Privacy Policy

The protection of your personal data is of the highest priority for us. We process personal data exclusively in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR).

1. Controller

LohApartments
Sabrina Wauker and Christian Herbst
Zum Loh 13
21274 Undeloh, Germany
E-mail: lohapartments@gmail.com

2. Data Protection Officer

There is no legal obligation to appoint a data protection officer.

3. Purposes, Legal Bases and Mandatory Information

  • Initiation and execution of contracts (Art. 6(1)(b) GDPR)
  • Compliance with legal obligations (Art. 6(1)(c) GDPR)
  • Legitimate interests (Art. 6(1)(f) GDPR)
  • Processing based on your consent (Art. 6(1)(a) GDPR)

Certain information is required to fulfill the booking contract. Without these data (e.g., name, contact details, payment information), booking is not possible.

4. Hosting

This website is hosted by:
IONOS SE
Elgendorfer Straße 57
56410 Montabaur, Germany

We have a data processing agreement with IONOS in accordance with Art. 28 GDPR. Server log files (IP address, date, time, browser type) are processed for security purposes. Legal basis: Art. 6(1)(f) GDPR. Retention periods: Log files are anonymized or deleted after 90 days.

5. Booking Management via Smoobu

Provider: Smoobu GmbH
Pappelallee 78/79, 10437 Berlin, Germany

Categories of processing: master data, contact data, booking/travel data, invoice data.
Legal basis: Art. 6(1)(b) GDPR (performance of contract).
Data processing agreement pursuant to Art. 28 GDPR.

6. Rights of Data Subjects

You have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to withdraw consent at any time for the future (Art. 7(3) GDPR)

Complaints can be submitted to the competent supervisory authority:
Data Protection Officer of Lower Saxony
Prinzenstraße 5, 30159 Hanover, Germany

7. Cookies

Technically necessary cookies: Art. 6(1)(f) GDPR.
Additional cookies and external services are only used after prior consent via our consent management tool (Art. 6(1)(a) GDPR).
Tool name and description: Cookiebot (resource and consent management)

8. Web Analytics with Plausible Analytics

Provider: Plausible Insights OÜ, Estonia
Processing is based on legitimate interests (Art. 6(1)(f) GDPR).
Plausible does not store full IP addresses and operates cookie-free.

9. Use of Elfsight Chatbot

Provider: Elfsight LLC, Paronyana 19/3, 0015 Yerevan, Armenia.
Processed data:

  • IP address – Legal basis: Consent (Art. 6(1)(a) GDPR)
  • Browser type – Legal basis: Consent (Art. 6(1)(a) GDPR)
  • Time of interaction – Legal basis: Consent (Art. 6(1)(a) GDPR)
  • Entered content – Legal basis: Consent (Art. 6(1)(a) GDPR)

Transfer to third country: Armenia – standard contractual clauses according to Art. 46 GDPR. Use of SCC has been verified.

More information: https://elfsight.com/privacy-policy/

10. External Links to Medium

Provider: A Medium Corporation, San Francisco, USA.
Data processed when clicked:

  • IP address – Legal basis: adequacy decision or standard contractual clauses (Art. 44 ff. GDPR)
  • User interaction/referrer – Legal basis: adequacy decision or standard contractual clauses (Art. 44 ff. GDPR)

Privacy Policy: https://policy.medium.com

11. Retention Periods

Data is only stored as long as necessary for contract fulfillment or legal retention periods.
Examples:
- Log files: 90 days
- Chat content: 6 months
- Analytics reports: 12 months
Tax retention: up to 10 years.

12. Automated Decision-Making

Automated decision-making or profiling within the meaning of Art. 22 GDPR does not take place.

13. Data Security

We implement technical and organizational measures in accordance with Art. 32 GDPR. Data transmission is encrypted (SSL/TLS).

14. Changes

We reserve the right to update this privacy policy to adapt to changes in legal requirements or technical developments.

Effective date: February 2026