Privacy Policy

1.Controller

The controller responsible for data processing on this website is:

Phone

+49 8028 2203

E-mail

info@meisterhof.com

You can reach us with any data protection question at the same contact details.

2.The key points

• The website runs without any analytics or advertising services, which is why you will not see a cookie banner here.
• Fonts, images, videos and program code are stored with our website at Cloudflare, so your browser only contacts Cloudflare when it loads a page.
• For a booking we need your name, your postal address and your contact details. They are stored in our booking database and in our Travel 2.0 booking calendar from DREAMWAY TRAVEL GmbH.
• With your booking you receive the confirmation, an e-mail with everything for your arrival a few days before you come and a short thank-you after you leave. You will only receive e-mails with offers and news from the farm if you tick the box when booking and then click the link in our confirmation e-mail.
• Once a year we like to send our guests a Christmas card, and you can object to this at any time.
• You fill in the registration form with us when you arrive, and we use what it contains solely for registering your stay and the visitor’s tax.

3.Hosting at Cloudflare

Our website is hosted by Cloudflare and delivered from there to your browser. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare runs data centres all over the world, including in Germany, and serves our pages from one near you.

To deliver a page, Cloudflare processes technical data with every request: your IP address, the date and time, the address requested, the page you came from, and details of your browser and operating system. Cloudflare also uses these data to protect the website against attacks and overload, and keeps them only as long as needed for security and troubleshooting. We do not keep any visitor statistics of our own.

We serve the Ysabeau, Open Sans and Niconne fonts ourselves, so loading a page does not open a connection to Google or any other font provider.

Our booking database and the small programs that receive bookings, contact messages and e-mail sign-ups are also hosted at Cloudflare.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to offer the website securely and without outages. For the booking database, the legal bases described in the following sections apply.

Cloudflare acts as our processor (Art. 28 GDPR). More on transfers to the USA under Transfers outside the EU.

4.Booking through the website

When you book online, we need your first and last name, postal address and country, e-mail address and phone number, together with the apartment you want, your arrival and departure dates, the number of adults, the ages of any children and whether a dog is coming along. You may also give us your approximate arrival time and a message. We ask for the children’s ages because the visitor’s tax depends on them. We do not ask for your date of birth when you book.

We use these data to conclude the contract and prepare your stay, that is for the confirmation, the entry in the booking calendar, any questions and settling the bill on arrival. The legal basis is Art. 6(1)(b) GDPR. Without the required details we cannot accept the booking.

5.Booking calendar at DREAMWAY TRAVEL

We manage our booking calendar and all bookings with the Travel 2.0 software of DREAMWAY TRAVEL GmbH, Kirchplatz 6, 87509 Immenstadt, Germany. We use it through our listing on Landsichten.de, which Landtourismus Marketing GmbH runs from the same address.

Our website only reads from it which days the apartments are booked, so that the calendar on this site is correct. This query runs directly between the servers and contains no data about you or any other visitor.

When you confirm a booking on our website, we enter it in Travel 2.0 with the details from your booking, that is name, address, contact details, dates, number and ages of guests, whether a dog is coming, price and visitor’s tax, your arrival time and your message to us. This way no apartment is let twice. Other portals on which we offer the apartments only learn from it which days are booked. The legal basis is Art. 6(1)(b) GDPR.

DREAMWAY TRAVEL GmbH processes these data on our behalf (Art. 28 GDPR). They are kept there as long as the booking itself (see “Booking through the website”).

6.Registration form and visitor’s tax

As hosts in Fischbachau we have to register all our guests with the municipality for the visitor’s tax, at the latest on the day after arrival (visitor’s tax bylaw of the municipality of Fischbachau). For guests who are not German citizens, the Federal Registration Act also requires a registration form (Sec. 29 and 30 BMG).

For this you fill in a paper registration form with us when you arrive. In it you enter what the municipality and the law require, that is name, address, date of birth and your arrival and departure dates. Guests from abroad also give their nationality and their passport or ID number and sign the form.

With these details we register you with the municipality of Fischbachau, which uses them to charge the visitor’s tax, and for this we hand in the registration form to the municipality. Your guest card comes with the visitor’s tax.

The legal basis is Art. 6(1)(c) GDPR in conjunction with Sec. 29 and 30 BMG and the visitor’s tax bylaw of the municipality of Fischbachau. We keep the copy of the registration form that stays with us for one year from your departure and destroy it within three months after that at the latest (Sec. 30(4) BMG).

7.E-mail consent

When you book, you can tick a separate box if you would like to receive occasional e-mails from us about available dates, offers for our holiday apartments and news from the farm, no more than about four times a year. Ticking the box is voluntary, and your booking works just the same without it.

If you tick it, we send you a separate e-mail with a confirmation link (double opt-in). You are only added to our mailing list once you confirm your sign-up with a button via that link. This makes sure nobody signs up with someone else’s address. The link is valid for 30 days, and if you do not click it, we delete the sign-up after those 30 days.

As proof we store the time of your sign-up and of your confirmation, the version of the consent text you saw, and a checksum (hash) of your IP address.

The legal basis is your consent (Art. 6(1)(a) GDPR, Sec. 7(2) no. 2 UWG). You can withdraw it at any time with effect for the future, via the unsubscribe link in every e-mail or with a short note to us. We keep your address for sending until you withdraw. We keep the proof of your consent for a further three years after that, so that we can show we only wrote to you with your permission (Art. 7(1) and Art. 6(1)(f) GDPR).

8.Birthday greetings

If you like, you can tell us your birthday when you book and tick the box next to it. You will then receive birthday greetings from us, by post to the address in your booking or by e-mail. For this we store only the day and month. We only send the greetings by e-mail if you have also confirmed our e-mails (previous section), and with an unsubscribe link that ends both the greetings and our e-mails.

The legal basis is your consent (Art. 6(1)(a) GDPR). We keep the day and month until you withdraw your consent, for which a short note to us is enough. We keep the proof of consent for three years after that. We never use the date of birth from the registration form or the visitor’s tax report for this.

9.Christmas cards by post

Once a year we like to send our guests a Christmas card, and now and then greetings from the farm by post. For this we use your name and postal address from your booking. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is staying in touch with our guests and reminding them of another holiday with us (direct marketing, Recital 47 GDPR).

Once a year we go through the list, and anyone who has not stayed with us in the last five years is taken off it.

10.Contact form

Through our contact form you send us your name, your e-mail address, your phone number if you wish, and your message. We use these details only to reply to you. If your message concerns a booking, the legal basis is Art. 6(1)(b) GDPR, otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

We store the message in our database at Cloudflare and forward it to our mailbox through our e-mail service. We delete it from the database after six months.

If you write to us directly at info@meisterhof.com, Cloudflare receives your e-mail, checks it for spam and phishing and forwards it to our mailbox at WEB.DE, a service of 1&1 Mail & Media GmbH, Brauerstraße 48, 76135 Karlsruhe, Germany. Cloudflare does not store the content of your e-mail. We can see the sender, recipient, subject and time in our Cloudflare account for 31 days, so that we can check whether an e-mail has arrived. E-mails to our former address info@fewo-kellerer.de still arrive in our mailbox at STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. We keep e-mails as long as we need them for your enquiry. If they relate to a booking, the retention periods for bookings apply.

11.Our e-mail service

We send booking confirmations, confirmation links, the e-mails before and after your stay, our e-mails to guests who have consented, and messages from the contact form through the Resend service of Plus Five Five, Inc., San Francisco, USA. The messages to our own mailbox go through the same service, that is the details of your booking for entering it in our booking calendar and reminders about this, as well as the lists for birthday and Christmas post. Resend processes your e-mail address, the content of the message and technical delivery data on our behalf (Art. 28 GDPR) and stores them in the USA. Resend deletes the delivery logs after 30 days.

12.Cookies and browser storage

We store nothing on your device for statistics or advertising. Anything saved in your browser is technically necessary for the site to work and therefore does not require consent (Sec. 25(2) no. 2 TDDDG):

• To protect against automated attacks, Cloudflare may set a security cookie such as “__cf_bm”. It expires after 30 minutes of inactivity.
• The pages on which you confirm your booking, your e-mail sign-up or your unsubscription keep the code from your link in your browser’s session storage, so that they still work after a reload. The code stays on your device and is deleted as soon as you close the tab.
• Only for our internal area (/intern/), which is used exclusively by our family, we set the cookie “mh_intern” after sign-in. It keeps the sign-in for up to 30 days. Visitors of the website never receive this cookie.

13.Links to other providers

For directions we link to the route planners of Google Maps, Apple Maps and OpenStreetMap, and in a few places to other websites such as the municipality’s or our listings with associations and holiday portals. The logos of these associations and portals are stored on our own server, so nothing is loaded from them when you open our pages. Clicking such a link takes you away from our site, and the privacy policy of that provider applies.

14.Recipients

Beyond this, we pass your data on to no one.

15.Transfers outside the EU

Cloudflare, Inc. and Plus Five Five, Inc. (Resend) are based in the USA. Since 10 July 2023 there has been an adequacy decision of the European Commission for the USA, the EU-U.S. Data Privacy Framework (Art. 45 GDPR), and both companies are certified under it. Their contracts also include the EU standard contractual clauses (Art. 46(2)(c) GDPR).

16.Retention periods

17.Your rights

You can ask us for information about the data we hold on you (Art. 15 GDPR) and have incorrect details corrected (Art. 16). You can also request erasure, unless we still have to keep the data (Art. 17), have processing restricted (Art. 18) and receive your data in a common format (Art. 20). You can withdraw any consent at any time with effect for the future (Art. 7(3)). An informal message to us is enough for all of this.