Privacy policy

This is a translation for your convenience. In case of doubt, the German version applies.

1. Controller

Helga Christofori, Ferienwohnungen Rainrod-Alsfeld, Außenliegend 3, 36318 Schwalmtal, Germany
Phone: +49 176 60603237
Email: anfrage@ferienwohnungen-rainrod-alsfeld.de

2. Overview

We only collect data that is needed to run this website or that you give us yourself. This website sets no cookies, has no contact form and loads no fonts from third-party servers. Visits are only measured if you expressly consent (section 4).

3. Hosting, technical support and server log data (Cloudflare)

This website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (Cloudflare Workers). In the EU, Cloudflare is represented by Cloudflare Germany GmbH, Munich. Technical support for the website is provided on behalf of the controller by Sandro Christofori, who manages the Cloudflare account for this purpose. Cloudflare acts as a processor; a data processing agreement under Art. 28 GDPR is in place.

When you open a page, Cloudflare processes the connection data needed to deliver and protect it: IP address, date and time, the page requested, browser and device information, and the previously visited page. To protect against automated attacks, Cloudflare runs a short check script that evaluates browser characteristics to tell people from bots. This access to your device is strictly necessary for secure operation (Section 25(2) No. 2 TDDDG). We do not store any server log files containing IP addresses ourselves.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and fast operation of the website. Where data is transferred to the USA, this is based on the EU-US Data Privacy Framework, under which Cloudflare is certified, and additionally on standard contractual clauses.

4. Visitor statistics with your consent (Cloudflare Web Analytics)

On your first visit, a small notice asks whether we may count visits to our website. Only if you tap "Allow" does the page load the Cloudflare Web Analytics script. If you decline or make no choice, it is not loaded and no measurement takes place.

After your consent, the script reads technical details from your browser when a page is opened (page visited, referring page, browser and device type, loading times) and sends them to Cloudflare. It sets no cookies and creates no user profiles. Your IP address is only used to determine your country and is not stored. We only see aggregated statistics, never individual visitors. The provider is Cloudflare, Inc.; transfers to the USA are safeguarded as described in section 3.

The legal basis is your consent under Section 25(1) TDDDG and Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future, using the "Privacy settings" link at the bottom of the home page or here: Change setting.

We store your choice ("allowed" or "declined") in your browser's local storage so the notice does not appear on every visit. This entry only contains the choice and the date, is not sent to us and is disregarded after 12 months, after which we ask again. Storing the choice is strictly necessary (Section 25(2) No. 2 TDDDG, Art. 6(1)(c) GDPR).

5. Email forwarding

Messages sent to our email address are forwarded via Cloudflare Email Routing to the mailbox of the controller, Helga Christofori. Cloudflare processes the sender address, the recipient and the content of the message for this purpose but does not store the message permanently. The legal basis is Art. 6(1)(b) and (f) GDPR.

6. Contact by phone, WhatsApp or email

When you call us, write to us or ask about a booking, we process your details (for example name, company, phone number, dates and number of guests) to handle your request and rent out the accommodation. The legal basis is Art. 6(1)(b) GDPR, and Art. 6(1)(f) GDPR for general enquiries. We delete the data when it is no longer needed and no legal retention obligations apply (see section 7).

The "WhatsApp" and "Call" buttons are plain links. Your WhatsApp or phone app only opens when you tap them. If you write to us on WhatsApp, WhatsApp Ireland Limited, Dublin, Ireland, processes your phone number and communication metadata, such as the time of the message. A transfer to Meta Platforms, Inc. in the USA cannot be ruled out; it is based on the EU-US Data Privacy Framework. Message contents are end-to-end encrypted. If you prefer not to use WhatsApp, you can reach us by phone or email.

7. Guest data

For your stay and the invoice, we process name, address, company, dates of stay, number of guests and payment details. The legal basis is Art. 6(1)(b) GDPR. Under German tax law we must keep invoices and accounting records for 8 years; the legal basis for this is Art. 6(1)(c) GDPR. After that, we delete the data.

8. External links

The links to Google Maps (route planner) are plain links, not embedded content. A connection to Google Ireland Limited, Dublin, is only established when you click them. Google's privacy policy applies there.

9. Encryption

This website is delivered over an encrypted connection (HTTPS).

10. Your rights

You have the right of access, rectification, erasure, restriction of processing and data portability under Art. 15 to 20 GDPR. You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). Please use the contact details above.

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Hessian Commissioner for Data Protection and Freedom of Information (Hessischer Beauftragter für Datenschutz und Informationsfreiheit), Postfach 3163, 65021 Wiesbaden, Germany.

11. Right to object (Art. 21 GDPR)

Where we process your data on the basis of Art. 6(1)(f) GDPR, you may object to this processing at any time on grounds relating to your particular situation. We will then stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims. An informal message to the contact details above is sufficient.

12. Changes

We update this policy when the website or the law changes. Last updated: October 2026.