This English version is a courtesy translation. Only the German version is legally binding.

General information

This privacy policy applies to our website https://fernblick-odenwald.de and to our booking and guest pages at https://buchen.fernblick-odenwald.de. It gives you an overview of what happens to your personal data when you visit our pages, send us an enquiry or stay with us. Personal data is any data that can be used to identify you personally.

We treat your data confidentially and in accordance with statutory data protection regulations, in particular the General Data Protection Regulation (GDPR).

Please note: data transmitted over the internet (e.g. by email) may have security gaps. Complete protection against access by third parties is not possible.

Who is responsible?

The controller responsible for data processing on these pages is:

Murat Bayram
Alfred-Maul-Str. 8
64720 Michelstadt, Germany
Email: info (at) fernblick-odenwald.de
Phone: +49 (0) 156 79 33 2868

The controller is whoever, alone or jointly with others, decides on the purposes and means of processing personal data.

Your rights

You have the right at any time to access the data we hold about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), notification (Art. 19) and data portability (Art. 20). Where we process data on the basis of our legitimate interest, you can object to this processing (Art. 21 GDPR). A short message to [email protected] is enough.

If you have given us your consent, you can withdraw it at any time with effect for the future (Art. 7 (3) GDPR). Processing carried out up to that point remains unaffected. We may still have to keep some data for a certain period because of legal obligations.

If you believe that we are not processing your data lawfully, you can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163, 65021 Wiesbaden, Germany
Phone: +49 611 1408 – 0 · Fax: +49 611 1408 – 900
Email: [email protected]
https://datenschutz.hessen.de

How we collect data

Some data you give us yourself, for example via the contact form, our booking page, by email or WhatsApp. In addition, our servers automatically record technical data when you visit the pages (see „Hosting and server log files“).

Hosting and server log files

Our website is hosted by netcup GmbH (Karlsruhe, Germany). The booking and guest pages (buchen.fernblick-odenwald.de) run on a server we operate ourselves in Germany. Each time a page is accessed, the following data is automatically stored in server log files:

• browser type and version
• operating system used
• referrer URL (the previously visited page)
• host name of the accessing computer
• time of the server request
• IP address

This is necessary for the pages to work securely and without technical errors. The legal basis is our legitimate interest (Art. 6 (1) (f) GDPR). Our host processes the data on our behalf under a data processing agreement pursuant to Art. 28 GDPR.

Cloudflare

Our website and booking page run via Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). Cloudflare protects the pages against attacks and makes them load quickly. In doing so, Cloudflare processes your IP address, the date and time of access, the page requested and browser and device information. To fend off automated access, the technically necessary cookies „__cf_bm“ (lifetime 30 minutes) and „cf_clearance“ may be set.

The legal basis is our legitimate interest in a secure, reliable service (Art. 6 (1) (f) GDPR, § 25 (2) no. 2 TDDDG). We have a data processing agreement with Cloudflare pursuant to Art. 28 GDPR. Cloudflare is certified under the EU-US Data Privacy Framework; the transfer to the USA is based on the European Commission’s adequacy decision. More information: https://www.cloudflare.com/privacypolicy/

Visitor statistics (Cloudflare Web Analytics)

To see how often our pages are visited and where visitors come from (for example via Instagram, Google or a booking platform), we use Cloudflare Web Analytics. For this, your browser loads a small script from Cloudflare. It records the page visited, the previously visited page (referrer), browser, operating system, device type, country and loading times. Cloudflare Web Analytics does not set cookies, does not store anything in your browser and does not create user profiles; your IP address is not used for the analysis. We only see aggregated figures, not individual people.

The legal basis is our legitimate interest in designing our offer and our advertising according to demand (Art. 6 (1) (f) GDPR). You can object to this at any time (Art. 21 GDPR), for example with a short message to us or by blocking requests to static.cloudflareinsights.com in your browser or ad blocker. What is said above about Cloudflare applies to data processing on our behalf and transfers to the USA.

Fonts

The fonts on our website (Jost, Work Sans and Parisienne) are hosted on our own server at buchen.fernblick-odenwald.de. When the pages load, your browser does not connect to Google or any other font provider.

Language setting

Our pages are available in German and English. If you switch the language using the „DE | EN“ switch, we save your choice in the cookie fb_lang (value „de“ or „en“ only, lifetime one year) so that the booking and guest pages also appear in your language. We only set this cookie because you explicitly choose it (§ 25 (2) no. 2 TDDDG).

Contact by form, email, phone or WhatsApp

When you contact us via the contact form, by email, phone or WhatsApp, we store your message and the information it contains (e.g. name, contact details, travel plans) in order to deal with your request. We do not pass this data on without your consent.

If your message concerns a booking or enquiry, the legal basis is Art. 6 (1) (b) GDPR (contract or pre-contractual measures); otherwise it is our legitimate interest in answering your message (Art. 6 (1) (f) GDPR). The data stays with us until you ask us to delete it or the purpose no longer applies (e.g. because everything has been settled). Statutory retention periods remain unaffected.

With WhatsApp, the provider WhatsApp Ireland Limited (Meta) also processes data in accordance with its own privacy policy. If you’d rather avoid that, feel free to email us instead.

Your enquiry and booking

On our booking page (buchen.fernblick-odenwald.de) you can see free dates and send us an enquiry. The page is embedded in our website. We use what you enter there (name, email, phone, address, travel dates, number of guests, message) to answer your enquiry, send you an offer and handle your booking – including the related emails (confirmation, invoice, arrival information, payment reminder and a short thank-you after your stay). The legal basis is Art. 6 (1) (b) GDPR.

We keep invoices and booking records for as long as the law requires (§ 147 AO, § 257 HGB). Enquiries that do not lead to a booking are deleted as soon as we no longer need them.

We synchronise our availability with booking platforms such as Airbnb or Booking.com via calendar files. Only booked periods are transferred, no data about you.

Your guest page, online check-in and registration form

After booking, you receive a personal link to your guest page. There you will find your booking, payment status, information about arrival and the house, tips for the area, and you can check in online. To protect your data, we first ask for your surname or email address. We then set a technically necessary cookie so that you stay logged in on this device for 30 days (§ 25 (2) no. 2 TDDDG).

During online check-in we ask for the information required for the registration form under §§ 29, 30 of the German Federal Registration Act (BMG) (including name, date of birth, nationality, address, arrival and departure dates, fellow travellers and, for foreign guests, the number of the identity document). We are legally obliged to do so (Art. 6 (1) (c) GDPR). Voluntary information such as arrival time or car registration number is only used to prepare for your arrival. We store the registration data encrypted. We keep the registration form for one year from your departure date and delete it within three months thereafter (§ 30 (4) BMG). It is only passed on to authorities that are legally entitled to request it.

Online payment (Stripe)

If you pay for a booking or a gift voucher online, we redirect you to a payment page of our payment provider Stripe: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. You enter your payment details (e.g. card number) directly with Stripe – we do not receive them.

We send Stripe the amount, the booking or voucher number and your email address. Stripe tells us whether the payment was successful, which payment method you used and what fee applies. The legal basis is Art. 6 (1) (b) GDPR (performance of a contract); where Stripe fulfils legal obligations (e.g. to prevent money laundering and fraud), Art. 6 (1) (c) and (f) GDPR.

Stripe may also transfer data to Stripe, Inc. in the USA. Stripe is certified under the EU-U.S. Data Privacy Framework and additionally uses EU standard contractual clauses. If you pay with PayPal, Klarna, Apple Pay or Google Pay, the privacy notices of the respective provider also apply. More about data protection at Stripe: https://stripe.com/en-de/privacy

Gift vouchers

If you order a gift voucher, we process your name, your email address and (optionally) your postal address, as well as the name, greeting and, if provided, the email address of the recipient, in order to issue, send and later redeem the voucher (Art. 6 (1) (b) GDPR). We keep this data until the voucher has been redeemed or has expired, and beyond that where tax retention obligations apply (Art. 6 (1) (c) GDPR).

Who receives your data

On our side, only the two of us – Murat and Nadja Bayram – see your data, to the extent we need it for your enquiry or booking. In addition, service providers process data on our behalf, each under a data processing agreement pursuant to Art. 28 GDPR: our host and email provider (netcup GmbH) and Cloudflare. For online payments, Stripe also receives the necessary data (payment processing for online payments, see above). We only pass your data on to others where the law permits or requires it (e.g. registration form to authorities, documents to our tax advisor).

Transfers to the USA

With Cloudflare and Stripe, data may be transferred to the USA. Cloudflare is certified under the EU-US Data Privacy Framework, for which the European Commission has found an adequate level of data protection (Art. 45 GDPR). Stripe, Inc. is also certified under the EU-U.S. Data Privacy Framework and additionally uses standard contractual clauses. For WhatsApp, Meta’s terms apply.

How long we store data

We only store your data for as long as necessary for the respective purpose (Art. 5 (1) (e) GDPR). If you ask us to delete your data or withdraw your consent, we will delete it – unless we have to keep it for legal reasons (e.g. tax or commercial retention periods, registration form). In that case we delete it as soon as those reasons no longer apply.

As of: November 2026