Legal

Privacy Policy

Standard GDPR template. Any remaining fields marked [to be added] must be completed before going live; the processor details depend on the chosen hosting and form solution.

1. Data controller

Kaefer-Albrecht GbR
Grosostraße 24, 82166 Gräfelfing, Germany
Email: villacavaion@outlook.com

2. Hosting

This website is hosted with [Ben-to-fill: hosting provider, ideally EU/EEA]. When the site is accessed, the server processes technically necessary access data (server log files: IP address, date/time, page requested, browser/OS). The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure, stable operation). A data-processing agreement (DPA) is in place with the host: [Ben-to-fill: confirm DPA].

3. Enquiry form

When you use the enquiry form, we process the data you provide (name, email, phone if given, preferred house, travel dates, number of guests, message) solely to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and your consent under Art. 6(1)(a) GDPR.

Transmission: The form is transmitted via the service Web3Forms (processor): your details are sent to Web3Forms, which forwards the enquiry by email to villacavaion@outlook.com. In doing so, the data you provide and, for technical reasons, your IP address are processed. [TODO(Ben): Web3Forms is US-based — for full GDPR compliance, consider switching to an EU-hosted form endpoint before going live; add the legal basis for the third-country transfer and a DPA or standard contractual clauses.]

Retention period: We store your enquiry data until it is no longer required to handle the enquiry, but at most [to be added: e.g. 6 months] or until statutory retention periods expire.

4. Direct booking (Smoobu)

For direct booking, we link to the booking calendar of Smoobu (Smoobu GmbH, Berlin, EU). The booking calendar is not embedded in our website: no Smoobu widget is loaded on our pages and no connection to Smoobu is established. Only when you actively click “Check availability & book direct” does the Smoobu booking page open in a new browser tab on Smoobu’s own website (booking.smoobu.com).

From that point on, Smoobu’s privacy policy applies; Smoobu then processes your IP address for technical reasons and, as part of a booking, the booking data you enter. The legal basis for handling the booking is Art. 6(1)(b) GDPR. Further information can be found in Smoobu’s privacy policy: [https://www.smoobu.com/datenschutz].

5. Cookies, analytics & maps

This website uses no analytics or marketing cookies. No tracking services, no external map embeds (the area map is our own, cookie-free SVG graphic) and no social plugins are included. [to be added: if Google Fonts are later self-hosted locally instead of via CDN, or a map service is added, adjust here.]

Note: the fonts are currently loaded via Google Fonts. Self-hosting the fonts locally is more privacy-friendly — [to be added: decide before going live].

6. Your rights

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You may withdraw any consent given at any time with effect for the future. You also have the right to lodge a complaint with a supervisory authority.

7. Contact for data-protection requests

Email: villacavaion@outlook.com

Note: Standard template — review legally before publication and adapt to the services actually used (host, form backend, font integration).