Legal information
Privacy notice
This notice explains which data are processed when you visit this website. The site uses no advertising or analytics cookies, creates no visitor profiles and embeds no tracking scripts from booking platforms.
1. Controller
The controller responsible for processing on this website is:
Not configured2. Hosting and technical delivery
The website is technically provided by IONOS SE.
Elgendorfer Strasse 57, 56410 Montabaur
Deutschland
The hosting provider processes connection data only as necessary to deliver, stabilise and secure the website. Any subprocessors or transfers depend on the hosting agreement in force.
Configured retention period for technical server logs: 7 days
3. Technical connection data
Loading a website technically transmits data such as the IP address, time, requested path, transferred data volume, referrer and browser identifier to the server. The application does not store these details in its analytics database. Temporary processing in server or security logs may be necessary for operation, troubleshooting and protection against misuse. The legal basis is Article 6(1)(f) GDPR; the legitimate interest is the secure and reliable operation of the website.
4. Aggregated, cookie-free audience measurement
The website counts selected interactions directly on its own server. Each accepted event is immediately added to a daily counter; no individual event log or visitor history is created.
The analytics database stores only
- calendar day
- predefined event type, such as page view or click
- predefined target, such as navigation, tour, gallery, FAQ or booking link
- page type and selected language
- aggregated count of matching events
The analytics database does not store
- IP address, user agent or referrer
- name, email address or other contact data
- session, user or device identifier
- exact timestamp of an individual click
- free-text input, fingerprints or cross-site data
Purpose
The aggregated figures show which sections and booking links are used. They help improve navigation, content, accessibility and technical stability.
Legal basis
Where technical connection data are briefly processed while transmitting an analytics request, this is based on Article 6(1)(f) GDPR. The legitimate interest is a data-minimising, first-party assessment and improvement of the website. The balance is limited by immediate aggregation, fixed event names, no identifiers, short data paths and an objection mechanism available at any time.
Retention
Aggregated daily counters are retained for no more than 400 days and then deleted automatically. The application keeps no raw events from which a visitor journey could be reconstructed.
DNT and Global Privacy Control
If your browser sends Do Not Track with the value 1 or an enabled Global Privacy Control signal, the analytics endpoint discards the event and stores no counter.
Object to analytics
You can additionally disable or re-enable anonymous audience measurement for this browser. The choice applies to every language version of this website.
Privacy-friendly statistics are enabled.
Disabling sets only the technically necessary HttpOnly cookie “vs_analytics=off”. It contains no ID, is restricted to this website, uses SameSite=Lax and expires after one year. Re-enabling deletes it.
5. Language selection
The selected language is part of the URL, for example /de or /it. No language cookie or local browser storage is used. Like any requested path, the language route may appear in technical server logs.
6. External map and booking platforms
Booking.com, Airbnb, Bed & Breakfast, Agoda and Google Maps are included only as external links. No connection to these providers is made when this website loads. Once you open a link, the provider processes data under its own responsibility and privacy notice.
External providers: Booking.com, Airbnb, Bed & Breakfast, Agoda and Google Maps.
Whether an external provider processes data outside the European Economic Area depends on its current infrastructure and privacy notice. This website sends no analytics or profile data to these providers before a click.
7. Your rights
Where personal data are processed, the GDPR gives you in particular the right to:
- access your processed data
- rectify inaccurate data
- request erasure or restriction of processing
- data portability where its requirements apply
- object to processing based on legitimate interests
The analytics data contain no identifier that could link individual daily counts to a person or allow selective deletion later. Future events are blocked through DNT, GPC or the opt-out function.
8. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The authority configured for the controller is:
CNPD - Comissao Nacional de Protecao de Dados
9. No profiling or automated decisions
There is no personal profiling, cross-site tracking or automated decision with legal or similarly significant effects.
10. Privacy contact
Please direct questions about data processing or exercising your rights to:
Not configured
Last reviewed: 2026-08-01