Privacy

Purpose and legal basis

We use your details to answer your request and prepare a possible stay. Booking requests are processed under Article 6(1)(b) GDPR (steps before a contract at your request). Other messages are handled under Article 6(1)(f) GDPR, based on our legitimate interest in responding. Acknowledging the privacy notice in the form is not consent to marketing.

Contacting us is voluntary. We cannot process a form request without its required details. Additional information in the message is optional; please do not send payment details, identity documents or health information. You can also email us directly.

Hosting, email and spam protection

Cloudflare provides the website and request form. It processes connection data such as your IP address, requested URL, time, and technical browser and response information. The IP address is also used to limit form requests and reduce spam. This supports safe, reliable operation under Article 6(1)(f) GDPR.

Resend receives the request content, receipt and email addresses needed for delivery. Your email provider also processes your receipt. The sending service provider is Plus Five Five, Inc. (Resend), 2261 Market Street #5039, San Francisco, CA 94114, USA. Our receiving mailbox uses Gmail (Google). Provider information: Cloudflare privacy policy, Resend privacy policy and Google privacy policy.

Data processing note: Cloudflare and Resend publish their Cloudflare DPA and Resend DPA. The agreements and roles applicable to our accounts, and the Gmail account type, still need confirmation before publication. Selecting a European sending region does not mean all data is processed exclusively in Europe.

Storage and deletion

The website has no booking database. The form server does not deliberately write message contents to application logs. This does not mean there is no storage: the request is saved as an email in our mailbox. Resend may retain email content and delivery information; Cloudflare processes technical operational and security data.

The intended approach is to delete completed enquiries once they are no longer needed. Messages relating to an agreed booking may be needed for longer because of legal obligations or claims. The specific deletion procedures, provider retention periods and any applicable statutory periods still need to be added.

Cookies and local content

The website application uses no analytics or advertising cookies. Photos and fonts are served with the website. When you dismiss the cookie notice, we remember this in your browser tab's session storage; this choice is not sent to us and contains no visitor identifier. Restoring a browser session may preserve it.

Depending on enabled protection features, Cloudflare may use essential security cookies. Cloudflare may also perform technical network diagnostics. The exact account settings need confirmation before publication. Further information: Cloudflare cookies and network diagnostics. External pages such as Google Maps open only when you follow their links.

International processing

The services may process data outside the European Economic Area, including in the United States. The recipients, countries and transfer arrangements applicable to our accounts, and how you can obtain the relevant safeguards, still need to be added. This draft does not promise processing exclusively in Europe.

Your rights

Subject to the legal conditions, you can request access, correction, erasure, restriction and data portability. You can object to processing based on legitimate interests for reasons related to your situation. Where processing relies on consent, you can withdraw it for the future. Contact: yashu.liang@gmail.com.

You can complain to a data protection authority, such as the LfDI Baden-Württemberg. These rights are governed by the GDPR. We review booking enquiries personally; the form does not make automated booking decisions.

Draft updated: 18 September 2026.