Privacy Policy

The controller responsible for the processing of personal data on this website is:

The competent supervisory authority is the Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit), Postfach 3163, 65021 Wiesbaden, Germany.

Within the limits of the applicable law, you have the right at any time to:

• access the personal data we hold about you (Art. 15 GDPR),
• rectify inaccurate data (Art. 16 GDPR),
• erase your data (Art. 17 GDPR),
• restrict processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to the processing (Art. 21 GDPR).

You may withdraw any consent you have given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.

This website is hosted by Vercel. The provider is Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you access the website, Vercel processes technical connection data in order to deliver the pages.

The legal basis is our legitimate interest in providing our website securely and efficiently (Art. 6(1)(f) GDPR). A data processing agreement is in place with the provider. Regarding the transfer of data to the USA, see the section “Transfer to third countries”.

When you access the website, information transmitted by your browser is automatically processed in so-called server log files: IP address, date and time of access, the page requested, the browser and operating system used, and the page previously visited (referrer).

This data serves the technical delivery, security and stability of the website and is not combined with other data sources. The legal basis is Art. 6(1)(f) GDPR.

When you send us a message via the contact form, we process the data you provide: first and last name, email address, telephone number (optional) and your message.

We use this data solely to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract) or our legitimate interest in responding to your enquiry (Art. 6(1)(f) GDPR). The data is stored in our database (see the section “Storage of your enquiry data”).

Through the reservation form you submit a non-binding enquiry – this is not a binding booking. We process: first and last name, address (street, house number, postal code, town, country), email address, telephone number, arrival and departure dates, type of accommodation, total vehicle length, number of travellers (adults and children), details on electricity connection and pets, any wishes, and an optional message.

We use this data solely to handle your reservation enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures taken at your request). The data is stored in our database (see the section “Storage of your enquiry data”).

The data submitted through our forms is stored in a database that we operate with the provider Neon. The data is held on servers within the European Union (Frankfurt am Main, AWS region eu-central-1). The provider is Neon Inc., USA; a data processing agreement is in place.

We delete enquiry data as soon as it is no longer required to handle your request and no statutory retention obligations apply, but no later than twelve months after the enquiry is received.

To notify us of form submissions and to respond to your enquiry, we send emails via the SMTP service of ALL-INKL.COM – Neue Medien Münnich GmbH, Hauptstraße 68, 02742 Friedersdorf, Germany. The contents of the respective email are processed in the course of this. The provider processes the data in Germany; a data processing agreement is in place.

To protect our forms from abusive automated use, we use Cloudflare Turnstile. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Turnstile analyses technical characteristics of your visit (including IP address and browser information) in order to distinguish human users from automated access.

The legal basis is our legitimate interest in preventing spam and abuse (Art. 6(1)(f) GDPR). Regarding the transfer of data to the USA, see the section “Transfer to third countries”.

Images on this website are delivered via the Cloudflare Images service provided by Cloudflare, Inc. (USA). When images are loaded, your IP address is transmitted to Cloudflare. The legal basis is our legitimate interest in fast and reliable image delivery (Art. 6(1)(f) GDPR).

We do not use any tracking or analytics cookies. Technically necessary information – in particular your choice in the consent banner – is stored locally in your browser (local storage, key “rg-cookie-consent”) and remains on your device. If you open the chat with Piffche, we additionally set a technically necessary cookie (“piffche_pass”, valid for two hours). It contains no personal data, only a signed confirmation that the security check was passed, and protects the chat against automated mass use. The chat cannot be used without this cookie; it is only set once you open the chat yourself.

The banner lets you control whether consent-based services (Adobe Fonts, Google Maps) are loaded. Without your consent, these services are not loaded. You can change your choice at any time.

After your consent, we embed the “Gamay” font via Adobe Fonts (Typekit). The provider is Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland (parent company: Adobe Inc., USA). To deliver the fonts, your IP address is transmitted to Adobe.

The legal basis is your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time with effect for the future. Before your consent, a standard fallback font is used.

After your consent, we embed a Google Maps map to show our location. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, USA). When the map is loaded, your IP address and possibly further data are transmitted to Google.

The legal basis is your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time with effect for the future. Before your consent, a placeholder is shown instead of the map.

On this website we offer an AI-assisted chat with our mascot “Piffche”. If you use the chat on your own initiative and send a message, your input and the conversation so far are transmitted to our service provider OpenAI in order to generate a reply. The provider is OpenAI Ireland Ltd., 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland (parent company: OpenAI, L.L.C., USA).

Processing only takes place if you actively use the chat. The legal basis is our legitimate interest in providing our guests with quick and straightforward information (Art. 6(1)(f) GDPR). A data processing agreement is in place with the provider; under its terms, content submitted via the interface is not used to train the models. Regarding the transfer of data to the USA, see the section “Transfer to third countries”.

Please do not enter any personal or sensitive data in the chat. For binding information, reservations and personal matters, please use the contact or reservation form, the telephone or email. The answers given by the chatbot are generated automatically, may be incorrect and are not binding. On request, you can have the conversation sent to an email address you provide. We do not pass the address on to third parties. The email is sent via the SMTP service named above, and protection against abusive use is provided by Cloudflare Turnstile. To protect the chat against automated mass use, when you open it we verify once via Cloudflare Turnstile that a person is writing, and we limit the number of requests per origin. For this we store only a non-reversible check value derived from your IP address, for one hour – the IP address itself is not stored. The legal basis is our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR).

Since July 2026 we store the conversation – your questions and the chat’s replies. We do this in order to see which questions are asked frequently and where the chat answers inadequately, and to improve it accordingly. The legal basis is our legitimate interest in improving our services (Art. 6(1)(f) GDPR). These conversations contain no identifier of your person – neither your IP address nor any recognition feature – and are deleted automatically after 90 days.

If, when having the conversation sent to you, you expressly ask us for a reply, we additionally store your email address and notify ourselves about it. The legal basis is then your enquiry (Art. 6(1)(b) GDPR). We keep this conversation until your enquiry has been dealt with and delete it afterwards.

To analyse frequently asked questions, we transmit the stored conversation texts to OpenAI in a batch – that is, for a purpose other than answering within the conversation itself. Your email address is not transmitted in the process.

Some of the services used (Vercel, Cloudflare, Adobe, Google, OpenAI) may process or transfer personal data in the USA. Where this occurs, we base the transfer on the EU-US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses. The form data itself is stored within the EU (see “Storage of your enquiry data”).

For security reasons, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the “https://” in your browser’s address bar.

We adjust this privacy policy whenever changes to the data processing we carry out make this necessary. The current version published on this page applies in each case.