Privacy Policy

1. Privacy at a glance

We treat personal data confidentially and in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR). This Privacy Policy explains which data is processed when you visit our website, contact us, submit booking inquiries or request prices.

2. Controller

The controller responsible for data processing on this website is the operator of the Villa Juhara website.

Harald Braun
Auweg 16a
79639 Grenzach-Wyhlen
Germany
E-Mail: admin@villajuhara.com

3. Hosting and infrastructure

This website is hosted by IONOS. The provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. When you access the website, technical data is processed in order to provide the website, operate it securely and detect attacks or technical issues.

4. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognize an encrypted connection by “https://” in the browser address bar.

5. Server log files

The hosting provider automatically collects and stores information in server log files that your browser transmits automatically. This may include browser type, operating system, referrer URL, host name of the accessing device, time of the server request and IP address. These data are required to deliver the website technically, ensure stability and security and detect misuse.

6. Cookies and similar technologies

Our website uses cookies and similar technologies such as Local Storage or Session Storage. These technologies may store or access information on your device.

We distinguish between necessary technologies and optional statistics.

Necessary technologies are required for the reliable operation of the website. This includes storing your cookie settings, language preferences, security and form protection functions, and technically necessary functions for contact, price and booking inquiries. These necessary technologies cannot be disabled because the website could otherwise not be provided properly.

Optional statistics are used only with your consent. If you consent, we use our own locally operated first-party tracking to evaluate page views, technical sessions, visitor events, referrers, approximate GeoIP data and clicks on booking channels such as direct booking, Airbnb, FeWo/VRBO and Booking.com. IP addresses are not stored in plain text.

We store your selection so that you do not have to choose your cookie settings again on every page view. You can change or withdraw your consent to statistics at any time via the “Cookie settings” link. Withdrawal applies for the future.

7. Contact forms, booking inquiries and price inquiries

If you send us information via a contact form, booking form or price inquiry, we process the information you provide in order to handle your request. This may include your name, email address, telephone number, travel dates, number of guests, details of the desired booking and technical metadata relating to the request.

We use these data to prepare and process offers, communicate with you, check availability and carry out pre-contractual or contractual measures.

The active processing of a contact, price or booking inquiry is separate from optional statistics. The website, contact form, price inquiry and booking inquiry continue to work even if you do not consent to optional statistics.

8. First-party website tracking and visitor analytics

We use our own self-hosted first-party tracking in order to understand and improve the use of our website and booking functions. We do not use external analytics providers such as Google Analytics for this purpose.

This statistics tracking runs only after you have given consent. Without statistics consent, no optional visitor analytics events for page views, sessions or channel clicks are sent.

The tracking is used in particular to detect technical errors, improve usability, make price inquiries traceable and understand which booking channels are relevant for visitors.

9. Sessions, page views and visitor events

After you have consented to statistics, technical events may be stored when you visit the website, such as page views, opening the booking form, starting a price inquiry or clicking booking or platform links. These events are assigned to a technical session so that the individual events of a visit can be analyzed together.

The IP address is not stored in plain text. A hash value of the IP address may be used to recognize technical relationships.

• time of the event
• page visited
• type of event
• technical session ID
• browser and device information
• referrer, if transmitted by the browser
• approximate geographic origin based on GeoIP analysis
• IP hash

10. Referrers and source pages

If your browser transmits a referrer URL, we may store which website or page referred you to our website. This may be a search engine, booking platform, social media page or direct access. Query parameters are not shown by default or are shortened in the admin view where technically implemented.

11. GeoIP analysis with MaxMind GeoLite2

For approximate geographic classification of website visits, we use a locally stored GeoLite2 City database from MaxMind. The lookup is performed locally on our server. No IP address is transmitted to MaxMind for the GeoIP lookup.

The IP address is used only during the current request to query the local database. Approximate derived information such as country, region/state and city may be stored. GeoIP data are technical approximations and may not be accurate.

12. Channel clicks and redirects to booking platforms

If you click links to external booking platforms or booking channels, we may store that such a click occurred and which channel was involved, such as direct booking, Airbnb, FeWo/VRBO or Booking.com. This helps us understand which booking paths are used.

When you click external links, you leave our website. Further data processing on external platforms is governed by the privacy policies of the respective providers.

13. Cloudflare Turnstile

We use Cloudflare Turnstile, a service provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Turnstile helps protect forms against spam and automated access and checks whether inputs are made by a human or an automated program. The processing is based on our legitimate interest in protecting our website, forms and technical infrastructure.

14. Legal bases for processing

Depending on the purpose, personal data is processed on the following legal bases:

• Art. 6(1)(b) GDPR where processing is necessary for pre-contractual measures or performance of a contract, in particular for booking and price inquiries.
• Art. 6(1)(f) GDPR where processing is based on our legitimate interests, in particular secure website operation, prevention of misuse and spam, improvement of the website, traceability of inquiries and internal analysis of the use of our booking functions.
• Art. 6(1)(c) GDPR where legal retention or documentation obligations apply.

15. Retention and deletion

We store personal data only for as long as necessary for the respective purposes or as required by statutory retention obligations.

Purely technical visitor events and session data are stored only for a limited period and then deleted or reduced if they are no longer required. Data from specific booking or price inquiries may be stored for longer if this is necessary to handle the inquiry, process a contract, maintain documentation or comply with legal obligations.

16. Recipients and service providers

Personal data may be transferred to technical service providers, hosting providers, payment providers, booking platforms or other parties involved in processing bookings, where this is necessary for the respective purpose.

17. International data transfers

Some service providers or platforms may be located outside the European Union or the European Economic Area or may process data there. In such cases, processing is carried out in accordance with legal requirements, in particular on the basis of appropriate safeguards such as standard contractual clauses where required.

18. Your rights

Subject to the statutory requirements, you have the right to obtain information about personal data stored about you, to request correction of inaccurate data, deletion, restriction of processing, data portability and to lodge a complaint with a competent data protection supervisory authority.

19. Right to object to processing based on legitimate interests

Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to such processing at any time for reasons relating to your particular situation. If you object, we will no longer process the affected data unless there are compelling legitimate grounds for the processing or the processing serves the establishment, exercise or defense of legal claims.

20. Updates to this Privacy Policy

We may update this Privacy Policy if legal, technical or organizational changes occur. The current version published on this website applies.