Privacy Policy – Villa Picobello

1. Controller

Responsible for data processing:
Tomas Della Pepa
An der Fohlenweide 20
67112 Mutterstadt
Germany
✉ tomas@dellapepa.de

2. General Information

This website processes personal data only to the extent that it is technically necessary or required for handling inquiries and bookings.

3. Hosting / Server Log Files

When accessing the website, the hosting provider automatically collects data such as IP address, date and time of access, browser type, and operating system.
This data is used for technical security purposes and is not combined with other data sources.
Legal basis: Art. 6 (1) (f) GDPR.

4. Contact

If you contact us by email or contact form, the information you provide will be stored: name, email address, and message content.
Purpose: processing your request.
Legal basis: Art. 6 (1) (b) GDPR.

5. Bookings / Payment Processing (PayPal)

In the context of bookings, personal data required for contract performance is processed (e.g. name, address, booking details).

Payment service providers
In the course of payment transactions, data may be transmitted to external payment service providers.
This may include in particular: name, billing data, and payment information.
The processing is carried out for the purpose of contract fulfilment.
Legal basis: Art. 6 (1) (b) GDPR.

Provider:
PayPal

Alternatively for bank transfer:
In the case of payment by bank transfer, no data is transferred to external payment service providers.

6. Maps (Leaflet / OpenStreetMap)

This website uses the JavaScript framework Leaflet to display maps (e.g. to show the location of the holiday villa).
When loading the maps, technical data (e.g. IP address) may be transmitted to servers of map providers.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest: presentation of the accommodation).

7. Cookies and Consent Management

This website uses cookies. Cookies are small text files stored on your device.

Technically necessary cookies
These cookies are required for the operation of the website (e.g. booking functions or page navigation). They are stored on the basis of Art. 6 (1) (f) GDPR.

Optional cookies and consent
For all non-essential cookies (e.g. external content or payment services), consent is obtained via a cookie banner.
The legal basis is Art. 6 (1) (a) GDPR.
Consent can be withdrawn or adjusted at any time via the cookie banner.

Consent management
The consent tool CookieYes is used to manage cookie settings. It stores the user’s preferences.

8. Retention Period

Personal data is stored only for as long as necessary for the respective purposes or as required by statutory retention periods.

9. Rights of the Data Subjects

You have the following rights at any time:
Access (Art. 15 GDPR)
Rectification (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)

10. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority.

11. Changes to This Privacy Policy

This privacy policy may be amended as necessary in order to comply with legal or technical changes.