The statement covers the three actual data processing activities: booking processing via Booking.com, the legally required guest registration in Spain, and the server log files at STRATO. It takes into account that the data controllers are based in Germany and the rented property is located in Spain\u2014meaning two supervisory authorities have jurisdiction, and both are named.
\nPrivacy Policy
\n1. Data Controllers
\nThe data controllers within the meaning of Article 4(7) of the GDPR are:
\nStephan Wuensch and Katja Knabe
\nChristianspries 27
\n24159 Kiel
\nGermany
\nEmail: villa-panoramica-yaiza@gmx.de
\nPhone: +491711715500
\nFor inquiries regarding your data, you may contact either of the data controllers.<\/p>\n
2. What Data We Process and Why
\nThis website itself does not collect any personal data via forms. There is no contact form and no newsletter.
\na) Booking via Booking.com
\nWhen you book the villa, you enter your data on Booking.com. Booking.com is the independent data controller responsible for processing the booking. We receive from Booking.com the data necessary to facilitate your stay: name, address, email address, phone number, booking period, number of guests, and payment information. Legal basis: Art. 6(1)(b) GDPR (performance of the accommodation contract) and Art. 6(1)(c) GDPR (compliance with legal obligations). Information regarding processing by Booking.com can be found in their privacy policy.<\/p>\n
c) Server Log Files
\nWhen you visit this website, technical access data is stored in server log files:
\nIP address, date and time, page accessed, browser used, and operating system. This data is used to ensure the secure operation of the website and is deleted after 7 days.
\nLegal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation). The website runs on a server operated by STRATO AG, Berlin. STRATO processes this data on our behalf based on a data processing agreement pursuant to Article 28 of the GDPR.<\/p>\n
No further disclosure of this data takes place.<\/p>\n
d) Cookies and Embedded Content
\nThe website uses a cookie consent banner. Technically necessary cookies are set without consent (Art. 6(1)(f) GDPR). All other cookies\u2014analytics, marketing\u2014are set only after you have given your explicit consent. You can revoke your consent at any time via the cookie settings.The website embeds videos from YouTube and contains links to Facebook and Booking.com. When you click on this content, data is transmitted to the respective providers. We have no control over how these providers process the data.<\/p>\n
e) Google Search Console
\nWe use Google Search Console to improve the website\u2019s visibility. We do not analyse any personal data relating to individual website visitors.
\n3. Retention period
\nWe store booking and invoicing data for the duration of the statutory retention periods. In Germany, tax-related documents must be retained for six or ten years in accordance with Section 147 of the German Fiscal Code (AO). The notification to the Spanish guest register is made within the statutory deadline and is stored there in accordance with Spanish regulations.
\n4. Recipients of the data
\nWe only disclose your data to: Booking.com (for booking processing), the payment service provider, the Spanish authorities where required by law, the on-site support team in Yaiza where necessary for the organisation of your stay, and STRATO AG as the hosting provider.
\nData will only be transferred to third countries outside the EU\/EEA where this is necessary for the processing of your booking and the relevant safeguards under Article 46 of the GDPR are in place.
\n5. Your rights
\nYou have the right of access (Article 15 GDPR), rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR), data portability (Article 20 GDPR) and the right to object to processing (Article 21 GDPR). You may withdraw any consent you have given at any time with effect for the future.<\/p>\n
To do so, please contact villa-panoramic-yaiza@gmx.de. You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is:
\nIndependent State Centre for Data Protection Schleswig-Holstein (ULD), Holstenstra\u00dfe 98, 24103 Kiel, https:\/\/www.datenschutzzentrum.de
\nWhere the processing relates to the accommodation provider located in Spain, the Agencia Espa\u00f1ola de Protecci\u00f3n de Datos (AEPD), Madrid, is also responsible.
\n6. Date
\nThis privacy policy is dated 4 October 2026.<\/p>\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
The statement covers the three actual data processing activities: booking […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"footnotes":""},"class_list":["post-3246","page","type-page","status-publish","hentry"],"yoast_head":"\n