Privacy Policy

The controller responsible for data processing on this website is: Familie Bockmühl Murnauer Str. 7 82438 Eschenlohe Germany Email: fewo@bockmuehl.com

When you make a booking, we collect: • Name, email address, phone number (optional), and postal address • Number and ages of guests • Booking dates, special requests, and booking reference When you log in via magic link, we process your email address to authenticate your session. When you make a payment, you are redirected to Stripe. We do not store your credit card details. Stripe processes your payment data in accordance with their own privacy policy.

We process your personal data on the following legal bases (GDPR Art. 6(1)): • Performance of a contract (Art. 6(1)(b)): Processing your booking and payment, sending confirmation emails, and managing your guest portal account. • Legitimate interests (Art. 6(1)(f)): Server log files for security and troubleshooting, session cookies for website functionality.

Your data may be shared with: • Stripe Inc. — for payment processing We host this website on our own servers. No data is sold to third parties.

This website uses only essential session cookies required for the functioning of the website (e.g. login sessions, CSRF protection). We do not use tracking cookies, analytics tools, or advertising cookies. No consent banner is required for these essential cookies under EU law.

Our hosting provider automatically collects and stores information in server log files that your browser transmits to us. These include: browser type and version, operating system, referrer URL, IP address, and time of the request. This data is not combined with other data sources and is deleted after 14 days.

Instead of passwords, we use magic links sent to your email address. When you request access to the guest portal, we send a one-time signed link. Clicking this link authenticates your session. The link expires after use and cannot be reused.

Booking data is retained for the duration required by German tax law (currently 10 years for invoicing records). Account data is retained as long as you have an active account. Server logs are deleted after 14 days.

Under the GDPR, you have the following rights: • Right of access (Art. 15) — You may request information about your stored data. • Right to rectification (Art. 16) — You may request correction of inaccurate data. • Right to erasure (Art. 17) — You may request deletion of your data, subject to legal retention obligations. • Right to data portability (Art. 20) — You may request your data in a machine-readable format. • Right to object (Art. 21) — You may object to processing based on legitimate interests. To exercise these rights, contact us at fewo@bockmuehl.com.

You have the right to lodge a complaint with the competent data protection supervisory authority: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) Promenade 18 91522 Ansbach Germany www.lda.bayern.de