Hideaways About Guide Contact DE

Legal information

Privacy

Controller

Emily Giesen
Uranusweg 9a
65191 Wiesbaden, Germany

Phone: +49 160 3451260
E-mail: emilygiesen3@gmail.com

In brief

This website sets no cookies, uses no analytics or tracking services and embeds no external fonts, maps or videos. That is also why there is no cookie banner – there is nothing to consent to. Personal data is processed only if you write to us via the contact form, and to the technically unavoidable extent by our hosting provider.

Hosting and server logs

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Pages are delivered from a data centre in Frankfurt am Main, Germany.

When a page is requested, the hosting provider automatically records access data in server logs: IP address, date and time of access, the address requested, volume of data transferred, referring page, and details of your browser and operating system. This data is technically necessary in order to deliver the site and ensure its stable and secure operation. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. This data is not combined with other sources and is not evaluated on an individual basis.

As the provider is a company based in the USA, transfer of data to the USA cannot be ruled out. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

Contact form

If you send us the contact form, we process your name, your e-mail address, your message and – where provided – the accommodation you are interested in and your travel dates. We use this information solely to answer your enquiry.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to entering into a rental or accommodation contract, and otherwise Art. 6(1)(f) GDPR based on our legitimate interest in responding to enquiries. Providing the data is voluntary; however, without your name, e-mail address and message we cannot process your enquiry.

Technical delivery is handled by the service Web3Forms (Cloud Cadet OÜ, Tallinn, Estonia). Your entries are transmitted there and forwarded to us by e-mail. The provider processes this data on our behalf as a processor.

We delete your enquiry once it has been dealt with conclusively and no retention obligations apply – for enquiries not followed by a booking, generally no later than six months after the last contact. Statutory retention periods, for example under commercial and tax law, remain unaffected.

Fonts

The fonts used on this website are stored locally on our server and loaded from there. There is no connection to Google Fonts or any other external font service. Your IP address is not transmitted to any third party for this purpose.

Links to external providers

On some pages we link to Google Maps, Airbnb and other providers using ordinary links. No content from these services is embedded in our pages – a connection to these providers is established only once you actively click such a link. From that point onwards, the privacy terms of the respective provider apply.

Google Search Console

The source code of our pages contains a verification token for Google Search Console. This is plain text only; no scripts are loaded and no data about your visit is transmitted to Google. Google merely provides us with aggregated reports on the search terms through which our site is found; these cannot be traced back to individuals.

Encryption

This website is transmitted exclusively in encrypted form (TLS, indicated by “https” and the padlock symbol in your address bar). Content you send us therefore cannot be read by third parties.

Your rights

You have the right at any time to obtain information about the data we hold about you (Art. 15 GDPR), and to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on a legitimate interest (Art. 21). Any consent given may be withdrawn at any time.

Simply contact us at the address above. Independently of this, you may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information, Postfach 3163, 65021 Wiesbaden, Germany.

Last updated

August 2026. We update this policy whenever the website or the services it uses change. In case of doubt, the German version prevails.