Privacy policy
1. Controller
Hahnewald & Berger FeWo Panorama GbR
Hahnewald & Berger FeWo I GbR
Oertelstraße 22A, 06571 Roßleben-Wiehe, Germany
Phone: +49 15561328824
Email: panorama@auszeit.apartments
2. Principle
We process personal data only as far as necessary to operate this website, answer enquiries and handle bookings. When you merely visit the public pages, we set no cookies as far as is currently technically known, use no third-party analytics or tracking services (we describe our own visitor statistics in section 4) and embed no third-party fonts or scripts. All fonts are served from our own server. If you open the booking form, our booking provider Smoobu may set a session cookie that is required for the booking (see section 6).
3. Hosting and server logs
The website is hosted by STRATO AG (Otto-Ostrowski-Straße 7, 10249 Berlin, Germany). When you visit the pages, the server processes technically necessary data (IP address, date and time, requested page, browser type) in server log files in order to deliver the site and keep it secure. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation). A data processing agreement exists with STRATO. Retention: STRATO stores visitors’ IP addresses for the detection and prevention of attacks for a maximum of seven days. The web server log files are available in STRATO’s customer area for the last six weeks.
4. Visitor statistics
To understand how our website is used, we run our own visitor statistics on our server (hosted by STRATO, see section 3). We do not use cookies for this, do not embed third-party providers and do not pass on any data. Data about your visit is therefore collected when you use this website. The statistics work in two stages:
a) Basic count (no script in the browser)
When a page is requested, our server counts the page view. We store: the page requested, the time, the domain of the referring website (referrer), campaign details from the link (utm parameters) and, roughly derived from the browser identifier, browser, operating system and device type. No information is read from your device and nothing is stored on your device. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is to tailor our information offer to demand. You can object to this processing at any time (see section 9). If “Do Not Track” or “Global Privacy Control” is enabled in your browser, we do not count your visit at all.
b) Detailed statistics (only with your consent)
Only if you click “Agree” in the statistics bar, a small script in your browser additionally transmits: screen size, browser language, time zone, visible time spent and scroll depth as well as clicks on phone, email and external links, the opening of the booking form (including the apartment), opened gallery photos and the fact that the contact form was submitted (not its content). Legal basis: your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). We store your choice in your browser’s local storage under the key “auszeit-statistik” so that the bar does not appear on every visit. You can withdraw or give your consent at any time with effect for the future – via “Statistics settings” in the footer or here: Open statistics settings.
Applies to both stages
Your IP address is not stored in the statistics; it is only processed briefly in order to form a hash value. To group several page views of the same visit, we form a shortened hash value from your IP address and browser identifier together with a random value. The random value is regenerated every day and the old one discarded, so visitors cannot be recognised across several days. Statistics data is deleted after 25 months and not passed on to third parties. The results are only seen by the hosts and the technical administrator of the website.
5. Availability and prices
When you choose a period on the website, our server retrieves availability and price from our booking system Smoobu. Only the period and number of guests are transmitted, no personal data. Your IP address is not passed to Smoobu in this step.
6. Booking form (Smoobu)
The booking form is only loaded when you click “Book now” or “Open booking form”. A connection to our booking provider Smoobu is then established and your IP address is transmitted to Smoobu. Smoobu may set a technically necessary session cookie. If you book, Smoobu processes the details required (e.g. name, address, contact details, travel dates, payment details where requested) to perform the contract (Art. 6(1)(b) GDPR) and passes them on to us. We keep booking data for as long as necessary to perform the contract and to meet statutory retention obligations. Provider: Smoobu GmbH, Pappelallee 78/79, 10437 Berlin. For further information on how Smoobu processes data, see Smoobu’s privacy policy.
7. Contact
If you contact us via the contact form, by email or by phone, we process your details (name, email address, phone number if given, message) to handle your enquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or (f) GDPR (answering enquiries). An enquiry sent via the form is stored on our server and forwarded to our email address. The copy stored on our server is deleted automatically after six months. We delete emails relating to your enquiry no later than six months after processing is complete, unless statutory retention obligations apply. To protect against abuse we store a pseudonymised counter of requests (an encrypted value, no plain-text IP address) for one hour at most.
8. Administration area
The administration area is intended for the hosts only. A technically necessary session cookie is set for login and expires when the browser is closed.
9. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future. Please use the contact details above.
You also have the right to lodge a complaint with a data protection supervisory authority, e.g. the authority responsible for us: Thüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheit, Häßlerstraße 8, 99096 Erfurt. You may also contact the supervisory authority of your place of residence.
10. Changes
We update this notice when the website or the law changes. The version published here applies.