Privacy policy
English translation for your convenience. The operative version is the German Datenschutzerklärung.
1. Controller
Anna Radová, Agnesstraße 31, 80798 München, email: annaradova03@gmail.com
2. What we process
For a booking we process: name, email address, telephone number, the rental period you chose, the pickup time, any add-ons, and the payment confirmation. For an enquiry through the contact form we process what you enter there.
We also collect your billing address (street, postcode, town). This is legally required to issue a proper invoice (§ 14 UStG) and is processed to perform the contract (Art. 6(1)(b) GDPR) and to meet tax obligations (Art. 6(1)(c) GDPR).
We do not store identity documents on this website. Your ID is checked in person at handover and is never stored digitally.
Server log files. When you open this website your browser transmits technically necessary data which our host records: IP address, date and time of access, the page requested, the referrer, browser type and operating system. This serves only the secure and fault-free operation of the site. The legal basis is our legitimate interest in operational security (Art. 6(1)(f) GDPR). It is not combined with other data, and the logs are deleted after at most 30 days.
Required information. Name, email address, telephone number and billing address are necessary to enter into the contract (Art. 13(2)(e) GDPR). Without them we cannot process the booking or issue a proper invoice. Everything else is optional.
There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR. Stripe performs an automated risk check on the payment to prevent fraud; that does not decide whether your booking is accepted.
3. Legal basis
Processing takes place to perform the rental contract (Art. 6(1)(b) GDPR), to meet statutory retention obligations (Art. 6(1)(c) GDPR), and on the basis of your enquiry (Art. 6(1)(b) or (f) GDPR).
4. Recipients and services used
- Stripe (Stripe Payments Europe Ltd., Ireland) — payment processing and the card reservation. Payment data goes directly to Stripe; we store no card details.
- Resend — sending the booking confirmation, invoice and rental agreement by email.
- Neon (Neon Inc.) — database hosting in the EU region for booking data.
- Netlify, Inc. — hosting and delivery of the website and its server-side functions.
- WhatsApp / Meta Platforms Ireland Ltd.— only if you actively contact us via WhatsApp, in which case WhatsApp/Meta’s privacy terms apply. WhatsApp is not required for booking, invoicing or support; binding communication runs by email.
Where a provider is outside the EU (for example Netlify, Meta), data is transferred on the basis of the EU standard contractual clauses.
5. Retention
Invoices and the associated accounting records are kept for eight years (§ 147(3) AO, § 257(4) HGB); individual commercial and tax documents may carry a ten-year period. Data is deleted once the applicable period expires. Enquiries that do not lead to a contract are deleted after 12 months at the latest.
6. Cookies
This website sets no tracking or marketing cookies. Technically necessary cookies may be set by the payment provider Stripe to secure payments and prevent fraud.
7. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Contact annaradova03@gmail.com.
Right to object (Art. 21 GDPR). You have the right to object at any time, on grounds relating to your particular situation, to processing of your data based on Art. 6(1)(f) GDPR (legitimate interest). A message to annaradova03@gmail.com is enough; we will then stop processing the data concerned unless there are compelling legitimate grounds to the contrary.
You also have the right to lodge a complaint with a data protection supervisory authority. Ours is the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany.
8. Calendar availability
To show free dates we read only the busy periods from the owner’s calendar. No personal data of website visitors is processed in doing so.