Imprint & Privacy Policy
**Imprint (Legal Notice)**
Zuhause auf Zeit
Owner: Michael Sell
Dallingerstraße 4C
90459 Nuremberg, Germany
Phone: +49 176 2314 6449
E-Mail: kontakt@zuhauseaufzeit.info VAT ID according to §27a UStG: to be provided
Content responsible according to §18 Abs. 2 MStV:
Patrick Wilden, E-Mail: kontakt@zuhauseaufzeit.info
**Privacy Policy**
**1. Introduction**
This privacy policy informs you about the personal data we process on this website, the purposes for which this data is used, and the rights of data subjects under the General Data Protection Regulation (GDPR). This policy applies to all areas of the online presence at [www.zuhauseaufzeit.info](http://www.zuhauseaufzeit.info), including the integrated booking functions.
**2. Data Controller**
The controller within the meaning of the GDPR is:
Zuhause auf Zeit
Owner Michael Sell
Dallingerstraße 4C
90459 Nuremberg,
Privacy contact:
Patrick Wilden
E-Mail: kontakt@zuhauseaufzeit.info
**3. Hosting and Technical Provision**
The website is operated via the Smoobu website builder and hosting infrastructure. Smoobu also provides the booking system and technical data transfer as part of the rental process. Additionally, domain management and the e-mail system are provided by IONOS. A data processing agreement (Art. 28 GDPR) exists with IONOS (domain/email) and Smoobu. Data processing is based on Art. 6(1)(b) GDPR for the performance of pre-contractual and contractual measures and Art. 6(1)(f) GDPR to ensure the functionality and security of the website.
**4. Cookies and Consent**
Only technically necessary cookies are used, which are required for the booking function and site security. A cookie banner informs users about the use of these essential cookies. No data is shared for advertising or tracking purposes.
**4.1. Server Log Files**
When accessing our website, the hosting provider automatically processes server log files (IP address, date/time, requested URL, referrer URL, browser/version, operating system). The legal basis is Art. 6(1)(f) GDPR (security and stability of technical operations). Log data is stored briefly for security reasons and then deleted or anonymized.
**5. Contact**
If you contact us via e-mail, phone, or a booking form, the data you provide will be processed to handle your request. The legal basis is Art. 6(1)(b) GDPR for pre-contractual communication and Art. 6(1)(f) GDPR for general inquiries. If no booking occurs, contact requests are deleted within six months.
**6. Bookings and Rental Process**
During booking, personal data such as name, address, contact details, stay period, and property allocation are processed. Processing is based on Art. 6(1)(b) GDPR for contract performance. Billing is currently handled directly via invoice without a payment service provider. Due to tax retention obligations under HGB and AO, certain data must be archived for up to ten years.
**7. Registration Duty under Federal Registration Act**
For rentals, there is a legal obligation to record registration data according to §29 BMG, including first and last name, address, date of birth, nationality, and ID data. These data are stored for one year according to §30 BMG and then deleted. Legal basis: Art. 6(1)(c) GDPR in conjunction with BMG.
**8. Use of External Booking Portals**
We are also bookable via external platforms such as Airbnb and Booking.com. The respective privacy policies of these providers apply. Data entered there is first processed by the platforms and then transmitted to us to complete the booking. Legal basis: Art. 6(1)(b) GDPR. Transfers to third countries may occur according to the platform provider’s terms, based on Standard Contractual Clauses (SCC) or adequacy decisions of the EU.
**9. Social Media**
Our website contains links to our profiles on Facebook and Instagram. Only by clicking these buttons do you leave our website, and data is transmitted to Meta Platforms Ireland Limited (Facebook/Instagram). Legal basis: Art. 6(1)(f) GDPR, as we have a legitimate interest in presenting our company externally and communicating with guests. Meta is solely responsible for data processing on their platforms. Privacy notices: [Facebook](https://www.facebook.com/privacy), [Instagram](https://privacycenter.instagram.com). We are jointly responsible with Meta Platforms Ireland Ltd. for the processing of “Insights Data” (Art. 26 GDPR). Key contents of the agreement are provided by Meta.
**10. Video Surveillance**
For the security of the property and prevention of vandalism or unauthorized access, outdoor cameras are used. Legal basis: Art. 6(1)(f) GDPR. Recordings are automatically overwritten after 48 hours unless a security-related event occurs. Only the operator has access; no further sharing occurs.
**11. Sensors in the Building**
Water and temperature sensors, as well as noise detection devices, are used to protect the apartments and detect damage early. No voice recordings are made; only technical level measurements occur. Legal basis: Art. 6(1)(f) GDPR due to legitimate interest in protecting property and preventing disturbances or damage.
**12. Data Retention**
Data is stored only as long as necessary or as required by law. Contact requests without bookings are deleted after six months. Booking and billing data are stored up to ten years due to tax obligations. Registration data is deleted after one year. Video recordings are overwritten after 48 hours unless security-relevant.
**13. Rights of Data Subjects**
Data subjects have the right to access, rectify, erase, restrict processing, data portability, and object to the processing of personal data. Consent can be revoked at any time for the future. Requests can be sent to [kontakt@zuhauseaufzeit.info](mailto:kontakt@zuhauseaufzeit.info).
**14. Supervisory Authority**
The responsible supervisory authority is the Bavarian Data Protection Authority (BayLDA), Promenade 27, 91522 Ansbach. There is a right to lodge a complaint with the authority under Art. 77 GDPR.
**15. Data Security**
The website is provided via a TLS-encrypted connection. Appropriate technical and organizational measures are in place to ensure the confidentiality and security of processed data. Access to personal data is limited to the operator.
**16. Changes to this Privacy Policy**
We reserve the right to adapt this privacy policy if legal requirements or technical procedures change. The version published on this website is always authoritative.
**Version: 2025**