This is a courtesy translation. Only the German version is legally binding.
We run our website according to the principles set out below. We are committed to complying with statutory data protection requirements and always aim to observe the principles of data avoidance and data minimisation.
1. Name and address of the controller
The controller within the meaning of the General Data Protection Regulation (GDPR, DSGVO) and other national data protection laws of the member states of the European Union, as well as other data protection provisions, is:
Ferienhaus zum Goldschmied
Lisa & Daniel Werner
Steigstraße 2
97222 Rimpar OT Maidbronn
Email: info@zum-goldschmied.de
Phone: +49 170 2435507
2. Definitions of terms
We have drafted our privacy policy according to the principles of clarity and transparency. Should there nonetheless be ambiguity regarding the use of certain terms, the relevant definitions can be found here (German-language resource).
3. Legal basis for the processing of personal data
We process your personal data, such as your first and last name, your email address and IP address, only where a legal basis exists for doing so. Under the General Data Protection Regulation, three provisions in particular apply here:
a) You have given us your consent to the processing of your personal data for one or more purposes, Art. 6 (1) sentence 1 (a) GDPR. We inform you in detail about the purpose of the processing in this context, and your express consent is documented by us.
b) The processing of your personal data is necessary for the performance of a contract or to carry out pre-contractual measures with you, Art. 6 (1) sentence 1 (b) GDPR.
c) The processing of personal data is necessary to safeguard our legitimate interests, provided your interests or fundamental rights and freedoms do not override them, Art. 6 (1) sentence 1 (f) GDPR. We indicate at the relevant points the legal basis on which the processing of your personal data is based.
4. Disclosure of personal data
Your personal data is not transferred to third parties for purposes other than those listed below. We only disclose your personal data to third parties if:
- you have given your express consent under Art. 6 (1) sentence 1 (a) GDPR,
- disclosure is necessary under Art. 6 (1) sentence 1 (f) GDPR to assert, exercise or defend legal claims, and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,
- there is a legal obligation for disclosure under Art. 6 (1) sentence 1 (c) GDPR,
- this is legally permissible and necessary under Art. 6 (1) sentence 1 (b) GDPR for the processing of contractual relationships with you.
5. Storage period and deletion
We store all personal data you provide to us only for as long as is required to fulfil the purposes for which the data was transmitted, or as long as required by law. Once the purpose has been fulfilled and/or the statutory retention periods have expired, the data is deleted or blocked by us.
6. SSL encryption
For security reasons and to protect the transmission of confidential content, such as enquiries you send to us as the website operator, this website uses SSL encryption. You can recognise an encrypted connection by the fact that the browser's address line changes from "http://" to "https://" and by the padlock symbol in your browser line.
7. Enquiry form and email contact
We provide a form on our website that you can use to make enquiries about a stay. To use the form, you need to provide a name and a valid email address so that we know who the enquiry is from and can process it.
If you send us enquiries through the enquiry form, the details you provide in the form, including the contact details you give there and your IP address, are processed pursuant to Art. 6 (1) sentence 1 (b) and (f) GDPR to carry out pre-contractual measures taken in response to your enquiry, or to safeguard our legitimate interest, namely the exercise of our business activity.
You are also welcome to send us an email to the email address given on our website instead. In this case we store and process your email address and the details you provide in the email pursuant to Art. 6 (1) sentence 1 (b) and (f) GDPR to process your message.
Enquiries and the associated data are deleted at the latest once the matter has been concluded, unless they are needed for a further contractual relationship or statutory retention periods prevent this.
8. Cookies and tracking
We do not use tracking or analytics cookies on this website. There is no profiling, no advertising pixels and no external analytics tool. A cookie banner is therefore not required.
We process technically necessary data (for example, an entry in your browser's sessionStorage so that the booking bar at the bottom of the screen stays hidden after you close it) on the basis of our legitimate interest in a functioning website under Art. 6 (1) sentence 1 (f) GDPR.
9. Integrated third-party services
a) Fonts (self-hosted)
We use the "Fraunces" and "Manrope" typefaces to display our website. The font files are stored and delivered locally on our own server. There is no call to Google Fonts servers and no transmission of your IP address to Google.
b) OpenStreetMap
We embed a map from OpenStreetMap on our contact page. The provider is the OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. When you open the map, your IP address is transmitted to OpenStreetMap so that the map can be displayed in your browser. Further information on data protection at OpenStreetMap can be found at https://osmfoundation.org/wiki/Privacy_Policy.
The embedding of OpenStreetMap serves our interest in presenting our online offering in an appealing way and making the locations we reference easy to find; this constitutes a legitimate interest within the meaning of Art. 6 (1) sentence 1 (f) GDPR.
c) YouTube (with enhanced privacy mode)
We embed videos from YouTube on our videos page, operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). We use YouTube's enhanced privacy mode (youtube-nocookie.com) together with a click-to-load solution: a connection to YouTube's servers is only established once you actively click the video. Until then, no cookies are set and no data is transmitted to YouTube.
Once you start the video, YouTube receives the information that you have visited the relevant page. If you are logged into YouTube, YouTube can associate your browsing behaviour with your personal profile. You can prevent this by logging out of your YouTube account before clicking. Further information can be found in YouTube's privacy policy at https://policies.google.com/privacy.
d) External link to Heimatgefühl holiday apartment
On our contact page we link to our sister property, the "Heimatgefühl holiday apartment" (www.ferienwohnung-heimatgefuehl.de). Clicking the link takes you away from our website; the respective provider is responsible for data processing there.
10. Rights of the data subject
You have the following rights:
a) Right to information: under Art. 15 GDPR, you have the right to request information about your personal data processed by us.
b) Right to rectification: under Art. 16 GDPR, you have the right to have incorrect or incomplete personal data stored with us corrected without delay.
c) Right to erasure: under Art. 17 GDPR, you have the right to request the immediate deletion of your personal data held by us, provided further processing is not required for legal reasons.
d) Right to restriction of processing: under Art. 18 GDPR, you can request that we restrict the processing of your personal data.
e) Right to data portability: you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format (Art. 20 GDPR).
f) Right to withdraw consent: under Art. 7 (3) GDPR, you have the right to withdraw any consent you have given to us at any time.
g) Right to lodge a complaint: under Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes the GDPR. The competent authority is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.
h) Right to object: if your personal data is processed on the basis of legitimate interests under Art. 6 (1) sentence 1 (f) GDPR, you have the right to object under Art. 21 GDPR. If you wish to exercise your right of withdrawal or objection, an email to info@zum-goldschmied.de is sufficient.
11. Changes to this privacy policy
Should we amend this privacy policy, this will be indicated on the website.
Last updated: May 2026 (revised)