Privacy policy

1. Controller

Controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR):
Kevin Deobald, Ferienwohnungen Eckermann, Brauhausgasse 13, 99423 Weimar
Phone: +49 3643 7737060 · E-mail: mail@eckermann-weimar.de

2. Visiting the website

When you visit the website, the web server processes technically necessary data (IP address, date and time, page accessed, amount of data transferred, browser and operating system) in server logs. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and stable operation of the website. The transmission is encrypted via TLS.

Fonts and all other components of the website are delivered from our own server. No analytics or advertising services are used, and no third-party content is loaded.

3. Cookies and consent

We only use technically necessary cookies: a session cookie so that forms (contact, guest portal login) work securely – it is deleted when you close your browser or when the session expires – and the cookie “einwilligung”, which stores your choice in the cookie notice for six months (content: version, selected categories, time; no identifier for recognising you). The legal basis is Section 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR.

We do not currently embed content from other providers (such as maps or videos). Should we do so in future, we will only load it after you have given your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR); until then, a placeholder is shown in its place.

You can change or withdraw your choice at any time via the “Cookie settings” link at the bottom of every page.

4. Contact form and e-mail

When you write to us, we process the information you provide (name, e-mail address, phone number, message) in order to respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual enquiry) or Art. 6(1)(f) GDPR. The data is deleted once it is no longer required for processing your enquiry and no retention obligations apply.

5. Online booking

For bookings, we forward you with your travel dates (arrival and departure) to our booking system RoomRaccoon (RoomRaccoon B.V., Netherlands). There you enter your booking details; the RoomRaccoon privacy notice also applies. The legal basis is Art. 6(1)(b) GDPR.

For your stay, we process your contact details and address, the travel period, the number of guests and the information you provide about your stay. The legal basis is Art. 6(1)(b) GDPR (contract) and Art. 6(1)(c) GDPR (legal obligations, such as the registration requirement under the Federal Registration Act (Bundesmeldegesetz) and tax-related retention). We retain invoice data for up to ten years in accordance with commercial and tax law retention periods.

6. Online payment

When you pay online with us, for example when purchasing a gift voucher, we use the following payment services.

If you pay online by card or direct debit, the payment is processed via Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland). You enter your payment details directly with Stripe; we only receive confirmation of the payment and the information required for accounting. The legal basis is Art. 6(1)(b) GDPR. The Stripe privacy notice also applies: stripe.com/de/privacy.

If you pay with PayPal, the payment is processed via PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg). For this purpose, we transmit to PayPal the amount, the booking or order number and a short description of the service; you enter your login and payment details directly with PayPal. We only receive confirmation of the payment and the information required for accounting. The legal basis is Art. 6(1)(b) GDPR. The PayPal privacy notice also applies: paypal.com/de/legalhub/paypal/privacy-full.

7. Culture levy (Kulturförderabgabe)

For the culture levy (Kulturförderabgabe) of the City of Weimar, we are obliged to record the number of guests and overnight stays subject to the levy and to declare them to the city (Art. 6(1)(c) GDPR).

8. Your rights

You have the right of access, rectification, erasure, restriction of processing and data portability, as well as the right to object to processing based on Art. 6(1)(f) GDPR. You may also lodge a complaint with a data protection supervisory authority, such as the Thuringian State Commissioner for Data Protection and Freedom of Information (Thüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheit).