DATA PROTECTION
Mandatory information according to the EU GDPR
I. Name and Address of the Controller
The controller within the meaning of the General Data Protection Regulation and other data protection provisions is:
living TIMELESS
Owner: Melanie Vetter
Dr. Bruno-Türkheimer-Str. 23
D-79215 Elzach
Phone: +49 156 79573886
Email: info@living-timeless.de
II. Data Protection Officer
We are not required to appoint a data protection officer.
III. General Information on Data Processing
1. Scope of processing of personal data
As a matter of principle, we process our users’ personal data only to the extent necessary to provide a functional website and our content and services.
Processing takes place either on the basis of a legal permission or with the consent of the data subject.
2. Legal Basis for Processing Personal Data
Personal data is processed on the basis of the following legal grounds:
Art. 6(1)(a) GDPR – Consent
Art. 6(1)(b) GDPR – Contract / pre-contractual measures
Art. 6(1)(c) GDPR – Legal obligation
Art. 6(1)(f) GDPR – Legitimate interest
3. Data deletion and storage period
Personal data will be deleted as soon as the purpose of storage no longer applies or statutory retention periods have expired.
IV. Provision of the Website and Log Files
1. Description and scope of data processing
Each time our website is accessed, the following data is collected automatically:
Browser type and version
Operating system
Internet service provider
IP address
Date and time of access
Referrer URL
Pages accessed
This data is stored in log files and is not merged with other personal data.
2. Legal basis
Art. 6(1)(f) GDPR (legitimate interest)
3. Purpose of data processing
Ensuring the functionality of the website
System security
Technical optimization
4. Storage period
Log files are deleted or anonymized no later than seven days.
V. Contact via Email
1. Description
If you contact us by email, the personal data transmitted will be processed exclusively for the purpose of handling your request.
2. Legal basis
Art. 6(1)(f) GDPR
In the case of contract initiation additionally Art. 6(1)(b) GDPR
3. Storage period
The data will be deleted as soon as the inquiry has been fully processed.
VI. Cookies and Technically Necessary Services
Our website uses exclusively technically necessary cookies that are required for the operation and display of the website.
These cookies serve in particular the secure provision of the website and its technical functionality.
The legal basis is Art. 6(1)(f) GDPR.
A separate cookie opt-in is not required for this purpose.
VII. External Booking and Platform Services
For processing bookings and inquiries, we link to external platforms, in particular:
Airbnb
Booking.com
By clicking these links, you leave our website.
The respective provider is solely responsible for the processing of personal data on the relevant platforms. Their privacy policies apply.
VIII. Website Hosting
Our website is operated by an external hosting service provider.
In doing so, personal data (e.g., IP addresses, log files) is processed insofar as this is necessary for providing and securing the website.
The legal basis is Art. 6(1)(f) GDPR.
IX. Rights of the Data Subject
You have the right to:
Access pursuant to Art. 15 GDPR
Rectification pursuant to Art. 16 GDPR
Erasure pursuant to Art. 17 GDPR
Restriction of processing pursuant to Art. 18 GDPR
Data portability pursuant to Art. 20 GDPR
Objection pursuant to Art. 21 GDPR
Withdrawal of consents pursuant to Art. 7(3) GDPR
X. Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement.

