Privacy Policy

Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) is:

Thorsten Schober

110, Duchess Avenue

266313 Singapore

Email: thorsten.schober@gmx.de

Phone: +65 9017 6073

General Information on Data Processing

We process the personal data of our users only to the extent necessary to provide a functional website and our content and services. Processing takes place only with the user's consent or on the basis of a legal basis (Art. 6(1) GDPR).Server Log FilesEach time this website is accessed, the hosting system automatically collects data and information (e.g. IP address, date and time of access, browser used, operating system, page accessed). This data cannot be attributed to specific individuals and is used exclusively to ensure the smooth operation of the website and to improve our services. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR.

Hosting Provider:

netcup GmbH

Emmy-Noether-Str. 10

76131 Karlsruhe, Germany

Fax: +49 721 7540755-9

Email: mail@netcup.de

A data processing agreement pursuant to Art. 28 GDPR has been concluded with netcup, obligating netcup to process our website visitors' data only in accordance with our instructions and in compliance with the GDPR.

Contact

If you contact us by email, contact form, or booking inquiry, the data you provide (name, email address, phone number, message content) will be stored by us for the purpose of processing your inquiry and in case of follow-up questions. We will not disclose this data without your consent. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries)

Booking Data and Statutory Reporting Obligations

As part of a booking, we collect the data necessary for the performance of the contract (name, contact details, arrival and departure dates, number of guests). For guests aged 14 and over, identity card or passport details are additionally collected where legally required (reporting obligation under Spanish law, Ley Orgánica 4/2015 and Real Decreto 933/2021). This data is processed exclusively for the performance of the contract and to fulfil statutory reporting obligations to the relevant Spanish authorities, and is not disclosed to uninvolved third parties. The legal basis is Art. 6(1)(b) and (c) GDPR.

Cookies

This website uses cookies. Cookies are small text files stored on your device. Technically necessary cookies required for the operation of the website are used on the basis of Art. 6(1)(f) GDPR. For all other cookies (e.g. for embedding videos, statistics), we obtain your prior consent via the cookie banner, Art. 6(1)(a) GDPR. You can withdraw or adjust your consent at any time.

Embedded YouTube Videos

This website embeds videos from the YouTube platform. The provider is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, represented by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube in extended privacy mode. According to the provider, this mode means that YouTube does not store information about visitors to this website before they watch the video. However, the extended privacy mode does not necessarily exclude the transmission of data to YouTube partners. As soon as an embedded video is started, YouTube establishes a connection to the Google network regardless of whether a Google account exists. Data such as IP address, browser type, and usage behaviour may be transmitted to Google in the USA and processed there. This processing is based on your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw this consent at any time. Further information on how user data is handled can be found in YouTube's privacy policy at: https://policies.google.com/privacy

External Fonts, Maps, Other Third-Party Services

Your Rights as a Data Subject

You have the right at any time to:

obtain information about the personal data we hold about you (Art. 15 GDPR)

request correction of inaccurate data (Art. 16 GDPR)

request deletion of your data, provided no statutory retention obligations apply (Art. 17 GDPR)

request restriction of processing (Art. 18 GDPR) receive your data in a structured, commonly used format (Art. 20 GDPR)

withdraw any consent given at any time with effect for the future (Art. 7(3) GDPR)

lodge a complaint with a data protection supervisory authority (Art. 77 GDPR)

Storage Period

Personal data is stored only for as long as necessary for the stated purposes or as required by statutory retention periods.