Privacy Policy

Status: 23 September 2025

1. Data Protection at a Glance

General Information

The following information provides an overview of what happens to your personal data when you visit our website.
Personal data is any information that can be used to personally identify you.
Detailed information can be found in this Privacy Policy.

2. Controller

The controller responsible for data processing on this website is:

Vibehome GmbH
Marienstraße 16
40212 Düsseldorf
Germany

Phone: +49 (0) 211 93593433
Email: [email protected]

A Data Protection Officer has not been appointed, as the legal requirements for doing so are currently not met.

3. Hosting

Our website is hosted by:

IONOS SE
Elgendorfer Str. 57
56410 Montabaur
Germany

IONOS processes personal data (e.g., IP addresses stored in server log files) on our behalf.
We have concluded a Data Processing Agreement in accordance with Art. 28 GDPR with IONOS.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure, stable, and efficient provision of our online services).

4. Data Collection on Our Website

Server Log Files

When you visit our website, the following data is automatically collected:

IP address
Browser type and version
Operating system
Referrer URL
Time of the server request

This data is not merged with other data sources.
Legal basis: Art. 6(1)(f) GDPR.

5. Cookies & Consent Management

Our website uses cookies.

Cookies are small text files stored on your device and do not cause any harm.

We distinguish between:

Technically Necessary Cookies

These are required to ensure proper functioning of the website.
Legal basis: Art. 6(1)(f) GDPR in conjunction with § 25(2) TTDSG.

Analytics and Marketing Cookies

These are only set with your consent.
Legal basis: Art. 6(1)(a) GDPR in conjunction with § 25(1) TTDSG.

You may withdraw or modify your consent at any time via our cookie consent tool.

6. Contact

If you contact us via contact form, email, or telephone, your information will be processed to handle your inquiry.

Legal basis:

Art. 6(1)(b) GDPR (contract / pre-contractual measures)
Art. 6(1)(f) GDPR (legitimate interest in efficient communication)

Your data will be deleted once the purpose no longer applies and no statutory retention obligations exist.

7. Booking System / Channel Manager (Lodgify)

For processing direct bookings, we use the channel manager:

Lodgify S.L.
Carrer de Pallars 194
08005 Barcelona
Spain

When booking via our website, personal data (e.g., name, contact details, booking details, payment information) is transmitted to Lodgify and processed on our behalf.

We have concluded a Data Processing Agreement pursuant to Art. 28 GDPR with Lodgify.

Legal basis:
Art. 6(1)(b) GDPR (performance of a contract)

Data transfers to third countries only take place in compliance with appropriate safeguards (e.g., EU Standard Contractual Clauses).

8. Analytics Tools

Google Analytics 4

We use Google Analytics 4 only with your consent.

Provider:
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4, Ireland

IP anonymization is activated
Data may be transferred to the United States (EU-US Data Privacy Framework)
Opt-out is possible via cookie settings or browser add-on

Legal basis: Art. 6(1)(a) GDPR in conjunction with § 25 TTDSG.

9. Embedded Content & Tools

YouTube (enhanced privacy mode, only with consent)
Google Maps (only with consent)
Google reCAPTCHA (only with consent)
Web Fonts (preferably hosted locally; external fonts only with consent)

10. Disclosure of Data / Third Country Transfers

Personal data will only be disclosed if:

it is necessary for contract performance
there is a legal obligation
you have given consent

Transfers to third countries only take place where appropriate safeguards are in place (e.g., EU Standard Contractual Clauses or EU-US Data Privacy Framework).

11. Storage Duration

Personal data will only be stored for as long as necessary for the respective purpose or as required by statutory retention obligations.

12. Your Rights

You have the following rights under the GDPR:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to withdraw consent (Art. 7(3) GDPR)

You also have the right to lodge a complaint with a supervisory authority.
For North Rhine-Westphalia (NRW), the competent authority is the State Commissioner for Data Protection and Freedom of Information NRW (LDI NRW).

13. Automated Decision-Making

Automated decision-making, including profiling, does not take place.

14. Amendments to this Privacy Policy

We reserve the right to amend this Privacy Policy when necessary.
The current version published on our website shall apply.

If you would like, I can now:

Polish this into a more international hospitality-style privacy notice, or
Create a German–English dual-language version formatted for your website, which is often beneficial for international guests.