This English version is provided for convenience. Where interpretation differs, the German version takes precedence, subject to mandatory law.
1. Controller
Daniel Muschler
Hauptstraße 16
69239 Neckarsteinach
Germany
Telephone: +49 176 78357293
Email: danielmuschler@googlemail.com
2. Hosting and server logs
This website is delivered through Cloudflare Pages, provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, California 94107, USA. When the website is accessed, Cloudflare processes technically required connection and log information. This may include the IP address, date and time, requested file, volume transferred, referrer, browser, operating system, access status and traffic-routing information.
Processing is necessary to deliver the website securely, quickly and reliably and to protect it against abusive traffic. It is based on Article 6(1)(f) GDPR and our legitimate interest in the secure and reliable operation of this website. Within the hosting and security services, Cloudflare acts as a processor for customer logs and content transmitted across its network. Retention depends on the relevant processing purpose, contractual settings and legal obligations.
Processing may take place outside the European Economic Area, particularly in the United States. For restricted transfers, Cloudflare's applicable data processing addendum provides for the EU Standard Contractual Clauses and supplementary safeguards. See Cloudflare's privacy policy and data processing addendum.
3. Smoobu booking engine
The booking engine of Smoobu GmbH, Pappelallee 78/79, 10437 Berlin, Germany, is embedded to display availability and process direct bookings. Loading and using it may transmit required connection data and the booking or contact information you enter to Smoobu.
Depending on use, this can include name, contact details, travel dates, number of guests, booking details, communications and accounting information. Processing is necessary for pre-contractual steps and performance of the accommodation agreement under Article 6(1)(b) GDPR and for legal obligations under Article 6(1)(c) GDPR. See Smoobu's privacy policy.
4. Payment via Stripe
Online payment is handled by Stripe. Stripe processes the payment, identification and transaction information required for the transaction. Complete card details are not stored on this website. Processing is necessary for payment and performance of the agreement under Article 6(1)(b) GDPR and for fraud prevention and legal obligations. See Stripe's privacy policy.
5. Telephone, email and WhatsApp
When you contact us, we process the information you provide to answer your enquiry and, where relevant, prepare or perform a booking. Article 6(1)(b) GDPR applies to contract-related enquiries and Article 6(1)(f) GDPR otherwise. WhatsApp is opened only if you actively select the WhatsApp link; that provider's own privacy information then applies.
6. Online check-in and statutory guest data
Where required by law, guest information is processed for registration forms, identity checks, tax records or other legal duties under Article 6(1)(c) GDPR. Apartment access details are not displayed publicly and are shared only in connection with a confirmed booking.
7. External links
The site links to services such as Google Maps, White Fleet Heidelberg and Wikimedia Commons. A connection to those providers is generally made only when you select the relevant link. The destination provider is responsible for processing on its website.
8. Cookies and analytics
The independent website does not use its own analytics, advertising or tracking services. The embedded Smoobu booking engine may use technically required browser storage or cookies. The published version will be checked again before launch. Any non-essential service added later will be loaded only after any consent required by law.
9. Retention
Personal data is deleted when its purpose no longer applies and no statutory retention duty or other lawful ground requires continued storage. Contract and invoice data is retained for the statutory periods that apply. Enquiry data without a subsequent contract is routinely deleted after the enquiry has been resolved and no retention ground remains.
10. Recipients and international transfers
Data is disclosed only where necessary for hosting, booking, payment, communications, tax or legal duties. Recipients may include the hosting provider, Smoobu, Stripe, technical subprocessors, public authorities and professional advisers where legally permitted. Transfers outside the EEA take place only where the requirements of Articles 44 et seq. GDPR are met.
11. Your rights
Subject to the GDPR, you may request access, rectification, erasure, restriction and data portability and may object to processing on grounds relating to your particular situation. Consent may be withdrawn at any time for the future without affecting prior lawful processing.
12. Complaint
You may complain to a data-protection authority. The authority responsible for the controller's location is the Hessian Commissioner for Data Protection and Freedom of Information, P.O. Box 3163, 65021 Wiesbaden, Germany, email: poststelle@datenschutz.hessen.de. More information is available at datenschutz.hessen.de.
13. Version
Last updated: 7 August 2026.