Privacy Policy
- Data Controller
The controller responsible for the processing of personal data on this website is:
Janosch Deeg
Oberes Bieth 3
69221 Dossenheim
Germany
Phone: +49 159 01103552
Email: janoschdeeg@gmail.com
Website: www.villaola.de
2. General Information on Data Processing
We take the protection of your personal data seriously. We treat your personal data confidentially and in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR). Personal data means any information relating to an identified or identifiable person. We process personal data only where this is necessary to provide and operate this website, process booking and contact enquiries, carry out bookings or comply with legal obligations.
3. Visiting Our Website and Server Log Files
When you visit our website, information is automatically transmitted to our web server and stored in so-called server log files. This may include, in particular:
IP address
date and time of access
page or file accessed
referrer URL
browser and operating system used
HTTP status code
amount of data transferred
The processing is carried out to provide the website technically, ensure its security and stability, and detect and prevent misuse or attacks on our systems. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our website. The website is hosted by netcup GmbH. As part of its hosting services, netcup processes technical access data and server log files. According to netcup, the relevant log data is generally deleted or anonymised after 14 days, unless longer storage is required, for example to defend against or assert legal claims.
4. SSL/TLS Encryption
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar and the padlock symbol. Encryption helps prevent transmitted data from being read by third parties without authorisation.
5. Booking Enquiries and Bookings with HBook
We use the WordPress plugin HBook to display availability and prices and to process booking enquiries and bookings. When you submit a booking enquiry or make a booking through our website, we may process the following personal data:
first and last name
email address
telephone number
address, where required for the booking
booking details and requested stay
number of guests
other information you voluntarily provide as part of your booking enquiry
This data is processed to handle your enquiry, take pre-contractual measures and, where a booking is made, perform the contract pursuant to Article 6(1)(b) GDPR. We may also process the data on the basis of statutory retention and documentation obligations pursuant to Article 6(1)(c) GDPR.
6. Contact by Email or Telephone
If you contact us by email or telephone, we process the personal data you provide, in particular:
name
email address
telephone number
content of your enquiry
any other information you voluntarily provide
The data is processed to handle your enquiry and communicate with you. Depending on the nature of the enquiry, the legal basis is Article 6(1)(b) GDPR where the enquiry relates to the initiation or performance of a contract, or Article 6(1)(f) GDPR based on our legitimate interest in handling incoming enquiries.
7. Contact Form
If you use our contact form, we process the data you provide, in particular your first and last name, email address and the content of your message. The data is processed to handle your enquiry and communicate with you. Depending on the nature of the enquiry, the legal basis is Article 6(1)(b) GDPR where the enquiry relates to the initiation or performance of a contract, or Article 6(1)(f) GDPR based on our legitimate interest in handling incoming enquiries. We use the information solely to process your enquiry and do not disclose it to third parties without a legal basis.
8. Email Delivery via WP Mail SMTP
For reliable email delivery from WordPress, we use WP Mail SMTP. The plugin is used to send emails generated by WordPress via a configured email server or SMTP service. According to the provider, WP Mail SMTP itself does not store personal data on its servers, insofar as this is not required for the respective operation.
9. Multilingual Website with Polylang
This website uses Polylang to provide content in several languages. Polylang uses a cookie named pll_language to store the language selected by the visitor and to recognise the selected language on subsequent visits. According to the provider, this cookie contains only the language code. The cookie is used to provide the requested language version of the website and is not an advertising or tracking cookie.
10. Cookies and Consent Management
Our website uses cookies and similar technologies where these are necessary for the technical operation of the website, the provision of certain functions or, where applicable, for other purposes. We use Compliance by Hu-manity.co as a consent management platform to manage consent for the use of non-essential cookies and similar technologies. Depending on its configuration, the plugin may transmit data between the visitor’s browser and Hu-manity.co services. In such connections, the IP address is technically visible to the receiving server. Non-essential services are generally activated only after the visitor has given the appropriate consent. You can change your settings at any time using the privacy or cookie settings provided on our website.
11. No Use of Google Fonts
Google Fonts are not loaded directly from Google’s servers on our website. We use the Disable Google Fonts plugin for this purpose. Fonts are therefore not requested from Google servers each time the website is accessed. This serves to minimise unnecessary data transfers.
12. Security Measures
We use various technical and organisational security measures to protect our website and the personal data we process against loss, misuse, unauthorised access, alteration or destruction. These include security functions and protection against excessive login attempts. The processing of corresponding technical data serves exclusively to ensure and protect the operation of the website.
13. Backups with UpdraftPlus and Google Drive
We use UpdraftPlus to back up and restore our website. The plugin regularly creates backups of the website, which may contain personal data depending on their contents. The backups are stored on Google Drive. They may contain, in particular, data from the WordPress database, booking and contact enquiries, as well as other content stored on the website. The backups are stored solely for the purpose of securing and restoring the website. One backup is created each week. A maximum of three backups are retained; older backups are automatically deleted. A backup is therefore retained for approximately three weeks. The processing and storage of data by Google is subject to Google’s privacy policy.
14. No Analytics or Advertising Tracking
We currently do not use analytics tools such as Google Analytics or advertising and remarketing services on this website. No personal usage profiles are therefore created for advertising or analytics purposes.
15. Links to Social Networks
Our website may contain links to our social media profiles, in particular Instagram and Facebook. These are normal external links and not embedded social media plugins. Simply having these links on our website does not result in data being transmitted to Instagram or Facebook. Only when you click on such a link do you leave our website and access the respective provider. The privacy policies of the respective providers apply to any data processing carried out there.
16. Data Retention
We store personal data only for as long as necessary for the respective purpose or as required by statutory retention obligations. Booking and contract data may be retained beyond the actual stay due to statutory retention obligations. Enquiries and other communication data are deleted as soon as they are no longer required to process the enquiry and provided that there are no statutory retention obligations or legitimate interests requiring further storage.
17. Your Rights
You generally have the following rights regarding your personal data:
Right of access pursuant to Article 15 GDPR
Right to rectification pursuant to Article 16 GDPR
Right to erasure pursuant to Article 17 GDPR
Right to restriction of processing pursuant to Article 18 GDPR
Right to data portability pursuant to Article 20 GDPR
Right to object to processing pursuant to Article 21 GDPR
Right to withdraw consent with effect for the future
Please note that these rights are not unrestricted and may, in particular, be subject to statutory retention obligations.
18. Right to Lodge a Complaint with a Supervisory Authority
If you believe that the processing of your personal data violates the General Data Protection Regulation, you have the right to lodge a complaint with a data protection supervisory authority. In particular, you may contact the supervisory authority responsible for your place of residence or habitual residence.
19. Updates to This Privacy Policy
We reserve the right to amend this Privacy Policy if the technical or legal circumstances of our website change or if new functions or services are added. The current version of this Privacy Policy is available on this website.
Last updated: August 2026