Privacy

Legal

This website is privacy-friendly by design: no analytics cookies are set, and cookies for measuring Google Ads conversions only with your explicit consent. External services load only where they are needed — the Google Maps map only on click, the booking widget on the booking page. This policy explains what data we process and when.

Controller

Villa Hahn, Kris Hahn, Wassergasse 5, 55597 Wöllstein, Germany · info@villa-hahn.com

Data we process

When you contact us or make a booking enquiry, we process the details you provide (such as name, email, dates) solely to handle your request or booking.

Cookies & Google Ads conversion measurement

We use no analytics services. Only if you choose “Accept” in the consent notice do we load Google Ads conversion tracking (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). It measures whether visitors arriving via one of our Google ads send the contact form, spend at least two minutes on the booking page or complete a booking (including booking value and booking number). Google sets cookies for this (e.g. “_gcl_au”, “_gcl_aw”, stored for up to 90 days) and processes data such as IP address and device and click information; a transfer to Google LLC in the USA is possible, based on the EU-US Data Privacy Framework. We do not use personalised advertising (remarketing). The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw it at any time via “Cookie settings” in the footer. We store your choice in your browser's local storage, which is technically necessary (§ 25(2) TDDDG). Details: Google privacy policy.

Hosting

This website is hosted by Vercel Inc. (USA). When you visit, Vercel processes technically necessary access data (such as IP address, time, requested page and browser identifier) to deliver the site securely and reliably. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure operation). For transfers to the USA, Vercel relies on the EU-US Data Privacy Framework and/or EU Standard Contractual Clauses. Details: Vercel privacy notice.

Contact form

When you use our contact form, your details (name, email address, travel dates, number of guests and message) are forwarded to our inbox via the Web3Forms service so that we can answer your enquiry. This may involve processing outside the EU; Web3Forms stores submitted messages in line with its privacy policy. The legal basis is Art. 6(1)(b) GDPR (handling your enquiry). Details: Web3Forms privacy policy. You can also reach us directly by email, phone or WhatsApp at any time.

Fonts

All fonts are hosted locally on this website. No connection to Google Fonts or any other font provider is made when you visit.

Maps (click to load)

On the Location and Getting-here pages we offer an embedded Google Maps map (Google Ireland Ltd.). It does not load automatically: only when you click “Show map” is the map requested from Google and data (including your IP address) transmitted there. A “Get directions” link merely opens Google Maps in a new tab.

Booking

For bookings we use the embedded HostCollect widget on the booking page, which shows live availability and takes reservations; the data you enter there is processed to handle your booking.

Legal basis

We process your enquiry and booking data to initiate and perform the rental/accommodation contract (Art. 6(1)(b) GDPR) and, where applicable, to comply with legal obligations (Art. 6(1)(c) GDPR) and on the basis of our legitimate interest in answering your enquiry (Art. 6(1)(f) GDPR).

Retention period

We store your data only for as long as necessary for the purposes stated. Enquiries that do not lead to a booking are deleted promptly. Booking-related records are kept for the statutory tax and commercial retention periods and deleted thereafter.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object. To exercise these, contact us at any time at info@villa-hahn.com. You also have the right to lodge a complaint with a data protection supervisory authority (e.g. the State Commissioner for Data Protection in Rhineland-Palatinate, which is competent for us).