Protecting your personal data is important to us. Personal data means any information that can be used to identify you personally.
This Privacy Policy explains what personal data is processed when you visit this website, make an inquiry or complete a booking, and for what purposes such data is processed.
The controller responsible for data processing in connection with the Waldhorizont holiday accommodation is:
Jan Fernau
Bellersberg 45C
36217 Ronshausen
Germany
Email: [email protected]
This website and the associated booking system are operated using Lodgify. Lodgify provides website hosting, booking and management functions, as well as other technical services.
When you use this website and the booking system, technical connection data as well as personal data provided by you in connection with an inquiry or booking may be processed.
Where Lodgify processes personal data on our behalf, such processing is carried out under a data processing agreement in accordance with Art. 28 GDPR.
Further information about data processing by Lodgify can be found in the Lodgify Privacy Policy. Lodgify's services may include website hosting, booking and payment systems, as well as the management of bookings and guest communications.
When you access this website, technically necessary information may be processed, including:
Where necessary, this data is processed to ensure the secure and technically reliable provision of the website. The legal basis is, in particular, Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of the website.
If you contact us via the contact form or by email, we process the information you provide in order to respond to your inquiry.
This may include:
If your inquiry relates to a potential or existing booking, processing is based on Art. 6(1)(b) GDPR. In other cases, processing may be based on our legitimate interest in responding to inquiries pursuant to Art. 6(1)(f) GDPR.
When you make a booking, we process the data required to initiate and perform the accommodation contract.
This may include:
The legal basis for this processing is Art. 6(1)(b) GDPR.
Where data must be retained due to tax, commercial or other statutory requirements, processing is additionally based on Art. 6(1)(c) GDPR.
For direct bookings, payment data may be processed depending on the selected payment method.
Where external payment service providers are used, the information required to process the payment is transmitted to the respective provider or processed directly by that provider.
According to Lodgify, credit card details are not stored directly by Lodgify; instead, payments are processed through external payment service providers.
Where processing is necessary to perform the booking contract, the legal basis is Art. 6(1)(b) GDPR.
If the accommodation is booked through external booking platforms such as Airbnb or Booking.com, personal data is initially processed by the respective platform operator.
The respective provider is responsible for processing data within its platform in accordance with its own privacy policy.
Where personal data is subsequently transmitted to us for the purpose of fulfilling your booking, we process such data for the performance of the accommodation contract pursuant to Art. 6(1)(b) GDPR.
This website uses cookies and similar technologies where they are necessary for the technical operation of the website or where you have consented to their use.
Where consent is required for particular cookies or technologies, they will only be used after you have made the corresponding selection via the cookie banner provided on this website.
You may change or withdraw your consent at any time with effect for the future using the cookie settings available on the website.
Where consent is required, the legal basis for any subsequent processing of personal data is, in particular, Art. 6(1)(a) GDPR.
Lodgify also states that prior consent is obtained for cookies and similar technologies that are not technically necessary.
Personal data is only disclosed where necessary to provide the website, respond to an inquiry, process a booking or payment, or comply with legal obligations.
Recipients may include:
Personal data will only be disclosed beyond these purposes where an appropriate legal basis exists.
When using certain service providers, personal data may be processed outside the European Union or European Economic Area.
Where such transfers take place, the applicable data protection requirements and appropriate safeguards are observed.
Lodgify states that certain processing activities may involve transfers outside the EEA and that appropriate mechanisms, including adequacy decisions or Standard Contractual Clauses, may be used for such transfers.
Personal data is retained only for as long as necessary for the respective purpose of processing.
Where statutory retention obligations apply, the relevant data will be retained for the duration of those obligations and subsequently deleted unless another legal basis justifies further retention.
Data relating to inquiries that do not result in a booking will be deleted once it is no longer required to process the inquiry and there are no statutory requirements or legitimate grounds for further retention.
Subject to the applicable legal requirements, you have, in particular, the right to:
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future pursuant to Art. 7(3) GDPR.
To exercise your rights, please contact us using the contact details provided in Section 2.
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.
This website uses SSL/TLS encryption to protect transmitted data against unauthorized access by third parties.
This Privacy Policy may be updated if the services used on this website or the applicable legal requirements change.
Last updated: October 2026