1. Data Controller
The controller responsible for data processing on this website is:
Stefan Kayser
Brandshofer Deich 33
20539 Hamburg
Germany
Email: stefan.kayser@firstlocation.de
2. SSL or TLS Encryption
For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
3. Data Collection on Our Website (Hosting)
When using the website for information purposes only, we only collect data that your browser transmits to our server (so-called "server log files"). This includes, but is not limited to, IP address, date and time of the request, time zone difference, content of the request, access status/HTTP status code, and the amount of data transferred. The legal basis is Art. 6(1)(f) GDPR based on our legitimate interest in the stability and security of the website.
4. Lodgify Booking System
We have integrated functions of the booking service "Lodgify" (Smarter DM SL, Calle de Enric Granados 6, 08007 Barcelona, Spain) into our website. When you make a reservation, the data you enter (name, email, address, payment data) is processed on Lodgify's servers. The processing is based on Art. 6(1)(b) GDPR (contract performance). We have concluded a Data Processing Agreement (DPA) with Lodgify to guarantee the protection of your data according to EU standards.
5. Cookies and Consent Management
We use our own consent manager to manage user preferences. Information about your selected settings is stored in your local storage (LocalStorage). Analysis and marketing cookies (e.g., Google Analytics) are only activated after your explicit consent (opt-in). The legal basis for essential functions is Art. 6(1)(f) GDPR, and for all other services, Art. 6(1)(a) GDPR.
6. Google Maps & Google Analytics
With your consent, we use services of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).
Google Analytics: We use the IP anonymization function. Your IP address will be truncated within the EU before being transmitted to the US.
Google Maps: Your IP address is transmitted to Google to display our locations.
A data transfer to the US cannot be ruled out. This is based on the EU-U.S. Data Privacy Framework.
7. Contact Inquiries & Data Deletion
The data you send via the contact form or email will be stored for the purpose of processing your request. We will delete this data after 14 days at the latest, provided the inquiry has been conclusively processed and no statutory retention obligations (e.g., tax regulations for completed bookings) prevent deletion.
8. AI-Assisted Communication
To optimize our texts and provide automated translations, we use AI interfaces (e.g., OpenAI or DeepL via API). Texts are technically processed in this context. We ensure that, wherever possible, text blocks submitted for translation or correction contain no personal data. The legal basis is our legitimate interest in efficient and accurate communication (Art. 6(1)(f) GDPR).
9. External Review Platforms (Airbnb)
To verify our service quality, we link to the external platform "Airbnb" (Airbnb Ireland UC, 8 Hanover Quay, Dublin 2, Ireland) on our profiles. If you click on these links, you will be redirected to the Airbnb website. There is no automatic transmission of your data when simply loading our site. Only by clicking the link is a connection established to Airbnb's servers. During this process, technical data (such as your IP address and information about the browser you are using) is transmitted to Airbnb. The processing of this data is subject to Airbnb's privacy policy. The linking serves our legitimate interest (Art. 6 (1) lit. f GDPR) in providing potential guests with a transparent decision-making aid through external reviews.
10. Your Rights (Data Subject Rights)
You have the right to information (Art. 15), rectification (Art. 16), erasure (Art. 17), and restriction of processing regarding your personal data. If data processing is based on consent, you can revoke this at any time with future effect. You also have the right to lodge a complaint with the competent data protection supervisory authority.