Privacy policy
1. Controller
The controller for the processing of data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Miriam Ann Sterk
Schlätterstraße 46
88074 Meckenbeuren
Telephone: +49 7542 9521900
E-mail: info@sterk-apartments.de
2. Consent for external content
This website does not use any analytics, advertising or tracking services. No profiling and no automated decision-making take place. Fonts are delivered from our own server, so no connection to Google Fonts or comparable services is established.
Two elements, however, come from other providers: the map on the “Location” page and the booking calendar on the “Book” and “Apartments” pages. When this content is loaded, your IP address is transmitted to the respective provider and information may be stored on your device — for example cookies set by that provider.
That is why we ask on your first visit how you would like to handle this:
- Allow external content: the map and the booking calendar are displayed as soon as you reach the relevant place.
- Do not load: a note with a button appears instead. The content is only loaded once you click it. Without that click, no request is sent to the provider.
The legal basis for loading this content and for the associated storage of information on your device is your consent under Art. 6 (1) (a) GDPR and § 25 (1) of the German TDDDG. You may withdraw it at any time with effect for the future: at the very bottom of every page you will find the item “External content: change choice”. As long as you have not made a selection, “do not load” applies.
Your decision is stored in your browser’s local storage (entry sterk-externe-inhalte). It does not leave your device and is not transmitted to us. Storing this single piece of information is permitted without consent under § 25 (2) no. 2 TDDDG, because your wish could otherwise not be honoured. You can delete the entry at any time in your browser settings. Beyond this we do not set any cookies, except for a technically necessary session cookie on the “Request an invoice” page (see section 6).
3. Hosting and server log files
The website is hosted by an external service provider. When a page is accessed, the server automatically stores access data in a log file. Typically recorded are:
- IP address of the requesting device
- date and time of access
- name and URL of the file retrieved, and the volume of data transferred
- notification of successful retrieval
- browser and operating system used
- previously visited page (referrer), where transmitted
The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in technically faultless operation, in the security of our systems and in defending against attacks. The data are not combined with other data sources and are deleted after seven days at the latest, unless they are required to investigate a specific security incident.
The hosting provider is ALL-INKL.COM – Neue Medien Münnich, Inhaber René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The servers are located in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.
4. Contacting us
If you contact us by e-mail or telephone, we process the data you provide in order to answer your enquiry. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a booking or its initiation, otherwise Art. 6 (1) (f) GDPR based on our interest in answering enquiries. We delete the data as soon as your enquiry has been dealt with conclusively and no statutory retention obligations prevent this.
5. Bookings
On the “Book” and “Apartments” pages we offer content from Smoobu GmbH. It is not loaded without your consent — see section 2. When it is loaded, your IP address and further usage data are transmitted to the provider and information may be stored on your device.
Which data arise when you book
To make a booking you provide your contact details. Required are your first and last name, e-mail address and postal address, together with the booking details: period of stay, the apartment requested and the number of guests. We also store the date and time of your booking. Your telephone number and any message in the comments field are optional; the booking is equally valid without them.
All information you provide on this website — including comments — is personal data. We process and use it in order to handle your booking and provide the requested service, and to send you information that is relevant to the booking or your stay. The legal basis is Art. 6 (1) (b) GDPR. Booking records are retained in accordance with commercial and tax law periods (up to ten years).
Disclosure to our booking service provider
The personal data collected when a booking is made are passed on to the following third party:
Smoobu GmbH – Smoobu.com is a software for rental owners
Pappelallee 78/79
10437 Berlin
Germany
Smoobu acts for us as a processor pursuant to Art. 28 GDPR. Smoobu’s privacy policy is available at www.smoobu.com/en/privacy-policy/.
6. Requesting an invoice
On the “Request an invoice” page (/requestInvoice/) you can request an invoice for an existing booking. To do so, you enter your booking number and your last name. We check both against the booking data held at Smoobu (see section 5) and then show you the dates, the amount and the address stored with the booking.
We process the booking number, first and last name, a company name and VAT ID if provided, your address and the email address to which the invoice should be sent. These details and the invoice created from them are sent to us by email; we check the invoice and then send it to you. The legal basis is Art. 6 (1) (b) GDPR and, insofar as we are legally obliged to issue and retain invoices, Art. 6 (1) (c) GDPR. We retain invoices in accordance with the retention periods under tax law.
To prevent booking numbers from being guessed, we count failed attempts. For this we do not store your IP address, only a shortened checksum derived from it, which is discarded after one hour. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is protecting our guests’ booking data against unauthorised access.
So that the page can link its two steps – finding the booking and confirming the address – it sets a technically necessary session cookie (sterk_rechnung). It contains only a random identifier and is deleted when you close your browser. This is permitted without consent under § 25 (2) no. 2 TDDDG.
7. Registration requirement on arrival
As an accommodation provider we are obliged under §§ 29 et seq. of the German Federal Registration Act to have arriving guests complete and sign a registration form. We process the data collected in order to fulfil this legal obligation under Art. 6 (1) (c) GDPR and retain the forms for the statutory period of one year. They are then destroyed.
8. Map (Google Maps)
On the “Location” page we offer a map from Google Maps, operated by Google Ireland Limited. It is not loaded without your consent — see section 2. When it is loaded, your IP address and further usage data are transmitted to the provider; transfer to the USA is possible in this context.
9. Encryption
This website is delivered exclusively over an encrypted connection (HTTPS/TLS). Data transmitted between your device and our server are therefore protected against being read by others.
10. Your rights
Under the GDPR you have the following rights:
- access to the data stored about you (Art. 15)
- rectification of inaccurate data (Art. 16)
- erasure (Art. 17) and restriction of processing (Art. 18)
- data portability (Art. 20)
- objection to processing based on legitimate interests (Art. 21)
- withdrawal of consent given, with effect for the future (Art. 7 (3))
Simply contact us using the details given above. Independently of this, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.
11. Changes to this policy
We adapt this privacy policy whenever the website or the legal situation changes. The version published here applies in each case.
Last updated: October 2026