Privacy policy

Below we inform you, in accordance with data protection law (in particular the EU General Data Protection Regulation “GDPR” and the German Federal Data Protection Act), about the type, scope and purpose of the processing of personal data on this website. For terms such as “personal data” or “processing”, please refer to Art. 4 GDPR.

Controller

Summary

• This website uses no cookies, no analytics or advertising services and no social media plug-ins (Instagram and TikTok are only linked).
• Fonts, images and videos are loaded exclusively from our own web space – no data is transferred to third parties such as Google when you visit.
• The enquiry form does not store anything on our server; it merely prepares an email in your own email program.

Hosting and server log files

This website is operated by a web hosting provider in Germany acting on our behalf in accordance with Art. 28 GDPR. When you visit the website, your browser automatically transmits information that is stored in so-called server log files: IP address, date and time of access, page or file accessed, amount of data transferred, the previously visited page (referrer), browser type and operating system.

This data is technically necessary to deliver the website and to ensure its security and stability. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and error-free operation of the website. The log files are deleted automatically after a short time unless they are needed to investigate a security incident.

Availability calendar and price calculator

The availability calendar only loads information from our server about the days on which the apartment is booked – without names or other details of our guests. Your selection in the calendar and your entries in the price calculator are processed only in your browser and are not transmitted to us.

Contact and enquiries

If you contact us by email or phone, we process your details (e.g. name, contact details, desired dates, number and age of fellow travellers and your message) in order to answer your enquiry and to prepare or carry out a booking. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures or performance of a contract), otherwise Art. 6(1)(f) GDPR.

The enquiry form on this website does not transmit your details (e.g. name, address, phone, travel dates) to our server. It opens your email program with a prepared message that you check and send yourself. Our mailbox is hosted by GMX (1&1 Mail & Media GmbH).

If you enter a discount code, only this code is transmitted to our server to check whether it is valid. The code is neither stored nor linked to you.

Bookings

If you book with us, we store the details required to carry out the booking (name of the main guest, address, travel dates, number of adults and children and their ages, contact details, any discount code, deposit and your notes) in a password-protected administration area on our web space and use them to create your invoice. The legal basis is Art. 6(1)(b) and (c) GDPR. The data is deleted as soon as it is no longer required and no statutory retention obligations apply; we keep invoices for up to ten years in accordance with German tax law (§ 147 AO, § 14b UStG). The public website only shows that the period is booked.

Social media profiles

We are on Instagram and TikTok (both @fewobaerenstein). On this website these services are only linked: no content, buttons or scripts from Instagram or TikTok are embedded, and no data is transferred to these providers unless you click the respective link. After clicking, the provider's privacy policy applies: Instagram is operated by Meta Platforms Ireland Limited, Dublin, Ireland; TikTok by TikTok Technology Limited, Dublin, Ireland.

External links

The “Plan your route” button links to Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). A connection to Google is only established when you click this link. Google's privacy policy applies to data processing on the linked page.

Some places to visit (e.g. railway stations, mountains and mining pits) are linked to the map service Mapy.com (Seznam.cz, a.s., Radlická 3294/10, 150 00 Prague 5, Czech Republic). Here, too, a connection is only established when you click such a link; Seznam.cz's privacy policy then applies.

Disclosure of data

We do not pass on your data to third parties without your consent – unless we are legally obliged to do so (e.g. reporting obligations to the municipality in connection with the tourist tax) or it is necessary to perform the contract.

Your rights

You have the right at any time to access the data stored about you (Art. 15 GDPR), to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR), as well as the right to object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR). You can withdraw any consent you have given at any time with effect for the future. Simply contact us using the details above.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the Saxon Data Protection and Transparency Commissioner responsible for us, Devrientstraße 5, 01067 Dresden, Germany.

Status

This privacy policy was last updated in October 2026. We will adapt it if the website or the legal requirements change. This English translation is provided for convenience; the German version is legally binding.