Privacy Policy
This page is available in German and in English. In case of doubt, the German version is the binding one.
1. Controller
Christine Jungbauer, Am Hofgarten 4, 91301 Forchheim, Germany.
Email: jungbauerchristine1@gmail.com, Phone: +49 176 81034911
2. Visiting the website (server log files)
When you visit this website, our hosting provider automatically processes data transmitted by your browser: IP address, the date and time of access, the page requested, the page previously visited, and details of your browser and operating system. This processing is technically necessary in order to deliver the website and to ensure that it runs securely. The legal basis is our legitimate interest in providing the site free of technical faults and securely (Art. 6(1)(f) GDPR). The hosting provider retains the data for a limited period only and then deletes it automatically; it is not combined with any other data.
3. Cookies
This website sets no cookies and stores nothing on your device. If you switch between German and English, your choice applies for the duration of your visit; if you reload the page, it appears in German again. We deliberately decided not to set a cookie for this.
Because we do not use cookies, no consent and no consent banner are required. In particular we use no cookies for advertising or analytics purposes, and we embed no services such as Google Analytics, Google Fonts, Google Maps or social networks.
4. Enquiry form
If you contact us through the enquiry form, we process the data you provide (name, email address, telephone number where given, the apartment you are interested in, your preferred dates, the number of people and your message) in order to deal with your enquiry and reply to you. The legal basis is Art. 6(1)(b) GDPR (steps taken prior to entering into a contract) together with our legitimate interest in answering your enquiry (Art. 6(1)(f) GDPR).
Your enquiry is stored in our database and additionally sent to us by email. You automatically receive confirmation of your enquiry at the email address you provided.
To protect the form against abusive bulk use, we store a check value derived from your IP address with each enquiry. It is produced by converting the IP address, together with a secret addition, using an irreversible mathematical procedure (the SHA-256 hash function). The IP address itself is not stored and cannot be recovered from the check value.
5. Counting visits
So that we can tell how often our site is viewed, we increment a simple counter on each page view. The only things stored are the date, the time to the nearest hour, the number of views and – since September 2026 – which of our pages was viewed. For that last item only one of a few fixed words is recorded („Haus", „Lieblingsplatz", „Sonnenblume", „Umgebung", „Impressum / Datenschutz" or „Sonstige"), together with the number of views per day – so, again, only numbers. Neither IP addresses nor identifiers nor any details of your device are stored, and no cookie is set. It is therefore never possible to link any of this to you as a person; individual visitors are not recognised.
In addition we record what kind of source a visit came from – for example „Google", „Booking.com", „another website" or „entered directly". Only this single word is stored, together with the number of views per day. The address of the page you came from is not stored and never leaves our server. This item, too, cannot be linked to you as a person.
6. Contact via WhatsApp
On our site you will find a button that opens a WhatsApp chat with us. No WhatsApp service is embedded in our website – only when you click the button are you forwarded to WhatsApp, and data is then transmitted to its operator, WhatsApp Ireland Ltd. or Meta. Meta is the controller for that processing; its own privacy terms apply. If you would rather avoid this, you can reach us just as well by email or telephone.
7. Live images from the mountain cameras
In the section about the region you can view live images from the Großer Arber (arber.panomax.com) and the Hohenbogen (hohenbogen.de). These images are not ours; they come from the respective operators.
The images are only loaded once you click the relevant button. As long as you do not, no connection to these providers is established and no data whatsoever is transmitted to them.
If you open a camera image, your browser establishes a direct connection to the operator's server. In doing so, your IP address and technical details of your device are transmitted, such as browser type and operating system; the provider may also set cookies. We have no influence over this and learn nothing about it. We do not pass on the fact that you have come from our website – the referrer is suppressed.
The legal basis is the consent you give by clicking (Art. 6(1)(a) GDPR). Which data the operators process is set out in their own privacy notices.
8. Recipients and processors
We use the following service providers to run the website and to deal with enquiries:
- Hosting of the website with Netlify (Netlify, Inc., USA); delivery takes place via servers in Germany.
- Storage of enquiry data in a database (Supabase, data centre in the EU/Frankfurt).
- Sending of emails via Resend (Plus Five Five, Inc., USA).
Where required, data processing agreements under Art. 28 GDPR are in place with these providers.
9. Transfers of data to the USA
Netlify and Resend are based in the United States, and personal data may be transferred to the USA in the course of their services.
Both providers are certified under the EU-US Data Privacy Framework. For that framework the European Commission has determined that certified US companies offer an adequate level of data protection (Art. 45 GDPR). In addition, the contracts concluded with the providers incorporate the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR), which continue to apply even if the adequacy decision should cease to apply in future.
We point out that the level of data protection in the USA does not fully correspond to European law, and that access by authorities there cannot be ruled out in every case. The lawfulness of the adequacy decision is currently the subject of proceedings before the Court of Justice of the European Union.
10. Retention period
We store your enquiry data for as long as is necessary to deal with it, and delete it afterwards unless statutory retention periods require otherwise. If a booking results, the retention periods under commercial and tax law apply to the records arising from it.
11. Your rights
You have the right of access, and the rights to rectification, erasure, restriction of processing, data portability and objection. You also have the right to lodge a complaint with a data protection supervisory authority. A message to the contact details given above is enough to exercise your rights.