fonts, Google Maps, YouTube videos or social-media plugins.

12. No automated decision-making

No automated decision-making, including profiling within the meaning of Article 22 GDPR, takes place.

13. Your rights

Subject to the applicable legal requirements, you have the following rights in particular concerning your personal data:

• right of access under Article 15 GDPR,
• right to rectification under Article 16 GDPR,
• right to erasure under Article 17 GDPR,
• right to restriction of processing under Article 18 GDPR,
• right to data portability under Article 20 GDPR,
• right to object under Article 21 GDPR to processing based on Article 6(1)(e) or (f) GDPR.

If processing is exceptionally based on your consent, you may withdraw that consent at any time with effect for the future. This does not affect the lawfulness of processing carried out before withdrawal.

To exercise your rights, you can contact us at:

Please note that, after accommodation-inquiry data has been forwarded to one of the providers named in section 5, we cannot delete or change that data at the provider. You may also exercise your rights directly against the relevant provider regarding its further processing.

14. Right to lodge a complaint with a data-protection supervisory authority

Under Article 77 GDPR, you have the right to lodge a complaint with a data-protection supervisory authority about the processing of your personal data.

The following authority is particularly responsible for us:

You may also contact any other supervisory authority competent under the GDPR.

15. Version of this privacy policy

Version: 2026-09-15T16:46:31+02:00