Data protection declaration for the rental of the holiday apartment 1. Responsible body Responsible for the processing of your personal data is: G.A.D.D Ferienwohnung Glück an der Donau Hirschensteinweg 3 +49(0)1795988883 glueckanderdonau@gmail.com 2. Collection and processing of personal data The following data is collected when booking and using the holiday apartment: Booking data: name, address, telephone number, e-mail address Payment data: bank details or other payment information Data that must be reported (if required by the Registration Act): date of birth, nationality, ID number The data is used exclusively for the following purposes: Processing and handling of your booking Fulfillment of legal reporting obligations (e.g. guest registration form) Invoicing and payment processing Contacting us if you have any questions or problems 3. Legal basis for processing Your personal data is processed on the basis of the following legal bases: Art. 6 Para. 1 lit. b GDPR: Processing to fulfill a contract (booking the holiday apartment). Art. 6 Paragraph 1 Letter c GDPR: Processing to fulfill legal obligations (e.g. reporting obligations). 4. Disclosure of data Your personal data will not be passed on to third parties, except: To fulfill legal obligations (e.g. disclosure to authorities as part of the reporting obligation). To process payments if a payment service provider is used. With the express consent of the tenant. 5. Duration of storage Personal data is only stored for as long as it is necessary to process the rental agreement or statutory retention periods: Booking and contract data: 10 years in accordance with tax and commercial law retention obligations. Registration data: 1 year after departure, in accordance with the requirements of the Registration Act. 6. Rights of the data subjects You have the right: To receive information about the data stored (Art. 15 GDPR). To request correction of incorrect data (Art. 16 GDPR). To request deletion of the data, provided there are no legal retention obligations (Art. 17 GDPR). To request the restriction of processing (Art. 18 GDPR). To object to the processing of your data (Art. 21 GDPR). To receive your data in a portable format (Art. 20 GDPR). To complain to a data protection authority if you believe that the processing of your data is unlawful. The responsible supervisory authority is: [Name of the state data protection authority, e.g. "The State Commissioner for Data Protection and Freedom of Information [federal state]"] 7. Data security Your personal data is protected by suitable technical and organizational measures to prevent unauthorized access, loss or manipulation. 8. Contact for data protection questions If you have any questions or concerns about data protection, you can contact the person responsible (see Section 1) at any time.
