We only store the data you provide to us in order to make a booking (arrival date, departure date, names, etc.). However, since we cannot rule out that Google or similar providers collect data, and in order to be legally compliant, please find below our Privacy Policy:

1. Information on the Collection of Personal Data (1) The following provides information on the collection of personal data when using our website. Personal data refers to all data that can be related to you personally, e.g. name, address, email address, or user behavior. The use of our website is generally possible without providing personal data. Insofar as personal data (for example, name, address, email address, or mobile number) is collected on our pages, this is always done, as far as possible, on a voluntary basis. These data will not be passed on to third parties without your explicit consent. Please note that data transmission over the internet (e.g. communication by email) may have security vulnerabilities. Complete protection of data from access by third parties is not possible. The use of contact data published within the framework of the legal notice obligation by third parties for sending unsolicited advertising and information materials is hereby expressly prohibited. The operators of this site expressly reserve the right to take legal action in the event of unsolicited advertising information, such as spam emails. (2) The data controller pursuant to Art. 4 para. 7 of the EU General Data Protection Regulation (GDPR) is: Mathias Timm Raiffeisenstr. 38 25794 Pahlen Phone: +49 174 9707080 Email: info@ferienhaus-kehrwedder.de (see our Legal Notice). (3) When you contact us by email or via a contact form, the data you provide (your email address, and, if applicable, your name and telephone number) will be stored by us in order to answer your questions. We delete the data collected in this context once storage is no longer necessary or restrict processing if legal retention obligations exist. The legal basis for processing data in the case of contact via a contact form is your voluntarily given consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR. When contacting us by email, processing is necessary for the performance of a contract or for pre-contractual measures pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR. (4) If we use commissioned service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail below about the respective processes. We will also specify the defined criteria for the duration of data storage.

2. Your Rights (1) You have the following rights with regard to your personal data: • Right of access, • Right to rectification or erasure, • Right to restriction of processing, • Right to object to processing, • Right to data portability. (2) You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. ⸻ 3. Collection of Personal Data When Visiting Our Website (1) When using our website purely for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which are technically necessary for us to display our website and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR): • IP address • Date and time of the request • Time zone difference to Greenwich Mean Time (GMT) • Content of the request (specific page) • Access status/HTTP status code • Amount of data transmitted • Website from which the request originates • Browser • Operating system and its interface • Language and version of the browser software (2) In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and associated with the browser you use, and through which certain information is transmitted to the entity that sets the cookie (in this case, us). Cookies cannot run programs or transmit viruses to your computer. They serve to make the internet offering more user-friendly and effective overall. (3) Use of Cookies a) This website uses both transient and persistent cookies. Transient cookies are automatically deleted when you close your browser. These include, in particular, session cookies, which allow various requests from your browser to be assigned to a single session. This enables your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in your browser’s security settings. b) This website uses three session cookies named arrival, departure, and guests to store your desired check-in and check-out dates and the number of guests during your browsing session. These cookies are technically necessary. c) Also technically necessary are the one-week persistent cookies acceptCookies and ga-disable-fdf, which store whether you have consented to the storage of non-essential cookies or not. d) You can configure your browser settings according to your preferences, e.g. to refuse third-party cookies or all cookies. Please note that you may then not be able to use all functions of this website.

4. Further Functions and Offers of Our Website (1) In addition to purely informational use of our website, we offer various services that you may use if interested. For this purpose, you usually need to provide additional personal data, which we use to provide the respective service and for which the aforementioned data processing principles apply. (2) In some cases, we use external service providers for processing your data. These providers have been carefully selected and commissioned by us, are bound by our instructions, and are regularly monitored. (3) Furthermore, we may share your personal data with third parties if participation in promotions, competitions, contracts, or similar services is offered jointly with partners. Further information will be provided when you provide your personal data or below in the description of the offer. (4) If our service providers or partners are located in a country outside the European Economic Area (EEA), we will inform you about the implications of this in the offer description. ⸻ 5. Objection or Revocation of Data Processing (1) If you have given consent to the processing of your data, you may revoke it at any time. Such revocation affects the legality of processing your personal data after you have communicated it to us. (2) To the extent that we process your personal data based on legitimate interests, you may object to the processing. This applies, in particular, if the processing is not necessary for fulfilling a contract with you, as indicated in the description of the functions below. If you exercise such an objection, please provide the reasons why your personal data should not be processed as described. In the case of a justified objection, we will review the situation and either stop or adjust data processing or explain compelling legitimate reasons for continuing processing. (3) You may, of course, object at any time to the processing of your personal data for advertising and data analysis purposes. You can notify us of your objection using the contact details provided in the legal notice. ⸻ 6. Data Transfers in the Event of Bookings (1) To process bookings and to assist guests on site, we use service providers to whom we transmit the personal data you provide during booking, such as travel details and contact information. Required fields are marked separately; other information is voluntary. Legal basis: Art. 6 para. 1 sentence 1 lit. b and f GDPR. • Booking processing is handled by Smoobu GmbH, Falckensteinstr. 48, 10997 Berlin, Germany, Email: service@smoobu.com, Phone: +49 30-120884399, Privacy Policy: https://www.smoobu.com/datenschutz/. (2) Due to commercial and tax law requirements, we are obliged to store your address, payment, and order data for a period of ten years. After two years, we restrict processing, i.e., your data will only be used to comply with legal obligations. (3) To prevent unauthorized access by third parties to your personal data, in particular financial data, the booking process is encrypted using TLS technology.

7. Integration of Google Maps (1) On this website, we use the service Google Maps, provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This allows us to display interactive maps directly on the website and enables you to use the map functions conveniently. Legal basis: Art. 6 para. 1 sentence 1 lit. f GDPR. (2) By visiting the website, Google receives information that you have accessed the corresponding subpage of our website. In addition, the data specified in Section 3 of this declaration are transmitted. This happens regardless of whether you have a Google account or not. If you are logged into Google, your data will be directly associated with your account. If you do not wish this association, you must log out of your Google account before activating the map. Google stores your data as user profiles and uses them for advertising, market research, and/or the customized design of its website. Such evaluation may occur even for users who are not logged in, in order to provide targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; in order to exercise this right, you must contact Google directly. (3) Further information on the purpose and scope of data collection and its processing by the plugin provider can be found in the provider’s privacy policy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and participates in the EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. ⸻ 8. Web Fonts from Adobe Fonts (1) On this website, we use Adobe Typekit provided by Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Park, Dublin 24, Ireland, Email: DPO@adobe.com, parent company: Adobe Inc., 345 Park Avenue, San Jose, California 95110, USA. This serves our interest in optimizing and economically operating this online offering by embedding a font. Legal basis: Art. 6 para. 1 sentence 1 lit. f GDPR. (2) Further information on the purpose and scope of data collection and processing by the provider can be found in the provider’s privacy policy: https://www.adobe.com/de/privacy/policies/adobe-fonts.html. Adobe also processes your personal data in the USA and participates in the EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TNo9AAG. ⸻ 9. Use of Other External Resources, e.g., Content Delivery Network (1) On this website, we partially embed content and functions via external providers. This serves our interest in optimizing, accelerating delivery, and economically operating this online offering. Legal basis: Art. 6 para. 1 sentence 1 lit. f GDPR. (2) In doing so, information about the use of this website – including your IP address – may be transmitted to a server in the USA and stored there. (3) The following functions and services are used: • Provision of photos of our properties: Smoobu GmbH, Falckensteinstr 48, 10997 Berlin, Email: service@smoobu.com, Phone: +49 30-120884399, Privacy Policy: https://www.smoobu.com/datenschutz/ • Provision of technical functions (availability selection): Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, Email: privacyquestions@cloudflare.com. The provider adheres to the EU-US Privacy Shield framework and is committed to maintaining EU-level data protection: https://www.privacyshield.gov/participant?id=a2zt0000000GnZKAA0&status=Active. Details in the provider’s privacy policy: https://www.cloudflare.com/de-de/privacypolicy/. ⸻ Google Analytics This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses “cookies,” which are text files stored on your computer and enable analysis of your use of the website. The information generated by the cookie about your use of this website (including your IP address) is transmitted to a Google server in the USA and stored there. Google uses this information to evaluate your use of the website, compile reports on website activity for the website operators, and provide other services related to website and internet usage. Google may also transfer this information to third parties if legally required or if third parties process this data on Google’s behalf. Google will not associate your IP address with other data held by Google. You can prevent the installation of cookies by adjusting your browser settings; however, you may not be able to use all functions of this website fully. By using this website, you consent to the processing of the data collected about you by Google in the manner described above and for the purpose stated. ⸻ Google AdSense This website uses Google AdSense, a web advertising service of Google Inc., USA (“Google”). Google AdSense also uses “cookies” and “web beacons” (small invisible graphics) to collect information. This allows simple actions, such as tracking visitor traffic on the website. The information generated by the cookie and/or web beacon about your use of this website (including your IP address) is transmitted to a Google server in the USA and stored there. Google uses this information to evaluate your use of the website regarding ads, compile reports on website activity and ads for website operators, and provide other services related to website and internet usage. Google may also transfer this information to third parties if legally required or if third parties process this data on Google’s behalf. Google will not associate your IP address with other data held by Google. You can prevent the storage of cookies and the use of web beacons by adjusting your browser settings (e.g., rejecting cookies). Please note that in this case, some functions of this website may not be fully available. By using this website, you consent to the processing of the data collected about you by Google as described above and for the purpose stated.