Privacy Policy
1. Controller
The controllers responsible for processing personal data on this website are:
Norbert Heidl
Behnsrade 9
21031 Hamburg
Germany
Email: info@casa-pano.eu
Phone: +49 40 7134714
2. Hosting and server log files
When this website is accessed, the hosting provider processes technically necessary information, in particular the IP address, date and time of access, requested pages or files, referrer URL, browser type and version, operating system and, where applicable, additional technical log data.
This processing is necessary to provide the website securely and reliably, to analyse errors and to prevent misuse. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and uninterrupted operation of this website.
The specific hosting provider, its contact details and the retention period for server log files still need to be added here.
3. Contact and booking enquiries via Formspree
We use Formspree to transmit contact and booking enquiries. When you submit our contact form, the information you provide, in particular your name, email address, telephone number, requested travel dates, number of guests and message, is transmitted to Formspree and processed there for the technical transmission and handling of your enquiry.
The processing is carried out to respond to your enquiry and to take pre-contractual steps at your request in accordance with Art. 6(1)(b) GDPR. Where information is provided voluntarily, the processing may additionally be based on Art. 6(1)(f) GDPR or on your voluntary submission of the information.
The recipient and processor is Formspree. Where personal data is processed outside the European Economic Area, the provider states that appropriate safeguards, in particular the European Commission’s Standard Contractual Clauses, may be used.
We retain the transmitted data only for as long as necessary to process your enquiry and, where applicable, to manage a booking, or for as long as statutory retention obligations apply.
4. Google reCAPTCHA
We use Google reCAPTCHA to protect our contact form against automated submissions, spam and misuse. The service is provided by Google.
reCAPTCHA analyses certain technical and usage-related information to determine whether an interaction is being carried out by a person or by an automated system. This may include the IP address, browser and device information, interactions with the website and security-related information. reCAPTCHA also uses the _grecaptcha cookie.
The purpose of the processing is to protect the security of our website and to prevent spam, fraud and misuse. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to protect our website and contact form from abusive and automated use.
Google processes data generated in connection with reCAPTCHA in accordance with the contractual and privacy terms applicable to the service. Processing may also take place outside the European Economic Area. Appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, may be used for such transfers.
5. Google Calendar
We use an embedded Google Calendar to display the current availability of Casa Pano. When the calendar is loaded, your browser establishes a connection to Google servers. In particular, your IP address, browser and device information and other technical usage data may be transmitted to Google.
The calendar is embedded to provide our guests with a convenient and up-to-date overview of availability. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the user-friendly and current presentation of our holiday home’s availability.
No guest names or other personal information are published in the publicly embedded availability calendar.
Processing by Google may also take place outside the European Economic Area. Appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, may be used for such transfers.
6. Language selection and local storage
To display the website automatically in German or English and to remember a language selected manually by you, we store the language preference locally in your browser. This information is used exclusively to display the website in your preferred language.
7. Legal bases
Depending on the processing activity, we rely in particular on Art. 6(1)(b) GDPR for handling booking and contact enquiries and on Art. 6(1)(f) GDPR for the secure, stable and user-friendly operation of this website.
8. Retention period
Personal data is retained only for as long as necessary for the relevant purpose or for as long as statutory retention obligations apply. It is then deleted or anonymised.
9. Your rights
Under the GDPR, you have rights including access to your stored personal data, rectification of inaccurate data, erasure, restriction of processing, data portability and objection to certain processing activities.
You also have the right to lodge a complaint with a data protection supervisory authority.
10. External links
Our website may contain links to external websites, for example Google Maps or booking platforms. The privacy policies of the respective providers apply to data processing on those external websites.
11. Updates to this privacy policy
We reserve the right to amend this privacy policy if technical, legal or organisational circumstances change.