Privacy policy
This is an English translation for your convenience. Only the German version is legally binding.
1. Data protection at a glance
This overview explains what happens to your personal data when you visit our website or book with us. Personal data is any data that can be used to identify you personally.
We collect data, on the one hand, when you provide it to us, for example in the contact form or when booking. Other data is collected automatically by our IT systems when you visit the website, mainly technical data such as browser, operating system and time of access. We do not use any analytics tools. Advertising cookies from Google Ads and content from YouTube are only loaded with your consent.
2. Controller
Ferienhaus DöDö GbRrepresented by the partners Stephanie Döring and Markus Döring
Blumenstraße 5, 38118 Braunschweig, Germany
Phone: +49 151 44944103
Email: info@seehaus-pippa.de
The controller is the person or company that decides on the purposes and means of processing personal data.
3. Data protection officer
We are not legally required to appoint a data protection officer and have not appointed one. If you have any questions about data protection, please contact the controller named above.
4. Storage period
Unless a more specific storage period is stated in this policy, we store your data until the purpose of processing no longer applies. If you request deletion or withdraw your consent, we delete your data unless statutory retention obligations apply. We retain booking and invoice data for up to 10 years in accordance with German tax and commercial law (§ 147 AO, § 257 HGB).
5. Legal bases
We process your data on the following legal bases of the General Data Protection Regulation (GDPR):
- consent (Art. 6 (1) (a) GDPR); when information is stored on your device, additionally § 25 (1) TDDDG
- contract and pre-contractual measures (Art. 6 (1) (b) GDPR), for example for enquiries and bookings
- legal obligations (Art. 6 (1) (c) GDPR), for example retention obligations
- legitimate interest (Art. 6 (1) (f) GDPR), for example in the secure operation of the website
Technically necessary storage on your device takes place without consent in accordance with § 25 (2) no. 2 TDDDG.
6. Recipients and transfers to third countries
We use service providers who process data on our behalf (processors): Strato (hosting and email) and Smoobu (availability calendar and booking). We have concluded agreements with them pursuant to Art. 28 GDPR. For Google Ads and YouTube, Google does not process data on our behalf but as an independent controller. With Google Ads and YouTube, data may be transferred to the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision. In addition, the European Commission’s standard contractual clauses apply.
7. Your rights
You have the right at any time to:
- access your stored data (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- withdraw your consent with effect for the future (Art. 7 (3) GDPR); on this website via the “Cookie settings” link in the footer
Right to object (Art. 21 GDPR): Where processing is based on our legitimate interest, you may object at any time on grounds relating to your particular situation. You may object to direct marketing at any time without giving reasons.
8. Right to lodge a complaint
You may lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection Lower Saxony (Der Landesbeauftragte für den Datenschutz Niedersachsen), Prinzenstraße 5, 30159 Hannover, Germany.
9. SSL/TLS encryption
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” and the padlock symbol in your browser’s address bar.
10. Hosting by Strato
Our website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. All data collected during your visit is stored on servers in Germany. The legal basis is our legitimate interest in providing the website securely and reliably (Art. 6 (1) (f) GDPR) and, where you make an enquiry or booking, Art. 6 (1) (b) GDPR. We have concluded a data processing agreement with Strato pursuant to Art. 28 GDPR.
11. Server log files
When you access the website, Strato automatically stores information transmitted by your browser: browser type and version, operating system, referrer URL, host name of the accessing computer, time of the request and IP address. Strato anonymises the IP address. This data is not combined with other data. It is used for the technical provision and security of the website (Art. 6 (1) (f) GDPR) and is deleted after 6 weeks at the latest.
12. Cookies and consent management
Cookies are small text files stored by your browser. We use technically necessary cookies without consent (§ 25 (2) no. 2 TDDDG, Art. 6 (1) (f) GDPR). All other cookies and external content are only loaded after you have given your consent (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR).
To manage your consent, we use our own script that runs entirely on our web space; no data is transferred to third parties. Your choice is stored in the cookie “sp_einwilligung” in your browser so that we can take it into account on your next visit, and is deleted after 6 months. You can change or withdraw your choice at any time via “Cookie settings” in the footer.
| Category | Services | Consent |
|---|---|---|
| Necessary | Consent cookie, Smoobu booking system | not required |
| Marketing | Google Ads conversion tracking | required |
| External media | YouTube video | required |
13. Contact form
If you send us an enquiry using the contact form, we process your details (name, email address and, optionally, phone number, travel dates, number of guests and your message) in order to answer your enquiry. Mandatory fields are marked. The legal basis is Art. 6 (1) (b) GDPR where the enquiry relates to a booking, and otherwise our legitimate interest in answering it (Art. 6 (1) (f) GDPR).
The form is processed by a script on our web space at Strato and forwarded as an email to our mailbox info@seehaus-pippa.de; nothing is stored on the web server. Our mailbox is also operated by Strato. To protect against spam, we use an invisible honeypot field, not a third-party captcha. We delete your enquiry once it has been fully dealt with and no booking results, at the latest after 6 months; statutory retention obligations remain unaffected.
14. Enquiries by email or phone
If you contact us by email or phone, we process your details, including your contact details, in order to deal with your request. The legal bases and storage period are the same as in section 13.
15. Bookings and processing of contract data
For a booking, we process the data required to conclude and perform the rental agreement: name, address, email address, phone number, travel dates, number and ages of fellow travellers, additional services booked and the payment details of the bank transfer. The legal basis is Art. 6 (1) (b) GDPR and, for retention, Art. 6 (1) (c) GDPR. We store booking data for up to 10 years in accordance with statutory retention periods.
If you book through a platform such as Airbnb or Booking.com, the privacy policy of that platform also applies; the platform transmits the data required for the booking to us.
16. Availability calendar and Smoobu booking system
For the availability calendar and online booking, we use the booking system of Smoobu GmbH, Pappelallee 78/79, 10437 Berlin, Germany. The calendar and booking form are loaded directly from Smoobu’s servers, which means your IP address is transmitted to Smoobu. When you book, Smoobu processes the details listed in section 15 on our behalf.
The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures and performance of the contract) and our legitimate interest in simple online booking (Art. 6 (1) (f) GDPR). To our knowledge, Smoobu only sets technically necessary cookies (§ 25 (2) no. 2 TDDDG). We have concluded a data processing agreement with Smoobu. More information in Smoobu’s privacy policy: smoobu.com/datenschutz.
17. Google Ads and conversion tracking
We advertise with Google Ads, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google). To measure whether visitors make an enquiry or booking after clicking on an advert, we use Google’s conversion tracking. Cookies are set and information such as IP address, device data, the click on an advert and the action taken (e.g. a click on “Book now”, phone or email) is transmitted to Google. We do not learn who you are personally. We do not use this data for personalised advertising (remarketing).
Google Ads is only loaded if you have consented to the “Marketing” category in the cookie banner (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). We pass your consent on to Google via Google Consent Mode. You can withdraw it at any time via “Cookie settings”. Data may be transferred to the USA (see section 6). More at policies.google.com/privacy.
18. YouTube
Our website embeds a video from YouTube, a service of Google (see section 17). We use the privacy-enhanced mode (youtube-nocookie.com). The video is only loaded when you actively start it or have consented to the “External media” category (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). Only then is a connection to YouTube’s servers established and your IP address transmitted; YouTube may use cookies or similar technologies. Data may be transferred to the USA.
19. Fonts
The fonts on this website are stored locally on our server. No connection to Google Fonts or other providers is established when the page is loaded.
20. Links to review platforms and our YouTube channel
Our website contains links to our profiles on Airbnb, Booking.com and Google and to our YouTube channel. Only when you click on a link are you taken to the provider’s website, where its privacy policy applies. We copied the reviews from Airbnb, Booking.com and Google shown on our website ourselves; no third-party widget is loaded for them.
As of October 2026