Privacy Policy

1. Data Protection at a Glance

General Information
The following information provides a simple overview of what happens to your personal data when you visit our website for holiday rentals. Personal data is any data by which you can be personally identified. Detailed information on data protection can be found in this privacy policy.

Data Collection on This Website

Who is responsible for data collection on this website?
Data processing is carried out by the website operator. Contact details can be found in the section “Information on the responsible party.”

How do we collect your data?

1. Through your communication:
   If you contact us, for example via an inquiry or booking form, by email or by phone.

2. Automatically when visiting the website:
   Technical data such as browser type, operating system, or the time of page access is collected automatically.

What do we use your data for?

• To provide, display, and ensure the security of our website
• To process inquiries and bookings for our holiday rentals
• For contract processing, invoicing, and communication with guests
• For statistical analysis to improve our website

What rights do you have?
You have the right at any time to:

• Obtain information about your stored data
• Request correction or deletion
• Withdraw consent you have given
• Request restriction of processing
• Lodge a complaint with the competent supervisory authority

2. Hosting

We host our website with:

IONOS SE
Elgendorfer Str. 57
56410 Montabaur

When you visit our website, IONOS collects, among other things, IP addresses and technical log files. Details on data collection by IONOS can be found directly with IONOS.

Legal basis:
Art. 6 (1) lit. f GDPR (legitimate interest in a stable website).
Consent for cookies or tracking is based on Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG.

Data processing agreement
We have concluded a data processing agreement (DPA) with IONOS.

3. General Information and Mandatory Details

Data Protection
We treat your personal data confidentially and in accordance with statutory regulations and this privacy policy.

Information on the responsible party
BILEANCA GbR
Hinterstraße 10
79365 Rheinhausen

Phone: 0155 67193432
Email: [email protected]

The responsible party is the natural or legal person who decides on the purposes and means of processing personal data.

Storage period
Personal data is stored as long as the purpose exists. This includes, for example:

• Booking and billing data for tax retention periods
• Inquiries until final processing

Legal bases

• Consent: Art. 6 (1) lit. a GDPR
• Contract / booking: Art. 6 (1) lit. b GDPR
• Legal obligations (e.g. tax retention): Art. 6 (1) lit. c GDPR
• Legitimate interest: Art. 6 (1) lit. f GDPR

Recipients of personal data
We only share data if:

• it is necessary for booking processing (e.g. payment providers),
• we are legally obliged,
• there is a legitimate interest,
• or you have given your consent.

Withdrawal & Objection
You may withdraw your consent at any time.
You may also object to processing for reasons arising from your particular situation (Art. 21 GDPR).

Right to complain
You may lodge a complaint with the competent state data protection authority.

Access, deletion, restriction
Upon request, we will inform you:

• which data we store,
• where it comes from,
• to whom it has been disclosed,
• and for what purpose it is stored.

Stored data will be deleted upon request unless legal obligations prevent this.

4. Data Collection on This Website

Inquiries & Bookings via Form, Email or Phone
If you contact us, we store your details (e.g. name, contact details, travel period, number of guests).

These data are processed:

• to handle your inquiry
• to prepare an offer
• for booking processing and communication

Legal bases:

• Art. 6 (1) lit. b GDPR (contract/booking)
• Art. 6 (1) lit. f GDPR (legitimate interest: handling guest inquiries)

Data will be deleted as soon as:

• the purpose no longer applies, or
• legal retention periods have expired.

5. Social Media

Instagram
Functions of the Instagram service are integrated on this website. These functions are provided by:
Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

When the social media element is active, a direct connection is established between your device and the Instagram server. Instagram thereby receives information about your visit to this website.

If you are logged into your Instagram account, you can link the content of this website to your Instagram profile by clicking the Instagram button. This enables Instagram to associate your visit to this website with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or how it is used by Instagram.

The use of this service is based on your consent in accordance with Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG. Consent can be withdrawn at any time.

If personal data is collected on our website using this tool and forwarded to Facebook or Instagram, we and Meta Platforms Ireland Limited are jointly responsible for this data processing (Art. 26 GDPR). This joint responsibility applies only to the collection of the data and its transfer to Facebook or Instagram. Processing carried out by Facebook or Instagram after the transfer is not part of our joint responsibility.

The obligations jointly incumbent on us have been set out in an agreement on joint processing. The wording of the agreement can be found at:
https://www.facebook.com/legal....

According to this agreement, we are responsible for providing data protection information when using the Facebook or Instagram tool and for implementing the tool on our website in a data protection-compliant manner. Facebook is responsible for the data security of Facebook and Instagram products.

Data subject rights (e.g. access requests) related to data processed by Facebook or Instagram can be asserted directly with Facebook. If you assert your rights with us, we are obliged to forward them to Facebook.

Data transfer to the USA is based on the EU Commission’s standard contractual clauses. Details can be found here:
https://www.facebook.com/legal...
https://privacycenter.instagra...
https://de-de.facebook.com/hel...

Further information can be found in Instagram’s privacy policy:
https://privacycenter.instagra....

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA to ensure compliance with European data protection standards for data processing in the United States. Any company certified under the DPF commits to complying with these standards. More information can be found at:
https://www.dataprivacyframewo.......

Source:
https://www.e-recht24.de