Moselglück · Your data
Privacy policy
How we process personal data when you visit our website, contact us or book a stay. Last updated: 21 October 2026.
1. Controller and contact
Finn Mayer, Moselweinstraße 8, 56814 Ediger-Eller, Germany. Email: [email protected]. Phone: +49 151 41652454.
2. Website provision with Lodgify
We use Lodgify, a service of Codebay Solutions Limited, to provide this website, the booking system and enquiry and reservation management. Technical connection data, including your IP address, time, requested page, browser and device information, is processed when you visit. Images, fonts and other files are delivered through Lodgify and its delivery infrastructure. Processing serves the reliable and secure provision of the website under Article 6(1)(f) GDPR; our legitimate interest is secure operation. Article 6(1)(b) GDPR also applies when you use the booking system. Lodgify processes booking and contact data as a processor. Its contractual terms, subprocessors and transfer mechanisms are described in its Data Processing Addendum.
3. Enquiries and bookings
When you contact us by form, email or phone, or book a stay, we process the information you provide: in particular your name, contact details, travel dates, guest numbers, booking details, message and necessary billing information. We use this to answer your enquiry, prepare your booking and arrange your stay. The legal basis for pre-contractual enquiries and performance is Article 6(1)(b) GDPR. Legal record-keeping duties are covered by Article 6(1)(c) GDPR. Other enquiries are handled under Article 6(1)(f) GDPR in our legitimate interest in communication. Our email account uses Gmail. Google processes the necessary message and connection data; see Google’s privacy policy.
4. Payments
Stripe and PayPal are integrated for online payments. If you select one of these methods, the provider receives the payment, contact and transaction data necessary to process the payment under Article 6(1)(b) GDPR. Providers may also process data to prevent fraud and meet their own legal obligations. See the Stripe privacy policy and PayPal privacy policy. For manual payments we process the details needed to match payment to your booking; banks process the transaction under their own privacy notices.
5. Form protection, cookies and similar functions
The Lodgify contact form uses Google reCAPTCHA to protect against automated abuse. Google may process IP address, browser, device and interaction data to distinguish human input from automated access. Our interest in protecting the form and preventing spam is the basis for processing under Article 6(1)(f) GDPR. See Google’s privacy policy. Necessary storage and access on your device for requested booking or security functions is governed by section 25(2) of the German TDDDG. Where consent is required beyond this, section 25(1) TDDDG and Article 6(1)(a) GDPR apply. You can restrict or delete cookies in your browser, which may affect functionality.
6. FAQ assistant and location information
Our FAQ assistant uses locally stored accommodation information. Its answer logic does not send input to an external AI service and does not create its own persistent conversation record. Information is used within the open conversation. The assistant cannot book, cancel or make payments. Processing is based on Article 6(1)(b) GDPR for booking-related questions or Article 6(1)(f) GDPR for our legitimate interest in providing general accommodation information. Map images on apartment pages are loaded through Lodgify’s map proxy infrastructure. External directions links open Google Maps, where the provider’s own privacy terms apply.
7. Instagram and Facebook
Our social media icons are ordinary links displayed within this website. No Instagram or Facebook feed is embedded. Opening a link loads the service in a new tab. Meta may then process your IP address, browser information and, if signed in, link the visit to your account. We operate these profiles to share information and communicate. Information visible to us in messages and interactions is used to respond and maintain our profiles under Article 6(1)(b) GDPR for booking enquiries, or Article 6(1)(f) GDPR in our legitimate interest in information and communication. The EU provider is Meta Platforms Ireland Limited. Meta may process data for its own content, advertising and analytics purposes. Where applicable, page statistics are governed by the Page Insights Controller Addendum. See Meta’s privacy policy and Instagram’s privacy information.
8. Recipients and processing outside the EEA
Recipients include our technical service providers, the selected payment provider and bodies to whom disclosure is legally required, where necessary. International providers may process data outside the European Economic Area. Applicable adequacy decisions or appropriate safeguards, particularly standard contractual clauses, govern these transfers. Details are provided in the linked provider information, including Google’s transfer framework information.
9. Retention
We retain personal data only as long as necessary for its purpose. Enquiries are deleted once resolved unless legal obligations or legitimate evidential interests require retention. Booking, payment and accounting records are kept for applicable statutory retention periods. Unresolved claims may require retention until resolution or expiry of the relevant limitation period.
10. Your rights
Subject to applicable legal requirements, you have rights of access, rectification, erasure, restriction of processing and data portability. You may withdraw consent at any time for the future without affecting prior lawful processing. Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. You may object to direct marketing at any time. Contact us using the details above to exercise your rights. You may also complain to a supervisory authority, including the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate.
11. Required information
Mandatory details for an enquiry or booking are marked in the form. Without the data needed to perform the contract we cannot process your booking. Optional details are marked or arise from the content of your message.
WhatsApp contact
The WhatsApp button is an ordinary external link. The service is opened only when you click it. If you contact us through WhatsApp, the service processes the necessary connection and communication data under its own privacy terms. We use your message to answer your enquiry under Article 6(1)(b) GDPR for booking enquiries, or Article 6(1)(f) GDPR in our legitimate interest in communication. You can alternatively reach us by email or phone. See WhatsApp’s privacy policy.