Privacy Policy

1. Overview of Data Protection

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. Detailed information on data protection can be found in our privacy policy listed below.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find the operator’s contact details in the section “Information on the Responsible Party” in this privacy policy.

How do we collect your data?

Your data is collected when you provide it to us. This may include data you enter into a contact form.

Other data is collected automatically or with your consent when you visit the website. This mainly includes technical data (e.g., internet browser, operating system, or time of page visit). This data is collected automatically as soon as you enter the site.

What do we use your data for?

Some of the data is collected to ensure the proper functioning of the website. Other data may be used to analyze your user behavior. If contracts are initiated or concluded via the website, the transmitted data will also be processed for contractual offers, orders, or other service requests.

What rights do you have regarding your data?

You have the right to receive information free of charge at any time about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can withdraw this consent at any time for the future. Furthermore, you have the right to request the restriction of the processing of your personal data under certain circumstances. You also have the right to lodge a complaint with the relevant supervisory authority.

If you have any questions about data protection, you can contact us at any time.

Analytics and Third-Party Tools

When visiting this website, your browsing behavior may be statistically analyzed. This is mainly done with so-called analytics programs.

Detailed information on these analytics tools can be found in the following privacy policy.

2. Hosting

We host the content of our website with the following provider:

IONOS

Provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. When you visit our website, IONOS collects various log files including your IP address. For more details, see the IONOS privacy policy: https://www.ionos.de/terms-gtc/terms-privacy.

The use of IONOS is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable presentation of our website possible. If corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TTDSG, as long as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

Order Processing

We have entered into a Data Processing Agreement (DPA) for the use of the above service. This is a contract required by data protection law that ensures that this service processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

3. General Notes and Mandatory Information

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is data that can be used to personally identify you. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

We point out that data transmission over the internet (e.g., communication by email) may have security gaps. Complete protection of data from access by third parties is not possible.

Information on the Responsible Party

The responsible party for data processing on this website is:

Maximilian Hebenstreit, Timo Delsing, Niko Möller GbR
Lanterstraße 1A
45136 Essen
Germany

Phone: +49 157 5524 3674
Email: booking@talblick9.com

The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g., names, email addresses, etc.).

4. Data Collection on This Website

Cookies

Our websites use so-called "cookies." Cookies are small data packets that can be stored on your device. They do not cause any harm and do not contain viruses. A distinction is made between temporary cookies (session cookies) and permanent cookies. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them or your browser deletes them automatically.

Cookies can be set either by us (first-party cookies) or by third-party providers (third-party cookies). Third-party cookies enable the integration of external services, for example.

We use technically necessary cookies based on Art. 6(1)(f) GDPR, as they are essential for the secure and functional operation of this website. Cookies for external content, statistics, or convenience features (e.g., Google Maps or visitor analysis) are only set with your explicit consent in accordance with Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG.

You can revoke or adjust your consent at any time. In your browser settings, you can also generally restrict or prevent the use of cookies.

Details of the cookies used are as follows:

Cookies Used in Detail:

Technically Necessary Cookies (without consent):

• cookie_consent – Stores the user’s selection (“All cookies” or “Only necessary cookies”) anonymously. Validity: approx. 1 year.
• user_uuid – Generates an anonymous session ID with no personal traceability. Validity: approx. 1 year.
• _scc_session – Used to manage an anonymized user session. Validity: approx. 17 minutes.

Performance Cookies (only with consent):

• _tccl_visitor – Analyzes visitor behavior to improve website functionality. Validity: approx. 11 months, 4 weeks.
• _tccl_visit – Tracks individual sessions to optimize structure and usability. Validity: approx. 30 minutes.

Functionality Cookies (only with consent):

• pll_language – Stores the selected website language. Validity: approx. 11 months, 4 weeks.

Cookies for External Services (only with consent, e.g., Google Maps):

• NID – Google cookie for displaying embedded Google Maps content. Validity: approx. 6 months.
• CONSENT – Cookie to store consent for Google services. Validity: permanent.

These optional cookies are only set if you have explicitly consented to their use.

Server Log Files

The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:

• Browser type and version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

This data is not merged with other data sources.

The collection of this data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website—for this purpose, the server log files must be collected.

Contact via Form, Email or Phone

If you contact us via the contact form on the website, by email, telephone, or fax, your information including the personal data provided (e.g., name, email address, phone number, message) will be stored and processed for the purpose of handling your inquiry and any follow-up questions. This data will not be passed on without your explicit consent.

The processing is carried out—depending on the purpose of the inquiry—based on Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures) or based on our legitimate interest in the effective processing of inquiries (Art. 6(1)(f) GDPR). If you have expressly given your consent, processing is additionally based on Art. 6(1)(a) GDPR. Consent can be withdrawn at any time.

We use the “SendGrid” service provided by Twilio Inc., 101 Spear Street, 5th Floor, San Francisco, CA 94105, USA, for the technical transmission of contact form data via email. Your data (including name, email, phone number, and message) is transmitted to and processed by SendGrid’s servers for delivery. This is based on our legitimate interest according to Art. 6(1)(f) GDPR for secure and reliable delivery. Twilio SendGrid is certified under the "EU-US Data Privacy Framework". For more information, see: https://www.twilio.com/legal/privacy.

The transmitted data will remain with us until you request deletion, revoke your consent, or the purpose of storage no longer applies (e.g., after your request has been fully handled). Legal retention obligations remain unaffected.

Contact via WhatsApp

If you contact us via WhatsApp, your phone number and—if provided—your name and other personal data communicated during the conversation will be processed by us for the purpose of handling your request and any further follow-up.

The legal basis for processing is Art. 6(1)(b) GDPR, if your request relates to the performance of a contract or pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of incoming inquiries (Art. 6(1)(f) GDPR).

Please note that WhatsApp is a product of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. When using WhatsApp, data may be transmitted to WhatsApp Inc. servers in third countries, particularly the USA. However, WhatsApp is certified under the EU-U.S. Data Privacy Framework.

For more information on WhatsApp's data processing, please refer to the provider’s privacy policy at: https://www.whatsapp.com/legal/privacy-policy-eea.

5. Social Media

Instagram

This website integrates functions of the Instagram service. These functions are provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

If the social media element is active, a direct connection between your device and the Instagram server is established. Instagram thereby receives information that you have visited this website.

If you are logged into your Instagram account, you can link the content of this website to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to this website with your user account. We point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or their use by Instagram.

The use of this service is based on your consent in accordance with Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent can be revoked at any time.

To the extent that personal data is collected on our website using the tool described here and forwarded to Facebook or Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26 GDPR). This joint responsibility is limited solely to the collection and transfer of data to Facebook or Instagram. Any processing after transfer is not part of the joint responsibility. The joint obligations are set forth in an agreement. You can find the agreement text here: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing privacy information when using the Facebook/Instagram tool and for implementing the tool on our website in a data protection-compliant manner. Facebook is responsible for the data security of the Facebook/Instagram products. Data subject rights (e.g., requests for information) regarding the data processed by Facebook or Instagram can be exercised directly with Facebook. If you assert rights with us, we are obliged to forward them to Facebook.

Data transfer to the USA is based on the EU Commission’s Standard Contractual Clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://privacycenter.instagram.com/policy/ and https://de-de.facebook.com/help/566994660333381.

For more information, please refer to Instagram’s privacy policy: https://privacycenter.instagram.com/policy/.

TikTok

This website may include functions of the social network TikTok. The provider for users within the EU is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.

If the social media element is active, a direct connection between your device and TikTok’s servers is established. TikTok then receives information that you have visited this website.

If you are logged into your TikTok account, TikTok can associate your visit to this website with your user account. We point out that, as the provider of this website, we have no knowledge of the content of the data transmitted or its use by TikTok.

The use of this service is based solely on your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent can be revoked at any time.

If personal data is collected on our website using the TikTok element and forwarded to TikTok, processing is carried out on the basis of a joint controller agreement pursuant to Art. 26 GDPR, where such an agreement exists. For more information on joint responsibility, please refer to TikTok's privacy policy.

Data transfers to third countries (in particular the USA or China) are based on the EU Commission’s Standard Contractual Clauses or other appropriate safeguards. More information is available at:

• https://www.tiktok.com/legal/page/eea/privacy-policy/en
• https://www.tiktok.com/legal/page/eea/terms-of-service/en

Further information on TikTok's privacy practices can be found in their privacy policy at the link above.

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States to ensure compliance with European data protection standards when processing data in the US. Each company certified under the DPF commits to these data protection standards. More information is available from the provider at: https://www.dataprivacyframework.gov/participant/4452.

6. Plugins and Tools

Google Fonts (local hosting)

This site uses so-called Google Fonts for the uniform display of fonts, which are provided by Google. The Google Fonts are installed locally. A connection to Google servers does not take place.

For more information on Google Fonts, see https://developers.google.com/fonts/faq and Google's privacy policy: https://policies.google.com/privacy?hl=en.

Elfsight (Google Reviews Widget)

This website integrates a widget for displaying Google Reviews via the service “Elfsight.” The provider is Elfsight, LLC, 300 Front Street, Suite 111, San Francisco, CA 94111, USA.

When the widget is loaded, personal data such as your IP address may be transmitted to Elfsight’s servers. Elfsight also uses cookies and similar technologies. The widget is only loaded after your explicit consent.

The legal basis is your consent in accordance with Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG. Consent can be revoked at any time.

For more information on Elfsight’s privacy practices, see: https://elfsight.com/privacy-policy/

Smoobu (Booking Tool)

This website uses the “Smoobu” service provided by Smoobu GmbH, Wönnichstraße 68/70, 10317 Berlin, for the management of bookings and vacation rentals.

Smoobu processes booking inquiries, displays the availability calendar, and may manage contact forms. Personal data such as name, email address, period of stay, and other booking-related information is processed.

Data processing is based on Art. 6(1)(b) GDPR (contract fulfillment) and, where applicable, on Art. 6(1)(f) GDPR (legitimate interest in the efficient management of booking inquiries).

For more information on how Smoobu processes data, see their privacy policy: https://www.smoobu.com/datenschutzerklaerung/

Matomo (Website Analytics)

This website uses Matomo Analytics, an open-source web analytics software, to statistically evaluate the use of our website. Matomo does not set tracking cookies unless you have explicitly consented to their use. The collected information about your usage is stored on our own server and is not shared with third parties. You can opt out of tracking at any time by disabling the switch in the cookie banner. The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in analyzing and optimizing our website). If you have given your consent, processing is carried out on the basis of Art. 6 (1) lit. a GDPR.

Source: https://www.e-recht24.de