Privacy policy

Protecting your personal data is important to us. This privacy policy informs you about which personal data we collect when you visit our website wohnmobilstellplatz-dresden.com and when you book a pitch, for which purposes and on which legal basis we process it, and which rights you have. Personal data is any data that can be used to identify you personally. Processing is carried out exclusively in accordance with the General Data Protection Regulation (GDPR / DSGVO) and the German Federal Data Protection Act (BDSG).

Controller

The controller within the meaning of the GDPR (DSGVO) is: Schulz-Grundstücksverwaltung eGbR Landsbergstraße 29 26871 Papenburg represented by Gerhard Schulz Email: [email protected] Phone: +49 172 8028783 The controller decides, alone or jointly with others, on the purposes and means of processing personal data. For all questions concerning data protection and the exercise of your rights, you can contact us at any time using the contact details above.

Collection and processing of personal data and purposes

We process personal data to the following extent and for the following purposes: Booking data: When you book a pitch, we process your first name, last name, vehicle licence plate, telephone number, email address, the desired booking period and the payment data required for processing. We need this data in order to conclude and perform the contract for the use of the pitch, to send you a booking confirmation and an invoice, and to be able to contact you in case of queries. The payment itself is handled by our payment service provider Stripe; your full credit card or payment data is processed directly by Stripe and is not accessible to us. Communication and message content: When you contact us by email, via the contact form or via the chat on our website, we process the content you provide as well as your contact details in order to respond to your enquiry. To answer guest enquiries we use an AI-supported assistant ("AI Concierge") that processes incoming message and email content in order to draft or generate responses. For information about the surrounding area (e.g. sights, weather, pollen, air quality or location information), the assistant may additionally draw on services from Google as well as a provider of large language models (LLMs). Server and access logs: When you access our website, technically necessary access data (server or log files) is processed, such as the IP address, the date and time of access, the file requested, the browser used and the operating system. This data serves the provision, stability and security of our website.

Legal bases for processing

We process your personal data on the following legal bases: Art. 6 (1) (b) GDPR (DSGVO) (contract): Where processing is necessary to perform the booking contract or to carry out pre-contractual measures – in particular to process your booking, to handle payment and to respond to your enquiries. Art. 6 (1) (c) GDPR (DSGVO) (legal obligation): Where we are legally obliged to process data, in particular to fulfil retention obligations under commercial and tax law for invoices and booking records. Art. 6 (1) (f) GDPR (DSGVO) (legitimate interest): Where processing is necessary to safeguard our legitimate interests, for example to ensure the technical security and stability of our website, to evaluate server log files, and to respond efficiently to enquiries with the help of our AI-supported assistant. Art. 6 (1) (a) GDPR (DSGVO) (consent): Where you have given us consent, for example for the use of features that are not strictly necessary. You can withdraw any consent you have given at any time with effect for the future, without this affecting the lawfulness of the processing carried out up to the time of withdrawal.

Recipients and processors

To provide our services we use carefully selected service providers who process personal data on our behalf and in accordance with our instructions. Where necessary, we have concluded data processing agreements with these service providers pursuant to Art. 28 GDPR (DSGVO). Cloudflare (hosting and infrastructure): Our website is provided via Cloudflare Pages; the booking process runs via a Cloudflare Worker, and the associated data is stored in the Cloudflare database services D1 and KV. The provider is Cloudflare, Inc. or the Cloudflare entity responsible for the EU; processing takes place primarily on servers within the EU. Stripe (payment processing): For processing payments we use Stripe. The provider is Stripe Payments Europe, Ltd. (Ireland). Your payment data is processed directly by Stripe; we only receive the confirmation information required for booking and invoice management. Resend (email delivery): We handle the sending of transactional emails (booking confirmations, invoices and notifications to the operator) via the Resend service. Google (area information): To provide area information through our AI Concierge we use services of the Google Maps Platform (in particular Places, Weather, Pollen and Air Quality). The provider is Google Ireland Limited. LLM provider (AI assistant): To generate responses from our AI Concierge we use a provider of large language models (LLMs), which processes the message content required for the response on our behalf. Google Analytics 4 and Cloudflare Zaraz (audience measurement): For the statistical analysis of website usage we use Google Analytics 4, which we integrate via Cloudflare Zaraz (server-side tag and consent management). The providers are Cloudflare, Inc. or the Cloudflare entity responsible for the EU, and Google Ireland Limited. Details on cookies, the legal basis and your right to object can be found in the section "Cookies, local storage and audience measurement". We do not pass on your data to third parties beyond this, unless we are legally obliged to do so or you have expressly consented.

Data transfers to third countries

Some of the service providers we use are based in, or partly process data outside, the European Union or the European Economic Area, in particular in the USA (e.g. Cloudflare, Stripe, Google and, where applicable, the LLM provider we use). Where personal data is transferred to a third country in this context, we ensure an adequate level of data protection. This is achieved in particular by concluding the standard contractual clauses provided by the EU Commission (Art. 46 GDPR (DSGVO)), where applicable in conjunction with supplementary protective measures, or – where the respective provider is certified – on the basis of the EU-U.S. Data Privacy Framework pursuant to an adequacy decision of the EU Commission (Art. 45 GDPR (DSGVO)). Further information and a copy of the respective safeguards are available on request via the contact details above.

Storage period and deletion

We only process and store your personal data for as long as this is necessary for the respective purposes or for as long as statutory retention obligations exist. Booking and communication data is generally deleted as soon as the respective purpose (in particular the complete processing of your booking and the response to your enquiry) no longer applies and no statutory retention obligations prevent this. Data subject to retention obligations under commercial and tax law – in particular invoices and booking-relevant records – is retained in accordance with the statutory requirements; these retention periods are generally six or ten years (§ 257 HGB, § 147 AO). After these periods expire, the data concerned is deleted. Server and access logs are stored only for a short period necessary to ensure security and are then deleted. Where processing is based on your consent, we delete the data concerned after the consent is withdrawn, unless there are other legal bases for storage.

Your rights as a data subject

With regard to the personal data concerning you, you have the following rights: Right of access (Art. 15 GDPR (DSGVO)): You can request information about whether and which personal data we process about you. Right to rectification (Art. 16 GDPR (DSGVO)): You can request the correction of inaccurate data or the completion of incomplete data. Right to erasure (Art. 17 GDPR (DSGVO)): You can request the deletion of your data, provided that no statutory retention obligations or other legal grounds prevent this. Right to restriction of processing (Art. 18 GDPR (DSGVO)): Under certain conditions you can request the restriction of the processing of your data. Right to data portability (Art. 20 GDPR (DSGVO)): You can request to receive the data you have provided in a structured, commonly used and machine-readable format, or to have it transmitted to another controller. Right to object (Art. 21 GDPR (DSGVO)): You can object at any time, on grounds relating to your particular situation, to the processing of your data carried out on the basis of a legitimate interest (Art. 6 (1) (f) GDPR (DSGVO)). Withdrawal of consent (Art. 7 (3) GDPR (DSGVO)): You can withdraw any consent you have given at any time with effect for the future. To exercise your rights, an informal message to the controller's contact details above is sufficient.

Right to lodge a complaint with the supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR (DSGVO). For this purpose you can contact the supervisory authority responsible for us or the supervisory authority of your place of residence. The authority responsible for the location of the pitch in Dresden is: Sächsischer Datenschutzbeauftragter (Die Sächsische Datenschutz- und Transparenzbeauftragte) Devrientstraße 1 01067 Dresden Email: [email protected] Phone: +49 351 85471 101

Cookies, local storage and audience measurement

For statistical audience measurement we use Google Analytics 4 (GA4), which we integrate via Cloudflare Zaraz. In doing so, cookies or similar identifiers (e.g. _ga, _ga_*) are stored in your browser and usage data is processed (such as the pages visited, the approximate region based on the truncated IP address, the device used and the browser) in order to evaluate the use of our website and improve our offering. Measurement may already be active on your first page view. Via our consent banner, and at any time via the "Cookie settings" link in the footer, you can object to or deactivate the analysis (selecting "Essential only"), with effect for the future. The legal basis is your consent, where you give it (Art. 6 (1) (a) GDPR (DSGVO), § 25 (1) TDDDG), and otherwise our legitimate interest in a needs-based design of our website that is evaluated statistically (Art. 6 (1) (f) GDPR (DSGVO)). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; any transfer of data to Google LLC in the USA takes place on the basis of the EU-U.S. Data Privacy Framework (Art. 45 GDPR (DSGVO)). In addition, we use technically necessary storage mechanisms in your browser's local storage (localStorage) to save your consent decision as well as your accessibility settings; the legal basis in this respect is § 25 (2) TDDDG or Art. 6 (1) (f) GDPR (DSGVO).

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, such as the booking and contact enquiries you send to us, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the browser's address bar changing from "http://" to "https://" and by the padlock symbol in your browser bar. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Changes to this privacy policy

We reserve the right to amend this privacy policy so that it always complies with the current legal requirements, or in order to implement changes to our services in the privacy policy, for example when introducing new features or using new service providers. The version currently available on this website then applies to your next visit.