Privacy Policy
Preamble
With the following privacy policy, we would like to inform you about the types of your personal data (hereinafter also referred to as "data") we process, for what purposes, and to what extent. The privacy policy applies to all processing of personal data carried out by us, both in the context of providing our services and, in particular, on our websites, mobile applications, and external online presences, such as our social media profiles (hereinafter collectively referred to as "online offering").
The terms used are not gender-specific.
Date: October 30, 2026
Table of Contents
- Preamble
- Controller
- Overview of Processing Activities
- Relevant Legal Bases
- Security Measures
- General Information on Data Storage and Deletion
- Rights of Data Subjects
- Provision of the Online Offering and Web Hosting
- Use of Cookies
- Contact and Inquiry Management
- Web Analytics, Monitoring, and Optimization
- Plug-ins and Embedded Functions as Well as Content
- Amendment and Updating
Controller
Georg Strack
Hitdorfer Str. 138
51371 Leverkusen, Germany
Email address: georgstrack@gmail.com
Imprint: https://ferienhaus-estepona.de/impressum/
Overview of Processing Activities
The following overview summarizes the types of processed data and the purposes of their processing and refers to the affected persons.
Types of Processed Data:
- Inventory data.
- Employee data.
- Location data.
- Contact data.
- Content data.
- Usage data.
- Meta, communication, and procedural data.
- Protocol data (log files).
Categories of Affected Persons:
- Recipients of services and clients.
- Employees.
- Communication partners.
- Users.
- Third parties.
- Whistleblowers.
Purposes of Processing:
- Communication.
- Security measures.
- Reach measurement.
- Organizational and administrative procedures.
- Feedback.
- Profiles with user-related information.
- Provision of our online offering and user-friendliness.
- Information technology infrastructure.
- Whistleblower protection.
Relevant Legal Bases
Relevant Legal Bases under the GDPR: Below you will find an overview of the legal bases of the GDPR on the basis of which we process personal data. Please note that in addition to the provisions of the GDPR, national data protection regulations in your or our country of residence may apply.
- Consent (Art. 6 para. 1 p. 1 lit. a) GDPR): The data subject has given their consent to the processing of personal data concerning them for a specific purpose or purposes.
- Performance of a contract and pre-contractual inquiries (Art. 6 para. 1 p. 1 lit. b) GDPR): Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
- Legal obligation (Art. 6 para. 1 p. 1 lit. c) GDPR): Processing is necessary for compliance with a legal obligation to which the controller is subject.
- Legitimate interests (Art. 6 para. 1 p. 1 lit. f) GDPR): Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.
Security Measures
We take appropriate technical and organizational measures in accordance with legal requirements, taking into account the state of the art, implementation costs, and the nature, scope, circumstances, and purposes of processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons.
Measures include, in particular, ensuring the confidentiality, integrity, and availability of data by controlling physical and electronic access to the data, as well as access concerning them, input, transfer, securing availability, and separation.
Securing Online Connections via TLS/SSL Encryption Technology (HTTPS): To protect user data transmitted via our online services against unauthorized access, we use TLS/SSL encryption technology.
Rights of Data Subjects
Rights of Data Subjects under the GDPR: As a data subject, you are entitled to various rights under the GDPR, which arise in particular from Arts. 15 to 21 GDPR:
- Right to object: You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR.
- Right to withdraw consent: You have the right to withdraw given consents at any time.
- Right of access: You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and access to this data, as well as further information and copies of the data.
- Right to rectification: You have the right to request the completion of data concerning you or the correction of inaccurate data concerning you.
- Right to erasure and restriction of processing: You have the right to demand that data concerning you be deleted immediately or, alternatively, to demand a restriction of the processing of the data.
- Right to data portability: You have the right to receive data concerning you that you have provided to us in a structured, commonly used, and machine-readable format or to request its transmission to another controller.
- Complaint to a supervisory authority: You have the right to lodge a complaint with a data protection supervisory authority.
Provision of the Online Offering and Web Hosting
We process user data to be able to provide our online services. For this purpose, we process the user's IP address, which is necessary to transmit the contents and functions of our online services to the user's browser or terminal device.
- Processed data types: Usage data (e.g., page views, length of stay, device types, operating systems); meta, communication, and procedural data (e.g., IP addresses, timestamps); protocol data (log files).
- Legal bases: Legitimate interests (Art. 6 para. 1 p. 1 lit. f) GDPR).
Use of Cookies
"Cookies" are functions that store information on users' terminal devices and read information from them. Cookies can be used for various purposes, such as functionality, security, comfort of online offerings, and the creation of visitor stream analyses.
- Legal bases: Consent (Art. 6 para. 1 p. 1 lit. a) GDPR); Legitimate interests (Art. 6 para. 1 p. 1 lit. f) GDPR).
Contact and Inquiry Management
When contacting us (e.g., by postal mail, contact form, email, telephone, or social media) and within the framework of existing user and business relationships, the details of the inquiring persons are processed to the extent necessary to respond to the contact inquiries and any requested measures.
- Processed data types: Contact data (e.g., postal and email addresses, telephone numbers); content data (e.g., text messages); meta, communication, and procedural data.
- Legal bases: Performance of a contract and pre-contractual inquiries (Art. 6 para. 1 p. 1 lit. b) GDPR); Legitimate interests (Art. 6 para. 1 p. 1 lit. f) GDPR).
Web Analytics, Monitoring, and Optimization
Web analytics (also referred to as "reach measurement") is used to evaluate the visitor streams of our online offering and can include behavior, interests, or demographic information about visitors.
- Google Analytics: We use Google Analytics to measure and analyze the use of our online offering based on a pseudonymous user identification number.
- Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
- Legal basis: Consent (Art. 6 para. 1 p. 1 lit. a) GDPR).
- Privacy policy: https://business.safety.google/privacy/
Plug-ins and Embedded Functions as Well as Content
We integrate functional and content elements into our online offering that are obtained from the servers of their respective providers (referred to as "third parties"), such as graphics, videos, or city maps. Integration always requires that these third parties process the user's IP address.
- Legal bases: Consent (Art. 6 para. 1 p. 1 lit. a) GDPR); Legitimate interests (Art. 6 para. 1 p. 1 lit. f) GDPR).