Privacy Policy We would like to inform you below about the processing of personal data in the context of using our website. Controller The controller responsible for this website is: Kay Messner, Matthias-Claudius-Str. 11, 24939 Flensburg, Germany. What data is processed? Legal basis for data processing In order to provide you with our website and the related services, we process personal data on the basis of the following legal grounds: Consent (Art. 6 (1) lit. a GDPR) For the performance of contracts (Art. 6 (1) lit. b GDPR) On the basis of a balancing of interests (Art. 6 (1) lit. f GDPR) For compliance with a legal obligation (Art. 6 (1) lit. c GDPR) If personal data is processed on the basis of your consent, you have the right to withdraw such consent at any time with effect for the future. If we process data on the basis of a balancing of interests, you have the right to object to the processing of personal data concerning you in accordance with Art. 21 GDPR. Access data When you visit our website, personal data is processed in order to display the content of the website on your device. For the site to be displayed, the IP address of the device you are using must be processed, along with further information about your browser. For this purpose, and to ensure the security of our IT systems, the following data is logged on the basis of a balancing of interests: IP address of the accessing computer (for a maximum of 7 days) Operating system of the accessing computer Browser version Name of the retrieved file Date and time of the request Amount of data transferred Referring URL The IP address is deleted after no more than 7 days. From the remaining data, no personal reference can be established. These data are also used to analyze errors on our website. Cookies Our website uses cookies. Cookies are small text files stored on your device through your browser. They are necessary to enable certain functions of our website. We use session cookies, which are automatically deleted after the end of your visit. In some cases, persistent cookies are also used, which are not automatically deleted when you close your browser. You can disable the use of cookies in your browser settings; however, please note that doing so may limit the functionality of our website. The use of cookies is based on a balancing of interests with the aim of making the use of our website as user-friendly as possible. Data processing in connection with our Facebook page We use our Facebook page to provide information about our holiday apartments and to communicate with Facebook users. The technical data processing is carried out by Facebook. For details, please refer to Facebook’s privacy policy. According to the case law of the European Court of Justice, there may be joint responsibility between Facebook and us for certain parts of the Facebook page. Such processing takes place on the basis of agreements on joint responsibility, which can be accessed here: Information on Page Insights data Page Insights Controller Addendum Purposes of processing personal data The above-mentioned data is processed for the operation of our website and to fulfill contractual obligations to our customers, or to protect legitimate interests. If you contact us outside of an existing contractual relationship, we process the data for communication, marketing, and advertising purposes. You may object to the use of your data for advertising at any time. Voluntary information If you provide us with data voluntarily, e.g., through forms, and such data is not required for the fulfillment of contractual obligations, we process such data in the assumption that processing and use of these data is in your interest. Recipients / Disclosure of data Data you provide to us will generally not be passed on to third parties. In particular, your data will not be disclosed to third parties for advertising purposes. However, we may use service providers for the operation of our website and to deliver our services. These service providers may gain access to personal data in the course of their work. We carefully select and monitor our service providers and conclude the necessary agreements on data protection and data security. Data processing outside the European Union If personal data is processed outside the EU, we will inform you of this within this privacy policy. Your rights as a data subject You have the right to obtain information about the personal data we hold about you. You also have the right to rectification, erasure, restriction of processing, and data portability, within the limits of the law. You further have the right to object to the processing of your data where this is based on a balancing of interests. Please direct any requests to the contact details provided in the legal notice (Impressum). Deletion of data We generally delete personal data when it is no longer necessary to retain it. Such a necessity may exist, for example, when the data is still required to fulfill contractual services, or to check, grant, or defend warranty and compensation claims. Statutory retention requirements remain unaffected. Right to lodge a complaint with a supervisory authority You have the right to lodge a complaint with a competent data protection supervisory authority regarding the processing of your personal data. Changes to this privacy policy We will revise this privacy policy whenever there are changes to our website or for other reasons that require an update. The latest version will always be available on this website. Effective date: September 15, 2025