Privacy policy
Last updated: October 20261. Data controller
The controller responsible for processing data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
DH Ferientraum Thüringen
Owner: Denny Heim
Wasserwerkstraße 10
Erlau district
98553 Schleusingen
Germany
Email:
Website: www.ferientraum-thueringen.de
If you have any questions about data protection, you can contact us directly at any time using the contact details above.
2. General information on data processing
We process personal data only insofar as necessary to provide our website, handle enquiries, process bookings and accommodation contracts, fulfil statutory obligations or safeguard legitimate interests.
Personal data is processed in particular on the basis of Article 6(1)(a) GDPR where consent has been given, Article 6(1)(b) GDPR to take pre-contractual steps and perform a contract, Article 6(1)(c) GDPR to comply with statutory obligations, and Article 6(1)(f) GDPR to safeguard legitimate interests.
3. Provision of the website and server log files
When you visit our website, the web server automatically processes technically necessary information.
This may include, in particular, the IP address of the device accessing the website, the date and time of access, the page or file requested, the amount of data transferred, the referrer URL, the browser and operating system used, and the HTTP status code.
Processing takes place to provide the website technically, ensure secure and uninterrupted operation, and detect and prevent technical faults, misuse and attacks.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and functional operation of our website.
Server log data is stored only for as long as necessary for technical operation, system security and investigation of potential security incidents. Longer storage occurs only where there is a statutory obligation or a specific security-related reason.
4. Hosting and technical service providers
Our website and our self-operated web analytics are hosted by ALL-INKL.COM – Neue Medien Münnich in Germany.
The hosting provider may process technically necessary data when operating the website.
Additional external technical service providers may be engaged to operate, maintain and technically support our website and IT systems.
Where service providers process personal data on our behalf, this is done in accordance with Article 28 GDPR.
Personal data is processed only to the extent necessary to provide the respective technical service.
5. Cookies and local storage
Our website uses the Joomla content management system.
Technically necessary cookies or similar storage technologies may be used to ensure the website operates correctly and securely. For example, these may be necessary to maintain a session, provide security functions, process forms correctly, save page settings or display the website properly.
Where storing information on your device or accessing information stored there is strictly necessary to provide a digital service you have expressly requested, this takes place on the basis of section 25(2) of the German TDDDG.
Where personal data is processed in this context, processing takes place on the basis of Article 6(1)(f) GDPR.
Cookies or similar technologies that are not technically necessary are used only where there is an appropriate legal basis and, where required by law, your consent has been obtained beforehand.
Your choice under ‘Privacy & statistics’ is stored locally in your browser so that we do not have to ask for your decision on every page visit.
This setting is stored for a maximum of 180 days. You will then be asked for your decision again.
You can change your decision at any time using the privacy settings provided on the website.
You can also delete or block cookies and locally stored data in your browser settings. This may restrict individual website functions.
6. Web analytics with Matomo
We use Matomo on this website to statistically analyse the use of our online services.
We operate Matomo ourselves on our web hosting space. The Matomo installation used for this purpose is available at
analytics.ferientraum-thueringen.de
.
Analytics data is processed on our web hosting space operated by ALL-INKL.COM. This self-hosted installation does not transmit analytics data to the provider of Matomo.
Matomo is activated only after you have given your express consent.
If you select ‘Necessary only’ in the displayed notice, Matomo will not be loaded and no web analytics will be carried out by Matomo.
Matomo is loaded and your use of this website is recorded for statistical purposes only after you select ‘Allow statistics’.
Web analytics may process the following information in particular:
pages visited and the time and duration of the visit,
the order in which pages are visited,
browser, operating system and device type used,
approximate geographical origin,
type of access, for example direct access, a search engine or a referring website,
interest in individual accommodation listings and property pages,
clicks on contact options such as telephone, email or WhatsApp,
clicks on booking, reservation and enquiry functions,
clicks on external booking portals,
downloads of PDF documents.
The IP address is truncated by two bytes before storage and thereby anonymised. Only the anonymised IP address is used to determine the approximate location.
For visits from other websites, the referrer is anonymised so that generally only the domain of the referring website is retained, rather than the full referral path.
After you give consent, Matomo may use its own first-party cookies to associate related page views with a visit and analyse them statistically.
Detailed visit data is automatically deleted after 180 days. Aggregated statistical reports may be retained beyond this period, provided that individual visit histories can no longer be reconstructed from them.
The legal basis for web analytics is your consent under Article 6(1)(a) GDPR.
Where information is stored on or read from your device in this process, this also takes place only with your consent under Section 25(1) TDDDG.
Your decision is stored on your device for a maximum of 180 days.
You can withdraw or renew your consent at any time with effect for the future via ‘Privacy settings’ on our website.
This does not affect the lawfulness of processing carried out before consent was withdrawn.
7. Contact and enquiry forms
If you contact us using a contact or enquiry form provided on our website, we process the information you enter to handle your enquiry.
This may include in particular your name, email address, telephone number, desired accommodation, arrival and departure dates, number of guests, message content and any other information you provide voluntarily.
If your enquiry concerns a possible booking or an existing contractual relationship, processing is based on Article 6(1)(b) GDPR.
Other enquiries are processed on the basis of Article 6(1)(f) GDPR. Our legitimate interest is to handle your enquiry properly and efficiently.
The data is deleted as soon as it is no longer needed to handle the enquiry and no statutory retention requirements or other legitimate grounds for continued storage apply.
8. Communication by email and telephone
If you contact us by email or telephone, we process your information to handle and respond to your enquiry.
This includes in particular your contact details and the information you provide.
Enquiries relating to a booking, the initiation of a contract or an existing contractual relationship are processed on the basis of Article 6(1)(b) GDPR.
Other business communication is processed on the basis of Article 6(1)(f) GDPR. Our legitimate interest is the efficient and reliable handling of our business communication.
We may use IT and email service providers for the technical provision and handling of our business communication. Where they process personal data on our behalf, this is done in accordance with data protection requirements.
9. Booking enquiries, reservations and guest data
When you enquire about or book accommodation with us, we process the personal data necessary to handle and fulfil the booking.
This may include in particular your name and address, telephone number and email address, arrival and departure dates, number of guests, names of other travellers where necessary, details of the booked accommodation, requested additional services, invoice details, payment information and communication relating to the booking.
Processing is carried out to take pre-contractual steps and perform the accommodation, rental or intermediary agreement on the basis of Article 6(1)(b) GDPR.
Where we are legally required to retain or disclose certain data, particularly for tax, commercial, registration or municipal purposes, processing is based on Article 6(1)(c) GDPR.
10. Online booking, availability calendars and booking management with Smoobu
For our current online booking system and availability calendars, we use Smoobu, provided by Smoobu GmbH, Pappelallee 78/79, 10437 Berlin, Germany.
The embedded online booking system and availability calendars open only after you click the relevant load button. This consent is voluntary and is not stored permanently. Loading the external content following your consent is based on Article 6(1)(a) GDPR and, where information on your device is accessed, Section 25(1) TDDDG. Reloading the page without giving consent prevents further requests; the lawfulness of processing already carried out is unaffected.
The booking view also loads a display library from cdnjs.cloudflare.com (Cloudflare). This also involves technical connection data such as your IP address and browser information. This file is likewise loaded only after you give consent. Further details are provided in the Cloudflare privacy policy.
When a Smoobu booking view or availability calendar is loaded, Smoobu receives technical connection data, in particular your IP address, browser information and the page visited. If you make an enquiry or booking through Smoobu, the contact, travel, guest and booking data you enter, and payment information where applicable, is processed to handle and fulfil your stay.
Article 6(1)(b) GDPR is the legal basis for handling specific booking enquiries and performing the contract; we comply with statutory retention requirements under Article 6(1)(c) GDPR. Smoobu is used as a technical service provider for booking management. You can alternatively enquire at any time using our contact form, by telephone or by email.
Data is processed for as long as necessary to handle and fulfil the booking and comply with statutory obligations. Smoobu uses additional service providers; this may also involve transfers outside the European Economic Area. Information about subprocessors and the associated data protection safeguards is available in the Smoobu data protection agreements and in the Smoobu privacy notices.
11. Disclosure of data in connection with a booking
Personal data is disclosed only where necessary to fulfil a booking, where there is a statutory obligation or where another legal basis under data protection law applies.
For accommodation that we do not own directly, the data needed to fulfil the stay may be disclosed to the respective owner, landlord or persons or service providers entrusted with looking after the accommodation.
Disclosure is limited to the data necessary to prepare and fulfil the stay.
In addition, recipients of personal data may include in particular tax advisers and accounting providers, IT and hosting providers, booking and management software providers, payment service providers, accommodation owners or landlords, and legally authorised authorities, towns and municipalities, insofar as necessary in the individual case or required by law.
12. Communication via WhatsApp
Our ‘Enquire via WhatsApp’ buttons are external links. Merely displaying them does not load any WhatsApp scripts or chat content. WhatsApp opens only when you click; the prepared text containing the accommodation name and public page address, along with technical connection data, is then transmitted to WhatsApp. Form entries and URL additions are not included. You can edit the text before sending it. The message is not sent to us automatically.
If you voluntarily contact us via WhatsApp, we process the data you send to handle your enquiry.
The provider for users in the European Economic Area is:
WhatsApp Ireland Limited
Merrion Road
Dublin 4
D04 X2K5
Ireland
Communication may involve processing in particular your telephone number, profile information, messages, shared files, and communication and connection data.
For booking-related communication, our processing is based on Article 6(1)(b) GDPR. For other communication, processing is based on Article 6(1)(f) GDPR.
Using WhatsApp is voluntary. You can always contact us by email or telephone instead.
WhatsApp may also process certain data outside the European Economic Area as part of its technical infrastructure. The provider’s privacy policy additionally applies to this processing.
13. Google Maps – external links
Our website may provide links to Google Maps, for example to help you travel to accommodation or find a location.
A normal external link to Google Maps does not cause Google Maps to be accessed merely by visiting our website.
Only when you click the relevant link do you leave our website and access the external provider’s service.
From that point, the respective provider is responsible for further data processing.
If Google Maps is embedded directly on our website in future, we will add the necessary data protection information and, where required, a consent mechanism.
14. Links to social networks
Our website may contain links to our profiles on social networks, particularly Instagram.
With simple external links, merely visiting our website does not establish a connection to the respective social network through that link.
Only when you click the link do you leave our website and access the respective provider.
From that point, the privacy policy of the respective social network applies.
15. Other external links
Our website contains links to websites and services of other providers.
We generally have no control over the processing of personal data by these external providers.
When you click an external link, you leave our website. The respective external provider is generally responsible for further processing of personal data.
16. Encrypted data transmission
Our website uses TLS/SSL encryption.
Data transmitted between your browser and our web server is therefore generally transmitted in encrypted form.
You can recognise an encrypted connection in particular by the website address beginning with ‘https://’.
17. Retention periods
We generally store personal data only for as long as necessary for the respective processing purpose.
Where statutory retention requirements apply, in particular under tax or commercial law, the relevant data is stored for the applicable statutory periods.
After the respective retention period expires, the data is deleted unless further statutory or legitimate grounds for storage apply.
The detailed visit data collected with Matomo is subject to the 180-day deletion period specified in section 6.
18. Your data protection rights
Subject to the statutory conditions, you have in particular the right to:
access to the data stored about you under Article 15 GDPR,
rectification of inaccurate or incomplete data under Article 16 GDPR,
erasure under Article 17 GDPR,
restriction of processing under Article 18 GDPR,
data portability under Article 20 GDPR,
object to processing under Article 21 GDPR.
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. This does not affect the lawfulness of processing carried out before consent was withdrawn.
You can contact us to exercise your rights:
DH Ferientraum Thüringen
Denny Heim
Wasserwerkstraße 10
Erlau district
98553 Schleusingen
Email:
19. Right to object under Article 21 GDPR
Where we process personal data on the basis of Article 6(1)(f) GDPR, you have the right to object to that processing at any time on grounds relating to your particular situation.
We will then no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or processing serves the establishment, exercise or defence of legal claims.
20. Right to lodge a complaint with a data protection supervisory authority
Under Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes data protection law.
For businesses based in Thuringia, the following supervisory authority is particularly relevant:
Thuringian Commissioner for Data Protection and Freedom of Information (TLfDI)
Häßlerstraße 8
99096 Erfurt
Telephone: +49 361 57-3112900
Email:
Your right to contact another competent data protection supervisory authority remains unaffected.
21. Automated decision-making and profiling
We do not carry out solely automated decision-making within the meaning of Article 22 GDPR that produces legal effects concerning you or similarly significantly affects you.
We do not carry out personal profiling for advertising purposes through this website.
Original reviews from Revyoos
You can load a Revyoos review widget on the homepage. Unless you click ‘Show original reviews’, we do not load any Revyoos content through it. By clicking, you consent to a connection being established with Revyoos. In particular, your IP address, technical browser and connection data, and the page visited are processed to display reviews, ratings and source links. The legal basis for this voluntary loading is Article 6(1)(a) GDPR and, where information is stored on or read from your device, Section 25(1) TDDDG.
Our integration does not store your choice permanently. You can close the integration by reloading or leaving the page and thereby stop further processing through this widget. Transfers already made are unaffected. You must make your choice again on a new page visit. The website and its booking and contact options also work without the review widget.
For further processing and retention periods at the provider, please refer to the Revyoos privacy policy. You can open the originating portals using the source links; their privacy notices then also apply.
22. Changes to this privacy policyWe reserve the right to update this privacy policy when legal requirements, our technical systems or the services used on our website change.
The current version published on this website applies.
Last updated: October 2026