Privacy Policy.

Controller

The controller within the meaning of the GDPR for the processing of personal data on this website is:

The responsible data protection supervisory authority is the State Commissioner for Data Protection of the federal state of Schleswig-Holstein. A list of all supervisory authorities can be found at: bfdi.bund.de.

Your Rights

You have the following rights regarding your personal data:

• Right of access to stored data and its processing (Art. 15 GDPR)
• Right to receive a copy of your data in a machine-readable format (Art. 20 GDPR)
• Right to rectification of inaccurate data (Art. 16 GDPR)
• Right to erasure of your data, where no statutory retention obligation exists (Art. 17 GDPR)
• Right to object to the processing of your data (Art. 21 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR)

These rights are subject to statutory restrictions. To exercise your rights, please contact us using the details provided in the legal notice.

Retention

We only store personal data for as long as necessary for the respective purpose or as required by statutory retention obligations. Booking data is retained in accordance with commercial and tax law deadlines (generally 10 years). It is then deleted or anonymised.

Legal Basis

The processing of your personal data is carried out on the basis of the following legal grounds:

• Contract performance and pre-contractual measures (Art. 6(1)(b) GDPR)
• Legitimate interests of the controller (Art. 6(1)(f) GDPR), e.g. improving the website
• Compliance with legal obligations (Art. 6(1)(c) GDPR)
• Consent, where provided by you (Art. 6(1)(a) GDPR)

Data Collected

Non-personal data

When you visit our website, technical data is automatically collected that does not directly identify you — e.g. browser, operating system, access time and pages visited. This data is used to improve website functionality.

Personal data

• Device data: IP address, geolocation data and similar technical identifiers
• Contact data: Name and email address when you contact us
• Booking data: Name, email address, postal address and travel period for booking enquiries

Use & Disclosure

We use your data exclusively for the following purposes:

• Processing contact and booking enquiries
• Communication regarding your booking
• Improving and analysing our website
• Compliance with legal obligations

Data is only passed on to third parties if this is necessary for contract performance (e.g. payment providers, hosting providers), required by law, or if you have given explicit consent. We do not pass on your data to third parties for advertising purposes.

Cookies

This website uses cookies — small data packets stored on your device when you visit. We use:

• Session cookies: temporary, deleted when the browser is closed
• Persistent cookies: stored for a defined period and enable recognition on future visits

You can disable or delete cookies in your browser settings. Please note that this may restrict certain website functions.

Fonts

This website uses locally hosted font files. Fonts are loaded from our own server; no connection to Google Fonts or other external font provider servers is established for this purpose.

Third Parties & External Content

For booking processing we use Smoobu (smoobu.com). For internal tasks, booking organisation and knowledge-base content we use ClickUp (clickup.com). Guest chat and escalations may be processed through Voiceflow (voiceflow.com) and Missive (missiveapp.com). Hosting and analytics are provided by Vercel (vercel.com). Booking, contact and technical usage data may be transmitted to these services. Where required, data processing agreements pursuant to Art. 28 GDPR are in place. Their respective privacy policies apply. This privacy policy applies exclusively to content on hostyou-apartments.de and not to linked external websites.

Data Security

We employ technical and organisational security measures to protect your data against unauthorised access, loss or misuse. Data transmission is encrypted via HTTPS. However, we cannot guarantee absolute security for transmission over the internet.

Data transfers to countries outside the European Economic Area take place only to countries with a data protection level recognised by the EU Commission, or on the basis of appropriate safeguards (e.g. standard contractual clauses).

Minors

This website is not directed at persons under the age of 18. We do not knowingly collect personal data from minors. Should parents or guardians become aware that their child has transmitted data to us without consent, we ask that they contact us at office@hostyou-apartments.de.

Changes

We reserve the right to update this privacy policy as necessary. The current version is always available on this page. Continued use of the website after a change constitutes acceptance of the updated policy.

Contact

For questions about data protection or to exercise your rights, please contact:

This translation is for informational purposes only. The authoritative version is the German Privacy Policy. — Last updated: June 2026