Privacy Policy

The party responsible for data processing on this website is Vermietungen Melanie Pelke. For any questions regarding data protection you can reach us by email at melaniepelke@arcor.de.

When you make a booking through this website, we process the following personal data:

• First and last name, email address, phone number
• Home address (for invoicing)
• Stay details (arrival and departure, number of guests)
• Payment data — processed exclusively via Stripe
• Messages you send us via the contact form or by email
• Data for the statutory guest registration pursuant to § 30 Bundesmeldegesetz (German Federal Registration Act), where required

• Art. 6(1)(b) DSGVO (GDPR) — performance of a contract (accommodation contract).
• Art. 6(1)(c) DSGVO (GDPR) — legal obligation (registration duty, accounting, tax law).
• Art. 6(1)(f) DSGVO (GDPR) — legitimate interests (IT security, service improvement, fraud prevention).
• Art. 6(1)(a) DSGVO (GDPR) — consent (marketing, optional cookies).

We only pass on your data to the following processors, and only to the extent necessary:

• Stripe Payments Europe, Ltd. — payment processing
• Supabase Inc. — hosted database (servers in the EU)
• Vercel Inc. — website hosting
• Resend Inc. — sending of booking confirmations and service emails
• Competent registration authority at the apartment location — guest registration pursuant to the Bundesmeldegesetz

Booking and invoicing data are retained for 10 years pursuant to § 147 of the German Fiscal Code (AO). General communication with guests is deleted 2 years after the stay. Marketing consents remain valid until they are revoked.

We use exclusively technically necessary cookies (session, language preference). We only set analytics and marketing cookies after your explicit consent via the cookie banner. You can revoke your consent at any time.

This website offers a chat assistant that answers enquiries automatically using artificial intelligence; it is labelled accordingly in the chat window. The content of your chat messages is processed to answer your enquiry and is transmitted for this purpose to our technical service providers OpenAI and/or Anthropic (USA) as processors (standard contractual clauses pursuant to Art. 46 DSGVO). Please do not enter sensitive personal data in the chat. Chat histories are deleted after 12 months at the latest. If you leave your contact details in the chat, we use them exclusively to respond to your enquiry. The legal basis is Art. 6(1)(f) DSGVO (legitimate interest in responding to enquiries) or (b) (pre-contractual measures).

The reviews displayed on our pages come from two sources: overall ratings taken from booking platforms (e.g. Airbnb) — these are marked as such — as well as reviews from guests who have demonstrably booked through this website and completed their stay. A review can only be submitted via a personal link that guests receive after check-out; reviews without a prior stay are not possible.

You have the right at any time to:

• access to the data we store about you (Art. 15 DSGVO)
• rectification of inaccurate data (Art. 16 DSGVO)
• erasure of your data (Art. 17 DSGVO)
• restriction of processing (Art. 18 DSGVO)
• data portability (Art. 20 DSGVO)
• object to the processing (Art. 21 DSGVO)

Please address requests to melaniepelke@arcor.de. You can lodge a complaint with the competent supervisory authority (the data protection commissioner of the respective federal state).

This website is transmitted via an encrypted HTTPS connection (TLS). All entries in booking and contact forms are transmitted end-to-end encrypted.