Privacy Policy

(Non-binding translation – German version legally binding)

Effective: May 2025 Important Notice: This English version of the Privacy Policy is provided for convenience only. In case of discrepancies or legal interpretation, only the original German version is legally binding.

1. Introduction Welcome to our booking platform (the “Platform” or “we”). This Privacy Policy explains how we collect, process, and protect your personal data when you use our services. Providing your personal data is voluntary but necessary to use our services.

2. Data Controller Data controller pursuant to the GDPR: Christof Wallon Email: cwallon@t-online.de Location: Germany

3. Data We Collect We collect personal data when you: submit a booking inquiry or make a reservation, register or create a customer account, contact customer service, use our website (e.g. via cookies or analytics). Types of data collected may include: Name, address, telephone number, email address Payment information (via third-party payment providers) IP address, browser type, device information Booking and stay-related information

4. Purpose and Legal Basis for Processing We process your personal data for the following purposes: To process bookings and provide customer service To fulfill contractual obligations (Art. 6(1)(b) GDPR) To communicate with you (e.g. booking confirmation, service updates) For IT security and fraud prevention To meet legal obligations (Art. 6(1)(c) GDPR) For analytics, service improvement and legitimate interests (Art. 6(1)(f) GDPR)

5. Disclosure to Third Parties We only share your data with third parties where necessary for service provision or required by law, including: Payment service providers IT and hosting providers Government or law enforcement authorities (if legally required)

6. Cookies and Tracking Technologies Our platform uses cookies and similar technologies to: Ensure functionality Analyze usage and performance Personalize content and advertisements You can manage your preferences via our cookie banner. Marketing and tracking cookies are only activated with your prior consent (opt-in).

7. Your Rights Under the GDPR You have the following rights under the GDPR: Access your personal data Correct inaccurate or incomplete data Delete your data, where legally permitted Restrict data processing Withdraw your consent at any time (e.g. for marketing) Data portability – receive your data in a structured format Object to processing based on legitimate interests To exercise your rights, please contact: Christof Wallon – cwallon@t-online.de

8. Data Retention We retain personal data only as long as necessary for the above purposes or as legally required. Thereafter, data is deleted or anonymized.

9. Data Transfers Outside the EU Data transfers to countries outside the EU (third countries) only occur where adequate safeguards exist, e.g. EU standard contractual clauses with providers like Google or Meta.

10. Children’s Privacy Our platform is not intended for persons under 16 years of age. We do not knowingly collect data from minors.

11. No Sale of Personal Data We do not sell your personal data. Use of ad networks (e.g. Google, Meta) may involve tracking for which we request your prior consent. No direct personal data is shared with these services.

12. Changes to This Privacy Policy We may update this policy. In case of significant changes, we will notify you via the platform or email. Continued use of the service after changes constitutes acceptance. The latest version is always available on our website.

13. Contact For questions or to exercise your rights, please contact: Christof Wallon Email: cwallon@t-online.de