Privacy Policy

Controller / Responsible Entity

Nilufar Wehrum - Grafenwoehr Furnished Apartments

Pressather Strasse 2

D-92655 Grafenwoehr, Germany

1. General Information & Scope

We take the protection of your personal data very seriously. We treat your personal information confidentially and in accordance with the statutory data protection regulations (specifically the EU General Data Protection Regulation / GDPR) and this Privacy Policy.

2. Collection and Processing of Customer Data

When you use our website’s contact form or booking/reservation inquiry form, we collect and process the personal information you enter. This typically includes:

Contact details: Name, email address, phone number

Booking details: Requested arrival and departure dates, number of guests/occupants, apartment preferences, and any additional messages or requests you provide

3. Purpose and Legal Basis of Data Processing

Your data is processed exclusively for the following purposes:

Handling your booking or inquiry: To check availability, communicate with you, process your reservation, and manage your stay (Art. 6(1)(b) GDPR – performance of a contract or preliminary measures).

4. Data Storage and Retention

We store your personal data only for as long as necessary to fulfill the inquiry or booking, or as required by statutory retention periods under German commercial and tax law (e.g., up to 10 years for invoices and booking confirmations). Inquiry data that does not lead to a booking will be deleted within a reasonable timeframe unless ongoing communication is requested.

5. Third-Party Disclosure

We do not sell, rent, or unauthorizedly disclose your data to third parties. Data is only shared with trusted service partners where strictly necessary to execute our services (e.g., website hosting, IT service providers, payment processing) under strict data protection terms, or if mandated by public authorities.

6. Your Rights

Under the GDPR, you have the following rights at any time and free of charge:

Right of access: Request information about your stored data.

Right to rectification: Request correction of inaccurate data.

Right to erasure: Request deletion of your personal data ("right to be forgotten").

Right to restriction of processing: Request limitation of data processing.

Right to data portability: Request your data in a standard digital format.

Right to object: Object to data processing where applicable.

To exercise any of these rights, please contact us at: info@apartments-grafenwoehr.com.

7. SSL / TLS Encryption

To ensure the security of data transmission through our contact and booking forms, this website uses SSL/TLS encryption.

8. Cookies, Google Analytics (GA4) and Conversion Tracking

This website uses Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). When you visit our website, the Google tag sets a cookie on your device that allows us to measure how visitors use our site — including page views and specific interactions such as clicking our WhatsApp button, submitting the contact form, or submitting a booking inquiry.

We use a subset of this data, together with our Google Ads account, to evaluate the performance of our online advertising (e.g. whether a visitor who clicked one of our ads went on to contact or book with us). This link between Google Analytics and Google Ads, and the import of qualifying events as conversions, is configured directly in Google's systems by us — no separate Google Ads tag or conversion label runs on this website.

Data processed: Cookie/client ID, IP address, browser and device information, pages visited, and the specific on-site interactions listed above (contact form submission, booking inquiry submission, WhatsApp click).

Purpose: To measure website usage and the effectiveness of our online advertising, and to show ads that are more relevant to you.

Legal basis: This processing only takes place with your consent (Art. 6(1)(a) GDPR). No analytics or advertising cookies are set, and no data is shared with Google, until you actively accept them via the cookie banner on this website (Google Consent Mode v2). You can withdraw your consent at any time, with effect for the future, via the "Cookie Settings" link in the footer.

Data transfer to third countries: Google may process data on servers located in the United States. Google is certified under the EU-U.S. Data Privacy Framework and/or relies on Standard Contractual Clauses approved by the European Commission as a safeguard for such transfers.

Retention: Google Analytics event data is generally retained according to the retention period configured in our GA4 property (Google's default is 2 or 14 months). For details, see Google's own retention practices.

Further information: You can find more about how Google processes data at the Google Privacy Policy. You may also opt out of personalized advertising generally via Google Ads Settings.