Privacy policy

1. Data controller

The person responsible for processing personal data on this website is:

Email: casaherkules@vodafonemail.de
Mobile: +49 178 4052790

2. Website and hosting

The public website is hosted by ALL-INKL.COM – Neue Medien Münnich, proprietor René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. To deliver and secure the website, the hosting provider processes technical access data. This may include your IP address, the time of access, requested file, volume of data transferred, status message, browser and operating system information, and referring page.

This processing serves to provide the website, analyse errors and protect against misuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is a secure, functioning website. Log data is stored only for as long as required for these operational and security purposes. In the event of a specific security incident, relevant data may be retained until the incident is resolved and for the pursuit of legal claims.

Provider information: Privacy at ALL-INKL.COM.

3. Contact by email or telephone

If you contact us, we process the contact details and message content you provide in order to respond to your enquiry. Enquiries about a stay are processed under Article 6(1)(b) GDPR for steps prior to a contract or performance of a contract. Other enquiries are processed under Article 6(1)(f) GDPR; our legitimate interest is responding to your message. Our email and telecommunications providers are also involved in this processing.

We delete enquiries once they have been fully dealt with and the data is no longer needed. Where statutory retention obligations apply, data is retained under Article 6(1)(c) GDPR until the relevant period expires. Data required to establish or defend legal claims may be retained until the matter is resolved or the applicable limitation period expires. Contacting us is voluntary; without the necessary information, we may be unable to handle an enquiry.

4. Booking.com and external links

The booking buttons lead to Booking.com. This website has no booking form or payment processing. You only connect to an external provider when you open its link. The provider’s privacy information applies to processing on its website. The booking links do not contain an affiliate identifier.

When you book, we receive the booking and contact details needed for your stay from Booking.com, such as your name, travel dates and number of guests. We use these details to manage the letting under Article 6(1)(b) GDPR and, where legally required, Article 6(1)(c) GDPR. They are deleted after the contract has been fulfilled unless retention obligations or legitimate requirements relating to legal claims apply.

Booking.com privacy information

5. Google Maps – only with your consent

The map is embedded only after you select “Accept & load map”. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google processes data including your IP address, device information and interactions with the map. This may be linked to your Google account, and cookies may be stored or read.

The legal basis for embedding the map is Article 6(1)(a) GDPR, and additionally section 25(1) TDDDG for access to your device that requires consent. Google may also process data in the USA. Google LLC relies on its EU-US Data Privacy Framework certification for covered transfers; other transfers may rely on standard contractual clauses. Details and safeguards are set out in Google’s information on data transfers. Retention periods depend on the type of data, purpose and account settings; see Google’s privacy policy.

You can stop the embedded map at any time using “Withdraw consent & disable map” below it. Withdrawal applies to future processing and does not delete data already transmitted. Your choice is not stored permanently; the map is disabled again when the page is reloaded.

Go to the map and its settings

6. Images, fonts and audience measurement

The apartment photographs and Kassel artwork load from the same web server as this website. This does not connect to Booking.com or an image platform. The fonts used come from your device. Our own website code uses no analytics or advertising trackers, and no cookies or browser storage to recognise returning visitors. The optional Google Maps embed is an exception; see section 5.

7. Your rights

Subject to the applicable legal requirements, you have the right to access your personal data (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20).

Objection: You may object under Article 21 GDPR to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation. You may object to processing for direct marketing at any time.

Withdrawal of consent: You may withdraw consent at any time with effect for the future. This does not affect the lawfulness of processing before withdrawal. To exercise your rights, use the contact details above. For the map, a withdrawal button is also available directly below the map.

Complaint: Under Article 77 GDPR, you may complain to a data protection supervisory authority, particularly in the place where you live or work or where the alleged infringement occurred. The Hessian Commissioner for Data Protection and Freedom of Information is a competent authority for us: Complain to the Hessian data protection authority.

We do not make automated decisions, including profiling, on this website within the meaning of Article 22 GDPR.