privacy policy
What data is processed when you use this website and when you book, why, and what rights you have.
Please note: This is a translation provided for your convenience. Only the German version of this document is legally binding. Read the German original.
Version: September 2026
Controller
The controller for the processing of personal data on this website is:
Philipp Rees
Ferienhaus ReesL
Silberbergstraße 35
79254 Oberried
Germany
Phone: 07602 9209808
Email: hallo@reesl.de
General information
The protection of your personal data matters to us.
We treat personal data confidentially and in accordance with the statutory data protection provisions, in particular the General Data Protection Regulation (GDPR), and with this privacy policy.
This privacy policy tells you which personal data is processed when you use our website and when you make a booking, for what purposes this happens, and what rights you have.
Personal data means any data by which you can be personally identified.
Visiting our website
When you access our website, the web server processes technically necessary information.
This may include in particular:
- IP address of the accessing device
- date and time of access
- pages and files accessed
- volume of data transferred
- browser used
- operating system used
- referrer URL
- information on successful retrieval
This processing serves to provide the website technically, to ensure the security and stability of the service and to detect possible technical faults.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing our website securely and in a technically reliable manner.
The website is hosted with ALL-INKL.COM. Insofar as personal data is processed in the course of hosting, this serves the technical provision and protection of the website.
Hosting
Our website runs on servers of our hosting provider ALL-INKL.COM, Neue Medien Münnich.
In the course of hosting, technical access data and server log data in particular may be processed.
This processing serves the secure and reliable provision of the website and the detection and prevention of technical attacks.
The legal basis is Art. 6(1)(f) GDPR.
No use of analytics or marketing services
We currently do not use any of the following on this website:
- Google Analytics
- Matomo
- comparable analytics or tracking services
- advertising tracking services
- newsletter systems
There is therefore no statistical analysis of usage behaviour through such tools.
Cookies and technically necessary storage
Our website may use technically necessary cookies or comparable technologies insofar as these are required to operate the website or to provide a function you have expressly requested.
Where cookies or comparable technologies are exclusively technically necessary, they are used on the basis of the statutory provisions.
For non-essential cookies or comparable technologies, your consent is obtained before they are used, where this is required.
The legal basis for accessing information on your device is Section 25 TDDDG. Insofar as personal data is processed, the legal basis is additionally governed by Art. 6 GDPR.
Bookings via Smoobu
We use Smoobu to manage and process bookings.
Smoobu provides a software solution for managing holiday accommodation and bookings. In the course of a booking, the following data in particular may be processed:
- first and last name
- postal address
- email address
- telephone number
- booking period
- Number of guests
- details of the accommodation booked
- payment and invoicing information
- other details you provide during the booking
This processing serves to carry out the booking, to communicate with you, to prepare and carry out the stay and to fulfil legal obligations.
The legal basis is in particular Art. 6(1)(b) GDPR. Where statutory retention obligations exist, processing takes place on the basis of Art. 6(1)(c) GDPR.
Insofar as Smoobu processes personal data on our behalf, this takes place on the basis of a data processing agreement pursuant to Art. 28 GDPR.
Further information on data processing by Smoobu can be found in Smoobu's privacy policy.
On the home page and on the pages of both apartments we embed a booking or calendar widget from Smoobu. This widget is only loaded after you have expressly consented to loading external services. Before you consent, no connection whatsoever is made to Smoobu.
When the widget loads, your IP address is transmitted to Smoobu. For technical reasons the widget additionally loads a program library via the content delivery network „cdnjs“ operated by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Your IP address is transmitted to that provider as well. Any transfer to the USA takes place on the basis of the European Commission's standard contractual clauses.
The legal basis for loading the widget and the associated access to information on your device is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw your consent at any time with effect for the future via the „Cookie settings“ link in the footer.
Payment processing via Stripe
We use Stripe to process online payments.
When you make a payment via Stripe, the data required for processing the payment is transmitted to Stripe. This may include in particular your name, email address, payment information, invoicing information, transaction data and technical information.
Stripe processes this data to carry out and secure the payment, to prevent fraud and to fulfil legal obligations.
Processing takes place for the performance of the contract pursuant to Art. 6(1)(b) GDPR and, where legal obligations are concerned, on the basis of Art. 6(1)(c) GDPR.
Depending on the payment method chosen, Stripe may involve further payment service providers or financial institutions.
Further information on the processing of personal data by Stripe can be found in Stripe's privacy policy.
Communication by email and telephone
If you contact us by email or telephone, we process the personal data you provide insofar as this is necessary to deal with your enquiry.
This may include in particular:
- name
- email address
- telephone number
- details of your enquiry
- details of a desired or existing booking
This processing serves to handle your enquiry and, where applicable, to carry out pre-contractual measures or an existing contract.
The legal basis is Art. 6(1)(b) GDPR insofar as your enquiry relates to a booking or a possible conclusion of contract. In other cases the legal basis may be Art. 6(1)(f) GDPR.
Contact form
No contact form is currently used on this website.
If you would like to contact us, you can do so using the contact options given on the website.
Newsletter
We do not currently offer a newsletter and do not use any newsletter distribution system.
Google Maps
Google Maps is not embedded on this website. We merely provide a link to Google Maps to make it easier for you to find our location and route.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
As long as you do not click the link, no data is transmitted to Google. Only when you click it do you leave our website, and personal data, in particular technical data and possibly location or usage information, may be transmitted to Google.
Further information on data processing by Google can be found in Google's privacy policy.
Fonts
The fonts used on this website are served locally from our own web server.
No connection is therefore made to external font servers such as Google Fonts.
Your IP address is therefore not transmitted to an external provider merely in order to load the fonts used.
YouTube
No YouTube videos are currently embedded on this website.
Direct embedding of Instagram content is not currently part of this website.
Should Instagram content be embedded in future, this privacy policy will be updated accordingly.
No disclosure for advertising purposes
As a matter of principle, we do not disclose personal data to third parties for advertising purposes.
Disclosure takes place only where it is necessary for the performance of a contract, where a legal obligation exists, where there is a legitimate interest, or where corresponding consent has been given.
Statutory retention obligations
We store personal data only for as long as is necessary for the respective purpose.
In addition, we may be legally obliged to retain certain data for a specified period. This concerns in particular retention obligations under tax and commercial law.
Once the respective retention periods have expired, the data is deleted unless another legal basis for further storage exists.
Your rights
You have the following rights in relation to us concerning your personal data:
- right of access pursuant to Art. 15 GDPR
- right to rectification pursuant to Art. 16 GDPR
- right to erasure pursuant to Art. 17 GDPR
- right to restriction of processing pursuant to Art. 18 GDPR
- right to data portability pursuant to Art. 20 GDPR
- right to object to certain processing pursuant to Art. 21 GDPR
Where processing is based on your consent, you may withdraw it at any time with effect for the future.
The lawfulness of processing carried out up to the point of withdrawal remains unaffected.
To exercise your rights, an informal message to the following address is sufficient:
Email: hallo@reesl.de
Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data.
The competent supervisory authority may in particular be the data protection authority responsible for our place of business:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI BW)
Königstraße 10a
70173 Stuttgart, Germany
Germany
Further information and contact options can be found on the website of the LfDI Baden-Württemberg.
Data security
We use appropriate technical and organisational security measures to protect your personal data against loss, destruction, manipulation and unauthorised access.
Our security measures are continuously adapted in line with technical developments and legal requirements.
Updates to this privacy policy
We reserve the right to amend this privacy policy if the technical circumstances, the services we use or the legal requirements change.
The current version published on this website applies in each case.
Version: September 2026