Privacy Policy
Last updated: February 2026
Data Controller: Karsten Fusenig Zur Marktflagge 37, 10247 Berlin, Germany Email: info@premium-patio-apartment.de Phone: +49 151 15674931
§ 1 General Information on Data Processing
The protection of your personal data is important to us. Below we inform you about the collection, processing and use of your data when using our website and when booking our vacation rental “Premium Patio Apartment” in Pogorzelica, Poland.
The legal basis for data processing is the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
§ 2 Data Controller
Data controller within the meaning of the GDPR:
Karsten Fusenig Zur Marktflagge 37 10247 Berlin, Germany Email: info@premium-patio-apartment.de Phone: +49 151 15674931
§ 3 Collection and Storage of Personal Data
3.1 When Visiting the Website
When you access our website, the following data is automatically transmitted by your browser and stored in server log files:
- IP address of the requesting device
- Date and time of access
- Name and URL of the retrieved file
- Website from which access was made (referrer URL)
- Browser and operating system used
- Name of the access provider
This data is used exclusively to ensure trouble-free operation of the website and to improve our services. It is not associated with individual persons.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest).
3.2 For Booking Inquiries
When submitting a booking inquiry via the contact form, the following data is collected:
- First and last name
- Email address
- Phone number (optional)
- Desired travel period
- Number of guests
- Message (optional)
Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures).
3.3 For Bookings with Credit Card Payment
For direct bookings with credit card payment, the following additional data is collected:
- First and last name
- Email address
- Phone number
- Billing address (street, postal code, city, country)
- Number of guests (adults, children, dogs)
Legal basis: Art. 6 (1) (b) GDPR (performance of a contract).
§ 4 Payment Processing via Stripe
4.1 Payment Service Provider
For processing credit card payments, we use the payment service provider:
Stripe, Inc. 510 Townsend Street San Francisco, CA 94103, USA
Stripe Payments Europe, Ltd. 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland
4.2 Data Transfer to Stripe
When making a credit card payment, the following data is transmitted to Stripe:
- Cardholder’s name
- Email address
- Credit card details (card number, expiry date, CVC)
- Billing address
- Booking amount and currency
- Booking reference
4.3 Data Security
- Stripe is PCI DSS Level 1 certified — the highest security standard in the payment card industry.
- Credit card data is processed and stored exclusively by Stripe. The landlord has no access to complete credit card data at any time.
- Payment data is transmitted via SSL/TLS encryption.
4.4 Payment Data Stored by the Landlord
After a successful transaction, the landlord only stores:
- Stripe transaction ID (for payment assignment)
- Payment status (successful/failed/refunded)
- Booking amount
- Time of transaction
No credit card numbers, expiry dates or security codes are stored by the landlord.
4.5 Data Transfer to Third Countries
Stripe, Inc. is headquartered in the USA. Data transfer to the USA is based on:
- EU-US Data Privacy Framework (EU Commission adequacy decision)
- Standard Contractual Clauses (SCCs) of the EU Commission
For more information, see Stripe’s Privacy Policy.
Legal basis: Art. 6 (1) (b) GDPR (performance of a contract) and Art. 6 (1) (f) GDPR (legitimate interest in secure payment processing).
§ 5 Cookies
This website does not use cookies. No tracking cookies, analytics cookies or marketing cookies are used. Therefore, no cookie banner or cookie consent is required.
§ 6 Contact via Email
If you contact us by email, your details (name, email address, content of your inquiry) will be stored to process your request. This data will be deleted as soon as storage is no longer necessary, or processing will be restricted if statutory retention obligations apply.
Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR (legitimate interest).
§ 7 Hosting
This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster’s servers. The hoster processes the data on our behalf and is contractually obliged to comply with the GDPR.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest) and Art. 28 GDPR (processing on behalf).
§ 8 Your Rights as a Data Subject
Under the GDPR, you have the following rights:
| Right | Description | Legal Basis |
|---|---|---|
| Right of access | Information about your data stored by us | Art. 15 GDPR |
| Right to rectification | Correction of inaccurate or incomplete data | Art. 16 GDPR |
| Right to erasure | Deletion of your data, unless retention is required | Art. 17 GDPR |
| Right to restriction | Restriction of processing under certain conditions | Art. 18 GDPR |
| Right to data portability | Transfer of your data in a common format | Art. 20 GDPR |
| Right to object | Objection to processing for special reasons | Art. 21 GDPR |
| Withdrawal of consent | Possible at any time, without affecting prior processing | Art. 7 (3) GDPR |
To exercise your rights, please contact: info@premium-patio-apartment.de
§ 9 Right to Lodge a Complaint with a Supervisory Authority
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a data protection supervisory authority.
Responsible supervisory authority:
Berlin Commissioner for Data Protection and Freedom of Information Alt-Moabit 59-61 10555 Berlin, Germany Email: mailbox@datenschutz-berlin.de Website: https://www.datenschutz-berlin.de
§ 10 Data Security
We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously improved in line with technological developments.
For security reasons, this website uses SSL/TLS encryption. You can recognize an encrypted connection by “https://” in your browser’s address bar.
§ 11 Retention Periods
Personal data is deleted as soon as the purpose of storage no longer applies and no statutory retention obligations exist.
| Data Type | Retention Period | Legal Basis |
|---|---|---|
| Booking data | 10 years | Commercial and tax law obligations (§ 257 HGB, § 147 AO) |
| Invoice data | 10 years | § 257 HGB, § 147 AO |
| Payment transaction data | 10 years | § 257 HGB, § 147 AO |
| Booking inquiries (without booking) | 6 months | Legitimate interest |
| Server log files | 30 days | Legitimate interest |
| Email correspondence | 6 years | § 257 HGB |
§ 12 Changes to This Privacy Policy
We reserve the right to update this privacy policy to ensure it always complies with current legal requirements or to implement changes to our services. The new privacy policy will apply to your next visit.
§ 13 Contact
For questions regarding data protection, please contact:
Karsten Fusenig Email: info@premium-patio-apartment.de Phone: +49 151 15674931