Legal
Privacy Policy
This website is purely informational: there are no user accounts, no login and no payment processing on these pages. Below we explain which data is processed when you visit, for what purpose and on what legal basis.
1. Data controller
Kaefer-Albrecht GbR
Grosostraße 24, 82166 Gräfelfing, Germany
Email: [email protected]
We are not legally required to appoint a data protection officer. For any data-protection matter, please contact us at the email address above.
2. Hosting and server log files
This website is hosted on Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. The pages are delivered through a global content delivery network (CDN), which means the content is served from a server close to you.
Each time a page is accessed, the server automatically processes the access data your browser transmits (server log files): IP address, date and time of access, the address requested (URL), volume of data transferred, browser type and version (user agent), operating system and, where applicable, the page previously visited. This processing is technically necessary in order to deliver the website, ensure its stable operation and defend against attacks. The legal basis is Art. 6(1)(f) GDPR (our legitimate interests in providing our website securely and efficiently). This data is not merged with other data sources and is not evaluated for advertising purposes.
A data processing agreement pursuant to Art. 28 GDPR is in place with Cloudflare. As the provider is based in the USA, processing may take place outside the EU/EEA. Cloudflare, Inc. is certified under the EU-US Data Privacy Framework; in addition, the European Commission's standard contractual clauses have been agreed. Further information can be found in the provider's privacy policy: cloudflare.com/privacypolicy.
3. SSL/TLS encryption
This website is transmitted exclusively in encrypted form (SSL/TLS — recognisable by “https://” and the padlock symbol in your browser). Data you send to us therefore cannot be read by third parties.
4. Cookies
This website sets no cookies — neither technically necessary ones nor analytics or marketing cookies. No other information is stored on or read from your device either (e.g. local storage). For that reason there is no cookie banner on this website, and no consent under section 25 TDDDG (the German implementation of the ePrivacy rules) is required. Likewise, no external map embeds are included (the area map is our own, cookie-free SVG graphic), no social media plugins and no advertising networks.
5. Reach measurement (Cloudflare Web Analytics)
To understand which content on our website is used, we employ Cloudflare Web Analytics, a service provided by Cloudflare, Inc. (address see section 2). The service is cookieless: no cookies are set and no information is stored on your device. According to the provider, no cross-site tracking and no “fingerprinting” take place; no personal user profiles are created.
Only aggregated metrics are evaluated, in particular the number of page views per page, the referring page (referrer), the approximate geographic origin (country), device type and browser, and loading times. This does not allow us to draw conclusions about individual persons. The legal basis is Art. 6(1)(f) GDPR (our legitimate interests in tailoring and improving our website). As no consent is required, section 25(1) TDDDG does not apply here. You may object to this processing at any time under Art. 21 GDPR.
6. Fonts
The fonts used on this website are served locally from our own server (self-hosting). No fonts are loaded from external providers; in particular, no fonts are embedded from Google Fonts and no data is transmitted to Google in this context. Your IP address is therefore not passed on to any third party when the fonts are loaded.
7. Enquiry and contact form
On the “Contact” page you can send us an enquiry using a form. The details you enter are processed: name, email address, optionally a telephone number, the house you are interested in, the travel dates (arrival and departure), the number of guests and your message. We use this data solely to answer your enquiry and to prepare a possible stay.
The legal basis is Art. 6(1)(b) GDPR where your enquiry is aimed at concluding a rental contract (pre-contractual measures), and otherwise Art. 6(1)(f) GDPR (our legitimate interests in responding to enquiries). Where you give your express consent via the confirmation checkbox in the form, Art. 6(1)(a) GDPR applies in addition; you may withdraw that consent at any time with effect for the future.
Transmission: The form data is transmitted via the service Web3Forms. The provider receives your details on our behalf and forwards them by email to [email protected]. For technical reasons, your IP address is processed in the course of this. The service acts for us as a processor pursuant to Art. 28 GDPR; where data is processed outside the EU/EEA, this takes place on the basis of the European Commission's standard contractual clauses.
Retention period: We store your enquiry for as long as it is needed to handle it, as a rule for no longer than six months after the last contact. If your enquiry leads to a booking, the contractual and statutory retention periods apply (in particular up to ten years under commercial and tax law).
Contact by email: If you write to us directly by email, we process your sender address and the content of your message for the same purposes and on the same legal bases; here too we delete the correspondence as soon as it is no longer needed and no retention obligations prevent deletion.
8. Booking via Smoobu and external links
For direct booking we link to the booking calendar of Smoobu (Smoobu GmbH, Berlin, Germany). The booking calendar is not embedded in our website: no Smoobu widget is loaded on our pages, and as long as you do not click the link, no data whatsoever is transmitted to Smoobu. Only when you actively click “Book” or “Check availability” does the Smoobu booking page open in a new browser tab at booking.smoobu.com.
From that point on, Smoobu's privacy policy applies. Smoobu then processes your IP address for technical reasons and, as part of a booking, the booking data you enter; the legal basis for handling the booking is Art. 6(1)(b) GDPR. Further information: smoobu.com/datenschutz.
The same applies to all other external links on this website — for example to the websites of local attractions, restaurants and tourism providers, and where applicable to booking portals such as Airbnb. These pages are only called up when you click; no data is transmitted to their operators beforehand. We have no influence over the data processing on the linked pages — only the respective provider's privacy policy applies there.
9. Your rights
Under the GDPR you have the right of access to the data we process about you (Art. 15), and the rights to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You may object under Art. 21 GDPR to processing that we base on legitimate interests. You may withdraw any consent given at any time with effect for the future.
An informal message to [email protected] is sufficient to exercise these rights. Irrespective of this, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State where you reside. The authority responsible for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Ansbach, Germany.
10. Changes to this privacy policy
We update this privacy policy whenever the services used on this website or the legal requirements change. The version published here is the one that applies.
Last updated: July 2026