Privacy Policy

We take the protection of your personal data seriously. Below, we inform you about which personal data is processed when you visit our website, contact us, make an enquiry or place a booking, and what rights you have.

Status: June 2026

1. Controller

The controller responsible for data processing on this website is:

Nicole Karen Zimmer
Elbchaussee 184b
22605 Hamburg
Germany

Phone: +49 (0) 176 4370 3334
Email: mail@buehlergarmisch.de
Website: www.buehlergarmisch.de

2. General Information on Data Processing

Personal data means any information relating to an identified or identifiable natural person. This includes, in particular, your name, address, telephone number, email address, booking data and technical data such as your IP address.

We process personal data only to the extent necessary to provide this website, process enquiries, handle bookings, fulfil legal obligations or safeguard legitimate interests.

Processing is carried out in particular on the basis of Art. 6(1)(b) GDPR, where processing is necessary for pre-contractual measures or the performance of a contract; on the basis of Art. 6(1)(c) GDPR, where legal obligations exist; on the basis of Art. 6(1)(f) GDPR, where legitimate interests exist; and on the basis of Art. 6(1)(a) GDPR, where you have given your consent.

3. Hosting, Website and Booking System via Smoobu

This website and the booking system are operated using the Smoobu platform.

Provider:
Smoobu GmbH
Schönhauser Allee 167c
10435 Berlin
Germany

When using the website, enquiry and booking functions, and for the technical provision of the website, personal data may be processed by Smoobu. This may include, in particular, contact and booking data, stay details, communication data and technical access data.

In this context, Smoobu processes personal data as a service provider and processor. The processing is carried out for the provision of the website, the technical handling of enquiries and bookings, and the management of the holiday apartments.

The legal basis for processing is Art. 6(1)(b) GDPR, insofar as the processing is necessary to handle enquiries or carry out a booking. Where processing serves the technical provision and security of the website, it is carried out on the basis of Art. 6(1)(f) GDPR.

4. Server Log Files and Technical Access Data

When this website is accessed, technically necessary access data is processed. This may include in particular:

IP address of the accessing device
date and time of access
page or file accessed
amount of data transferred
browser used and browser version
operating system used
referrer URL, if transmitted

These data are processed in order to provide the website technically, ensure system security, analyse errors and prevent misuse. We do not combine these data with other data sources.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and functional provision of the website.

5. Contact by Email, Telephone or Contact Form

If you contact us by email, telephone or via a contact form, we process the data you provide in order to handle your enquiry and communicate with you.

This may include, in particular, your name, address, telephone number, email address, the content of your message and any further information you voluntarily provide.

Processing is carried out on the basis of Art. 6(1)(b) GDPR, insofar as your enquiry relates to a booking, a pre-contractual enquiry or an existing contractual relationship. In all other cases, processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the proper handling of your enquiry.

The data you provide will be deleted as soon as your enquiry has been finally processed and no statutory retention obligations or other legitimate interests prevent further storage.

6. Enquiry and Booking Data

If you make an enquiry or place a booking, we process the personal data required for this purpose. This may include in particular:

name and contact details
address, where required
email address and telephone number
travel period and length of stay
number of guests
selected accommodation
payment and billing data
special information voluntarily provided by you, for example regarding pets

These data are processed to handle your enquiry, carry out the booking, communicate with you and fulfil the guest accommodation contract.

The legal basis is Art. 6(1)(b) GDPR. Where statutory retention obligations exist, processing is additionally carried out on the basis of Art. 6(1)(c) GDPR.

7. Payment Processing

Depending on the agreed payment method, we process payment information insofar as this is necessary to carry out and allocate your payment. In the case of payment by bank transfer, we process in particular your name, payment amount, payment reference and account details, insofar as these are visible from the payment.

If payment via PayPal or another payment service provider is agreed, payment is processed via the respective provider. The privacy information of the respective payment service provider also applies.

The legal basis is Art. 6(1)(b) GDPR. Where tax or commercial law retention obligations exist, processing is additionally carried out on the basis of Art. 6(1)(c) GDPR.

8. Cookies and Similar Technologies

This website may use cookies and similar technologies. Cookies are small text files that are stored on your device.

Technically necessary cookies are used to provide the website in a functional, secure and usable manner. The use of technically necessary cookies is based on Section 25(2) TDDDG and Art. 6(1)(f) GDPR. Our legitimate interest lies in the technical provision and secure use of this website.

Where cookies or similar technologies are used that are not technically necessary, this will only take place on the basis of your prior consent pursuant to Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. You may withdraw any consent given at any time with effect for the future.

You can configure your browser so that you are informed about the setting of cookies, allow cookies only in individual cases or generally exclude cookies. If cookies are disabled, the functionality of this website may be limited.

9. Google Maps

Google Maps may be embedded on individual pages of this website in order to provide location information and map functions.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

If Google Maps is activated or loaded, personal data, in particular your IP address, technical device information and information about the use of the map function, may be transmitted to Google. This may also involve transmission to Google servers outside the European Union.

Google Maps is integrated only insofar as this is technically enabled on the website and a legal basis exists. Where consent is required for the use of Google Maps, processing is carried out on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent given may be withdrawn at any time with effect for the future.

Further information on data processing by Google can be found in Google’s privacy policy.

10. No Active Use of Analytics or Advertising Services

Insofar as no analytics or advertising services such as Google Analytics, Google Ads, Meta/Facebook Pixel or comparable tracking services are actively integrated on this website, no corresponding analytics or advertising tracking is carried out by us.

If such services are used in the future, this privacy policy will be updated accordingly. The use of non-technically necessary analytics or advertising technologies will take place only on the basis of prior consent, where such consent is required by law.

11. Recipients of Personal Data

Personal data is passed on only insofar as this is necessary to process your enquiry, carry out a booking, fulfil a contract, comply with legal obligations or safeguard legitimate interests.

Recipients of personal data may in particular include:

technical service providers and hosting providers
Smoobu as platform and booking service provider
payment service providers, where used
tax or legal advisors, where required
authorities, where a legal obligation exists

Personal data is not passed on to third parties for advertising purposes.

12. Storage Period

We store personal data only for as long as is necessary for the respective purposes.

Data from enquiries will be deleted once the enquiry has been finally processed and no statutory retention obligations or legitimate interests prevent further storage.

Contract, booking and billing data are stored for the duration of the statutory retention periods. Thereafter, the data will be deleted unless there are further statutory or legitimate reasons for storage.

13. Data Security

We take appropriate technical and organisational measures to protect your personal data against loss, manipulation, unauthorised access and unauthorised disclosure.

This website uses encrypted transmission via HTTPS/TLS where technically available. However, complete security of data transmission on the internet cannot be guaranteed.

14. Your Rights

Subject to the statutory requirements, you have the following rights:

right of access to the personal data processed by us
right to rectification of inaccurate or incomplete data
right to erasure of personal data
right to restriction of processing
right to data portability
right to object to certain processing operations
right to withdraw consent given with effect for the future

To exercise your rights, you may contact us at any time: mail@buehlergarmisch.de

15. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.

The competent supervisory authority in Hamburg is:

Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Str. 22
20459 Hamburg
Germany
Phone: +49 (0) 40 428 54 4040
Email: mailbox@datenschutz.hamburg.de

16. Changes to this Privacy Policy

We reserve the right to amend this privacy policy if legal requirements, technical functions of this website or our data processing activities change.

Data protection