Privacy policy

The controller responsible for data processing on this website is:

Kokopelli Ferienwohnung Heide Hentschel Jeremias-Gmelin-Str. 4a 79424 Auggen Germany

Phone: +49 173 3267824 Email: Heidegesahentschel@gmail.com

No data protection officer has been appointed, as there is no legal obligation to do so.

This website provides information about the Kokopelli holiday apartment in Auggen. You can use it without registering or providing any personal details. We only process personal data where this is necessary to run the website and answer your enquiries, or where you have agreed to a feature (e.g. the map). Bookings and payments do not take place on this website.

The connection to this website is encrypted via SSL/TLS (recognisable by “https://” in your browser’s address bar).

Personal data is deleted as soon as the purpose of processing no longer applies and no statutory retention obligations prevent this.

This website is hosted by Namecheap, Inc., 4600 East Washington Street, Suite 300, Phoenix, AZ 85034, USA. Namecheap’s representative in the EU pursuant to Art. 27 GDPR is the European Data Protection Office (EDPO), Avenue Huart Hamoir 71, 1030 Brussels, Belgium.

Each time the website is accessed, the hosting provider processes technically necessary data in server log files: IP address, date and time of access, page requested, amount of data transferred, the previously visited website, and browser and operating system. This data is needed to deliver the website and to ensure its security and stability, which is our legitimate interest (Art. 6(1)(f) GDPR). The hosting provider’s control panel also generates aggregated access statistics from the log files (e.g. page views per day), which only we can see.

A data processing agreement pursuant to Art. 28 GDPR is in place with Namecheap (Data Processing Addendum as part of its terms of service). As Namecheap is based in the USA, data may be transferred to the USA; this is based on the European Commission’s Standard Contractual Clauses (Decision 2021/914, Art. 46(2)(c) GDPR), which form part of that agreement.

So that you can see available dates right away, our server automatically retrieves the apartment’s occupancy from the Booking.com calendar (and Airbnb, if connected) via iCal calendar export and refreshes it about every five minutes. The calendar only contains booked periods, no guest data. Your browser loads the occupancy exclusively from our server; no data about you is transmitted to Booking.com or Airbnb in the process.

If you contact us by email, phone, WhatsApp or via the contact form, we process your details (e.g. name, contact details and your message) in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a possible stay, and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). Your messages are deleted once your enquiry has been fully dealt with and no statutory retention obligations apply.

WhatsApp is a service of WhatsApp Ireland Limited (Dublin, Ireland), a Meta group company. When you use WhatsApp, its privacy policy applies, and data may also be transferred to the USA. The WhatsApp links on this website only open WhatsApp when you click them; no data is sent to WhatsApp before that.

With the contact form, your entries (subject, message, email address and/or phone number and, voluntarily, your name) are transmitted in encrypted form to this website’s server and forwarded from there by email to the host. To send this email we use the service Resend of Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA. Resend processes the data in the USA; a data processing agreement pursuant to Art. 28 GDPR is in place, and the transfer is based on the European Commission’s Standard Contractual Clauses and Resend’s certification under the EU-U.S. Data Privacy Framework (Art. 45 and 46 GDPR). The website itself does not store the messages.

To prevent misuse, your IP address is briefly held in the server’s working memory when you submit the form in order to limit the number of messages per sender (at most five in ten minutes); it is not stored permanently (Art. 6(1)(f) GDPR).

To understand how this website is used (e.g. which pages are viewed and where visitors come from), we use the web analytics service Plausible Analytics of Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia. Plausible works without cookies and stores nothing on your device. No user profiles are created, and you are not recognised across several days or across other websites.

When a page is viewed, the following information is sent to Plausible and analysed: the page viewed (without URL parameters, except campaign parameters), the previously visited website (referrer), browser, operating system and device type (derived from the user agent) and your approximate location (country, region, city), determined from your IP address. To count the visitors of a day, a hash is generated from the IP address, user agent, the domain of this website and a random value that changes daily; the random value is deleted every 24 hours. Your IP address and the full user agent are not stored. Only aggregated statistics that do not allow any conclusions about you are stored.

The data is processed exclusively within the European Union (servers at Hetzner in Germany; additionally Bunny, Slovenia, for delivery and UpCloud, Finland, for the database). A data processing agreement pursuant to Art. 28 GDPR is in place with Plausible.

The legal basis is our legitimate interest in privacy-friendly audience measurement in order to improve the website (Art. 6(1)(f) GDPR). You can object to this at any time (Art. 21 GDPR): the switch at the end of this page turns off the statistics for your browser; this only stores the flag “plausible_ignore” in your browser’s local storage. If your browser sends a “Do Not Track” or “Global Privacy Control” signal, Plausible is not loaded at all. More information: plausible.io/data-policy

This website can display a map from Google Maps, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The map is only loaded after you click “Load map”; no data is sent to Google before that. Once loaded, data such as your IP address is transmitted to Google and may be processed on servers of Google LLC in the USA; Google may set cookies. Google LLC is certified under the EU-U.S. Data Privacy Framework.

The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Your consent is stored in your browser and can be withdrawn at any time with the switch at the end of this page.

Bookings and payments take place exclusively on the websites of Booking.com B.V. (Amsterdam, Netherlands) or Airbnb Ireland UC (Dublin, Ireland); no booking or payment data is collected on this website. You only leave this website when you click a booking link. The travel dates and number of guests you selected are passed to the respective platform as part of that link. The privacy policy of Booking.com or Airbnb applies there.

This website does not use tracking or marketing cookies. Only the following is stored: (1) your manually selected language (cookie “NEXT_LOCALE”, 12 months), (2) the travel dates, number of guests and scroll position during the current browser session (sessionStorage – on your device only, deleted when you close the tab), (3) your Google Maps consent (localStorage), (4) that you have closed the cookie notice (localStorage) and (5) – only if you turn off the visitor statistics – the flag “plausible_ignore” (localStorage). Web analytics with Plausible (section 6) works without cookies.

This storage is strictly necessary for functions you have expressly requested (Section 25(2) No. 2 TDDDG). You can delete it in your browser at any time.

Fonts, photos and the video of the apartment are delivered directly from this website’s server. No connections to third parties such as Google Fonts or YouTube are made for this.

You have the right to access your stored data (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR).

Right to object: where we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you can object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). You can object to the visitor statistics without giving reasons using the switch at the end of this page.

For any data protection matter, a message to the contact details above is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg), Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

We update this privacy policy when the website or the services it uses change. The version published here applies.