Privacy Policy
As of: 18 October 2026
This page is a translation. The German version is the legally binding one.
1. Controller
Karen Zengerle, Ahornweg 1, 82319 Starnberg, Germany
E-mail: kontakt@karen-zengerle.de, Telephone: +49 160 96206154
2. Basic principle
This website does not use cookies for advertising or analytics purposes and does not use any tracking or statistics services. The fonts of this website are loaded from our own server or from the visitor's device. The embedded booking widget, however, loads its own fonts from Google Fonts (see section 5).
3. Hosting and server log files
This website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. Data may therefore also be processed in the USA. According to its own statements, Netlify relies on the EU-U.S. Data Privacy Framework and the EU Standard Contractual Clauses for this. Further information: netlify.com/privacy. When you visit the site, technically necessary data is processed: IP address, date and time, page requested, browser and operating system. This is necessary to deliver the site and keep it secure (Art. 6(1)(f) GDPR). The log files are stored only for as long as is necessary for the operation and security of the site and are then deleted. Netlify processes this data on our behalf on the basis of a data processing agreement (Art. 28 GDPR) that forms part of Netlify's terms of use.
4. Contacting us
If you contact us by e-mail, telephone or WhatsApp, we process your details (e.g. name, contact details, enquiry) in order to answer your enquiry (Art. 6(1)(b) or (f) GDPR). We delete the data as soon as it is no longer required and no statutory retention obligations apply.
5. Booking (eleven8) and payment (Stripe)
Booking widget. To check availability and make bookings, this website embeds the booking widget of Elevate Software AG (product “ELEV8 Suite”). As soon as you open the booking area of the page, your browser loads the widget from the provider's servers (api.elev8-suite.com). Your IP address is transmitted to the provider in the process, and availability and prices are retrieved. This is necessary for the widget to work (Art. 6(1)(f) GDPR: our interest in a functioning online booking system).
Booking. When you book, you enter data in the widget, for example your name, e-mail address, telephone number, country, travel dates and number of guests. This data is processed to perform the contract (Art. 6(1)(b) GDPR). Elevate Software AG processes it as a processor on our instructions (Art. 28 GDPR) and on the basis of its terms of use. It receives the data solely in order to handle the booking for us. We store booking data for as long as is necessary for the contract and under statutory retention obligations, for example under tax law (Art. 6(1)(c) GDPR).
Payment. Payment at the time of booking is made by credit card via a secure payment dialogue. The payment service provider is Stripe (Stripe Payments Europe, Ltd., Dublin, Ireland). Your payment data is processed to perform the contract (Art. 6(1)(b) GDPR). Stripe may also transfer data to the USA and, according to its own statements, relies on the EU-U.S. Data Privacy Framework and the EU Standard Contractual Clauses for this. Further information: stripe.com/privacy. If you would prefer to pay by bank transfer, write to us; we will then process your details and bank account data to perform the contract.
Fonts in the widget. The booking widget loads fonts from Google Fonts (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Your IP address is transmitted to Google in the process, including to the USA. The legal basis is our legitimate interest in a uniform and legible presentation of the widget (Art. 6(1)(f) GDPR). Further information: policies.google.com/privacy.
6. Google Maps
In the “Contact” section we embed a map from Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When the map is displayed, your IP address is transmitted to Google, including to the USA. Google may set cookies in the process. The map is loaded automatically when the page is opened. The legal basis is our legitimate interest in a clear presentation of our location (Art. 6(1)(f) GDPR). Further information: policies.google.com/privacy.
7. External links
The guest reviews are reproduced as text; no content from Booking.com is embedded. When you click on links to third-party sites, their privacy policies apply.
8. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection to processing (Art. 15–21 GDPR). You can withdraw any consent you have given at any time with effect for the future. To do so, please contact the address given above.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany, P.O. Box 1349, 91504 Ansbach, www.lda.bayern.de. You can also contact the supervisory authority at your place of residence.
9. Data security
This site uses an encrypted connection (HTTPS).