Privacy Policy
1. Controller
Hüttenchalets Rhön
Owner: Alexander Kircher
Hüttenmühle 4
36419 Geisa, district Geismar
Email: [email protected]
2. General Information on Data Processing
We take the protection of your personal data very seriously. Personal data is handled confidentially and in accordance with the statutory data protection regulations as well as this privacy policy.
The use of our website is generally possible without providing personal data. Where personal data is collected (e.g., via a contact form or during a booking), this is always done on a voluntary basis.
3. Collection and Storage of Personal Data and Type and Purpose of Processing
a) Contacting Us
If you contact us by email or via a contact form, the data you provide (e.g., name, email address, phone number, message) will be stored for the purpose of processing your inquiry.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract / pre‑contractual measures).
b) Bookings via Website or Booking Platforms
When making a booking, we process the data required to fulfill the rental agreement, in particular:
- Name
- Address
- Contact details
- Booking period
- Payment information
- Number of guests
Processing is carried out for the performance of the accommodation contract.
Legal basis: Art. 6(1)(b) GDPR.
For bookings made via platforms such as Booking.com, Airbnb, or FeWo‑direkt, their respective privacy policies also apply.
c) Payment Processing
We process payment data only to the extent necessary to complete the booking.
Depending on the payment method, external payment service providers may be involved (e.g., PayPal, credit card providers).
Their respective privacy policies apply.
d) Server Log Files
The website provider automatically collects data transmitted by your browser:
- IP address
- Date and time of the request
- Browser type and version
- Operating system
- Referrer URL
- Hostname of the accessing device
This data cannot be assigned to specific individuals.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in technical stability).
4. Disclosure of Data
Your data will only be shared:
- if necessary for contract fulfillment (e.g., payment service providers)
- if we are legally required to do so
- if you have expressly consented
Data is not transferred to third countries unless you book via international booking platforms.
5. Storage Period
We store personal data only as long as necessary for the respective purposes or as required by statutory retention periods (e.g., 10 years for tax‑related documents).
6. Cookies
Our website may use cookies that are necessary for technical operation.
If additional cookies (e.g., analytics or marketing cookies) are used, this will only occur with your explicit consent via a cookie banner.
7. Your Rights as a Data Subject
You have the following rights at any time:
- Access to your stored data (Art. 15 GDPR)
- Rectification of incorrect data (Art. 16 GDPR)
- Erasure of your data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
To exercise your rights, simply send an informal request to:
[email protected]
8. Withdrawal of Consent
You may withdraw any consent given at any time with effect for the future.
The lawfulness of processing carried out before the withdrawal remains unaffected.
9. Data Security
We use technical and organizational measures to protect your data against loss, misuse, or unauthorized access.
Data transmission on this website is generally encrypted (SSL/TLS).
10. Changes to This Privacy Policy
We reserve the right to update this privacy policy if necessary, for example due to new legal requirements or technical developments.