In this data protection notice you will find information on the processing of personal data when inquiring about and booking our holiday home and also on the processing of data relating to your visit to this website.
Which data are processed?
Legal basis for data processing
In order to be able to offer you our website and the related services, we process personal data on the basis of the following legal bases:
- to fulfill contracts (Art. 6 Para. 1 lit. b) GDPR
- on the basis of a weighing of interests (Art. 6 Para. 1 lit.f) GDPR)
- to fulfill a legal obligation (Art. 6 Para. 1 lit. c) GDPR)
It can also happen that we process personal data on the basis of consent. However, this will only be done in those cases in which we absolutely need consent.
If we process data on the basis of a balancing of interests, you as the person concerned have the right to object to the processing of personal data, taking into account the requirements of Art. 21 GDPR.
Processing of booking data for holiday homes
Reservation & booking of holiday homes
When you book or inquire about a holiday home with us, we process the personal data that we need to initiate, implement and process the rental.
We limit ourselves to the data that we really need to carry out and settle the reservation and overnight stay.
We also process data from guests on the basis of a balance of interests in order to ask them again for feedback or a rating after a visit. Do not worry. If consent is legally required for contacting us, we will of course be happy to obtain it beforehand or, if it is not available, we will not notify you accordingly.
Registration requirements
According to the respective requirements of the reporting law, we are legally obliged to collect personal data from guests. The details result from the reporting regulations that we must comply with.
Retention times
The data of bookings are stored for the duration of the respective commercial and tax law retention obligations.
We delete personal data for which there are no longer any retention obligations if further processing is no longer necessary to fulfill contractual obligations or if processing is no longer necessary on the basis of a weighing of interests.
Booking software
We use the software "Helder" from Silver Solutions BV from Capelle aan den IJssel in the Netherlands for the management and rental of our holiday homes. We have concluded an order processing contract with Silver Solution BV that meets the requirements of Art. 28 GDPR.
Support & emails
In addition to “Silver Solutions BV”, we also use Beleef-Ameland.nl for support (looking after guests etc.). We use this service through our property management company Gunda Burnotte (gunda (at) waddenreisburo.nl). We have concluded an order processing contract with the property management company, which includes the processing of personal data for booking purposes in connection with Beleef-Ameland. Beleef-Ameland uses AWS data centers from Amazon for its data processing.
TLS encryption is generally used for all incoming and outgoing emails. If your e-mail provider or you use TLS encryption for e-mail, there is a good chance that the e-mails can be sent and received quite securely against unauthorized access by third parties.
By integrating Google web fonts on our website, Google fonts are also used. Therefore, servers from Google are also called here. In this respect, we refer to the comments on Google and Google Maps below.
The legal basis for data processing in connection with Helder and Beleef-Ameland with those interested in booking and guests is Art. 6 Paragraph 1 lit. b) GDPR. For general inquiries, Article 6 (1) (f) GDPR is the legal basis. In this respect, we are interested in answering inquiries from users or visitors to the website.
The appropriate level of data protection at Beleef-Ameland is guaranteed by the conclusion of the so-called EU standard contractual clauses.
Payment service provider
You can only pay for your stays in our holiday homes by bank transfer.
Recipients of data
We use various service providers to offer our rental services. These change from time to time (e.g. in the area of cleaning services). During vacation times, dear business partners also support us in looking after guests and making bookings.
Data processing in connection with this website - hosting and content delivery networks (CDN)
This website is operated by 1 & 1 IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. The operation of the website is regulated by a contract for order data processing between Hermann Holterhus and 1 & 1 IONOS SE in accordance with the GDPR.
The technologies used are determined by 1 & 1 IONOS SE. Information on data protection and the legal framework of 1 & 1 IONOS SE: https://www.ionos.de/terms-gtc/terms-privacy/
Access data - external hosting
This website is hosted by an external service provider (hoster). The personal data recorded on this website are stored on the host's servers. This can primarily be IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.
The hoster is used for the purpose of fulfilling the contract with our potential and existing guests (Art. 6 Para. 1 lit.b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 Para . 1 lit.f GDPR).
Our host will only process your data to the extent that this is necessary to fulfill its performance obligations and follow our instructions with regard to this data.
We use the following hosters:
1 & 1 IONOS SE
Elgendorfer Str. 57
56410 Montabaur
Conclusion of a contract for order processing
In order to ensure processing in accordance with data protection regulations, we have concluded an order processing contract with our hoster. Information on data protection and the legal framework of 1 & 1 IONOS SE can be found under the following links: https://www.ionos.de/terms-gtc/terms-privacy/
Recipient / transfer of data
Data that you provide to us will generally not be passed on to third parties. In particular, your data will not be passed on to third parties for their advertising purposes.
However, we may use service providers for the operation of this website or for e-mail, for example. Here it can happen that a service provider becomes aware of personal data. We select our service providers carefully - especially with regard to data protection and data security - and take all measures required by data protection law for permissible data processing.
Cookies
Our Internet pages use so-called "cookies". Cookies are small text files and do not cause any damage to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted after your visit. Permanent cookies remain stored on your device until you delete them yourself or your web browser automatically resolves them.
In some cases, cookies from third-party companies can also be stored on your device when you enter our site (third-party cookies). These enable us or you to use certain third-party services.
Cookies have different functions. Numerous cookies are technically necessary because certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies are used to evaluate user behavior or to display advertising.
Cookies that are necessary to carry out the electronic communication process (necessary cookies) or to provide certain functions you want (functional cookies) or to optimize the website (e.g. cookies to measure the web audience) are stored on the basis of Art. 6 Para. 1 lit.f GDPR, unless a different legal basis is given. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. If consent has been requested (e.g. consent to the storage of cookies), processing takes place exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; the consent can be revoked at any time.
You can set your browser so that you will be informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when you close the browser. If cookies are deactivated, the functionality of this website may be restricted.
Insofar as cookies are used by third-party companies or for analysis purposes, we will inform you of this separately in the context of this data protection declaration and, if necessary, request your consent.
Server log files
The website provider automatically collects and saves information in so-called server log files, which your browser automatically transmits to us. These are:
• Browser type and browser version
• the operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address
This data is not combined with other data sources.
This data is recorded on the basis of Art. 6 Paragraph 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of his website - for this, the server log files must be recorded.
contact form
If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the request and in case of follow-up questions. We do not pass on this data without your consent.
This data is processed on the basis of Article 6 (1) (b) GDPR, provided that your request is related to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries sent to us (Art. 6 Paragraph 1 lit. f GDPR) or on your consent (Art. 6 Paragraph 1 lit. a GDPR) if this was queried.
The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected.
Inquiry by email, phone or fax
If you contact us by e-mail, telephone or fax, your request, including all personal data derived from it (name, request), will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent.
This data is processed on the basis of Article 6 (1) (b) GDPR, provided that your request is related to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 Para. 1 lit. a GDPR) and / or on our legitimate interests (Art. 6 Para. 1 lit.f GDPR), as we have a legitimate interest in the effective Processing the inquiries sent to us.
The data you send to us via contact requests will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.
Web analysis
This website uses the analysis services of 1 & 1-Webanalytics. The provider is 1 & 1 IONOS SE, Elgendorfer Straße 57, D - 56410 Montabaur. As part of the analyzes with 1 & 1, visitor numbers and behavior (e.g. number of page views, duration of a website visit, bounce rates), visitor sources (i.e. which page the visitor comes from), visitor locations and technical data (browser and operating system versions) to be analyzed. For this purpose, 1 & 1 saves the following data in particular:
• Referrer (previously visited website)
• requested web page or file
• Browser type and browser version
• the operating system used
• Type of device used
• Time of access
• IP address in anonymized form (is only used to determine the location of access)
According to 1 & 1, the data is collected completely anonymously so that it cannot be traced back to individual persons. 1 & 1-Webanalytics does not save cookies.
The storage and analysis of the data takes place on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in the statistical analysis of user behavior in order to optimize both its website and its advertising. If a corresponding consent has been requested (e.g. consent to the storage of cookies), processing takes place exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; the consent can be revoked at any time.
Further information on data collection and processing by 1 & 1-Webanalytics can be found in the following links:
https://hosting.1und1.de/hilfe/online-marketing/
https://hosting.1und1.de/hilfe/datenschutz/datenverarbeitung-von-webseitenbesuchern-ihres-companyname-produktes/webanalytics/
https://hosting.1und1.de/terms-gtc/terms-privacy/
Order processing
We have concluded an order processing contract with 1 & 1. This contract is intended to ensure that 1 & 1 handles your personal data in accordance with data protection regulations. Information on data protection and the legal framework can be found under the following links: https://www.ionos.de/terms-gtc/terms-privacy/
Google Analytics
We use Google Analytics, a web analysis service from Google Inc. (“Google”). The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
Google uses cookies. The information generated by the cookie about the use of the online offer by the user is usually transmitted to a Google server in the USA and stored there. Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with other services related to the use of this online offer and the internet. In doing so, pseudonymous user profiles can be created from the processed data.
We only use Google Analytics with activated IP anonymization. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by the user's browser will not be merged with other Google data.
Browser plugin
You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: https://tools.google.com/dlpage/gaoptout?hl=de.
Further information on the use of data for advertising purposes by Google, setting and objection options can be found on the Google website: https://www.google.com/intl/de/policies/privacy/partners/ (“Use of data by Google when you use Websites or apps of our partners "), http://www.google.com/policies/technologies/ads (" Use of data for advertising purposes "), http://www.google.de/settings/ads (" Manage information that Google uses it to show you advertisements ”) and http://www.google.com/ads/preferences/ (“ Determine which advertisements Google shows you ”).
Objection against data collection
You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set which prevents the collection of your data on future visits to this website: Deactivate Google Analytics.
You can find more information on handling user data on Google Analytics in Google's data protection declaration: https://support.google.com/analytics/answer/6004245?hl=de.
Order data processing
We have concluded an order data processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Google Adwords and Google Conversion Tracking
This website uses the online advertising program "Google AdWords" and, as part of this, conversion tracking. Google Adwords will place a cookie on your computer if you have reached our website via a Google ad. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages on our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page.
Every Google AdWords customer receives a different cookie. Cookies cannot therefore be tracked via the websites of AdWords customers. The information obtained using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. Users who do not want to participate in tracking can easily deactivate the Google conversion tracking cookie via their Internet browser under user settings. These users are not included in the conversion tracking statistics.
"Conversion cookies" are saved on the basis of Article 6 Paragraph 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. Find out more about the Google data protection provisions (http://www.google.de/intl/de/privacy.html).
Google Analytics remarketing
Our websites use the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google AdWords and Google DoubleClick. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
This function makes it possible to link the advertising target groups created with Google Analytics Remarketing with the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-based, personalized advertising messages that have been adapted to you depending on your previous usage and surfing behavior on one device (e.g. mobile phone) can also be displayed on another of your devices (e.g. tablet or PC).
If you have given your consent, Google will link your web and app browser history to your Google account for this purpose. In this way, the same personalized advertising messages can be displayed on every device on which you log in with your Google account.
To support this function, Google Analytics collects Google-authenticated user IDs, which are temporarily linked to our Google Analytics data in order to define and create target groups for cross-device advertising.
You can permanently object to cross-device remarketing / targeting by deactivating personalized advertising in your Google account; follow this link: https://www.google.com/settings/ads/onweb/.
The collected data is summarized in your Google account exclusively on the basis of your consent, which you can give to Google and revoke at any time (Art. 6 Para. 1 lit. a GDPR). In the case of data collection processes that are not merged in your Google account (e.g. because you do not have a Google account or have objected to the merging), the collection of data is based on Article 6 (1) (f) GDPR. The legitimate interest arises from the fact that the website operator has an interest in the anonymised analysis of the website visitors for advertising purposes.
Further information and the data protection provisions can be found in Google's data protection declaration at: https://www.google.com/policies/technologies/ads/.
Google Maps
Google Maps is used on this page. For this purpose, corresponding program libraries or map contents are called up from Google servers. Fonts (“Google Webfonts”) are also loaded from Google Maps.
"Google" itself is responsible for data processing by Google Maps. Google itself "feels" not quite sure whether it is Google Ireland or Google in the USA. Doesn't matter either. Because it is crucial that Google servers are called up in any case. According to Google, however, these are located in the EU.
For us, the legal basis is Article 6 (1) (f) GDPR in conjunction with the appropriate level of data protection guaranteed by Google. In this respect, the EU standard contractual clauses have been agreed with Google.
Data processing outside the European Union
We do not generally process data outside of the European Union.
Responsible person
The person responsible for this website and the rental of holiday homes via this website is
Hermann Holterhus
Dahlhok 19th
48488 Emsbüren
Data protection officer
We are not legally obliged to appoint a data protection officer and have not done so either.
BUT: Carla Holterhus, daughter of the owner, is the managing director of Datenschutzheldin.de and earns her living as an external data protection officer. We can therefore assure you that we take this topic more than seriously.
Your rights as a data subject
You have the right to information about your personal data. You can contact us at any time for information.
In the event of a request for information that is not made in writing, we ask for your understanding that we may require evidence from you that proves that you are the person you claim to be.
Furthermore, you have a right to correction or deletion or to restriction of processing, insofar as you are legally entitled to do so.
And you also have the right to object to processing within the framework of legal requirements.
Finally, there is a right to data portability, which you also have within the framework of data protection regulations.
Deletion of data
We generally delete personal data if there is no need for further storage. A requirement can exist in particular if the data is still required to fulfill contractual services, to check warranty and, if applicable, guarantee claims and to be able to grant or defend them. In the case of statutory retention requirements, deletion is only possible after the respective retention obligation has expired (see above).
Right of appeal to a supervisory authority
You have the right to complain to a data protection supervisory authority about the processing of personal data by us.
Changes to this data protection notice
We revise this data protection notice in the event of changes to this website or other occasions that make this necessary. You can always find the current version on this website.
Status: 02/03/2021