Privacy Policy

1. Controller

The controller responsible for processing personal data in this section of the website is:

Email: residences@privatehideaway.com
Telephone: +49 7222 9609-991

Please use the email address stated above for privacy enquiries or to exercise your rights.

2. Scope

This privacy policy explains how we process personal data when you visit our website, manage your cookie settings, subscribe to a newsletter or use section-specific services such as booking or property enquiry functions. Personal data is any information relating to an identified or identifiable individual.

3. Hosting and website delivery

This WordPress website is hosted by HostPress GmbH, Bahnhofstraße 34, 66571 Eppelborn, Germany. When you access the website, technical data may be processed, including your IP address, date and time of access, requested page or file, amount of data transferred, referrer URL, browser, operating system and status information.

The processing is necessary to provide the website securely, reliably and efficiently. It is based on our legitimate interests under Article 6(1)(f) GDPR. HostPress processes data on our behalf under Article 28 GDPR. Log data is deleted once it is no longer needed for these purposes, unless security requirements or statutory duties require longer retention.

4. Cookies and consent management with CCM19

We use CCM19, provided by Papoo Software & Media GmbH, Auguststraße 4, 53229 Bonn, Germany. CCM19 stores your cookie and technology preferences and enables us to demonstrate your consent choices.

The data processed may include your consent choices, IP address, browser and device information, and the date and time of your selection. Processing is necessary to comply with our legal obligations and is based on Article 6(1)(c) GDPR. The storage of or access to information on your device is governed by section 25 TDDDG or Article 22.2 LSSI-CE.

Non-essential services are not activated until you have given consent. You may change or withdraw your choice at any time through “Cookie settings” in the footer.

5. Analytics and marketing

With your consent, we use Google Tag Manager and Google Analytics, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Meta Pixel, provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

These services help us manage website tags, understand website use and measure the effectiveness of our communications and advertising. They may process usage, device, browser, interaction, approximate location and protected IP address data. Meta may associate information with an existing Meta account.

Processing is based on your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG or Article 22.2 LSSI-CE. Google and Meta may process data in the United States. Their relevant US companies participate in the EU-US Data Privacy Framework; standard contractual clauses may also be used where required.

6. Google Maps and external fonts

Google Maps and fonts loaded from third-party servers are only activated with your consent. Loading such content may transmit your IP address, device details, the page visited and, in the case of maps, location information to the relevant provider. The legal basis is Article 6(1)(a) GDPR and section 25(1) TDDDG or Article 22.2 LSSI-CE. Wherever possible, fonts are hosted locally.

7. WhatsApp

We may offer the option of contacting us through WhatsApp. The provider for users in the EEA is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. If you choose WhatsApp, WhatsApp processes your telephone number and communication and metadata. We process your message and contact details to respond to your enquiry.

Processing is based on Article 6(1)(b) GDPR where your message relates to a contract or pre-contractual steps, and otherwise on our legitimate interest in efficient communication under Article 6(1)(f) GDPR. Please do not send particularly sensitive or confidential information via WhatsApp.

8. Newsletter with Brevo

We use Brevo, provided by Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany, for newsletter subscriptions and delivery. We process your email address and, where provided, your name, language, relevant website section, subscription time and double-opt-in records. Brevo may also process delivery, opening and click data where you have consented to this.

Processing is based on your consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time through the unsubscribe link in each email or by contacting the relevant controller. After unsubscribing, your email address may be retained on a suppression list to prevent further mailings, based on our legitimate interests under Article 6(1)(f) GDPR.

9. Sharing within the Private Hideaway group

If your enquiry clearly concerns another Private Hideaway division, we may forward your information to the company responsible for that division where this is necessary to deal with your enquiry and you can reasonably expect the transfer or have consented to it.

The legal basis is Article 6(1)(b) GDPR for pre-contractual steps, Article 6(1)(a) GDPR where you have consented, or Article 6(1)(f) GDPR in other appropriate cases. Your details are not shared for independent marketing without any consent required by law.

10. Recipients, international transfers and retention

We use providers for hosting, maintenance, consent management, newsletters, analytics, advertising and section-specific CRM, booking and property functions. Processors are bound by agreements under Article 28 GDPR. Other recipients receive data only where necessary for a contract, required by law, covered by your consent or otherwise legally permitted.

Where data is transferred outside the EEA, we rely on an adequacy decision, the EU-US Data Privacy Framework or appropriate safeguards such as standard contractual clauses.

We retain personal data only for as long as required for the relevant purpose, unless statutory retention periods, legal claims or continuing consent justify longer storage.

Booking and guest communication with Re:Guest

We use Re:Guest, provided by REGUEST AG, Via Alois-Kuperion 34, 39012 Merano, Italy, for booking enquiries, quotations and guest communication. The data processed may include identity, contact, enquiry, quotation, booking, stay and communication data.

Processing for pre-contractual steps and the accommodation contract is based on Article 6(1)(b) GDPR. Any use for newsletters, profiling or performance measurement is based on your consent under Article 6(1)(a) GDPR. Re:Guest acts as a processor under Article 28 GDPR.

We process data required for booking, guest care, invoicing, deposits and statutory guest registration. Where necessary, data may be shared with local guest-relations, cleaning, technical and administrative providers and competent authorities. Car hire, private chefs, yoga, boat and yacht services are supplied by independent providers. We share the necessary details only at your request and on an appropriate legal basis.

Your rights and security

Subject to the GDPR, you have rights of access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests for reasons arising from your particular situation. You may withdraw consent at any time for the future and lodge a complaint with a data protection supervisory authority.

We use appropriate technical and organisational safeguards. The website is delivered over an encrypted HTTPS connection.

Last updated: August 2026