Privacy Policy
How we handle your personal data under the General Data Protection Regulation (GDPR).
Last updated: July 2026
1. Controller
The controller responsible for data processing on this website is:
Son Tran Van
Toepfermarkt Apartments (Kleingewerbe)
Steinweg 3, 34369 Hofgeismar
info@toepfermarkt-apartments.de · +49 1525 2103134
2. General information
We take the protection of your personal data seriously. We process personal data only where there is a legal basis to do so, and only to the extent necessary. Personal data is any information relating to an identified or identifiable natural person.
3. Hosting
This website is hosted on Cloudflare Pages, provided by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). When you visit the site, Cloudflare processes connection data (including your IP address) to deliver the site and ensure its security and availability. The legal basis is our legitimate interest in a secure and efficient website under Art. 6 (1)(f) GDPR. A data processing agreement is in place; data transfers to the USA are covered by the EU standard contractual clauses.
4. Server log files
When you access the website, the host automatically collects and stores technical information in server log files that your browser transmits: browser type and version, operating system, referrer URL, time of the request and IP address. This data is not merged with other data sources and is used only to operate the site securely. The legal basis is Art. 6 (1)(f) GDPR.
5. SSL / TLS encryption
This site uses SSL/TLS encryption for security. You can recognise an encrypted connection by the "https://" in the address bar and the lock symbol in your browser.
6. Contact form and inquiries
When you send us an inquiry via the form, by email, phone or WhatsApp, we process the data you provide (such as name, email address, requested dates, apartment, number of guests and your message) in order to handle your request and any resulting booking. The form is processed via Formspree, provided by Formspree, Inc. (USA), acting as our processor to forward the message to our mailbox. The legal basis is Art. 6 (1)(b) GDPR for pre-contractual and contractual measures, and Art. 6 (1)(f) GDPR for handling general inquiries. Data transfers to the USA are covered by standard contractual clauses. We keep this data for as long as needed to process your request and to meet statutory retention periods.
7. Booking data
If a booking is concluded, we process the data required for the accommodation contract and invoicing (such as name, address, contact details and stay details). The legal basis is Art. 6 (1)(b) GDPR (contract) and Art. 6 (1)(c) GDPR (statutory tax and commercial retention obligations).
8. Fonts
The fonts used on this website are hosted directly on our own server and are loaded from there. No connection to Google servers is established and no data is transmitted to Google when you display the site.
9. Web analytics (Cloudflare)
To understand how our website is used (such as the number of page views, most-visited pages and rough country of origin), we use Cloudflare Web Analytics, a privacy-friendly service by Cloudflare, Inc. It works without cookies and without storing or reading any information on your device. It does not track individual visitors across sites, does not create user profiles and does not use fingerprinting. The measurement is based on aggregated, anonymised data only. The legal basis is our legitimate interest in the needs-based design and statistical evaluation of our website under Art. 6 (1)(f) GDPR.
10. Language preference (local storage)
The website stores your chosen language locally in your browser (local storage) so it can be remembered on your next visit. This is technically necessary for the requested function, contains no personal data and is not transmitted to us or any third party. No tracking or advertising cookies are used.
11. External links (Instagram, WhatsApp)
Our site links to our Instagram profile and to WhatsApp. These are simple links; data is only transmitted to the respective provider once you actively click them and use their service. Their own privacy policies then apply.
12. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing. Where processing is based on consent, you may withdraw it at any time with effect for the future. To exercise your rights, contact us using the details above.
13. Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority. The authority responsible for us is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Postfach 3163, 65021 Wiesbaden.
← Back to home